Edit tour

Windows Analysis Report
https://hs-login.online/pages

Overview

General Information

Sample URL:	https://hs-login.online/pages
Analysis ID:	882385
Infos:

Detection

HTMLPhisher

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Yara detected HtmlPhish10

Multi AV Scanner detection for submitted file

Antivirus detection for URL or domain

HTML body contains low number of good links

Invalid T&C link found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3208 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: 0FEC2748F363150DC54C1CAFFB1A9408)

chrome.exe (PID: 5232 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=1612 --field-trial-handle=1808,i,18247198348551292155,10654389683627602374,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8 MD5: 0FEC2748F363150DC54C1CAFFB1A9408)

chrome.exe (PID: 6172 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" "https://hs-login.online/pages MD5: 0FEC2748F363150DC54C1CAFFB1A9408)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
0.0.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8

Source: classification engine

Classification label: mal72.phis.win@38/299@60/38

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=1612 --field-trial-handle=1808,i,18247198348551292155,10654389683627602374,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "https://hs-login.online/pages
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=1612 --field-trial-handle=1808,i,18247198348551292155,10654389683627602374,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\GoogleUpdater

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\GoogleUpdater

Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	2 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	4 Non-Application Layer Protocol	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	5 Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	3 Ingress Tool Transfer	SIM Card Swap		Carrier Billing Fraud

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://hs-login.online/pages	21%	Virustotal		Browse
https://hs-login.online/pages	100%	Avira URL Cloud	phishing
https://hs-login.online/pages	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Label
https://www.business.hsbc.co.uk/	0%	Avira URL Cloud	safe
https://www.hsbc.co.uk/content/dam/hsbc/gb/images/cma/feb-2023/desktop/overall-service-quality-ni.jpg/jcr:content/renditions/cq5dam.web.590.1000.jpeg	0%	Avira URL Cloud	safe
https://hs-login.online/front_end/front_end_files/newValidations.css	100%	Avira URL Cloud	phishing
https://hs-login.online/front_end/front_end_files/ursula.css	100%	Avira URL Cloud	phishing
https://www.hsbc.co.uk/etc.clientlibs/hsbc/global/clientlibs/appd.min.28729b81913621076cb1004898cb22c7.js	0%	Avira URL Cloud	safe
https://www.askus.hsbc.co.uk/counter-service/embedp2new/init.min.js?v=20220503	0%	Avira URL Cloud	safe
https://www.hsbc.co.uk/credit-cards/premier-credit-cards/	0%	Avira URL Cloud	safe
https://www.hsbc.co.uk/international/using-your-card-abroad/	0%	Avira URL Cloud	safe
https://www.hsbc.co.uk/online/dashboard/	0%	Avira URL Cloud	safe
https://benefitshelp.entitledto.co.uk/home/start	0%	Avira URL Cloud	safe
https://www.hsbc.co.uk/investments/products/	0%	Avira URL Cloud	safe
https://www.hsbc.co.uk/insurance/products/select-and-cover/claims/	0%	Avira URL Cloud	safe
https://www.hsbc.co.uk/loans/products/premier/	0%	Avira URL Cloud	safe
https://www.hsbc.co.uk/etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/social/youtube.svg	0%	Avira URL Cloud	safe
https://www.hsbc.co.uk/loans/	0%	Avira URL Cloud	safe
https://www.hsbc.co.uk/ways-to-bank/online-banking/	0%	Avira URL Cloud	safe
https://hsbcglobalcmb.sc.omtrdc.net/b/ss/hsbc-cmb-uk,hsbc-cmb-rollup/1/JS-2.22.3/s41061724382589?AQB=1&ndh=1&pf=1&t=6%2F5%2F2023%2010%3A40%3A48%202%20-120&sdid=0067F0708B951120-2759B85EE3002AB0&mid=32901345357897319322582280331317906370&aamlh=6&ce=UTF-8&ns=hsbcbankglobal&cdp=2&cl=64454400&pageName=pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage&g=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&cc=USD&ch=pws%20home&server=www.business.hsbc.uk&events=event5&aamb=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&v1=pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage&c2=pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage&v2=pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage&c3=pws%20home&v3=www.business.hsbc.uk%2Fen-gb&v4=pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage&c5=pws%20home&v5=CMB&c6=hsbc-cmb-uk%2Chsbc-cmb-rollup&v6=Business&c7=10%3A40%20AM%7CTuesday&v7=pws%20home&v8=pws%20home&v9=na%20%3A%20unsegmented%20%3A%20no%20segment%20%3A%20na&v10=HSBC&v11=Europe&v12=en-GB&c13=Accept%20All&v13=United%20Kingdom&v14=Web&v15=10%3A40%20AM%7CTuesday&v16=hsbc-cmb-uk%2Chsbc-cmb-rollup&c17=uk-cmb&v17=uk-cmb&v98=Full%20Consent&v99=Accept%20All&v100=430785c2-f631-4694-8789-21d518ee92f7&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=913&mcorgid=8BB4398F57FF7F980A495E57%40AdobeOrg&AQE=1	0%	Avira URL Cloud	safe
https://www.hsbc.co.uk/current-accounts/products/	0%	Avira URL Cloud	safe
https://www.hsbc.co.uk/insurance/travel/claims/	0%	Avira URL Cloud	safe
https://hs-login.online/front_end/front_end_files/D650-login-seckey-300x255.jpg	100%	Avira URL Cloud	phishing
https://www.hsbc.co.uk/etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/favicons/favicon.ico	0%	Avira URL Cloud	safe
https://www.hsbc.co.uk/current-accounts/products/international-student/	0%	Avira URL Cloud	safe
https://www.hsbc.co.uk/mortgages/move-your-mortgage/	0%	Avira URL Cloud	safe
https://hsbcglobalcmb.sc.omtrdc.net/id?d_visid_ver=5.2.0&d_fieldgroup=A&mcorgid=8BB4398F57FF7F980A495E57%40AdobeOrg&mid=32901345357897319322582280331317906370&ts=1686040848577	0%	Avira URL Cloud	safe
https://www.hsbc.co.uk/insurance/products/income-protection/	0%	Avira URL Cloud	safe
https://www.hsbc.co.uk/mortgages/calculators/	0%	Avira URL Cloud	safe
https://hs-login.online/js/shared/loading.js	100%	Avira URL Cloud	phishing
https://www.hsbc.co.uk/etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/manifest.json	0%	Avira URL Cloud	safe
https://hs-login.online/front_end/front_end_files/terms.css	100%	Avira URL Cloud	phishing
https://www.hsbc.co.uk/etc.clientlibs/dpws/clientlibs-public/clientlib-default.min.7675554f68ae226cdde18af7ac43f392.css	0%	Avira URL Cloud	safe
https://www.hsbc.co.uk/etc.clientlibs/dpws/clientlibs-public/clientlib-all.min.62aeb07d53816af841a6e6653da5c9da.js	0%	Avira URL Cloud	safe
https://www.hsbc.co.uk/current-accounts/products/overdrafts/	0%	Avira URL Cloud	safe
https://hs-login.online/js/cntdjs/jquery.mask.js	100%	Avira URL Cloud	phishing
https://www.hsbc.co.uk/retirement/	0%	Avira URL Cloud	safe
https://www.hsbc.co.uk/insurance/products/aspects/claims/	0%	Avira URL Cloud	safe
https://www.hsbc.co.uk/savings/products/	0%	Avira URL Cloud	safe
https://www.hsbc.co.uk/content/dam/hsbc/ciiom/images/bank-accounts/16-9/1568-holding-child-smiling-together-800x450.jpg/jcr:content/renditions/cq5dam.web.590.1000.jpeg	0%	Avira URL Cloud	safe
https://www.hsbc.co.uk/loans/products/home-improvements/	0%	Avira URL Cloud	safe
https://hs-login.online/front_end/front_end_files/side-box.css	100%	Avira URL Cloud	phishing
https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/t	0%	Avira URL Cloud	safe
https://hs-login.online/js/cntdjs/cntd.js	100%	Avira URL Cloud	phishing
https://www.hsbc.co.uk/content/dam/hsbc/gb/images/16-9/learning-to-ride-1.jpg/jcr:content/renditions/cq5dam.web.590.1000.jpeg	0%	Avira URL Cloud	safe
https://www.hsbc.co.uk/international/travel-money/	0%	Avira URL Cloud	safe
https://hsbccovid.consents.online	0%	Avira URL Cloud	safe
https://www.hsbc.co.uk/savings/products/fixed-rate/	0%	Avira URL Cloud	safe
https://www.homeandawayrewards.com/wagamama	0%	Avira URL Cloud	safe
https://www.hsbc.co.uk/loans/products/car-loan/	0%	Avira URL Cloud	safe
https://www.eu430.p2g.netd2.hsbc.com.hk	0%	Avira URL Cloud	safe
https://hs-login.online/front_end/front_end_files/protecting-your-money.jpg	100%	Avira URL Cloud	phishing
https://www.hsbc.co.uk/savings/isas/	0%	Avira URL Cloud	safe
https://www.hsbc.co.uk/wealth/insights/	0%	Avira URL Cloud	safe
https://hs-login.online/front_end/front_end_files/security-details.css	100%	Avira URL Cloud	phishing

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
dart.l.doubleclick.net	172.217.168.38	true	false	high
visitor-service-eu-west-1.tealiumiq.com	54.74.97.132	true	false	high
p06k.t.eloqua.com	192.29.203.179	true	false	high
hsbcglobalcmb.sc.omtrdc.net	63.140.62.160	true	false	unknown
col.eum-appdynamics.com	35.81.20.183	true	false	unknown
dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com	52.49.176.241	true	false	high
adservice.google.com	142.250.203.98	true	false	high
collect-eu-west-1.tealiumiq.com	34.251.146.217	true	false	high
platform.twitter.map.fastly.net	151.101.240.157	true	false	unknown
adobetarget.data.adobedc.net	66.235.152.152	true	false	unknown
hsbc.creativevirtual.biz	62.138.155.102	true	false	unknown
scontent.xx.fbcdn.net	157.240.17.15	true	false	high
t.co	104.244.42.133	true	false	high
collect.tealiumiq.com	18.197.3.151	true	false	high
lo0.v.liveperson.net	178.249.96.141	true	false	high
cm.g.doubleclick.net	142.250.203.98	true	false	high
vici-asg-elb-1598172991.us-east-1.elb.amazonaws.com	54.81.54.200	true	false	high
www.google.com	142.250.203.100	true	false	high
www.business.hsbc.co.uk.gslb-uk1.hsbc.com	91.214.6.108	true	false	high
star-mini.c10r.facebook.com	157.240.9.35	true	false	high
www.mcmprod.hsbc.co.uk.gslb-uk1.hsbc.com	91.214.5.154	true	false	high
accounts.google.com	142.250.203.109	true	false	high
s.twitter.com	104.244.42.195	true	false	high
aax-eu.amazon-adsystem.com	52.95.122.74	true	false	high
datacloud.tealiumiq.com	18.159.165.110	true	false	high
hs-login.online	5.42.199.96	true	false	unknown
hsbc.co.uk.prod.eu.dynp.cloud1.vv1865.com	99.84.88.12	true	false	unknown
lo.v.liveperson.net	178.249.97.70	true	false	high
d1ykf07e75w7ss.cloudfront.net	108.138.37.209	true	false	high
cdn.appdynamics.com	108.138.36.11	true	false	high
googleads.g.doubleclick.net	142.250.203.98	true	false	high
d1ni990a184w7d.cloudfront.net	108.138.36.108	true	false	high
cdn-0.d41.co	108.138.36.18	true	false	unknown
clients.l.google.com	142.250.203.110	true	false	high
www.google.ch	172.217.168.67	true	false	high
dzfq4ouujrxm8.cloudfront.net	18.66.192.16	true	false	high
lpcdn.lpsnmedia.net	unknown	unknown	false	high
static.ads-twitter.com	unknown	unknown	false	unknown
akamai.tiqcdn.com	unknown	unknown	false	high
hsbcglobalcmb.tt.omtrdc.net	unknown	unknown	false	unknown
askus.business.hsbc.uk	unknown	unknown	false	high
www.hsbc.co.uk	unknown	unknown	false	unknown
cm.everesttech.net	unknown	unknown	false	high
clients2.google.com	unknown	unknown	false	high
hsbcbankcmb.demdex.net	unknown	unknown	false	high
www.business.hsbc.uk	unknown	unknown	false	high
cdn.linkedin.oribi.io	unknown	unknown	false	high
dpm.demdex.net	unknown	unknown	false	high
www.business.hsbc.co.uk	unknown	unknown	false	unknown
hw0ebfaguc.d41.co	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	high
www.mcmprod.hsbc.co.uk	unknown	unknown	false	unknown
accdn.lpsnmedia.net	unknown	unknown	false	high
c.amazon-adsystem.com	unknown	unknown	false	high
www.security.hsbc.co.uk	unknown	unknown	false	unknown
img.en25.com	unknown	unknown	false	high
connect.facebook.net	unknown	unknown	false	high
px.ads.linkedin.com	unknown	unknown	false	high
www.askus.hsbc.co.uk	unknown	unknown	false	unknown
8071582.fls.doubleclick.net	unknown	unknown	false	high
analytics.twitter.com	unknown	unknown	false	high
snap.licdn.com	unknown	unknown	false	high
tags.tiqcdn.com	unknown	unknown	false	high
lptag.liveperson.net	unknown	unknown	false	high
s1706134858.t.eloqua.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.hsbc.co.uk/content/dam/hsbc/gb/images/cma/feb-2023/desktop/overall-service-quality-ni.jpg/jcr:content/renditions/cq5dam.web.590.1000.jpeg	false	Avira URL Cloud: safe	unknown
https://www.hsbc.co.uk/	false		unknown
https://tags.tiqcdn.com/utag/hsbc/uk-cmb/prod/utag.1118.js?utv=ut4.42.202306021444	false		high
https://askus.business.hsbc.uk/commercial-banking/build/images/sprite.png	false		high
https://hs-login.online/front_end/front_end_files/ursula.css	false	Avira URL Cloud: phishing	unknown
https://tags.tiqcdn.com/utag/hsbc/uk-rbwm/prod/utag.3605.js?utv=ut4.47.202206091620	false		high
https://www.business.hsbc.co.uk/	false	Avira URL Cloud: safe	unknown
https://aax-eu.amazon-adsystem.com/s/iu3?pid=bdcdb716-c805-45ff-a670-17eb30f8fca9&event=Pageview&ts=1686040848401&dcc=t	false		high
https://hs-login.online/front_end/front_end_files/newValidations.css	false	Avira URL Cloud: phishing	unknown
https://www.hsbc.co.uk/etc.clientlibs/hsbc/global/clientlibs/appd.min.28729b81913621076cb1004898cb22c7.js	false	Avira URL Cloud: safe	unknown
https://tags.tiqcdn.com/utag/hsbc/uk-rbwm/prod/utag.js	false		high
https://www.askus.hsbc.co.uk/counter-service/embedp2new/init.min.js?v=20220503	false	Avira URL Cloud: safe	unknown
https://tags.tiqcdn.com/utag/tiqapp/utag.v.js?a=hsbc/uk-rbwm/202305311808&cb=1686040769808	false		high
https://tags.tiqcdn.com/utag/hsbc/uk-cmb/prod/utag.1232.js?utv=ut4.42.202306021444	false		high
https://tags.tiqcdn.com/utag/hsbc/uk-cmb/prod/utag.sync.js	false		high
https://www.hsbc.co.uk/etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/social/youtube.svg	false	Avira URL Cloud: safe	unknown
https://hsbcglobalcmb.sc.omtrdc.net/b/ss/hsbc-cmb-uk,hsbc-cmb-rollup/1/JS-2.22.3/s41061724382589?AQB=1&ndh=1&pf=1&t=6%2F5%2F2023%2010%3A40%3A48%202%20-120&sdid=0067F0708B951120-2759B85EE3002AB0&mid=32901345357897319322582280331317906370&aamlh=6&ce=UTF-8&ns=hsbcbankglobal&cdp=2&cl=64454400&pageName=pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage&g=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&cc=USD&ch=pws%20home&server=www.business.hsbc.uk&events=event5&aamb=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&v1=pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage&c2=pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage&v2=pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage&c3=pws%20home&v3=www.business.hsbc.uk%2Fen-gb&v4=pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage&c5=pws%20home&v5=CMB&c6=hsbc-cmb-uk%2Chsbc-cmb-rollup&v6=Business&c7=10%3A40%20AM%7CTuesday&v7=pws%20home&v8=pws%20home&v9=na%20%3A%20unsegmented%20%3A%20no%20segment%20%3A%20na&v10=HSBC&v11=Europe&v12=en-GB&c13=Accept%20All&v13=United%20Kingdom&v14=Web&v15=10%3A40%20AM%7CTuesday&v16=hsbc-cmb-uk%2Chsbc-cmb-rollup&c17=uk-cmb&v17=uk-cmb&v98=Full%20Consent&v99=Accept%20All&v100=430785c2-f631-4694-8789-21d518ee92f7&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=913&mcorgid=8BB4398F57FF7F980A495E57%40AdobeOrg&AQE=1	false	Avira URL Cloud: safe	unknown
https://www.google.com/pagead/1p-user-list/951694704/?random=1686040849230&cv=9&fst=1686038400000&num=1&guid=ON&eid=466465926%2C512247839&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=120&u_java=false&u_nplug=0&u_nmime=0&sendb=1&frm=0&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&async=1&fmt=3&is_vtc=1&random=208862709&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y	false		high
https://hs-login.online/front_end/front_end_files/D650-login-seckey-300x255.jpg	false	Avira URL Cloud: phishing	unknown
https://www.hsbc.co.uk/etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/favicons/favicon.ico	false	Avira URL Cloud: safe	unknown
https://8071582.fls.doubleclick.net/activityi;src=8071582;type=hsbc_000;cat=hsbc_000;ord=807883971953;gtm=45fe35v0;auiddc=583344058.1686040849;u2=%2Fen-gb;u15=pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage;u16=pws%20home;u20=en-GB;u21=hsbc_000%7Chsbc_000%7Cstandard;uaa=x86;uab=64;uafvl=Chromium%3B104.0.5112.81%7C%2520Not%2520A%253BBrand%3B99.0.0.0%7CGoogle%2520Chrome%3B104.0.5112.81;uam=;uamb=0;uap=Windows;uapv=6.0.0;uaw=0;~oref=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb?	false		high
https://lo0.v.liveperson.net/api/js/8181236?&cb=lpCb67426x29262&t=sp&ts=1686040771115&pid=114028263&tid=4972823587&pt=HSBC%20UK%20-%20Personal%20%26%20Online%20Banking&u=https%3A%2F%2Fwww.hsbc.co.uk%2F&sec=%5B%22%22%5D&df=0&os=0&sdes=%5B%7B%22type%22%3A%22ctmrinfo%22%2C%22info%22%3A%7B%22ctype%22%3A%22en_gb%22%7D%7D%2C%7B%22type%22%3A%22cart%22%2C%22numItems%22%3A0%2C%22products%22%3A%5B%7B%22product%22%3A%7B%22name%22%3A%22page_security_level-0%22%2C%22price%22%3Anull%7D%2C%22quantity%22%3Anull%7D%2C%7B%22product%22%3A%7B%22name%22%3A%22site_region-Europe_UK_United_Kingdom_HSBC_Bank_Plc_HSBC%22%2C%22price%22%3Anull%7D%2C%22quantity%22%3Anull%7D%5D%7D%5D&identities=%5B%7B%22iss%22%3A%22LivePerson%22%2C%22acr%22%3A%220%22%7D%5D	false		high
https://hsbcglobalcmb.sc.omtrdc.net/id?d_visid_ver=5.2.0&d_fieldgroup=A&mcorgid=8BB4398F57FF7F980A495E57%40AdobeOrg&mid=32901345357897319322582280331317906370&ts=1686040848577	false	Avira URL Cloud: safe	unknown
https://lo.v.liveperson.net/api/js/50632853?sid=N3roqYv8SBKOLDBc3Ezwkg&cb=lpCb63675x48113&t=pl&ts=1686040813213&pid=4544126178&tid=4578057391&vid=hjNzhmNDMzZWM2NWVjZGNh	false		high
https://hs-login.online/js/shared/loading.js	false	Avira URL Cloud: phishing	unknown
https://lo.v.liveperson.net/api/js/50632853?sid=N3roqYv8SBKOLDBc3Ezwkg&cb=lpCb61448x70509&t=uc&ts=1686040831944&pid=2265170856&tid=4578057391&vid=hjNzhmNDMzZWM2NWVjZGNh&sdes=%5B%7B%22type%22%3A%22ctmrinfo%22%2C%22info%22%3A%7B%22cstatus%22%3A%22United%20Kingdom%22%7D%7D%2C%7B%22type%22%3A%22cart%22%2C%22numItems%22%3A0%2C%22products%22%3A%5B%7B%22product%22%3A%7B%22name%22%3A%22site_region-Europe_UK_United_Kingdom_HSBC_Bank_Plc_HSBC%22%2C%22price%22%3Anull%7D%2C%22quantity%22%3Anull%7D%2C%7B%22product%22%3A%7B%22name%22%3A%22en-GB%22%2C%22price%22%3Anull%7D%2C%22quantity%22%3Anull%7D%5D%7D%2C%7B%22type%22%3A%22impDisplay%22%2C%22campaign%22%3A2902060350%2C%22engId%22%3A2902529850%2C%22revision%22%3A1740%2C%22eContext%22%3A%5B%7B%22type%22%3A%22engagementContext%22%2C%22id%22%3A%224%22%7D%5D%7D%5D	false		high
https://www.hsbc.co.uk/etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/manifest.json	false	Avira URL Cloud: safe	unknown
https://hs-login.online/front_end/front_end_files/terms.css	false	Avira URL Cloud: phishing	unknown
https://www.google.ch/pagead/1p-user-list/951694704/?random=1686040849683&cv=11&fst=1686038400000&bg=ffffff&guid=ON&async=1&gtm=45be35v0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&frm=0&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=1061625469&rmt_tld=1&ipr=y	false		high
https://8071582.fls.doubleclick.net/activityi;dc_pre=CP7Vy8Gfrv8CFZlEHgIdpSYJ-A;src=8071582;type=hsbc_000;cat=hsbc_000;ord=7367362538109;gtm=45fe35v0;auiddc=583344058.1686040849;u2=%2Fen-gb;u15=pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage;u16=pws%20home;u20=en-GB;u21=hsbc_000%7Chsbc_000%7Cstandard;uaa=x86;uab=64;uafvl=Chromium%3B104.0.5112.81%7C%2520Not%2520A%253BBrand%3B99.0.0.0%7CGoogle%2520Chrome%3B104.0.5112.81;uam=;uamb=0;uap=Windows;uapv=6.0.0;uaw=0;~oref=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb?	false		high
https://t.co/i/adsct?bci=3&eci=2&event_id=e9bd595a-cf13-441f-89c2-2f047b729db9&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=1ee52750-caa9-462d-b6ec-587d004e8ac1&tw_document_href=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=ny1a1&type=javascript&version=2.3.29	false		high
https://www.hsbc.co.uk/etc.clientlibs/dpws/clientlibs-public/clientlib-default.min.7675554f68ae226cdde18af7ac43f392.css	false	Avira URL Cloud: safe	unknown
https://www.hsbc.co.uk/etc.clientlibs/dpws/clientlibs-public/clientlib-all.min.62aeb07d53816af841a6e6653da5c9da.js	false	Avira URL Cloud: safe	unknown
https://hs-login.online/js/cntdjs/jquery.mask.js	false	Avira URL Cloud: phishing	unknown
https://tags.tiqcdn.com/utag/hsbc/uk-cmb/prod/utag.571.js?utv=ut4.42.202306021444	false		high
https://lo0.v.liveperson.net/api/js/8181236?sid=Y0UXDFinQhG9AMSBGzKPtQ&cb=lpCb98528x28802&t=ip&ts=1686040813175&pid=114028263&tid=4972823587&vid=JkZDY4ZThjNmZkYmZiMTUx	false		high
https://hs-login.online/pages	true		unknown
https://lpcdn.lpsnmedia.net/le_secure_storage/3.20.0.0-release_5080/storage.secure.min.html?loc=https%3A%2F%2Fwww.business.hsbc.uk&site=50632853&env=prod&isCrossDomain=true&accdn=accdn.lpsnmedia.net	false		high
https://tags.tiqcdn.com/utag/hsbc/uk-cmb/prod/utag.724.js?utv=ut4.42.202306021444	false		high
https://hsbcbankcmb.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fwww.business.hsbc.uk	false		high
https://lo.v.liveperson.net/api/js/50632853?sid=N3roqYv8SBKOLDBc3Ezwkg&cb=lpCb8171x84640&t=uc&ts=1686040812937&pid=4544126178&tid=4578057391&vid=hjNzhmNDMzZWM2NWVjZGNh&sdes=%5B%7B%22type%22%3A%22pagediv%22%2C%22divId%22%3A%22lpButtonDiv-need-help-panel%22%7D%5D	false		high
https://aax-eu.amazon-adsystem.com/s/iu3?pid=bdcdb716-c805-45ff-a670-17eb30f8fca9&event=Pageview&ts=1686040848401	false		high
https://www.hsbc.co.uk/content/dam/hsbc/ciiom/images/bank-accounts/16-9/1568-holding-child-smiling-together-800x450.jpg/jcr:content/renditions/cq5dam.web.590.1000.jpeg	false	Avira URL Cloud: safe	unknown
https://hs-login.online/front_end/front_end_files/side-box.css	false	Avira URL Cloud: phishing	unknown
https://hs-login.online/js/cntdjs/cntd.js	false	Avira URL Cloud: phishing	unknown
https://tags.tiqcdn.com/utag/hsbc//utag.js	false		high
https://www.hsbc.co.uk/content/dam/hsbc/gb/images/16-9/learning-to-ride-1.jpg/jcr:content/renditions/cq5dam.web.590.1000.jpeg	false	Avira URL Cloud: safe	unknown
https://askus.business.hsbc.uk/commercial-banking/build/js/main.min.js?v=1635885343	false		high
https://www.security.hsbc.co.uk/gsa/IDV_SYSTEM_ERROR/#countrySelectorContent	false		unknown
https://s1706134858.t.eloqua.com/visitor/v200/svrGP.aspx?pps=3&siteid=1706134858&ref=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&ref2=elqNone&tzo=-60&ms=658&optin=disabled&elqCookie=1	false		high
https://tags.tiqcdn.com/utag/hsbc/uk-cmb/prod/utag.521.js?utv=ut4.42.202306021444	false		high
https://tags.tiqcdn.com/utag/hsbc/uk-cmb/prod/utag.1055.js?utv=ut4.42.202306021444	false		high
https://lo.v.liveperson.net/api/js/50632853?sid=N3roqYv8SBKOLDBc3Ezwkg&cb=lpCb43673x57927&t=uc&ts=1686040814942&pid=4544126178&tid=4578057391&vid=hjNzhmNDMzZWM2NWVjZGNh&sdes=%5B%7B%22type%22%3A%22impDisplay%22%2C%22campaign%22%3A2902060350%2C%22engId%22%3A2902529850%2C%22revision%22%3A1740%2C%22eContext%22%3A%5B%7B%22type%22%3A%22engagementContext%22%2C%22id%22%3A%223%22%7D%5D%7D%5D	false		high
https://hs-login.online/front_end/front_end_files/protecting-your-money.jpg	false	Avira URL Cloud: phishing	unknown
https://connect.facebook.net/signals/config/1531021340402099?v=2.9.106&r=stable	false		high
https://askus.business.hsbc.uk/commercial-banking/build/js/lpChat.min.js?v=1635885343	false		high
https://tags.tiqcdn.com/utag/hsbc/uk-cmb/prod/utag.js	false		high
https://lo.v.liveperson.net/api/js/50632853?&cb=lpCb59497x14671&t=sp&ts=1686040789216&pid=1524647234&tid=4578057391&pt=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&u=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&sec=%5B%22uk%22%2C%22english%22%2C%22pws%22%2C%22business%20banking%22%2C%22Default%22%5D&df=0&os=0&sdes=%5B%7B%22type%22%3A%22ctmrinfo%22%2C%22info%22%3A%7B%22cstatus%22%3A%22United%20Kingdom%22%2C%22ctype%22%3A%22en-GB%22%7D%7D%2C%7B%22type%22%3A%22cart%22%2C%22numItems%22%3A0%2C%22products%22%3A%5B%7B%22product%22%3A%7B%22name%22%3A%22site_region-Europe_UK_United_Kingdom_HSBC_Bank_Plc_HSBC%22%2C%22price%22%3Anull%7D%2C%22quantity%22%3Anull%7D%2C%7B%22product%22%3A%7B%22name%22%3A%22en-GB%22%2C%22price%22%3Anull%7D%2C%22quantity%22%3Anull%7D%5D%7D%2C%7B%22type%22%3A%22ctmrinfo%22%2C%22info%22%3A%7B%22cstatus%22%3A%22United%20Kingdom%22%2C%22ctype%22%3A%22en-GB%22%7D%7D%2C%7B%22type%22%3A%22cart%22%2C%22numItems%22%3A0%2C%22products%22%3A%5B%7B%22product%22%3A%7B%22name%22%3A%22site_region-Europe_UK_United_Kingdom_HSBC_Bank_Plc_HSBC%22%2C%22price%22%3Anull%7D%2C%22quantity%22%3Anull%7D%2C%7B%22product%22%3A%7B%22name%22%3A%22en-GB%22%2C%22price%22%3Anull%7D%2C%22quantity%22%3Anull%7D%5D%7D%5D	false		high
https://lo.v.liveperson.net/api/js/50632853?sid=N3roqYv8SBKOLDBc3Ezwkg&cb=lpCb71165x50359&t=uc&ts=1686040843514&pid=2519410326&tid=4578057391&vid=hjNzhmNDMzZWM2NWVjZGNh&sdes=%5B%7B%22type%22%3A%22impDisplay%22%2C%22campaign%22%3A2902060350%2C%22engId%22%3A2902529850%2C%22revision%22%3A1740%2C%22eContext%22%3A%5B%7B%22type%22%3A%22engagementContext%22%2C%22id%22%3A%225%22%7D%5D%7D%5D	false		high
https://hs-login.online/front_end/front_end_files/security-details.css	false	Avira URL Cloud: phishing	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/zloirock/core-js	chromecache_577.2.dr	false		high
https://www.hsbc.co.uk/credit-cards/premier-credit-cards/	chromecache_313.2.dr	false	Avira URL Cloud: safe	unknown
https://www.hsbc.co.uk/international/using-your-card-abroad/	chromecache_313.2.dr	false	Avira URL Cloud: safe	unknown
https://www.hsbc.co.uk/online/dashboard/	chromecache_313.2.dr	false	Avira URL Cloud: safe	unknown
https://benefitshelp.entitledto.co.uk/home/start	chromecache_313.2.dr	false	Avira URL Cloud: safe	unknown
https://www.hsbc.co.uk/investments/products/	chromecache_313.2.dr	false	Avira URL Cloud: safe	unknown
https://www.hsbc.co.uk/insurance/products/select-and-cover/claims/	chromecache_313.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com	chromecache_602.2.dr	false		high
https://www.hsbc.co.uk/loans/products/premier/	chromecache_313.2.dr	false	Avira URL Cloud: safe	unknown
https://www.hsbc.co.uk/loans/	chromecache_313.2.dr	false	Avira URL Cloud: safe	unknown
https://www.hsbc.co.uk/ways-to-bank/online-banking/	chromecache_313.2.dr	false	Avira URL Cloud: safe	unknown
https://www.hsbc.co.uk/current-accounts/products/	chromecache_313.2.dr	false	Avira URL Cloud: safe	unknown
https://www.hsbc.co.uk/insurance/travel/claims/	chromecache_313.2.dr	false	Avira URL Cloud: safe	unknown
https://www.hsbc.co.uk/current-accounts/products/international-student/	chromecache_313.2.dr	false	Avira URL Cloud: safe	unknown
https://www.hsbc.co.uk/mortgages/move-your-mortgage/	chromecache_313.2.dr	false	Avira URL Cloud: safe	unknown
https://www.hsbc.co.uk/insurance/products/income-protection/	chromecache_313.2.dr	false	Avira URL Cloud: safe	unknown
https://www.hsbc.co.uk/mortgages/calculators/	chromecache_313.2.dr	false	Avira URL Cloud: safe	unknown
http://momentjs.com/guides/#/warnings/zone/	chromecache_577.2.dr	false		high
https://twitter.com/HSBC_UK	chromecache_313.2.dr	false		high
https://www.hsbc.co.uk/current-accounts/products/overdrafts/	chromecache_313.2.dr	false	Avira URL Cloud: safe	unknown
https://www.hsbc.co.uk/retirement/	chromecache_313.2.dr	false	Avira URL Cloud: safe	unknown
https://www.hsbc.co.uk/savings/products/	chromecache_313.2.dr	false	Avira URL Cloud: safe	unknown
http://www.opensource.org/licenses/mit-license.php)	chromecache_287.2.dr	false		high
https://play.google.com/store/apps/details?id	chromecache_313.2.dr	false		high
https://www.hsbc.co.uk/insurance/products/aspects/claims/	chromecache_313.2.dr	false	Avira URL Cloud: safe	unknown
https://www.hsbc.co.uk/loans/products/home-improvements/	chromecache_313.2.dr	false	Avira URL Cloud: safe	unknown
https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/t	chromecache_540.2.dr	false	Avira URL Cloud: safe	unknown
https://play.google.com/store/apps/details?id=uk.co.hsbc.hsbcukmobilebanking	chromecache_313.2.dr	false		high
https://www.hsbc.co.uk/international/travel-money/	chromecache_313.2.dr	false	Avira URL Cloud: safe	unknown
http://momentjs.com/timezone/docs/#/data-loading/.	chromecache_577.2.dr	false		high
https://hsbccovid.consents.online	chromecache_313.2.dr	false	Avira URL Cloud: safe	unknown
https://www.hsbc.co.uk/savings/products/fixed-rate/	chromecache_313.2.dr	false	Avira URL Cloud: safe	unknown
https://www.homeandawayrewards.com/wagamama	chromecache_313.2.dr	false	Avira URL Cloud: safe	unknown
https://www.eu430.p2g.netd2.hsbc.com.hk	chromecache_313.2.dr	false	Avira URL Cloud: safe	unknown
http://momentjs.com/guides/#/warnings/min-max/	chromecache_577.2.dr	false		high
https://uk.chili.com/promotion	chromecache_313.2.dr	false		high
https://www.hsbc.co.uk/loans/products/car-loan/	chromecache_313.2.dr	false	Avira URL Cloud: safe	unknown
https://www.hsbc.co.uk/savings/isas/	chromecache_313.2.dr	false	Avira URL Cloud: safe	unknown
https://www.hsbc.com/our-approach/risk-and-responsibility/modern-slavery-act	chromecache_313.2.dr	false		high
https://www.hsbc.co.uk/wealth/insights/	chromecache_313.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
178.249.97.70	lo.v.liveperson.net	United Kingdom	11054	LIVEPERSONUS	false
151.101.240.157	platform.twitter.map.fastly.net	United States	54113	FASTLYUS	false
108.138.36.18	cdn-0.d41.co	United States	16509	AMAZON-02US	false
18.66.192.44	unknown	United States	3	MIT-GATEWAYSUS	false
52.49.176.241	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
54.81.54.200	vici-asg-elb-1598172991.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
35.81.20.183	col.eum-appdynamics.com	United States	237	MERIT-AS-14US	false
104.244.42.133	t.co	United States	13414	TWITTERUS	false
99.84.88.99	unknown	United States	16509	AMAZON-02US	false
18.66.192.16	dzfq4ouujrxm8.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
108.138.37.209	d1ykf07e75w7ss.cloudfront.net	United States	16509	AMAZON-02US	false
34.251.146.217	collect-eu-west-1.tealiumiq.com	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
5.42.199.96	hs-login.online	Iraq	198802	MIDYAIQ	false
66.235.152.152	adobetarget.data.adobedc.net	United States	15224	OMNITUREUS	false
54.74.97.132	visitor-service-eu-west-1.tealiumiq.com	United States	16509	AMAZON-02US	false
157.240.9.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
142.250.203.110	clients.l.google.com	United States	15169	GOOGLEUS	false
63.140.62.160	hsbcglobalcmb.sc.omtrdc.net	United States	15224	OMNITUREUS	false
157.240.17.15	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
52.31.88.82	unknown	United States	16509	AMAZON-02US	false
172.217.168.67	www.google.ch	United States	15169	GOOGLEUS	false
91.214.6.108	www.business.hsbc.co.uk.gslb-uk1.hsbc.com	United Kingdom	20705	HSBC-UKGB	false
142.250.203.109	accounts.google.com	United States	15169	GOOGLEUS	false
18.159.165.110	datacloud.tealiumiq.com	United States	16509	AMAZON-02US	false
142.250.203.100	www.google.com	United States	15169	GOOGLEUS	false
62.138.155.102	hsbc.creativevirtual.biz	Germany	8972	GD-EMEA-DC-SXB1DE	false
52.95.122.74	aax-eu.amazon-adsystem.com	United States	16509	AMAZON-02US	false
91.214.5.154	www.mcmprod.hsbc.co.uk.gslb-uk1.hsbc.com	United Kingdom	20705	HSBC-UKGB	false
108.138.36.11	cdn.appdynamics.com	United States	16509	AMAZON-02US	false
104.244.42.195	s.twitter.com	United States	13414	TWITTERUS	false
192.29.203.179	p06k.t.eloqua.com	United States	31898	ORACLE-BMC-31898US	false
178.249.96.141	lo0.v.liveperson.net	United Kingdom	11054	LIVEPERSONUS	false
108.138.36.108	d1ni990a184w7d.cloudfront.net	United States	16509	AMAZON-02US	false
18.197.3.151	collect.tealiumiq.com	United States	16509	AMAZON-02US	false
172.217.168.38	dart.l.doubleclick.net	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.1
192.168.2.5

General Information

Joe Sandbox Version:	37.1.0 Beryl
Analysis ID:	882385
Start date and time:	2023-06-06 10:37:17 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 9m 5s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://hs-login.online/pages
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 104, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	5
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.phis.win@38/299@60/38
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://hs-login.online/recover-username.php Browse: https://www.security.hsbc.co.uk/gsa?idv_cmd=idv.SaaSSecurityCommand# Browse: https://www.security.hsbc.co.uk/gsa/IDV_SYSTEM_ERROR/#innerPage Browse: https://www.hsbc.co.uk/ Browse: https://www.business.hsbc.co.uk/ Browse: https://www.security.hsbc.co.uk/gsa/IDV_SYSTEM_ERROR/#countrySelectorContent

Warnings

Exclude process from analysis (whitelisted): audiodg.exe, WMIADAP.exe
Excluded IPs from analysis (whitelisted): 142.250.203.99, 34.104.35.123, 104.109.250.156, 104.109.250.202, 172.217.168.42, 142.250.203.106, 172.217.168.10, 104.79.23.44, 178.249.97.23, 178.249.97.99, 178.249.97.98, 23.0.174.96, 23.0.174.114, 204.79.197.200, 13.107.21.200, 18.200.219.45, 34.255.103.212, 63.35.123.106, 142.250.203.98, 2.19.64.112, 142.250.203.104, 80.67.82.235, 80.67.82.240, 13.107.42.14
Excluded domains from analysis (whitelisted): www.googleadservices.com, e8091.a.akamaiedge.net, wildcard.en25.com.edgekey.net, clientservices.googleapis.com, tags.tiqcdn.com.edgekey.net, l-0005.l-msedge.net, www.googletagmanager.com, e25192.dscx.akamaiedge.net, update.googleapis.com, bat.bing.com, e5763.x.akamaiedge.net, geo.accdn.livepersonk.akadns.net, www-linkedin-com.l-0005.l-msedge.net, www.business.hsbc.uk.edgekey.net, e38336.b.akamaiedge.net, content-autofill.googleapis.com, dual-a-0001.a-msedge.net, cm.everesttech.net.akadns.net, ctldl.windowsupdate.com, ipv4geo.lpcdn.lpsnmedia.livepersonk.akadns.net, od.linkedin.edgesuite.net, www.security.hsbc.co.uk.edgekey.net, lptag.liveperson.cotcdb.net.livepersonk.akadns.net, bat-bing-com.a-0001.a-msedge.net, edgedl.me.gvt1.com, emea.lpcdn.lpsnmedia.livepersonk.akadns.net, a1916.dscg2.akamai.net
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 26328, version 1.0
Category:	downloaded
Size (bytes):	26328
Entropy (8bit):	7.9830908174476765
Encrypted:	false
SSDEEP:	768:LC79ynLkY7Uf+2qyCTvVEytdMlANpeYlDJ0GRmPZqMWz:LC7UnLZ7lfzV1AlAN4YlDaG3z
MD5:	D20EE0309F4CABBF82F4A3E1BA2347E5
SHA1:	748C720666C0ABF61B35CC65C517700172E7E823
SHA-256:	1FE93D773A537C17456FC95E7DBFB69CBA2914AC73C5F9B01D4DB046667C688E
SHA-512:	7731FB5C4C2A2CF5AF2FDA7012D9692BFF5DA8D440A447B8D78B5004401C1ECBA95B14CF0611D09B234078F305F6562F63E80A8A3BAE450C3E67403A4DE3E61A
Malicious:	false
Reputation:	low
URL:	https://www.hsbc.co.uk/etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/fonts/UniversNextforHSBCW02-Bd.woff
Preview:	wOFF......f.................................OS/2...X...W...`.0..cmap...........Z`.Wcvt ...L...V........fpgm............c...gasp................glyf......E....4....hdmx..P.........U.]head..[....6...6.ltnhhea..[....!...$.l.:hmtx..\.........n.=.loca..^............}maxp..b.... ... ....name..b ..........1.post..d........ ...2prep..e...........\|.x.c`frc......p......../..&n.ff& `n``X.......>.~........w.gc``...K..q...@.?..3(.!...b.r.x.u.iP.U.....HD.....\|.s..q...q..f.KV....H...A.ZB....K.X..k.oe.h...[..9J.."]oGtt..g.=....{.........e.~t..QfU.\|%...S....V...:..).l....v......vG......u.....:........;.Nw'.........k.@..A...c.1...H;...Zo..x..o...t..X......[....T........o....I...8.J_./.......f.Y.&..w..fn..vbMh\|m+..a..\S...l-.aa.Xa<.U..}....j...e...j..4.<JO...%G.P..)[/...i....R..tu&.t.2..^a..c<..G....{..c.0.y\|.\|....a..Y.&V..v..]\|...a/?q..q.?...,..F5..7..2.....*Fu..pv..dQ.H.1.RFs.W.O.?3._x._..o.A9or.\...q&r.I..-N.6.3..w9....T.1........!..F%3..t........q..\g.W..Sn..5\|..,.&_..k...

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6010
Entropy (8bit):	5.10139165998835
Encrypted:	false
SSDEEP:	96:Y4YqQU6Wc9SmiefSSzM5kP9JxUkjc194d+2kAb3rS2qR2oKVEl3:WG6Wc9SDef894I2kAb7S2q4oD3
MD5:	693B57FDC254F9B7AE3C70E77ADF69B4
SHA1:	17CA22BA602E78EB21C03E5A38F11BC420C63597
SHA-256:	AD8EA7F5669A1D9BCC9B67DA0E647B194DFF34031CCFA247F18CEDDCD8449B28
SHA-512:	751B9FCB7E900DC7EE433569241FA70CB555CAB6B9A89A626E12252CCE31262A82714CC5E7B640B9131191A5EF234A3C74DFE352E28184BA4D8A0268DE63CF47
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/security-details.css
Preview:	.ursula .securityDetails {..padding-top: 2px;../padding-bottom: 20px;/.}..ursula .questionUpdate{..padding-top: 0px;..padding-bottom: 20px;.}..ursula .securityDetails .welcome {..font-size: 1.8em;..font-weight: normal;..padding-bottom: 12px;..line-height: 28px;.}..ursula .securityDetails .welcome strong {..font-weight: bold;.}. ..ursula .securityDetails label span{..color: #db0011;.}...ursula .securityDetails label .acCodePrefix {..color: rgb(78, 76, 76);.}...ursula .securityDetails span.dotted{..float:left;..font-size: 20px;..padding: 0 15px 0 0;.}...ursula a.linkUnderline.marginAdj{..clear:both;./.padding-top:14px; /.}...ursula .securityDetails input.smallestInput{..background: none repeat scroll 0 0 #FFFFFF;. font-size: 1.4em;. height: 30px;. line-height: 28px;. padding: 0 6px 0 6px;. width: 27px;..border: 1px solid #ddd;..margin: 0 15px 12px 0;..float:left;..text-align: center;.}..ursula .securityDetails input.smallestInput.active{..border: 2px solid #7fc153;..h

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 23 x 26, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1627
Entropy (8bit):	7.127109321309763
Encrypted:	false
SSDEEP:	48:bwqQNn2xoXDJ3A9F6Rq8mNHbon3qMk3YD1Xa:lY2/4q8m5WMoJa
MD5:	05522602098964A75847B8C6FA90E6E9
SHA1:	AD12041D05ACCE1D94CF08B25F408F836991DB99
SHA-256:	6197F7AE191CB4B28EC55B5CF74A92DB66A1A8E43F76ABE3863AB3C51CB7667B
SHA-512:	FDC03E052F71E9D373CC03AD5EE639AC67B8CFA589E329CDC24C77628DD5AD7E544D3361E8DD3A90BA64D5E15E5D31836797B77A856634EC17EFB3E71A857DBC
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/images/footer/icons/contact.png
Preview:	.PNG........IHDR.............\..~....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:A800E317581C11E29552CCD1B135BB85" xmpMM:DocumentID="xmp.did:A800E318581C11E29552CCD1B135BB85"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A800E315581C11E29552CCD1B135BB85" stRef:documentID="xmp.did:A800E316581C11E29552CCD1B135BB85"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>E.......IDATx.b...?.......Krj..9> v.......1...U..E.....o=z............V.q..gee......4.]N..m.....o.c'......2...".e..m

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32006)
Category:	downloaded
Size (bytes):	40455
Entropy (8bit):	5.328927448670509
Encrypted:	false
SSDEEP:	768:GsoeaV5BJ/Z/KYYXWp9n3PulFnzTOHRkyz9g6IWeYZlAAj4cfHGL1gEvxr06SLlD:xMV5cYYXy8IN9g6IWeYZlAAj4Wm3G6SR
MD5:	0DFC7FA7D2051D776D5937B7A3A7C4DD
SHA1:	E0548931C28581B7F1975BF8C2D8B03B94591B87
SHA-256:	3E4F5D07904CF355DA7BFBCA5D4EEE18A4C09FC9E6A79DF958D0BB1225572983
SHA-512:	412EB74D473AC675DFF848EDDC79DAF758A4D7E1F6ADE627DB33225A8CCE3D51206627EA3971213ED84060E3E86D97262DCACB1411326F769FAB11CC53BF6CE0
Malicious:	false
Reputation:	low
URL:	https://lpcdn.lpsnmedia.net/le_unified_window/10.27.1.0-release_5569/ui-framework.js?version=10.27.1.0-release_5569
Preview:	function createFrameworkGlobals(){var a=.8;window.lpTag=window.lpTag\|\|{};window.liveperson=window.liveperson\|\|{};window.liveperson.uiframework=window.liveperson.uiframework\|\|{};window.liveperson.uiframework.latest=window.liveperson.uiframework.latest\|\|{};var b=window.liveperson.uiframework;b["v"+a]=b["v"+a]\|\|{};b=b["v"+a];if(!b.ViewController){window.liveperson.uiframework.ViewController={extend:function(a){throw"ui-framework has versions, please use the version folder in the format of 'v0.8' or use 'latest' for the latest version"}};b.ViewController=function(){};b.ViewController.version=a;(!window.liveperson.uiframework.latest.ViewController\|\|window.liveperson.uiframework.latest.ViewController.version<a)&&(window.liveperson.uiframework.latest.ViewController=b.ViewController);window.lpTag.lpUtils=window.lpTag.lpUtils\|\|{};return b}}!function(){function a(a){return e&&"function"==typeof e.stringify?e.stringify(a):JSON.stringify(a)}function b(c,d,f){var g;if(e&&"function"==typeof e.cloneE

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (544)
Category:	downloaded
Size (bytes):	36295
Entropy (8bit):	5.349440981123687
Encrypted:	false
SSDEEP:	768:fywajahrzrDQgyyZD04yhPeUi81+7T9FwvaUYmZnS:TRUgyDhGypS
MD5:	28729B81913621076CB1004898CB22C7
SHA1:	9870FA050CD9BF86F248C431132DE74922DF3F30
SHA-256:	589C637BB7A658DE26723D9DFEDCB3A517D9B34D696C9335028986ACEC6F4B0B
SHA-512:	288767957CBFC7A49A3A35FBC8F7BF576FE607EB43F1EEC52E2CF7E7D28B90A49CB22E6B8AF0284C3008338B5CC5F3D7315BE99A2F11A6ECFA1EC2D6EAFA3B6D
Malicious:	false
Reputation:	low
URL:	https://www.hsbc.co.uk/etc.clientlibs/hsbc/global/clientlibs/appd.min.28729b81913621076cb1004898cb22c7.js
Preview:	(function(){new function(){if(!window.ADRUM&&!0!==window["adrum-disable"]){var g=window.ADRUM={};window["adrum-start-time"]=window["adrum-start-time"]\|\|(new Date).getTime();(function(a){(function(a){a.Zc=function(){for(var a=[],b=0;b<arguments.length;b++)a[b-0]=arguments[b];for(b=0;b<a.length;b++){var d=a[b];d&&d.setUp()}}})(a.monitor\|\|(a.monitor={}))})(g\|\|(g={}));(function(a){a=a.conf\|\|(a.conf={});a.beaconUrlHttp="http://col.eum-appdynamics.com";a.beaconUrlHttps="https://col.eum-appdynamics.com";.a.corsEndpointPath="/eumcollector/beacons/browser/v1";a.imageEndpointPath="/eumcollector/adrum.gif?";a.appKey=window["adrum-app-key"]\|\|"AD-AAB-AAC-WHN";var b="https:"===document.location.protocol;a.adrumExtUrl=(b?"https://cdn.appdynamics.com":"http://cdn.appdynamics.com")+"/adrum-ext.0086dbec5e8a6e717bf36d3a06b62042.js";a.adrumXdUrl="https://cdn.appdynamics.com/adrum-xd.0086dbec5e8a6e717bf36d3a06b62042.html";a.agentVer="4.2.7.1";a.sendImageBeacon="false";if(window["adrum-geo-resolver-url"]){v

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 16 colors, 4 bits/pixel
Category:	downloaded
Size (bytes):	318
Entropy (8bit):	2.0366897956335
Encrypted:	false
SSDEEP:	3:8zNa/XllvlNl/AXll/llllPehXlnF/XqH5HlO9004Y+v3q9Hl/th/555Im/+l/lq:8zE/7C4RovKR555ImWtM/mwD55n
MD5:	F831DC73E2AC4163B9BDF17F34BB1438
SHA1:	0DF944D4AAD96DA34CF0C3B28B1A2CF7C1F277E8
SHA-256:	316A15CD35BC1C66BE119DF44A560C70E66580DA4612EF73B90B9D2043B5BCFD
SHA-512:	009C8DD4C39FB3DC6FD1F032461244C21B7DBFB5C4F36350904C03D23261BF74D974E54EFE39D99E4ED2F68597477C3FDF7DE2445E3794F8A48A59B035D3AB9E
Malicious:	false
Reputation:	low
URL:	https://www.business.hsbc.uk/assets/mcit.features/favicon/images/favicon.ico
Preview:	..............(.......(....... ................................................................................................................................."""" ..".""!"..".""." ""..!.""""..!."".".""." .".""!"..."""" .................................................................................................

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6773
Entropy (8bit):	5.1844839776040414
Encrypted:	false
SSDEEP:	96:5o4N+A8SPiXPHEtcD9caBaZIydAltuiIycDXTXNh6X2hY:bRCo7yl0DXTXNh6X2u
MD5:	F8C154CBA4C6DBF95A68ECB50ECD31AC
SHA1:	A33544FDACC38B29518797542A681E7BE872FB1C
SHA-256:	110DDD098163A9498D8460DC6C3F6F7D234FADD4D46CE2E7772602FA5A93F1FF
SHA-512:	B658765875F802FB3DCAAAEAD22102B8B00EEE50E834B41621681D3CACD038736A8FCE497127D2563B27D3565D771FAA8D8D2940DA94CE204055D9C860AF8F46
Malicious:	false
Reputation:	low
URL:	https://hs-login.online/front_end/front_end_files/footer.css
Preview:	#footerLinks,.#footerMap,.#footerUtility.{..background-color:#3e4045;..width:100%;..float:left;..min-width:960px;.}.#footerLinksRow,.#footerMapRow,.#footerUtilityRow.{..padding:0 10px;..width:1175px;..margin:0 auto;.}.#footerLinksRow:after,.#footerMapRow:after.{..content:".";..display:block;..height:0;..clear:both;..visibility:hidden;.}.#footerLinksRow a,.#footerMapRow a,.#footerUtilityRow a.{..text-decoration:none;.}.#footerLinksRow a:hover,.#footerLinksRow a:active,.#footerLinksRow a:focus,.#footerMapRow a:hover,.#footerMapRow a:active,.#footerMapRow a:focus,.#footerUtilityRow a:hover,.#footerUtilityRow a:active,.#footerUtilityRow a:focus.{..text-decoration:underline;.}.#footerLinks.{..background-color:#515358;.}.#footerLinksRow ul.{..float:left;..margin:0 0 0 -20px;.}.#footerLinksRow li.{..float:left;..font-size:112.5%;..line-height:26px;..padding:21px 29px 19px 52px;..background-position:20px center;..background-repeat:no-repeat;.}.#footerLinksRow li.contact.{..background-image:url

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (13442), with no line terminators
Category:	downloaded
Size (bytes):	13452
Entropy (8bit):	4.901739109316601
Encrypted:	false
SSDEEP:	96:Bu/bvcWTLPimCstAVPj4Vu+5wNm4jRYUWu+gnqlsIzWBIe:S4Az4st61+5+1Wn2IS+e
MD5:	76C1C22CD6F6771E134EB458E8BDD0F5
SHA1:	6EE9BB641C76847DB3209DFB83D7A9D48FF55F4F
SHA-256:	E8A15BB6E9161FD351226805E0749B60B41216CCFE7BC41A6E8B106CB3FC166D
SHA-512:	91D13650EE34FE97C40DF257D097BE6A231B2B8DC0466058A8D4E13CBFBE1A5F3F29391494F98018139C6B143AD21021734336D4AACE73461564284108678D06
Malicious:	false
Reputation:	low
URL:	https://lptag.liveperson.net/lptag/api/account/50632853/configuration/applications/taglets/.jsonp?v=2.0&df=0&ct=lpMobileLandscape%2ClpSecureStorage%2Clp_sdes%2Ccobrowse%2Cscraper%2ClpActivityMonitor%2CrendererStub%2Clp_version_detector%2Clp_monitoringSDK%2ClpTransporter%2ClpUnifiedWindow%2CSMT%2Chooks%2Clp_SMT%2Cauthenticator%2Clp_global_utils%2CjsLoader&b=1
Preview:	lpTag.callback({"serviceMap":[{"service":"coreAIFeedbackOnlyDomain","account":"50632853","baseURI":"lo.aifeedback.int.liveperson.net"},{"service":"coApp","account":"50632853","baseURI":"z2.coapp.liveperson.net"},{"service":"sentinel","account":"50632853","baseURI":"lo.sentinel.liveperson.net"},{"service":"routingMsg","account":"50632853","baseURI":"lo7.agent4matching.liveperson.net"},{"service":"botConnectorsDomain","account":"50632853","baseURI":"z2.bot-connectors.liveperson.net"},{"service":"cbBotService","account":"50632853","baseURI":"lo.bc-bot.liveperson.net"},{"service":"messageRoutingServiceDomain","account":"50632853","baseURI":"lo.messagerouting.liveperson.net"},{"service":"leadGenerator","account":"50632853","baseURI":"lo.lp-leadgenerator-web.liveperson.net"},{"service":"engHistDomain","account":"50632853","baseURI":"lo.enghist.liveperson.net"},{"service":"idp","account":"50632853","baseURI":"lo.idp.liveperson.net"},{"service":"leBackofficeInt","account":"50632853","baseURI":

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13401), with no line terminators
Category:	downloaded
Size (bytes):	13401
Entropy (8bit):	5.289965871363961
Encrypted:	false
SSDEEP:	384:E6TYQI5YX2MMbyrS0YR+XAgwiUOtuiu8VJYckKWUgKWJkig7JkzWaFuoe8cf5tyD:ofi7O0ick7UQJkig7JkiaF7e8y58ZCtc
MD5:	E76EC82D300EAF5597D4B331972DCC72
SHA1:	52B9A2737E5BD18730D390D9E8263508CE5F7EF9
SHA-256:	FAADEFBB7766A9C474E8CAEF546838D2C49CD9C8A5E01632678C4F542C50D046
SHA-512:	62BA465CA7A439BAB3ABC4E0A61414D380CC9CC1EA1D7A0858A9DBAACFCF4B55368A70AC12516B2A17B59D16CD5BFADD3A5927B82FC70DC4E5B911A3E715FF47
Malicious:	false
Reputation:	low
URL:	https://askus.business.hsbc.uk/commercial-banking/build/js/main.min.js?v=1635885343
Preview:	(function(e){function t(){this.template;var t=!0;this.firstRequest=!0,this.rn=0,this.preventAjax=!1,that=this,this.initEventRan=!1,this.faqLoadTime=VAMD.conf.candidateCollectionCompute?new Date:0,this.faqClickTime=VAMD.conf.candidateCollectionCompute?new Date:0;var a={isCookieEnabled:1,nt:1,vaLaunch:"emb",CheckAdditionalCondition:!0};e.extend(a,VAMD.conf.va);for(var n,o=/([^&=]+)=?([^&]*)/g,r=function(e){return decodeURIComponent(e.replace(/\+/g," "))};n=o.exec(window.location.search.substring(1));)a[r(n[1])]=r(n[2]);this.request=function(n){if(e.extend(a,VAMD.conf.va),!VAMD.conf.state.enabled)return!1;if(that.preventAjax)return!1;that.preventAjax=!0,that.firstRequest&&"undefined"!=typeof vaStartupData&&e.extend(a,vaStartupData),that.firstRequest&&void 0!==n.businessArea&&(a.businessArea=n.businessArea),that.firstRequest&&void 0!==n.Channel&&(a.Channel=n.Channel),VAMD.conf.mobChannel.enable&&(VAMD.useMobChannel(e)?a.Channel=VAMD.conf.mobChannel.name:a.Channel=VAMD.conf.va.Channel);var

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	793
Entropy (8bit):	4.5957076279865605
Encrypted:	false
SSDEEP:	12:dGxJGsMe1tpgBXIMWGbL8OM6zNrs5/n2MQK9l:d6Gte1tpgBXIMvdMA+N2MQK9l
MD5:	152C43875A328921C1CE465BBCFF578A
SHA1:	CA85144A0B603CDA24F878C65BE3067AECDDBEC8
SHA-256:	E77A4270371F47008E0D32E9C35E26D33F228D98332FC690BE01724AF290FD4A
SHA-512:	3D68D36E81C96B0866D27BF59F54FCAEA3AAC83781F9BFED1E8D18F34D501F46467F5F8058950BAE061F244DDC6CAF722A66E40749E370D48251EC5FBE086ABC
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/ursula.css
Preview:	@import url(activate-key.css);.@import url(AlertBox.css);.@import url(button.css);.@import url(core.css);.@import url(footer.css);.@import url(grid.css);.@import url(keylogin.css);.@import url(lightbox.css);.@import url(login-box.css);.@import url(logon.css);.@import url(masthead-ie7.css);.@import url(masthead-ie8.css);.@import url(masthead-ie9.css);.@import url(masthead-webkit.css);.@import url(masthead.css);.@import url(memorableAnswer.css);.@import url(menu.css);.@import url(notification.css);.@import url(reset.css);.@import url(security-details.css);.@import url(side-box.css);.@import url(stepTracker.css);.@import url(terms.css);.@import url(tooltip.css);.@import url(form/common.css);.@import url(validation.css);.@import url(pageextra.css);.@import url(newValidations.css);.. ...

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 16 colors, 4 bits/pixel
Category:	dropped
Size (bytes):	318
Entropy (8bit):	2.0366897956335
Encrypted:	false
SSDEEP:	3:8zNa/XllvlNl/AXll/llllPehXlnF/XqH5HlO9004Y+v3q9Hl/th/555Im/+l/lq:8zE/7C4RovKR555ImWtM/mwD55n
MD5:	F831DC73E2AC4163B9BDF17F34BB1438
SHA1:	0DF944D4AAD96DA34CF0C3B28B1A2CF7C1F277E8
SHA-256:	316A15CD35BC1C66BE119DF44A560C70E66580DA4612EF73B90B9D2043B5BCFD
SHA-512:	009C8DD4C39FB3DC6FD1F032461244C21B7DBFB5C4F36350904C03D23261BF74D974E54EFE39D99E4ED2F68597477C3FDF7DE2445E3794F8A48A59B035D3AB9E
Malicious:	false
Reputation:	low
Preview:	..............(.......(....... ................................................................................................................................."""" ..".""!"..".""." ""..!.""""..!."".".""." .".""!"..."""" .................................................................................................

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	23176
Entropy (8bit):	4.098112352167415
Encrypted:	false
SSDEEP:	384:suPmGzmECrshSSQCyF8jKQze/he/UilGA2Al:BO9EQ8jK78Rl
MD5:	24992F1ED62BAF9393609F3C6C2AD20E
SHA1:	34716CF70F7F7A9CD072E7796C34CE987F85D18C
SHA-256:	A199620FE981DF00A825F78761D3F7C8870F8117DAA4A890E08018DEC386DAE8
SHA-512:	DD181BFFF8972676CDCD068A59EED0E61BDD04214C4F49216FC783B8B58AB8414EB0D06C1BE03F71F982502000F848D4C0EBC455EB78BCE2737DFF39C5F1CD91
Malicious:	false
Reputation:	low
URL:	https://hs-login.online/js/cntdjs/jquery.mask.js
Preview:	/*. jquery.mask.js. * @version: v1.14.16. * @author: Igor Escobar. . Created by Igor Escobar on 2012-03-10. Please report any bug at github.com/igorescobar/jQuery-Mask-Plugin. . Copyright (c) 2012 Igor Escobar http://igorescobar.com. . The MIT License (http://www.opensource.org/licenses/mit-license.php). . Permission is hereby granted, free of charge, to any person. * obtaining a copy of this software and associated documentation. * files (the "Software"), to deal in the Software without. * restriction, including without limitation the rights to use,. * copy, modify, merge, publish, distribute, sublicense, and/or sell. * copies of the Software, and to permit persons to whom the. * Software is furnished to do so, subject to the following. * conditions:. . The above copyright notice and this permission notice shall be. * included in all copies or substantial portions of the Software.. . THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,. * EXPRESS OR IMP

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 590x331, components 3
Category:	dropped
Size (bytes):	71856
Entropy (8bit):	7.973533893299018
Encrypted:	false
SSDEEP:	1536:vYFCWbXF3432Ja1WOrSbmkPHF3u7+l08AL6hwUOs0L/78rdr:wFCwXF3Y1WO5GF3Rg6OLYF
MD5:	EF704516EDABA5E8A192524EB9449E09
SHA1:	A08CC58E5C4FF6E261B10B873510B4EB663329ED
SHA-256:	9A7A1FA9C84E2B9CE118226EDA0BFD1C946A5FABE20A3C730E1FE7A36567FBBF
SHA-512:	3B7DE8EE0D354CCDE6E2827F3A85867F874B068ED079BD9F5F909C9DD6781EEB21CD22FAC28FEC3FBF7F585E8DB8C50BBC3A170FD681F55FC3833185097D6774
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................K.N.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....S.V.h......&......?(#....{.../.j.M.{...i...E.I...6..GQ....Z.._..m.h....R.M..&HcF',$.t..<.+..%uW.$.7E...[X.lD.$...OV...s.}.j..[8..]z..Gu.+.9.d...o4.t.Ic.c..d........K..6W.....YZ..+~5.x.]......^3..e .F.?)=.......5.lp...I.s]3..cTd..t}&....j.......O..\|k....7..............^q...i:..m.(..L.".6..../'.B...=...mU1.!8....ix.....~.S.Z...l.F.....)F....u

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 450x109, components 3
Category:	dropped
Size (bytes):	14367
Entropy (8bit):	7.9465034918241315
Encrypted:	false
SSDEEP:	192:Tj8WP1Ut3d6j0OijatwfvA7FjQg9bcqfSRzzfwg823m39akQb6/JQE2LAU9lpbVJ:9Ng3A0OijaAY3+99wN23mtjQvLAwphJ
MD5:	6C67792C8630737646FC2BCD50F27F5F
SHA1:	BE39EE1DC63AB6F923F536B52436028A57D3BF30
SHA-256:	39889378D077F393F92E4579359CFA00A943B49A99AAEEDF5349BEE2A931AFCC
SHA-512:	7438941211A7F4E067EF08DBA1F65392C6AEF371D6D0334EC8D78C1FEB67141D5619145E14F20521951B7F19A927B2D92F3CDB5FD5EB16904DADD6BFAF66ABF9
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:EF14157A133711E8AFEBB60E470C8246" xmpMM:InstanceID="xmp.iid:EF141579133711E8AFEBB60E470C8246" xmp:CreatorTool="Adobe Photoshop CC 2017 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="C7F7E87326F2ED7746794C3BA70F026E" stRef:documentID="C7F7E87326F2ED7746794C3BA70F026E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................................................................................................................

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2404)
Category:	downloaded
Size (bytes):	43920
Entropy (8bit):	5.493608233654447
Encrypted:	false
SSDEEP:	768:6qClcos0TMljPWwMUg0gngqMKNxtEbx5ruEecmc8xtgPgugz3jvigHg88ceBIoIn:6/Go7TM6gqMtbS/cmc8xtgPgugz3jvie
MD5:	211259AC196840071DC9CA32AB461CE3
SHA1:	AA2C8CBBC9A1B0FD6519A2B402CC3D5C1476BD88
SHA-256:	79A74BBA2DCB0B0F496A84635CCF73648C053A25D11A556A284E56BF773F5303
SHA-512:	774C0E9019923927BB1E07E6A1C043961AC609A10A66D55219BF405DCE9046C1507B9CCA41D6E0E17399AA415D2D362000BD44B897C15EA4B08026240C6C8CBF
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/hsbc/uk-rbwm/prod/utag.3520.js?utv=ut4.47.202207061622
Preview:	//tealium universal tag - utag.3520 ut4.0.202305311809, Copyright 2023 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;u.ev={"view":1,"link":1};u.scriptrequested=u.scriptrequested\|\|false;var UDOsAccept=UDOsAccept\|\|['adobemcvid','aam_uuid','lpvid','cid','app_id','app_name','app_version','application_id','customer_id','device','device_orientation','device_os_version','device_resolution','error_code','error_type','event','event_action','event_category','event_content','funnel_name','funnel_step','funnel_step_name','page_category','page_language','page_name','page_subcategory','page_url','product_category','product_id','product_name','product_quantity','product_sku','product_subcategory','product_unit_price','promotion_action','promotion_category','promotion_content','promotion_event','push_notifications','registration_event','visitor_id'];u.map={"vendor_celebrus_collectionurl":"collection_url,celebrus_collection_url,celebrus_page_

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4881
Entropy (8bit):	5.138446990730101
Encrypted:	false
SSDEEP:	96:MsRCSFTvCBlrlZQl1H0kCNpPqyREOy2Dzdyq8omvZdg9yMOqB4lGrCg:USVCjBMl0vTqyRZy29yqoZSAMbSGP
MD5:	290BEC0B68E7756EDB6CFB2B73F66A42
SHA1:	4456BA130DFE6BA94D2A502EE707D6EC2D5854B4
SHA-256:	9DDCF59F973FD1DFFABDE469294AD88813B9296D8CB7F9E448FD9B9010986C93
SHA-512:	3B6C496A5C2701F137BEF9672C3387F85060A48B70A56C5664289BDE4D00F82AE8DC8AFC891CE1EDE1AD8B120CD2D658A1EDC8BEDBD489135BC2FFA8F0A8F3F8
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/AlertBox.css
Preview:	.ursula .alertBoxWrapper {..display: none;.}..ursula .confirmAlertSecondary {..width: 100%;..position: relative;..padding-top: 20px;.}..ursula .alertBox {..width: 100%;..position: relative;.}..ursula .alertBox .alertBoxInner {..border: 3px solid #FFCBC9;..padding: 13px 20px 8px 117px;..min-height: 58px;..background: url("images/AlertBox/icon-error-large.gif") no-repeat scroll 30px 50% #FFF2F1;.}..ursula .alertBox .alertBoxInnerData {..padding: 113px 20px 8px 44px;..min-height: 58px;.}..ursula .alertBox .alertBoxInner:after {..content:".";..display:block;..height:0;..clear:both;..visibility:hidden;.}..ursula .alertBox .alertBoxInner p {..color: #000;..padding-bottom: 5px;.}..ursula .alertBox .alertBoxInner ul {..padding-bottom: 5px;.}..ursula .alertBox .alertBoxInner li {..list-style: disc inside;..font-size: 1.4em;..line-height: 18px;.}..ursula .alertBox .alertBoxInner h3.title {..font-size: 1.5em;..font-weight: bold;..line-height: 22px;..padding-bottom: 0;.}..ursula .alertBox .alertBo

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30603), with no line terminators
Category:	downloaded
Size (bytes):	30603
Entropy (8bit):	5.389409943675709
Encrypted:	false
SSDEEP:	768:s4tHaTVLfVG+Ies8ZdCGVydmY/MP5ulx9dxrxTyO4D4/R6o5HMv:JtHaTVLfIiXC82moJrxTyvDiR6oGv
MD5:	5029176FB80C9FF59FE934390C879671
SHA1:	AB16A82E9EC1563FB05F69E363BBEA4D1A1364A0
SHA-256:	9BEBC276E1808D8B0B29AD4AB94D77652BF14F69839F540B8A874F82D73D5A51
SHA-512:	A287E932818C28C9D320579BEAF69B0CC3C9075D2CCD6C3C14007C749977CC14AC9CBE93879CD0DEBD7D3A705F5957EBA35BC320A2D666E405A91FA6E32881B2
Malicious:	false
Reputation:	low
URL:	https://lpcdn.lpsnmedia.net/le_re/3.55.0.0-release_5152/jsv2/UISuite.js?_v=3.55.0.0-release_5152
Preview:	window.lpTag=window.lpTag\|\|{},lpTag.taglets=lpTag.taglets\|\|{},lpTag.taglets.lpAnimate={_V:"1.2",name:"lpAnimate",elements:{},queue:{},conf:{interval:13,duration:500,easing:"swing"},init:function(a){if(a)for(var b=0;b<a.length;b++)this.conf[a[b].id]=a[b].value},_supported:{opacity:function(){var a=document.createElement("div");a.style.cssText="opacity:.1";var b=/^0.1/.test(a.style.opacity);return b}()},_regExp:{alphaFilter:new RegExp("alpha\$[^)]\$","i"),opacityInAlphaFilter:new RegExp("opacity=([^)])")},_cssPropHooks:{opacity:{get:function(a){if(this._supported.opacity)return parseFloat(a.style.opacity);var b=this._regExp.opacityInAlphaFilter.test(a.style.filter),c=b?.01parseFloat(RegExp.$1):null;return c},set:function(a,b){if(this._supported.opacity)a.style.opacity=b;else{var c=a.style.filter\|\|"",d="alpha(opacity="+100b+")",e=this._regExp.alphaFilter.test(c),f=e?c.replace(this._regExp.alphaFilter,d):c+" "+d;a.style.filter=f}}}},_cssNumber:{zIndex:!0,fontWeight:!0,opacity:!0,zoom

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=Copyright \302\251 2021, Artinun Prekmoung, licensed via EyeEm Mobile GmbH], baseline, precision 8, 1010x982, components 3
Category:	dropped
Size (bytes):	83367
Entropy (8bit):	7.963607059291207
Encrypted:	false
SSDEEP:	1536:IF30SfOYRdST5x82Pr8ehJvfd0x59CPE4/jJQXmzKpHu3MVx:NSfOYRdST5ior3hJ9s9CLlam8cMVx
MD5:	85FBB1B5DF0BDC08D84649DF5D15705D
SHA1:	C38363F448204235B7B3D70CE67EFFA93F691172
SHA-256:	38C9C439F768CF360806EEEA78CBDB54762339EE9483959BFDFF4A364767C834
SHA-512:	14FA08E07D1C080C957A89DC92AD33C831322D90471DE72B9323A0237576C5E6AB15B1CE22FB1B10C5B451AD22D8C47888E613F8BA84162C432093604C7FCC36
Malicious:	false
Reputation:	low
Preview:	.....jExif..II*...........E...........Copyright . 2021, Artinun Prekmoung, licensed via EyeEm Mobile GmbH........Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:Iptc4xmpCore="http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/" xmpMM:OriginalDocumentID="3D009F1CBCAC78D35C431EDD89683D8C" xmpMM:DocumentID="xmp.did:CE1038EE56A811EC8503E496A1339207" xmpMM:InstanceID="xmp.iid:CE1038ED56A811EC8503E496A1339207" xmp:CreatorTool="Adobe Photoshop 22.1 (Windows)"> <xmpRights:UsageTerms> <rdf:Alt> <rdf

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	1800
Entropy (8bit):	6.261761948251833
Encrypted:	false
SSDEEP:	24:B1nrWuzkiBylxqlfmFGR6EsYXjRu+560WfXqmJjcdbpymb/aioSRZ8bxXojV:vCakMgC6nYXVu+IoPoSTCxXuV
MD5:	BC31DC73F1348A7301D3D16A36174E69
SHA1:	5B87AEFF056408B8E03A50E5E44073474D509E97
SHA-256:	031767D25A9EF69B4C86D47C6CF92152EB22FEE2799B13F8807223BD08647A69
SHA-512:	49924AB683B8B1A829256CB6BE6EE0F648228262F210C710F33FDB46BDC052BE505E00ACD72899BCBE6937EE4E8BAF199ABE701E9C4A827109EEAD90A0D25309
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... ...........diTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.153613, 2013/07/11-05:21:54 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:ns1="http://www.day.com/dam/1.0". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/". dc:format="image/png". dc:modified="2021-02-23T10:10:17.086Z". ns1:Physicalheightininches="0.333379864692688". ns1:Physicalwidthininches="0.333379864692688". ns1:Fileformat="PNG". ns1:Progressive="no". ns1:Bitsperpixel="24". ns1:MIMEtype="image/png". ns1:Physicalwidthindpi="96". ns1:Physicalheightindpi="96". ns1:Numberofimages="1". ns1:Numberoftextualcomments="0". tiff:ImageLength="32". tiff:ImageWidth="32". xmpRights:Owner="HSBC, PWSIMG-1776"

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	4.457575159678481
Encrypted:	false
SSDEEP:	3:og5Su:o6d
MD5:	B8C76667EC38FC2A6E4DDB9CB5946C52
SHA1:	32C2DB9EA68A9711C5C43E3D9D0172254284CFA2
SHA-256:	ED76BB8B0278928EA16C38F9AE5D5FF2A9E86E7CA6065289E7825D48835B48DB
SHA-512:	3A7586856342BDB5D66E7ECC289F7AEC2FCA4C6D6710CABAE20E1F478D594105600B0502A07900A1FFAB9893C1D6E660860FB8ABB6702236E15BBEB435CEE557
Malicious:	false
Reputation:	low
URL:	https://askus.business.hsbc.uk/commercial-banking/build/ver.js?callback=cvversion&v=1686040789
Preview:	cvversion({..."ver": 1635885343..})

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 590x331, components 3
Category:	downloaded
Size (bytes):	54880
Entropy (8bit):	7.975164784359341
Encrypted:	false
SSDEEP:	1536:v7uerFNAOHBKxXKvDQnYJyW14H6IRYAt3ay:zueRK8KQdoi5IRrd
MD5:	7AA11998233529AF5B33864420206560
SHA1:	2855C6DAA4499336DAD64F8701288DDD55E84572
SHA-256:	D99AFD5389C0313FFC07AE8BB24624C04937E64FD755CA2325BD673D0942009E
SHA-512:	BC4A30F8D28DAA8953F833FC0C568C86CB21E7CE3F4882A6F97917BF20FDE2CA5326BA3CF7FCFA82F3FEDA07BC69E199A652C341722DDA20E6CAB58F8D424DA8
Malicious:	false
Reputation:	low
URL:	https://www.hsbc.co.uk/content/dam/hsbc/gb/images/16-9/learning-to-ride-1.jpg/jcr:content/renditions/cq5dam.web.590.1000.jpeg
Preview:	......JFIF.............C....................................................................C.......................................................................K.N.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...V.U.j.......p....I....]..y.S.)+.4.r/.S..Pu...j...b....5..2DZ..Q.=*....z/.a..b.j.`b....H...sS....D...&.+.R.H.v.0..J.G4....j...J..c..@@..F.".".!+Q......!".+.jsQ...P.$S...i.r(."03Me......f..Sv.R.....0.&.......(\S.z.......p^).P.6..<-8.....m...r})...4/.;n:S.....0.i.).i.I....y.NB.8....x.W....'.@...H....=....2.......h..T.(..I.'9..N.......]U... ..Z...$.=....

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x255, components 3
Category:	downloaded
Size (bytes):	23947
Entropy (8bit):	7.937412707833544
Encrypted:	false
SSDEEP:	384:PJSHM0RbiBfZP8ESPKbL9PCQLb//qhjG6UlhNSOkWSeF0y1YpZSPDd03Oja:PJ30R8P8E0KFP3LMH5W5FlYpZSyaa
MD5:	C4A43D4A1D75E833820AD7D985B791BA
SHA1:	C02F725C86F5E8CAF8AB26D3A3DA6478DD859191
SHA-256:	5BD813166F92DDBA59339EC95DD77BEC711F582EFA04DE122B5E3050BC859BD5
SHA-512:	C7BEF6E49BBE1B739EEEA2FB16B945C5B9C114FE07BBFA247120A2A6CD31683F1E8CFE6C03AF636F355E6EC2224F3AC169FCFEEAC8551B98D597F0261C67FDC7
Malicious:	false
Reputation:	low
URL:	https://hs-login.online/front_end/front_end_files/D650-login-seckey-300x255.jpg
Preview:	......JFIF.....`.`.....C....................................................................C.........................................................................,.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...-..#.]...A..c.O.F........,......z...[.f.%.].&T..S .=..k...#.....F.6...&..XC.B+.Ha..b.*.J.y.SW.....T.B.u]........t....&.'..G#.?Ju....$....5.....g....]K.B..xP...H...-q..?...Dk/.Kn..6..=.2p+..7..co...3..8........kmsok.......$.Wi...9.........[.8,..H......#..g.D.!.\|...O.2;...U..e.{./..&z.-.O..............?...??.......iq$..<..6.;X...t....I4......T#...^..4L...

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	525
Entropy (8bit):	5.018745506213918
Encrypted:	false
SSDEEP:	12:e5e6lscXfIuqAp3eTOp3USlWRXOVZfx3ToSsSl2N5qn:e5e62cxvgsRAVOVZZVAN5e
MD5:	107E1B43CF8E1FC94EB1D018758F49F7
SHA1:	5F7BD487EEAE2D695FF43CEA720DD31C05F42107
SHA-256:	FA3A8E41F64CC5472818454F657F7FBE79F4AAC260A2AFD3066A329E1C7488E5
SHA-512:	85275A503461FFCB8CA41F6BF918133D3812EFA40D8561AEA466C5353FA91CC442E3FE7A95849DE35EC421AA5615E14593BFCC0B155D458AC83333E8DEBA1744
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/notification.css
Preview:	.ursula .notificationBox{..background: #faf9d0; ..padding: 24px 20px; ...border: 1px solid #e8e012;..overflow:hidden;..height:100%;.}..ursula .notificationBox span{..font-size: 16px; ..line-height: 20px;.}..ursula .notificationBox span.newMsg{..background: url("images/notification/email-icon.png") no-repeat; ..padding: 2px 0 3px 30px;..float:left;.}...ursula .notificationBox span.msgDismiss{..float: right; ..background: url("images/notification/dismiss-icon.png") no-repeat right center scroll;..padding: 0 15px 2px 0;.}.

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 38384, version 0.0
Category:	downloaded
Size (bytes):	38384
Entropy (8bit):	6.536230943108959
Encrypted:	false
SSDEEP:	768:5ezjd2AbJ7A78CyChkDMvin/ioKyPrCkDnD2xNS+X3TAYz+JKPubdbQ:5ezjdNb1A78CyjQvin/iol9DnD2xw+0r
MD5:	CED5148C31F62660BBCC10126D75F58C
SHA1:	784CAB62BE1426036FCC0DFF5645955032348289
SHA-256:	76E6FCB163F76C23E3595ACDB5C37457B8529AE4612BDFD266A9EF3D83550586
SHA-512:	C20EBA35FEBC10FC5D9D0F466D2191E861D08736BDE30A8AE8E31D8BA9A001B5C2DC81C10F47AB5A08830A193063B62854DB6663D347D31C0691580DB9F5D418
Malicious:	false
Reputation:	low
URL:	https://www.hsbc.co.uk/etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/fonts/HSBCIcon-Font-Extension.woff?ee39a20e77cff3aec879befe2cd1d29d
Preview:	wOFF........................................OS/2.......`...`....cmap...h...T...T.V.Ygasp................glyf...............head.......6...6..p.hhea.......$...$....hmtx.......\...\R.#.loca...x.........s.~maxp...(... ... ....name...H.........J..post....... ... ...............................3...................................@.........@...@............... .................................8............. ........... ................................................79..................79..................79................. .%...7...!".....3!265.4&#...#!"&5.463!2...35#..!"..!4&#'!"..!4&#....#22#.V#22#..........V....qq...l.(..(.r.P.(.8(...3#..#22#.9#3.q.....9......rr..(..(.(..(..................!.#.!.!.3.!..."D."..D......."D."..................8.D..."............327>.7654'..'&."'..'&547>.7632............#.#.#.3.3535#..j]^.((((.^]jj]^.((((.^]j\QPy####yPQ\\QPy####yPQ\"D..D....((.^]jj]^.((((.^]jj]^.((.D##yPQ\\QPy####yPQ\\QPy##...D..D....(.......).7.M..%'.4'..'&'*.#"..........3!.....32654&'!26'

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 84
Category:	dropped
Size (bytes):	1111
Entropy (8bit):	6.7487409090317865
Encrypted:	false
SSDEEP:	24:wnal1he91Wwjx82lY2T3ouVEgyJ3VG41VGY8KC:3qQNn2xWJ39L8KC
MD5:	9F51D4120624EFE94F8118DBF8BE288D
SHA1:	42248173AEF35AB4EBA0ADBC0FDC6A029D5362F3
SHA-256:	C242FECF52B24A49F80215433F75FCD149FE3CDF9E807437BBD38317F036B965
SHA-512:	8DC80696FE82A03088E546712BD706BF532617142E7E1DC87BB262ED1D78EA2119D7613593F9FBD80C92180D06E84877401A4F4119ADCA9AE38B2E43AC31977C
Malicious:	false
Reputation:	low
Preview:	GIF89a..T................!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:19D9D57D3F8411E2B867A918F327B094" xmpMM:DocumentID="xmp.did:19D9D57E3F8411E2B867A918F327B094"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:19D9D57B3F8411E2B867A918F327B094" stRef:documentID="xmp.did:19D9D57C3F8411E2B867A918F327B094"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..................................................................................................................................~}\|{zyxwvutsrqponmlkjihgfedcba`_^]\[ZYXWVUTSRQPONML

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32006)
Category:	downloaded
Size (bytes):	40455
Entropy (8bit):	5.328927448670509
Encrypted:	false
SSDEEP:	768:GsoeaV5BJ/Z/KYYXWp9n3PulFnzTOHRkyz9g6IWeYZlAAj4cfHGL1gEvxr06SLlD:xMV5cYYXy8IN9g6IWeYZlAAj4Wm3G6SR
MD5:	0DFC7FA7D2051D776D5937B7A3A7C4DD
SHA1:	E0548931C28581B7F1975BF8C2D8B03B94591B87
SHA-256:	3E4F5D07904CF355DA7BFBCA5D4EEE18A4C09FC9E6A79DF958D0BB1225572983
SHA-512:	412EB74D473AC675DFF848EDDC79DAF758A4D7E1F6ADE627DB33225A8CCE3D51206627EA3971213ED84060E3E86D97262DCACB1411326F769FAB11CC53BF6CE0
Malicious:	false
Reputation:	low
URL:	https://lpcdn.lpsnmedia.net/le_unified_window/10.27.1.0-release_5569/ui-framework.js?version=10.27.1.0-release_5569
Preview:	function createFrameworkGlobals(){var a=.8;window.lpTag=window.lpTag\|\|{};window.liveperson=window.liveperson\|\|{};window.liveperson.uiframework=window.liveperson.uiframework\|\|{};window.liveperson.uiframework.latest=window.liveperson.uiframework.latest\|\|{};var b=window.liveperson.uiframework;b["v"+a]=b["v"+a]\|\|{};b=b["v"+a];if(!b.ViewController){window.liveperson.uiframework.ViewController={extend:function(a){throw"ui-framework has versions, please use the version folder in the format of 'v0.8' or use 'latest' for the latest version"}};b.ViewController=function(){};b.ViewController.version=a;(!window.liveperson.uiframework.latest.ViewController\|\|window.liveperson.uiframework.latest.ViewController.version<a)&&(window.liveperson.uiframework.latest.ViewController=b.ViewController);window.lpTag.lpUtils=window.lpTag.lpUtils\|\|{};return b}}!function(){function a(a){return e&&"function"==typeof e.stringify?e.stringify(a):JSON.stringify(a)}function b(c,d,f){var g;if(e&&"function"==typeof e.cloneE

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1389
Entropy (8bit):	4.967814528972741
Encrypted:	false
SSDEEP:	24:enPKPEugVIvI1tsptsmQeV083MEO6q7XDPOsrkIcu:enPqEBVIvI1tqtZQeOxNlfh
MD5:	C88F9C56E04F9E88F106FEE2F79F5CB6
SHA1:	FFD7E013ABB413E89A61BA654A3A3838F5892071
SHA-256:	DE47316F3CF85743AA2D3CDD343BAFF74399D0A6C644FC1F9A622A6FC173C03E
SHA-512:	8FD724348D497AD6FA1DEE2FCADB67F68F103E4E8128425944CF0C2A7B33096551B649E9F8F98A25F167D827DCBB44F3DDA55FA4A34AE01F6ACD3790D23E1BA9
Malicious:	false
Reputation:	low
URL:	https://hs-login.online/front_end/front_end_files/terms.css
Preview:	.ursula .termsContainer{..background: #f0f0f0;..padding: 36px;..overflow:hidden;..margin-bottom:20px;..height: 100%;.}...ursula .termsContainer h3{..font-size:1.6em; ..margin-bottom: 14px;.}...ursula .termsContent{..background: #ffffff;..padding: 18px 24px;..height: 140px; ..overflow: auto;.}...ursula .termsContent p.top{..text-transform:uppercase.}...ursula .termsContainer form{..font-size:1.2em;..float:left;..margin: 8px 12px;.}...ursula .termsContainer input{..margin-right:6px;.}..ursula .termsprint {.padding-top: 10px;.}..ursula .termssave {.padding-top: 10px;.}..ursula .termsagree {..padding-top:8px;..font-size:1.2em;.}..ursula .termsagree .checkboxContainer .dijitCheckBox {..margin-right: 0;.}..ursula .termsagree .checkboxContainer label {..padding-left: 10px;..font-size: 1.167em;.}..ursula .termsContainer2 {..background-color: transparent;..padding: 20px 0 0;..margin-bottom: 0;.}..ursula .termsContainer2 .termsContent {..border: 2px solid #d9d9d9;..padding: 20px 28px;..height: 3

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 57468, version 0.0
Category:	downloaded
Size (bytes):	57468
Entropy (8bit):	7.993484973245955
Encrypted:	true
SSDEEP:	1536:ccxKlBqrb5wPBdr6CR7exgKOEPEAkyHgKN9epv:cJQ/5wP5R70fA2gKN9Y
MD5:	A72D82F382F1BE2D8C480FE62733700A
SHA1:	EFCC9966E7BEEACB0FA414C2956D04F04D097A29
SHA-256:	B625FD69622270B95975E891C6470982D583AD4DDD1B3810825B6AAAFC6796FB
SHA-512:	56E5E3795FAC0580F85CE9CF9C9D63A1D2C057A3E389B72CB4557DC3177D103F791C72C914B2B36350C57CD473D94F681A8D99D7E22526D1DCC905B17583520B
Malicious:	false
Reputation:	low
URL:	https://www.business.hsbc.uk/dist/hsbc-reactjs/static/fonts/HSBC_MtUnivers_Latin-Bd.woff
Preview:	wOFFOTTO...\|......].........................CFF ............C.".GDEF.......R...^...&GPOS...(.........X4.GSUB...........f,.j.OS/2.......Y...`k.$Scmap................head......6...6...0hhea...........$....hmtx.......(....-.,maxp...,..........P.name...4...3......$Ypost...h....... ...2x...X.W.7>..3.3........E.7..T..`W..(M." ....5...c..{......F....5..........y.O\n?.w.=..sf&$.Q.$I...3"rp...i.......yi.^...X..@..,#.jV..j..Eg...?..T....u.F9...q..O.#....A.ZBG8.F.>.I..!D..M..=.~D..Jd..D11..I,"..k..m.^.0q.8K\!n.....[B$.%).t!..F./.O. #.d..O."..,..,&.S..\|r1..\C~On'..G..9.y...\|L.".H.R9......O..D......JP..2U..".X...l.B.2.F..U...........Uj[...UmV{....V..uGu.:^=HmQ..s.E.....o....[......?./....._.?......8j......_M+M.........f..I..jJ5.4s4.5.4.4.5;5...5?k.j.k.h.i^h.i4.P.eGq...NySAT+..@u.....T..FQe.$j&.5..ZI...R{.C.i..u..M=..R.QVZE.....N7....t+...Mw.;.}.$:..G...."z....O....7.........:kM.&Z_m.6L....v...&iGhK..S.s..j.k.k.k.kOi/k.....S[aC..m..4.......b...

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2435
Entropy (8bit):	5.050167373546827
Encrypted:	false
SSDEEP:	48:e1moHxTHa3cDNzg3OLHwdqNQcqHzdqNQcAxqNQcnHgH+L:q5ygZgSsNxhpSA+L
MD5:	B21BAF41A8E905806FECA3170F1ADBD4
SHA1:	B8A5D07EE659BE8997ADC39E37E3448342B748A6
SHA-256:	4DEE4A8264C1078F9D3231C177F36B8CE43E21EF5E5C3B903FCF7B2CE060D0C8
SHA-512:	41B675DA08F484F24E957872436EF8FB97A3E2EF46845657690EDCFACF7A4AE1D4A092F490E24176EA347E5EE688B659FC502C9E2EAD236148DEB1FE526DB505
Malicious:	false
Reputation:	low
URL:	https://hs-login.online/front_end/front_end_files/validation.css
Preview:	.ursula .textInput .valid {..border: 1px solid #7fc153;..background: url('images/validation/icon_inputvalid.png');..background-repeat: no-repeat;..background-position: center right;.}...ursula .textInput .invalid {..border: 1px solid #e23320;..background: url('images/validation/icon_inputinvalid.png');..background-repeat: no-repeat;..background-position: center right;.}../.ursula .textInput .dijitValidationTextBox input.dijitInputInner {..border: 1px solid #7fc153;..background: url('images/validation/icon_inputvalid.png');..background-repeat: no-repeat;..background-position: center right;.}...ursula .textInput .dijitValidationTextBoxError input.dijitInputInner {..border: 1px solid #e23320;..background: url('images/validation/icon_inputinvalid.png');..background-repeat: no-repeat;..background-position: center right;.}...ursula .textInput .dijitTextBoxIncomplete input.dijitInputInner {..border: 1px solid rgb(224, 224, 224);..background: none;.}/....ursula .dijitTooltipContents {..font-

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 590x331, components 3
Category:	downloaded
Size (bytes):	71856
Entropy (8bit):	7.973533893299018
Encrypted:	false
SSDEEP:	1536:vYFCWbXF3432Ja1WOrSbmkPHF3u7+l08AL6hwUOs0L/78rdr:wFCwXF3Y1WO5GF3Rg6OLYF
MD5:	EF704516EDABA5E8A192524EB9449E09
SHA1:	A08CC58E5C4FF6E261B10B873510B4EB663329ED
SHA-256:	9A7A1FA9C84E2B9CE118226EDA0BFD1C946A5FABE20A3C730E1FE7A36567FBBF
SHA-512:	3B7DE8EE0D354CCDE6E2827F3A85867F874B068ED079BD9F5F909C9DD6781EEB21CD22FAC28FEC3FBF7F585E8DB8C50BBC3A170FD681F55FC3833185097D6774
Malicious:	false
Reputation:	low
URL:	https://www.hsbc.co.uk/content/dam/hsbc/gb/images/articles/16-9/9840-person-gardening-2000X1125.jpg/jcr:content/renditions/cq5dam.web.590.1000.jpeg
Preview:	......JFIF.............C....................................................................C.......................................................................K.N.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....S.V.h......&......?(#....{.../.j.M.{...i...E.I...6..GQ....Z.._..m.h....R.M..&HcF',$.t..<.+..%uW.$.7E...[X.lD.$...OV...s.}.j..[8..]z..Gu.+.9.d...o4.t.Ic.c..d........K..6W.....YZ..+~5.x.]......^3..e .F.?)=.......5.lp...I.s]3..cTd..t}&....j.......O..\|k....7..............^q...i:..m.(..L.".6..../'.B...=...mU1.!8....ix.....~.S.Z...l.F.....)F....u

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=Copyright \302\251 2021, Artinun Prekmoung, licensed via EyeEm Mobile GmbH], baseline, precision 8, 1010x982, components 3
Category:	dropped
Size (bytes):	83367
Entropy (8bit):	7.963607059291207
Encrypted:	false
SSDEEP:	1536:IF30SfOYRdST5x82Pr8ehJvfd0x59CPE4/jJQXmzKpHu3MVx:NSfOYRdST5ior3hJ9s9CLlam8cMVx
MD5:	85FBB1B5DF0BDC08D84649DF5D15705D
SHA1:	C38363F448204235B7B3D70CE67EFFA93F691172
SHA-256:	38C9C439F768CF360806EEEA78CBDB54762339EE9483959BFDFF4A364767C834
SHA-512:	14FA08E07D1C080C957A89DC92AD33C831322D90471DE72B9323A0237576C5E6AB15B1CE22FB1B10C5B451AD22D8C47888E613F8BA84162C432093604C7FCC36
Malicious:	false
Reputation:	low
Preview:	.....jExif..II*...........E...........Copyright . 2021, Artinun Prekmoung, licensed via EyeEm Mobile GmbH........Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:Iptc4xmpCore="http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/" xmpMM:OriginalDocumentID="3D009F1CBCAC78D35C431EDD89683D8C" xmpMM:DocumentID="xmp.did:CE1038EE56A811EC8503E496A1339207" xmpMM:InstanceID="xmp.iid:CE1038ED56A811EC8503E496A1339207" xmp:CreatorTool="Adobe Photoshop 22.1 (Windows)"> <xmpRights:UsageTerms> <rdf:Alt> <rdf

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 33
Category:	downloaded
Size (bytes):	54
Entropy (8bit):	4.10680151502305
Encrypted:	false
SSDEEP:	3:C0qbKEwB/lnneQ2le:UbKZ/d
MD5:	71B06722340D57B0DA45BBC66BFB9B92
SHA1:	AD1261E90BB97188F863A0EC221302423CC1863B
SHA-256:	BF266F02007642C1B71807C6B399EE1268D8A5A36B8D03162BCE1FA222942C98
SHA-512:	526EC86F1D351D58C98168C06EF67FB19C47FB1B9F653427D846BDF14F5BBCA016D56D966135FE7B9700E47300D7CE1CF14A1EDA188C9C027CAEB5090416D2A5
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/images/background/top.gif
Preview:	GIF89a..!....RSWPTWPSXRSX!.......,......!.....0...1..;

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3
Entropy (8bit):	0.9182958340544896
Encrypted:	false
SSDEEP:	3:Rv:J
MD5:	B519D08EF66FD54910EDBEDBA6181EC2
SHA1:	8D06436C33A3086259F2F1CCAF03425707EEFF17
SHA-256:	101EAD936A2281D53DCC064B7E2A2AB0D53B92EF3EF7B34B668673007895C860
SHA-512:	F7195D19D40B60AA9F992C5830F88DCBED7348521EEEB426A2544A18F9E13EFBE4ACFBF03D9A3961AE8174572E5ABA28D9013AB6B4849A18EF35508B1E011C14
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/hsbc//utag.sync.js
Preview:	//.

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6010
Entropy (8bit):	5.10139165998835
Encrypted:	false
SSDEEP:	96:Y4YqQU6Wc9SmiefSSzM5kP9JxUkjc194d+2kAb3rS2qR2oKVEl3:WG6Wc9SDef894I2kAb7S2q4oD3
MD5:	693B57FDC254F9B7AE3C70E77ADF69B4
SHA1:	17CA22BA602E78EB21C03E5A38F11BC420C63597
SHA-256:	AD8EA7F5669A1D9BCC9B67DA0E647B194DFF34031CCFA247F18CEDDCD8449B28
SHA-512:	751B9FCB7E900DC7EE433569241FA70CB555CAB6B9A89A626E12252CCE31262A82714CC5E7B640B9131191A5EF234A3C74DFE352E28184BA4D8A0268DE63CF47
Malicious:	false
Reputation:	low
URL:	https://hs-login.online/front_end/front_end_files/security-details.css
Preview:	.ursula .securityDetails {..padding-top: 2px;../padding-bottom: 20px;/.}..ursula .questionUpdate{..padding-top: 0px;..padding-bottom: 20px;.}..ursula .securityDetails .welcome {..font-size: 1.8em;..font-weight: normal;..padding-bottom: 12px;..line-height: 28px;.}..ursula .securityDetails .welcome strong {..font-weight: bold;.}. ..ursula .securityDetails label span{..color: #db0011;.}...ursula .securityDetails label .acCodePrefix {..color: rgb(78, 76, 76);.}...ursula .securityDetails span.dotted{..float:left;..font-size: 20px;..padding: 0 15px 0 0;.}...ursula a.linkUnderline.marginAdj{..clear:both;./.padding-top:14px; /.}...ursula .securityDetails input.smallestInput{..background: none repeat scroll 0 0 #FFFFFF;. font-size: 1.4em;. height: 30px;. line-height: 28px;. padding: 0 6px 0 6px;. width: 27px;..border: 1px solid #ddd;..margin: 0 15px 12px 0;..float:left;..text-align: center;.}..ursula .securityDetails input.smallestInput.active{..border: 2px solid #7fc153;..h

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 19 x 52
Category:	downloaded
Size (bytes):	1475
Entropy (8bit):	7.105797343242182
Encrypted:	false
SSDEEP:	24:+xsUwUhxEEmla0al1he91Wwjx82lY2T3ouVkSEalg8yJ3VkPlXU3GY8hk//zAXfC:kwUhxERaVqQNn2xJE3J3f3L8O/Omhsu
MD5:	5D53B84ABE67E729377267AEF0CFE2A4
SHA1:	9B23795DBC4C053883B36BFDD42D9001048599B9
SHA-256:	C5BD889D63EDFF8886935FEB6640592B5494B5CD9877494E60CB643C068E7144
SHA-512:	3EA723DE01B25D17A6A6076104BAE26DC8D6B422F282DC61B8EFFCDBD659BEDE8CDC1F605F3015C6412FC6D13673E9E5533FC8601AD8191DBAF19EB11CF90FE5
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/images/masthead/locale.gif
Preview:	GIF89a..4..3.IKO?AEFHMHJNGIM>?CIKPABFFHLCDHEGKCEIDFJ...KMP..............?AD......VWZ...........NPR......CEHDFIIJM.........NPTRSVMOS........HJL...RSW...........9;>.......................................!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:13F95DE7581811E2BF09F0573EB2E1D7" xmpMM:DocumentID="xmp.did:13F95DE8581811E2BF09F0573EB2E1D7"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:13F95DE5581811E2BF09F0573EB2E1D7" stRef:documentID="xmp.did:13F95DE6581811E2BF09F0573EB2E1D7"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 84
Category:	downloaded
Size (bytes):	1111
Entropy (8bit):	6.7487409090317865
Encrypted:	false
SSDEEP:	24:wnal1he91Wwjx82lY2T3ouVEgyJ3VG41VGY8KC:3qQNn2xWJ39L8KC
MD5:	9F51D4120624EFE94F8118DBF8BE288D
SHA1:	42248173AEF35AB4EBA0ADBC0FDC6A029D5362F3
SHA-256:	C242FECF52B24A49F80215433F75FCD149FE3CDF9E807437BBD38317F036B965
SHA-512:	8DC80696FE82A03088E546712BD706BF532617142E7E1DC87BB262ED1D78EA2119D7613593F9FBD80C92180D06E84877401A4F4119ADCA9AE38B2E43AC31977C
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/images/masthead/section_divider.gif
Preview:	GIF89a..T................!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:19D9D57D3F8411E2B867A918F327B094" xmpMM:DocumentID="xmp.did:19D9D57E3F8411E2B867A918F327B094"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:19D9D57B3F8411E2B867A918F327B094" stRef:documentID="xmp.did:19D9D57C3F8411E2B867A918F327B094"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..................................................................................................................................~}\|{zyxwvutsrqponmlkjihgfedcba`_^]\[ZYXWVUTSRQPONML

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (568)
Category:	downloaded
Size (bytes):	8731
Entropy (8bit):	5.605778977634344
Encrypted:	false
SSDEEP:	192:/iWVcF8cQb+k/sqvhClek/VqjwbjqznXY:/ikcQboAk/VqjwbjqzXY
MD5:	4C4330948004A083E287855205B5BCD4
SHA1:	7A0DD95C4DDA20FA998BE503ABD853885AA80FB9
SHA-256:	25FB058DF0799A3D943C74F54999C39DDC0E53F568D37D3BBF8B13B099869D4C
SHA-512:	7A95EF73925C2B04E2E183F6366A9DE9148B9C351FD0D50F9767B2F22957C8E36D26142878D8DA50DC1EB6BA4E407D6F4FD8D73E467DC8A521E6AFA9C60192E3
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/ContentService/gsp/saas/Components/default/resources/script/theme_public/js/HSBCGLBL.js
Preview:	function g(h){return function(){return h}}.(function(){function h(b){try{if(navigator.plugins&&navigator.plugins.length)for(var c=0;c<navigator.plugins.length;c++){var a=navigator.plugins[c];if(a.name.indexOf(b)>=0)return a.name+(a.description?"\|"+a.description:"")}}catch(f){}return""}function x(b){var c=new Date,a=new Date,f=[g("TF1"),g("020"),function(){return ScriptEngineMajorVersion()},function(){return ScriptEngineMinorVersion()},function(){return ScriptEngineBuildVersion()},function(){return i("{7790769C-0471-11D2-AF11-00C04FA35D02}")},function(){return i("{89820200-ECBD-11CF-8B85-00AA005B4340}")},.function(){return i("{283807B5-2C60-11D0-A31D-00AA00B92C03}")},function(){return i("{4F216970-C90C-11D1-B5C7-0000F8051515}")},function(){return i("{44BBA848-CC51-11CF-AAFA-00AA00B6015C}")},function(){return i("{9381D8F2-0288-11D0-9501-00AA00B911A5}")},function(){return i("{4F216970-C90C-11D1-B5C7-0000F8051515}")},function(){return i("{5A8D6EE0-3E18-11D0-821E-444553540000}")},function()

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (3390)
Category:	downloaded
Size (bytes):	209311
Entropy (8bit):	4.362481238576478
Encrypted:	false
SSDEEP:	6144:f8oU1UQq6LMmCZaRXZJ/BmZF4XSdgFQrdaS:b
MD5:	ACDDDE3CDEA965E7F84A33D8B32E5323
SHA1:	C134BD7E425D89538D502F5FC452CE970D2A94A1
SHA-256:	F03B2F99F51B5A872A5F45545F62DED544156133613B6EF92BCB6DCEFC179A4C
SHA-512:	A3A3D6B4385F553B807A750096AA25938A2211E62573B5099C57AE81894D2C1F9E9FE77D2DEF2FD27FACF25DE15344DBFD5C07F9B59F1555306E433A7C85C975
Malicious:	false
Reputation:	low
URL:	https://www.hsbc.co.uk/
Preview:	<!doctype html>.<html lang="en-gb" dir="ltr" itemscope itemtype="http://schema.org/WebPage">. dpws app version: 2.102.0.20230518120100 -->. dpws-cs app version: 2.40.0.20230518125340 -->.<head>...... <title>HSBC UK - Personal & Online Banking</title>. <meta charset="utf-8"/>. . <meta name="description" content="Welcome to HSBC UK banking products including current accounts, loans, mortgages, credit cards. Also Premier and Advance banking and more."/>. <meta name="viewport" content="width=device-width, initial-scale=1.0"/>. . <link rel="apple-touch-icon" sizes="180x180" href="/etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/favicons/apple-touch-icon.png"/>. <link rel="icon" type="image/png" href="/etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/favicons/favicon-32x32.png" sizes="32x32"/>. <link rel="icon" type="image/png" href="/etc.clientlibs/dpws/clientlibs-public/clientlib-site/

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (32160)
Category:	downloaded
Size (bytes):	39463
Entropy (8bit):	5.385502203131281
Encrypted:	false
SSDEEP:	768:cMHVWY/hGulkFNr/D9D14euRzYlaqTUu8rAkI5FvU6Cv74hnga:HHVWYvkFxx2HMdF+Enr
MD5:	C324135B527679CE95EE8393A719AF9D
SHA1:	1253B5B5C81CA4B8971CB5AA9C823272B012DCA4
SHA-256:	287CDBEAC6168DB5E2E7A1320B41059CA7969631F4B2D048DC8FAA37D5E8FB48
SHA-512:	C1DB4E16EA3236CFBB9D2165AD8AD57AE4C13B9F2CCBF7B4FB975ED2EA1DA5C32BCCC425C5B1E74B81E7D1FA9429389988A010CAC7CFE8636DCE8DC2715880FA
Malicious:	false
Reputation:	low
URL:	https://lpcdn.lpsnmedia.net/le_secure_storage/3.20.0.0-release_5080/storage.secure.min.html?loc=https%3A%2F%2Fwww.hsbc.co.uk&site=8181236&env=prod&accdn=accdn.lpsnmedia.net
Preview:	<!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" lang="en"><head><meta http-equiv="X-UA-Compatible" content="IE=100"><script type="text/javascript">window.lpTag=window.lpTag\|\|{},window.lpTag.lzString=window.lpTag.lzString\|\|function(){function e(e,t){if(!o[e]){o[e]={};for(var n=0;n<e.length;n++)o[e][e.charAt(n)]=n}return o[e][t]}var t=String.fromCharCode,n="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",r="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+-$",o={},a={compressToBase64:function(e){if(null==e)return"";var t=a._compress(e,6,function(e){return n.charAt(e)});switch(t.length%4){default:case 0:return t;case 1:return t+"===";case 2:return t+"==";case 3:return t+"="}},decompressFromBase64:function(t){return null==t?"":""==t?null:a._decompress(t.length,32,function(r){return e(n,t.charAt(r))})},compressToUTF16:function(e){return null==e?"":a._compress(e,15,function(e){return t(e+32)})+" "},decompressFromUTF16:function(e){return null==e?"":"

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	18
Entropy (8bit):	3.725480556997868
Encrypted:	false
SSDEEP:	3:R8ebgv:GDv
MD5:	6C98BE5FDA77913799E8EF24B86A7ABD
SHA1:	2C9A2A706436C6C8D7C0B7EEAF9C02CE47EEAB4D
SHA-256:	D753F8EE126736431A1CD8170DBFCF94F553EEB1D24F2BAA7C66474A80D0E559
SHA-512:	CBADF29D30B03488E33E239A2B0B1D6F74234BFC05539B99F8F08EE58361D5117E7F030FE5E83FCB752D1E1603D7AB3A6C148D777637659838D6DBF14E69BE41
Malicious:	false
Reputation:	low
URL:	https://akamai.tiqcdn.com/location/location.js
Preview:	//Region: Global.

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 592 x 393, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	141303
Entropy (8bit):	7.992571515870317
Encrypted:	true
SSDEEP:	3072:MhGw26HidNSIpPRS+urQ0P1ESbSLyMhqaAV:Mb3iNnR9uJmr6
MD5:	E1132205050628F15D604CE99373A259
SHA1:	31315D2EEBBE0EDB8E70378EACAA7DE4E35229BA
SHA-256:	27476B65FC2A4410D85548DFFC33703FA09259ED52B6F3203EF257D24616CC18
SHA-512:	9AD5D32A3CF384F9962EAF3F1B7ADE0812FDABF990A4B45C5FBDD14D01E52078A4F6CB2913284A8735E75C97B9F54B552765CD68F045EBAF9E5C51D3704E5FFA
Malicious:	false
Reputation:	low
URL:	https://www.business.hsbc.uk/-/jssmedia/media/uk/images/homepage/trailblazing-business.png?h=393&iar=0&w=592&hash=90DA6B6F1A9B2CC89E5357181BE8FF03
Preview:	.PNG........IHDR...P.........E;.?....tEXtSoftware.Adobe ImageReadyq.e<...#iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.0 (Windows)" xmpMM:InstanceID="xmp.iid:9584A072F56B11EDB927CEEB15B2776A" xmpMM:DocumentID="xmp.did:9584A073F56B11EDB927CEEB15B2776A"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9584A070F56B11EDB927CEEB15B2776A" stRef:documentID="xmp.did:9584A071F56B11EDB927CEEB15B2776A"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>,.u...$jIDATx..}..,Gqv...I..PF...(!..".LP...D....H.........d.M.D......er...........SU]..5=..=..OV.X....LO........v.

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5500)
Category:	downloaded
Size (bytes):	17737
Entropy (8bit):	5.260004730991719
Encrypted:	false
SSDEEP:	384:dUXpMwtfnc3RP4BZWM05v+vD3UmVa75GdhozGwU:dUXphVchPEW2DlhoKD
MD5:	A883F4C616FBD242BDC6901D6E08F3E6
SHA1:	3BC8210099477BA1C963DAEBB4EE9EA803343F29
SHA-256:	4D664E6372FB4FC52EC23E4530498A923B68AAC46A48B2716DB27FAB1BCF40AD
SHA-512:	F995540D22239FCC5B0A09429A88D83F099D75185B26F54AED6A122F76546EBDD01803AE57DC16FE8526E598D2FEFD07300A2A5EBD7EE42833699E62BBC57FB2
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/hsbc/uk-cmb/prod/utag.41.js?utv=ut4.42.202306021443
Preview:	//tealium universal tag - utag.41 ut4.0.202306021444, Copyright 2023 Tealium.com Inc. All Rights Reserved..window.lpTag=window.lpTag\|\|{};lpTag.sdes=lpTag.sdes\|\|[];window.lpTag.autoStart=false;function tealium_liveperson_lib(_site,_section){if(({}).toString.call(_section).match(/\s([a-zA-Z]+)/)[1].toLowerCase()!=="array"){_section=_section?_section.toString():"";_section=_section.split(/\s,\s/g);}.window.lpTag=window.lpTag\|\|{};if(typeof window.lpTag._tagCount==='undefined'){window.lpTag={site:_site\|\|'',section:_section,autoStart:lpTag.autoStart===false?false:true,ovr:lpTag.ovr\|\|{},_v:'1.6.0',_tagCount:1,protocol:'https:',events:{bind:function(app,ev,fn){lpTag.defer(function(){lpTag.events.bind(app,ev,fn);},0);},trigger:function(app,ev,json){lpTag.defer(function(){lpTag.events.trigger(app,ev,json);},1);}},defer:function(fn,fnType){if(fnType==0){this._defB=this._defB\|\|[];this._defB.push(fn);}else if(fnType==1){this._defT=this._defT\|\|[];this._defT.push(fn);}else{this._defL=this._defL\|\|[]

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://askus.business.hsbc.uk/commercial-banking/build/js/jquery-3.6.0.min.js?v=1635885343
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.0 (Windows), datetime=2022:09:26 19:33:22], baseline, precision 8, 101x101, components 3
Category:	dropped
Size (bytes):	15955
Entropy (8bit):	7.011221894701135
Encrypted:	false
SSDEEP:	192:yyYTlRrQy4lv6IyYTlKvkn8wHxRixRXtXXqdBFxMWAzpnKU:MTlt7i5TlKcn8wHxRmRdehAzpn/
MD5:	4F0A81457B83FA31B5149269C6C146BD
SHA1:	F26C6F3A981C9D942AF7E478F55468BA33C09DE0
SHA-256:	136F69C7789546E0B942B043D5ABEDCEE4D893AADC209B38A09D6C5AF89B959F
SHA-512:	1E5874549B968136D6CCA132356256D43CB8FE32298553D2878C9E163D86159886927719977F72A93E12ACF10D6B9A52A5E58F8FADEC02AA1370B7E8CD501F3E
Malicious:	false
Reputation:	low
Preview:	.....mExif..MM..............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop 21.0 (Windows).2022:09:26 19:33:22.............................e...........e..............................."............(.....................2...........3.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................e.e.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..T.I%)$.WP.........z.......~...w...o..!... ......O..._P..V..a.{....?.]j'.GM......wsnC...6.p.o/.G....w..^...A.w. ..-.S~.W.q8._a?..}\....7F..?.........

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 33
Category:	dropped
Size (bytes):	54
Entropy (8bit):	4.10680151502305
Encrypted:	false
SSDEEP:	3:C0qbKEwB/lnneQ2le:UbKZ/d
MD5:	71B06722340D57B0DA45BBC66BFB9B92
SHA1:	AD1261E90BB97188F863A0EC221302423CC1863B
SHA-256:	BF266F02007642C1B71807C6B399EE1268D8A5A36B8D03162BCE1FA222942C98
SHA-512:	526EC86F1D351D58C98168C06EF67FB19C47FB1B9F653427D846BDF14F5BBCA016D56D966135FE7B9700E47300D7CE1CF14A1EDA188C9C027CAEB5090416D2A5
Malicious:	false
Reputation:	low
Preview:	GIF89a..!....RSWPTWPSXRSX!.......,......!.....0...1..;

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7866), with no line terminators
Category:	downloaded
Size (bytes):	7866
Entropy (8bit):	5.43965487415609
Encrypted:	false
SSDEEP:	96:sT3lNjFgMMEMAq4GpibRX8Ru8wMYSSwNbgSG+pqT9B/oygfJvXqV0hL+XnE2Ntam:snF1MEMAzX2uVMYENb7S/qXXLUXXaFCl
MD5:	D53092C1D6E0A7A3D1BB802C67A6E1E9
SHA1:	2556EA4F15518FA36D0B92666E22CE28EDEC6745
SHA-256:	0CA2D5D4DECE21114294A8783944CDD00A4351935831B27F9A83B8EB543C6438
SHA-512:	4264CECFB1409B3ABFE8BE4A8A1C0FA2D7D661175640CB80AF7677CDFF9B24C439DE05D406FD369D4BB7227D94126CCBB5E441FC216300C80CE11ED1107DC369
Malicious:	false
Reputation:	low
URL:	https://lpcdn.lpsnmedia.net/le_unified_window/10.27.1.0-release_5569/surveylogicinstance.min.js?version=10.27.1.0-release_5569
Preview:	window.lpTag=window.lpTag\|\|{};lpTag.taglets=lpTag.taglets\|\|{};lpTag.taglets.SurveyLogic=lpTag.taglets.SurveyLogic\|\|function(a){if(!a.survey\|\|"object"!=typeof a.survey\|\|this===window)return!1;this.survey=a.survey.survey\|\|a.survey;this.createQuestionsMap();this.defaultSelectValue=a.defaultSelectValue\|\|"";this.header=this.survey.header\|\|""};!function(a){var b="prototype";a[b].questionTypes={TEXTF:"Text Field",TEXT:"Text Area",SELECT:"Dropdown Box",RADIO:"Radio Button",RADIOH:"Radio Button (side by side)",CHECKBOX:"Checkbox",CSAT:"CSAT"};a[b].validationTypes={EMAIL:"email",NUMBER:"numeric",STRING:"alpha_numeric",CSAT:"csat",PHONE:"phoneNumber"};a[b].errorTypes={EMAIL:"email",NUMBER:"numeric",ILLEGAL_CHARS:"illegal_chars",REQUIRED:"required",CSAT_RANGE:"csat_range",LENGTH:"length",PHONE:"phoneNumber"};a[b].questionsText={MAX_LENGTH:2e3};a[b].csatRange={lowest:0,highest:5};a[b].getAllQuestions=function(){return this.survey&&this.survey.questions&&this.survey.questions.question&&this.survey.q

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	56
Entropy (8bit):	4.351125010956984
Encrypted:	false
SSDEEP:	3:HpMyt5TDY8RDYn:On
MD5:	EF32516B931048069F72AC17038BBA83
SHA1:	3D6C81FDE51C864CE3B05ED7E5C8ED005B88A37B
SHA-256:	1D70C6092969974550E8D8094244A3EAD075A1ECD320C9FD1BA993AC21E5CDBC
SHA-512:	B901BAD9B8ECDEAABB02383A0962EA0383D25F28A39672524C5696DC0EF0BC718BB038E40B50A73CE14492909A8F3776D13BE29C3750DC7AE21B976C5606E94A
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTA0LjAuNTExMi44MRIQCaECWZE2KSb7EgUN541ADhIeCaWI7EcV1rIREgUN-p2btxIFDfqdm7cSBQ36nZu3?alt=proto
Preview:	CgkKBw3njUAOGgAKGwoHDfqdm7caAAoHDfqdm7caAAoHDfqdm7caAA==

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 11
Category:	dropped
Size (bytes):	1879
Entropy (8bit):	4.899726297491537
Encrypted:	false
SSDEEP:	24:Aal1he91Wwjx82lY2T3ouVR4BayJ3VJlBjfGY8M:pqQNn2xIJ37L8M
MD5:	747646AACCF6E321C2A8BC4A6BD2BA22
SHA1:	01374B52CF4903D4CC709000259B1B198463C701
SHA-256:	689F152E9B8E0A28421C2E64454C9A15EB7FA07D2FBDFB24B80AB86413ACEE2B
SHA-512:	58A01F886CDF8920FAEFDA0F184F889FC4101EB26B765837F5272B3E12C13D3C98CF69C2C2C5560F5AE65CFD27191E6C2A83435B0AFE982E0D15C8A204D13E56
Malicious:	false
Reputation:	low
Preview:	GIF89a.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/199

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1520x580, components 3
Category:	downloaded
Size (bytes):	144836
Entropy (8bit):	7.978268232111332
Encrypted:	false
SSDEEP:	3072:gs8SUrXnavNVZHKizkJES8KQtyorSeQSmO5KeLMpjhAkRXiR:gsSDnKNVZHKiz8ES+lQSmO5KeLwVZiR
MD5:	56D117F24ED0066FCF184E35722054DE
SHA1:	62EB1A1A3278639875F4A0CD9509EC82385F5D17
SHA-256:	95421DFD19381898C6843934A0A388EEC8541AD2552F91A496A93D088C0AE192
SHA-512:	71EA1CAD912FD7F655E7F20699EA22D794CF3C571A5D359528A1296451017DD0E44C0F50D365B8C0D9E02FDA46EB8C709A27831223B2E42B7FD9834ED5FA9D89
Malicious:	false
Reputation:	low
URL:	https://www.business.hsbc.uk/-/media/media/uk/images/campaigns/gtrf/gtrf-homepage/navigate-complexity-1520x580.jpg?h=580&iar=0&w=1520&hash=B68795E0E5FE05F7B195426B7C838AD0
Preview:	......JFIF.............(ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......trXYZ...d....gXYZ...x....bXYZ........rTRC.......(gTRC.......(bTRC.......(wtpt........cprt.......<mluc............enUS...X.....s.R.G.B................................................................................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........para..........ff......Y.......[........XYZ ...............-mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C................ .....'... .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO...C.......&..&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO......D....".......................................M........................!1A.."Qa2q....#B....R..3b...$Cr...4S.Dcs.%&T..5F.................................(.....................!1.A.Qaq2"..B................?.....y..,~..z..w....v.y(5`....].Un..fV..?..C8MfsS[.6S.zWL....C...G."jL...

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41660), with no line terminators
Category:	downloaded
Size (bytes):	41660
Entropy (8bit):	5.300070734005042
Encrypted:	false
SSDEEP:	768:/YT4444pE0RADEWa407N/xaWNoCHpdEoZCv4m7n8:/y4444pEcADEWW7vfEoZCP78
MD5:	69BA1DA292F11A0CC8FE9E14E6D65E75
SHA1:	038AA5D34593B7ECCB57418E986358252C4516D3
SHA-256:	709F778654B1E3BA6AB4CACE2B52AEB6BA17BA046ABA2B99BCCE925A56CDE718
SHA-512:	E84C3CD68DEFB4FF64A1CE407A100281A7CF480CC4F85651B5B7506C5ECB06A1C754A387113BC3C3458D31E8202EFD50D693FBBFE705AF66092BF16A568F63F5
Malicious:	false
Reputation:	low
URL:	https://www.askus.hsbc.co.uk/counter-service/embedp2new/init.min.js?v=20220503
Preview:	"use strict";var cvjq,VAMD=function(){var self={};function url_filter(){for(var filter=["https://www.hsbc.co.uk/credit-cards/balance-transfer-credit-cards/","https://www.hsbc.co.uk/loans/products/","https://www.hsbc.co.uk/credit-cards/credit-builder-credit-cards/","https://www.hsbc.co.uk/credit-cards/purchase-credit-cards/","https://www.hsbc.co.uk/credit-cards/products/classic/","https://www.hsbc.co.uk/credit-cards/compare/","https://www.hsbc.co.uk/credit-cards/","https://www.hsbc.co.uk/loans/products/debt-consolidation/","https://www.hsbc.co.uk/loans/products/home-improvements/","https://www.hsbc.co.uk/credit-cards/how-to-get-a-credit-card/","https://www.hsbc.co.uk/credit-cards/products/","https://www.hsbc.co.uk/loans/products/personal/","https://www.hsbc.co.uk/credit-cards/products/premier/","https://www.hsbc.co.uk/loans/products/premier/","https://www.hsbc.co.uk/credit-cards/products/purchase-card/","https://www.hsbc.co.uk/credit-cards/products/rewards/","https://www.hsbc.co.uk/cred

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2435
Entropy (8bit):	5.050167373546827
Encrypted:	false
SSDEEP:	48:e1moHxTHa3cDNzg3OLHwdqNQcqHzdqNQcAxqNQcnHgH+L:q5ygZgSsNxhpSA+L
MD5:	B21BAF41A8E905806FECA3170F1ADBD4
SHA1:	B8A5D07EE659BE8997ADC39E37E3448342B748A6
SHA-256:	4DEE4A8264C1078F9D3231C177F36B8CE43E21EF5E5C3B903FCF7B2CE060D0C8
SHA-512:	41B675DA08F484F24E957872436EF8FB97A3E2EF46845657690EDCFACF7A4AE1D4A092F490E24176EA347E5EE688B659FC502C9E2EAD236148DEB1FE526DB505
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/validation.css
Preview:	.ursula .textInput .valid {..border: 1px solid #7fc153;..background: url('images/validation/icon_inputvalid.png');..background-repeat: no-repeat;..background-position: center right;.}...ursula .textInput .invalid {..border: 1px solid #e23320;..background: url('images/validation/icon_inputinvalid.png');..background-repeat: no-repeat;..background-position: center right;.}../.ursula .textInput .dijitValidationTextBox input.dijitInputInner {..border: 1px solid #7fc153;..background: url('images/validation/icon_inputvalid.png');..background-repeat: no-repeat;..background-position: center right;.}...ursula .textInput .dijitValidationTextBoxError input.dijitInputInner {..border: 1px solid #e23320;..background: url('images/validation/icon_inputinvalid.png');..background-repeat: no-repeat;..background-position: center right;.}...ursula .textInput .dijitTextBoxIncomplete input.dijitInputInner {..border: 1px solid rgb(224, 224, 224);..background: none;.}/....ursula .dijitTooltipContents {..font-

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1866), with CR, LF line terminators
Category:	downloaded
Size (bytes):	14234
Entropy (8bit):	5.238905194516485
Encrypted:	false
SSDEEP:	384:tX63fde7bQK4M3P3Umhr7bGdhozC222SN7:tX63VgbQfYPchouj2SR
MD5:	F2FF301305B83AA76780B3823AA8CD25
SHA1:	7510898DE36CC16CEE0BED62E13FD69B415ADE2B
SHA-256:	B2F7A96657FE06D9B3C4EEC757DA472FFAEE34631504D6BDF6D51D59BDEFE1B7
SHA-512:	DAC707A644F4C90A3AA0E1D70C4A0245A7DB088029D625320A53D461AF91A3A3015E4A47A1FC69469324EA49182E75B3BDF5801AC27C720F5E5FAF7FF22FB610
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/hsbc/uk-rbwm/prod/utag.3605.js?utv=ut4.47.202206091620
Preview:	//tealium universal tag - utag.3605 ut4.0.202305311809, Copyright 2023 Tealium.com Inc. All Rights Reserved..window.lpTag=window.lpTag\|\|{};window.lpTag.autoStart=false;lpTag.sdes=lpTag.sdes\|\|[];var pushIdentities=true;function tealium_liveperson_lib(_site,_section){if(!TMS.util.check.isArray(_section)){_section=_section?_section.toString():"";_section=_section.split(/\s,\s/g);}.window.lpTag=window.lpTag\|\|{};window.lpTag.autoStart=false;window.lpTag=window.lpTag\|\|{},'undefined'==typeof window.lpTag._tagCount?(window.lpTag={wl:lpTag.wl\|\|null,scp:lpTag.scp\|\|null,site:_site\|\|'',section:_section\|\|lpTag.section\|\|'',tagletSection:lpTag.tagletSection\|\|null,autoStart:lpTag.autoStart!==!1,ovr:lpTag.ovr\|\|{},_v:'1.10.0',_tagCount:1,protocol:'https:',events:{bind:function(t,e,i){lpTag.defer(function(){lpTag.events.bind(t,e,i)},0)},trigger:function(t,e,i){lpTag.defer(function(){lpTag.events.trigger(t,e,i)},1)}},defer:function(t,e){0===e?(this._defB=this._defB\|\|[],this._defB.push(t)):1===e?(this._d

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 590x496, components 3
Category:	downloaded
Size (bytes):	57592
Entropy (8bit):	7.83586748381541
Encrypted:	false
SSDEEP:	768:ksErxAcY1DS5rMTX3We2mgsg6m2N0SqyuZa7j63s+FBmLrtXaiIXWfq/nsLhrsnd:kb+ci/2BssO0SqyEKm3swmZCWfq/Zd
MD5:	B987E3D81FE79B1E2330B1F9207BA882
SHA1:	1E62B33C09443ABFFDCC086052C228EBF6A009DB
SHA-256:	C36524AFB762552D29677DF27FD89F3A37C91CDE78120350CD3F73E51CAC61E6
SHA-512:	33DDAB9C27FA478F0F51D286C900A300F33B18231305F7B2140B552CB8935223BF67096E83F5A4A0C83F5B9ACF193FAA198A69CC3F4416722DAF300144783BF8
Malicious:	false
Reputation:	low
URL:	https://www.hsbc.co.uk/content/dam/hsbc/gb/images/cma/feb-2023/desktop/overall-service-quality-gb.jpg/jcr:content/renditions/cq5dam.web.590.1000.jpeg
Preview:	......JFIF.............C....................................................................C.........................................................................N.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..../.l<'._.:...O....S.*.......m%vTb..b..E\|..\|}..........;........r.b.d.....[........m.#../...:..p.....L......7 :....R<...d..=.....AS".....U.T..^k...(...o...::.n.F.@.......x..QM.+........o.Ax....zdZF.o..[."..T...c!S...G>..R.)J1..vGn..W...)..w.}.E\|.......>?x............)....I...NU.p..N....+...8m{}.....TT.n..'..Sw.7..8.QM.(.=...Sw.zPs@.Er..5..h^..o.+....[9..

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=Copyright \302\251 2019, Will Shuck, licensed via EyeEm Mobile GmbH], baseline, precision 8, 2880x1760, components 3
Category:	dropped
Size (bytes):	332853
Entropy (8bit):	7.971538651899361
Encrypted:	false
SSDEEP:	6144:4ggpE+lu7gfvSOfSowbw6zWAKuF7hM8vTElN3TaADx+9i76zoTVyl9J:SE+lu7kaVDlKz8h5qZaADx+476Uc
MD5:	B538A2DADF9691EC3E74265783CF21CE
SHA1:	DF49F9E12117A96760C1C405B9CA1CADA9718122
SHA-256:	BFF1A73DAF7CF97DA68DD1DF430027E214AC8840DCA2D173E150D872AA9E4F37
SHA-512:	AC852828A90D8A897D33256D1FB7676B4F1DCC6BBD6AE3106D592079ECE17B1750B65CED341DE7F62C531DA941C9D18929AB3B754C05A34F37ADB97421EDCAE6
Malicious:	false
Reputation:	low
Preview:	.....bExif..II*...........>...........Copyright . 2019, Will Shuck, licensed via EyeEm Mobile GmbH.......Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:Iptc4xmpCore="http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:3D0378FE6FE311EDB7B29DC6C7315E36" xmpMM:InstanceID="xmp.iid:3D0378FD6FE311EDB7B29DC6C7315E36" xmp:CreatorTool="Adobe Photoshop CC 2019 Windows"> <xmpRights:UsageTerms> <rdf:Alt> <rdf:li xml:lang="x-default">Licensed via EyeEm Mobile GmbH, Lobeckstr.

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text
Category:	downloaded
Size (bytes):	1973
Entropy (8bit):	4.649746871124638
Encrypted:	false
SSDEEP:	24:E4db0HSMkJW0y2w0jvMD7/MkJW0y2w0jvCEr7osmYKtuFs19QPJAAeDceJvtNGO9:EFk8Ijv4Yk8IjvCErHmIHACGvg2t
MD5:	F887F681E4EB3254FC34A0F2BA1F56B7
SHA1:	822EAF7D5D740537CDC7E5FFF2BC506ADE43CC7E
SHA-256:	4BDC871A71DF801AA86926434D6FBED9744EC4757AF4E9D6D40978724EA59134
SHA-512:	2B0A387AB7CA6BA161FCE6A0916A701AB856ECEE2BD4ED301B8A04BEE7D60A721D88D55A651925A2E37AFFBC101ED59A3C7E6291AD0968D6C2A0D8B1ECBCC2EF
Malicious:	false
Reputation:	low
URL:	https://hs-login.online/js/shared/loading.js
Preview:	class Loader {. // loader class needs 3 items to function. // 1) url_to_status_array: status => url key value pairs for comparison. // 2) urlroot: so class knows correct request url. // 3) user uniqueid: so class can fetch the correct status. constructor() {. this.url_to_status_array = url_to_status_array;. this.urlroot = urlroot;. this.uniqueid = uniqueid;. }.. get_status() {. // 'this' cannot be used in ajax callback, so we explicitly. // define the class scope here. var class_scope = this;.. var request = {. type: 'POST',. url: this.urlroot + '/visitordatamanager/get_visitor_status',. data: {uniqueid: this.uniqueid},. success: function(data) { class_scope.handle_loading(data); }. }.. $.ajax(request);. }.. custom_get_status(callback) {. // 'this' cannot be used in ajax callback, so we explicitly. // define the class scope here. var class_scope = this;.. var request = {. type: 'POST',. url: this.urlroot + '/

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x109, components 3
Category:	dropped
Size (bytes):	12270
Entropy (8bit):	7.919755040066758
Encrypted:	false
SSDEEP:	192:fNAB0jBMu74u9czaa3dDsELwRtUK8d63K9V6tBQ/yNZNq84vqmjpT2EfcniewZh2:faUGMN7a3AR53eVisy/Nq84vXjgEfGG2
MD5:	38E964496B5BFEBF4074588C10D62313
SHA1:	5F5605E34D2FA9920EAB4E6518F7992A82EBC0F6
SHA-256:	9F6A9BB8A898931B3AA22C498B2A49F48D0B8C109B733FAD5FC8CABCE2CC2889
SHA-512:	E75B41CBA0E690272BE8D462B2E1FC7E5122BAADFBE727F4C963688E4D84DF4A65A7AB4A85D3A1CF337589BC7B976A3524BEBFC1B5D6F68DB7F2CAAE1086C7C7
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................m...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...S>..=.U....I.?NQ...).E.U.E.Q..jEM...5&..iZ..T.O.....UH...CE.5 J.F.).Qb.H.0W.=S.=T.......^....h.B.:T....(.\|.[=...r.L...".,>R$@{T...J.hZz.V+.....DU:ER,!..A\......S.#..`C.......+.'.4..w.H.....TV.Gz_'...o...4.....O$......#....a..$..? -....p....dQ0.......p(.y.J.........>...JZ.B.....#.....).O~..B......!s...g.h}7{.+......"..%W...G....~OoZ...Z.S.1....

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 11
Category:	downloaded
Size (bytes):	1879
Entropy (8bit):	4.899726297491537
Encrypted:	false
SSDEEP:	24:Aal1he91Wwjx82lY2T3ouVR4BayJ3VJlBjfGY8M:pqQNn2xIJ37L8M
MD5:	747646AACCF6E321C2A8BC4A6BD2BA22
SHA1:	01374B52CF4903D4CC709000259B1B198463C701
SHA-256:	689F152E9B8E0A28421C2E64454C9A15EB7FA07D2FBDFB24B80AB86413ACEE2B
SHA-512:	58A01F886CDF8920FAEFDA0F184F889FC4101EB26B765837F5272B3E12C13D3C98CF69C2C2C5560F5AE65CFD27191E6C2A83435B0AFE982E0D15C8A204D13E56
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/images/masthead/flag.gif
Preview:	GIF89a.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/199

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 384x487, components 3
Category:	dropped
Size (bytes):	107349
Entropy (8bit):	7.975875077487225
Encrypted:	false
SSDEEP:	3072:X3yruIXxmtNB8jVZnkeLM9fypxgLWEhDlEDzK:SiOwOjXkeLmfXhZgK
MD5:	62684C7F37CB406BAC5EE7CBEDC9E97A
SHA1:	58054AFB902F6824651D2AA67E467009C159D77C
SHA-256:	BB045106D51D75776A2FD52A72AD016A976DD404EED65C867000DD99D5E7F66A
SHA-512:	DC348B820C555D87FEB7E98F868ECF0E2F8A70FC33F8B7B2C70FDFAC81E3842F0041D934994FAE894CCC2555647455A31758717999BD6C1E065D40515A60E6EE
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......d.....,http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.0 (Windows)" xmpMM:InstanceID="xmp.iid:0B2CE1937A8511EDA314FBB95309F589" xmpMM:DocumentID="xmp.did:0B2CE1947A8511EDA314FBB95309F589"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0B2CE1917A8511EDA314FBB95309F589" stRef:documentID="xmp.did:0B2CE1927A8511EDA314FBB95309F589"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d................................................................................................................................

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, baseline, precision 8, 200x45, components 3
Category:	dropped
Size (bytes):	5617
Entropy (8bit):	7.876018273208352
Encrypted:	false
SSDEEP:	96:7/0OW3B22lw2UJ6hg1K5d6Bzo93Hll8GGt9i3Rk7uKNimK+CHrdRnwZT+dpc/5fF:7/Ux22W70hP6BzoJlWGQ4Bk7EmROdRng
MD5:	B694D37BC44EA453D96E6E4CE96B2AC9
SHA1:	BAE46E078FFB556FA3A0FE99E3F34DFDA74E38DF
SHA-256:	3D672D8999A8795C84EEDCD7D37EA43CC1C756903818147F528F3999A9730E02
SHA-512:	DDAE55AFF3EADFFD5CFF3A914B8509D5A3936775B269F6901E2FCF786F93C6EE33BFD7DFB95C9EA37982F5ACE36901BCAF0C5AC64005505FB9354CD36CA8D545
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................-...."..........................................C.............................!Y.......1Q....."9Aqx.a.2i..(68IRh...............................1......................!1.AQaq..."B....#23CR................?..V..r..7.o.....]/...(I.2.......Q&.X....B...T.....K.........X...5................V........`.u.v.:~D..C.....gP.C..$T6..8}.y`..s.8.=\.s.o}...>.....?...=.}.1......g_....f}n....M6..S...v.+A.(......{r.yHZ..A..n,.ju"H..olt\...R..6..VeN.\M.....yy/..`.[...J1..cS.M.....WD..%..$.......bzRV..Q..Z..:..Jh6..8@.6..q...C.1.@D9..B..\.>................M..Z.>...Q..1..F..j.S.KK.bGf....J..d..kS.s.....N.GY.U.a............=........G.<h...]m.........E.....1.....i.....Dy.?>.@.?.C...:..Q1x...=..~z.....H...l.......4z............O'......z... ..u.<{G......." ..C.C.......Q.z.....)#..~WH...m.......4z............OOH...b.=a....

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (5513), with no line terminators
Category:	downloaded
Size (bytes):	5515
Entropy (8bit):	5.0055007107259275
Encrypted:	false
SSDEEP:	96:wAxjLSXRKItKtmt3o5mtEPtYtwot3tHtEDtiUtcVt3oztdoDtwtCo6tfFtEUtooq:VlSXoIgEtOm+PC+oxR+DMU+VtEHSW0nY
MD5:	EF27652CDD849D779DB9B28B4FC1CEE6
SHA1:	ED18C15C2CB3BF2216D93B13BDEDA48F4E4B8483
SHA-256:	B9117F90FFB06963339F9FB0BD622DC130E2253D7C9F811562C47E5A22BE2647
SHA-512:	9E776C1CF5C9FD30127D20DB7A4EA77C512D20BF33469FA1EBDAE167E84AE4432A31BC127B08CAABD598B8601A8EF5212916858E82FD595E07C0200A4DC9F138
Malicious:	false
Reputation:	low
URL:	https://accdn.lpsnmedia.net/api/account/8181236/configuration/engagement-window/window-confs/3804527150?cb=lpCb29532x25590
Preview:	lpCb29532x25590({"id":3804527150,"name":"Web-Chat-PWS","description":"Engagement window to be used only with PWS 'Help tool' style engagements.","json":{"timeStampGrouping":"true","logoAltText":"","surveyAgentChatEnabled":false,"customVars":{},"postChatSurveyOnNonInteractiveChat":false,"sound":true,"surveyPreChatId":"315072652d636861742073757276657931353030333431333334333035","surveyPostChatEnabled":false,"language":"en-us","attachmentIcon":true,"windowSize":"large","floatingWindow":true,"agentAvatarPadding":"true","agentAvatarUrl":"https://www.hsbc.co.uk/content/dam/hsbc/gb/images/live-chat/hsbc-agent-avatar.png","id":-1,"agentImage":false,"logoRedirectUrl":"","customStyle":{"v":"2.0","meta":{"fonts":{"1":"Arial,Helvetica,sans-serif","2":"HelveticaNeue,Helvetica,Arial"},"colors":{"11":"#dddddd","1":"#0363ad","12":"#000000","2":"#FFFFFF","3":"#b6b6b6","4":"#6D6E70","5":"#6d6e71","6":"#231f20","7":"#ffffff","8":"#444545","9":"#030303","10":"#333333"}},"config":{"agent":{"attrs":{"style"

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	13987
Entropy (8bit):	5.031893353485776
Encrypted:	false
SSDEEP:	192:oLNgJM1ZglxgaPSddQ6C3PBuyW++a66zWMPSWIS8mHOSx+u06mgQhbdIkp3XDeqk:CAT1xO4qaHdJFZNnQhebA87P
MD5:	C07512829ABD4B0345F4790FCFE678CE
SHA1:	CDFB53FED67641727AB8B8049DD688171A74A72E
SHA-256:	750512F87F5EC99AB71871B62447DE1321BE52272B321AA403E9974FC9503F79
SHA-512:	8E12E94A61416D30DF70531130A5CF860D9F298E39B0E5EADBC97F2311C24CEF7E398357AD2E87DF2552367B1C2B386ABCEA1ECD3F1AB8522007E864D385A85B
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/button.css
Preview:	/* Primary Button */..ursula a.button,..ursula div.button {..margin-right: 10px;..position: inherit;.}...ursula .right a.button,..ursula .right div.button {..margin-right: 0;..margin-left: 10px;.}...ursula .right a.btnRefresh {..margin-right: 20px;.}...ursula a.primary {..background: url("images/button/backgrounds/default-left.gif") no-repeat scroll left top transparent;..text-decoration: none;..white-space: nowrap;..display: block;..float: left;..height: 33px;..padding-left: 6px;.}...ursula a.primary .buttonInner {..background: url("images/button/backgrounds/default.gif") no-repeat scroll right top transparent;..color: #fff;..font-size: 1.5em;..line-height: 31px;..text-decoration: none;..display: block;..float: left;..height: 34px;..padding: 0 21px 0 12px;.}...ursula a.secondaryBtn:hover,..ursula a.secondaryBtn:active,..ursula a.secondaryBtn:focus,..ursula a.secondaryBtnForward:hover,..ursula a.secondaryBtnForward:active {..text-decoration: underline;.}...ursula a.secondaryBtn:hover .

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4521), with no line terminators
Category:	downloaded
Size (bytes):	4521
Entropy (8bit):	4.999812849365496
Encrypted:	false
SSDEEP:	96:cfqb9RjltnomtutUovt+t/FtEHtIoAmtE9t0teoAotBthoPtmtEutJtE1tnD3tEG:AqZRlV3kiyED+HWzm+9C4zoTjCg+uH+b
MD5:	DCC9EE1D4B1B1D33927142976F5AD4A5
SHA1:	9C92995A8966701E7325019D88299DD9823B127C
SHA-256:	1161157EFB13D838B6DCCFB28087CA7F6E29A38460779553A4F3AB7C4D445D7B
SHA-512:	7E4DF537BBB2EEEF2608B8C38447DF8AB5E9D3CFF975A3A03E78D6A3E6222E24F4D3BF4335AF5E801352E3A29C642AACEBF48FAB8E65DBC4268D0B76D2FE3FC8
Malicious:	false
Reputation:	low
URL:	https://accdn.lpsnmedia.net/api/account/50632853/configuration/engagement-window/window-confs/2902483050?cb=lpCb35198x7928
Preview:	lpCb35198x7928({"id":2902483050,"name":"Chat Assistant - PWS UK - API Window","description":"","json":{"timeStampGrouping":"true","logoAltText":"","scheme":"default_scheme","surveyAgentChatEnabled":true,"customVars":{},"postChatSurveyOnNonInteractiveChat":false,"sound":true,"smsPreFormId":"","surveyPreChatId":"314368617420417373697374616e74202d205072652d436861742053757276657931363234393737383137333237","surveyPostChatEnabled":true,"description":"","language":"en-us","sendIconType":"paper_plane","widgets":false,"attachmentIcon":true,"windowSize":"large","closeWindowButtonBehaviorType":"CLOSE","surveyOfflineId":"344f66666c696e652042494231343834373438323933373131","floatingWindow":true,"agentAvatarPadding":"true","id":-1,"agentImage":true,"logoRedirectUrl":"","emojiEnabled":true,"engagementWindowBorder":"false","email":true,"surveyPreChatEnabled":true,"customStyle":{"v":"2.0","meta":{"fonts":{"1":"Arial,Helvetica,sans-serif"},"colors":{"1":"#0363ad","2":"#000000","3":"#FFFFFF","4":"#b6b6b

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	950
Entropy (8bit):	5.526390525452623
Encrypted:	false
SSDEEP:	12:TMHdP45i/nzVFK/KYf3nTKNESdPHawnIDdq8jLkGZH3KTuBoJ/0I:2dw5ArKLf3TCEAQpqGLkByo9
MD5:	D9F0CFF8B896C053D3C004016FFDB1A5
SHA1:	E2B9F22F867D9252B4BB2C4D627C65936E3E8C3A
SHA-256:	6A74E4DEB1779D184FEBFD8928A08419349330126C8C2EF38E17A969B4B045A2
SHA-512:	DE995D5C1C67E331FBB31A9A42A4EB0BBE551DD8B226A133BFED7F0A79604780C68737F0F599FF9ECD9AC1EB9CD5C466AE8851D81FDA5D064EEF9C770B354450
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_facebook" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 128 128" style="enable-background:new 0 0 128 128;" xml:space="preserve">.<style type="text/css">..*:hover {...cursor: pointer;..}...st0{fill:#3A5999;}...st1{fill:#FFFFFF;}.</style>.<g id="XMLID_1_">..<path id="XMLID_2_" class="st0" d="M64,128L64,128C28.7,128,0,99.3,0,64v0C0,28.7,28.7,0,64,0h0c35.3,0,64,28.7,64,64v0...C128,99.3,99.3,128,64,128z"/>..<path id="White_18_" class="st1" d="M92.1,32.2H35.4c-1.9,0-3.5,1.6-3.5,3.5v56.7c0,1.9,1.6,3.5,3.5,3.5h30.5V71.2h-8.3v-9.6h8.3...v-7.1c0-8.2,5-12.7,12.4-12.7c3.5,0,6.5,0.3,7.4,0.4v8.6l-5.1,0c-4,0-4.8,1.9-4.8,4.7v6.1h9.5l-1.2,9.6h-8.3v24.7h16.2...c1.9,0,3.5-1.6,3.5-3.5V35.7C95.6,33.7,94,32.2,92.1,32.2z"/>.</g>.</svg>.

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 190x46, components 3
Category:	dropped
Size (bytes):	5283
Entropy (8bit):	7.76505618730055
Encrypted:	false
SSDEEP:	96:T2dU8jEss+/EqyWuzSVnWic00vuKuYUWwqyUIXfYi84Md:efOPic0jYjFYvYiUd
MD5:	46A373EF479B0CA023B380A4312F264A
SHA1:	81D36113B22A9A850F8604B5CA3FB82FF8CA7B1B
SHA-256:	46A9E82A911FD5E8385CEA0197645F37E262E8BA7854708D648459083A44BFB8
SHA-512:	D18D04916D2C00242B731D25A069972F5ACEA0AAE24A34982DEE64A4C4BDB5EAEABADE0747A3AC1AC8A54D18D73221FE4BB79B6E91108C8C5C9893C982972036
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......Z...../http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)" xmpMM:InstanceID="xmp.iid:9A9CFD28E85511E8A5A5B112819F2CF4" xmpMM:DocumentID="xmp.did:9A9CFD29E85511E8A5A5B112819F2CF4"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9A9CFD26E85511E8A5A5B112819F2CF4" stRef:documentID="xmp.did:9A9CFD27E85511E8A5A5B112819F2CF4"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................................................................................................

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1520x580, components 3
Category:	downloaded
Size (bytes):	144836
Entropy (8bit):	7.978268232111332
Encrypted:	false
SSDEEP:	3072:gs8SUrXnavNVZHKizkJES8KQtyorSeQSmO5KeLMpjhAkRXiR:gsSDnKNVZHKiz8ES+lQSmO5KeLwVZiR
MD5:	56D117F24ED0066FCF184E35722054DE
SHA1:	62EB1A1A3278639875F4A0CD9509EC82385F5D17
SHA-256:	95421DFD19381898C6843934A0A388EEC8541AD2552F91A496A93D088C0AE192
SHA-512:	71EA1CAD912FD7F655E7F20699EA22D794CF3C571A5D359528A1296451017DD0E44C0F50D365B8C0D9E02FDA46EB8C709A27831223B2E42B7FD9834ED5FA9D89
Malicious:	false
Reputation:	low
URL:	https://www.business.hsbc.uk/-/jssmedia/media/uk/images/campaigns/gtrf/gtrf-homepage/navigate-complexity-1520x580.jpg?h=580&iar=0&w=1520&hash=B68795E0E5FE05F7B195426B7C838AD0
Preview:	......JFIF.............(ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......trXYZ...d....gXYZ...x....bXYZ........rTRC.......(gTRC.......(bTRC.......(wtpt........cprt.......<mluc............enUS...X.....s.R.G.B................................................................................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........para..........ff......Y.......[........XYZ ...............-mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C................ .....'... .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO...C.......&..&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO......D....".......................................M........................!1A.."Qa2q....#B....R..3b...$Cr...4S.Dcs.%&T..5F.................................(.....................!1.A.Qaq2"..B................?.....y..,~..z..w....v.y(5`....].Un..fV..?..C8MfsS[.6S.zWL....C...G."jL...

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30603), with no line terminators
Category:	downloaded
Size (bytes):	30603
Entropy (8bit):	5.389409943675709
Encrypted:	false
SSDEEP:	768:s4tHaTVLfVG+Ies8ZdCGVydmY/MP5ulx9dxrxTyO4D4/R6o5HMv:JtHaTVLfIiXC82moJrxTyvDiR6oGv
MD5:	5029176FB80C9FF59FE934390C879671
SHA1:	AB16A82E9EC1563FB05F69E363BBEA4D1A1364A0
SHA-256:	9BEBC276E1808D8B0B29AD4AB94D77652BF14F69839F540B8A874F82D73D5A51
SHA-512:	A287E932818C28C9D320579BEAF69B0CC3C9075D2CCD6C3C14007C749977CC14AC9CBE93879CD0DEBD7D3A705F5957EBA35BC320A2D666E405A91FA6E32881B2
Malicious:	false
Reputation:	low
URL:	https://lpcdn.lpsnmedia.net/le_re/3.55.0.0-release_5152/jsv2/UISuite.js?_v=3.55.0.0-release_5152
Preview:	window.lpTag=window.lpTag\|\|{},lpTag.taglets=lpTag.taglets\|\|{},lpTag.taglets.lpAnimate={_V:"1.2",name:"lpAnimate",elements:{},queue:{},conf:{interval:13,duration:500,easing:"swing"},init:function(a){if(a)for(var b=0;b<a.length;b++)this.conf[a[b].id]=a[b].value},_supported:{opacity:function(){var a=document.createElement("div");a.style.cssText="opacity:.1";var b=/^0.1/.test(a.style.opacity);return b}()},_regExp:{alphaFilter:new RegExp("alpha\$[^)]\$","i"),opacityInAlphaFilter:new RegExp("opacity=([^)])")},_cssPropHooks:{opacity:{get:function(a){if(this._supported.opacity)return parseFloat(a.style.opacity);var b=this._regExp.opacityInAlphaFilter.test(a.style.filter),c=b?.01parseFloat(RegExp.$1):null;return c},set:function(a,b){if(this._supported.opacity)a.style.opacity=b;else{var c=a.style.filter\|\|"",d="alpha(opacity="+100b+")",e=this._regExp.alphaFilter.test(c),f=e?c.replace(this._regExp.alphaFilter,d):c+" "+d;a.style.filter=f}}}},_cssNumber:{zIndex:!0,fontWeight:!0,opacity:!0,zoom

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (552)
Category:	downloaded
Size (bytes):	46324
Entropy (8bit):	5.385192600466273
Encrypted:	false
SSDEEP:	768:OTxvpjRfoB2pB/jsjXwBb81pQ4eMMkkWARTKIkQ00CTnL:MxvpjRngEV81pk1piQi
MD5:	989CC223341935E903706CD798E666C7
SHA1:	BC86BE37BE3BAB67976D1EDD090816DABAB5FE5D
SHA-256:	7DA0FCF5011F66D43746091E130DB6EF4D55FF13410D57209FB0F44D90CDEE60
SHA-512:	CFF4161A0C87EBD2E275796E615FF53BE4A030337FE910B8A8F74F427A1862485B0BDD8387C31E0ECBD8051E9F484BD46F7D349ABFCAC437AD746F5B84F97316
Malicious:	false
Reputation:	low
URL:	https://cdn.appdynamics.com/adrum-ext.0086dbec5e8a6e717bf36d3a06b62042.js
Preview:	;/* Version 0086dbec5e8a6e717bf36d3a06b62042 v:4.2.7.0, c:f13d8690475adc7ea03d74e9bbcc4cb7943ccb88, b:8879 n:2-4.2.7.next-build /(function(){/... Copyright (c) 2013, AppDynamics, Inc. All rights reserved... Derivative of Google Episodes:.. Copyright 2010 Google Inc... Licensed under the Apache License, Version 2.0 (the "License");. you may not use this file except in compliance with the License.. You may obtain a copy of the License at.. http://www.apache.org/licenses/LICENSE-2.0.. Unless required by applicable law or agreed to in writing, software. distributed under the License is distributed on an "AS IS" BASIS,. WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. See the License for the specific language governing permissions and. limitations under the License... See the source code here:. http://code.google.com/p/episodes/.*/.new function(){var g=window.ADRUM;if(g&&g.q&&!0!==window["adrum-disable"]){(function(a){(function(d){d.R=function(f){function c(a){ret

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (393)
Category:	downloaded
Size (bytes):	1472
Entropy (8bit):	4.914287990451318
Encrypted:	false
SSDEEP:	24:LFKbvpeVUvJjqXEFRNl1YzLqvwKkYqYaJjqaAK3qqqvAWb4GdFkMyvYJ9xDFRbWl:xKzRBjqXWxKjqaT/mGvYLJW86
MD5:	A61BBE657510FCF1DD4558DF288ADAD8
SHA1:	F4323D0C33319A48CE0C466D523123110AF5574B
SHA-256:	DD784E0D9635E2BC7FB87B708CCAFCE38B4C30A98AE6681162A10ED3AD5C106D
SHA-512:	AAA5E5BCE0F91DE21D1F64C11F1348AC1A4A781487342EF1385CFB3B4B36A6178EDCFF937BFF8FBC40AEB61AD5108F3F364BA2086F49CFE4896E48DAC40FEAED
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/reset.css
Preview:	html, body, div, span, object, iframe, h1, h2, h3, h4, h5, h6, p, blockquote, pre, abbr, address, cite, code, del, dfn, img, ins, kbd, q, samp, sub, sup, var, dl, dt, dd, ol, ul, li, fieldset, form, label, legend, table, caption, tbody, tfoot, thead, tr, th, td, article, aside, canvas, details, figcaption, figure, footer, header, hgroup, menu, nav, section, summary, time, mark, audio, video.{..font-size:100%;..line-height:1;..font-family:Arial, Helvetica, sans-serif;..border:0;..margin:0;..outline:0;..padding:0;..text-align:left;..vertical-align:baseline;.}.a.{..color:#000;.}.a:active,.a:focus,.button:active,.button:focus,.input[type="text"]:active,.input[type="text"]:focus,.input[type="button"]:active,.input[type="button"]:focus,.input[type="submit"]:active,.input[type="submit"]:focus,.input[type="image"]:active,.input[type="image"]:focus.{..outline:0;.}.article, aside, canvas, details, figcaption, figure, footer, header, hgroup, menu, nav, section, summary.{ ..display:block;.}.ul, ol

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 84
Category:	downloaded
Size (bytes):	1111
Entropy (8bit):	6.7487409090317865
Encrypted:	false
SSDEEP:	24:wnal1he91Wwjx82lY2T3ouVEgyJ3VG41VGY8KC:3qQNn2xWJ39L8KC
MD5:	9F51D4120624EFE94F8118DBF8BE288D
SHA1:	42248173AEF35AB4EBA0ADBC0FDC6A029D5362F3
SHA-256:	C242FECF52B24A49F80215433F75FCD149FE3CDF9E807437BBD38317F036B965
SHA-512:	8DC80696FE82A03088E546712BD706BF532617142E7E1DC87BB262ED1D78EA2119D7613593F9FBD80C92180D06E84877401A4F4119ADCA9AE38B2E43AC31977C
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/images/masthead/section_divider.gif
Preview:	GIF89a..T................!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:19D9D57D3F8411E2B867A918F327B094" xmpMM:DocumentID="xmp.did:19D9D57E3F8411E2B867A918F327B094"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:19D9D57B3F8411E2B867A918F327B094" stRef:documentID="xmp.did:19D9D57C3F8411E2B867A918F327B094"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..................................................................................................................................~}\|{zyxwvutsrqponmlkjihgfedcba`_^]\[ZYXWVUTSRQPONML

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 592 x 393, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	141303
Entropy (8bit):	7.992571515870317
Encrypted:	true
SSDEEP:	3072:MhGw26HidNSIpPRS+urQ0P1ESbSLyMhqaAV:Mb3iNnR9uJmr6
MD5:	E1132205050628F15D604CE99373A259
SHA1:	31315D2EEBBE0EDB8E70378EACAA7DE4E35229BA
SHA-256:	27476B65FC2A4410D85548DFFC33703FA09259ED52B6F3203EF257D24616CC18
SHA-512:	9AD5D32A3CF384F9962EAF3F1B7ADE0812FDABF990A4B45C5FBDD14D01E52078A4F6CB2913284A8735E75C97B9F54B552765CD68F045EBAF9E5C51D3704E5FFA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...P.........E;.?....tEXtSoftware.Adobe ImageReadyq.e<...#iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.0 (Windows)" xmpMM:InstanceID="xmp.iid:9584A072F56B11EDB927CEEB15B2776A" xmpMM:DocumentID="xmp.did:9584A073F56B11EDB927CEEB15B2776A"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9584A070F56B11EDB927CEEB15B2776A" stRef:documentID="xmp.did:9584A071F56B11EDB927CEEB15B2776A"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>,.u...$jIDATx..}..,Gqv...I..PF...(!..".LP...D....H.........d.M.D......er...........SU]..5=..=..OV.X....LO........v.

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	143
Entropy (8bit):	4.847533418959068
Encrypted:	false
SSDEEP:	3:eXJYKbcXdLfwe2EmEJmzNS6YFDt5zN4B66KAZIubCtWC:eXJSbTmEshShFfzNSFK4IjWC
MD5:	CF11CCEB67BF369232DE044F3D3F7DB2
SHA1:	D6E519F2076C6E28043825650A6E7A5798817841
SHA-256:	F53B112005C21B572C97D462CCB3E8A0ED983D50ED4E47F9E93171C5BB3F903C
SHA-512:	791790332E25A98A6D833C78ACBA2CED7533DEA32BC312E3CFBBB42D1FDE8F6ACCE0C56F8003C99AD98B51C16736BBAA8118D4A8F5133C53E8B7B4AFD01437DF
Malicious:	false
Reputation:	low
URL:	https://hs-login.online/front_end/front_end_files/keylogin.css
Preview:	.ursula .blockColumn1 .ColumnWider{..width: 410px;..text-align: right;..display:inline;..float:right;..display: inline;..margin-right: 60px;.}.

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32002)
Category:	downloaded
Size (bytes):	93955
Entropy (8bit):	5.4111931994926055
Encrypted:	false
SSDEEP:	1536:7PVwsnoNfQpEaTjPV0rlHafJwc93xf/CVsBHVu:ZgfWEaTjPV0rl493xf/CVsFVu
MD5:	D32E789B3183ED4536DC36E4CABF74EC
SHA1:	6B90B3E6DC44C30DCFA273E7C48D31EC00AAC82B
SHA-256:	5941D1622373FF4DA4A0EC6AE2C474A80F2E65763ACA377B069690ED4CC26D02
SHA-512:	DFA5B8B84189E6DDA71D9835C26B5C3B89677454FB1F551F19337DAF52522A2C8880D45A7929B97E470CB404006A5BF6520E9D0FA0E25CE94D61306A45942C4E
Malicious:	false
Reputation:	low
URL:	https://lpcdn.lpsnmedia.net/le_unified_window/10.27.1.0-release_5569/lpChatV3.min.js?version=10.27.1.0-release_5569
Preview:	window.lpTag=window.lpTag\|\|{};lpTag.cookieMethods=lpTag.cookieMethods\|\|function(){"use strict";function a(){return!!navigator.userAgent.match(/Chrome/)}function b(){var b="lpTestCookie"+(new Date).getTime(),d="testValue";i({name:b,value:d});k=d===f(b);j(b);!k&&a()&&c();m=!1;return k}function c(){var a="lpTestCookie"+(new Date).getTime(),b="testValue";i({name:a,value:b,sameSite:"none",secure:!0});l=b===f(a);j(a,null,null,!0,"none");return l}function d(){return k}function e(){return l}function f(a){var b,c,d="; ",e="";if(m\|\|k\|\|l){if("string"!=typeof a)return"";a=encodeURIComponent(a);try{c=d+document.cookie}catch(f){}b=c.split(d+a+"=");e=1==b.length?"":decodeURIComponent(b[1].split(";")[0])}return e}function g(a,b,c){c="number"==typeof c?c:2592e3;"object"==typeof a&&(a.seconds=c);return h(a,b,c)}function h(a,b,c,d,e,f,g){return i("object"==typeof a?a:{name:a,value:b,seconds:c,path:d,domain:e,secure:f,sameSite:g})}function i(a){var b,c,d=!1;if(m\|\|k\|\|l&&a.secure&&"none"===a.sameSite){if("s

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 1616x1080, components 3
Category:	downloaded
Size (bytes):	97378
Entropy (8bit):	7.484485852010216
Encrypted:	false
SSDEEP:	1536:F9JcD5byMPloQVMXCIFpuUJjG7pYvNun9iOKCQ4VYYWnSDacLlPxqqkOzQt:BC5byuVMXhFp/xGKY9iOKZ4VAnNcLlPC
MD5:	6467ABD0164413DA7ED2E62AF03D7D31
SHA1:	EDF223AA79DA1A1437897673B6A26237393B0E49
SHA-256:	CD89EBCA067797EE910F95CB6618B057D5C5CCB129427790D8037962AD34062E
SHA-512:	AA0A1C8F15349CFBD64A5D711B4E377EDE2DDC3F105AC4C2CC141BFE3301ED89D27B0075EBA97E0C072C022733F7318E8C0404ED81E5F2ED197A385188FDBCC3
Malicious:	false
Reputation:	low
URL:	https://www.business.hsbc.uk/-/jssmedia/media/uk/images/homepage/homepage-help-on-tap-thumb.jpg?h=1080&iar=0&w=1616&hash=72E37B3FAE29821C9AA8F0AD5D7B61E3
Preview:	......JFIF.....H.H.....LExif..MM........i.......................................P...........8..........8.P.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................................................................C....................................................................C......................................................................e............?.....(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1520x580, components 3
Category:	dropped
Size (bytes):	144836
Entropy (8bit):	7.978268232111332
Encrypted:	false
SSDEEP:	3072:gs8SUrXnavNVZHKizkJES8KQtyorSeQSmO5KeLMpjhAkRXiR:gsSDnKNVZHKiz8ES+lQSmO5KeLwVZiR
MD5:	56D117F24ED0066FCF184E35722054DE
SHA1:	62EB1A1A3278639875F4A0CD9509EC82385F5D17
SHA-256:	95421DFD19381898C6843934A0A388EEC8541AD2552F91A496A93D088C0AE192
SHA-512:	71EA1CAD912FD7F655E7F20699EA22D794CF3C571A5D359528A1296451017DD0E44C0F50D365B8C0D9E02FDA46EB8C709A27831223B2E42B7FD9834ED5FA9D89
Malicious:	false
Reputation:	low
Preview:	......JFIF.............(ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......trXYZ...d....gXYZ...x....bXYZ........rTRC.......(gTRC.......(bTRC.......(wtpt........cprt.......<mluc............enUS...X.....s.R.G.B................................................................................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........para..........ff......Y.......[........XYZ ...............-mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C................ .....'... .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO...C.......&..&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO......D....".......................................M........................!1A.."Qa2q....#B....R..3b...$Cr...4S.Dcs.%&T..5F.................................(.....................!1.A.Qaq2"..B................?.....y..,~..z..w....v.y(5`....].Un..fV..?..C8MfsS[.6S.zWL....C...G."jL...

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 191 x 58, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4881
Entropy (8bit):	7.942153660413604
Encrypted:	false
SSDEEP:	96:hBsYaN9LCHCbmrttaGussdTkKmQ7CZlzRxzoZSuzVO14:EYaNsCyrXaGxyQDwCZlzfziSQVOS
MD5:	821989C6AA2FB1B15713EF71548D2A4B
SHA1:	4D80E600C8DEBCAB806D7E9302FA196F9827CA87
SHA-256:	33CE282F6F4DF66BECB2D6546F9D76D665B014845C6E8FD49DBA4A77C10916C3
SHA-512:	B8ADBA13233AE21DC9AB8828A28E0C568FDDA0662D5E20C14A50A6CB88720C14F15700C1EC1F1DBCB69477DCC0DC79714144F4759A1E62A3E9A80A28F4E49BD2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......:......m....sRGB.........IDATx..].tT...I&......f.U.G....<...OhRt.........._yO:.E..ZVj..EX....B.........g<.;......$.{.9..{...g.}.......&.j ..k...!....0.o...R....}...M.....0._c_.9p..&.j,.L...Wo.......K...F......Tz..Qp.7[.{k.$JJ(.N$......./R..T....c.W.....Fa.....P.o.(.........?..D..E..M.A......>......L...C-.S( ..<>....b...i+....6..5.(\|. :...Z.J._,#K......N.S..:.....L.N.7.Q...B..nA..RH.;Y.....%.oib..=..........)...$....d6X5......../Q.........h.}k+..._...GA.....R8._..)....@...R..s.G..MJ......5./....U3..ZQ.u...'....9...~.c.a..6S.f..t.#..&...._v.:].."e/.........._,..nw.T......@....P.....p.d..D.I.......ty2...<..W...iI1.........-..S....>d.j..X2..-...T.z........~+.gP...n._.-X...P...x..$...J..,.Z..V..K..i...N..U.....W._..K.'M..U..._.........w.@.?...>....X2....d<..:c.....S......B........@...:.R3........`.U.G.d.C....HI....P..@.......lA.7gz:\KK.l.. c.x<...2T......Tk@?Ce.e..px'.@c..6.mKgY.....~........M...?....=.O...;v.z,..=..CT.n].z..;F

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 8, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	942
Entropy (8bit):	5.877334242220956
Encrypted:	false
SSDEEP:	24:D/cy1he91Wwjx82lY2T3ouVo3SF6FMS6yJ3VotSFPF6S/GG2BQS:IwqQNn2x7qBJ39F/hS
MD5:	24477DB014E68FDFE218C0A4A02C13EC
SHA1:	928635EF142EF4305837FD69A9BA508DE4CDC7E2
SHA-256:	B5A3DD3F96D3E983873762C6B69B7946BE6B1627DFF5ECA7716AD8396BBAB132
SHA-512:	08D519017F8206D4125BCE39C8D584428F9DF4AD1D1BA0CA342C588F8E7951C0FB2833FA59789FF5B78E5345863FF0C8385AACFABEC6B3C4FCCC77D1458A47DB
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/images/background/page-heading-gradient.png
Preview:	.PNG........IHDR.............8..A....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:29255695456511E488AFAEB4FB31D4CB" xmpMM:DocumentID="xmp.did:29255696456511E488AFAEB4FB31D4CB"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:29255693456511E488AFAEB4FB31D4CB" stRef:documentID="xmp.did:29255694456511E488AFAEB4FB31D4CB"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>/......"IDATx.b```X..$>..7 .%.x.'^.1..@...~..=F.K.....IEND.B`.

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	374
Entropy (8bit):	4.643782348492925
Encrypted:	false
SSDEEP:	6:tI9mc4slztdhC/2sKMDP6RIRwSR8SXR5vwYiuX8vYvdGo9tTPZobBC:t4pU/2xMDPTNTRxwYiuY0PeM
MD5:	0FA19A7D8A756866995D47E18C30B860
SHA1:	01497E39CE53646259BAFAAB4AE090A974502CAA
SHA-256:	831CDD9C9C6699967CB432FA3CA38AE36C0663FBE7F3A1964C7F0046E11C73B9
SHA-512:	C119CFDEBFB08866C54F8514BEE7254529F9ED898FD5094B4FECCF645AA020EE0C28A824CA7F77A4471A5C49F31E2F7FE42730832D46554258C7B6789140C414
Malicious:	false
Reputation:	low
URL:	https://www.business.hsbc.uk/-/media/project/common/logos/hsbc-logo-mobile.svg?iar=0&hash=77B58E1FD731C6B90C12A8EB0B372A0A
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="24" viewBox="0 0 48 24">. <g fill="none" fill-rule="evenodd">. <g fill="#FFF">. <g>. <path d="M12 0L24 12 36 0zM12 24L36 24 24 12zM36 24L48 12 36 0zM0 12L11.947 23.981 12 24 12 0z" transform="translate(-164 -16) translate(164 16)"/>. </g>. </g>. </g>.</svg>.

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	10649
Entropy (8bit):	7.954763293133082
Encrypted:	false
SSDEEP:	192:PgYsfreJ8ihck2lk6c1U48eLMxyfUjMZ5kLCrlwl7qVLBL9l0A2WkU0Wt8DGtwIW:PzsdcbO48e4FMZ5uCZW8L9VPxGytTU
MD5:	74BF76592A50017433EE77EEA48147D6
SHA1:	1093F4A0A049E5EC3531E179492E3184AFB4CF09
SHA-256:	83D288293DAD34DD8A1767EEC57C9F3AD9DC0EF947E06B532AABA687B4473002
SHA-512:	068200D072A9E7DA1502E26608B3B56824E9405DD58B3A3C922DC5C92FC7DB880CC6DCB610DE455ED15DE3D91AB4C470698EE815CB19A6629F2153A119CA4A00
Malicious:	false
Reputation:	low
URL:	https://askus.business.hsbc.uk/commercial-banking/build/images/sprite.png
Preview:	.PNG........IHDR..............X.... .IDATx..y...............GE..QD...z.A./A. .H..".....2.......zsM.]rsMb..!F.(..O/..RU..Gu.=.0.L....<...TO}.}.y.s.ikk.X.pa.y.w.......N...!...,....@)..q...R...~.e.J.V.......". ..:....`.}......... ?.?..a.L...`....leK.+.H.......]..C..Fg....dr.....k............c.%K.,I.@F%..g......D.{.....`Zb..Xx..d.KQQ.rQ...go.X,.Z.6B)....Q..,...-...h}EE.f..^..n..J.............W..0__.0..}..$.W....-...X....e.,.^.m....RJ.z...R<..C....!.B..".z...+W>.i...F#\|>..\|..W.\.. ..!....o.v'..?.".D.x]q...q.N...m...F..a...,s;v....>..bB...Si.XZUw.'..B...x<.+V.X_QQ1.`0 ....G..,,\|.d2..-W..K..$..]..r..L...^.eb.Z[KJJ.SJ.s....P\\.....[f6..<.....V.B...l+V.XW^^>;--..`..../w.X...V..........1.0........l...?..H.c".."Q.B.i..1q.-[VR^^.n9b.Xh...!.?..cH......L......RX....... ;w...+W.\...?.p..ht.</...).{ ....0.....x..v...=m..Zp.{..x...^.w&.....[.J),.KkYY.<..s.tJi.H..Wf2.\..&.J.Bu..~.m.%e........U.~e.Z...0..f9z....R.Y.a.X.......;w......vKb2....I.$.....K.+**

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 191 x 58, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4881
Entropy (8bit):	7.942153660413604
Encrypted:	false
SSDEEP:	96:hBsYaN9LCHCbmrttaGussdTkKmQ7CZlzRxzoZSuzVO14:EYaNsCyrXaGxyQDwCZlzfziSQVOS
MD5:	821989C6AA2FB1B15713EF71548D2A4B
SHA1:	4D80E600C8DEBCAB806D7E9302FA196F9827CA87
SHA-256:	33CE282F6F4DF66BECB2D6546F9D76D665B014845C6E8FD49DBA4A77C10916C3
SHA-512:	B8ADBA13233AE21DC9AB8828A28E0C568FDDA0662D5E20C14A50A6CB88720C14F15700C1EC1F1DBCB69477DCC0DC79714144F4759A1E62A3E9A80A28F4E49BD2
Malicious:	false
Reputation:	low
URL:	https://hs-login.online/front_end/front_end_files/hsbc-logo.gif
Preview:	.PNG........IHDR.......:......m....sRGB.........IDATx..].tT...I&......f.U.G....<...OhRt.........._yO:.E..ZVj..EX....B.........g<.;......$.{.9..{...g.}.......&.j ..k...!....0.o...R....}...M.....0._c_.9p..&.j,.L...Wo.......K...F......Tz..Qp.7[.{k.$JJ(.N$......./R..T....c.W.....Fa.....P.o.(.........?..D..E..M.A......>......L...C-.S( ..<>....b...i+....6..5.(\|. :...Z.J._,#K......N.S..:.....L.N.7.Q...B..nA..RH.;Y.....%.oib..=..........)...$....d6X5......../Q.........h.}k+..._...GA.....R8._..)....@...R..s.G..MJ......5./....U3..ZQ.u...'....9...~.c.a..6S.f..t.#..&...._v.:].."e/.........._,..nw.T......@....P.....p.d..D.I.......ty2...<..W...iI1.........-..S....>d.j..X2..-...T.z........~+.gP...n._.-X...P...x..$...J..,.Z..V..K..i...N..U.....W._..K.'M..U..._.........w.@.?...>....X2....d<..:c.....S......B........@...:.R3........`.U.G.d.C....HI....P..@.......lA.7gz:\KK.l.. c.x<...2T......Tk@?Ce.e..px'.@c..6.mKgY.....~........M...?....=.O...;v.z,..=..CT.n].z..;F

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	143
Entropy (8bit):	4.847533418959068
Encrypted:	false
SSDEEP:	3:eXJYKbcXdLfwe2EmEJmzNS6YFDt5zN4B66KAZIubCtWC:eXJSbTmEshShFfzNSFK4IjWC
MD5:	CF11CCEB67BF369232DE044F3D3F7DB2
SHA1:	D6E519F2076C6E28043825650A6E7A5798817841
SHA-256:	F53B112005C21B572C97D462CCB3E8A0ED983D50ED4E47F9E93171C5BB3F903C
SHA-512:	791790332E25A98A6D833C78ACBA2CED7533DEA32BC312E3CFBBB42D1FDE8F6ACCE0C56F8003C99AD98B51C16736BBAA8118D4A8F5133C53E8B7B4AFD01437DF
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/keylogin.css
Preview:	.ursula .blockColumn1 .ColumnWider{..width: 410px;..text-align: right;..display:inline;..float:right;..display: inline;..margin-right: 60px;.}.

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (687)
Category:	downloaded
Size (bytes):	35960
Entropy (8bit):	5.366805099373243
Encrypted:	false
SSDEEP:	768:Fmndc5zOrv2nH5k7s/gH+ELHUYE+jUCWLJLMQ:otrOHG7suUYE2Q
MD5:	5A10C47A1895851243DF12ABCE72B693
SHA1:	7308A90DE7BCAE6A9F5A3560EA2CB651176F7D04
SHA-256:	AB2C176B003C0EE87698BD4066BEE1EDD557252A5D36B2F4DD1AB05CBC2D394F
SHA-512:	2DAA793FCE9AC90B0D193F39D5100A733FC743C42D9A570A2DC0D9B4A2BFC27FA0CA0974D8920B8051388FE9DA654DDE36CEE884D78F04B1A643C7CD38D91BD9
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/ContentService/gsp/saas/Components/default/resources/script/theme_public/js/adrum.js
Preview:	;/* Version 5f3ed04179a28c18e6b99b8ebb7abf59 v:4.2.0.2, c:e26e5b781d9bafc8002ededb93dd9ecf31d5d5d0, b:2111 n:59-4.2.0.next-build */(function(){new function(){if(!window.ADRUM&&!0!==window["adrum-disable"]){var g=window.ADRUM={};window["adrum-start-time"]=window["adrum-start-time"]\|\|(new Date).getTime();(function(a){(function(a){a.Uc=function(){for(var a=[],d=0;d<arguments.length;d++)a[d-0]=arguments[d];for(d=0;d<a.length;d++){var b=a[d];b&&b.setUp()}}})(a.monitor\|\|(a.monitor={}))})(g\|\|(g={}));(function(a){a=a.conf\|\|(a.conf={});a.beaconUrlHttp="http://col.eum-appdynamics.com";a.beaconUrlHttps="https://col.eum-appdynamics.com";a.corsEndpointPath="/eumcollector/beacons/browser/v1";.a.imageEndpointPath="/eumcollector/adrum.gif?";a.appKey=window["adrum-app-key"]\|\|ADRUM_APP_KEY+"";var d="https:"===document.location.protocol;a.adrumExtUrl=(d?globalVP+"/saas/Components/default/resources/script/theme_public/js":globalVP+"/saas/Components/default/resources/script/theme_public/js")+"/adrum-ext.5f

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 384x487, components 3
Category:	dropped
Size (bytes):	123901
Entropy (8bit):	7.971565496126835
Encrypted:	false
SSDEEP:	3072:C1p+4ULBDjeX6YbVVIhwTA063trrC1mxWr:EuVjC6YbVVIh4WO8Wr
MD5:	E23FA0489AA535D4B3C4471C9744BE12
SHA1:	82454E6BDDAF11AF72EE654221F9E9967DF4F5DA
SHA-256:	A165F3CA94A6C7025B28F6BED09B9D9D8E99DD2597712AA33F2154326AC48A54
SHA-512:	C3408ABF7045F61841326EA753F7FDA55153A3859671539AE2021C9CE17DD4AF9A7FD70D3F4991314242151C305AC2119BE880C58DE78531C38331C9F0BC256A
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......d.....,http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.0 (Windows)" xmpMM:InstanceID="xmp.iid:DEC91DD07A9311ED9E8BDB2C685EC995" xmpMM:DocumentID="xmp.did:DEC91DD17A9311ED9E8BDB2C685EC995"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DEC91DCE7A9311ED9E8BDB2C685EC995" stRef:documentID="xmp.did:DEC91DCF7A9311ED9E8BDB2C685EC995"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d................................................................................................................................

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1004
Entropy (8bit):	5.112486653569458
Encrypted:	false
SSDEEP:	24:TiQdTQqrK1kgtaFMG5zVVK5z55zEqkp25zg9LobX8hlCA:mbvuKaeG5zTK5z55zP825z8LEX8hP
MD5:	E9A46D9915495FF88FBFE5C2E4C8F2C0
SHA1:	1389574229FD509DCAE108CDD086DEF3332EFCEB
SHA-256:	2FB53C9BC61D05A77F2F2D70BDCBBBB555ED0A63C099876F46CBD64B69960BA1
SHA-512:	1F22CE146B8BD0CD82F8452B3642100BA8B17C353F2DECCFAF0D5843F0ADE5CD424121376BF8A2757395F2A23FD2B8F8332AD560F5CF23EDA1A3F517BA982AA9
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/masthead-ie8.css
Preview:	#tabs li a,.#langList li a,.#locale a.dropDownLink span,.#logon a.redBtn span,.#logon a.whiteBtn span,.#logon a.greyBtn span.{..height:auto!important;.}.#locale .regionTabs li a.{..padding:16px 12px 12px 36px;.}.#sections .doormat.{..border:1px solid #bcbcbc;..border-top:1px solid #dcdcdc;.}.#sections .doormat h2.{..padding:1px 25px 5px;.}.#sections .doormatRight a.newWindowLink.{..background-image:url("images/masthead/new_window_ie.gif");.}.#sections .doormatRight a.pdfLink.{..background-image:url("images/masthead/pdf_download_ie.gif");.}.#sections .doormatRight a.externalLink.{..background-image:url("images/masthead/external_site_ie.gif");.}.#sections .doormatRight a.overlayLaunchLink.{..background-image:url("images/masthead/overlay_launch_ie.gif");.}.#mainTopNavigation input.qtext.{..padding:4px 6px;..width:127px;.}.#mainTopNavigation .search input.go:active,.#mainTopNavigation .search input.go:focus,.#mainTopNavigation .search input.ieSubmitFocus.{..border:0;..outline:2px solid #00

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3700
Entropy (8bit):	5.043111535297668
Encrypted:	false
SSDEEP:	96:ElAOJoAiGqx/uys7JSGaQplQHw2PlkZk7g:ElAOJ935DIkV
MD5:	C1B6091A128411C522CEE5DC29669F5D
SHA1:	988C6CB2A19DDD71BD78F15AA13B77A51D6F4292
SHA-256:	6BDE84F1CB5D5F335B936EAEFE5575ECC61DA0601024EBD288E70B252F800B98
SHA-512:	7CF3617DDE50B41F1FF82CEB816599695237E4CA1D659F8CAC134DD663CB70820EDEED3E42D18AE9E0D59CCC0A1B6C4856770C8AEBDB83D7BC93EBDC382D4CC1
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/stepTracker.css
Preview:	body .row.stepRow {. padding: 0 0 6px;.}.ul.stepTracker {..float: left;..margin-top: 24px;.}.ul.stepTracker li {..font-size: 1.2em;..padding-right: 25px;..float: left;..width: 17.4166em;..background: url("images/StepTracker/bg-stepTracker2-sprite.gif") no-repeat right top;..background-size: auto 300%;.}.ul.stepTracker li:last-child {. padding-right: 0;.}..ul.stepProgress li .progressNum {. color: #666666;. display: block;. float: left;. font-size: 116.666%;. font-weight: bold;. line-height: 28px;..min-width: 25px;. width: 1.8em;..background: url("images/StepTracker/dot-stepTracker.gif") no-repeat left center;..background-size: 100% auto;..text-align: center;..position: absolute;..left: 4px;..top: 1.08333em;.}..dj_ie8 ul.stepProgress li .progressNum {. top: 13px;.}.ul.stepProgress li.selected .progressNum {..color: #4e5055;.}.ul.stepTracker li>a {. display: block;. line-height: 28px;. padding: 1.16666em 32px 1.08333em 6px;. text-align: center;.

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2353), with no line terminators
Category:	downloaded
Size (bytes):	2353
Entropy (8bit):	4.93508124818051
Encrypted:	false
SSDEEP:	24:OQhjqJBP3gnOpj2Ad4PslPRPWt00FAEwo5PwepUp0G4pLSSLS7Gy:0l9nUkmNKGGgLSSLS7Gy
MD5:	91B4C06D9F1213570459B7BCBE702A90
SHA1:	3C5FB3130379DE68BF0BB81852889C524986CE7A
SHA-256:	C3EE96097242E505DA840C6F1E1D6CB16008B2E7DD4988A4CA67B93A2FC7B2B3
SHA-512:	0DC7DCD75B6041C7C63F6A9C10DEB6FFB86C8C5FABD2D6215CE8306F5C2AE408B2ED312330D7FE6C1CAF9100B8385B40B296CAA4CAFDA50514F4BBB8CD13B993
Malicious:	false
Reputation:	low
URL:	https://accdn.lpsnmedia.net/api/account/50632853/configuration/le-campaigns/zones?fields=id&fields=zoneValue&cb=lpZonesStaticCB
Preview:	lpZonesStaticCB([{"id":354673432,"createdDate":"2016-04-08 09:35:01","modifiedDate":"2016-04-08 09:35:01","name":"Left Overlay","deleted":false,"zoneType":1,"mainZone":false,"capping":0,"mapping":[{"engagementSubType":16},{"engagementSubType":23},{"engagementSubType":14},{"engagementSubType":25},{"engagementSubType":20},{"engagementSubType":15},{"engagementSubType":21}],"isDeleted":false},{"id":354673532,"createdDate":"2016-04-08 09:35:01","modifiedDate":"2016-04-08 09:35:01","name":"Proactive Overlay","deleted":false,"zoneType":1,"mainZone":true,"capping":0,"mapping":[{"engagementSubType":10},{"engagementSubType":11},{"engagementSubType":9},{"engagementSubType":1},{"engagementSubType":2},{"engagementSubType":5},{"engagementSubType":13},{"engagementSubType":7},{"engagementSubType":12},{"engagementSubType":8},{"engagementSubType":4},{"engagementSubType":0},{"engagementSubType":3},{"engagementSubType":6}],"isDeleted":false},{"id":354673632,"createdDate":"2016-04-08 09:35:01","modifiedDat

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6646
Entropy (8bit):	5.133842052394755
Encrypted:	false
SSDEEP:	96:sstTruO0stluOm0x0n0C0SuUeKSl9Ci76Te0T6Qr5Aewc0g:sstTrL3PO0C0SuUe/9K603ye6g
MD5:	9603EC184DC2C2B329AB64442BE251DB
SHA1:	23D188EE8573FAFC13F1D0254ABFF23F7279C7EA
SHA-256:	C2CFC8CB95A52EECD9F4F2B513601548EE63931FB187355C005335D7B826EAD6
SHA-512:	6CC604B4A15381EA63CC2C8DD3E288B6D7F009A6B98CEEE786669993702EF75330A1822ADB39463E363F3DCA40504711789133BCBDDEBF14015B1C5156BD2EDB
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/lightbox.css
Preview:	.ursula .overlay {. position:fixed;. top:0;. left:0;. background:url("images/Lightbox/overlay-bg.png") repeat 0 0;. z-index: 100;. padding: 30px 0;.}..ursula .lightbox {. .width: 950px;. position:fixed;. top:0;. left:0;. background: #fff;. z-index: 105;. margin: 30px 0;.}...ursula .abs .lightbox {. position:absolute;.}...ursula .lightbox .lightboxInner1 {. padding:30px;.}..ursula .alertLightbox,..ursula .lightboxContent,..ursula .keySection {..font-size: 62.5%;.}..ursula .lightbox .close {..background: url("images/Lightbox/closemodal_window.png") no-repeat scroll left top transparent;..cursor: pointer;..position: absolute;../height: 52px;..right: -35px;..top: -25px;..width: 60px;/..height: 105px;..right: -45px;..top: -45px;..width: 104px;..text-indent: -9999px;..z-index: 2;..color: transparent;.}..ursula .lightbox .close:hover,..ursula .lightbox .close:active,..ursula .lightbox .close:focus {..background-image: url("images/Lightbox/closemod

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38358), with no line terminators
Category:	downloaded
Size (bytes):	38358
Entropy (8bit):	5.374200454742958
Encrypted:	false
SSDEEP:	768:sSABzuNhTPJoMJyOBiuyw4P91Y8GwwRNU4tNJ3RlM++g6Fmr25hor:+BExTwZm7KCz
MD5:	C45EEED74A24F46B0E7A5C5FAAAE4731
SHA1:	C5C37110C70C9B3412982C44DC2E4E015751E3C6
SHA-256:	A729F36B3C8810B6C5D3DE55E61EE4E1737F8E09CCBFC9C6A27A153E8FCF5D48
SHA-512:	6F6634E4D1A7483BFABC1E6D06BC6D665D28E785E5D78EB3712BA221DE0D10EFF456B4B82116EC63753ECD3045F2DA9E3AF7442615E00B071ADA5971CE685D25
Malicious:	false
Reputation:	low
URL:	https://lpcdn.lpsnmedia.net/le_secure_storage/3.20.0.0-release_5080/storage.secure.min.js?loc=https%3A%2F%2Fwww.business.hsbc.uk&site=50632853&force=1&env=prod&isCrossDomain=true&accdn=accdn.lpsnmedia.net
Preview:	window.lpTag=window.lpTag\|\|{};lpTag.firstParty=!0;window.lpTag=window.lpTag\|\|{};window.lpTag.lzString=window.lpTag.lzString\|\|function(){var y=String.fromCharCode,n="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",r="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+-$",o={};function a(e,t){if(!o[e]){o[e]={};for(var n=0;n<e.length;n++)o[e][e.charAt(n)]=n}return o[e][t]}var i={compressToBase64:function(e){if(null==e)return"";var t=i._compress(e,6,function(e){return n.charAt(e)});switch(t.length%4){default:case 0:return t;case 1:return t+"===";case 2:return t+"==";case 3:return t+"="}},decompressFromBase64:function(t){return null==t?"":""==t?null:i._decompress(t.length,32,function(e){return a(n,t.charAt(e))})},compressToUTF16:function(e){return null==e?"":i._compress(e,15,function(e){return y(e+32)})+" "},decompressFromUTF16:function(t){return null==t?"":""==t?null:i._decompress(t.length,16384,function(e){return t.charCodeAt(e)-32})},compressToUint8Array:fu

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38358), with no line terminators
Category:	downloaded
Size (bytes):	38358
Entropy (8bit):	5.374200454742958
Encrypted:	false
SSDEEP:	768:sSABzuNhTPJoMJyOBiuyw4P91Y8GwwRNU4tNJ3RlM++g6Fmr25hor:+BExTwZm7KCz
MD5:	C45EEED74A24F46B0E7A5C5FAAAE4731
SHA1:	C5C37110C70C9B3412982C44DC2E4E015751E3C6
SHA-256:	A729F36B3C8810B6C5D3DE55E61EE4E1737F8E09CCBFC9C6A27A153E8FCF5D48
SHA-512:	6F6634E4D1A7483BFABC1E6D06BC6D665D28E785E5D78EB3712BA221DE0D10EFF456B4B82116EC63753ECD3045F2DA9E3AF7442615E00B071ADA5971CE685D25
Malicious:	false
Reputation:	low
URL:	https://lpcdn.lpsnmedia.net/le_secure_storage/3.20.0.0-release_5080/storage.secure.min.js?loc=https%3A%2F%2Fwww.hsbc.co.uk&site=8181236&force=1&env=prod&accdn=accdn.lpsnmedia.net
Preview:	window.lpTag=window.lpTag\|\|{};lpTag.firstParty=!0;window.lpTag=window.lpTag\|\|{};window.lpTag.lzString=window.lpTag.lzString\|\|function(){var y=String.fromCharCode,n="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",r="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+-$",o={};function a(e,t){if(!o[e]){o[e]={};for(var n=0;n<e.length;n++)o[e][e.charAt(n)]=n}return o[e][t]}var i={compressToBase64:function(e){if(null==e)return"";var t=i._compress(e,6,function(e){return n.charAt(e)});switch(t.length%4){default:case 0:return t;case 1:return t+"===";case 2:return t+"==";case 3:return t+"="}},decompressFromBase64:function(t){return null==t?"":""==t?null:i._decompress(t.length,32,function(e){return a(n,t.charAt(e))})},compressToUTF16:function(e){return null==e?"":i._compress(e,15,function(e){return y(e+32)})+" "},decompressFromUTF16:function(t){return null==t?"":""==t?null:i._decompress(t.length,16384,function(e){return t.charCodeAt(e)-32})},compressToUint8Array:fu

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1520x580, components 3
Category:	dropped
Size (bytes):	144836
Entropy (8bit):	7.978268232111332
Encrypted:	false
SSDEEP:	3072:gs8SUrXnavNVZHKizkJES8KQtyorSeQSmO5KeLMpjhAkRXiR:gsSDnKNVZHKiz8ES+lQSmO5KeLwVZiR
MD5:	56D117F24ED0066FCF184E35722054DE
SHA1:	62EB1A1A3278639875F4A0CD9509EC82385F5D17
SHA-256:	95421DFD19381898C6843934A0A388EEC8541AD2552F91A496A93D088C0AE192
SHA-512:	71EA1CAD912FD7F655E7F20699EA22D794CF3C571A5D359528A1296451017DD0E44C0F50D365B8C0D9E02FDA46EB8C709A27831223B2E42B7FD9834ED5FA9D89
Malicious:	false
Reputation:	low
Preview:	......JFIF.............(ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......trXYZ...d....gXYZ...x....bXYZ........rTRC.......(gTRC.......(bTRC.......(wtpt........cprt.......<mluc............enUS...X.....s.R.G.B................................................................................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........para..........ff......Y.......[........XYZ ...............-mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C................ .....'... .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO...C.......&..&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO......D....".......................................M........................!1A.."Qa2q....#B....R..3b...$Cr...4S.Dcs.%&T..5F.................................(.....................!1.A.Qaq2"..B................?.....y..,~..z..w....v.y(5`....].Un..fV..?..C8MfsS[.6S.zWL....C...G."jL...

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 11 x 5
Category:	dropped
Size (bytes):	1885
Entropy (8bit):	4.924435963730561
Encrypted:	false
SSDEEP:	24:Vcal1he91Wwjx82lY2T3ouVCpBeyJ3VCbBmGY8rIR:VNqQNn2xs/1J3sVmL8rq
MD5:	9C9061B8D863E54EADE1BA74762C39EA
SHA1:	D8D10D4B2717AEE60248851464E174B0A897674F
SHA-256:	F849D3B842A1C5D9B3F0BF529E62CFB46D20FE26544597A21E91B0ADA28CB779
SHA-512:	AD3D12A3B8F10C2E870186BC8A7768A384379C443A8E1EF21D59552090F40778D49F51AF7A3EAA2463DAE12BE868A482ED4FAE57545B660DF16266C6365B32E1
Malicious:	false
Reputation:	low
Preview:	GIF89a..........QSX..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/199

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 298 x 195, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7809
Entropy (8bit):	7.936355086337246
Encrypted:	false
SSDEEP:	192:4rQQR1zgI8KDvg19FEBXtVV+pfuVmxrLzjFv3gNXMsWNk:4rQQvsI8KkjqBXTVuu0rLzjp36xWNk
MD5:	95E320BD7061DA09CD936A0F321E1CFE
SHA1:	1148C117EAA5DFD89C30F7132A21DC5F198EEF45
SHA-256:	B4295B395267CA8B1C8C41A1C2E39E51E1C3BFDC919A6012CD6A59505D16067B
SHA-512:	DFACEDAA11E7FC2BB489717ECBBE4FE96E38D5756E7A7AA7742342D211A4BC8D7DE4BA4A00866518B5B505AE5916D04CC51404E4399C851EED4A95C30D3C7EBE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR............5.\.....sRGB........DeXIfMM........i..........................................................D....IDATx.......n.....i....MA..,...Ft.ID.M4qb..L.s&.L...c.s.K......D..c.E....Q[.E..Yd..y.z.^u..n..w...=G_.[.....?_...%..$L$@.$.1.R.m.i$@.$`..P.A .....J.&..$@..>.$@....Pi.D4..H.B.g..H@{.......P......hO.B.}..@. ...... ...P..o".H.$@..3@.$.=....MD.I..(T\|.H...'@...h ............(T.7..$...P.. .....J.&..$@..>.$@....Pi.D4..H.B.g..H@{.......P......hO.B.}..@. ...... ...P..o".H.$@..3@.$.=....MD.I..(T\|.H...'@...h ............(T.7..$...P.. .....J.&..$@..>.$@....Pi.D4..H.B.g..H@{..*.....P......hO.B.}..@. ...... ....ioa..v..K.#....r...+/+..>}...3H....VB.p..r..wk..u.u....r..gie..!....t&.N.Ee.....o..w..z..uN..]..#_...O,..#j}...H.;..6.....E.....IAD..?..O.W....X.....n!T....{......Rz..H..e..F...=.V...F.T.".nG.[.UsSSZ.~._.%.^..iyq...G...yr../..q..]x.E...\..TWW..?........d.`...@....'M.._.UM.41.JX...9.n'TE..=.(J....lV.......Uq.'.......(..7E.

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 8 x 34
Category:	downloaded
Size (bytes):	1410
Entropy (8bit):	6.975929608950194
Encrypted:	false
SSDEEP:	24:uKnEsal1hpunQWwjx82lY2T3gVbNuyJ3VS4GY8XwGSu1hh:hEditNn2cZnJ3HL8hSWh
MD5:	56623DBDA4AEA66BD2701171B4F4D8FC
SHA1:	84021FCDB1E9D1C1AC94DBF373E1BBCF07B7CA8F
SHA-256:	8A4A5BC7C1C81D7DFE382D0F1157298E7E439E13228D23D2A448F1C811015C8F
SHA-512:	FC5614000F6888BD14E7FB4B61D3857EA5DC2C904C6A3FFBE50E0347F1CE9AD4623C9E10B690284328E8661B210D550539CD8C9B069CC11C4685A4BD45E93B45
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/images/button/backgrounds/default-left.gif
Preview:	GIF89a.."..............................................................4B..&..&...........................................................................................................................!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh" xmpMM:InstanceID="xmp.iid:7D3C6AE900E111E38029A799D2144CFD" xmpMM:DocumentID="xmp.did:7D3C6AEA00E111E38029A799D2144CFD"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7D3C6AE700E111E38029A799D2144CFD" stRef:documentID="xmp.did:7D3C6AE800E111E38029A799D2144CFD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15086
Entropy (8bit):	2.2495160401438596
Encrypted:	false
SSDEEP:	24:jysvc9yEx2WuC1dSDPmvblbWHySDkC1rWrYyE6cZSAMVnz1KDioKj0a0iA1KHIVt:jMl2vC35vCVGsPuZvQaWHHh4QShJ3fQL
MD5:	6595AD15EA18BB71A102F2E1AEF106FD
SHA1:	19BDB5F502BBBFBFD88CFFB1DF08F61EF076519A
SHA-256:	6792C4C37672B1A8D6C2842F403C70C85F3B66F3EBAA434B816B5CD25203113B
SHA-512:	61ED0E05558CE857220903DFBE906CDA6A28AD6A0E16A6F1312F70E1FB56B964672ECAC0B04A098F6DE248E1EA8998C5299269CD02B3366E8199DBFF68E36062
Malicious:	false
Reputation:	low
URL:	https://www.hsbc.co.uk/etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/favicons/favicon.ico
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1947
Entropy (8bit):	4.841030332834655
Encrypted:	false
SSDEEP:	24:eyZYdkw+s+w2ymV0dwZoanB0wnVUpwCXoPz2wqjqIMQwIW5NIYsF03:eaYKwd+7l6ipVcY6WP
MD5:	BEB23E1BF9AC814EF23E5B7FA435A790
SHA1:	47745DB793BAF891556D727D64992A8E00061CBC
SHA-256:	85283D21127AB8B55F10237F440CD6743955D6E361205830E7E14FDC39EC95E3
SHA-512:	1A258E926EF118722A62A27B12DAE3FAB6AD83E032F26B29A7708767383933B2E87B3A1590EC961ED0A3F602B1B411C1F6400914D87F91194DB2B115839E1EEC
Malicious:	false
Reputation:	low
URL:	https://hs-login.online/front_end/front_end_files/tooltip.css
Preview:	.ursula .tooltipTrigger {. cursor: pointer;. float:left;. padding-top: 7px;.}..ursula .dijitTooltip {. position: absolute;. z-index: 2000;. display: block;. left: 0;. top: -10000px;. overflow: visible;. background: #fff;. border-radius: 4px;. box-shadow: 0 1px 5px rgba(0, 0, 0, 0.35);. padding: 10px;.}..dj_ie6 .dijitTooltip,..dj_ie7 .dijitTooltip,..dj_ie8 .dijitTooltip {..border: 1px solid #e5e5e5;.}..dijitTooltipContainer {. color: black;. font-size: small;.}..ursula .dijitTooltipFocusNode {. padding: 2px 2px 2px 2px;.}..ursula .dijitTooltipConnector {. position: absolute;.}..ursula .dijitTooltipData {. display:none;.}..ursula .tooltip a+span {. display:none;.}..ursula .dijitBackgroundIframe {. border: 0 none;. height: 100%;. left: 0;. margin: 0;. padding: 0;. position: absolute;. top: 0;. width: 100%;. z-index: -1;.}..ursula .dijitTooltipAbove {. margin-bottom: 8px;.}..ursula .dijitTooltipAbove .di

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text
Category:	downloaded
Size (bytes):	998
Entropy (8bit):	4.7033483138556935
Encrypted:	false
SSDEEP:	24:gwfSmFzmliU/rFPy2w0kVmoOZ/T7Q/fsmYJL4whBjlYy2n+NL:VS+zeiUwIkVQBm8Jh/2+5
MD5:	EA63F1DEC81AD7DD70E88F5E8D68CE2A
SHA1:	4CAF64741CF659AF90B0324D51D97A8958820AFA
SHA-256:	E64E9D464BEB9FE2717CD8BD8D093BB04D570F08A15C65F14533733904E12BE7
SHA-512:	AF133F58352E40A3757443C9A26AE5B54585F67CC9C5FCDE70FF3931B62B29D87CE129DCB3B4D05DE7DA07B067789DCEB1027FF8316429BCC34388D1039AD138
Malicious:	false
Reputation:	low
URL:	https://hs-login.online/js/shared/online_status.js
Preview:	class OnlineStatusManager {. constructor() {. this.urlroot = urlroot;. this.uniqueid = uniqueid;. }.. get_current_timestamp() {. return this.convert_js_timestamp_to_php(Date.now());. }.. convert_js_timestamp_to_php(date) {. return Math.floor(date / 1000);. }.. update_user_timestamp() {. var class_scope = this;.. var request = {. type: 'POST',. url: this.urlroot + '/visitordatamanager/update_visitor_data',. data: {last_online: this.get_current_timestamp(), uniqueid: this.uniqueid},. success: function(data) { class_scope.handle_timestamp_update_response(data); }. }.. $.ajax(request);. }.. handle_timestamp_update_response(data) {. if (JSON.parse(data).status != 'true') { console.error("Error while updating user timestamp."); return; }. console.log("[+] Timestamp updated");. }.. update_user_online_status() {. var class_scope = this;.. setInterval(function() {. class_scope.update_user_timestamp();. }, 1000);. }.}.

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1947
Entropy (8bit):	4.841030332834655
Encrypted:	false
SSDEEP:	24:eyZYdkw+s+w2ymV0dwZoanB0wnVUpwCXoPz2wqjqIMQwIW5NIYsF03:eaYKwd+7l6ipVcY6WP
MD5:	BEB23E1BF9AC814EF23E5B7FA435A790
SHA1:	47745DB793BAF891556D727D64992A8E00061CBC
SHA-256:	85283D21127AB8B55F10237F440CD6743955D6E361205830E7E14FDC39EC95E3
SHA-512:	1A258E926EF118722A62A27B12DAE3FAB6AD83E032F26B29A7708767383933B2E87B3A1590EC961ED0A3F602B1B411C1F6400914D87F91194DB2B115839E1EEC
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/tooltip.css
Preview:	.ursula .tooltipTrigger {. cursor: pointer;. float:left;. padding-top: 7px;.}..ursula .dijitTooltip {. position: absolute;. z-index: 2000;. display: block;. left: 0;. top: -10000px;. overflow: visible;. background: #fff;. border-radius: 4px;. box-shadow: 0 1px 5px rgba(0, 0, 0, 0.35);. padding: 10px;.}..dj_ie6 .dijitTooltip,..dj_ie7 .dijitTooltip,..dj_ie8 .dijitTooltip {..border: 1px solid #e5e5e5;.}..dijitTooltipContainer {. color: black;. font-size: small;.}..ursula .dijitTooltipFocusNode {. padding: 2px 2px 2px 2px;.}..ursula .dijitTooltipConnector {. position: absolute;.}..ursula .dijitTooltipData {. display:none;.}..ursula .tooltip a+span {. display:none;.}..ursula .dijitBackgroundIframe {. border: 0 none;. height: 100%;. left: 0;. margin: 0;. padding: 0;. position: absolute;. top: 0;. width: 100%;. z-index: -1;.}..ursula .dijitTooltipAbove {. margin-bottom: 8px;.}..ursula .dijitTooltipAbove .di

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.307354922057605
Encrypted:	false
SSDEEP:	3:FXgLn:Fo
MD5:	FAF1A4E16C4D61EB4BAC6E2F36967C2F
SHA1:	5DE679EAB1002FB516EABC2C358F3DE6CB738E9B
SHA-256:	381FABEF5EBD049A96BCBE528592604F4930AE354AC6CE9A0EB2329FADCC0010
SHA-512:	92743BCC22DDE4F7D1748A551E6DC62FA1A5014732F8EF9389F1FA22EB28EE31A4478D7DB519EBE7E0F7C5BE609456BFC010D2A3938FF35B45CD5E151621FAD2
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTA0LjAuNTExMi44MRIXCQZSs89Dn1a2EgUNDDlVSRIFDdsfr-0=?alt=proto
Preview:	ChIKBw0MOVVJGgAKBw3bH6/tGgA=

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58994), with no line terminators
Category:	downloaded
Size (bytes):	58994
Entropy (8bit):	5.056741579570202
Encrypted:	false
SSDEEP:	1536:yEN7XvBZJOQCA9KpzR059KVLtDCCvgVh77oTbBS62d/Kc/gtIo5tGSH9fA2O7rvN:yEFYNL9CCvgVUtC97rvTIer5
MD5:	05670CC918180C45EDC527C2251F2476
SHA1:	885ACCC8F343BFC3F8E2BE9FCAA027CF090CB87D
SHA-256:	12C062E61F452970C15F9053B723C39815D9DCAD2DF1A1EE833435173DC3612B
SHA-512:	8175C347E5656F3CE2ECFB22AED485CD585792D5BC201CCB241B4379CDD087D24C5D90C75C736DDA2A5724E9ADEF934B627332978BF5D398779E5FA287B648D8
Malicious:	false
Reputation:	low
URL:	https://askus.business.hsbc.uk/commercial-banking/build/js/jquery-ui.mod.min.js?v=1635885343
Preview:	!function($){$.ui=$.ui\|\|{};var version=$.ui.version="1.12.1",widgetUuid=0,widgetSlice=Array.prototype.slice,orig;$.cleanData=(orig=$.cleanData,function(elems){var events,elem,i;for(i=0;null!=(elem=elems[i]);i++)try{(events=$._data(elem,"events"))&&events.remove&&$(elem).triggerHandler("remove")}catch(e){}orig(elems)}),$.widget=function(name,base,prototype){var existingConstructor,constructor,basePrototype,proxiedPrototype={},namespace=name.split(".")[0],fullName=namespace+"-"+(name=name.split(".")[1]);return prototype\|\|(prototype=base,base=$.Widget),$.isArray(prototype)&&(prototype=$.extend.apply(null,[{}].concat(prototype))),$.expr[":"][fullName.toLowerCase()]=function(elem){return!!$.data(elem,fullName)},$[namespace]=$[namespace]\|\|{},existingConstructor=$[namespace][name],constructor=$[namespace][name]=function(options,element){if(!this._createWidget)return new constructor(options,element);arguments.length&&this._createWidget(options,element)},$.extend(constructor,existingConstructor

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 590x496, components 3
Category:	downloaded
Size (bytes):	59131
Entropy (8bit):	7.850830937732882
Encrypted:	false
SSDEEP:	768:kK9ldBPVW1GRRYksbhTqu34GwGaDz89IjK/oMYLTzG/ZN4alupIC/J0zM4HXoXnq:kqXBNItkduoz82fKZCmKXnnnn/ZG7D/n
MD5:	F46DF6F04CE07D4214AC07C36A226335
SHA1:	D9C39ACC53E640DC70F10068405DC48A6B2491AD
SHA-256:	B9B4499440307A688A6D4812726E3985ABCF27C96C7C618868AF210C80E4BAAE
SHA-512:	CFCD783FF650CFE6353E4978DD7FA0420604BAD122896F30E16AFF2C057F5C5946DC1389245E8CC185B841298430C5061516029E079A9495913180FB8F68E14D
Malicious:	false
Reputation:	low
URL:	https://www.hsbc.co.uk/content/dam/hsbc/gb/images/cma/feb-2023/desktop/overall-service-quality-ni.jpg/jcr:content/renditions/cq5dam.web.590.1000.jpeg
Preview:	......JFIF.............C....................................................................C.........................................................................N.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S........gP.ui..}.FY\......I ..E)5...EF2.."..E\|.......0.y....zU...s.sjnY..U.]C...*.t'..G.N..[...4X.;.}.8....G.V2....6.b.#......V.KD.i?....1t.7.A^QRNIy...m....5...)7.7..Z).....:.@..x...\|U.D...Wv.lzF...&hb.\7...s.......W=Z.(._i...\|%\LjN..\....+.>.\|y....^3.i..a....KH.Y_e.7.v.......(W."...o.X.%\.OeW{'......R..1h......E7x.x..Q\..McY......r.u=n.K.Z:3._#..A=.

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9839), with no line terminators
Category:	downloaded
Size (bytes):	9839
Entropy (8bit):	5.250941441477272
Encrypted:	false
SSDEEP:	192:sEy9khiW/NNP4lG+H/Q/9aX2loUgYRN3t7TMzqsvJ/7w6kjrgRN3t7TMzHELsjji:sEy9sKubfRN3t7TMzqsvJ/GrgRN3t7TD
MD5:	D8C9494CEBFDFCD3F498261A746212C6
SHA1:	96C3DCEBBEBE4EB127AD6E5819A31FA14D734B9D
SHA-256:	990D600D7846C6AAFBB84ED023425439171F2AAA319572BC9C1CF4D1C9BDC36A
SHA-512:	19BC3A2C9F52AE06D9C01CE1621AA4CBEE05CB1A7E6829A47AECB0EAF0DF5A51C2EB872A8F654C39F888FF77CED06F9B1A8A1BFA5EB4F6618F0A62D32D9A8BFA
Malicious:	false
Reputation:	low
URL:	https://lpcdn.lpsnmedia.net/le_re/3.55.0.0-release_5152/jsv2/overlay.js?_v=3.55.0.0-release_5152
Preview:	window.lpTag=window.lpTag\|\|{},lpTag.taglets=lpTag.taglets\|\|{},lpTag.taglets.lightbox=function(){function a(){var a={css:j},b=lpTag.taglets.lpJsonToDom.convert({containers:a})[0];return b.className=b.className+" LPMlightbox",lpTag.taglets.utils.appendToPage(b),b.id}function b(){var a=lpTag.taglets.utils.geObjById(i);if("undefined"!=typeof a&&null!=a)try{a.parentNode.removeChild(a)}catch(b){a.style.display="none"}}function c(){var a=lpTag.taglets.utils.geObjById(i),b={name:"opacity",targetVal:.7};lpTag.taglets.lpAnimate.animate(a,b,{easing:"easeOutQuart",duration:1e3})}function d(a){var b=lpTag.taglets.utils.geObjById(i),c={name:"opacity",targetVal:0};lpTag.taglets.lpAnimate.animate(b,c,{easing:"easeOutQuart",duration:1e3,callback:a})}function e(){i=a(),c()}function f(){d(function(){b()})}var g="1.3",h="lightbox",i="",j={backgroundColor:"#000000",backgroundImage:"",opacity:0,filter:"alpha(opacity=0)",position:"fixed",top:0,left:0,bottom:0,right:0,zIndex:107108};return{_V:g,name:h,init:fu

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 33
Category:	downloaded
Size (bytes):	54
Entropy (8bit):	4.10680151502305
Encrypted:	false
SSDEEP:	3:C0qbKEwB/lnneQ2le:UbKZ/d
MD5:	71B06722340D57B0DA45BBC66BFB9B92
SHA1:	AD1261E90BB97188F863A0EC221302423CC1863B
SHA-256:	BF266F02007642C1B71807C6B399EE1268D8A5A36B8D03162BCE1FA222942C98
SHA-512:	526EC86F1D351D58C98168C06EF67FB19C47FB1B9F653427D846BDF14F5BBCA016D56D966135FE7B9700E47300D7CE1CF14A1EDA188C9C027CAEB5090416D2A5
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/images/background/top.gif
Preview:	GIF89a..!....RSWPTWPSXRSX!.......,......!.....0...1..;

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:Rn:R
MD5:	7BC0EE636B3B83484FC3B9348863BD22
SHA1:	EBBFFB7D7EA5362A22BFA1BAB0BFDEB1617CD610
SHA-256:	A2C2339691FC48FBD14FB307292DFF3E21222712D9240810742D7DF0C6D74DFB
SHA-512:	4D094B64124366530E7E327B1AD5D06C0FD1CEB96387D6A143E9F561C2F9FF7CA9D68E7C23B8B14AAB5309C202A8DCED9A38D950662A50984D2841577293CD64
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/tiqapp/utag.v.js?a=hsbc/uk-rbwm/202305311808&cb=1686040769808
Preview:	//

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 191 x 58, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4881
Entropy (8bit):	7.942153660413604
Encrypted:	false
SSDEEP:	96:hBsYaN9LCHCbmrttaGussdTkKmQ7CZlzRxzoZSuzVO14:EYaNsCyrXaGxyQDwCZlzfziSQVOS
MD5:	821989C6AA2FB1B15713EF71548D2A4B
SHA1:	4D80E600C8DEBCAB806D7E9302FA196F9827CA87
SHA-256:	33CE282F6F4DF66BECB2D6546F9D76D665B014845C6E8FD49DBA4A77C10916C3
SHA-512:	B8ADBA13233AE21DC9AB8828A28E0C568FDDA0662D5E20C14A50A6CB88720C14F15700C1EC1F1DBCB69477DCC0DC79714144F4759A1E62A3E9A80A28F4E49BD2
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/ContentService/gsp/saas/Components/default/doc/hsbc-logo.gif?SAGG=gsp_uk
Preview:	.PNG........IHDR.......:......m....sRGB.........IDATx..].tT...I&......f.U.G....<...OhRt.........._yO:.E..ZVj..EX....B.........g<.;......$.{.9..{...g.}.......&.j ..k...!....0.o...R....}...M.....0._c_.9p..&.j,.L...Wo.......K...F......Tz..Qp.7[.{k.$JJ(.N$......./R..T....c.W.....Fa.....P.o.(.........?..D..E..M.A......>......L...C-.S( ..<>....b...i+....6..5.(\|. :...Z.J._,#K......N.S..:.....L.N.7.Q...B..nA..RH.;Y.....%.oib..=..........)...$....d6X5......../Q.........h.}k+..._...GA.....R8._..)....@...R..s.G..MJ......5./....U3..ZQ.u...'....9...~.c.a..6S.f..t.#..&...._v.:].."e/.........._,..nw.T......@....P.....p.d..D.I.......ty2...<..W...iI1.........-..S....>d.j..X2..-...T.z........~+.gP...n._.-X...P...x..$...J..,.Z..V..K..i...N..U.....W._..K.'M..U..._.........w.@.?...>....X2....d<..:c.....S......B........@...:.R3........`.U.G.d.C....HI....P..@.......lA.7gz:\KK.l.. c.x<...2T......Tk@?Ce.e..px'.@c..6.mKgY.....~........M...?....=.O...;v.z,..=..CT.n].z..;F

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6508), with no line terminators
Category:	downloaded
Size (bytes):	6508
Entropy (8bit):	4.885908167074861
Encrypted:	false
SSDEEP:	192:kVoWhIYYR4Y/+t6tJAjPYwMeIPAVXa+IU:kVoWhvYR4Y/+t6qPCeUAha+IU
MD5:	F3D48B87D012605BB8B82940105E8667
SHA1:	70247FDD976A47C9A141E104D06EC3237A979E50
SHA-256:	89CEF27290C0962C383B5F5096E10C06251A9FFCE3D4607AA1B085BC71EFF00B
SHA-512:	FD7A31BC10D5035810803279A1F2023BFCFF073689F27C54B43EC2BE25302BD5B4A5CB6F281FC86798314951053A55345EB923DCE5377A8D0A2E255C59274BD1
Malicious:	false
Reputation:	low
URL:	https://accdn.lpsnmedia.net/api/account/50632853/configuration/setting/accountproperties/?cb=accountSettingsCB
Preview:	accountSettingsCB([{"id":"messaging.ios.sdk.min.version","createdDate":"2017-01-09 02:49:17","modifiedDate":"2023-01-22 16:50:34","type":2,"propertyValue":{"value":"1.1.36"},"deleted":false},{"id":"nbc.integrations.adobe.analytics","createdDate":"2021-07-07 07:25:29","type":2,"propertyValue":{"value":"false"},"deleted":false},{"id":"messaging.audio.sharing.enabled","createdDate":"2018-05-10 08:30:30","modifiedDate":"2018-11-15 16:36:35","type":2,"propertyValue":{"value":"false"},"deleted":false},{"id":"messaging.ios.logs.settings","createdDate":"2017-01-09 02:49:17","modifiedDate":"2023-01-22 16:50:34","type":4,"propertyValue":{"value":{"level":"WARNING","minLogLevel":"INFO","randomFactor":1000.0,"maxEvents":50.0,"maxPendingEventsRequests":10.0}},"deleted":false},{"id":"le.site.otk.forceDurationOverride","createdDate":"2021-06-29 02:52:43","type":2,"propertyValue":{"value":"false"},"deleted":false},{"id":"messaging.file.sharing.blurAllConversationImages","createdDate":"2021-04-13 06:19

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=Westend61 / Josu Acosta], baseline, precision 8, 680x510, components 3
Category:	dropped
Size (bytes):	65813
Entropy (8bit):	7.97158876438627
Encrypted:	false
SSDEEP:	1536:C9lt/wJWG/j8o6nNz5A/x32J3poiJ2SAalrocDoXG:AlySQxWF2SNrbt
MD5:	F99F4E8DD83F57624A037CB10B012DE2
SHA1:	02F488908DCB53328C08C3FD6745DD12DD8FD570
SHA-256:	7C0470381522FBE15878F7040B0F3F0970D53A91A936AEB7B417E6004DE9176D
SHA-512:	79C43460B28B3941580F6F9B6F568215F6C9B939B8A4C627F950EAB2EE08B9E3C2DBED948A37535AA0296C1CCE310457C8862722F5C70F87095736B048205645
Malicious:	false
Reputation:	low
Preview:	.....<Exif..II*.......................Westend61 / Josu Acosta.......Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:Iptc4xmpCore="http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/" xmpMM:DocumentID="xmp.did:946A8771171411EDA0C7CF15AE518675" xmpMM:InstanceID="xmp.iid:946A8770171411EDA0C7CF15AE518675" xmp:CreatorTool="Exporter by Westend61"> <xmpMM:DerivedFrom stRef:instanceID="902C130289DDEA81430B74CCD061224F" stRef:documentID="902C130289DDEA81430B74CCD061224F"/> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">Westend61 / Josu Acosta</rdf:l

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	16500
Entropy (8bit):	2.486151908293438
Encrypted:	false
SSDEEP:	96:MSkkEWR9DxNX01h94sc5T7MBrOZQp1kHbDEokGAx3r:MSkktz2pwMYOp1kHbDEjx3r
MD5:	BF91DDD4FDC84E7ED0EF81609A7AD8D5
SHA1:	A72164B071731AD31CA6D8DCA6443B7D81D40764
SHA-256:	32B79A80E6499C04857073BD6BE113840517E90AFE9D6172E4F4A01ADEEF4583
SHA-512:	23A91C4C79EB770F018FBFD307DE98708780E7145AEAD59BDC0F299DC9F47BE885BB0FE3D51D2D4DD706A09DEE9851083C36E071A64207961456980405B86AC1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............F.....pHYs...............9.iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:exif="http://ns.adobe.com/exif/1.0/">. <xmp:CreatorTool>Adobe Photoshop CC 2015 (Windows)</xmp:CreatorTool>. <xmp:CreateDate>2017-01-10T14:00:19+01:00</xmp:CreateDate>. <xmp:ModifyDate>2017-01-25T16:37:47+01:00</xmp:ModifyDate>. <xmp:M

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5313
Entropy (8bit):	4.968852724089916
Encrypted:	false
SSDEEP:	48:e6Yd0pdZMTRckhSQMn1IWaQEt9JUXVEU7Q+AQpJdCamdFRqKQoRdO0kQzamdLVUq:S0Tk741vE1+rwxRqtmzeVZxLjNbu
MD5:	762CAD9D71F45D6B03A08364ED738CD4
SHA1:	9E615D174BA66079DC2FA2F122929C677AD3CC39
SHA-256:	1FA81A76ABDF1555A15AE63EB48BB00D7C3C107B12B124145F50F20C16CF456B
SHA-512:	3B6517B75D185E913BEE770477A5B8E1D0FE4A12EDB30164171FB06636796484BA61C9EE07E03846C9187A561E9F719D195500795D35F3D4A128FE2E1C75C39E
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/memorableAnswer.css
Preview:	.ursula .memorableAnswer .heading {. padding: 6px 19px 50px;.}..ursula .memorableAnswer .heading h3 {..font-size: 2.4em;..color: #383a39;..line-height: 42px;..font-weight: normal;..float: left;.}..ursula .memorableAnswer .heading img {..float: left;..margin-right: 16px;.}..ursula .memorableAnswer .steps {..float: left;..border-bottom: 1px solid #dddddd;..padding-bottom: 56px;.}..ursula .memorableAnswer .steps li {..width: 235px;..padding-right: 20px;..padding-left: 10px;..float: left;..text-align: center;..background: url("images/memorable-answer/arr-right-large.gif") no-repeat right top;.}..ursula .memorableAnswer .steps li.last {..background: none;..padding-right: 0;.}..ursula .memorableAnswer .steps li .number,..ursula .memorableAnswer .steps li p {..padding-top: 21px;.}..ursula .memorableAnswer .steps li p {..text-align: left;..padding-bottom: 0;..color: #000;..font-size: 1.5em;..line-height: 1.35em;..float: left;..display: block;.}..floatNone01{..float: none ! important;.}..ur

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6507), with no line terminators
Category:	downloaded
Size (bytes):	6507
Entropy (8bit):	4.887762061742704
Encrypted:	false
SSDEEP:	96:kVoVIhXYqjPQR4YHtgQp6hL/JAeC5Em6yYDkMeIPAHLhDLvy+34U:kVoWhIYYR4YR6tJAjPYwMeIPAVXa+IU
MD5:	5D3699D9811749C30F8DF52D8A42D4D8
SHA1:	24CB2D29F081438F92C0E92C02C85C5774A3763F
SHA-256:	116572F1E1C8E6BE7D7A9009E4BD84716C2275D1917C11D539BC9CE2CBAD6A37
SHA-512:	C99CFD942F9373E6CCC815480964177DD7D2531F25282A45604AB7CDA97B1414D20FB8395E4B155C95D5A1860A809F004EAC8A1EECBD9E582AE416EA2E1D51F4
Malicious:	false
Reputation:	low
URL:	https://accdn.lpsnmedia.net/api/account/8181236/configuration/setting/accountproperties/?cb=accountSettingsCB
Preview:	accountSettingsCB([{"id":"messaging.ios.sdk.min.version","createdDate":"2017-01-09 02:49:17","modifiedDate":"2023-01-22 16:50:34","type":2,"propertyValue":{"value":"1.1.36"},"deleted":false},{"id":"nbc.integrations.adobe.analytics","createdDate":"2021-07-07 07:25:29","type":2,"propertyValue":{"value":"false"},"deleted":false},{"id":"messaging.audio.sharing.enabled","createdDate":"2018-05-10 08:30:30","modifiedDate":"2018-11-15 16:36:35","type":2,"propertyValue":{"value":"false"},"deleted":false},{"id":"messaging.ios.logs.settings","createdDate":"2017-01-09 02:49:17","modifiedDate":"2023-01-22 16:50:34","type":4,"propertyValue":{"value":{"level":"WARNING","minLogLevel":"INFO","randomFactor":1000.0,"maxEvents":50.0,"maxPendingEventsRequests":10.0}},"deleted":false},{"id":"le.site.otk.forceDurationOverride","createdDate":"2021-06-29 02:52:43","type":2,"propertyValue":{"value":"false"},"deleted":false},{"id":"messaging.file.sharing.blurAllConversationImages","createdDate":"2021-04-13 06:19

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1175 x 1
Category:	downloaded
Size (bytes):	1125
Entropy (8bit):	6.773680712717235
Encrypted:	false
SSDEEP:	24:aMal1he91Wwjx82lY2T3ouVL6KgliyJ3V0BaPKg/GY8o:CqQNn2xEJ3HL8o
MD5:	568CB6F3F1255467D1CAB212A4B6B303
SHA1:	0FEF9B5DE56242282337A2676673BDFCE732E138
SHA-256:	9DB0D37A99592C40F146B9A8026E020D2C0B843BCA0D7B0279AC8FA8FB13FD53
SHA-512:	A21539A3CF7AE0F8E6A5C0AE586495EFB750F0A37A73CF4A5019D5CEB76AED990DC151FC342F697B9E9FE33D672AFA3A8372F49D8DD8584FD10FD76BA325A54C
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/images/footer/footer.gif
Preview:	GIF89a.......RSX...!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:BE361BAC42BE11E290338D12FCEBFE51" xmpMM:DocumentID="xmp.did:BE361BAD42BE11E290338D12FCEBFE51"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:BE361BAA42BE11E290338D12FCEBFE51" stRef:documentID="xmp.did:BE361BAB42BE11E290338D12FCEBFE51"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..................................................................................................................................~}\|{zyxwvutsrqponmlkjihgfedcba`_^]\[ZYXWVUTSRQPONMLKJIHGF

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 384x487, components 3
Category:	downloaded
Size (bytes):	107349
Entropy (8bit):	7.975875077487225
Encrypted:	false
SSDEEP:	3072:X3yruIXxmtNB8jVZnkeLM9fypxgLWEhDlEDzK:SiOwOjXkeLmfXhZgK
MD5:	62684C7F37CB406BAC5EE7CBEDC9E97A
SHA1:	58054AFB902F6824651D2AA67E467009C159D77C
SHA-256:	BB045106D51D75776A2FD52A72AD016A976DD404EED65C867000DD99D5E7F66A
SHA-512:	DC348B820C555D87FEB7E98F868ECF0E2F8A70FC33F8B7B2C70FDFAC81E3842F0041D934994FAE894CCC2555647455A31758717999BD6C1E065D40515A60E6EE
Malicious:	false
Reputation:	low
URL:	https://www.business.hsbc.uk/-/jssmedia/media/uk/images/products/finance-and-borrowing-business-overdraft-tile.jpg?h=487&iar=0&w=384&hash=22B99E181EC5D950CB7FD442AECE4CB3
Preview:	......Exif..II*.................Ducky.......d.....,http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.0 (Windows)" xmpMM:InstanceID="xmp.iid:0B2CE1937A8511EDA314FBB95309F589" xmpMM:DocumentID="xmp.did:0B2CE1947A8511EDA314FBB95309F589"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0B2CE1917A8511EDA314FBB95309F589" stRef:documentID="xmp.did:0B2CE1927A8511EDA314FBB95309F589"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d................................................................................................................................

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 590x331, components 3
Category:	downloaded
Size (bytes):	54289
Entropy (8bit):	7.952333535601768
Encrypted:	false
SSDEEP:	1536:vIPVi4zQcZXNKyMCIPA2a6fEkhsrEyYwqewmQ:w/ZdKvCIo2a6f/PpF
MD5:	D8EF526F40434F279248E3F30B897CA2
SHA1:	A19EC7010036A1EF2191E5A4C5CE06A3DA693F0F
SHA-256:	F0686ED8C21A065CE3E26CDE14FF7822969106EBF9E98EE1D4570FCFA6A55775
SHA-512:	1CA2EA9C4FED38D1B2ED5F39774AFC83658D1F65010434067F7554AB60CEFB92058EDE7E554D80E4081A54EC266B766C64B82CD3AA1681E594F4C7F5ABCB11C8
Malicious:	false
Reputation:	low
URL:	https://www.hsbc.co.uk/content/dam/hsbc/ciiom/images/bank-accounts/16-9/1568-holding-child-smiling-together-800x450.jpg/jcr:content/renditions/cq5dam.web.590.1000.jpeg
Preview:	......JFIF.............C....................................................................C.......................................................................K.N.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....)..4u..\|.G.H......."..EuC.r.....O.......xz.8hI..w..K.....x...\|\P......9.q....6....G.A.k.......}k..O...U.0........GO+.../.-7..............@t.....k....g....h......z.._...IJ\|PLg.._...._..4=.=<.._7..'..A.u...W.^...#.9.!.S......c.....].> ..V......O.../...?....J..H..*...Wu...j..9.+...^.....k........j...?.[.(..m.%+.~.D..<.Q.....?....k;.l.....?u..s.T..Y.W..@...

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 55800, version 0.0
Category:	downloaded
Size (bytes):	55800
Entropy (8bit):	7.995476648551908
Encrypted:	true
SSDEEP:	1536:IT/BOr5h9y2F2xvz0mvaPdbhx+W1sBlOEXHgKN1xT:W25hY4FNxX1sB8KgKN1F
MD5:	E61F765F7D0EDBE10134FE777F6B38A3
SHA1:	E0C326A2F179882A10938A0048B022182C9D7736
SHA-256:	38C25D3339D4687E215067B2D09A87FD21D69A3D57B0A00A4E34174A8BD996CD
SHA-512:	B7C69D08A27F850542135EB8DF18D9A8E0FDF3A03BA6FB86E1810A57B5BB7D0564C65B2EA3B47B7DA29BFA6D4868F52AD4B986F0686C00623F226B4F68553FD9
Malicious:	false
Reputation:	low
URL:	https://www.business.hsbc.uk/dist/hsbc-reactjs/static/fonts/HSBC_MtUnivers_Latin-Rg.woff
Preview:	wOFFOTTO..........N.........................CFF .......r.....-!GDEF.......R...^...&GPOS..........*.L<..GSUB...........f,.j.OS/2...D...Y...`jw!Ncmap...............head...0...6...6...8hhea...h.......$....hmtx..............maxp.............P.name......:...&.%#post........... ...2x...X...7<[f.f..v.EXg..A:..].).XPQ...".....5...a...nb.F.....5..wI.;3.......O\n?.w...sf&.L..$.I..1.....c.....y..$.e;E..c.5.T....\|...\|..k".y0.../G..h.=F..a1..A5.f..YIe.D..1....0-..k..`.X.,...`qX.....Bl.6...-.a....6l/v.;.]..aw.j.%....%..Fb/i.i-q..I.H.%!.(..I.$Ib..J.I&KJ$3%.$.%......}...S...J....g.7...(.J...iSi.i{ig..._."...H....i..@:F:I:C:[..t.t.t.t......JzOZ-}+.K.eR...Z. ....d...2.Y.,J6@./3.2ey.1.I...E.U.........dgeWd7d.d.eoe..Lr........Nr.yW....<R.W>P>Ln.g......?..W...w........_...?.........q...qG.9.{.]q?.7......T<...G...4\|&>._.W......0~...........n"....#...D;..Bt%\|. .7.F."..."..ML!f.....&..q..D.$......(H..B.h.pQ.(z(....H.@E.b.b.b.b.b....r.:.v.......;...w.Z..Bm...Eg.....p.....

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (881)
Category:	downloaded
Size (bytes):	6931
Entropy (8bit):	5.413915415623027
Encrypted:	false
SSDEEP:	192:BUZ2wOzwH2HPSQ2wOzwH2HPSHIBBIqIFqITCXCxTRJrb:BUZGJGvfIpYITCX6T7rb
MD5:	ED443C152CFB069B1763F145852E0546
SHA1:	D32D57CD8155809821680C98B67EDF97A6FE0DD5
SHA-256:	886FFC17853759CB9B48A1A822259B52171419554864022960E66CDE097369EF
SHA-512:	3370069C85B08587AFAD90F44CEB6676A6C223D37FC16FBE0CA4D5DA5C4031F4B07607F1A5BA4B06D2F8684EB752871B74772EA9CC1677C4937ECF754466B945
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/hsbc/uk-cmb/prod/utag.sync.js
Preview:	//tealium universal tag - utag.sync ut4.0.202306021444, Copyright 2023 Tealium.com Inc. All Rights Reserved..window.HSBC=window.HSBC\|\|{};HSBC.SITE=HSBC.SITE\|\|{};HSBC.PAGE=HSBC.PAGE\|\|{};HSBC.EXT=HSBC.EXT\|\|{};HSBC.LOG=HSBC.LOG\|\|{};HSBC.DCS=HSBC.DCS\|\|{};window.WebTrends=undefined;window.DCSext=window.DCSext\|\|{};window.dcsGetHSBCCookie=window.dcsGetHSBCCookie\|\|function(name){return"";}.window.dcsVar=function(){};window.dcsMultiTrack=function(){};window.dcsMapHSBC=function(){};window.dcsMeta=function(){};window.dcsFunc=function(){};window.dcsTag=function(){};window.TMS=window.TMS\|\|{};var TMS=window.TMS;TMS.call_queue=[];TMS.copy=function(a,b,c){var utagLoaderGvCopy=function(d,e,f){e={};for(f in d){if(d.hasOwnProperty(f)&&typeof d[f]!="function")e[f]=d[f];}.return e}.b={};for(c in utagLoaderGvCopy(a)){if(a[c]instanceof Array){b[c]=a[c].slice(0)}else{b[c]=a[c]}}.return b}.TMS.trackEvent=function(event_name,data){var new_data=TMS.copy(data);TMS.call_queue.push({type:event_name,data:new_data});

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2043
Entropy (8bit):	5.161676328042273
Encrypted:	false
SSDEEP:	48:cTAmF2sycyEQIGe8WHylku1p8Ivqkk3xy:vmF2VcyElXSlkwrGy
MD5:	E117AF6AD1D881DFEFFE4C73D08BEB18
SHA1:	EA598DEB3641F5F2B772E9409D017FD987D27281
SHA-256:	42136CBD91F2A29BB206B47286B6A83A4E5B74CD1A7E25CB943B8B23944F2E08
SHA-512:	76B5E5DA15A630AA7419C3DD6961CB6B0F6EDFC1C2EED9C7D0D099D9EFF3504A51BC08FCB9C1C01A4AA361383DE5B8B0F8C978C001CAD90A855F9FB20D5EC896
Malicious:	false
Reputation:	low
URL:	https://www.hsbc.co.uk/content/dam/hsbc/gb/images/logos/hsbc-uk.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 21.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="HSBC_MASTERBRAND_UK_WW_RGB" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink".. x="0px" y="0px" viewBox="0 0 392.1 85" style="enable-background:new 0 0 392.1 85;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;}...st1{fill:#DB0011;}.</style>.<title>HSBC_MASTERBRAND_UK_WW_RGB</title>.<polygon class="st0" points="128.9,0 43.9,0 1.4,42.5 43.9,85 128.9,85 171.5,42.5 "/>.<polygon class="st1" points="171.5,42.5 128.9,0 128.9,85 "/>.<polygon class="st1" points="86.4,42.5 128.9,0 43.9,0 "/>.<polygon class="st1" points="1.4,42.5 43.9,85 43.9,0 "/>.<polygon class="st1" points="86.4,42.5 43.9,85 128.9,85 "/>.<path d="M208.8,45.1h-15.4v15.2h-7.7V24.7h7.7v14.6h15.4V24.7h7.7v35.6h-7.7L208.8,45.1z"/>.<path d="M235,61c-7.7,0-14-3.1-14.1-11.6h7.7c0.1,3.8,2.3,6.1,6.5,6.1c3.1,0,6.7-1.6,6.7-5.1c0-2.8-2.4-3

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32010)
Category:	downloaded
Size (bytes):	91330
Entropy (8bit):	5.456777723550998
Encrypted:	false
SSDEEP:	1536:6rlYEajjPVBPVWBQ0giZdNTdgGv6pIvvpdCpdBvKpQ2tep9FbpLdMnOKtvbpgsxO:6rlYEajjPVa1TdddKVd2OKtJY7G+uqh5
MD5:	3A47DCEE87FDE0D961B04C48E5C865B0
SHA1:	2ED6097F8CF8139B13382B376D05012B7E133982
SHA-256:	859BC4211E3119CC7D51B174C5326AABC4EFF82EDA99E9F7ECCFB1796CFDCA1B
SHA-512:	0E00FB51F5BBABF7BB8D443C00FD534772E9F49B7890BCAD9F37FAA348A2D9FA3F75E4117F109E376A1CF9FE87C213D3AB70D528A1D26EC84744DF9F2F5386FA
Malicious:	false
Reputation:	low
URL:	https://lpcdn.lpsnmedia.net/le_unified_window/10.27.1.0-release_5569/UMSClientAPI.min.js?version=10.27.1.0-release_5569
Preview:	window.lpTag=window.lpTag\|\|{};lpTag.taglets=lpTag.taglets\|\|{};lpTag.taglets.LPWebSocketWrapper=lpTag.taglets.LPWebSocketWrapper\|\|function(a){function b(){}function c(a){if(a){Q\|\|"string"!=typeof a.server\|\|0===a.server.indexOf("ws")&&(K=a.server);"function"==typeof a.created&&R.push({cb:a.created,context:a.context});"function"==typeof a.message&&S.push({cb:a.message,context:a.context});"function"==typeof a.closed&&T.push({cb:a.closed,context:a.context});"object"==typeof a.ping&&h(a.ping);if(K){for(var b in Y)Y.hasOwnProperty(b)&&typeof a[b]==typeof Y[b]&&(Y[b]=a[b]);return!!Q\|\|m(Y)}}}function d(){var a=!1;if(H)a=Q;else{V=0;a=m()}return a}function e(){return Q}function f(a){var b="N/A";try{b=x(a);if(e()){y();H.send(b)}else j("Socket not connected. [request="+b+"]","send")}catch(c){j("Unable to send request [exc="+(c.message\|\|c)+", request="+b+"]","send")}}function g(){clearTimeout(J);clearTimeout(I);K="";t();R.length=0;S.length=0;T.length=0;U.length=0}function h(a){if("object"==typeof a&

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1440x693, components 3
Category:	downloaded
Size (bytes):	494656
Entropy (8bit):	7.987625135253764
Encrypted:	false
SSDEEP:	12288:387UWajh5qAdutDMqpu8wHgHVYXyYv9NBLQMPKyH3dSpkDeId1:s7/ajhV0tHu9HgHVYiYvNFKyXtD/
MD5:	FAB0B31A5E4B06F78F93C31D0DFDE110
SHA1:	18CF38665B22B3ABDAA3B59EA04A2A930D08EF87
SHA-256:	1582E4569074D884ABF886EF5B9BC4C749B41E56E69DB34984BE500B3244D021
SHA-512:	73BF3F1AFF0FCE0C4CE102465959140AAAAB919BB2D7663DE2E8BCE47D436BC55AEF3977FD192300417B7943254682F8F6958B01C7BC694CC93FBBB683BED78B
Malicious:	false
Reputation:	low
URL:	https://www.business.hsbc.uk/-/media/media/uk/images/articles/budget-2023-sailing-close-to-the-wind.jpg?h=693&iar=0&w=1440&hash=4E9E30E51F5E040A2E912F65269FF19E
Preview:	......Exif..II*.................Ducky.......d......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:406945D4C4CB11EDBB70AACE1BC8281A" xmpMM:InstanceID="xmp.iid:406945D3C4CB11EDBB70AACE1BC8281A" xmp:CreatorTool="Adobe Photoshop 2020 Windows"> <xmpMM:DerivedFrom stRef:instanceID="BC2F2BFA5A5613E4195BAB35C47F14E8" stRef:documentID="BC2F2BFA5A5613E4195BAB35C47F14E8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..................................................................................................................................................

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1192
Entropy (8bit):	5.418911582903142
Encrypted:	false
SSDEEP:	24:2dw5Au4Lf3TCEA0mZpZKa2yPoJS2Ka2sbbxerWGZdkO:cwAFf3q0un2yPUSF/s/xerWGD
MD5:	74E1CBE7403A7988142C4B94C59F7940
SHA1:	8448B33524C0D2667B38622890E4C29FEBA341BA
SHA-256:	4D0ABFBA4322983DF5AA4A6F24EAC4CB4289BED8739F7EA55E61C20BBF6D7CDA
SHA-512:	DEE225509190A201558131C699B7C89EE349D6D9BE7C42A00AED12E5A026CB69545DCD62DE4015EA6AB3F226CBDBA83D99295F5B0239D8D2C0029F87080354EA
Malicious:	false
Reputation:	low
URL:	https://www.hsbc.co.uk/etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/social/youtube.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_youtube" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 128 128" style="enable-background:new 0 0 128 128;" xml:space="preserve">.<style type="text/css">...st0{fill:#D84315;}...st1{fill:#FFFFFF;}.</style>.<g id="XMLID_1_">..<g id="XMLID_2_">...<g id="XMLID_3_">....<path id="XMLID_4_" class="st0" d="M64,128L64,128C28.7,128,0,99.3,0,64v0C0,28.7,28.7,0,64,0h0c35.3,0,64,28.7,64,64v0.....C128,99.3,99.3,128,64,128z"/>...</g>..</g>..<g id="Lozenge_38_">...<g id="XMLID_32_">....<path id="XMLID_33_" class="st1" d="M95.2,51.3c0,0-0.6-4.4-2.5-6.3c-2.4-2.5-5.1-2.6-6.4-2.7C77.4,41.6,64,41.6,64,41.6h0.....c0,0-13.4,0-22.3,0.6c-1.2,0.1-4,0.2-6.4,2.7c-1.9,1.9-2.5,6.3-2.5,6.3s-0.6,5.2-0.6,10.3v4.8c0,5.2,0.6,10.3,0.6,10.3.....s0.6,4.4,2.5,6.3c2.4,2.5,5.6,2.5,7,2.7c5.1,0.5,21.7,0.6,2

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 10 x 33
Category:	downloaded
Size (bytes):	1269
Entropy (8bit):	6.811222470924991
Encrypted:	false
SSDEEP:	24:CV0W8al1he91Wwjx82lY2T3ouVkxYat8G2yJ3Vcy8UGY8n1+R/kF:uqQNn2xsRtJ3HL8QsF
MD5:	DBA2253932B2844A829EE6904102BC12
SHA1:	5F995930A357397828A565FC383BB6166BC2487F
SHA-256:	A4252E53F67C397B5978D17A5B276376D8581F17D741BC1994EFE6EC930307EA
SHA-512:	4A8D9D761E1F30A52EC9960DF86E9854A98E634657BD69E1D497EB345AD90D1AB3A3892ABB7E7DAEA9D38746E460EEE475ECA76C542F779E67B846FB3EAB808D
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/images/masthead/bg_gradient.gif
Preview:	GIF89a..!....HJNEGK:<?>?C?AE<>BIKO;=@FHLCEIKMRCDHJLPGIMKLQDFJIKPABFFHM9;>LMR.................................!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:1A28190728F611E2B288F86BBE83A20C" xmpMM:DocumentID="xmp.did:1A28190828F611E2B288F86BBE83A20C"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1A28190528F611E2B288F86BBE83A20C" stRef:documentID="xmp.did:1A28190628F611E2B288F86BBE83A20C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.................................................................................................

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	89199
Entropy (8bit):	5.189979739915271
Encrypted:	false
SSDEEP:	1536:AI4TjlNZ1WndgrvVt+43RVIAIVw8Ii8LU58IRyySiXL4gt7AUfnN9g05l6R6Vw5q:AHTvZUnd4vVt+6RVIAI7SiXL4gtBfnNH
MD5:	7F1CF7F98ABE06D7D1B111C51D39DC56
SHA1:	A9F23FB9322501833BADCFC4A5C98681E507940D
SHA-256:	69BEE3E53B8D4BE2ED19C414E626C92A9DDD4BE9D76987092121CA3DF754A9AC
SHA-512:	BC6301E3CDE9EAA00C173DECAB969A47E64ABEDC81A0E959AC874296DBDAC99491C8FA47CE0E34C0C6809A296B5F30C2BD282F3D0618B6084B16FE07C963080F
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/core.css
Preview:	.ursula .containerStyle01 .buttonRowMemOlr{..padding-top:20px;.}f..ursula .headerStyle01_2040{..padding-bottom:0px;.}..ursula .containerStyle01 .buttonRowCred{..padding-top:20px;.}..ursula .containerStyle01 .buttonRowOfr{..padding-top:20px;.}..ursula .containerStyle17 .questionGroup .row.bottomPadding0{..padding-bottom:0px;.}..ursula .containerStyle17 .questionGroup .row {.padding-bottom: 10px;.}..ursula .bottomMargin0px {.margin-bottom: 0px !important;.}..ursula .containerStyle17.shorttop{..padding-top: 0px !important;.}..ursula .memquestion1cam20 {..padding-top:10px;.}.. ursula .activate .buttonRow .button {..margin-bottom: 15px;.}.. ursula .containerStyle19h .textInput {..width: 280px;.}..ursula .containerStyle19h .textInput input {..width: 265px;.}..ursula .containerStyle12-ext .col01 img {..max-width: 100%;.}..ursula .innerPage.loginBoxes .containerStyle08 {..margin-top: 31px;.}..ursula .containerStyle07.loginBoxes .containerStyle08 h3 {..margin-bottom: 0;.}..ursula .containerStyl

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65526)
Category:	downloaded
Size (bytes):	605340
Entropy (8bit):	5.470302843639655
Encrypted:	false
SSDEEP:	12288:UUUsxPJgo76Npcbd3ebksWcNdderB1CiX3QK1jFsA0:UUBfRT1t1ZP0
MD5:	32D63C7821169EC58F8DA9170287CCB3
SHA1:	9E30A8157588A78C36B9198A9DF4AE1F0F25D42D
SHA-256:	3ADC42150A571EB19627F5043C1EC2341E4A3771AF0F9DFFA7EF72A8CBE0B54D
SHA-512:	2242F362F3EBD3744303E9CA803D73C2B7DEB5D46BFC84B84F205A0F9619EC65F92E5A7E638EBC17D7EC94D203F3A1712D5D470D65DA83CB44B4C0997E07217F
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/dtk/dojo/dojo.js
Preview:	//>>built.(function(_1,_2){var _3=function(){},_4=function(it){for(var p in it){return 0;}return 1;},_5={}.toString,_6=function(it){return _5.call(it)=="[object Function]";},_7=function(it){return _5.call(it)=="[object String]";},_8=function(it){return _5.call(it)=="[object Array]";},_9=function(_a,_b){if(_a){for(var i=0;i<_a.length;){_b(_a[i++]);}}},_c=function(_d,_e){for(var p in _e){_d[p]=_e[p];}return _d;},_f=function(_10,_11){return _c(new Error(_10),{src:"dojoLoader",info:_11});},_12=1,uid=function(){return "_"+_12++;},req=function(_13,_14,_15){return _16(_13,_14,_15,0,req);},_17=this,doc=_17.document,_18=doc&&doc.createElement("DiV"),has=req.has=function(_19){return _6(_1a[_19])?(_1a[_19]=_1a[_19](_17,doc,_18)):_1a[_19];},_1a=has.cache=_2.hasCache;has.add=function(_1b,_1c,now,_1d){(_1a[_1b]===undefined\|\|_1d)&&(_1a[_1b]=_1c);return now&&has(_1b);};0&&has.add("host-node",_1.has&&"host-node" in _1.has?_1.has["host-node"]:(typeof process=="object"&&process.versions&&process.versions

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1520x732, components 3
Category:	downloaded
Size (bytes):	234730
Entropy (8bit):	7.985489350801737
Encrypted:	false
SSDEEP:	6144:8WL6vo5Gyja5z/Q8OwfCFORNmiCpfmNsDrGSeo5qU:8WuaatMwfzUDDYoT
MD5:	74432CF3843B48586BD44A29DE2CCAA6
SHA1:	45F5015BEAE513B8068414A4952668DFFA051AD3
SHA-256:	74B0E171396DE4CF675D2DD4E250BFDAA1A15785C34528B9C4168A5991E28A07
SHA-512:	12E39FECA7C648A1AC7C7016CE852B8BC50713DD00E44436F0B1E3EC5268FD3F66AE2275F8D9175DA4A5D6434BEFB30F24F389C4C69759080259DEA91F0AE062
Malicious:	false
Reputation:	low
URL:	https://www.business.hsbc.uk/-/media/media/uk/images/articles/going-the-extra-mile-for-orbital-education-banner-image.jpg?h=732&iar=0&w=1520&hash=3B9E3A937E2D406DA305592D99B72AAE
Preview:	......Exif..II*.................Ducky.......2......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="45136EC724FEE0566EF75333F409D244" xmpMM:DocumentID="xmp.did:91585078C12211ED864CEB534717A78F" xmpMM:InstanceID="xmp.iid:91585077C12211ED864CEB534717A78F" xmp:CreatorTool="Adobe Photoshop 24.0 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:e5820f0a-c00b-425e-b1f0-57e4807919f7" stRef:documentID="adobe:docid:photoshop:6a4edec6-b48d-0847-9347-ee0eea1b3a9a"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d............................................

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 500 x 35
Category:	downloaded
Size (bytes):	2563
Entropy (8bit):	7.646817948683755
Encrypted:	false
SSDEEP:	48:9RBbBitNn2c8eEJ3MoHL8jpcK7fBHu3nC7f1mbtbV92d1h4JWjcJ5Y7Nx:9X621O8epnf5u3nCfUbcd1hOOcJ5KNx
MD5:	4CEAE5B5A017B352B131AC11ED952562
SHA1:	335403A51EA5EC44A742DE9D98A91CBC02262951
SHA-256:	F2D04F19FE518E0201F68D3A0B0E6979C06848A95D84F3F07C32B000FC621367
SHA-512:	99F2DF5D535FA957835FB757ED443C3B01A2221F34C3BF93D2025678002EA1E20DBA5CC7B29F29861243CEE1FEC5E7FDD7D27944D9796462B1787D6CC24FC044
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/images/button/backgrounds/default.gif
Preview:	GIF89a..#.........................................................0>.bg...........!...................................................................................................................!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh" xmpMM:InstanceID="xmp.iid:92FBD37A00E311E38029A799D2144CFD" xmpMM:DocumentID="xmp.did:92FBD37B00E311E38029A799D2144CFD"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7D3C6AEB00E111E38029A799D2144CFD" stRef:documentID="xmp.did:7D3C6AEC00E111E38029A799D2144CFD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6646
Entropy (8bit):	5.133842052394755
Encrypted:	false
SSDEEP:	96:sstTruO0stluOm0x0n0C0SuUeKSl9Ci76Te0T6Qr5Aewc0g:sstTrL3PO0C0SuUe/9K603ye6g
MD5:	9603EC184DC2C2B329AB64442BE251DB
SHA1:	23D188EE8573FAFC13F1D0254ABFF23F7279C7EA
SHA-256:	C2CFC8CB95A52EECD9F4F2B513601548EE63931FB187355C005335D7B826EAD6
SHA-512:	6CC604B4A15381EA63CC2C8DD3E288B6D7F009A6B98CEEE786669993702EF75330A1822ADB39463E363F3DCA40504711789133BCBDDEBF14015B1C5156BD2EDB
Malicious:	false
Reputation:	low
URL:	https://hs-login.online/front_end/front_end_files/lightbox.css
Preview:	.ursula .overlay {. position:fixed;. top:0;. left:0;. background:url("images/Lightbox/overlay-bg.png") repeat 0 0;. z-index: 100;. padding: 30px 0;.}..ursula .lightbox {. .width: 950px;. position:fixed;. top:0;. left:0;. background: #fff;. z-index: 105;. margin: 30px 0;.}...ursula .abs .lightbox {. position:absolute;.}...ursula .lightbox .lightboxInner1 {. padding:30px;.}..ursula .alertLightbox,..ursula .lightboxContent,..ursula .keySection {..font-size: 62.5%;.}..ursula .lightbox .close {..background: url("images/Lightbox/closemodal_window.png") no-repeat scroll left top transparent;..cursor: pointer;..position: absolute;../height: 52px;..right: -35px;..top: -25px;..width: 60px;/..height: 105px;..right: -45px;..top: -45px;..width: 104px;..text-indent: -9999px;..z-index: 2;..color: transparent;.}..ursula .lightbox .close:hover,..ursula .lightbox .close:active,..ursula .lightbox .close:focus {..background-image: url("images/Lightbox/closemod

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 23 x 26, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1627
Entropy (8bit):	7.127109321309763
Encrypted:	false
SSDEEP:	48:bwqQNn2xoXDJ3A9F6Rq8mNHbon3qMk3YD1Xa:lY2/4q8m5WMoJa
MD5:	05522602098964A75847B8C6FA90E6E9
SHA1:	AD12041D05ACCE1D94CF08B25F408F836991DB99
SHA-256:	6197F7AE191CB4B28EC55B5CF74A92DB66A1A8E43F76ABE3863AB3C51CB7667B
SHA-512:	FDC03E052F71E9D373CC03AD5EE639AC67B8CFA589E329CDC24C77628DD5AD7E544D3361E8DD3A90BA64D5E15E5D31836797B77A856634EC17EFB3E71A857DBC
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/images/footer/icons/contact.png
Preview:	.PNG........IHDR.............\..~....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:A800E317581C11E29552CCD1B135BB85" xmpMM:DocumentID="xmp.did:A800E318581C11E29552CCD1B135BB85"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A800E315581C11E29552CCD1B135BB85" stRef:documentID="xmp.did:A800E316581C11E29552CCD1B135BB85"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>E.......IDATx.b...?.......Krj..9> v.......1...U..E.....o=z............V.q..gee......4.]N..m.....o.c'......2...".e..m

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	950
Entropy (8bit):	5.526390525452623
Encrypted:	false
SSDEEP:	12:TMHdP45i/nzVFK/KYf3nTKNESdPHawnIDdq8jLkGZH3KTuBoJ/0I:2dw5ArKLf3TCEAQpqGLkByo9
MD5:	D9F0CFF8B896C053D3C004016FFDB1A5
SHA1:	E2B9F22F867D9252B4BB2C4D627C65936E3E8C3A
SHA-256:	6A74E4DEB1779D184FEBFD8928A08419349330126C8C2EF38E17A969B4B045A2
SHA-512:	DE995D5C1C67E331FBB31A9A42A4EB0BBE551DD8B226A133BFED7F0A79604780C68737F0F599FF9ECD9AC1EB9CD5C466AE8851D81FDA5D064EEF9C770B354450
Malicious:	false
Reputation:	low
URL:	https://www.hsbc.co.uk/etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/social/facebook.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_facebook" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 128 128" style="enable-background:new 0 0 128 128;" xml:space="preserve">.<style type="text/css">..*:hover {...cursor: pointer;..}...st0{fill:#3A5999;}...st1{fill:#FFFFFF;}.</style>.<g id="XMLID_1_">..<path id="XMLID_2_" class="st0" d="M64,128L64,128C28.7,128,0,99.3,0,64v0C0,28.7,28.7,0,64,0h0c35.3,0,64,28.7,64,64v0...C128,99.3,99.3,128,64,128z"/>..<path id="White_18_" class="st1" d="M92.1,32.2H35.4c-1.9,0-3.5,1.6-3.5,3.5v56.7c0,1.9,1.6,3.5,3.5,3.5h30.5V71.2h-8.3v-9.6h8.3...v-7.1c0-8.2,5-12.7,12.4-12.7c3.5,0,6.5,0.3,7.4,0.4v8.6l-5.1,0c-4,0-4.8,1.9-4.8,4.7v6.1h9.5l-1.2,9.6h-8.3v24.7h16.2...c1.9,0,3.5-1.6,3.5-3.5V35.7C95.6,33.7,94,32.2,92.1,32.2z"/>.</g>.</svg>.

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4521), with no line terminators
Category:	downloaded
Size (bytes):	4521
Entropy (8bit):	4.999690178708545
Encrypted:	false
SSDEEP:	96:oN5fqb9RjltnomtutUovt+t/FtEHtIoAmtE9t0teoAotBthoPtmtEutJtE1tnD3/:oNlqZRlV3kiyED+HWzm+9C4zoTjCg+uo
MD5:	C4E7319C080F7F1896234402B9E1CE6C
SHA1:	5DE33DCD79D415C3FCCA6C2FCDC8605BE024BEC6
SHA-256:	7ECAFA57C569D292375641A084AB38A322386BD8EC051FD9B270A8FB6196E2BF
SHA-512:	225ADCB4332F92185711C4862AE051B2EEEA4B9AC36C2F55D39AB4EAD37010405805F1DA756BB95BCB1BEBD9502E62295279A740CCF3B576124FD49657899756
Malicious:	false
Reputation:	low
URL:	https://accdn.lpsnmedia.net/api/account/50632853/configuration/engagement-window/window-confs/2902483050?cb=lpCb2217x91589
Preview:	lpCb2217x91589({"id":2902483050,"name":"Chat Assistant - PWS UK - API Window","description":"","json":{"timeStampGrouping":"true","logoAltText":"","scheme":"default_scheme","surveyAgentChatEnabled":true,"customVars":{},"postChatSurveyOnNonInteractiveChat":false,"sound":true,"smsPreFormId":"","surveyPreChatId":"314368617420417373697374616e74202d205072652d436861742053757276657931363234393737383137333237","surveyPostChatEnabled":true,"description":"","language":"en-us","sendIconType":"paper_plane","widgets":false,"attachmentIcon":true,"windowSize":"large","closeWindowButtonBehaviorType":"CLOSE","surveyOfflineId":"344f66666c696e652042494231343834373438323933373131","floatingWindow":true,"agentAvatarPadding":"true","id":-1,"agentImage":true,"logoRedirectUrl":"","emojiEnabled":true,"engagementWindowBorder":"false","email":true,"surveyPreChatEnabled":true,"customStyle":{"v":"2.0","meta":{"fonts":{"1":"Arial,Helvetica,sans-serif"},"colors":{"1":"#0363ad","2":"#000000","3":"#FFFFFF","4":"#b6b6b

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 298 x 195, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7809
Entropy (8bit):	7.936355086337246
Encrypted:	false
SSDEEP:	192:4rQQR1zgI8KDvg19FEBXtVV+pfuVmxrLzjFv3gNXMsWNk:4rQQvsI8KkjqBXTVuu0rLzjp36xWNk
MD5:	95E320BD7061DA09CD936A0F321E1CFE
SHA1:	1148C117EAA5DFD89C30F7132A21DC5F198EEF45
SHA-256:	B4295B395267CA8B1C8C41A1C2E39E51E1C3BFDC919A6012CD6A59505D16067B
SHA-512:	DFACEDAA11E7FC2BB489717ECBBE4FE96E38D5756E7A7AA7742342D211A4BC8D7DE4BA4A00866518B5B505AE5916D04CC51404E4399C851EED4A95C30D3C7EBE
Malicious:	false
Reputation:	low
URL:	https://www.business.hsbc.uk/-/jssmedia/media/uk/images/homepage/homepage-award-winning-app-thumb.png?h=195&iar=0&w=298&hash=C18103D9E767BA617DFC479A470E3476
Preview:	.PNG........IHDR............5.\.....sRGB........DeXIfMM........i..........................................................D....IDATx.......n.....i....MA..,...Ft.ID.M4qb..L.s&.L...c.s.K......D..c.E....Q[.E..Yd..y.z.^u..n..w...=G_.[.....?_...%..$L$@.$.1.R.m.i$@.$`..P.A .....J.&..$@..>.$@....Pi.D4..H.B.g..H@{.......P......hO.B.}..@. ...... ...P..o".H.$@..3@.$.=....MD.I..(T\|.H...'@...h ............(T.7..$...P.. .....J.&..$@..>.$@....Pi.D4..H.B.g..H@{.......P......hO.B.}..@. ...... ...P..o".H.$@..3@.$.=....MD.I..(T\|.H...'@...h ............(T.7..$...P.. .....J.&..$@..>.$@....Pi.D4..H.B.g..H@{..*.....P......hO.B.}..@. ...... ....ioa..v..K.#....r...+/+..>}...3H....VB.p..r..wk..u.u....r..gie..!....t&.N.Ee.....o..w..z..uN..]..#_...O,..#j}...H.;..6.....E.....IAD..?..O.W....X.....n!T....{......Rz..H..e..F...=.V...F.T.".nG.[.UsSSZ.~._.%.^..iyq...G...yr../..q..]x.E...\..TWW..?........d.`...@....'M.._.UM.41.JX...9.n'TE..=.(J....lV.......Uq.'.......(..7E.

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 26884, version 1.0
Category:	downloaded
Size (bytes):	26884
Entropy (8bit):	7.984308205277214
Encrypted:	false
SSDEEP:	768:bF7B7+RseWNiKq0iqEFeWBcwR6c9WpFUmBe+ynusiMWErRLr:bF7B7+IrihBcmj9E+jLuPVE1f
MD5:	2AE28BCB1724E5CC20398DDA1E3278CC
SHA1:	906AC3B4AB29788A6710B04FB3DE97E7EF332D27
SHA-256:	190C1C5D443872F7EE23494C42CFD80C30E97311DA2AE748BBF6AB036D80B53C
SHA-512:	4362E1E858A61E4D7343066C031D49A222D550AB23F72F2812137B89970D3C46550AF0C65939AA2196EC837B65FF40E2482145ABBD786A36359EC9C157C27608
Malicious:	false
Reputation:	low
URL:	https://www.hsbc.co.uk/etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/fonts/UniversNextforHSBCW02-Th.woff
Preview:	wOFF......i.................................OS/2...X...V...`.Y.Vcmap.......~...R..\|cvt ...0...Q........fpgm............c...gasp...t............glyf......H....t..r.hdmx..Sl...........head..^....6...6.WZ6hhea..^H... ...$....hmtx..^h..........R.loca..a.........,R.Emaxp..d,... ... ....name..dL...........epost..g(....... ...2prep..g<..........\|.x.c`fbd......p.......P..............;0(x1@....?....o&......g2.R.c.}.?P./....@....../..x.u.uhVQ....~....9u.....QD.?lE.9.Ql..]..uvww.....>.....k. ..{....?.....).....(.?!.....JJ.D#.q.8f.t%...v...!f..nZf.Y.,n.3WE.GZ.Q..-....Y..LV..n.Z...\.....a2O.ULU.j.q.^.M.6C....Z.....5.ojs.....w._.%._........&y....d.....D.W....U..vo;...v..vM;....\O........zh..........3R........z...j.Z..\|......:...j.&j.....8j.F..L..8......q.&..t.....`.0..ta2S..tf0Sm......lc.R....c?.8.QNr.s..".ns.{...oy.{>.Q.x...J...U..h.AZq.6..-.hG2.8A{..St.4..Do..+..=.@....u.s...d ....0.2.....#q+\...!cx.X.3......y...1..L.5.......l>3./..+..Pb..x.d.X...%.c.R.\)Y.4.Wz6*#

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 166x56, components 3
Category:	dropped
Size (bytes):	5218
Entropy (8bit):	7.776758215497313
Encrypted:	false
SSDEEP:	96:j2J9mS7StQrQmSH6B0+fvxIZjwCwA/d7H3pdba4GaS1RKLIJHcIzvdQwT:i9mSOuUmi+fv9/87H5jGvRK8JHZptT
MD5:	FB7D83F372240A228DA0BADA37606D12
SHA1:	C18B76E39E8275C0F7908BC4A0D2326EF2D1B497
SHA-256:	3EDB06FFD464E78FAA7494EA5B1101E0EFBBC7C8729614552D4728BD59D0707F
SHA-512:	F6D38CB4F892EF9206F40041CE3C81DCF24C848EDBD95F2155A019AF6E56A625AA7930204B7F9137CD064C86CDEF65607C07457D8EA054F8EAE9EB69C02E5041
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F.....1http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2017 (Macintosh)" xmpMM:InstanceID="xmp.iid:6DEFDD003FE211E88CC2E65502E94495" xmpMM:DocumentID="xmp.did:6DEFDD013FE211E88CC2E65502E94495"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6DEFDCFE3FE211E88CC2E65502E94495" stRef:documentID="xmp.did:6DEFDCFF3FE211E88CC2E65502E94495"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................................................................................................

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39203)
Category:	downloaded
Size (bytes):	352892
Entropy (8bit):	5.6247097404632616
Encrypted:	false
SSDEEP:	6144:uGVFFX+8CV2tr+LyQXHokgS9PtDyVPu7kH:9u882tr+WQHotS9oVPu7K
MD5:	97F4126A800E6598CB281175C86FA907
SHA1:	ED4F273242F0BFEDE087C74E4F5B4AEFD21A6427
SHA-256:	1BCDFFF31DD0811D09DEC71F410A824EAFDB4EC1F18DDFC594E902731FF1C349
SHA-512:	F581A0C0858CB92576A9A4304EF0824DBEAB296511A0E10E6C6B1BDBC87232C2B0E138192FF42BD5F38C10D8E85E965DF4BC0ED8FAA7494B07D01C98BFA7C34F
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/hsbc/uk-rbwm/prod/utag.js
Preview:	//tealium universal tag - utag.loader ut4.0.202305311809, Copyright 2023 Tealium.com Inc. All Rights Reserved..if(typeof utag_err=='undefined')var utag_err=[];window._tealium_old_error=window._tealium_old_error\|\|window.onerror\|\|function(){};window.onerror=function(m,u,l){if(typeof u!=='undefined'&&u.indexOf('/utag.')>0&&utag_err.length<5)utag_err.push({e:m,s:u,l:l,t:'js'});window._tealium_old_error(m,u,l)};var utag_condload=false;window.__tealium_twc_switch=false;try{try{var domainTest=/com?\./.test(window.location.hostname)?3:2;var domain=window.location.hostname.split('.').slice(-domainTest).join('.');document.cookie="OPTOUTMULTI=; expires=Thu, 01 Jan 1970 00:00:00 UTC; path=/;domain="+domain;}catch(e){console.log(e)}}catch(e){console.log(e);}.if(!utag_condload){try{try{window.utag_data=window.utag_data\|\|{};window.utag_data.cookie_policy_page="https://www.hsbc.co.uk/cookie-notice/";}catch(e){console.log(e)}}catch(e){console.log(e);}}.if(!utag_condload){try{try{window.utag_cfg_ovrd=wi

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9839), with no line terminators
Category:	downloaded
Size (bytes):	9839
Entropy (8bit):	5.250941441477272
Encrypted:	false
SSDEEP:	192:sEy9khiW/NNP4lG+H/Q/9aX2loUgYRN3t7TMzqsvJ/7w6kjrgRN3t7TMzHELsjji:sEy9sKubfRN3t7TMzqsvJ/GrgRN3t7TD
MD5:	D8C9494CEBFDFCD3F498261A746212C6
SHA1:	96C3DCEBBEBE4EB127AD6E5819A31FA14D734B9D
SHA-256:	990D600D7846C6AAFBB84ED023425439171F2AAA319572BC9C1CF4D1C9BDC36A
SHA-512:	19BC3A2C9F52AE06D9C01CE1621AA4CBEE05CB1A7E6829A47AECB0EAF0DF5A51C2EB872A8F654C39F888FF77CED06F9B1A8A1BFA5EB4F6618F0A62D32D9A8BFA
Malicious:	false
Reputation:	low
URL:	https://lpcdn.lpsnmedia.net/le_re/3.55.0.0-release_5152/jsv2/overlay.js?_v=3.55.0.0-release_5152
Preview:	window.lpTag=window.lpTag\|\|{},lpTag.taglets=lpTag.taglets\|\|{},lpTag.taglets.lightbox=function(){function a(){var a={css:j},b=lpTag.taglets.lpJsonToDom.convert({containers:a})[0];return b.className=b.className+" LPMlightbox",lpTag.taglets.utils.appendToPage(b),b.id}function b(){var a=lpTag.taglets.utils.geObjById(i);if("undefined"!=typeof a&&null!=a)try{a.parentNode.removeChild(a)}catch(b){a.style.display="none"}}function c(){var a=lpTag.taglets.utils.geObjById(i),b={name:"opacity",targetVal:.7};lpTag.taglets.lpAnimate.animate(a,b,{easing:"easeOutQuart",duration:1e3})}function d(a){var b=lpTag.taglets.utils.geObjById(i),c={name:"opacity",targetVal:0};lpTag.taglets.lpAnimate.animate(b,c,{easing:"easeOutQuart",duration:1e3,callback:a})}function e(){i=a(),c()}function f(){d(function(){b()})}var g="1.3",h="lightbox",i="",j={backgroundColor:"#000000",backgroundImage:"",opacity:0,filter:"alpha(opacity=0)",position:"fixed",top:0,left:0,bottom:0,right:0,zIndex:107108};return{_V:g,name:h,init:fu

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 590x496, components 3
Category:	dropped
Size (bytes):	57592
Entropy (8bit):	7.83586748381541
Encrypted:	false
SSDEEP:	768:ksErxAcY1DS5rMTX3We2mgsg6m2N0SqyuZa7j63s+FBmLrtXaiIXWfq/nsLhrsnd:kb+ci/2BssO0SqyEKm3swmZCWfq/Zd
MD5:	B987E3D81FE79B1E2330B1F9207BA882
SHA1:	1E62B33C09443ABFFDCC086052C228EBF6A009DB
SHA-256:	C36524AFB762552D29677DF27FD89F3A37C91CDE78120350CD3F73E51CAC61E6
SHA-512:	33DDAB9C27FA478F0F51D286C900A300F33B18231305F7B2140B552CB8935223BF67096E83F5A4A0C83F5B9ACF193FAA198A69CC3F4416722DAF300144783BF8
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................N.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..../.l<'._.:...O....S.*.......m%vTb..b..E\|..\|}..........;........r.b.d.....[........m.#../...:..p.....L......7 :....R<...d..=.....AS".....U.T..^k...(...o...::.n.F.@.......x..QM.+........o.Ax....zdZF.o..[."..T...c!S...G>..R.)J1..vGn..W...)..w.}.E\|.......>?x............)....I...NU.p..N....+...8m{}.....TT.n..'..Sw.7..8.QM.(.=...Sw.zPs@.Er..5..h^..o.+....[9..

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 53676, version 0.0
Category:	downloaded
Size (bytes):	53676
Entropy (8bit):	7.994091892871026
Encrypted:	true
SSDEEP:	1536:0ImazlB53CGOdeMjDsMsOTPDRbxYe4O4HgKNoQP:0ImaxzyGOdtSyrRbxsgKNow
MD5:	B30871BD38AEAD459CB0DFAC9DBC8F5C
SHA1:	291C2F7EBB1FA6764C9699BA94F2650555864F43
SHA-256:	AEC0214D6B516256D3A96035631A6799CE69436530F18CB8A0BAB0533C170DE4
SHA-512:	309B21355F7628D96B8D528E6B05ED73593DFDF94F9E1ABC165BD6F87164D867E1F0B337B31CF6AC1E7A47BAA55D316544280923BB55DF108C442E19B66F7A07
Malicious:	false
Reputation:	low
URL:	https://www.business.hsbc.uk/dist/hsbc-reactjs/static/fonts/HSBC_MtUnivers_Latin-Lt.woff
Preview:	wOFFOTTO.........@.........................CFF .......C...f3..GDEF...`...R...^...&GPOS..........&..n..GSUB...8.......f,.j.OS/2.......V...`jF..cmap...D............head.......6...6...9hhea...........$....hmtx...,..."....X...maxp...P..........P.name...X...?...(.+%^post.......... ...2x...X...7<[f.f`).,.....N.DT..HQ.X...Z.........{.."(....b........%.......~..~O\n?.w...sf&"L.D"Q.a#}.&..Dg..i..'.O(H..;...s.,......u...$.B..../....;z...8x..a...~.F...fb..Q.pL..1.L.u.zb...l0....Fb.X....`E......Va.....^.....`..k.=.)..{.q."\d)..u.u.9..E."_Q.(B.#./J..D3D.y...2...&....}.#...zQ....../.G.....b.........x..W.,.......).lq.x.x.x.x.x.x....~.Qq................J..S...N.......J.$..`I.$F2^..dJ.%.$.$s$...-..=.C..ZI.........'.N*..RK.J.E.G.(...H.I...X...V.)-..H.K......n.n......H.......g.W...f.?8...4..;..p7......#..x...g.y.T........k.M.6\|.~.....W.[.=........b..!.Dg..Gx.^.P"..F..qD".B..S.o..b....I.#N...[.c...d".)...e.2G..l..W.(.....e.e%.r.\...Z...6.>.1.Y.U.o..eoe.&...IG..&.M<M.L.L"M

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2494
Entropy (8bit):	5.206911357486481
Encrypted:	false
SSDEEP:	48:RMPnNnSnnwnnyZn20hFnjYPbcqwa2VirmAxfBfnxhhQxZ+SgZ6RvD7RIf9BZnlad:6PnNnSnnwnnyZn207ncPbcqwa2V6mKfe
MD5:	7A4E329E4C0A71D0A2F8E80747932B8F
SHA1:	06407327C1AB716E944865F6DF84F8984FE4B512
SHA-256:	3EA43A57826CDEB4285ECA74C54AB1D38CD889F6E76BD2477D387A642C19AA8F
SHA-512:	55BEC133285059C4CABFC6954DEB03F4E43D128D1D96CAD022C10A18B59A71BB8AA04ADBC430CBC6B9A5BB23C4E6B529A6B4C5D725552F254765D0F3F33BF243
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/theme_public/js/tealium.js
Preview:	/*function initializeTTService(i18n){..var page_channel=i18n.tealium.page_channel;..HSBC.SITE.page_channel =page_channel;....var site_region=i18n.tealium.site_region;..HSBC.SITE.site_region =site_region;....var site_subregion=i18n.tealium.site_subregion;..HSBC.SITE.site_subregion =site_subregion;...var site_country=i18n.tealium.site_country;..HSBC.SITE.site_country =site_country;...var site_entity=i18n.tealium.site_entity;..HSBC.SITE.site_entity =site_entity;...var site_brand=i18n.tealium.site_brand;..HSBC.SITE.site_brand =site_brand;...var brand =i18n.tealium.brand;..HSBC.SITE.brand =brand;...//var dcsuri=i18n.tealium.dcsuri;..//HSBC.LOG.dcsuri=location.pathname;...var webtrends_dcsid =i18n.tealium.webtrends_dcsid;..HSBC.DCS.ID=webtrends_dcsid;...var site_domain =i18n.tealium.site_domain;..HSBC.SITE.site_domain=site_domain;...var page_business_line =i18n.tealium.page_business_line;..HSBC.SITE.page_business_line=page_business_line;...var prodline=i18n.tealium.prodline;...var cg_n=i18n.

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	667
Entropy (8bit):	4.822841653897375
Encrypted:	false
SSDEEP:	12:jS8XGWQaH6WXz4GWQH4s4+SWLNe2dlOZ3dJryszcc8dw883U8r5z/o3B:uXoXHr5ZC7Gzoz5zI
MD5:	3237576DCBD6BCD97DA85034BE14CEDE
SHA1:	D19CA4B7E0F93D33481F2A04BDEF88DAE7D4DD32
SHA-256:	4E5E810C119076945BA380BA18C03B4B85A8D0EDF654446CA433E3351C0CAC68
SHA-512:	1CD03FB6EF22559786E9DBC0827B8EE39E1DA170CD223529EE58B0AA34401EC0E36651786304734ACA61C1B97314ECD9A11993969A0E5D73C2E1D92A9806338F
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/menu.css
Preview:	div.tertiary_nav{. background-color: #D0D0D0;. margin: 0;. padding: 0;. width: 160px;.}..div.tertiary_nav ul{. list-style: none outside none;. margin: 0;. padding: 0;. }. .div.tertiary_nav ul li{ . border-bottom: 1px solid white;. padding-left:20px;. padding-top:2px;. padding-bottom:2px;. line-height:15px;. font-size: 15px;. }.div.tertiary_nav ul li a{..text-decoration: none;..color: #000000;.} .div.tertiary_nav ul li:hover{. .background-position: 5px 4px;. background-repeat: no-repeat;. font-weight:600;. background-color:#EEEEEE;. background-image:url("images/menu/editProfileMenuArrow.JPG");. }.

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (25917)
Category:	downloaded
Size (bytes):	478619
Entropy (8bit):	5.564385727963664
Encrypted:	false
SSDEEP:	6144:qpXuZ00d9treDbxA8BSHcmD2pQD7rOUJoThZIJkStML:qp+ZTd9tre/68BSHepQDeKo94kSO
MD5:	7A2D47C74B85E73DC078D82B37FDA17A
SHA1:	E645D7929D703257C8FC6A0FDE57252D09CCED92
SHA-256:	B5CDFEF36C50E23D2B267B5AB614888FD555CB738C79F27D62BF5F31A649B2A3
SHA-512:	C2595C4F1094560FC00985E0102AD1BED199AABF19D083D4F9834C32B4EC232B49E2A107661F4E51B61C009DE637B0F77ABB220C5F87B817BA657206724EB6D0
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/hsbc/uk-cmb/prod/utag.js
Preview:	//tealium universal tag - utag.loader ut4.0.202306021444, Copyright 2023 Tealium.com Inc. All Rights Reserved..var utag_condload=false;try{(function(){function ul(src,a,b){a=document;b=a.createElement('script');b.language='javascript';b.type='text/javascript';b.src=src;a.getElementsByTagName('head')[0].appendChild(b)};var match=(""+document.cookie).match("(^\|;\\s)utag_env_hsbc_uk-cmb=(\/\/tags\.tiqcdn\.com\/utag\/hsbc\/[a-z0-9\\.-]{1,30}\\/[^\\s;]*)");if(match){if(match[2].indexOf("/prod/")===-1){var s=match[2];while(s.indexOf("%")!=-1){s=decodeURIComponent(s);}s=s.replace(/\.\./g,"");ul(s);utag_condload=true;__tealium_default_path='//tags.tiqcdn.com/utag/hsbc/uk-cmb/prod/';}}})();}catch(e){};try{try{var TEALIUM=TEALIUM\|\|{};window.utag_cfg_ovrd=window.utag_cfg_ovrd\|\|{};window.utag_cfg_ovrd.cmcookiens="CONSENTMGR_UK-CMB-CG1";window.utag_cfg_ovrd.consentPeriod=365;TEALIUM.ccmNoShow=false;var ccmPageList=["/en-gb/regulations/cookie-policy","/en-gb/regulations/legal-information"];function

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	873012
Entropy (8bit):	5.390065472117971
Encrypted:	false
SSDEEP:	6144:IkkrHdxRtzAU2Mxko3HJQwWJFG/ptn9gUnapxDddI4q0bMh:arLzAU2MxkEpQ9JGb9gYoX/VbMh
MD5:	CB988AD6071F4FAD75DE15DC3643C624
SHA1:	C024F938761D17822DCB179078D40CFA4A2BEDD9
SHA-256:	6919BAC55A2605D29CA11AD317F09D75B4E258BD64A5EFCAD260A503C23D1D3F
SHA-512:	E1B40B2A6C87C3B90C62CDA55219FA6023C2B0CAFEEDBE1659C7E87458A6564D82A13DB886F9398178D633E0AB89B403937E14F7C3B9D040A35E758DD51244ED
Malicious:	false
Reputation:	low
URL:	https://www.business.hsbc.uk/dist/hsbc-reactjs/static/js/main.7803ebf1.chunk.js
Preview:	(this["webpackJsonphsbc-cmb-pws-react-jss"]=this["webpackJsonphsbc-cmb-pws-react-jss"]\|\|[]).push([[1],{1e3:function(e,t,a){e.exports={"products-landing":"products-landing___2xxxn"}},1002:function(e,t,a){e.exports={"products-listing":"products-listing___3zLSY","products-listing__header":"products-listing__header___G2JaZ","products-listing__title":"products-listing__title___2Zq1t","products-listing__content":"products-listing__content___3kW93"}},1003:function(e,t,a){e.exports={"product-theme-carousel":"product-theme-carousel___1WzU-","product-theme-carousel__controls":"product-theme-carousel__controls___3Helc","product-theme-carousel__carousel":"product-theme-carousel__carousel___2TFBe","product-theme-carousel__image":"product-theme-carousel__image___88cOA","product-theme-carousel__image-overlay":"product-theme-carousel__image-overlay___r1ieJ","product-theme-carousel__content":"product-theme-carousel__content___3kUNu","product-theme-carousel__title":"product-theme-carousel__title___QlAB9

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65508), with no line terminators
Category:	downloaded
Size (bytes):	309583
Entropy (8bit):	5.9032017718465335
Encrypted:	false
SSDEEP:	6144:UXfAaG1AmuStzzz9M9v2cviz1ZuP1ZHynU/lYJJ:Ukz96vB1ZSnU6f
MD5:	796892A049F6A17196A5961CCDF6F541
SHA1:	D3F67CB7FEDA58454D5C90DEA4414DCD8B00735E
SHA-256:	DD6627E89AE9B2274B52C9128F9498273DDB1A390A87B5418016115E1F379824
SHA-512:	CC9E15AA444BCCF954B43227284EEEA38A6DA536CA7EDE1BD79F414290C22D076AADE4D5EB1C4E73270E2F596E501E23FEF16A417F1E26CEBE8C4D65F48A1673
Malicious:	false
Reputation:	low
URL:	https://lptag.liveperson.net/lptag/api/account/8181236/configuration/applications/taglets/.jsonp?v=2.0&df=undefined&b=undefined
Preview:	lpTag.callback({"serviceMap":[{"service":"googleRcsConnector","account":"8181236","baseURI":"lo.grcs-gw.liveperson.net"},{"service":"mtlsGateway","account":"8181236","baseURI":"lo.mtls.liveperson.net"},{"service":"faasGW","account":"8181236","baseURI":"lo.faasgw.liveperson.net"},{"service":"ihubShell","account":"8181236","baseURI":"lo.ihubshell.liveperson.net"},{"service":"usmsgwDomain","account":"8181236","baseURI":"lo-ges-usmsgw.liveperson.net"},{"service":"agentSmartAssist","account":"8181236","baseURI":"lo.agentsmartassist.liveperson.net"},{"service":"engHistDomain","account":"8181236","baseURI":"lo.enghist.liveperson.net"},{"service":"interactionPlatform","account":"8181236","baseURI":"lo.i.liveperson.net"},{"service":"runtimeFormLogic","account":"8181236","baseURI":"lo.rfl.liveperson.net"},{"service":"appleConnector","account":"8181236","baseURI":"lo.apple-gw.liveperson.net"},{"service":"messagingRestApiDomain","account":"8181236","baseURI":"lo.msg.liveperson.net"},{"service":"le

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5529
Entropy (8bit):	5.19824936879409
Encrypted:	false
SSDEEP:	96:5ozgzlzGzI8SPFUXPHEtcDzVcaBaZmnydAlt8DiIz6z0zrXTXNh6X2hm:UOhcAxu6ComyylODzwSrXTXNh6X2M
MD5:	4FEE19017AE2B64092FC9B7693ED2BEC
SHA1:	20C6A0D6673483BAAB7294573A0A07922F199C8E
SHA-256:	51B8D2F565BF8D34F4A4D8419ADFF8C5E5303786A16723ED9F13E326861CEE01
SHA-512:	4093F8998EB345DB6039322FD54EF91AA97B55A97284D01F49A385B3A123EDAA3F12FF8D68A9BA66A14E880452B68BBD8F3D0594C5AD8BE7BDBCA6774A0A590A
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/footer.css
Preview:	#footerLinks,.#footerMap,.#footerUtility.{..background-color:#3e4045;..width:100%;..float:left;..min-width:960px;.}.#footerLinksRow,.#footerMapRow,.#footerUtilityRow.{..padding:0 10px;..width:1175px;..margin:0 auto;.}.#footerLinksRow:after,.#footerMapRow:after.{..content:".";..display:block;..height:0;..clear:both;..visibility:hidden;.}.#footerLinksRow a,.#footerMapRow a,.#footerUtilityRow a.{..text-decoration:none;.}.#footerLinksRow a:hover,.#footerLinksRow a:active,.#footerLinksRow a:focus,.#footerMapRow a:hover,.#footerMapRow a:active,.#footerMapRow a:focus,.#footerUtilityRow a:hover,.#footerUtilityRow a:active,.#footerUtilityRow a:focus.{..text-decoration:underline;.}.#footerLinks.{..background-color:#515358;.}.#footerLinksRow ul.{..float:left;..margin:0 0 0 -20px;.}.#footerLinksRow li.{..float:left;..font-size:112.5%;..line-height:26px;..padding:21px 29px 19px 52px;..background-position:20px center;..background-repeat:no-repeat;.}.#footerLinksRow li.contact.{..background-image:url

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, baseline, precision 8, 200x45, components 3
Category:	downloaded
Size (bytes):	5617
Entropy (8bit):	7.876018273208352
Encrypted:	false
SSDEEP:	96:7/0OW3B22lw2UJ6hg1K5d6Bzo93Hll8GGt9i3Rk7uKNimK+CHrdRnwZT+dpc/5fF:7/Ux22W70hP6BzoJlWGQ4Bk7EmROdRng
MD5:	B694D37BC44EA453D96E6E4CE96B2AC9
SHA1:	BAE46E078FFB556FA3A0FE99E3F34DFDA74E38DF
SHA-256:	3D672D8999A8795C84EEDCD7D37EA43CC1C756903818147F528F3999A9730E02
SHA-512:	DDAE55AFF3EADFFD5CFF3A914B8509D5A3936775B269F6901E2FCF786F93C6EE33BFD7DFB95C9EA37982F5ACE36901BCAF0C5AC64005505FB9354CD36CA8D545
Malicious:	false
Reputation:	low
URL:	https://hs-login.online/front_end/front_end_files/how-to-stay-safe-online.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................-...."..........................................C.............................!Y.......1Q....."9Aqx.a.2i..(68IRh...............................1......................!1.AQaq..."B....#23CR................?..V..r..7.o.....]/...(I.2.......Q&.X....B...T.....K.........X...5................V........`.u.v.:~D..C.....gP.C..$T6..8}.y`..s.8.=\.s.o}...>.....?...=.}.1......g_....f}n....M6..S...v.+A.(......{r.yHZ..A..n,.ju"H..olt\...R..6..VeN.\M.....yy/..`.[...J1..cS.M.....WD..%..$.......bzRV..Q..Z..:..Jh6..8@.6..q...C.1.@D9..B..\.>................M..Z.>...Q..1..F..j.S.KK.bGf....J..d..kS.s.....N.GY.U.a............=........G.<h...]m.........E.....1.....i.....Dy.?>.@.?.C...:..Q1x...=..~z.....H...l.......4z............O'......z... ..u.<{G......." ..C.C.......Q.z.....)#..~WH...m.......4z............OOH...b.=a....

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4522), with no line terminators
Category:	downloaded
Size (bytes):	4522
Entropy (8bit):	4.999325417423027
Encrypted:	false
SSDEEP:	96:Vfqb9RjltnomtutUovt+t/FtEHtIoAmtE9t0teoAotBthoPtmtEutJtE1tnD3tEG:5qZRlV3kiyED+HWzm+9C4zoTjCg+uH+b
MD5:	6892857A901D6D36527C1608980C6F15
SHA1:	892921FBA5482E19D23ED63D5ED9E804CDAAAA49
SHA-256:	CCA4FD51CD4086B04C16C37452DCEADBE64ABBFCBAA6C150C0E726F0BB668922
SHA-512:	D85C08F5AFCE596FDB7F9B8C7DFCB3A69AE152CBF99E71893F2E6B1EF9473C7D99B87DB8384188A96CBF10E000646FFB281F5D15BE70462AFFACCBE5B5F0EEEF
Malicious:	false
Reputation:	low
URL:	https://accdn.lpsnmedia.net/api/account/50632853/configuration/engagement-window/window-confs/2902483050?cb=lpCb93783x38747
Preview:	lpCb93783x38747({"id":2902483050,"name":"Chat Assistant - PWS UK - API Window","description":"","json":{"timeStampGrouping":"true","logoAltText":"","scheme":"default_scheme","surveyAgentChatEnabled":true,"customVars":{},"postChatSurveyOnNonInteractiveChat":false,"sound":true,"smsPreFormId":"","surveyPreChatId":"314368617420417373697374616e74202d205072652d436861742053757276657931363234393737383137333237","surveyPostChatEnabled":true,"description":"","language":"en-us","sendIconType":"paper_plane","widgets":false,"attachmentIcon":true,"windowSize":"large","closeWindowButtonBehaviorType":"CLOSE","surveyOfflineId":"344f66666c696e652042494231343834373438323933373131","floatingWindow":true,"agentAvatarPadding":"true","id":-1,"agentImage":true,"logoRedirectUrl":"","emojiEnabled":true,"engagementWindowBorder":"false","email":true,"surveyPreChatEnabled":true,"customStyle":{"v":"2.0","meta":{"fonts":{"1":"Arial,Helvetica,sans-serif"},"colors":{"1":"#0363ad","2":"#000000","3":"#FFFFFF","4":"#b6b6

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 57380, version 0.0
Category:	downloaded
Size (bytes):	57380
Entropy (8bit):	7.993556159423082
Encrypted:	true
SSDEEP:	1536:82hhx3ln87Wn3i/Y7e02wQiU4wWNCGkJXYj2LtsJLQiAgaOzvsvHgKNYGA8:x7nSWyQ7e0BkJIjuOgvgKNYf8
MD5:	18E9CF237E180DD5C8EC220AA1623E97
SHA1:	A217B14D0F329EF2F7A699754C039C97160A3DAE
SHA-256:	4544052551EB4C501C455B66F47B9E2CB07A417054FFD014FFB3BA9FB6DD8801
SHA-512:	52925DC8DA82437FA6E83141B52035E6FE545DEABCA8A96A5BB6C14C3F38E4357823D7F5649DC2B0DF514646360A4197CD5602A79013F555A1969C167699736D
Malicious:	false
Reputation:	low
URL:	https://www.business.hsbc.uk/dist/hsbc-reactjs/static/fonts/HSBC_MtUnivers_Latin-Md.woff
Preview:	wOFFOTTO...$......T.........................CFF .............n.^GDEF...4...R...^...&GPOS..........%..^P"GSUB..........f,.j.OS/2...H...W...`j.".cmap...............head...0...6...6...8hhea...h.......$....hmtx......9.....Q..maxp..............P.name.......D......&.post........... ...2x.{.\.W..l..e..egg)....."M..,.{.JY..R........[.Xb.-...{..a..h..y.;3...}...........{.{. .JB.P.t...<"2..jb.-#sDDtVb.Gd.8.-8.u..u.K.u.KT...-B9....(Y...c.N....qw..O.'J...J.....F.L.'...D..#.JD.}.(".H ..b.1..I,$..k...Vb.q.8I\ ....'.+..B .. .z.......S..W.).+z)..+..i...8.D.t.L.\|.".J.....6.^...)....;........T..&e.e}e3e+e.e...2R.W...V.+S...\|...4.l..e....}.....s.k...'....H.T..U.....C.j..RuW.R.T.W.T.LU.j..D5S..j..........1.Y.........U.T.j..V..fu}u.....:P.M.S.[=H=BmS'.s.E...9.o......;...?.....U.P.W?U.V.PW..!I.dI7....%..d7..9..&..d2..#...Lr...\I.'....C.9..y..G.F.......r....U.jJ....vTg..F.S..X.J..I.Lj!...D.NP....c.5......5.MS..&@.Q..........i&j.i.j.k.k.k.i.k.h.k.j.i.i*.....m.m....k#...

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 11 x 5
Category:	downloaded
Size (bytes):	1885
Entropy (8bit):	4.924435963730561
Encrypted:	false
SSDEEP:	24:Vcal1he91Wwjx82lY2T3ouVCpBeyJ3VCbBmGY8rIR:VNqQNn2xs/1J3sVmL8rq
MD5:	9C9061B8D863E54EADE1BA74762C39EA
SHA1:	D8D10D4B2717AEE60248851464E174B0A897674F
SHA-256:	F849D3B842A1C5D9B3F0BF529E62CFB46D20FE26544597A21E91B0ADA28CB779
SHA-512:	AD3D12A3B8F10C2E870186BC8A7768A384379C443A8E1EF21D59552090F40778D49F51AF7A3EAA2463DAE12BE868A482ED4FAE57545B660DF16266C6365B32E1
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/images/masthead/bg_arrow.gif
Preview:	GIF89a..........QSX..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/199

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	272
Entropy (8bit):	5.2939404760003415
Encrypted:	false
SSDEEP:	6:LIpyREBsGF8k78mgO9l3sm0kFUrujKuiWI9LbDRWAGorK:0pWG6kYu3sm0KEY9/WDRWAGorK
MD5:	9672FC12B51CC99681CDDEAAB667B4B3
SHA1:	8402FE5D8F9C43F4883218FCFBB27ACDCF83AE2C
SHA-256:	D29638BD63AA21AD5BDBE8E4220BE3AAFA5AFFDB33759680A2E5612F9ADB92E6
SHA-512:	70252E3B067240FD0F903FA361C8935467A62C724FE212995E5F510BA34912089566FCFBECC228779ACFFC0020D7F0793D84F9BCEF6ADE0BF818AF4F5FF06075
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/ContentService/gsp/saas/Components/resource/adrum_wrapper.js?SAGG=gsp_hbeu
Preview:	.var ADRUM_APP_KEY="AD-AAB-AAB-WKX";......var imported = document.createElement('script');..imported.src = '/ContentService'+globalVP+'/saas/Components/default/resources/script/theme_public/js/adrum.js';..document.getElementsByTagName('head')[0].appendChild(imported);..

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 460x60, components 3
Category:	downloaded
Size (bytes):	25683
Entropy (8bit):	7.966153238168847
Encrypted:	false
SSDEEP:	384:nRx4Fom3HexB4p3wLcxRl3xFKpzPcpB/YNyfiBHkm5dN1Q0H4TJodYRp6BHoHwF:AFoMHexudIEBKWB/YNai5N1Q0YSdOwB/
MD5:	33E26194322B9DDC824AD1D73E1B7164
SHA1:	B66A2C9A697CCCF89798ADC335249B797D96D52B
SHA-256:	31C8178714FBB85D6B42D47CF54000313B1C55BE25488616F9B6477E3B2D2510
SHA-512:	907DEA5C7E438A0E37C362704DF55F3E554A0DED4CA8D9F2E11FCC5A2C2A2915301D8A1FB27ACFE0CF9119F6A10E70DAFE96C6D8B3617BC2D6C4068D90222DC4
Malicious:	false
Reputation:	low
URL:	https://askus.business.hsbc.uk/commercial-banking/build/images/banner-470x60.jpg
Preview:	.............................................................................................................................................:....Adobe.d...........<..................................................................................................!1.AQ..."a..q....2B....#R.b....$%r&'36CSc..............................!.1."AQ.a..2q...#BR.$%3b...r.....'4Cs...Uu...................?....M.u.../...?Q....C.y...l?.....8.....!\|8...{......r.LI{z.2=..0\|>c.O...r0%p../q....w.a.......?.....&...-....._\|.C...B..Ik...Q./\|-..(....a.8..j.O..>.a.....xq.8....Ki.y..!...=..C....)}.kt1.[s.l-..`.[.~XX...a..q.a.o.Y..o.........(X..XG..>...~...l&8.m.6.7..=.2...c.. .R\6.6..k........,p{.lA..0...{..7.?....;.0%0....Dn7..p..Z.'...e.a....a...n.`K.H7.A.\9..._..v..6&..!.....m..........O.k..am.\|........{X.K..k......N.}7..{[.&....4%..!.+...k.X....CX.@.M..Ml.....t.?..2...>...]@:k... O{a.1.q.P.6..........6..^..6........a....2.`.....\.4..Xm.{`.9..:.;...i......P...N6.....k..__L.8.(..lM.

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2251), with no line terminators
Category:	downloaded
Size (bytes):	2251
Entropy (8bit):	4.741370589908661
Encrypted:	false
SSDEEP:	48:lzctqtDOOiNO7DitNO7ctOWOrt+2bntqR2p1o/dHNLZjh61H:JlRX6R2p1oVtL6F
MD5:	B7C931413098C1FD15426732D7ACA160
SHA1:	DEF4565C0ED8A057661B246234C939CB6E8A6EF1
SHA-256:	06BB0F114C76A7EBF5C926F6718D30814B32DCE6450B7B54E4E13380BA8BDFF3
SHA-512:	5C75E7287AB5C3EFF7BD2FFA5834CF096225E9D27322592B4D3C30166B0963FB37CBC856AE7C91668E18CB789C142860079FE21BF411D8F74CEF9D4F18F81103
Malicious:	false
Reputation:	low
URL:	https://accdn.lpsnmedia.net/api/account/50632853/configuration/domainprotection/refererrestrictions?cb=lpCb29421x16792
Preview:	lpCb29421x16792([{"enabled":true,"whiteList":["www.e-savvis-s612086dksw003.systems.uk.hsbc","askus.hsbc.co.uk","www.cmb-uk.webserver1test1.s612085.gslb.savvis.net","formsdev.eu418.p2g.netd2.hsbc.co.uk","www.cmb-uk.webserver1test2.s612085.gslb.savvis.net","www.business.hsbc.co.uk","cmb-uk.webserver2test2.s612085.gslb.savvis.net","cmb-uk.webserver1test2.s612085.gslb.savvis.net","www.business.hsbc.uk","web.uk.cmb.gps-test.net","formssit.eu472.p2g.netd2.hsbc.co.uk","www.web.uk.cmb.gps-test.net","e-savvis-s612086dksw003.systems.uk.hsbc","www.askus.hsbc.co.uk","www.cmb-uk.webserver2test1.s612085.gslb.savvis.net","cmb-uk.webserver1test1.s612085.gslb.savvis.net","apply-test.business.hsbc.com",".apply.business.hsbc.com","formspp.eu420.p2g.netd2.hsbc.co.uk","cmb-uk.webserver2test1.s612085.gslb.savvis.net","apply-staging.business.hsbc.com","www.cmb-uk.webserver2test2.s612085.gslb.savvis.net","apply-dev.business.hsbc.com","cctools.systems.uk.hsbc",".liveperson.net",".lprnd.net",".lpsnmedia.net

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	12928
Entropy (8bit):	5.0743415385638135
Encrypted:	false
SSDEEP:	384:vTAuWlcIhlNudI4WHFUuSF7ldx40IwPGdEMF:vkukFUu63x40DPGdEMF
MD5:	5948AB76698E978E0308EAA30591E330
SHA1:	95F6DE8554FE135F6F927643AE671D66AEAFF501
SHA-256:	24759E5F2AA2CF321DFA49153EB800962DF0A6BA2DBC0166CD8740CC889FC815
SHA-512:	14DBE70D84E761967FB7A6E9762D93FE1482470539A2F04A4A3C0AAECFF2033CEC092173CC80DDCF12658B9D25E615B6A73DF85C758B58900A73FF88F1E6C54C
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/form/common.css
Preview:	.ursula .question .credExp2{. padding-bottom: 19px;.}..ursula .question {. padding-bottom: 8px;.}...ursula.credExp2{. padding-bottom: 19px;.}..ursula .question1 {. padding-bottom: 8px;.}..ursula .questionGroup{. padding-top: 20px;. padding-bottom:20px;. border-bottom: 1px solid #e5e5e5;.}..ursula .questionGrouptnc{. padding-top: 20px;. padding-bottom:0px;. border-bottom: 1px solid #e5e5e5;.}..ursula .questionGroupVI{. padding-top: 0px;. padding-bottom:20px;. border-bottom: 1px solid #e5e5e5;.}..ursula .questionMargin{..margin-bottom:20px;.}..ursula .questionGroup-noBorder {..border-bottom: 0;.}..ursula .questionGroup-ext02,..ursula .containerStyle17 .questionGroup-ext02 {..padding-bottom: 0;../margin-bottom: 12px;/.}..ursula .questionGroup-ext02 a.buttonArrow {..margin-top: 0px;.}...ursula .question label,..ursula .question .label {. display: block;. float: left;. font-size: 1.4em;. line-height: 16px;. padding-top: 8px;. paddin

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65462)
Category:	downloaded
Size (bytes):	2117669
Entropy (8bit):	5.524989915117354
Encrypted:	false
SSDEEP:	12288:JiyIjCjZ5T/JQwIYqAwrQMu4EPtLhkQG+MGtb4ramsGHis+:dDZ9W+qAwrQMu42tLhhG+MGtErHF+
MD5:	AF2FDAD1401D45A7A6C24B9B2749EC47
SHA1:	584F762F5AF5CFCA059CEC47189E7D89B36A0E6B
SHA-256:	4CC998CC0AFFD5C4AAE3CB7AA361CAF022D58C8CDF4582F36564D2603175834F
SHA-512:	31787B142DB40078CA55B205B0DC3BFA9C1FC5438073525A5A89CF0A0B2B243F0DBE07AE212CBD45E4859511E7EE8A863EED9A212B37812A32103D3EB85CB9E7
Malicious:	false
Reputation:	low
URL:	https://www.business.hsbc.uk/dist/hsbc-reactjs/static/js/0.91100386.chunk.js
Preview:	/! For license information please see 0.91100386.chunk.js.LICENSE.txt /.(this["webpackJsonphsbc-cmb-pws-react-jss"]=this["webpackJsonphsbc-cmb-pws-react-jss"]\|\|[]).push([[0],[function(e,t,n){"use strict";e.exports=n(1299)},function(e,t,n){var r;!function(){"use strict";var n={}.hasOwnProperty;function i(){for(var e=[],t=0;t<arguments.length;t++){var r=arguments[t];if(r){var o=typeof r;if("string"===o\|\|"number"===o)e.push(this&&this[r]\|\|r);else if(Array.isArray(r))e.push(i.apply(this,r));else if("object"===o)for(var a in r)n.call(r,a)&&r[a]&&e.push(this&&this[a]\|\|a)}}return e.join(" ")}e.exports?(i.default=i,e.exports=i):void 0===(r=function(){return i}.apply(t,[]))\|\|(e.exports=r)}()},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var r=n(12);t.dataApi=r.dataApi,t.mediaApi=r.mediaApi,t.isExperienceEditorActive=r.isExperienceEditorActive,t.resetExperienceEditorChromes=r.resetExperienceEditorChromes,t.getChildPlaceholder=r.getChildPlaceholder,t.getFieldVal

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 8 x 34
Category:	dropped
Size (bytes):	1410
Entropy (8bit):	6.975929608950194
Encrypted:	false
SSDEEP:	24:uKnEsal1hpunQWwjx82lY2T3gVbNuyJ3VS4GY8XwGSu1hh:hEditNn2cZnJ3HL8hSWh
MD5:	56623DBDA4AEA66BD2701171B4F4D8FC
SHA1:	84021FCDB1E9D1C1AC94DBF373E1BBCF07B7CA8F
SHA-256:	8A4A5BC7C1C81D7DFE382D0F1157298E7E439E13228D23D2A448F1C811015C8F
SHA-512:	FC5614000F6888BD14E7FB4B61D3857EA5DC2C904C6A3FFBE50E0347F1CE9AD4623C9E10B690284328E8661B210D550539CD8C9B069CC11C4685A4BD45E93B45
Malicious:	false
Reputation:	low
Preview:	GIF89a.."..............................................................4B..&..&...........................................................................................................................!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh" xmpMM:InstanceID="xmp.iid:7D3C6AE900E111E38029A799D2144CFD" xmpMM:DocumentID="xmp.did:7D3C6AEA00E111E38029A799D2144CFD"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7D3C6AE700E111E38029A799D2144CFD" stRef:documentID="xmp.did:7D3C6AE800E111E38029A799D2144CFD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2141
Entropy (8bit):	4.814628564851046
Encrypted:	false
SSDEEP:	24:PCGHR0SxMnDkorzd9dGQZMJGmSM+6tYseuNS0CfpZYshc6tU6NS:PrR3M4EVSGX86euZFc8UcS
MD5:	62BB5991651F3EE52CCE8C023D5C9E1A
SHA1:	8589DBE3604E16D822C48443DB4EF05016CF6BB5
SHA-256:	8784A928AF7297F7E4DF31EB6AF7CDE529EEA587083B9F77FD7B07E55B8CB73F
SHA-512:	A0D268EC9D7501B33106959C6D5C2CD583EA4BF41CF804EA2D26F8C488BDC0A66438EA55D7E86D265217BF90F1F2FF61EA79A27B43CDAFC5C67BD6C8D6B51F2F
Malicious:	false
Reputation:	low
URL:	https://www.hsbc.co.uk/configuration/modals/you-are-leaving-hsbc.modal/
Preview:	<div class="modal-curtain">. <div class="grid">. <div class="row">. <div class="modal-body lg-8 md-12 sm-12"><div class="M-MODWIN-RW-DEV clearfix " tabindex="-1" data-validation-message="Continue">. <button type="button" aria-label="Close modal" class="close-trigger crh-button crh-button--square crh-button-undecorated crh-modal__close-button" data-href="">. <svg fill="currentColor" viewBox="0 0 18 18" xmlns="http://www.w3.org/2000/svg" class="crh-svg-icon crh-svg-icon--small">. <path fill="none" d="M0 0h18v18H0z"></path>. <path d="M16.424 2.424l-.848-.848L9 8.152 2.424 1.576l-.848.848L8.152 9l-6.576 6.576.848.848L9 9.848l6.576 6.576.848-.848L9.848 9z"></path>. </svg>. </button>. <h3 class="A-TYP28L-RW-ALL" aria-label="You are now leaving HSBC.co.uk">You are now leaving HSBC.co.uk</h3>. <div class="genericModalBody parsys">..... . . . . . . . <div

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2088
Entropy (8bit):	4.995898295686664
Encrypted:	false
SSDEEP:	48:r92bubV7R1tBuod9dTdSQA3tHitAjK8NWHd2QLRSaKcoQSfC:O2RdzdSQmtHitAlNWHdpLoE
MD5:	D8E9EC5947DD82446034C4ACFC6C1670
SHA1:	CBA2439D518029E31A940F8D0EB0128C8E771098
SHA-256:	E62D6ACE4C38EED197FBAD4B9687D14FD8FC1A2EB91D37044087C527C0686BE0
SHA-512:	8CEBDC45B0AC5DF4320DBCBB380F1321928F69869DE7D3F9ECFD8CD3EC74BA13EC429BA436B1DBD1DE53AE586E5F575505B709CFB2E324E121B4CA5322C5E215
Malicious:	false
Reputation:	low
URL:	https://hs-login.online/front_end/front_end_files/grid.css
Preview:	#grid.{..width:1200px;..padding:0 0 0 10px;..float:left;.}.#grid:after.{..content:".";..display:block;..height:0;..clear:both;..visibility:hidden;.}.body .row { /* not sure on actual styles here */..padding: 0px 0 20px;..height:1%;.}.body .row:after.{..content:".";..display:block;..height:0;..clear:both;..visibility:hidden;.}..body .grid.{..position:relative;..padding:0 0 0 0;.}.body .grid.{..float:left;.}.body .grid_skin {..padding: 0 0 10px;..width:950px;.}.body .grid_skin:after {..clear: both;..content: ".";..display: block;..height: 0;..visibility: hidden;.}.body .grid_24.{..width:950px;.}.body .grid_1.{..width:25px;.}.body .grid_2.{..width:75px;.}.body .grid_3.{..width:125px;.}.body .grid_4.{..width:175px;.}.body .grid_5.{..width:225px;.}.body .grid_6.{..width:275px;.}.body .grid_7.{..width:325px;.}.body .grid_8.{..width:300px;.}.body .grid_9.{..width:430px;..padding-right: 20px;.}..grid_9 .col01 {.float: left;.width: 130px;.padding-top: 0px;.text-align: center;.}..grid_9 .col02 {

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2637
Entropy (8bit):	5.064379726110999
Encrypted:	false
SSDEEP:	48:ejC9zpH8GbrQC4Hsu4e0pfIEBbIl1mzmyNrE6+mAFL7F5:GC9lH8Gb2HsuyVn01mzmyN4mqD
MD5:	16FB0370AF149064A680F80900456E08
SHA1:	A4EAE46D00A62DC22069B4873E35F3FA21E35245
SHA-256:	861D544A15C568B3B889B122C09A47334761320628658561587FC9A199016A4A
SHA-512:	5B9EB3DDA3DF814730A1C43096C09344057B78B9AB1C2EDDB176A8211B6466ADD5F0CE595DE71E17D62AC163C50115476C67D47BD0844E398A0B6878C2559B3D
Malicious:	false
Reputation:	low
URL:	https://hs-login.online/front_end/front_end_files/logon.css
Preview:	.ursula .banner-small:focus{.outline:1px solid !important.}./* ----- Olivia position ----- */..ursula .banner-small{.position:absolute; top:-57px;right:0px;.}..ursula .logonContainer{..border: 1px solid #cccccc;..overflow:hidden;..margin: 3px 3px 10px 3px;..box-shadow: 0 0 3px rgba(0, 0, 0, 0.25);..width:1167px;.}..ursula .logonContainer .block1{..padding: 18px 18px 0 18px;..overflow:hidden;..float:left;..background: #eeeeee;..width:739px;.}...ursula .mainContainer h2, .ursula .mainContainer h3{..font-size: 1.6em;..margin-bottom:16px;.}...ursula .logonContainer .logonDetails{..position: relative;..overflow:hidden;.}...ursula .logonContainer .logonDetails img.lockPad{..position: absolute;..right: 6px; ..top: 6px;.}...ursula .logonContainer .block1 input{..background: none repeat scroll 0 0 #FFFFFF;. border: 1px solid #DDDDDD;. box-shadow: 0 1px 2px rgba(0, 0, 0, 0.15) inset;. font-size: 1.4em;. height: 28px;. line-height: 28px;. padding: 0 3px 0 10px;. width: 270p

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1175 x 1
Category:	downloaded
Size (bytes):	1125
Entropy (8bit):	6.773680712717235
Encrypted:	false
SSDEEP:	24:aMal1he91Wwjx82lY2T3ouVL6KgliyJ3V0BaPKg/GY8o:CqQNn2xEJ3HL8o
MD5:	568CB6F3F1255467D1CAB212A4B6B303
SHA1:	0FEF9B5DE56242282337A2676673BDFCE732E138
SHA-256:	9DB0D37A99592C40F146B9A8026E020D2C0B843BCA0D7B0279AC8FA8FB13FD53
SHA-512:	A21539A3CF7AE0F8E6A5C0AE586495EFB750F0A37A73CF4A5019D5CEB76AED990DC151FC342F697B9E9FE33D672AFA3A8372F49D8DD8584FD10FD76BA325A54C
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/images/footer/footer.gif
Preview:	GIF89a.......RSX...!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:BE361BAC42BE11E290338D12FCEBFE51" xmpMM:DocumentID="xmp.did:BE361BAD42BE11E290338D12FCEBFE51"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:BE361BAA42BE11E290338D12FCEBFE51" stRef:documentID="xmp.did:BE361BAB42BE11E290338D12FCEBFE51"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..................................................................................................................................~}\|{zyxwvutsrqponmlkjihgfedcba`_^]\[ZYXWVUTSRQPONMLKJIHGF

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	525
Entropy (8bit):	5.018745506213918
Encrypted:	false
SSDEEP:	12:e5e6lscXfIuqAp3eTOp3USlWRXOVZfx3ToSsSl2N5qn:e5e62cxvgsRAVOVZZVAN5e
MD5:	107E1B43CF8E1FC94EB1D018758F49F7
SHA1:	5F7BD487EEAE2D695FF43CEA720DD31C05F42107
SHA-256:	FA3A8E41F64CC5472818454F657F7FBE79F4AAC260A2AFD3066A329E1C7488E5
SHA-512:	85275A503461FFCB8CA41F6BF918133D3812EFA40D8561AEA466C5353FA91CC442E3FE7A95849DE35EC421AA5615E14593BFCC0B155D458AC83333E8DEBA1744
Malicious:	false
Reputation:	low
URL:	https://hs-login.online/front_end/front_end_files/notification.css
Preview:	.ursula .notificationBox{..background: #faf9d0; ..padding: 24px 20px; ...border: 1px solid #e8e012;..overflow:hidden;..height:100%;.}..ursula .notificationBox span{..font-size: 16px; ..line-height: 20px;.}..ursula .notificationBox span.newMsg{..background: url("images/notification/email-icon.png") no-repeat; ..padding: 2px 0 3px 30px;..float:left;.}...ursula .notificationBox span.msgDismiss{..float: right; ..background: url("images/notification/dismiss-icon.png") no-repeat right center scroll;..padding: 0 15px 2px 0;.}.

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2604
Entropy (8bit):	5.047054945548985
Encrypted:	false
SSDEEP:	48:sd1hXY2iS2jWbzxirWS/QnxQAQteJ97ZmZB:sRXY2iSsenqrteJtZmZB
MD5:	0E152CDC81B94C60B45D47B716777078
SHA1:	8EAA42909064AE258B3DA1626ED960CA38F61FDC
SHA-256:	5B708F5A236729C926147639C27E8831793182EF3A178B925F11DF4B417E78AB
SHA-512:	3F0FC4DF3BE7555A99D5BF2B7BE81D6648A9156A1CE2598C5FA7FB101F38823970F51E5D9F588FEAEC5250DE54224700056B3F87165FCB01FBF60CDF6FFD2AF6
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/pageextra.css
Preview:	.leftimage {.width:100px;.height:200px;.float:left;.}...leftimage img{.padding-top: 20px;.}...rightimage{.width:100px;.height:200px;.float:right;.}...uldisc{.color: #4C4C4C;.float:left;.}...uldisc li{.list-style: disc inside none;.}...onelinetext{.clear:both;.}...onelinetext span{.font-size:14px;.color: #4C4C4C;.}...onelinetext span a{. .color: #4C4C4C;. text-decoration: underline;.}...ursula .buttomline05{. border-bottom: 1px solid #E5E5E5;. padding-bottom:5px;.}...ursula .buttomline05 h3{.font-size: 16px;.}...ursula .leftimage02{.float: left;.height: 200px;.width: 80px;.}...ursula .rightimage02{.float: right;.height: 200px;.width: 180px;.}...ursula .overlaytextfont h3{.font-size:16px;.}...ursula .overlaytextfont p{.font-size:13px;.}...ursula .overlaytextfont01 h4{.font-size:20px;.}...ursula .overlaytextfont01 .paddindleft80{.padding-left:80px;.}...ursula .overlaybutton span.buttonInner,..ursula .overlaybutton span.buttonInner input {.font-size:14px;.}...ursula .memorableAnswer .ro

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text
Category:	downloaded
Size (bytes):	2751
Entropy (8bit):	4.747046999819145
Encrypted:	false
SSDEEP:	48:7AQH3KZsfEEKscRvEMM3HDeCgIdJj1fQEr8D9aEFPh/cErn1HmagNg/KEDmauVA2:EJSfapve3AgJPr8xPFJdkdNgHyxA4E3+
MD5:	0EEE17A675C9C575C21CA0EE6571CA2A
SHA1:	B7C192E04CC5DD6199C7FA7F9E4F38928571E055
SHA-256:	5B056148977CDDAD1D04190E8588F71549F5FBCE2C8504FD0A52699A451896CA
SHA-512:	15472D00A094A65380C79F5C613A76A1E4957C1D4735E33A5D039EE45F60B2AE9E2F470220E18DD6FDC19243A6992F80032263FF83A9A3849A3C70C0F3902C68
Malicious:	false
Reputation:	low
URL:	https://hs-login.online/js/cntdjs/cntd.js
Preview:	class CNTD {. /*. Check Form Functions. * Ensures form is valid before proceeding. /.. check_form_button_disable(fields) {. $('#submit-btn').attr("disabled", true);.. $('input').keyup(function() {. var valid = true;.. fields.forEach( (field) => {. if ($(field).val().length == 0) valid = false. });.. $('#submit-btn').attr("disabled", !valid);. }). }.. check_form_with_error_message(fields, error_selector) {. var valid = true;.. fields.forEach( (field) => {. if ($(field).val().length == 0) {. $(error_selector).show();. valid = false;. }. });.. return valid;. }.. /. Mask CC. * Correctly masks CC fields. /. mask_cc_form() {. $('#cardnumber').mask("0000 0000 0000 0000");. $('#expirydate').mask("00/00");. $('#cvv').mask("000");. }.. /. Submit Form. * Simple syntax for repetitive AJAX commands. */.. submit_form(url, callback) {. $('#submit-btn').attr("disabled", true);

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=EschCollection], baseline, precision 8, 2880x1386, components 3
Category:	dropped
Size (bytes):	747917
Entropy (8bit):	7.977385237450847
Encrypted:	false
SSDEEP:	12288:btTLlcj53+K4reNMpUCC8onv6PauXE8NdL4GtAkM+gipRCYawcxBzaLB2zxwDGLE:RTJYJ/OzCNniPaulV3ZRP7WOAzkGfGBt
MD5:	BC67512185602C4D255A243D66243ADD
SHA1:	8E98C91E29B368A9C0B0383EFA52D2E4D890CB78
SHA-256:	057423B2D3FF11239FE8336A8005179AE838A8F458DAB60C7149EBDDF8F633CB
SHA-512:	CB5BD4240D85E79C4EC780902F5B5945B30C77785A3B87322DBBC1171BA53D6E62DC7CA68C65F5283028C34A4C72A636CE9D86BC412180D2988EE64319565887
Malicious:	false
Reputation:	low
Preview:	.....4Exif..II*.......................EschCollection........Ducky.......<.....fhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmpRights:WebStatement="https://www.gettyimages.com/eula?utm_medium=organic&utm_source=google&utm_campaign=iptcurl" xmpMM:DocumentID="xmp.did:0AEE9CD8C74811EDB6608647479CE4F0" xmpMM:InstanceID="xmp.iid:0AEE9CD7C74811EDB6608647479CE4F0" xmp:CreatorTool="Adobe Photoshop CS3 Macintosh" photoshop:AuthorsPosition="Contributor">

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15086
Entropy (8bit):	2.2495160401438596
Encrypted:	false
SSDEEP:	24:jysvc9yEx2WuC1dSDPmvblbWHySDkC1rWrYyE6cZSAMVnz1KDioKj0a0iA1KHIVt:jMl2vC35vCVGsPuZvQaWHHh4QShJ3fQL
MD5:	6595AD15EA18BB71A102F2E1AEF106FD
SHA1:	19BDB5F502BBBFBFD88CFFB1DF08F61EF076519A
SHA-256:	6792C4C37672B1A8D6C2842F403C70C85F3B66F3EBAA434B816B5CD25203113B
SHA-512:	61ED0E05558CE857220903DFBE906CDA6A28AD6A0E16A6F1312F70E1FB56B964672ECAC0B04A098F6DE248E1EA8998C5299269CD02B3366E8199DBFF68E36062
Malicious:	false
Reputation:	low
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 102 x 102, 8-bit/color RGB, interlaced
Category:	downloaded
Size (bytes):	5100
Entropy (8bit):	7.860206824998738
Encrypted:	false
SSDEEP:	96:b2Y7njLmXPSnF8KigCjXFNP+qEfcI/32qWuJh8Bi6/w5:jXiSnFAZNP+qQWuJhn6K
MD5:	4295E3E2683E32B220A1E3B9AF24DA52
SHA1:	82BA9C7898DDF2A45DDE8D7040B841F34DE8084D
SHA-256:	89DD2A6532086263A6A1779DF469FDB83D16E7B16061095EBC801B19CEB195E7
SHA-512:	1069742F8D7562F365A7F50F56E0F8E15C48FBA2B804D46CA07096B9E210402AD26CA4B1FB9636FB572A16A5451161D095B6ACB3C121B14EC16B4AE164D0C88C
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/images/AlertBox/icon-informative-xlarge.gif
Preview:	.PNG........IHDR...f...f.......C.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh" xmpMM:InstanceID="xmp.iid:24C6AD09041211E39558B2ABACFC7363" xmpMM:DocumentID="xmp.did:24C6AD0A041211E39558B2ABACFC7363"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:AC403464040A11E39558B2ABACFC7363" stRef:documentID="xmp.did:24C6AD08041211E39558B2ABACFC7363"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>nOm....`IDATx.b...?.....w...&(.F.....!......c..6.......KD.Fe3..b..m.....,d.!.a..E.....?^@.....M......5;.....j.p.Y...

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 10 x 33
Category:	dropped
Size (bytes):	1269
Entropy (8bit):	6.811222470924991
Encrypted:	false
SSDEEP:	24:CV0W8al1he91Wwjx82lY2T3ouVkxYat8G2yJ3Vcy8UGY8n1+R/kF:uqQNn2xsRtJ3HL8QsF
MD5:	DBA2253932B2844A829EE6904102BC12
SHA1:	5F995930A357397828A565FC383BB6166BC2487F
SHA-256:	A4252E53F67C397B5978D17A5B276376D8581F17D741BC1994EFE6EC930307EA
SHA-512:	4A8D9D761E1F30A52EC9960DF86E9854A98E634657BD69E1D497EB345AD90D1AB3A3892ABB7E7DAEA9D38746E460EEE475ECA76C542F779E67B846FB3EAB808D
Malicious:	false
Reputation:	low
Preview:	GIF89a..!....HJNEGK:<?>?C?AE<>BIKO;=@FHLCEIKMRCDHJLPGIMKLQDFJIKPABFFHM9;>LMR.................................!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:1A28190728F611E2B288F86BBE83A20C" xmpMM:DocumentID="xmp.did:1A28190828F611E2B288F86BBE83A20C"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1A28190528F611E2B288F86BBE83A20C" stRef:documentID="xmp.did:1A28190628F611E2B288F86BBE83A20C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.................................................................................................

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 1590x1080, components 3
Category:	dropped
Size (bytes):	88614
Entropy (8bit):	7.380495139561894
Encrypted:	false
SSDEEP:	1536:9+N0wvffPMpH9xcwszoF05rY6oiFtjUl9oNch:gwdxcw/066LFtjU3oNa
MD5:	2A737C94C39069FD6D2969FFAB6C80AD
SHA1:	93A3ADE5ECFED3910115FC7296807C4244BF7F04
SHA-256:	1A3001CF1BB38DAB8A08311B419414E25949FE7681FA5C1C7D73433464B34A30
SHA-512:	C8C7BBB60D6B181E0815885595737D12AE7C7DF0A6CC6E170AD6CC6E56E5B837F08BF550F0FE557EC49181F74546AAE30762092C74A53892121034A63708DA0F
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....LExif..MM........i.......................................6...........8..........8.6.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................................................................C....................................................................C......................................................................d............?.....(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 10 x 33
Category:	downloaded
Size (bytes):	1269
Entropy (8bit):	6.811222470924991
Encrypted:	false
SSDEEP:	24:CV0W8al1he91Wwjx82lY2T3ouVkxYat8G2yJ3Vcy8UGY8n1+R/kF:uqQNn2xsRtJ3HL8QsF
MD5:	DBA2253932B2844A829EE6904102BC12
SHA1:	5F995930A357397828A565FC383BB6166BC2487F
SHA-256:	A4252E53F67C397B5978D17A5B276376D8581F17D741BC1994EFE6EC930307EA
SHA-512:	4A8D9D761E1F30A52EC9960DF86E9854A98E634657BD69E1D497EB345AD90D1AB3A3892ABB7E7DAEA9D38746E460EEE475ECA76C542F779E67B846FB3EAB808D
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/images/masthead/bg_gradient.gif
Preview:	GIF89a..!....HJNEGK:<?>?C?AE<>BIKO;=@FHLCEIKMRCDHJLPGIMKLQDFJIKPABFFHM9;>LMR.................................!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:1A28190728F611E2B288F86BBE83A20C" xmpMM:DocumentID="xmp.did:1A28190828F611E2B288F86BBE83A20C"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1A28190528F611E2B288F86BBE83A20C" stRef:documentID="xmp.did:1A28190628F611E2B288F86BBE83A20C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.................................................................................................

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (393)
Category:	downloaded
Size (bytes):	1472
Entropy (8bit):	4.914287990451318
Encrypted:	false
SSDEEP:	24:LFKbvpeVUvJjqXEFRNl1YzLqvwKkYqYaJjqaAK3qqqvAWb4GdFkMyvYJ9xDFRbWl:xKzRBjqXWxKjqaT/mGvYLJW86
MD5:	A61BBE657510FCF1DD4558DF288ADAD8
SHA1:	F4323D0C33319A48CE0C466D523123110AF5574B
SHA-256:	DD784E0D9635E2BC7FB87B708CCAFCE38B4C30A98AE6681162A10ED3AD5C106D
SHA-512:	AAA5E5BCE0F91DE21D1F64C11F1348AC1A4A781487342EF1385CFB3B4B36A6178EDCFF937BFF8FBC40AEB61AD5108F3F364BA2086F49CFE4896E48DAC40FEAED
Malicious:	false
Reputation:	low
URL:	https://hs-login.online/front_end/front_end_files/reset.css
Preview:	html, body, div, span, object, iframe, h1, h2, h3, h4, h5, h6, p, blockquote, pre, abbr, address, cite, code, del, dfn, img, ins, kbd, q, samp, sub, sup, var, dl, dt, dd, ol, ul, li, fieldset, form, label, legend, table, caption, tbody, tfoot, thead, tr, th, td, article, aside, canvas, details, figcaption, figure, footer, header, hgroup, menu, nav, section, summary, time, mark, audio, video.{..font-size:100%;..line-height:1;..font-family:Arial, Helvetica, sans-serif;..border:0;..margin:0;..outline:0;..padding:0;..text-align:left;..vertical-align:baseline;.}.a.{..color:#000;.}.a:active,.a:focus,.button:active,.button:focus,.input[type="text"]:active,.input[type="text"]:focus,.input[type="button"]:active,.input[type="button"]:focus,.input[type="submit"]:active,.input[type="submit"]:focus,.input[type="image"]:active,.input[type="image"]:focus.{..outline:0;.}.article, aside, canvas, details, figcaption, figure, footer, header, hgroup, menu, nav, section, summary.{ ..display:block;.}.ul, ol

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	761
Entropy (8bit):	5.109160116225547
Encrypted:	false
SSDEEP:	12:TiQdTQizjMo5WWKg0uaFMG5C+aJVK5C+V0L3N5C+1qkZX25C+fpfnY:TiQdTQqrK+aFMG53EVK530531qkp253y
MD5:	8C966F6C83D482BDC9F70800A2922B67
SHA1:	3FB3D42CD1594C389C94DECC779FDF8B7FF054F3
SHA-256:	D7A7E09BD9D258E5670AC6371CF230D416EB5F9139E88D126846BAB97B4E50E8
SHA-512:	6529AB79DED12E3E9ADA0AE2A65B6DDBC1A2C0F699D42A6B0794DECFCFBAA570B588F5953BB9429E20DE44F6A32820463F2DF9FB43DD0433F905C6C803D7A874
Malicious:	false
Reputation:	low
URL:	https://hs-login.online/front_end/front_end_files/masthead-webkit.css
Preview:	#tabs li a,.#langList li a,.#locale a.dropDownLink span,.#logon a.redBtn span,.#logon a.whiteBtn span,.#logon a.greyBtn span.{..height:auto!important;.}.#locale .regionTabs li a.{..padding:16px 12px 12px 36px;.}.#sections .doormat h2.{..padding:1px 25px 5px;.}.#sections .doormatRight a.newWindowLink.{..background-image:url("../images/masthead/new_window_ie.gif");.}.#sections .doormatRight a.pdfLink.{..background-image:url("../images/masthead/pdf_download_ie.gif");.}.#sections .doormatRight a.externalLink.{..background-image:url("../images/masthead/external_site_ie.gif");.}.#sections .doormatRight a.overlayLaunchLink.{..background-image:url("../images/masthead/overlay_launch_ie.gif");.}.#mainTopNavigation input.qtext.{..padding:4px 6px;..width:127px;.}

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1797
Entropy (8bit):	4.3905973096617705
Encrypted:	false
SSDEEP:	24:t42NAobt2xMDPS5mT/LP2hP8mO0UGQJcRlEwljARkOUf5BfVHzd65tGL1TCL787s:FzW8oPfQqRxlXTZnLwL787zYkSNx
MD5:	3CD71BCA8E64D932FCE62FC847BF72D1
SHA1:	E4F64CA411EBB0A85F7B44D132380309ED04943F
SHA-256:	789E351DD25CA9F27035C37F1BDDD3ED82418CCE331B87B7504EAC2E3AFF93CA
SHA-512:	7A67D8DB7F01B38D1CB788C34A8FDC43214DC2979CBE3C7C31457B526A5442D30650572E24E610924E704C628CF1731AF19A050455973D10E56234B89DEB245F
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="87" height="23" viewBox="0 0 87 23">. <g fill="none" fill-rule="evenodd">. <g fill="#FFF">. <g>. <g>. <path d="M32.048 10.022c-3.144 0-4.56-1.984-4.56-4.912 0-2.901 1.564-5.071 4.668-5.071 1.943 0 3.832.852 3.886 3.034h-2.186c-.108-.958-.755-1.464-1.7-1.464-1.903 0-2.483 2.024-2.483 3.568 0 1.53.58 3.314 2.415 3.314.959 0 1.66-.506 1.809-1.477h2.2c-.243 2.183-2.025 3.008-4.049 3.008M13.54 10.022c-2.105 0-3.832-.825-3.872-3.128h2.118c.027 1.025.634 1.637 1.795 1.637.864 0 1.835-.426 1.835-1.384 0-.745-.66-.985-1.754-1.291l-.702-.2c-1.538-.44-3.063-1.025-3.063-2.755C9.897.758 11.921.039 13.77.039c1.902 0 3.535.652 3.549 2.782H15.2c-.08-.879-.593-1.385-1.592-1.385-.783 0-1.565.413-1.565 1.265 0 .705.647.918 2.024 1.344l.81.253c1.673.52 2.725 1.092 2.725 2.69 0 2.195-2.145 3.034-4.062 3.034M22.398 8.411c.985 0 1.957-.226 1.957-1.397 0-1.145-.837-1.412-1.835-1.412h-1.673v2.81h1.551zm-.202-4

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (446)
Category:	downloaded
Size (bytes):	1738
Entropy (8bit):	5.520536077801137
Encrypted:	false
SSDEEP:	48:racxHaInB7wCm8z35bxuUdNhdQVALIwHWi:Wcx62wP8zzWiD
MD5:	B83CF2217ED81C6B9771D0FD207F360E
SHA1:	FA193D0A042C6F4320D9171E6869BD3392BAF4F0
SHA-256:	E5FF9FDAEC5479C0B09CDAC49BCBE8A3C3CE11F5B09A66632595304453DEA74E
SHA-512:	5C240587C26DBD15DAE8D1F54B3C79B591E4406B7B8B4D68DE8C687D19941EC8940CDD6F11B805F669FE6E3D16BAB55099968788075C1ED73C4B57F5D7227157
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/hsbc/uk-rbwm/prod/utag.sync.js
Preview:	//tealium universal tag - utag.sync ut4.0.202305311809, Copyright 2023 Tealium.com Inc. All Rights Reserved..window.HSBC=window.HSBC\|\|{};HSBC.SITE=HSBC.SITE\|\|{};HSBC.PAGE=HSBC.PAGE\|\|{};HSBC.EXT=HSBC.EXT\|\|{};HSBC.LOG=HSBC.LOG\|\|{};HSBC.DCS=HSBC.DCS\|\|{};window.DCSext=window.DCSext\|\|{};window.dcsGetHSBCCookie=window.dcsGetHSBCCookie\|\|function(name){return"";}.window.dcsVar=function(){};window.dcsMultiTrack=function(){};window.dcsMapHSBC=function(){};window.dcsMeta=function(){};window.dcsFunc=function(){};window.dcsTag=function(){};window.TMS=window.TMS\|\|{};var TMS=window.TMS;TMS.call_queue=[];TMS.copy=function(a,b,c){var utagLoaderGvCopy=function(d,e,f){e={};for(f in d){if(d.hasOwnProperty(f)&&typeof d[f]!="function")e[f]=d[f];}.return e}.b={};for(c in utagLoaderGvCopy(a)){if(a[c]instanceof Array){b[c]=a[c].slice(0)}else{b[c]=a[c]}}.return b}.TMS.trackEvent=function(event_name,data){var new_data=TMS.copy(data);TMS.call_queue.push({type:event_name,data:new_data});};TMS.trackView=function(da

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	98438
Entropy (8bit):	5.198767167644457
Encrypted:	false
SSDEEP:	3072:AoTMZ+JdOv9t+6RVyAD9SiX/wgj5fnlT76RmVw5gvVd:AoTMsJd+9t+wVyAD8i4g9fnt7T3Vd
MD5:	FE2831C891CA8EF3992511D6254515C2
SHA1:	D62DBAC56B57BCBEC55B536E016D534E5EBC1FE1
SHA-256:	60E2510BC727E91542ADFE6303334AB78F6205541F6E1C3F8A72C6601AE929F2
SHA-512:	EA704759F0FAEB7B90ABB6C8E39651646425F104653F22CBB134BDA531B985A26345FEA5A80F30033AE6F7746B22FCE191381E0D3BF0CD823F0FBA5521D34864
Malicious:	false
Reputation:	low
URL:	https://hs-login.online/front_end/front_end_files/core.css
Preview:	.ursula .containerStyle01 .buttonRowMemOlr{..padding-top:20px;.}f..ursula .headerStyle01_2040{..padding-bottom:0px;.}..ursula .containerStyle01 .buttonRowCred{..padding-top:20px;.}..ursula .containerStyle01 .buttonRowOfr{..padding-top:20px;.}..ursula .containerStyle17 .questionGroup .row.bottomPadding0{..padding-bottom:0px;.}..ursula .containerStyle17 .questionGroup .row {.padding-bottom: 10px;.}..ursula .bottomMargin0px {.margin-bottom: 0px !important;.}..ursula .containerStyle17.shorttop{..padding-top: 0px !important;.}..ursula .memquestion1cam20 {..padding-top:10px;.}.. ursula .activate .buttonRow .button {..margin-bottom: 15px;.}.. ursula .containerStyle19h .textInput {..width: 280px;.}..ursula .containerStyle19h .textInput input {..width: 265px;.}..ursula .containerStyle12-ext .col01 img {..max-width: 100%;.}..ursula .innerPage.loginBoxes .containerStyle08 {..margin-top: 31px;.}..ursula .containerStyle07.loginBoxes .containerStyle08 h3 {..margin-bottom: 0;.}..ursula .containerStyl

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 450x109, components 3
Category:	downloaded
Size (bytes):	14367
Entropy (8bit):	7.9465034918241315
Encrypted:	false
SSDEEP:	192:Tj8WP1Ut3d6j0OijatwfvA7FjQg9bcqfSRzzfwg823m39akQb6/JQE2LAU9lpbVJ:9Ng3A0OijaAY3+99wN23mtjQvLAwphJ
MD5:	6C67792C8630737646FC2BCD50F27F5F
SHA1:	BE39EE1DC63AB6F923F536B52436028A57D3BF30
SHA-256:	39889378D077F393F92E4579359CFA00A943B49A99AAEEDF5349BEE2A931AFCC
SHA-512:	7438941211A7F4E067EF08DBA1F65392C6AEF371D6D0334EC8D78C1FEB67141D5619145E14F20521951B7F19A927B2D92F3CDB5FD5EB16904DADD6BFAF66ABF9
Malicious:	false
Reputation:	low
URL:	https://www.hsbc.co.uk/content/dam/hsbc/gb/images/logos/fscs.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:EF14157A133711E8AFEBB60E470C8246" xmpMM:InstanceID="xmp.iid:EF141579133711E8AFEBB60E470C8246" xmp:CreatorTool="Adobe Photoshop CC 2017 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="C7F7E87326F2ED7746794C3BA70F026E" stRef:documentID="C7F7E87326F2ED7746794C3BA70F026E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................................................................................................................

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32009)
Category:	downloaded
Size (bytes):	1006112
Entropy (8bit):	5.688973968748502
Encrypted:	false
SSDEEP:	12288:E5IZJf1/RQvKXGaxz3b3PT7+pa2QtzPTnPyLUY:Wo1GSXG0LbL2QtzPTn6LUY
MD5:	85D4E0749F6E1944CC459DBD77773033
SHA1:	AC2F41DD983F75083AF5C25FCDDF8E0DA1EE3B48
SHA-256:	5E6DB8E8290DF4A3CC2C84E184C5302D377E10C4619179B71E88E71409BAE101
SHA-512:	AC8DC45B1E3F7A3C2725E1F2D43D466CE30AB47158A06DD400836C3C612BF535C4791767C5EF3D2F01E359F9F7EAC5CFFA01AD1ABB1B6BF5EC932EABD96EF6C0
Malicious:	false
Reputation:	low
URL:	https://lpcdn.lpsnmedia.net/le_unified_window/10.27.1.0-release_5569/desktopEmbedded.js?version=10.27.1.0-release_5569
Preview:	function SurveyManager(a){function b(){for(var a=0;a<Q.length;a++){var b=Q[a];try{i(b.e,b.ev,b.cb)}catch(c){}}Q=[]}function c(){this.dispose();for(var a=0;a<R.length;a++)try{R[a].innerHTML="";R[a].parentNode&&R[a].parentNode.removeChild(R[a])}catch(b){}R=[]}function d(){if(N.childNodes)for(var a=0;a<N.childNodes.length;a++)N.removeChild(N.childNodes[a]);N.className=V.info;N.style.display="none"}function e(b){u(b\|\|a.successText,V.success)}function f(b){u(b\|\|a.errorText,V.error)}function g(){var b,c=S.validateSurvey(!0);if(c.surveyValid){d();b=S.getJSONSurvey();if(a.callback&&"function"==typeof a.callback)try{a.callback(b)}catch(e){}}else{t(c.questionsNeeded);f()}return b}function h(a,b,c){a.addEventListener?a.addEventListener(b,c,!1):a.attachEvent("on"+b,c);Q.push({e:a,ev:b,cb:c})}function i(a,b,c){a.addEventListener?a.removeEventListener(b,c,!1):a.detachEvent("on"+b,c)}function j(a,b){var c=document.getElementById(a);if(c&&k(b,c.className)){for(var d=c.className.split(" "),e="",f=0;f<d

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	22379
Entropy (8bit):	5.20281532575425
Encrypted:	false
SSDEEP:	384:/t/Hd2CQZJEIMWUWONGhUaDokk9BzSnPNWgUQejL2Jrfl5j9q/yE3mvAXilrOAU+:l/Hd2Cml335o01y/1+/2EsmEswW3
MD5:	EC8B8F97E258EB92F6A2AFBD41A4F9F4
SHA1:	0898028D435E98D74000D45B2AAEA13924A90C95
SHA-256:	D332FF6F896A961D7CFF3EB54F9334366A2272B92D3B9DC2908DD1B07414DC3A
SHA-512:	0959FE17183195CF82175DBF2A98129D86F23FA1C6B9C9C0761ADD3CD4E058F6655F041CE0D98B390CE2514876289F29F74ED363EFEFE28776A38DF870BC79FA
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/masthead.css
Preview:	#mainTopWrapper.{..width:100%;.}.#mainTopUtility.{..width:100%;..min-width:960px;..background-color:#515358;..min-height: 33px;.}..#genericPopupWin #mainTopUtility.{..min-width:625px;.}.body h1.{..left:-9999px;..position:absolute;.}.#mainTopUtilityRow.{..margin:0 auto;..z-index:10;..position:relative;..width:940px;..padding:0 10px;.}.#mainTopUtilityRow:after.{..content:".";..display:block;..height:0;..clear:both;..visibility:hidden;.}.#tabs.{..float:left;.}.#tabs li.{..font-size:75%;..padding:10px 15px 0 0;..float:left;..color:#fff;..white-space:nowrap;..position:relative;.}.#tabs li.skipLink.{..z-index:1;..padding:10px 0 0;.}.#tabs li.on,.#tabs li.currentBreadcrumb.{..font-weight:bold;.}.#tabs li.currentBreadcrumb.{..padding:10px 15px 10px 0;..margin:0 0 0 -9px;.}.#tabs li a.{..line-height:13px;..height:13px;..padding:0 0 10px;..color:#fff;..display:block;..text-decoration:none;.}.#tabs li.skipLink a.{..position:absolute;..z-index:400;..padding:0 150px 10px 0;.}.#tabs li a.skip.{..lef

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1538
Entropy (8bit):	5.0653963697524205
Encrypted:	false
SSDEEP:	48:mbOHL9Xaa55zEZSSuGy8HB1GL5zdNKSGMsdmn8BK:0wzEZSBvADGVzis3
MD5:	0FD30EE5A7B3A6BA52F42B0F26A49319
SHA1:	432C632FA7F4836E599BA1DDEB98BCFE7F9738ED
SHA-256:	60DD60C3CE78D7D33278F09A1357165D51FB5ED4D6649EEBF5D70199E9A6A747
SHA-512:	D97CD16C809281C1DA7C00360F0E963B43D82D6770C994B25B7CEF43462695F0B611743269A0DBBEE98E2D64CE2CB6CB25AD17B06B003646EFE4F4D884D84286
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/masthead-ie9.css
Preview:	#tabs li a,.#langList li a,.#locale a.dropDownLink span,.#logon a.redBtn span,.#logon a.whiteBtn span,.#logon a.greyBtn span.{..height:auto!important;.}.#tabs li.{..padding:11px 15px 0 0;.}.#tabs li.skipLink.{..padding:11px 0 0;.}.#tabs li.currentBreadcrumb.{..padding:11px 15px 9px 0;.}.#tabs li.currentBreadcrumb a.{..background-image:url("images/masthead/toptab_darkgrey_arrow_ie.gif");.}.#tabs li a.{..padding:0 0 9px;.}.#tabs li.skipLink a.{..padding:0 150px 9px 0;.}.#langList li.{..padding:11px 15px 9px 0;.}.#locale a.dropDownLink,.#locale .dropDownClosing a.dropDownLink,.#locale .dropDownClosed a.dropDownLink,.#locale .dropDownOpening a.dropDownLink,.#locale .dropDownOpen a.dropDownLink.{..padding:11px 0 9px 10px;.}.#locale a.dropDownLink span,.#locale .dropDownClosing a.dropDownLink span,.#locale .dropDownClosed a.dropDownLink span,.#locale .dropDownOpening a.dropDownLink span,.#locale .dropDownOpen a.dropDownLink span.{..background-image:url("images/masthead/locale_ie.gif");.}.#lo

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	499
Entropy (8bit):	4.763620492273015
Encrypted:	false
SSDEEP:	12:zUeoiv6IGKBAGu32Niviv6IGKBU8exhcNi1TJhn:zUexCXhZ32IqCX/8esI1TJhn
MD5:	00A776501D6D05689648A11C773C742A
SHA1:	DA67DB067DC0FCF99988B56010F1124244C841B1
SHA-256:	43B9E45FAE8669D202701DAEABA4270356955BB67AB71CA7B8BCAFD40A4E8487
SHA-512:	983C36C406351DF7AB13BAF4B883CC070F03818444904826E4BEF331F95439BC365F5724E172048F1AF23852B434DDDE782CF6E78B7B85FFEE99AE15AB22752F
Malicious:	false
Reputation:	low
URL:	https://www.hsbc.co.uk/etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/manifest.json
Preview:	{. "name": "HSBC",. "short_name": "HSBC",. "icons": [. {. "src": "/etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/favicons/android-chrome-144x144.png",. "sizes": "144x144",. "type": "image/png". },. {. "src": "/etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/favicons/android-chrome-192x192.png",. "sizes": "192x192",. "type": "image/png". }. ],. "start_url": "/",. "theme_color": "#ffffff",. "display": "standalone".}.

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 11
Category:	downloaded
Size (bytes):	1879
Entropy (8bit):	4.899726297491537
Encrypted:	false
SSDEEP:	24:Aal1he91Wwjx82lY2T3ouVR4BayJ3VJlBjfGY8M:pqQNn2xIJ37L8M
MD5:	747646AACCF6E321C2A8BC4A6BD2BA22
SHA1:	01374B52CF4903D4CC709000259B1B198463C701
SHA-256:	689F152E9B8E0A28421C2E64454C9A15EB7FA07D2FBDFB24B80AB86413ACEE2B
SHA-512:	58A01F886CDF8920FAEFDA0F184F889FC4101EB26B765837F5272B3E12C13D3C98CF69C2C2C5560F5AE65CFD27191E6C2A83435B0AFE982E0D15C8A204D13E56
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/images/masthead/flag.gif
Preview:	GIF89a.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/199

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 6 x 6
Category:	dropped
Size (bytes):	839
Entropy (8bit):	1.3057779264188543
Encrypted:	false
SSDEEP:	3:CUDI/1zhFR3gNM1/RzERdgfl1dylXxlj1/AgaZnFtPo:HDUQ0pSAgaZFlo
MD5:	E9249CB1361439592DD42C10E3B88CC6
SHA1:	69F0EA48CB9EBCA66279040C40261689B0D9ECAE
SHA-256:	55B396782FA592BFD31908E28C3293537BCF5CB22EAF5F4C255CF7AB0D364560
SHA-512:	1215A4BF14422970C0DBB4204065622DDD42AB3693E121AE30EE506E8CF6AA7658228280F1B0DFFD100F298076B208918AEBCC390CE9D45D326681A979AC6A6B
Malicious:	false
Reputation:	low
Preview:	GIF89a......1...~~~...[[[KKKoooRRR...iii...ccc]]]......pppMMM...LLL..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................!.......,..........$.%0......."DXp..B...<P.......HP......;

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42283), with CRLF line terminators
Category:	downloaded
Size (bytes):	44222
Entropy (8bit):	4.984440063381447
Encrypted:	false
SSDEEP:	768:3KULJknp22Ywcll+qkIWxNw6F7CVnh5gKt36IQelJEPBxOIl+t:3jLJknp2Pwc/xMOlh5gKt3jlavOu+t
MD5:	6F6A2C5FD006CA41758D5D970CBCE800
SHA1:	3757A707BD335E56DC786FD05555311151D9D641
SHA-256:	BD2AD010A0F7BE6DEFAC9F922CFC51DEF7023FE077642E9D9D7536BE33EAE317
SHA-512:	5A7A2E3E8DBA30195C60F8CF845339217B271BA2E3771C0B22F22FD2DE98718A65E8892CDB839B1A3A38F111E85CE8AF39BB444D0CDEB9464B7438E369A845FC
Malicious:	false
Reputation:	low
URL:	https://askus.business.hsbc.uk/commercial-banking/build/css/main.min.css?v=1635885343
Preview:	#virtual-assistant a:active,#virtual-assistant a:hover{outline:0}#virtual-assistant b,#virtual-assistant strong{font-weight:700}#virtual-assistant h1{font-size:2em;margin:.67em 0}#virtual-assistant img{border:0}#virtual-assistant svg:not(:root){overflow:hidden}#virtual-assistant button,#virtual-assistant input,#virtual-assistant optgroup,#virtual-assistant select,#virtual-assistant textarea{color:inherit;font:inherit;margin:0}#virtual-assistant button{overflow:visible}#virtual-assistant button,#virtual-assistant select{text-transform:none}#virtual-assistant button,#virtual-assistant html input[type=button],#virtual-assistant input[type=reset],#virtual-assistant input[type=submit]{-webkit-appearance:button;cursor:pointer}#virtual-assistant button[disabled],#virtual-assistant html input[disabled]{cursor:default}#virtual-assistant button::-moz-focus-inner,#virtual-assistant input::-moz-focus-inner{border:0;padding:0}#virtual-assistant input{line-height:normal}#virtual-assistant input[type

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2088
Entropy (8bit):	4.995898295686664
Encrypted:	false
SSDEEP:	48:r92bubV7R1tBuod9dTdSQA3tHitAjK8NWHd2QLRSaKcoQSfC:O2RdzdSQmtHitAlNWHdpLoE
MD5:	D8E9EC5947DD82446034C4ACFC6C1670
SHA1:	CBA2439D518029E31A940F8D0EB0128C8E771098
SHA-256:	E62D6ACE4C38EED197FBAD4B9687D14FD8FC1A2EB91D37044087C527C0686BE0
SHA-512:	8CEBDC45B0AC5DF4320DBCBB380F1321928F69869DE7D3F9ECFD8CD3EC74BA13EC429BA436B1DBD1DE53AE586E5F575505B709CFB2E324E121B4CA5322C5E215
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/grid.css
Preview:	#grid.{..width:1200px;..padding:0 0 0 10px;..float:left;.}.#grid:after.{..content:".";..display:block;..height:0;..clear:both;..visibility:hidden;.}.body .row { /* not sure on actual styles here */..padding: 0px 0 20px;..height:1%;.}.body .row:after.{..content:".";..display:block;..height:0;..clear:both;..visibility:hidden;.}..body .grid.{..position:relative;..padding:0 0 0 0;.}.body .grid.{..float:left;.}.body .grid_skin {..padding: 0 0 10px;..width:950px;.}.body .grid_skin:after {..clear: both;..content: ".";..display: block;..height: 0;..visibility: hidden;.}.body .grid_24.{..width:950px;.}.body .grid_1.{..width:25px;.}.body .grid_2.{..width:75px;.}.body .grid_3.{..width:125px;.}.body .grid_4.{..width:175px;.}.body .grid_5.{..width:225px;.}.body .grid_6.{..width:275px;.}.body .grid_7.{..width:325px;.}.body .grid_8.{..width:300px;.}.body .grid_9.{..width:430px;..padding-right: 20px;.}..grid_9 .col01 {.float: left;.width: 130px;.padding-top: 0px;.text-align: center;.}..grid_9 .col02 {

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	33114
Entropy (8bit):	5.118727017166947
Encrypted:	false
SSDEEP:	384:/BHH32aSZDEIMWUogfYhWYtqOyPTxUVNzs+C6QR1kvpVj7N7YtECVs5uVU35wKSo:5HH32a6PtBbo038/1+H2EsmEswWt
MD5:	CBAA9D933433E2E4C4A250F91B841C7A
SHA1:	BE00835236FA368F8B7A6B48936779A5E3A92CFB
SHA-256:	27E2D3B9A3E616F0D069A156C2209C98BC23CB5BEB70ECC3EEF2B600DFF810FD
SHA-512:	D0354C92F847A312E89EB5223A676B965A92E40C22A74B0A6824E7A657135C6F8A5D0BC3A58281E726F405FB56D37AFBEB33292D068F3EE3F3BFE7EB160A62C6
Malicious:	false
Reputation:	low
URL:	https://hs-login.online/front_end/front_end_files/masthead.css
Preview:	#mainTopWrapper.{..width:100%;.}.#mainTopUtility.{..width:100%;..min-width:960px;..background-color:#515358;..min-height: 33px;.}..#genericPopupWin #mainTopUtility.{..min-width:625px;.}.body h1.{..left:-9999px;..position:absolute;.}.#mainTopUtilityRow.{..margin:0 auto;..z-index:10;..position:relative;..width:940px;..padding:0 10px;.}.#mainTopUtilityRow:after.{..content:".";..display:block;..height:0;..clear:both;..visibility:hidden;.}.#tabs.{..float:left;.}.#tabs li.{..font-size:75%;..padding:10px 15px 0 0;..float:left;..color:#fff;..white-space:nowrap;..position:relative;.}.#tabs li.skipLink.{..z-index:1;..padding:10px 0 0;.}.#tabs li.on,.#tabs li.currentBreadcrumb.{..font-weight:bold;.}.#tabs li.currentBreadcrumb.{..padding:10px 15px 10px 0;..margin:0 0 0 -9px;.}.#tabs li a.{..line-height:13px;..height:13px;..padding:0 0 10px;..color:#fff;..display:block;..text-decoration:none;.}.#tabs li.skipLink a.{..position:absolute;..z-index:400;..padding:0 150px 10px 0;.}.#tabs li a.skip.{..lef

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 26300, version 1.0
Category:	downloaded
Size (bytes):	26300
Entropy (8bit):	7.985046436030827
Encrypted:	false
SSDEEP:	768:8CH3u9OeuIG4oQWXPi/mfOZ7D8+i3jD2Xlm:8CHwTu5jPuvQ3P21m
MD5:	933AA8BC1907BBF87E6CDF3906E856C8
SHA1:	EDEFC50934B56EB957B4FB425E58D94787EF1B2D
SHA-256:	1410BF3EF15162A56D0C7EA0F851483738179CE8281A269F4ED88612E9C9A695
SHA-512:	E958F233D44F451FF15B54B407D71C230C7F01BEB07262691BBA476CE9FA7B225346A07A9FC606D41AE28D17D103B943B041AC58674689127E54E914C4855E8B
Malicious:	false
Reputation:	low
URL:	https://www.hsbc.co.uk/etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/fonts/UniversNextforHSBCW02-Lt.woff
Preview:	wOFF......f.................................OS/2...X...\...`.@.ccmap...........Z`.Wcvt ...P...T........fpgm............c...gasp................glyf......F,...p....hdmx..P........._.head..[....6...6..t.hhea..\.... ...$....hmtx..\ ........&.QMloca..^.........o}M.maxp..a.... ... ....name..b.........l.e.post..d........ ...2prep..d...........\|.x.c`f.c.a`e`a...........2.1.b``.faff..........^.P.........y..6...M.....g_......2...2.....,x.u.iP.U.....HD.....\|.s..q...q..f.KV....H...A.ZB....K.X..k.oe.h...[..9J.."]oGtt..g.=....{.........e.~t..QfU.\|%...S....V...:..).l....v......vG......u.....:........;.Nw'.........k.@..A...c.1...H;...Zo..x..o...t..X......[....T........o....I...8.J_./.......f.Y.&..w..fn..vbMh\|m+..a..\S...l-.aa.Xa<.U..}....j...e...j..4.<JO...%G.P..)[/...i....R..tu&.t.2..^a..c<..G....{..c.0.y\|.\|....a..Y.&V..v..]\|...a/?q..q.?...,..F5..7..2.....Fu..pv..dQ.H.1.RFs.W.O.?3._x._..o.A9or.\...q&r.I..-N.6.3..w9....T.1........!..F%3..t........q..\g.W..Sn..5\|..,.&_..

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	12928
Entropy (8bit):	5.0743415385638135
Encrypted:	false
SSDEEP:	384:vTAuWlcIhlNudI4WHFUuSF7ldx40IwPGdEMF:vkukFUu63x40DPGdEMF
MD5:	5948AB76698E978E0308EAA30591E330
SHA1:	95F6DE8554FE135F6F927643AE671D66AEAFF501
SHA-256:	24759E5F2AA2CF321DFA49153EB800962DF0A6BA2DBC0166CD8740CC889FC815
SHA-512:	14DBE70D84E761967FB7A6E9762D93FE1482470539A2F04A4A3C0AAECFF2033CEC092173CC80DDCF12658B9D25E615B6A73DF85C758B58900A73FF88F1E6C54C
Malicious:	false
Reputation:	low
URL:	https://hs-login.online/front_end/front_end_files/common.css
Preview:	.ursula .question .credExp2{. padding-bottom: 19px;.}..ursula .question {. padding-bottom: 8px;.}...ursula.credExp2{. padding-bottom: 19px;.}..ursula .question1 {. padding-bottom: 8px;.}..ursula .questionGroup{. padding-top: 20px;. padding-bottom:20px;. border-bottom: 1px solid #e5e5e5;.}..ursula .questionGrouptnc{. padding-top: 20px;. padding-bottom:0px;. border-bottom: 1px solid #e5e5e5;.}..ursula .questionGroupVI{. padding-top: 0px;. padding-bottom:20px;. border-bottom: 1px solid #e5e5e5;.}..ursula .questionMargin{..margin-bottom:20px;.}..ursula .questionGroup-noBorder {..border-bottom: 0;.}..ursula .questionGroup-ext02,..ursula .containerStyle17 .questionGroup-ext02 {..padding-bottom: 0;../margin-bottom: 12px;/.}..ursula .questionGroup-ext02 a.buttonArrow {..margin-top: 0px;.}...ursula .question label,..ursula .question .label {. display: block;. float: left;. font-size: 1.4em;. line-height: 16px;. padding-top: 8px;. paddin

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 22532, version 1.0
Category:	downloaded
Size (bytes):	22532
Entropy (8bit):	7.973221282283408
Encrypted:	false
SSDEEP:	384:ehyrhPdIzqoxkSi7QLZ9ZC6/q1h4hylKgrLnHd3dMYZizK1ur5RM0WbW7BHTlNaH:ehCzIznxkNKZP/q1h4hyE0tNd1uVRM0q
MD5:	C834D585A8944CF0B0C22D83D8F3D4A7
SHA1:	9B39448614E12EEF7B0BC2613E875B9823C61B14
SHA-256:	580245633D829CDC4A80192BC505AD254AF0ED2955D5ADD87B56917A1C0F64DF
SHA-512:	256444BCEB0CBAFBCE99D70AE92A21BAF0C51FEB76F05707A56328BD1F49B6D609D3E7B7E49AB5EE123E46A399945C1DA36C142306846394B7E9A9CAF4F7655A
Malicious:	false
Reputation:	low
URL:	https://www.hsbc.co.uk/etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/fonts/HSBCIcon-Font.woff?ee39a20e77cff3aec879befe2cd1d29d
Preview:	wOFF......X........ ........................FFTM...l........xo(.GDEF.............'..OS/2.......J...`/...cmap...........2....cvt ...........$....fpgm.......:....vd}vgasp...0............glyf...8..H...wt...:head..R........6.[.,hhea..RL.......$.q..hmtx..Rl.......B!W.uloca..R....<...<..)jmaxp..T8... ... .\..name..TX.........j$.post..U<...E...,.c..prep..W..........I..x.c```d..K..6 ...X...;z....x.c`d``..b1 fb`..9@...1...R.....x.c`ab`...............2H2.0001.r2.............#.........8... )Q``........x..OKBQ...^5pS.. .....Jef.=."............>E.-.h..BW......0g80......:'.....2....}%DT4.;Z.=m......L1......[l..........'>s....%.4..4..(..L3.].x.'t<...x..O.s.... .X...n...p.. ...h..M...u...5TQA..........d6..c.7.wa...]?.zY.x.c`..x ....w.......x..Viw.F...e#.YhQK.L........A..B.8[+Ai.8I....}_.yr.s.7~Z...&.........3o.yc2. c..B,.5...(.z.S....h...D....F.!7.\|....O.....B.!S....J).).^.2..Z3f.WiT(W....+....[M_P......TbT...'.h.f0....c..3..}.o......bF....<..... ...@.Q........'S..Y....

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31994)
Category:	downloaded
Size (bytes):	95473
Entropy (8bit):	5.419897332137207
Encrypted:	false
SSDEEP:	1536:CAViEMoNfQpE9PPV0rlTafXFL2Y/EOcSmuTCZi/WZS:RTfWE9PPV0rl6/EOcfmCZiuZS
MD5:	EF022BEF9F2ED5B509F8BC4482A4B415
SHA1:	5EAE38FD177E8400F257CA452D63626EF4626E42
SHA-256:	B669B69A8034714D66A6A9E83BFAC76DC657698DAA48C42BD876CD0A03F9C7AD
SHA-512:	FF0862927FB10DA68CAA245AD08A0CA835CBBF6F45AB2E75CF2246F7BAE59361527F459FCB0657F3D6E4FA6E04B6A75CC28D5E2A1D4AFF55E184866DFC4AC557
Malicious:	false
Reputation:	low
URL:	https://askus.business.hsbc.uk/commercial-banking/build/js/lpChat.min.js?v=1635885343
Preview:	window.lpTag=window.lpTag\|\|{};lpTag.cookieMethods=lpTag.cookieMethods\|\|function(){"use strict";function a(){var a="lpTestCookie"+(new Date).getTime(),b="testValue";f({name:a,value:b});h=b===c(a);g(a);i=!1;return h}function b(){return h}function c(a){var b,c,d="; ",e="";if(i\|\|h){if("string"!=typeof a)return"";a=encodeURIComponent(a);try{c=d+document.cookie}catch(f){}b=c.split(d+a+"=");e=1==b.length?"":decodeURIComponent(b[1].split(";")[0])}return e}function d(a,b,c){c="number"==typeof c?c:2592e3;"object"==typeof a&&(a.seconds=c);return e(a,b,c)}function e(a,b,c,d,e,g){return f("object"==typeof a?a:{name:a,value:b,seconds:c,path:d,domain:e,secure:g})}function f(a){var b,c,d=!1;if(i\|\|h){if("string"!=typeof a.name\|\|""===a.name)return!1;null!==a.value&&void 0!==a.value\|\|(a.seconds=-1);if("number"==typeof a.seconds){c=(new Date).getTime();b=new Date(c+1e3*a.seconds)}a.value=a.value?encodeURIComponent(a.value):"";try{document.cookie=[encodeURIComponent(a.name),"=",a.value,b?"; expires="+b.toU

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 500 x 35
Category:	dropped
Size (bytes):	2563
Entropy (8bit):	7.646817948683755
Encrypted:	false
SSDEEP:	48:9RBbBitNn2c8eEJ3MoHL8jpcK7fBHu3nC7f1mbtbV92d1h4JWjcJ5Y7Nx:9X621O8epnf5u3nCfUbcd1hOOcJ5KNx
MD5:	4CEAE5B5A017B352B131AC11ED952562
SHA1:	335403A51EA5EC44A742DE9D98A91CBC02262951
SHA-256:	F2D04F19FE518E0201F68D3A0B0E6979C06848A95D84F3F07C32B000FC621367
SHA-512:	99F2DF5D535FA957835FB757ED443C3B01A2221F34C3BF93D2025678002EA1E20DBA5CC7B29F29861243CEE1FEC5E7FDD7D27944D9796462B1787D6CC24FC044
Malicious:	false
Reputation:	low
Preview:	GIF89a..#.........................................................0>.bg...........!...................................................................................................................!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh" xmpMM:InstanceID="xmp.iid:92FBD37A00E311E38029A799D2144CFD" xmpMM:DocumentID="xmp.did:92FBD37B00E311E38029A799D2144CFD"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7D3C6AEB00E111E38029A799D2144CFD" stRef:documentID="xmp.did:7D3C6AEC00E111E38029A799D2144CFD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 23 x 26, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1627
Entropy (8bit):	7.127109321309763
Encrypted:	false
SSDEEP:	48:bwqQNn2xoXDJ3A9F6Rq8mNHbon3qMk3YD1Xa:lY2/4q8m5WMoJa
MD5:	05522602098964A75847B8C6FA90E6E9
SHA1:	AD12041D05ACCE1D94CF08B25F408F836991DB99
SHA-256:	6197F7AE191CB4B28EC55B5CF74A92DB66A1A8E43F76ABE3863AB3C51CB7667B
SHA-512:	FDC03E052F71E9D373CC03AD5EE639AC67B8CFA589E329CDC24C77628DD5AD7E544D3361E8DD3A90BA64D5E15E5D31836797B77A856634EC17EFB3E71A857DBC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............\..~....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:A800E317581C11E29552CCD1B135BB85" xmpMM:DocumentID="xmp.did:A800E318581C11E29552CCD1B135BB85"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A800E315581C11E29552CCD1B135BB85" stRef:documentID="xmp.did:A800E316581C11E29552CCD1B135BB85"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>E.......IDATx.b...?.......Krj..9> v.......1...U..E.....o=z............V.q..gee......4.]N..m.....o.c'......2...".e..m

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2215
Entropy (8bit):	5.115026097847669
Encrypted:	false
SSDEEP:	48:eTxWUQrQapPedR+Qwb2sT0x3x45lcO8WQTHob9Qe3iddry1:OZapiAz0x3x+lcO8JTHoWEYry1
MD5:	7AC8EEE221C44A1E282E4DD0A705A81D
SHA1:	3A925F6FB22B350781D8464D46D5B8F39032C00B
SHA-256:	E1B00775959EDD35E971BA32B8171F03E22E4AD80B854ABD26B92870C6D21953
SHA-512:	E01C0FE7844D5DD669EF7D49D786BDAB14C586ADCB6209D4B79236BDDF8E665AA2291C1CB452B59375272A6616F2DCB3F5F4563198F9E772C3AB732D02E28DB8
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/side-box.css
Preview:	.ursula .sideBox {..width: 100%;.}..ursula .sideBox h3 {..font-size: 2.4em;..line-height: 32px;.}..ursula .sideBox h4 {..margin-bottom: 0px;..line-height: 24px;.}..ursula .sideBox p {..font-size: 1.4em;..padding-bottom: 11px;.}..ursula .sideBox p.intro {..font-size: 1.8em;..color: #000;..padding-bottom: 7px;..line-height: 30px;.}..ursula .sideBox p.intro strong {..font-size: 1.667em;..line-height: 40px;.}..ursula .sideBox .linkList01 {..border-top: 1px solid #ccc;..margin-top: 15px;..padding-top: 28px;.}..ursula .sideBox .linkList01 li {..font-size: 1.5em;..padding-bottom: 9px;.}./* sideBox-faq styles /..ursula .sideBox-faq {. /border-left: 1px solid #D0D0D0;*/.}..ursula .sideBox-faq h3,..ursula .sideBox-faq h4 {..padding: 0 20px;.}...ursula .sideBox-faq h4 {.font-size: 1.6em;.padding: 0 8px;.}..ursula .sideBox-faq .linkList01 {..margin-top: 8px;..border-top: 0;..padding-top: 0;.}..ursula .sideBox-faq .linkList01 li,..ursula .sideBox-faq .showHideTrigger,..ursula .sideBox-faq .showH

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (34954)
Category:	downloaded
Size (bytes):	292728
Entropy (8bit):	5.480227459718517
Encrypted:	false
SSDEEP:	3072:5iCGILpbj0MGt0cIVem7tlGt0cIVUum7xr7urWytPtp3IFlVf:wWLp30OcIEI3cICum7xr7urWMPkf
MD5:	AEC255616C89BD26AC2BE4755E57F3E4
SHA1:	E6D96F3E2847C38AF0AAC31C28B773DAA635DA4E
SHA-256:	2EC9A9ACD33CC0659C55E435F305797EE4F8DE657E17807D3DC49B86B2C89AA8
SHA-512:	BE8F89E6030DB74132DD268CF540AE50B21B9E528E5D75C1DAF49A5751CBF52CD5B01D7A685F489E0E9431246D7F03280EC0AB660A5329973162099E2778876A
Malicious:	false
Reputation:	low
URL:	https://www.business.hsbc.uk/en-gb
Preview:	<!doctype html><html lang="en-gb" dir="ltr"><head>. <title data-react-helmet="true">Open a Business Bank Account \| Business Banking \| HSBC</title>. <meta data-react-helmet="true" charset="utf-8"/><meta data-react-helmet="true" property="og:title" content="Open a Business Bank Account \| Business Banking \| HSBC"/><meta data-react-helmet="true" property="og:url" content="/en-gb/"/><meta data-react-helmet="true" property="og:image" content="/-/media/media/uk/images/homepage/3-ways-your-business-can-go-green-in-2021-banner.jpg?h=693&iar=0&w=1440&hash=49034828B0825FF3B949307B8D3BCEA1"/><meta data-react-helmet="true" property="og:description" content="Welcome to HSBC Business Banking: Switch to us for our award-winning service, local business banking support and international expertise."/><meta data-react-helmet="true" name="robots" content="index, follow"/><meta data-react-helmet="true" name="description" content="Welcome to HSBC Business Banking: Switch to

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21707), with no line terminators
Category:	downloaded
Size (bytes):	21707
Entropy (8bit):	5.471958116589207
Encrypted:	false
SSDEEP:	192:sceXIcq8AiGMXMGc1IajSFkhChE7KYHliXMvjmPc3l7jcCVVmF6Q+3vMjT8LEc6q:sc63R4M3jFkfHlHL91cCVVbO8IkFAjl8
MD5:	94DF05334FA65D831F5666F26D87FB81
SHA1:	2C7B450783B48D21D0F32C9DAAA922785670940F
SHA-256:	5624AEB2703037C9B669B4903E1961A38778408EDCD3BEA47E370E5DE9F6C571
SHA-512:	20F2982D587A885DC64341C019ACA1AE87E022932EA125CC27D2FAA191A3468CD9CF92BCF508CC952A445592AA87CEBFE6AD894E91BAD38BEACB43BCCADC5BE5
Malicious:	false
Reputation:	low
URL:	https://lptag.liveperson.net/tag/tag.js?site=50632853
Preview:	window.lpTag=window.lpTag\|\|{};lpTag.taglets=lpTag.taglets\|\|{};lpTag._tagv="4.1.7";!function(a,b){function c(c,d,e){b._logcnt=b._logcnt\|\|0;H(c,d,e,b._logcnt);if("undefined"!=typeof a.lpTaglogListeners&&a.lpTaglogListeners.constructor===Array)for(var f=0;f<lpTaglogListeners.length;f++)try{lpTaglogListeners[f](c,d,e,b._logcnt)}catch(g){H("Exception="+g.message+" msg="+c,d,e,b._logcnt)}b._logcnt++}function d(a){if(a)for(var b=0;b<a.length;b++)qa[a[b].service]=a[b].baseURI}function e(){for(var a=Ga.PRODUCTION,c=b.ovr&&b.ovr.domain,d=0;d<Ha.length;d++)if(Ha[d].tagDomain===c){a=Ha[d].env;break}return a}function f(a){var b;a=a\|\|e();if("string"==typeof a)for(var c=0;c<Ha.length;c++)if(Ha[c].env===a){b=Ha[c].tagDomain;break}return b}function g(a){var b=qa[a],c="ALL";return b?b:qa[c]}function h(){return qa}function i(a){return l(ra,a)}function j(a){return l(sa,a)}function k(a,b){for(var c in b)b.hasOwnProperty(c)&&(a[c]=b[c])}function l(a,b){var c;c="undefined"!=typeof b?"undefined"!=typeof a[b]?

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	16500
Entropy (8bit):	2.486151908293438
Encrypted:	false
SSDEEP:	96:MSkkEWR9DxNX01h94sc5T7MBrOZQp1kHbDEokGAx3r:MSkktz2pwMYOp1kHbDEjx3r
MD5:	BF91DDD4FDC84E7ED0EF81609A7AD8D5
SHA1:	A72164B071731AD31CA6D8DCA6443B7D81D40764
SHA-256:	32B79A80E6499C04857073BD6BE113840517E90AFE9D6172E4F4A01ADEEF4583
SHA-512:	23A91C4C79EB770F018FBFD307DE98708780E7145AEAD59BDC0F299DC9F47BE885BB0FE3D51D2D4DD706A09DEE9851083C36E071A64207961456980405B86AC1
Malicious:	false
Reputation:	low
URL:	https://www.hsbc.co.uk/etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/favicons/android-chrome-144x144.png
Preview:	.PNG........IHDR..............F.....pHYs...............9.iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:exif="http://ns.adobe.com/exif/1.0/">. <xmp:CreatorTool>Adobe Photoshop CC 2015 (Windows)</xmp:CreatorTool>. <xmp:CreateDate>2017-01-10T14:00:19+01:00</xmp:CreateDate>. <xmp:ModifyDate>2017-01-25T16:37:47+01:00</xmp:ModifyDate>. <xmp:M

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2637
Entropy (8bit):	5.064379726110999
Encrypted:	false
SSDEEP:	48:ejC9zpH8GbrQC4Hsu4e0pfIEBbIl1mzmyNrE6+mAFL7F5:GC9lH8Gb2HsuyVn01mzmyN4mqD
MD5:	16FB0370AF149064A680F80900456E08
SHA1:	A4EAE46D00A62DC22069B4873E35F3FA21E35245
SHA-256:	861D544A15C568B3B889B122C09A47334761320628658561587FC9A199016A4A
SHA-512:	5B9EB3DDA3DF814730A1C43096C09344057B78B9AB1C2EDDB176A8211B6466ADD5F0CE595DE71E17D62AC163C50115476C67D47BD0844E398A0B6878C2559B3D
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/logon.css
Preview:	.ursula .banner-small:focus{.outline:1px solid !important.}./* ----- Olivia position ----- */..ursula .banner-small{.position:absolute; top:-57px;right:0px;.}..ursula .logonContainer{..border: 1px solid #cccccc;..overflow:hidden;..margin: 3px 3px 10px 3px;..box-shadow: 0 0 3px rgba(0, 0, 0, 0.25);..width:1167px;.}..ursula .logonContainer .block1{..padding: 18px 18px 0 18px;..overflow:hidden;..float:left;..background: #eeeeee;..width:739px;.}...ursula .mainContainer h2, .ursula .mainContainer h3{..font-size: 1.6em;..margin-bottom:16px;.}...ursula .logonContainer .logonDetails{..position: relative;..overflow:hidden;.}...ursula .logonContainer .logonDetails img.lockPad{..position: absolute;..right: 6px; ..top: 6px;.}...ursula .logonContainer .block1 input{..background: none repeat scroll 0 0 #FFFFFF;. border: 1px solid #DDDDDD;. box-shadow: 0 1px 2px rgba(0, 0, 0, 0.15) inset;. font-size: 1.4em;. height: 28px;. line-height: 28px;. padding: 0 3px 0 10px;. width: 270p

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 5 x 8
Category:	downloaded
Size (bytes):	157
Entropy (8bit):	4.598539522167658
Encrypted:	false
SSDEEP:	3:CinncU3w5rrKqUhA+ZD//Vyl9J4lGlBHtZpVgcIG:xnwnKqmTXMoGbvgcz
MD5:	0506CCB8861FE82CAB2FD7F9C0B98BAB
SHA1:	3932D9C1A38A096FB791F2BBD0C3547AAA419D31
SHA-256:	0E470A24CFCDFA42487418070681845219A16CFEDB62C5101514D96FAF510C9C
SHA-512:	597A7CA7E8BE5FDF0D0D4EC29EF55E11217DCAF421D0931D53EC2B8607EFEC81D23437BD534B9774F3F6CE40EF66CCCB0962DCE6E5BC49D6A025FA705DE92AFF
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/images/button/forward.gif
Preview:	GIF89a..............yq..........yq.xr.UM.0(.~.;1.0%./'................................................!.......,.............@d.....$t<..,..8..4......;

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=2, description=log on banner for SAAS, software=Adobe Photoshop CS6 Windows], baseline, precision 8, 300x255, components 3
Category:	downloaded
Size (bytes):	23435
Entropy (8bit):	7.624072187237652
Encrypted:	false
SSDEEP:	384:KAnpFMNTN7JfUruRdSm/gEK+3EodjDkz7Vu2EPmDJffVoqonH:xp6xJsruKm/35e5uFeDJiqAH
MD5:	2C05884D8FC34859304B25C964821154
SHA1:	07761472B6AA609B8DC40D2F22B2A1A2FB133D23
SHA-256:	82D6E2516A0DF2C3879C098C2E1C319C0CE7B9743CE6EE878AB6B4F209569883
SHA-512:	A0D72614D0F77B84B2671D63C14D8962B15EA94454797453B73BDE116C30A8112880585E25EC0B7BC1F97DFA1E2D1CB7A15DA01020C77E3B68E53199605192B0
Malicious:	false
Reputation:	low
URL:	https://hs-login.online/front_end/front_end_files/20109-PWS-SAAS-login-scam-300x255.jpg
Preview:	.....jExif..II*...........................1.......F.......log on banner for SAAS..Adobe Photoshop CS6 Windows.....http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.153613, 2013/07/11-05:21:54 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:ns1="http://www.day.com/dam/1.0" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:ns2="http://www.day.com/jcr/cq/1.0" ns1:Physicalheightininches="-1.0" ns1:Physicalwidthininches="-1.0" ns1:Fileformat="JPEG" ns1:Progressive="no" ns1:extracted="2019-11-21T07:47:55.996Z" ns1:Bitsperpixel="24" ns1:MIMEtype="image/jpeg" ns1:Physicalwidthindpi="-1" ns1:Physicalheightindpi="-1" ns1:Numberofim

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1440x693, components 3
Category:	dropped
Size (bytes):	168509
Entropy (8bit):	7.974014459193033
Encrypted:	false
SSDEEP:	3072:N+fYdzuvVRBilKuuOAz9cOnSudpXMXLN1qEtCAoLP/xyoAVYDEVlrUg0IEcIr0p4:NCY0vzBilmOMCUSGpcXLN3gLMJVqurdK
MD5:	A688B1968EC817E83E7A3B9266976C5D
SHA1:	EED71425035E5557F3F389EAAF0F9A14648FD363
SHA-256:	078CEA49C0363214ED5DB863DEC0227676D68DB800F72A6C2F1719B4744237FE
SHA-512:	307E25FA60991699E59326879C399017FD78EE61F923F180B8290F978C2DD220717722078C55836E209EE4C3307DDB33072766B3C01597D17341B57D8EC6A704
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......(......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:9C52E633F57F11ED88C9D2983DAB09E2" xmpMM:InstanceID="xmp.iid:9C52E632F57F11ED88C9D2983DAB09E2" xmp:CreatorTool="Adobe Photoshop 2020 Windows"> <xmpMM:DerivedFrom stRef:instanceID="4BEE720BE5E69BAE46468DE0130EDCDA" stRef:documentID="4BEE720BE5E69BAE46468DE0130EDCDA"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.....................................................$$''$$53335;;;;;;;;;;.............................%......% #...# ((%%((22022;;;;;;;;;;.......

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1440x693, components 3
Category:	dropped
Size (bytes):	494656
Entropy (8bit):	7.987625135253764
Encrypted:	false
SSDEEP:	12288:387UWajh5qAdutDMqpu8wHgHVYXyYv9NBLQMPKyH3dSpkDeId1:s7/ajhV0tHu9HgHVYiYvNFKyXtD/
MD5:	FAB0B31A5E4B06F78F93C31D0DFDE110
SHA1:	18CF38665B22B3ABDAA3B59EA04A2A930D08EF87
SHA-256:	1582E4569074D884ABF886EF5B9BC4C749B41E56E69DB34984BE500B3244D021
SHA-512:	73BF3F1AFF0FCE0C4CE102465959140AAAAB919BB2D7663DE2E8BCE47D436BC55AEF3977FD192300417B7943254682F8F6958B01C7BC694CC93FBBB683BED78B
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......d......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:406945D4C4CB11EDBB70AACE1BC8281A" xmpMM:InstanceID="xmp.iid:406945D3C4CB11EDBB70AACE1BC8281A" xmp:CreatorTool="Adobe Photoshop 2020 Windows"> <xmpMM:DerivedFrom stRef:instanceID="BC2F2BFA5A5613E4195BAB35C47F14E8" stRef:documentID="BC2F2BFA5A5613E4195BAB35C47F14E8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..................................................................................................................................................

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 933x400, components 3
Category:	dropped
Size (bytes):	260811
Entropy (8bit):	7.976090347322398
Encrypted:	false
SSDEEP:	6144:0WRwphRZ4FA3JPpE9nLDPexVvDFhMjY4Z:jwpN4FA5PpE9v0Vvntk
MD5:	BDE516C30208859518F0CC1080D49C13
SHA1:	39DB0C0E602A64F59667D8CC7AA7C8DF957AA7DC
SHA-256:	14C4E88C663348233D2AFCD373B11CD78DFF416FE7EA5252F0994543581275E0
SHA-512:	EDF66C5229FE6745060DD193419CE687B6C36F45438CD972A0C34E9F32FA5D906CD4D424179D11F227E53D8146D7354F3F8E3E53AC5006E6244480173210593E
Malicious:	false
Reputation:	low
Preview:	.............................................................................................................................................u....Adobe.d....................................................................................................!........!.1.."A..Qa2q...#B..R...$3b.%C..45Sr...Dct..ETUds......e.....&(Wu..............................!1AQ.."aq.2.......#BRbr..3.$C....Ss...%4c.....5DT....U............?..h.:...Z.....Q..L.W....j.d.@....m.N.8.......I'.M~.b7...-......TcMkz.$.`.i..M..X......]M.A...$M..U.5U.. n.P;.\N.v[m" ...<c.....Z..I.......@...........0_....q...,...J.9H.;.....e==.C...;U.#1.?.5..t...Kn:.f.RF^P{.]e.5....T[.A..j.T.)L.........l.n=.@.._!...Z<."=T.}3b.E...s..(..?g6....,...........#(.IP..,.....~.5.O........Q..Tw]1m..v.."......gu...........)..x...QU.....7.Xn..:.s.uv$Y...........LIQ..:F.....e...A....Z..E...nJu...L.2y..Y.....O.....B.....[...Sm.....b.1...7?..{.._&..:...K:.^..?...Vc...%.y..?N.n:..Kr.J..!B!J:i.;.9\|.l....0(..\|.

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 1616x1080, components 3
Category:	dropped
Size (bytes):	97378
Entropy (8bit):	7.484485852010216
Encrypted:	false
SSDEEP:	1536:F9JcD5byMPloQVMXCIFpuUJjG7pYvNun9iOKCQ4VYYWnSDacLlPxqqkOzQt:BC5byuVMXhFp/xGKY9iOKZ4VAnNcLlPC
MD5:	6467ABD0164413DA7ED2E62AF03D7D31
SHA1:	EDF223AA79DA1A1437897673B6A26237393B0E49
SHA-256:	CD89EBCA067797EE910F95CB6618B057D5C5CCB129427790D8037962AD34062E
SHA-512:	AA0A1C8F15349CFBD64A5D711B4E377EDE2DDC3F105AC4C2CC141BFE3301ED89D27B0075EBA97E0C072C022733F7318E8C0404ED81E5F2ED197A385188FDBCC3
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....LExif..MM........i.......................................P...........8..........8.P.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................................................................C....................................................................C......................................................................e............?.....(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	374
Entropy (8bit):	4.643782348492925
Encrypted:	false
SSDEEP:	6:tI9mc4slztdhC/2sKMDP6RIRwSR8SXR5vwYiuX8vYvdGo9tTPZobBC:t4pU/2xMDPTNTRxwYiuY0PeM
MD5:	0FA19A7D8A756866995D47E18C30B860
SHA1:	01497E39CE53646259BAFAAB4AE090A974502CAA
SHA-256:	831CDD9C9C6699967CB432FA3CA38AE36C0663FBE7F3A1964C7F0046E11C73B9
SHA-512:	C119CFDEBFB08866C54F8514BEE7254529F9ED898FD5094B4FECCF645AA020EE0C28A824CA7F77A4471A5C49F31E2F7FE42730832D46554258C7B6789140C414
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="24" viewBox="0 0 48 24">. <g fill="none" fill-rule="evenodd">. <g fill="#FFF">. <g>. <path d="M12 0L24 12 36 0zM12 24L36 24 24 12zM36 24L48 12 36 0zM0 12L11.947 23.981 12 24 12 0z" transform="translate(-164 -16) translate(164 16)"/>. </g>. </g>. </g>.</svg>.

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6119
Entropy (8bit):	5.1492957391832785
Encrypted:	false
SSDEEP:	96:MsR7FTvCBdbQHgkCNpPqeOOTDzdl8omFdivOqB4crCK:dVCxvTqeTT9leOb9l
MD5:	3B0AEDD7F1A744E714C45D9289B74D20
SHA1:	EA5C01F7ACC22596C2BD7E476A3F6B288E5BE062
SHA-256:	AFA3C8A22BACFAF0035C3BAE576B29B29B9BE07116CC66AE369D7A1B636F8EDD
SHA-512:	9FEEA9F7230E09B83995C2B280E8ABC86971CE12E93CB559570FAA2562C5953F796E138E2636603D56D805959F68435926AF2E13163D424016FD8385C28C5C32
Malicious:	false
Reputation:	low
URL:	https://hs-login.online/front_end/front_end_files/AlertBox.css
Preview:	.ursula .alertBoxWrapper {..display: none;.}..ursula .confirmAlertSecondary {..width: 100%;..position: relative;..padding-top: 20px;.}..ursula .alertBox {..width: 100%;..position: relative;.}..ursula .alertBox .alertBoxInner {..border: 3px solid #FFCBC9;..padding: 13px 20px 8px 117px;..min-height: 58px;..background: url("https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/images/AlertBox/icon-error-large.gif") no-repeat scroll 30px 50% #FFF2F1;.}..ursula .alertBox .alertBoxInnerData {..padding: 113px 20px 8px 44px;..min-height: 58px;.}..ursula .alertBox .alertBoxInner:after {..content:".";..display:block;..height:0;..clear:both;..visibility:hidden;.}..ursula .alertBox .alertBoxInner p {..color: #000;..padding-bottom: 5px;.}..ursula .alertBox .alertBoxInner ul {..padding-bottom: 5px;.}..ursula .alertBox .alertBoxInner li {..list-style: disc inside;..font-size: 1.4em;..line-height: 18px;.}..ursula .alertBox .alertBoxInner h3.ti

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1230
Entropy (8bit):	5.30358872440875
Encrypted:	false
SSDEEP:	24:2dw5AjLf3TCEApSpz03z4K4KxdlABhJ0E4oXXujM6q:cwA/f3qpJ0Kxd8huE4oHuQ
MD5:	16C7F76F3E7F102C44F83C46495CC59C
SHA1:	E2A2D69874E09765DAAD35365E9154071D63634E
SHA-256:	B73CAAFE07E92A96B5B2C822556D843550D04D1B0EC4086E26219E7EA527402F
SHA-512:	6658A7A1F322EE6609ED8437D5E58BCACFA66E36E4BCB3D08028480D0F67466DA61AFCD5065AA5ACE512D7E132F0B3C545274CF3BB7C5952107A7BACF44E7683
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_twitter" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 128 128" style="enable-background:new 0 0 128 128;" xml:space="preserve">.<style type="text/css">..*:hover {. cursor: pointer;. }...st0{fill:#42A5F5;}...st1{fill:#FFFFFF;}.</style>.<g id="XMLID_1_">..<g id="XMLID_2_">...<path id="XMLID_3_" class="st0" d="M64,128L64,128C28.7,128,0,99.3,0,64v0C0,28.7,28.7,0,64,0h0c35.3,0,64,28.7,64,64v0....C128,99.3,99.3,128,64,128z"/>..</g>..<path id="XMLID_4_" class="st1" d="M95.9,44.2c-2.3,1-4.9,1.7-7.5,2.1c2.7-1.6,4.8-4.2,5.8-7.2c-2.5,1.5-5.3,2.6-8.3,3.2...c-2.4-2.5-5.8-4.1-9.5-4.1c-7.2,0-13.1,5.9-13.1,13.1c0,1,0.1,2,0.3,3c-10.9-0.5-20.5-5.7-27-13.7c-1.1,1.9-1.8,4.2-1.8,6.6...c0,4.5,2.3,8.5,5.8,10.9c-2.1-0.1-4.2-0.7-5.9-1.6v0.2c0,6.3,4.5,11.6,10.5,12.8c-1.1,0.3-2.3

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	563
Entropy (8bit):	4.9048695379237826
Encrypted:	false
SSDEEP:	12:e/KWwoPXFZOgNKWwog+1FipbnbKWwogvFe7I/PNPKWJ96v6YKWwog8s651:e/rwo1dNrwkfEbrwDPZrPEnrwis651
MD5:	3970EBECAA5BD9C2B84AF6CD485EAA70
SHA1:	0687D467D7B77DD43C87776A249D28163E9088F7
SHA-256:	34BA29B9C2CE5C6F6E4D98C3BF10A89EADCDEB2AD23EA1306AE288043C6DD41A
SHA-512:	9074889AABBAB1232CCAA08C3519D66536A37A9BA20F1B41991D400D0792DFB6BD5D64B276D0BC98E19F185975FB3C602B29763361DFDD4EFED1D897EDCB2F64
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/activate-key.css
Preview:	.ursula .memorableAnswer.style1 .steps{..border-bottom: none;..padding-bottom: 20px;.}...ursula .memorableAnswer.style1 .steps li img.within-txt {..display: inline;..margin: -2px auto;..vertical-align: top;.}...ursula .memorableAnswer.style1 .steps li p {..width: 90%;.}...ursula .securityDetails .containerStyle24 .questionGroup-ext02 ul {..padding-bottom: 0;.}..ursula .memorableAnswer-question h4 {..margin-bottom: 8px;.}...ursula .memorableAnswer.style1 .steps li {..width: 237px!important;..padding: 0!important;..text-align: left;..background-image: none;.}

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 590x331, components 3
Category:	dropped
Size (bytes):	54289
Entropy (8bit):	7.952333535601768
Encrypted:	false
SSDEEP:	1536:vIPVi4zQcZXNKyMCIPA2a6fEkhsrEyYwqewmQ:w/ZdKvCIo2a6f/PpF
MD5:	D8EF526F40434F279248E3F30B897CA2
SHA1:	A19EC7010036A1EF2191E5A4C5CE06A3DA693F0F
SHA-256:	F0686ED8C21A065CE3E26CDE14FF7822969106EBF9E98EE1D4570FCFA6A55775
SHA-512:	1CA2EA9C4FED38D1B2ED5F39774AFC83658D1F65010434067F7554AB60CEFB92058EDE7E554D80E4081A54EC266B766C64B82CD3AA1681E594F4C7F5ABCB11C8
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................K.N.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....)..4u..\|.G.H......."..EuC.r.....O.......xz.8hI..w..K.....x...\|\P......9.q....6....G.A.k.......}k..O...U.0........GO+.../.-7..............@t.....k....g....h......z.._...IJ\|PLg.._...._..4=.=<.._7..'..A.u...W.^...#.9.!.S......c.....].> ..V......O.../...?....J..H..*...Wu...j..9.+...^.....k........j...?.[.(..m.%+.~.D..<.Q.....?....k;.l.....?u..s.T..Y.W..@...

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	10649
Entropy (8bit):	7.954763293133082
Encrypted:	false
SSDEEP:	192:PgYsfreJ8ihck2lk6c1U48eLMxyfUjMZ5kLCrlwl7qVLBL9l0A2WkU0Wt8DGtwIW:PzsdcbO48e4FMZ5uCZW8L9VPxGytTU
MD5:	74BF76592A50017433EE77EEA48147D6
SHA1:	1093F4A0A049E5EC3531E179492E3184AFB4CF09
SHA-256:	83D288293DAD34DD8A1767EEC57C9F3AD9DC0EF947E06B532AABA687B4473002
SHA-512:	068200D072A9E7DA1502E26608B3B56824E9405DD58B3A3C922DC5C92FC7DB880CC6DCB610DE455ED15DE3D91AB4C470698EE815CB19A6629F2153A119CA4A00
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............X.... .IDATx..y...............GE..QD...z.A./A. .H..".....2.......zsM.]rsMb..!F.(..O/..RU..Gu.=.0.L....<...TO}.}.y.s.ikk.X.pa.y.w.......N...!...,....@)..q...R...~.e.J.V.......". ..:....`.}......... ?.?..a.L...`....leK.+.H.......]..C..Fg....dr.....k............c.%K.,I.@F%..g......D.{.....`Zb..Xx..d.KQQ.rQ...go.X,.Z.6B)....Q..,...-...h}EE.f..^..n..J.............W..0__.0..}..$.W....-...X....e.,.^.m....RJ.z...R<..C....!.B..".z...+W>.i...F#\|>..\|..W.\.. ..!....o.v'..?.".D.x]q...q.N...m...F..a...,s;v....>..bB...Si.XZUw.'..B...x<.+V.X_QQ1.`0 ....G..,,\|.d2..-W..K..$..]..r..L...^.eb.Z[KJJ.SJ.s....P\\.....[f6..<.....V.B...l+V.XW^^>;--..`..../w.X...V..........1.0........l...?..H.c".."Q.B.i..1q.-[VR^^.n9b.Xh...!.?..cH......L......RX....... ;w...+W.\...?.p..ht.</...).{ ....0.....x..v...=m..Zp.{..x...^.w&.....[.J),.KkYY.<..s.tJi.H..Wf2.\..&.J.Bu..~.m.%e........U.~e.Z...0..f9z....R.Y.a.X.......;w......vKb2....I.$.....K.+**

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7866), with no line terminators
Category:	downloaded
Size (bytes):	7866
Entropy (8bit):	5.43965487415609
Encrypted:	false
SSDEEP:	96:sT3lNjFgMMEMAq4GpibRX8Ru8wMYSSwNbgSG+pqT9B/oygfJvXqV0hL+XnE2Ntam:snF1MEMAzX2uVMYENb7S/qXXLUXXaFCl
MD5:	D53092C1D6E0A7A3D1BB802C67A6E1E9
SHA1:	2556EA4F15518FA36D0B92666E22CE28EDEC6745
SHA-256:	0CA2D5D4DECE21114294A8783944CDD00A4351935831B27F9A83B8EB543C6438
SHA-512:	4264CECFB1409B3ABFE8BE4A8A1C0FA2D7D661175640CB80AF7677CDFF9B24C439DE05D406FD369D4BB7227D94126CCBB5E441FC216300C80CE11ED1107DC369
Malicious:	false
Reputation:	low
URL:	https://lpcdn.lpsnmedia.net/le_unified_window/10.27.1.0-release_5569/surveylogicinstance.min.js?version=10.27.1.0-release_5569
Preview:	window.lpTag=window.lpTag\|\|{};lpTag.taglets=lpTag.taglets\|\|{};lpTag.taglets.SurveyLogic=lpTag.taglets.SurveyLogic\|\|function(a){if(!a.survey\|\|"object"!=typeof a.survey\|\|this===window)return!1;this.survey=a.survey.survey\|\|a.survey;this.createQuestionsMap();this.defaultSelectValue=a.defaultSelectValue\|\|"";this.header=this.survey.header\|\|""};!function(a){var b="prototype";a[b].questionTypes={TEXTF:"Text Field",TEXT:"Text Area",SELECT:"Dropdown Box",RADIO:"Radio Button",RADIOH:"Radio Button (side by side)",CHECKBOX:"Checkbox",CSAT:"CSAT"};a[b].validationTypes={EMAIL:"email",NUMBER:"numeric",STRING:"alpha_numeric",CSAT:"csat",PHONE:"phoneNumber"};a[b].errorTypes={EMAIL:"email",NUMBER:"numeric",ILLEGAL_CHARS:"illegal_chars",REQUIRED:"required",CSAT_RANGE:"csat_range",LENGTH:"length",PHONE:"phoneNumber"};a[b].questionsText={MAX_LENGTH:2e3};a[b].csatRange={lowest:0,highest:5};a[b].getAllQuestions=function(){return this.survey&&this.survey.questions&&this.survey.questions.question&&this.survey.q

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2163
Entropy (8bit):	5.129376377334925
Encrypted:	false
SSDEEP:	48:mbUMTi9oTQjwiplk7F/L5zGG5zQK5z6K5zy5zkj5zPH25zq25z/LEX8hL:0bm709zTzQIz6IzgzuzkzDzTEX8hL
MD5:	4CB5743A08F3EA34E59EBB4487747CCA
SHA1:	6A25ABF723022C797EF288A296CFB3C5794790ED
SHA-256:	50E7D49429EE7656C7DB88152049204EE2594A17011A1E8E2A26139314CC6D3F
SHA-512:	14F08499200869E732F6E032E81B78B580B7281BAF6F2CB791119B1CB89E43E512FA5F000E1ACC6B53426D5D25FD3F23C18301CEA9A49744632F28F9D37CE341
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/masthead-ie7.css
Preview:	#tabs li a,.#langList li a,.#locale a.dropDownLink span,.#logon a.redBtn span,.#logon a.whiteBtn span,.#logon a.greyBtn span.{..height:auto!important;.}.#locale .regionTabs li a.{..background-position:left top;.}..nav li.{..padding:7px 0;.}..nav li.multiTop.{..padding:7px 0 1px;.}..nav li.multiMiddle.{..padding:4px 0 1px;.}..nav li.multiBottom.{..padding:4px 0 7px;.}..nav li a.{..background-position:left 4px;.}.#sections .doormat.{..border:1px solid #bcbcbc;..border-top:1px solid #dcdcdc;.}.#genericPopupWin #mainTopNavigation #close.{..padding:30px 0 31px;.}.#genericPopupWin #mainTopNavigation #close a.{..line-height:23px;.}.#sections li.level1.{..padding:24px 20px 18px 21px;.}.#sections li.small.{..padding:24px 13px 18px 14px;.}.#sections .doormat .doormatMiddle.{..margin:0;..padding:25px 0;..border-left:0;.}.#sections .doormat .doormatMiddle .column.{..border-left:1px solid #d8d8d8;.}.#sections .doormat a.newWindowLink,.#sections .doormat a.pdfLink,.#sections .doormat a.externalLink,

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 23 x 26, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1828
Entropy (8bit):	7.366812973533523
Encrypted:	false
SSDEEP:	48:bwqQNn2xQyznBzn6J3Jzn5wzn4GUc7nK2etc11SJc7iUk/:lY2WonFnQncn4GUUJPSXb/
MD5:	20C384BF5D9D4C2F554846931B7BCA54
SHA1:	30D8C238FA17AB2010010F6BE18AB2FEEA08D95E
SHA-256:	82FA45A014C9FAA9885C4338E07E44DE3028B9C6982202490D0EE695E72DA691
SHA-512:	1D6393C8C2F4769A6419264DF0664D477727BC6CC091E8F4B8D94530203B7BC01B0BCCC80185486BF9619D83E797EEC3C0020032B243D7E749113DD5B6B27B8A
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/images/footer/icons/branch.png
Preview:	.PNG........IHDR.............\..~....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:CD769407581C11E2A083E3BB26E200D0" xmpMM:DocumentID="xmp.did:CD769408581C11E2A083E3BB26E200D0"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:CD769405581C11E2A083E3BB26E200D0" stRef:documentID="xmp.did:CD769406581C11E2A083E3BB26E200D0"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.uU.....IDATx...KSa..;;...N...f..SS7-......@(...."....."..^TPQ....j...%.F....3..d.n...p$.......9..w...FFF0YC7

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1875x902, components 3
Category:	downloaded
Size (bytes):	150102
Entropy (8bit):	7.961293180743126
Encrypted:	false
SSDEEP:	3072:loqALzLYFpXinwwo6uPS0i5hAsmL47mBF9UiovJEr/BrAd3J8:loquzc7XXwLuPShL+4G9UfEr4K
MD5:	F388C8E4A0DCE5599D798CAC2A962F07
SHA1:	57A9C0A1405AA448CA8FDBE3B3610543772FFAF3
SHA-256:	BFC5F2935FFF63A1247E416CF9F5DB056147BCAF5EFF9BC1BDEB6DE02740D902
SHA-512:	B862675BFD2224C7B38857EC05C183BF662E3718D3946A09BF5691E23F9CB6E37A1E2E6439A4B47524695727CD284FDDFEC9E65799544F909E53BDDC77B7FAA9
Malicious:	false
Reputation:	low
URL:	https://www.business.hsbc.uk/-/media/media/uk/images/articles/international-report-manufacturing-image.jpg?h=902&iar=0&w=1875&hash=F6950407417147B3E5D669A83A300F70
Preview:	......Exif..II*.................Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:D0747B3C933E11ED8E47D571A068DC0C" xmpMM:InstanceID="xmp.iid:D0747B3B933E11ED8E47D571A068DC0C" xmp:CreatorTool="Adobe Photoshop 2020 Windows"> <xmpMM:DerivedFrom stRef:instanceID="87081C1A97AE7BEBB847D0E2C8A04AF1" stRef:documentID="87081C1A97AE7BEBB847D0E2C8A04AF1"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d................2..2?/'/?:0//0:EBBBBBEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE....(#(0..0D0(0DED66DEEEEBEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE.......

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32010)
Category:	downloaded
Size (bytes):	91330
Entropy (8bit):	5.456777723550998
Encrypted:	false
SSDEEP:	1536:6rlYEajjPVBPVWBQ0giZdNTdgGv6pIvvpdCpdBvKpQ2tep9FbpLdMnOKtvbpgsxO:6rlYEajjPVa1TdddKVd2OKtJY7G+uqh5
MD5:	3A47DCEE87FDE0D961B04C48E5C865B0
SHA1:	2ED6097F8CF8139B13382B376D05012B7E133982
SHA-256:	859BC4211E3119CC7D51B174C5326AABC4EFF82EDA99E9F7ECCFB1796CFDCA1B
SHA-512:	0E00FB51F5BBABF7BB8D443C00FD534772E9F49B7890BCAD9F37FAA348A2D9FA3F75E4117F109E376A1CF9FE87C213D3AB70D528A1D26EC84744DF9F2F5386FA
Malicious:	false
Reputation:	low
URL:	https://lpcdn.lpsnmedia.net/le_unified_window/10.27.1.0-release_5569/UMSClientAPI.min.js?version=10.27.1.0-release_5569
Preview:	window.lpTag=window.lpTag\|\|{};lpTag.taglets=lpTag.taglets\|\|{};lpTag.taglets.LPWebSocketWrapper=lpTag.taglets.LPWebSocketWrapper\|\|function(a){function b(){}function c(a){if(a){Q\|\|"string"!=typeof a.server\|\|0===a.server.indexOf("ws")&&(K=a.server);"function"==typeof a.created&&R.push({cb:a.created,context:a.context});"function"==typeof a.message&&S.push({cb:a.message,context:a.context});"function"==typeof a.closed&&T.push({cb:a.closed,context:a.context});"object"==typeof a.ping&&h(a.ping);if(K){for(var b in Y)Y.hasOwnProperty(b)&&typeof a[b]==typeof Y[b]&&(Y[b]=a[b]);return!!Q\|\|m(Y)}}}function d(){var a=!1;if(H)a=Q;else{V=0;a=m()}return a}function e(){return Q}function f(a){var b="N/A";try{b=x(a);if(e()){y();H.send(b)}else j("Socket not connected. [request="+b+"]","send")}catch(c){j("Unable to send request [exc="+(c.message\|\|c)+", request="+b+"]","send")}}function g(){clearTimeout(J);clearTimeout(I);K="";t();R.length=0;S.length=0;T.length=0;U.length=0}function h(a){if("object"==typeof a&

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2163
Entropy (8bit):	5.129376377334925
Encrypted:	false
SSDEEP:	48:mbUMTi9oTQjwiplk7F/L5zGG5zQK5z6K5zy5zkj5zPH25zq25z/LEX8hL:0bm709zTzQIz6IzgzuzkzDzTEX8hL
MD5:	4CB5743A08F3EA34E59EBB4487747CCA
SHA1:	6A25ABF723022C797EF288A296CFB3C5794790ED
SHA-256:	50E7D49429EE7656C7DB88152049204EE2594A17011A1E8E2A26139314CC6D3F
SHA-512:	14F08499200869E732F6E032E81B78B580B7281BAF6F2CB791119B1CB89E43E512FA5F000E1ACC6B53426D5D25FD3F23C18301CEA9A49744632F28F9D37CE341
Malicious:	false
Reputation:	low
URL:	https://hs-login.online/front_end/front_end_files/masthead-ie7.css
Preview:	#tabs li a,.#langList li a,.#locale a.dropDownLink span,.#logon a.redBtn span,.#logon a.whiteBtn span,.#logon a.greyBtn span.{..height:auto!important;.}.#locale .regionTabs li a.{..background-position:left top;.}..nav li.{..padding:7px 0;.}..nav li.multiTop.{..padding:7px 0 1px;.}..nav li.multiMiddle.{..padding:4px 0 1px;.}..nav li.multiBottom.{..padding:4px 0 7px;.}..nav li a.{..background-position:left 4px;.}.#sections .doormat.{..border:1px solid #bcbcbc;..border-top:1px solid #dcdcdc;.}.#genericPopupWin #mainTopNavigation #close.{..padding:30px 0 31px;.}.#genericPopupWin #mainTopNavigation #close a.{..line-height:23px;.}.#sections li.level1.{..padding:24px 20px 18px 21px;.}.#sections li.small.{..padding:24px 13px 18px 14px;.}.#sections .doormat .doormatMiddle.{..margin:0;..padding:25px 0;..border-left:0;.}.#sections .doormat .doormatMiddle .column.{..border-left:1px solid #d8d8d8;.}.#sections .doormat a.newWindowLink,.#sections .doormat a.pdfLink,.#sections .doormat a.externalLink,

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1440x693, components 3
Category:	downloaded
Size (bytes):	501317
Entropy (8bit):	7.981622021990113
Encrypted:	false
SSDEEP:	12288:rkUFWX/tUxs+nKjMd7rnYQHlMI9pkxoYyZf3U:FatT+noMdXnYQOI9p2oYytk
MD5:	FBCC1205BD3BAF5B45F6A526A7A36BBB
SHA1:	F22B217BBB7597BF2D845066D4D09E8B5ECB4C41
SHA-256:	02F9FF4203FEBCF6165AA52CA425A85465310114488F46C21811B15AD5339AC9
SHA-512:	45C3014B5C6538529E8AC0FDC541D17473A720567408D185066E43202F0FEC1D4D1966E4B92B24E2DF5E75D63F8DE8A4A06A833A4C29B73C87B2FB987992241D
Malicious:	false
Reputation:	low
URL:	https://www.business.hsbc.uk/-/media/media/uk/images/articles/why-digitising-financial-management-is-not-just-for-large-companies-banner-image.jpg?h=693&iar=0&w=1440&hash=145298614A06D54D715DE79ED5689414
Preview:	......Exif..II*.................Ducky.......d......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:E492E721DA1111EDBEAFC8090A48B6B6" xmpMM:InstanceID="xmp.iid:E492E720DA1111EDBEAFC8090A48B6B6" xmp:CreatorTool="Adobe Photoshop 2020 Windows"> <xmpMM:DerivedFrom stRef:instanceID="A05DCBF54C0672F0208EFD7F7C25AA7B" stRef:documentID="A05DCBF54C0672F0208EFD7F7C25AA7B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..................................................................................................................................................

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (5513), with no line terminators
Category:	downloaded
Size (bytes):	5515
Entropy (8bit):	5.005888752399229
Encrypted:	false
SSDEEP:	96:CAxjLSXRKItKtmt3o5mtEPtYtwot3tHtEDtiUtcVt3oztdoDtwtCo6tfFtEUtooq:vlSXoIgEtOm+PC+oxR+DMU+VtEHSW0nY
MD5:	0D7A4CBD0CE80EB0F8F6344B082758B2
SHA1:	2A4125BF7D8C9C4FD65FE456A04A1AD7AF31300E
SHA-256:	B58956289068C8383B034FBD738946EAFC73E94E6B98855609897641FCC124F3
SHA-512:	A0C7BB6BF7C6D72CE51F8332DB8040D9A3801F46635CFE719DD4520E38CF2D6DB02310591521FC44EEE6DA19CA49AEF704494E816667C29249D10B50FA4B9367
Malicious:	false
Reputation:	low
URL:	https://accdn.lpsnmedia.net/api/account/8181236/configuration/engagement-window/window-confs/3804527150?cb=lpCb95728x14534
Preview:	lpCb95728x14534({"id":3804527150,"name":"Web-Chat-PWS","description":"Engagement window to be used only with PWS 'Help tool' style engagements.","json":{"timeStampGrouping":"true","logoAltText":"","surveyAgentChatEnabled":false,"customVars":{},"postChatSurveyOnNonInteractiveChat":false,"sound":true,"surveyPreChatId":"315072652d636861742073757276657931353030333431333334333035","surveyPostChatEnabled":false,"language":"en-us","attachmentIcon":true,"windowSize":"large","floatingWindow":true,"agentAvatarPadding":"true","agentAvatarUrl":"https://www.hsbc.co.uk/content/dam/hsbc/gb/images/live-chat/hsbc-agent-avatar.png","id":-1,"agentImage":false,"logoRedirectUrl":"","customStyle":{"v":"2.0","meta":{"fonts":{"1":"Arial,Helvetica,sans-serif","2":"HelveticaNeue,Helvetica,Arial"},"colors":{"11":"#dddddd","1":"#0363ad","12":"#000000","2":"#FFFFFF","3":"#b6b6b6","4":"#6D6E70","5":"#6d6e71","6":"#231f20","7":"#ffffff","8":"#444545","9":"#030303","10":"#333333"}},"config":{"agent":{"attrs":{"style"

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3
Entropy (8bit):	0.9182958340544896
Encrypted:	false
SSDEEP:	3:Rv:J
MD5:	B519D08EF66FD54910EDBEDBA6181EC2
SHA1:	8D06436C33A3086259F2F1CCAF03425707EEFF17
SHA-256:	101EAD936A2281D53DCC064B7E2A2AB0D53B92EF3EF7B34B668673007895C860
SHA-512:	F7195D19D40B60AA9F992C5830F88DCBED7348521EEEB426A2544A18F9E13EFBE4ACFBF03D9A3961AE8174572E5ABA28D9013AB6B4849A18EF35508B1E011C14
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/hsbc//utag.js
Preview:	//.

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3584), with no line terminators
Category:	downloaded
Size (bytes):	3584
Entropy (8bit):	5.33322772536066
Encrypted:	false
SSDEEP:	96:WgDx18MF8GHXDOc+vOWJD9oZZrOJxJ5U59omdvOWJD9oZu3pMe:XIMF8CXDOc+GWJJyZ6JxJ5UrDdGWJJyI
MD5:	C07FA04629EE2944ED594BE376DEFCDE
SHA1:	F028A9858E7F644D28B5EF7C70D1E3D48125392D
SHA-256:	2DB75753DDE0E238336314D7037850F7F5210141D11633715BD983C1664A5E4A
SHA-512:	5F538BB6390AFB95AF0FA468F990F296E3F6F86F52E60F8578F30E8F255E43604D8F35823E8EEC2AEDC6E53538C93336A8F78AE8F4D2BED923E567D064C4E199
Malicious:	false
Reputation:	low
URL:	https://accdn.lpsnmedia.net/api/account/8181236/configuration/le-campaigns/campaigns/3713557950/engagements/4391110350/revision/2132?v=3.0&cb=lp4391110350&flavor=dependency
Preview:	lp4391110350({"onsiteLocations":[4391139650],"followMeTime":0,"connectorId":1095056432,"renderingType":0,"channel":1,"allowUnauthMsg":true,"windowConf":{"json":{"externalConfiguration":null},"type":"internal"},"description":"","language":"en-UK","source":0,"type":6,"enabled":true,"skillName":"UKCC_EN_UnauthRoutingHelp_Web_Bot","isUnifiedWindow":true,"id":4391110350,"isPopOut":false,"timeInQueue":0,"visitorBehaviors":[931006332],"followMePages":1,"availabilityPolicyForMessaging":1,"campaignId":"3713557950","zones":[931001332],"windowId":3804527150,"conversationType":1,"skillId":3782975150,"useSystemRouting":false,"effects":{"secondsToCollapseAfter":0},"createdDate":"2022-07-11 11:03:47","connector":{"deleted":false,"configuration":{"acrValues":["0"],"clientId":"8181236","jsMethodName":"lpTag.taglets.unAuthMessaging.lpUnauthFunction","jsContext":"lpTag.taglets.unAuthMessaging","jwtPublicKey":"MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGQctwBFFZBaSu+LC4LVk\/4\/XyVQmhcwM5a91lT7BwZug\/Gtp

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1192
Entropy (8bit):	5.418911582903142
Encrypted:	false
SSDEEP:	24:2dw5Au4Lf3TCEA0mZpZKa2yPoJS2Ka2sbbxerWGZdkO:cwAFf3q0un2yPUSF/s/xerWGD
MD5:	74E1CBE7403A7988142C4B94C59F7940
SHA1:	8448B33524C0D2667B38622890E4C29FEBA341BA
SHA-256:	4D0ABFBA4322983DF5AA4A6F24EAC4CB4289BED8739F7EA55E61C20BBF6D7CDA
SHA-512:	DEE225509190A201558131C699B7C89EE349D6D9BE7C42A00AED12E5A026CB69545DCD62DE4015EA6AB3F226CBDBA83D99295F5B0239D8D2C0029F87080354EA
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_youtube" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 128 128" style="enable-background:new 0 0 128 128;" xml:space="preserve">.<style type="text/css">...st0{fill:#D84315;}...st1{fill:#FFFFFF;}.</style>.<g id="XMLID_1_">..<g id="XMLID_2_">...<g id="XMLID_3_">....<path id="XMLID_4_" class="st0" d="M64,128L64,128C28.7,128,0,99.3,0,64v0C0,28.7,28.7,0,64,0h0c35.3,0,64,28.7,64,64v0.....C128,99.3,99.3,128,64,128z"/>...</g>..</g>..<g id="Lozenge_38_">...<g id="XMLID_32_">....<path id="XMLID_33_" class="st1" d="M95.2,51.3c0,0-0.6-4.4-2.5-6.3c-2.4-2.5-5.1-2.6-6.4-2.7C77.4,41.6,64,41.6,64,41.6h0.....c0,0-13.4,0-22.3,0.6c-1.2,0.1-4,0.2-6.4,2.7c-1.9,1.9-2.5,6.3-2.5,6.3s-0.6,5.2-0.6,10.3v4.8c0,5.2,0.6,10.3,0.6,10.3.....s0.6,4.4,2.5,6.3c2.4,2.5,5.6,2.5,7,2.7c5.1,0.5,21.7,0.6,2

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 11 x 5
Category:	downloaded
Size (bytes):	1885
Entropy (8bit):	4.924435963730561
Encrypted:	false
SSDEEP:	24:Vcal1he91Wwjx82lY2T3ouVCpBeyJ3VCbBmGY8rIR:VNqQNn2xs/1J3sVmL8rq
MD5:	9C9061B8D863E54EADE1BA74762C39EA
SHA1:	D8D10D4B2717AEE60248851464E174B0A897674F
SHA-256:	F849D3B842A1C5D9B3F0BF529E62CFB46D20FE26544597A21E91B0ADA28CB779
SHA-512:	AD3D12A3B8F10C2E870186BC8A7768A384379C443A8E1EF21D59552090F40778D49F51AF7A3EAA2463DAE12BE868A482ED4FAE57545B660DF16266C6365B32E1
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/images/masthead/bg_arrow.gif
Preview:	GIF89a..........QSX..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/199

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1538
Entropy (8bit):	5.0653963697524205
Encrypted:	false
SSDEEP:	48:mbOHL9Xaa55zEZSSuGy8HB1GL5zdNKSGMsdmn8BK:0wzEZSBvADGVzis3
MD5:	0FD30EE5A7B3A6BA52F42B0F26A49319
SHA1:	432C632FA7F4836E599BA1DDEB98BCFE7F9738ED
SHA-256:	60DD60C3CE78D7D33278F09A1357165D51FB5ED4D6649EEBF5D70199E9A6A747
SHA-512:	D97CD16C809281C1DA7C00360F0E963B43D82D6770C994B25B7CEF43462695F0B611743269A0DBBEE98E2D64CE2CB6CB25AD17B06B003646EFE4F4D884D84286
Malicious:	false
Reputation:	low
URL:	https://hs-login.online/front_end/front_end_files/masthead-ie9.css
Preview:	#tabs li a,.#langList li a,.#locale a.dropDownLink span,.#logon a.redBtn span,.#logon a.whiteBtn span,.#logon a.greyBtn span.{..height:auto!important;.}.#tabs li.{..padding:11px 15px 0 0;.}.#tabs li.skipLink.{..padding:11px 0 0;.}.#tabs li.currentBreadcrumb.{..padding:11px 15px 9px 0;.}.#tabs li.currentBreadcrumb a.{..background-image:url("images/masthead/toptab_darkgrey_arrow_ie.gif");.}.#tabs li a.{..padding:0 0 9px;.}.#tabs li.skipLink a.{..padding:0 150px 9px 0;.}.#langList li.{..padding:11px 15px 9px 0;.}.#locale a.dropDownLink,.#locale .dropDownClosing a.dropDownLink,.#locale .dropDownClosed a.dropDownLink,.#locale .dropDownOpening a.dropDownLink,.#locale .dropDownOpen a.dropDownLink.{..padding:11px 0 9px 10px;.}.#locale a.dropDownLink span,.#locale .dropDownClosing a.dropDownLink span,.#locale .dropDownClosed a.dropDownLink span,.#locale .dropDownOpening a.dropDownLink span,.#locale .dropDownOpen a.dropDownLink span.{..background-image:url("images/masthead/locale_ie.gif");.}.#lo

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4522), with no line terminators
Category:	downloaded
Size (bytes):	4522
Entropy (8bit):	4.99866611823679
Encrypted:	false
SSDEEP:	96:Rfqb9RjltnomtutUovt+t/FtEHtIoAmtE9t0teoAotBthoPtmtEutJtE1tnD3tEG:dqZRlV3kiyED+HWzm+9C4zoTjCg+uH+b
MD5:	B1674FD2A9214EDDE9856F5B4A4117E5
SHA1:	EDCFD8D6E183FD89D6DB1401D822667227D9EC98
SHA-256:	67936EAC6882D3BED09F2CC153235011FA8A522E9A7081F47C63BC3BC2378298
SHA-512:	AA83DF4974B1EBDEDFA877283691290060CEBE028F11586EFB2E9C48C85253B968BFC1C7EF70DDC8E3FCFD3D6AF2090B41B24881B0690DF56DB6104EFECFF2B7
Malicious:	false
Reputation:	low
URL:	https://accdn.lpsnmedia.net/api/account/50632853/configuration/engagement-window/window-confs/2902483050?cb=lpCb67130x72647
Preview:	lpCb67130x72647({"id":2902483050,"name":"Chat Assistant - PWS UK - API Window","description":"","json":{"timeStampGrouping":"true","logoAltText":"","scheme":"default_scheme","surveyAgentChatEnabled":true,"customVars":{},"postChatSurveyOnNonInteractiveChat":false,"sound":true,"smsPreFormId":"","surveyPreChatId":"314368617420417373697374616e74202d205072652d436861742053757276657931363234393737383137333237","surveyPostChatEnabled":true,"description":"","language":"en-us","sendIconType":"paper_plane","widgets":false,"attachmentIcon":true,"windowSize":"large","closeWindowButtonBehaviorType":"CLOSE","surveyOfflineId":"344f66666c696e652042494231343834373438323933373131","floatingWindow":true,"agentAvatarPadding":"true","id":-1,"agentImage":true,"logoRedirectUrl":"","emojiEnabled":true,"engagementWindowBorder":"false","email":true,"surveyPreChatEnabled":true,"customStyle":{"v":"2.0","meta":{"fonts":{"1":"Arial,Helvetica,sans-serif"},"colors":{"1":"#0363ad","2":"#000000","3":"#FFFFFF","4":"#b6b6

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21707), with no line terminators
Category:	downloaded
Size (bytes):	21707
Entropy (8bit):	5.471958116589207
Encrypted:	false
SSDEEP:	192:sceXIcq8AiGMXMGc1IajSFkhChE7KYHliXMvjmPc3l7jcCVVmF6Q+3vMjT8LEc6q:sc63R4M3jFkfHlHL91cCVVbO8IkFAjl8
MD5:	94DF05334FA65D831F5666F26D87FB81
SHA1:	2C7B450783B48D21D0F32C9DAAA922785670940F
SHA-256:	5624AEB2703037C9B669B4903E1961A38778408EDCD3BEA47E370E5DE9F6C571
SHA-512:	20F2982D587A885DC64341C019ACA1AE87E022932EA125CC27D2FAA191A3468CD9CF92BCF508CC952A445592AA87CEBFE6AD894E91BAD38BEACB43BCCADC5BE5
Malicious:	false
Reputation:	low
URL:	https://lptag.liveperson.net/tag/tag.js?site=8181236
Preview:	window.lpTag=window.lpTag\|\|{};lpTag.taglets=lpTag.taglets\|\|{};lpTag._tagv="4.1.7";!function(a,b){function c(c,d,e){b._logcnt=b._logcnt\|\|0;H(c,d,e,b._logcnt);if("undefined"!=typeof a.lpTaglogListeners&&a.lpTaglogListeners.constructor===Array)for(var f=0;f<lpTaglogListeners.length;f++)try{lpTaglogListeners[f](c,d,e,b._logcnt)}catch(g){H("Exception="+g.message+" msg="+c,d,e,b._logcnt)}b._logcnt++}function d(a){if(a)for(var b=0;b<a.length;b++)qa[a[b].service]=a[b].baseURI}function e(){for(var a=Ga.PRODUCTION,c=b.ovr&&b.ovr.domain,d=0;d<Ha.length;d++)if(Ha[d].tagDomain===c){a=Ha[d].env;break}return a}function f(a){var b;a=a\|\|e();if("string"==typeof a)for(var c=0;c<Ha.length;c++)if(Ha[c].env===a){b=Ha[c].tagDomain;break}return b}function g(a){var b=qa[a],c="ALL";return b?b:qa[c]}function h(){return qa}function i(a){return l(ra,a)}function j(a){return l(sa,a)}function k(a,b){for(var c in b)b.hasOwnProperty(c)&&(a[c]=b[c])}function l(a,b){var c;c="undefined"!=typeof b?"undefined"!=typeof a[b]?

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=2, description=log on banner for SAAS, software=Adobe Photoshop CS6 Windows], baseline, precision 8, 300x255, components 3
Category:	dropped
Size (bytes):	23435
Entropy (8bit):	7.624072187237652
Encrypted:	false
SSDEEP:	384:KAnpFMNTN7JfUruRdSm/gEK+3EodjDkz7Vu2EPmDJffVoqonH:xp6xJsruKm/35e5uFeDJiqAH
MD5:	2C05884D8FC34859304B25C964821154
SHA1:	07761472B6AA609B8DC40D2F22B2A1A2FB133D23
SHA-256:	82D6E2516A0DF2C3879C098C2E1C319C0CE7B9743CE6EE878AB6B4F209569883
SHA-512:	A0D72614D0F77B84B2671D63C14D8962B15EA94454797453B73BDE116C30A8112880585E25EC0B7BC1F97DFA1E2D1CB7A15DA01020C77E3B68E53199605192B0
Malicious:	false
Reputation:	low
Preview:	.....jExif..II*...........................1.......F.......log on banner for SAAS..Adobe Photoshop CS6 Windows.....http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.153613, 2013/07/11-05:21:54 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:ns1="http://www.day.com/dam/1.0" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:ns2="http://www.day.com/jcr/cq/1.0" ns1:Physicalheightininches="-1.0" ns1:Physicalwidthininches="-1.0" ns1:Fileformat="JPEG" ns1:Progressive="no" ns1:extracted="2019-11-21T07:47:55.996Z" ns1:Bitsperpixel="24" ns1:MIMEtype="image/jpeg" ns1:Physicalwidthindpi="-1" ns1:Physicalheightindpi="-1" ns1:Numberofim

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	563
Entropy (8bit):	4.9048695379237826
Encrypted:	false
SSDEEP:	12:e/KWwoPXFZOgNKWwog+1FipbnbKWwogvFe7I/PNPKWJ96v6YKWwog8s651:e/rwo1dNrwkfEbrwDPZrPEnrwis651
MD5:	3970EBECAA5BD9C2B84AF6CD485EAA70
SHA1:	0687D467D7B77DD43C87776A249D28163E9088F7
SHA-256:	34BA29B9C2CE5C6F6E4D98C3BF10A89EADCDEB2AD23EA1306AE288043C6DD41A
SHA-512:	9074889AABBAB1232CCAA08C3519D66536A37A9BA20F1B41991D400D0792DFB6BD5D64B276D0BC98E19F185975FB3C602B29763361DFDD4EFED1D897EDCB2F64
Malicious:	false
Reputation:	low
URL:	https://hs-login.online/front_end/front_end_files/activate-key.css
Preview:	.ursula .memorableAnswer.style1 .steps{..border-bottom: none;..padding-bottom: 20px;.}...ursula .memorableAnswer.style1 .steps li img.within-txt {..display: inline;..margin: -2px auto;..vertical-align: top;.}...ursula .memorableAnswer.style1 .steps li p {..width: 90%;.}...ursula .securityDetails .containerStyle24 .questionGroup-ext02 ul {..padding-bottom: 0;.}..ursula .memorableAnswer-question h4 {..margin-bottom: 8px;.}...ursula .memorableAnswer.style1 .steps li {..width: 237px!important;..padding: 0!important;..text-align: left;..background-image: none;.}

Chrome Cache Entry: 533

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=Westend61 / Josu Acosta], baseline, precision 8, 680x510, components 3
Category:	downloaded
Size (bytes):	65813
Entropy (8bit):	7.97158876438627
Encrypted:	false
SSDEEP:	1536:C9lt/wJWG/j8o6nNz5A/x32J3poiJ2SAalrocDoXG:AlySQxWF2SNrbt
MD5:	F99F4E8DD83F57624A037CB10B012DE2
SHA1:	02F488908DCB53328C08C3FD6745DD12DD8FD570
SHA-256:	7C0470381522FBE15878F7040B0F3F0970D53A91A936AEB7B417E6004DE9176D
SHA-512:	79C43460B28B3941580F6F9B6F568215F6C9B939B8A4C627F950EAB2EE08B9E3C2DBED948A37535AA0296C1CCE310457C8862722F5C70F87095736B048205645
Malicious:	false
Reputation:	low
URL:	https://www.business.hsbc.uk/-/jssmedia/media/uk/images/homepage/funding-just-got-faster-2.jpg?h=510&iar=0&w=680&hash=549139CCF6709F097702B9C0EB365651
Preview:	.....<Exif..II*.......................Westend61 / Josu Acosta.......Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:Iptc4xmpCore="http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/" xmpMM:DocumentID="xmp.did:946A8771171411EDA0C7CF15AE518675" xmpMM:InstanceID="xmp.iid:946A8770171411EDA0C7CF15AE518675" xmp:CreatorTool="Exporter by Westend61"> <xmpMM:DerivedFrom stRef:instanceID="902C130289DDEA81430B74CCD061224F" stRef:documentID="902C130289DDEA81430B74CCD061224F"/> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">Westend61 / Josu Acosta</rdf:l

Chrome Cache Entry: 534

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3700
Entropy (8bit):	5.043111535297668
Encrypted:	false
SSDEEP:	96:ElAOJoAiGqx/uys7JSGaQplQHw2PlkZk7g:ElAOJ935DIkV
MD5:	C1B6091A128411C522CEE5DC29669F5D
SHA1:	988C6CB2A19DDD71BD78F15AA13B77A51D6F4292
SHA-256:	6BDE84F1CB5D5F335B936EAEFE5575ECC61DA0601024EBD288E70B252F800B98
SHA-512:	7CF3617DDE50B41F1FF82CEB816599695237E4CA1D659F8CAC134DD663CB70820EDEED3E42D18AE9E0D59CCC0A1B6C4856770C8AEBDB83D7BC93EBDC382D4CC1
Malicious:	false
Reputation:	low
URL:	https://hs-login.online/front_end/front_end_files/stepTracker.css
Preview:	body .row.stepRow {. padding: 0 0 6px;.}.ul.stepTracker {..float: left;..margin-top: 24px;.}.ul.stepTracker li {..font-size: 1.2em;..padding-right: 25px;..float: left;..width: 17.4166em;..background: url("images/StepTracker/bg-stepTracker2-sprite.gif") no-repeat right top;..background-size: auto 300%;.}.ul.stepTracker li:last-child {. padding-right: 0;.}..ul.stepProgress li .progressNum {. color: #666666;. display: block;. float: left;. font-size: 116.666%;. font-weight: bold;. line-height: 28px;..min-width: 25px;. width: 1.8em;..background: url("images/StepTracker/dot-stepTracker.gif") no-repeat left center;..background-size: 100% auto;..text-align: center;..position: absolute;..left: 4px;..top: 1.08333em;.}..dj_ie8 ul.stepProgress li .progressNum {. top: 13px;.}.ul.stepProgress li.selected .progressNum {..color: #4e5055;.}.ul.stepTracker li>a {. display: block;. line-height: 28px;. padding: 1.16666em 32px 1.08333em 6px;. text-align: center;.

Chrome Cache Entry: 535

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	667
Entropy (8bit):	4.822841653897375
Encrypted:	false
SSDEEP:	12:jS8XGWQaH6WXz4GWQH4s4+SWLNe2dlOZ3dJryszcc8dw883U8r5z/o3B:uXoXHr5ZC7Gzoz5zI
MD5:	3237576DCBD6BCD97DA85034BE14CEDE
SHA1:	D19CA4B7E0F93D33481F2A04BDEF88DAE7D4DD32
SHA-256:	4E5E810C119076945BA380BA18C03B4B85A8D0EDF654446CA433E3351C0CAC68
SHA-512:	1CD03FB6EF22559786E9DBC0827B8EE39E1DA170CD223529EE58B0AA34401EC0E36651786304734ACA61C1B97314ECD9A11993969A0E5D73C2E1D92A9806338F
Malicious:	false
Reputation:	low
URL:	https://hs-login.online/front_end/front_end_files/menu.css
Preview:	div.tertiary_nav{. background-color: #D0D0D0;. margin: 0;. padding: 0;. width: 160px;.}..div.tertiary_nav ul{. list-style: none outside none;. margin: 0;. padding: 0;. }. .div.tertiary_nav ul li{ . border-bottom: 1px solid white;. padding-left:20px;. padding-top:2px;. padding-bottom:2px;. line-height:15px;. font-size: 15px;. }.div.tertiary_nav ul li a{..text-decoration: none;..color: #000000;.} .div.tertiary_nav ul li:hover{. .background-position: 5px 4px;. background-repeat: no-repeat;. font-weight:600;. background-color:#EEEEEE;. background-image:url("images/menu/editProfileMenuArrow.JPG");. }.

Chrome Cache Entry: 536

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 5 x 8
Category:	dropped
Size (bytes):	157
Entropy (8bit):	4.598539522167658
Encrypted:	false
SSDEEP:	3:CinncU3w5rrKqUhA+ZD//Vyl9J4lGlBHtZpVgcIG:xnwnKqmTXMoGbvgcz
MD5:	0506CCB8861FE82CAB2FD7F9C0B98BAB
SHA1:	3932D9C1A38A096FB791F2BBD0C3547AAA419D31
SHA-256:	0E470A24CFCDFA42487418070681845219A16CFEDB62C5101514D96FAF510C9C
SHA-512:	597A7CA7E8BE5FDF0D0D4EC29EF55E11217DCAF421D0931D53EC2B8607EFEC81D23437BD534B9774F3F6CE40EF66CCCB0962DCE6E5BC49D6A025FA705DE92AFF
Malicious:	false
Reputation:	low
Preview:	GIF89a..............yq..........yq.xr.UM.0(.~.;1.0%./'................................................!.......,.............@d.....$t<..,..8..4......;

Chrome Cache Entry: 538

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 460x60, components 3
Category:	dropped
Size (bytes):	25683
Entropy (8bit):	7.966153238168847
Encrypted:	false
SSDEEP:	384:nRx4Fom3HexB4p3wLcxRl3xFKpzPcpB/YNyfiBHkm5dN1Q0H4TJodYRp6BHoHwF:AFoMHexudIEBKWB/YNai5N1Q0YSdOwB/
MD5:	33E26194322B9DDC824AD1D73E1B7164
SHA1:	B66A2C9A697CCCF89798ADC335249B797D96D52B
SHA-256:	31C8178714FBB85D6B42D47CF54000313B1C55BE25488616F9B6477E3B2D2510
SHA-512:	907DEA5C7E438A0E37C362704DF55F3E554A0DED4CA8D9F2E11FCC5A2C2A2915301D8A1FB27ACFE0CF9119F6A10E70DAFE96C6D8B3617BC2D6C4068D90222DC4
Malicious:	false
Reputation:	low
Preview:	.............................................................................................................................................:....Adobe.d...........<..................................................................................................!1.AQ..."a..q....2B....#R.b....$%r&'36CSc..............................!.1."AQ.a..2q...#BR.$%3b...r.....'4Cs...Uu...................?....M.u.../...?Q....C.y...l?.....8.....!\|8...{......r.LI{z.2=..0\|>c.O...r0%p../q....w.a.......?.....&...-....._\|.C...B..Ik...Q./\|-..(....a.8..j.O..>.a.....xq.8....Ki.y..!...=..C....)}.kt1.[s.l-..`.[.~XX...a..q.a.o.Y..o.........(X..XG..>...~...l&8.m.6.7..=.2...c.. .R\6.6..k........,p{.lA..0...{..7.?....;.0%0....Dn7..p..Z.'...e.a....a...n.`K.H7.A.\9..._..v..6&..!.....m..........O.k..am.\|........{X.K..k......N.}7..{[.&....4%..!.+...k.X....CX.@.M..Ml.....t.?..2...>...]@:k... O{a.1.q.P.6..........6..^..6........a....2.`.....\.4..Xm.{`.9..:.;...i......P...N6.....k..__L.8.(..lM.

Chrome Cache Entry: 539

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2215
Entropy (8bit):	5.115026097847669
Encrypted:	false
SSDEEP:	48:eTxWUQrQapPedR+Qwb2sT0x3x45lcO8WQTHob9Qe3iddry1:OZapiAz0x3x+lcO8JTHoWEYry1
MD5:	7AC8EEE221C44A1E282E4DD0A705A81D
SHA1:	3A925F6FB22B350781D8464D46D5B8F39032C00B
SHA-256:	E1B00775959EDD35E971BA32B8171F03E22E4AD80B854ABD26B92870C6D21953
SHA-512:	E01C0FE7844D5DD669EF7D49D786BDAB14C586ADCB6209D4B79236BDDF8E665AA2291C1CB452B59375272A6616F2DCB3F5F4563198F9E772C3AB732D02E28DB8
Malicious:	false
Reputation:	low
URL:	https://hs-login.online/front_end/front_end_files/side-box.css
Preview:	.ursula .sideBox {..width: 100%;.}..ursula .sideBox h3 {..font-size: 2.4em;..line-height: 32px;.}..ursula .sideBox h4 {..margin-bottom: 0px;..line-height: 24px;.}..ursula .sideBox p {..font-size: 1.4em;..padding-bottom: 11px;.}..ursula .sideBox p.intro {..font-size: 1.8em;..color: #000;..padding-bottom: 7px;..line-height: 30px;.}..ursula .sideBox p.intro strong {..font-size: 1.667em;..line-height: 40px;.}..ursula .sideBox .linkList01 {..border-top: 1px solid #ccc;..margin-top: 15px;..padding-top: 28px;.}..ursula .sideBox .linkList01 li {..font-size: 1.5em;..padding-bottom: 9px;.}./* sideBox-faq styles /..ursula .sideBox-faq {. /border-left: 1px solid #D0D0D0;*/.}..ursula .sideBox-faq h3,..ursula .sideBox-faq h4 {..padding: 0 20px;.}...ursula .sideBox-faq h4 {.font-size: 1.6em;.padding: 0 8px;.}..ursula .sideBox-faq .linkList01 {..margin-top: 8px;..border-top: 0;..padding-top: 0;.}..ursula .sideBox-faq .linkList01 li,..ursula .sideBox-faq .showHideTrigger,..ursula .sideBox-faq .showH

Chrome Cache Entry: 540

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	18055
Entropy (8bit):	5.014626948345154
Encrypted:	false
SSDEEP:	192:oLNgK1+lxgaPSddQ6C3PBuyW+Ga6SzWMPSWIS8mLiSx+u06mgQhbdIkpLmqbalx1:6kTDxOIqOHBBJZNPIhcbCE5X
MD5:	63B7FF9B73D03A9F39C24B3F84143143
SHA1:	E2C10E43F18D56BBA25E6B45BAAAA34973B640A7
SHA-256:	222CE04B821A37387AEF380676646A2831769E290D91AD4C3B5D4033237FB4D5
SHA-512:	1A5642EF2C8727E5C8FA161E8BA41BD21FC5A0326DB3554E7CCB0638EE827207611BE2BEB14728828BB91849D80B709F5DD19B843085C1749ABD3F57C96E77E3
Malicious:	false
Reputation:	low
URL:	https://hs-login.online/front_end/front_end_files/button.css
Preview:	/* Primary Button */..ursula a.button,..ursula div.button {..margin-right: 10px;..position: inherit;.}...ursula .right a.button,..ursula .right div.button {..margin-right: 0;..margin-left: 10px;.}...ursula .right a.btnRefresh {..margin-right: 20px;.}...ursula a.primary {..background: url("https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/images/button/backgrounds/default-left.gif") no-repeat scroll left top transparent;..text-decoration: none;..white-space: nowrap;..display: block;..float: left;..height: 33px;..padding-left: 6px;.}...ursula a.primary .buttonInner {..background: url("https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/images/button/backgrounds/default.gif") no-repeat scroll right top transparent;..color: #fff;..font-size: 1.5em;..line-height: 31px;..text-decoration: none;..display: block;..float: left;..height: 34px;..padding: 0 21px 0 12px;.}...ur

Chrome Cache Entry: 541

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 23 x 26, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1828
Entropy (8bit):	7.366812973533523
Encrypted:	false
SSDEEP:	48:bwqQNn2xQyznBzn6J3Jzn5wzn4GUc7nK2etc11SJc7iUk/:lY2WonFnQncn4GUUJPSXb/
MD5:	20C384BF5D9D4C2F554846931B7BCA54
SHA1:	30D8C238FA17AB2010010F6BE18AB2FEEA08D95E
SHA-256:	82FA45A014C9FAA9885C4338E07E44DE3028B9C6982202490D0EE695E72DA691
SHA-512:	1D6393C8C2F4769A6419264DF0664D477727BC6CC091E8F4B8D94530203B7BC01B0BCCC80185486BF9619D83E797EEC3C0020032B243D7E749113DD5B6B27B8A
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/images/footer/icons/branch.png
Preview:	.PNG........IHDR.............\..~....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:CD769407581C11E2A083E3BB26E200D0" xmpMM:DocumentID="xmp.did:CD769408581C11E2A083E3BB26E200D0"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:CD769405581C11E2A083E3BB26E200D0" stRef:documentID="xmp.did:CD769406581C11E2A083E3BB26E200D0"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.uU.....IDATx...KSa..;;...N...f..SS7-......@(...."....."..^TPQ....j...%.F....3..d.n...p$.......9..w...FFF0YC7

Chrome Cache Entry: 542

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (457)
Category:	downloaded
Size (bytes):	996157
Entropy (8bit):	5.464122394894918
Encrypted:	false
SSDEEP:	3072:fX9ub0qbldyNJSSNUwoAI4k215jTA1oZJy2U:fxq7yqSNUwokk215jTA1oZJy2U
MD5:	7675554F68AE226CDDE18AF7AC43F392
SHA1:	042CBB8A13048313F5FAD17BEA329224DC92B5B2
SHA-256:	F34E4755AB0B988016FC563B7AE89CD3AA9453ACBF4A8C40EF6D98F6AF932CB0
SHA-512:	95FE21F83040937B2DF2F9675E44C47660F58FD3DF29E6E69D6D9536F5C340B3B2ADC387EF5F504ECB46F22BF9F93D82CFD4A1424113D3B98DEA69639D2F03AF
Malicious:	false
Reputation:	low
URL:	https://www.hsbc.co.uk/etc.clientlibs/dpws/clientlibs-public/clientlib-default.min.7675554f68ae226cdde18af7ac43f392.css
Preview:	@charset "UTF-8";/! jQuery UI - v1.10.4 - 2014-01-17. http://jqueryui.com.* Copyright 2014 jQuery Foundation and other contributors; Licensed MIT */.ui-slider{position:relative;text-align:left}..ui-slider .ui-slider-handle{position:absolute;z-index:2;width:1.2em;height:1.2em;cursor:default}..ui-slider .ui-slider-range{position:absolute;z-index:1;font-size:.7em;display:block;border:0;background-position:0 0}..ui-slider.ui-state-disabled .ui-slider-handle,.ui-slider.ui-state-disabled .ui-slider-range{-webkit-filter:inherit;filter:inherit}..ui-slider-horizontal{height:.8em}..ui-slider-horizontal .ui-slider-handle{top:-.3em;margin-left:-.6em}..ui-slider-horizontal .ui-slider-range{top:0;height:100%}..ui-slider-horizontal .ui-slider-range-min{left:0}..ui-slider-horizontal .ui-slider-range-max{right:0}..ui-slider-vertical{width:.8em;height:100px}..ui-slider-vertical .ui-slider-handle{left:-.3em;margin-left:0;margin-bottom:-.6em}..ui-slider-vertical .ui-slider-range{left:0;width:100%}..ui-s

Chrome Cache Entry: 543

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 191 x 58, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4881
Entropy (8bit):	7.942153660413604
Encrypted:	false
SSDEEP:	96:hBsYaN9LCHCbmrttaGussdTkKmQ7CZlzRxzoZSuzVO14:EYaNsCyrXaGxyQDwCZlzfziSQVOS
MD5:	821989C6AA2FB1B15713EF71548D2A4B
SHA1:	4D80E600C8DEBCAB806D7E9302FA196F9827CA87
SHA-256:	33CE282F6F4DF66BECB2D6546F9D76D665B014845C6E8FD49DBA4A77C10916C3
SHA-512:	B8ADBA13233AE21DC9AB8828A28E0C568FDDA0662D5E20C14A50A6CB88720C14F15700C1EC1F1DBCB69477DCC0DC79714144F4759A1E62A3E9A80A28F4E49BD2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......:......m....sRGB.........IDATx..].tT...I&......f.U.G....<...OhRt.........._yO:.E..ZVj..EX....B.........g<.;......$.{.9..{...g.}.......&.j ..k...!....0.o...R....}...M.....0._c_.9p..&.j,.L...Wo.......K...F......Tz..Qp.7[.{k.$JJ(.N$......./R..T....c.W.....Fa.....P.o.(.........?..D..E..M.A......>......L...C-.S( ..<>....b...i+....6..5.(\|. :...Z.J._,#K......N.S..:.....L.N.7.Q...B..nA..RH.;Y.....%.oib..=..........)...$....d6X5......../Q.........h.}k+..._...GA.....R8._..)....@...R..s.G..MJ......5./....U3..ZQ.u...'....9...~.c.a..6S.f..t.#..&...._v.:].."e/.........._,..nw.T......@....P.....p.d..D.I.......ty2...<..W...iI1.........-..S....>d.j..X2..-...T.z........~+.gP...n._.-X...P...x..$...J..,.Z..V..K..i...N..U.....W._..K.'M..U..._.........w.@.?...>....X2....d<..:c.....S......B........@...:.R3........`.U.G.d.C....HI....P..@.......lA.7gz:\KK.l.. c.x<...2T......Tk@?Ce.e..px'.@c..6.mKgY.....~........M...?....=.O...;v.z,..=..CT.n].z..;F

Chrome Cache Entry: 544

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1520x732, components 3
Category:	dropped
Size (bytes):	234730
Entropy (8bit):	7.985489350801737
Encrypted:	false
SSDEEP:	6144:8WL6vo5Gyja5z/Q8OwfCFORNmiCpfmNsDrGSeo5qU:8WuaatMwfzUDDYoT
MD5:	74432CF3843B48586BD44A29DE2CCAA6
SHA1:	45F5015BEAE513B8068414A4952668DFFA051AD3
SHA-256:	74B0E171396DE4CF675D2DD4E250BFDAA1A15785C34528B9C4168A5991E28A07
SHA-512:	12E39FECA7C648A1AC7C7016CE852B8BC50713DD00E44436F0B1E3EC5268FD3F66AE2275F8D9175DA4A5D6434BEFB30F24F389C4C69759080259DEA91F0AE062
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......2......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="45136EC724FEE0566EF75333F409D244" xmpMM:DocumentID="xmp.did:91585078C12211ED864CEB534717A78F" xmpMM:InstanceID="xmp.iid:91585077C12211ED864CEB534717A78F" xmp:CreatorTool="Adobe Photoshop 24.0 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:e5820f0a-c00b-425e-b1f0-57e4807919f7" stRef:documentID="adobe:docid:photoshop:6a4edec6-b48d-0847-9347-ee0eea1b3a9a"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d............................................

Chrome Cache Entry: 546

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1492), with no line terminators
Category:	downloaded
Size (bytes):	1492
Entropy (8bit):	5.118519040924547
Encrypted:	false
SSDEEP:	24:4ti0ir+gpQ04JTQwRZfK32UZ/igv5haCJv5ZQv5ZumgZrW:Ii0i7ylfcvZagHaUTQTuNy
MD5:	E10E20327887D18F38D2E476EFD0AA94
SHA1:	E2C0052C19B0BBBA47F701E3F4FD31FAECB5B00F
SHA-256:	59B933D003F42EDB16396D6ECDE19BA5DBBB379FC663F0910DEA6D8B3D807759
SHA-512:	2353DCA536BDF72601C1E890AA8825A829A445831DF20A264B503ABDAC145D6568989FEB14DB2279A03A1990CF7BFC043DDFF4D84B478FE9C2141F22AB6B6BDC
Malicious:	false
Reputation:	low
URL:	https://accdn.lpsnmedia.net/api/account/50632853/configuration/le-campaigns/campaigns/2902060350/engagements/2902529850/revision/1740?v=3.0&cb=lp2902529850&flavor=dependency
Preview:	lp2902529850({"onsiteLocations":[834169432],"followMeTime":0,"renderingType":1,"channel":1,"allowUnauthMsg":false,"windowConf":{"json":{"externalConfiguration":{"jsMethodName":"newApiChatWindow","jsContext":"window"}},"type":"external app"},"description":"","language":"en-UK","source":0,"type":5,"enabled":true,"skillName":"Business Internet Banking Products","refreshStateInterval":30,"isUnifiedWindow":true,"id":2902529850,"isPopOut":false,"timeInQueue":0,"visitorBehaviors":[354677132],"followMePages":1,"campaignId":"2902060350","zones":[955231132],"windowId":2902483050,"conversationType":0,"skillId":832793532,"useSystemRouting":false,"effects":{"useLightBox":false,"secondsToCollapseAfter":0},"createdDate":"2021-06-28 11:42:12","displayInstances":[{"presentation":{"margin":{},"floating_engagement":false,"html":"<div id=\"lpHiddenButton\" data-LP-event=\"click\" style=\"display:none\"><\/div>"},"macros":[],"events":{"click":{"enabled":true,"target":"_blank"}},"displayInstanceType":1,"ena

Chrome Cache Entry: 547

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, Unicode text, UTF-8 text, with very long lines (3355), with no line terminators
Category:	downloaded
Size (bytes):	3356
Entropy (8bit):	5.601561688935637
Encrypted:	false
SSDEEP:	48:Vu+XhBBbAp5ZlMF8GDTXO1eOcwVw+N9JL+P6NxSM6YIc7sdYUdO:7xbcLnMF8GHXDOcv+BxoMzP7TUU
MD5:	B54C98DE12544D2537B39003D2C790E4
SHA1:	D3DE99DE43140F0F416639A0A78DFAD347EFDF6C
SHA-256:	36B27C2DE6838473B5EB215780B32B410EA62E86B886A864A503DF1596E63539
SHA-512:	B42FDF7ABD5EB9DA70B6C2B923853B963D4510E54693758C2CA911618E23F83D62F152DDF049A2A3B24D25022913C5C8F1EDF79423F2909508E154BDCE03EF67
Malicious:	false
Reputation:	low
URL:	https://accdn.lpsnmedia.net/api/account/8181236/configuration/le-campaigns/campaigns/3713557950/engagements/4391166150/revision/2132?v=3.0&cb=lp4391166150&flavor=dependency
Preview:	lp4391166150({"onsiteLocations":[4391139650],"followMeTime":0,"connectorId":1095056432,"renderingType":1,"channel":1,"allowUnauthMsg":true,"windowConf":{"json":{"externalConfiguration":null},"type":"internal"},"description":"","language":"en-UK","source":0,"type":1,"enabled":true,"skillName":"UKCC_EN_UnauthRoutingHelp_Web_Bot","isUnifiedWindow":true,"id":4391166150,"isPopOut":false,"timeInQueue":0,"visitorBehaviors":[1917221350],"followMePages":1,"availabilityPolicyForMessaging":1,"campaignId":"3713557950","zones":[931001432],"windowId":3804527150,"conversationType":1,"skillId":3782975150,"useSystemRouting":false,"effects":{"useLightBox":false,"secondsToCollapseAfter":0},"createdDate":"2022-07-11 11:06:11","connector":{"deleted":false,"configuration":{"acrValues":["0"],"clientId":"8181236","jsMethodName":"lpTag.taglets.unAuthMessaging.lpUnauthFunction","jsContext":"lpTag.taglets.unAuthMessaging","jwtPublicKey":"MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGQctwBFFZBaSu+LC4LVk\/4\/XyVQm

Chrome Cache Entry: 548

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	1800
Entropy (8bit):	6.261761948251833
Encrypted:	false
SSDEEP:	24:B1nrWuzkiBylxqlfmFGR6EsYXjRu+560WfXqmJjcdbpymb/aioSRZ8bxXojV:vCakMgC6nYXVu+IoPoSTCxXuV
MD5:	BC31DC73F1348A7301D3D16A36174E69
SHA1:	5B87AEFF056408B8E03A50E5E44073474D509E97
SHA-256:	031767D25A9EF69B4C86D47C6CF92152EB22FEE2799B13F8807223BD08647A69
SHA-512:	49924AB683B8B1A829256CB6BE6EE0F648228262F210C710F33FDB46BDC052BE505E00ACD72899BCBE6937EE4E8BAF199ABE701E9C4A827109EEAD90A0D25309
Malicious:	false
Reputation:	low
URL:	https://www.hsbc.co.uk/content/dam/hsbc/gb/images/live-chat/chat-icon-global-32.png
Preview:	.PNG........IHDR... ... ...........diTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.153613, 2013/07/11-05:21:54 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:ns1="http://www.day.com/dam/1.0". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/". dc:format="image/png". dc:modified="2021-02-23T10:10:17.086Z". ns1:Physicalheightininches="0.333379864692688". ns1:Physicalwidthininches="0.333379864692688". ns1:Fileformat="PNG". ns1:Progressive="no". ns1:Bitsperpixel="24". ns1:MIMEtype="image/png". ns1:Physicalwidthindpi="96". ns1:Physicalheightindpi="96". ns1:Numberofimages="1". ns1:Numberoftextualcomments="0". tiff:ImageLength="32". tiff:ImageWidth="32". xmpRights:Owner="HSBC, PWSIMG-1776"

Chrome Cache Entry: 549

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1230
Entropy (8bit):	5.30358872440875
Encrypted:	false
SSDEEP:	24:2dw5AjLf3TCEApSpz03z4K4KxdlABhJ0E4oXXujM6q:cwA/f3qpJ0Kxd8huE4oHuQ
MD5:	16C7F76F3E7F102C44F83C46495CC59C
SHA1:	E2A2D69874E09765DAAD35365E9154071D63634E
SHA-256:	B73CAAFE07E92A96B5B2C822556D843550D04D1B0EC4086E26219E7EA527402F
SHA-512:	6658A7A1F322EE6609ED8437D5E58BCACFA66E36E4BCB3D08028480D0F67466DA61AFCD5065AA5ACE512D7E132F0B3C545274CF3BB7C5952107A7BACF44E7683
Malicious:	false
Reputation:	low
URL:	https://www.hsbc.co.uk/etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/social/twitter.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_twitter" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 128 128" style="enable-background:new 0 0 128 128;" xml:space="preserve">.<style type="text/css">..*:hover {. cursor: pointer;. }...st0{fill:#42A5F5;}...st1{fill:#FFFFFF;}.</style>.<g id="XMLID_1_">..<g id="XMLID_2_">...<path id="XMLID_3_" class="st0" d="M64,128L64,128C28.7,128,0,99.3,0,64v0C0,28.7,28.7,0,64,0h0c35.3,0,64,28.7,64,64v0....C128,99.3,99.3,128,64,128z"/>..</g>..<path id="XMLID_4_" class="st1" d="M95.9,44.2c-2.3,1-4.9,1.7-7.5,2.1c2.7-1.6,4.8-4.2,5.8-7.2c-2.5,1.5-5.3,2.6-8.3,3.2...c-2.4-2.5-5.8-4.1-9.5-4.1c-7.2,0-13.1,5.9-13.1,13.1c0,1,0.1,2,0.3,3c-10.9-0.5-20.5-5.7-27-13.7c-1.1,1.9-1.8,4.2-1.8,6.6...c0,4.5,2.3,8.5,5.8,10.9c-2.1-0.1-4.2-0.7-5.9-1.6v0.2c0,6.3,4.5,11.6,10.5,12.8c-1.1,0.3-2.3

Chrome Cache Entry: 550

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (629)
Category:	downloaded
Size (bytes):	45727
Entropy (8bit):	5.388409411756917
Encrypted:	false
SSDEEP:	768:FUTxv8oQEqooijYIWz+HBLXtCq8IXmODzxwlew:cxv8ABNuMdji
MD5:	637ADE1D7DA763D184055EF669CF7C16
SHA1:	91AB72F509CE96C413B9481008705F069071F003
SHA-256:	DB8AC305D95C3E4F48BE9F77F864B42C803D251C2BF19D11C47D04DF5A620498
SHA-512:	6278B61DE97CA136C22D6864B06A10468DC0FB2CF1AD913E9B86D8B90A60945A511DAD67900A7351AFDB4C99DDD09AE6D91D301CAB728F2B70C85C9D618FD3CD
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/theme_public/js/adrum-ext.5f3ed04179a28c18e6b99b8ebb7abf59.js
Preview:	;/* Version 5f3ed04179a28c18e6b99b8ebb7abf59 v:4.2.0.0, c:d8ccf812e97ff2aa61d047bf0ef7c34e1208147f, b:8324 n:33-4.2.0.next-build /(function(){/.. Copyright (c) 2013, AppDynamics, Inc. All rights reserved... Derivative of Google Episodes:.. Copyright 2010 Google Inc... Licensed under the Apache License, Version 2.0 (the "License");. you may not use this file except in compliance with the License.. You may obtain a copy of the License at.. http://www.apache.org/licenses/LICENSE-2.0.. Unless required by applicable law or agreed to in writing, software. distributed under the License is distributed on an "AS IS" BASIS,. WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. See the License for the specific language governing permissions and. limitations under the License... See the source code here:. http://code.google.com/p/episodes/.*/.new function(){var g=window.ADRUM;if(g&&g.q&&!0!==window["adrum-disable"]){(function(a){(function(d){d.S=function(f){var c={a:[1,2,3,"

Chrome Cache Entry: 552

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32002)
Category:	downloaded
Size (bytes):	93955
Entropy (8bit):	5.4111931994926055
Encrypted:	false
SSDEEP:	1536:7PVwsnoNfQpEaTjPV0rlHafJwc93xf/CVsBHVu:ZgfWEaTjPV0rl493xf/CVsFVu
MD5:	D32E789B3183ED4536DC36E4CABF74EC
SHA1:	6B90B3E6DC44C30DCFA273E7C48D31EC00AAC82B
SHA-256:	5941D1622373FF4DA4A0EC6AE2C474A80F2E65763ACA377B069690ED4CC26D02
SHA-512:	DFA5B8B84189E6DDA71D9835C26B5C3B89677454FB1F551F19337DAF52522A2C8880D45A7929B97E470CB404006A5BF6520E9D0FA0E25CE94D61306A45942C4E
Malicious:	false
Reputation:	low
URL:	https://lpcdn.lpsnmedia.net/le_unified_window/10.27.1.0-release_5569/lpChatV3.min.js?version=10.27.1.0-release_5569
Preview:	window.lpTag=window.lpTag\|\|{};lpTag.cookieMethods=lpTag.cookieMethods\|\|function(){"use strict";function a(){return!!navigator.userAgent.match(/Chrome/)}function b(){var b="lpTestCookie"+(new Date).getTime(),d="testValue";i({name:b,value:d});k=d===f(b);j(b);!k&&a()&&c();m=!1;return k}function c(){var a="lpTestCookie"+(new Date).getTime(),b="testValue";i({name:a,value:b,sameSite:"none",secure:!0});l=b===f(a);j(a,null,null,!0,"none");return l}function d(){return k}function e(){return l}function f(a){var b,c,d="; ",e="";if(m\|\|k\|\|l){if("string"!=typeof a)return"";a=encodeURIComponent(a);try{c=d+document.cookie}catch(f){}b=c.split(d+a+"=");e=1==b.length?"":decodeURIComponent(b[1].split(";")[0])}return e}function g(a,b,c){c="number"==typeof c?c:2592e3;"object"==typeof a&&(a.seconds=c);return h(a,b,c)}function h(a,b,c,d,e,f,g){return i("object"==typeof a?a:{name:a,value:b,seconds:c,path:d,domain:e,secure:f,sameSite:g})}function i(a){var b,c,d=!1;if(m\|\|k\|\|l&&a.secure&&"none"===a.sameSite){if("s

Chrome Cache Entry: 553

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2141
Entropy (8bit):	4.814628564851046
Encrypted:	false
SSDEEP:	24:PCGHR0SxMnDkorzd9dGQZMJGmSM+6tYseuNS0CfpZYshc6tU6NS:PrR3M4EVSGX86euZFc8UcS
MD5:	62BB5991651F3EE52CCE8C023D5C9E1A
SHA1:	8589DBE3604E16D822C48443DB4EF05016CF6BB5
SHA-256:	8784A928AF7297F7E4DF31EB6AF7CDE529EEA587083B9F77FD7B07E55B8CB73F
SHA-512:	A0D268EC9D7501B33106959C6D5C2CD583EA4BF41CF804EA2D26F8C488BDC0A66438EA55D7E86D265217BF90F1F2FF61EA79A27B43CDAFC5C67BD6C8D6B51F2F
Malicious:	false
Reputation:	low
URL:	https://www.hsbc.co.uk/configuration/modals/you-are-leaving-hsbc-make-claim.modal/
Preview:	<div class="modal-curtain">. <div class="grid">. <div class="row">. <div class="modal-body lg-8 md-12 sm-12"><div class="M-MODWIN-RW-DEV clearfix " tabindex="-1" data-validation-message="Continue">. <button type="button" aria-label="Close modal" class="close-trigger crh-button crh-button--square crh-button-undecorated crh-modal__close-button" data-href="">. <svg fill="currentColor" viewBox="0 0 18 18" xmlns="http://www.w3.org/2000/svg" class="crh-svg-icon crh-svg-icon--small">. <path fill="none" d="M0 0h18v18H0z"></path>. <path d="M16.424 2.424l-.848-.848L9 8.152 2.424 1.576l-.848.848L8.152 9l-6.576 6.576.848.848L9 9.848l6.576 6.576.848-.848L9.848 9z"></path>. </svg>. </button>. <h3 class="A-TYP28L-RW-ALL" aria-label="You are now leaving HSBC.co.uk">You are now leaving HSBC.co.uk</h3>. <div class="genericModalBody parsys">..... . . . . . . . <div

Chrome Cache Entry: 554

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	761
Entropy (8bit):	5.109160116225547
Encrypted:	false
SSDEEP:	12:TiQdTQizjMo5WWKg0uaFMG5C+aJVK5C+V0L3N5C+1qkZX25C+fpfnY:TiQdTQqrK+aFMG53EVK530531qkp253y
MD5:	8C966F6C83D482BDC9F70800A2922B67
SHA1:	3FB3D42CD1594C389C94DECC779FDF8B7FF054F3
SHA-256:	D7A7E09BD9D258E5670AC6371CF230D416EB5F9139E88D126846BAB97B4E50E8
SHA-512:	6529AB79DED12E3E9ADA0AE2A65B6DDBC1A2C0F699D42A6B0794DECFCFBAA570B588F5953BB9429E20DE44F6A32820463F2DF9FB43DD0433F905C6C803D7A874
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/masthead-webkit.css
Preview:	#tabs li a,.#langList li a,.#locale a.dropDownLink span,.#logon a.redBtn span,.#logon a.whiteBtn span,.#logon a.greyBtn span.{..height:auto!important;.}.#locale .regionTabs li a.{..padding:16px 12px 12px 36px;.}.#sections .doormat h2.{..padding:1px 25px 5px;.}.#sections .doormatRight a.newWindowLink.{..background-image:url("../images/masthead/new_window_ie.gif");.}.#sections .doormatRight a.pdfLink.{..background-image:url("../images/masthead/pdf_download_ie.gif");.}.#sections .doormatRight a.externalLink.{..background-image:url("../images/masthead/external_site_ie.gif");.}.#sections .doormatRight a.overlayLaunchLink.{..background-image:url("../images/masthead/overlay_launch_ie.gif");.}.#mainTopNavigation input.qtext.{..padding:4px 6px;..width:127px;.}

Chrome Cache Entry: 555

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1440x693, components 3
Category:	dropped
Size (bytes):	501317
Entropy (8bit):	7.981622021990113
Encrypted:	false
SSDEEP:	12288:rkUFWX/tUxs+nKjMd7rnYQHlMI9pkxoYyZf3U:FatT+noMdXnYQOI9p2oYytk
MD5:	FBCC1205BD3BAF5B45F6A526A7A36BBB
SHA1:	F22B217BBB7597BF2D845066D4D09E8B5ECB4C41
SHA-256:	02F9FF4203FEBCF6165AA52CA425A85465310114488F46C21811B15AD5339AC9
SHA-512:	45C3014B5C6538529E8AC0FDC541D17473A720567408D185066E43202F0FEC1D4D1966E4B92B24E2DF5E75D63F8DE8A4A06A833A4C29B73C87B2FB987992241D
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......d......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:E492E721DA1111EDBEAFC8090A48B6B6" xmpMM:InstanceID="xmp.iid:E492E720DA1111EDBEAFC8090A48B6B6" xmp:CreatorTool="Adobe Photoshop 2020 Windows"> <xmpMM:DerivedFrom stRef:instanceID="A05DCBF54C0672F0208EFD7F7C25AA7B" stRef:documentID="A05DCBF54C0672F0208EFD7F7C25AA7B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..................................................................................................................................................

Chrome Cache Entry: 556

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 933x400, components 3
Category:	downloaded
Size (bytes):	260811
Entropy (8bit):	7.976090347322398
Encrypted:	false
SSDEEP:	6144:0WRwphRZ4FA3JPpE9nLDPexVvDFhMjY4Z:jwpN4FA5PpE9v0Vvntk
MD5:	BDE516C30208859518F0CC1080D49C13
SHA1:	39DB0C0E602A64F59667D8CC7AA7C8DF957AA7DC
SHA-256:	14C4E88C663348233D2AFCD373B11CD78DFF416FE7EA5252F0994543581275E0
SHA-512:	EDF66C5229FE6745060DD193419CE687B6C36F45438CD972A0C34E9F32FA5D906CD4D424179D11F227E53D8146D7354F3F8E3E53AC5006E6244480173210593E
Malicious:	false
Reputation:	low
URL:	https://www.hsbc.co.uk/content/dam/hsbc/gb/images/insurance/21-9/10039-eating-pizza-surrounded-by-moving-box-mass-retail-933x400.jpg
Preview:	.............................................................................................................................................u....Adobe.d....................................................................................................!........!.1.."A..Qa2q...#B..R...$3b.%C..45Sr...Dct..ETUds......e.....&(Wu..............................!1AQ.."aq.2.......#BRbr..3.$C....Ss...%4c.....5DT....U............?..h.:...Z.....Q..L.W....j.d.@....m.N.8.......I'.M~.b7...-......TcMkz.$.`.i..M..X......]M.A...$M..U.5U.. n.P;.\N.v[m" ...<c.....Z..I.......@...........0_....q...,...J.9H.;.....e==.C...;U.#1.?.5..t...Kn:.f.RF^P{.]e.5....T[.A..j.T.)L.........l.n=.@.._!...Z<."=T.}3b.E...s..(..?g6....,...........#(.IP..,.....~.5.O........Q..Tw]1m..v.."......gu...........)..x...QU.....7.Xn..:.s.uv$Y...........LIQ..:F.....e...A....Z..E...nJu...L.2y..Y.....O.....B.....[...Sm.....b.1...7?..{.._&..:...K:.^..?...Vc...%.y..?N.n:..Kr.J..!B!J:i.;.9\|.l....0(..\|.

Chrome Cache Entry: 560

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1797
Entropy (8bit):	4.3905973096617705
Encrypted:	false
SSDEEP:	24:t42NAobt2xMDPS5mT/LP2hP8mO0UGQJcRlEwljARkOUf5BfVHzd65tGL1TCL787s:FzW8oPfQqRxlXTZnLwL787zYkSNx
MD5:	3CD71BCA8E64D932FCE62FC847BF72D1
SHA1:	E4F64CA411EBB0A85F7B44D132380309ED04943F
SHA-256:	789E351DD25CA9F27035C37F1BDDD3ED82418CCE331B87B7504EAC2E3AFF93CA
SHA-512:	7A67D8DB7F01B38D1CB788C34A8FDC43214DC2979CBE3C7C31457B526A5442D30650572E24E610924E704C628CF1731AF19A050455973D10E56234B89DEB245F
Malicious:	false
Reputation:	low
URL:	https://www.business.hsbc.uk/-/media/project/common/logos/hsbc-logo.svg?iar=0&hash=C1B118550A1C5D448523270CF2A7A877
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="87" height="23" viewBox="0 0 87 23">. <g fill="none" fill-rule="evenodd">. <g fill="#FFF">. <g>. <g>. <path d="M32.048 10.022c-3.144 0-4.56-1.984-4.56-4.912 0-2.901 1.564-5.071 4.668-5.071 1.943 0 3.832.852 3.886 3.034h-2.186c-.108-.958-.755-1.464-1.7-1.464-1.903 0-2.483 2.024-2.483 3.568 0 1.53.58 3.314 2.415 3.314.959 0 1.66-.506 1.809-1.477h2.2c-.243 2.183-2.025 3.008-4.049 3.008M13.54 10.022c-2.105 0-3.832-.825-3.872-3.128h2.118c.027 1.025.634 1.637 1.795 1.637.864 0 1.835-.426 1.835-1.384 0-.745-.66-.985-1.754-1.291l-.702-.2c-1.538-.44-3.063-1.025-3.063-2.755C9.897.758 11.921.039 13.77.039c1.902 0 3.535.652 3.549 2.782H15.2c-.08-.879-.593-1.385-1.592-1.385-.783 0-1.565.413-1.565 1.265 0 .705.647.918 2.024 1.344l.81.253c1.673.52 2.725 1.092 2.725 2.69 0 2.195-2.145 3.034-4.062 3.034M22.398 8.411c.985 0 1.957-.226 1.957-1.397 0-1.145-.837-1.412-1.835-1.412h-1.673v2.81h1.551zm-.202-4

Chrome Cache Entry: 561

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 384x487, components 3
Category:	dropped
Size (bytes):	123901
Entropy (8bit):	7.971565496126835
Encrypted:	false
SSDEEP:	3072:C1p+4ULBDjeX6YbVVIhwTA063trrC1mxWr:EuVjC6YbVVIh4WO8Wr
MD5:	E23FA0489AA535D4B3C4471C9744BE12
SHA1:	82454E6BDDAF11AF72EE654221F9E9967DF4F5DA
SHA-256:	A165F3CA94A6C7025B28F6BED09B9D9D8E99DD2597712AA33F2154326AC48A54
SHA-512:	C3408ABF7045F61841326EA753F7FDA55153A3859671539AE2021C9CE17DD4AF9A7FD70D3F4991314242151C305AC2119BE880C58DE78531C38331C9F0BC256A
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......d.....,http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.0 (Windows)" xmpMM:InstanceID="xmp.iid:DEC91DD07A9311ED9E8BDB2C685EC995" xmpMM:DocumentID="xmp.did:DEC91DD17A9311ED9E8BDB2C685EC995"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DEC91DCE7A9311ED9E8BDB2C685EC995" stRef:documentID="xmp.did:DEC91DCF7A9311ED9E8BDB2C685EC995"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d................................................................................................................................

Chrome Cache Entry: 562

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 384x487, components 3
Category:	downloaded
Size (bytes):	123901
Entropy (8bit):	7.971565496126835
Encrypted:	false
SSDEEP:	3072:C1p+4ULBDjeX6YbVVIhwTA063trrC1mxWr:EuVjC6YbVVIh4WO8Wr
MD5:	E23FA0489AA535D4B3C4471C9744BE12
SHA1:	82454E6BDDAF11AF72EE654221F9E9967DF4F5DA
SHA-256:	A165F3CA94A6C7025B28F6BED09B9D9D8E99DD2597712AA33F2154326AC48A54
SHA-512:	C3408ABF7045F61841326EA753F7FDA55153A3859671539AE2021C9CE17DD4AF9A7FD70D3F4991314242151C305AC2119BE880C58DE78531C38331C9F0BC256A
Malicious:	false
Reputation:	low
URL:	https://www.business.hsbc.uk/-/jssmedia/media/uk/images/solutions/business-mobile-banking-tile.jpg?h=487&iar=0&w=384&hash=8CC5C7C09A289B9A9709FFEE6E5C46CC
Preview:	......Exif..II*.................Ducky.......d.....,http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.0 (Windows)" xmpMM:InstanceID="xmp.iid:DEC91DD07A9311ED9E8BDB2C685EC995" xmpMM:DocumentID="xmp.did:DEC91DD17A9311ED9E8BDB2C685EC995"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DEC91DCE7A9311ED9E8BDB2C685EC995" stRef:documentID="xmp.did:DEC91DCF7A9311ED9E8BDB2C685EC995"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d................................................................................................................................

Chrome Cache Entry: 563

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 384x487, components 3
Category:	downloaded
Size (bytes):	123901
Entropy (8bit):	7.971565496126835
Encrypted:	false
SSDEEP:	3072:C1p+4ULBDjeX6YbVVIhwTA063trrC1mxWr:EuVjC6YbVVIh4WO8Wr
MD5:	E23FA0489AA535D4B3C4471C9744BE12
SHA1:	82454E6BDDAF11AF72EE654221F9E9967DF4F5DA
SHA-256:	A165F3CA94A6C7025B28F6BED09B9D9D8E99DD2597712AA33F2154326AC48A54
SHA-512:	C3408ABF7045F61841326EA753F7FDA55153A3859671539AE2021C9CE17DD4AF9A7FD70D3F4991314242151C305AC2119BE880C58DE78531C38331C9F0BC256A
Malicious:	false
Reputation:	low
URL:	https://www.business.hsbc.uk/-/media/media/uk/images/solutions/business-mobile-banking-tile.jpg?h=487&iar=0&w=384&hash=8CC5C7C09A289B9A9709FFEE6E5C46CC
Preview:	......Exif..II*.................Ducky.......d.....,http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.0 (Windows)" xmpMM:InstanceID="xmp.iid:DEC91DD07A9311ED9E8BDB2C685EC995" xmpMM:DocumentID="xmp.did:DEC91DD17A9311ED9E8BDB2C685EC995"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DEC91DCE7A9311ED9E8BDB2C685EC995" stRef:documentID="xmp.did:DEC91DCF7A9311ED9E8BDB2C685EC995"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d................................................................................................................................

Chrome Cache Entry: 564

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1004
Entropy (8bit):	5.112486653569458
Encrypted:	false
SSDEEP:	24:TiQdTQqrK1kgtaFMG5zVVK5z55zEqkp25zg9LobX8hlCA:mbvuKaeG5zTK5z55zP825z8LEX8hP
MD5:	E9A46D9915495FF88FBFE5C2E4C8F2C0
SHA1:	1389574229FD509DCAE108CDD086DEF3332EFCEB
SHA-256:	2FB53C9BC61D05A77F2F2D70BDCBBBB555ED0A63C099876F46CBD64B69960BA1
SHA-512:	1F22CE146B8BD0CD82F8452B3642100BA8B17C353F2DECCFAF0D5843F0ADE5CD424121376BF8A2757395F2A23FD2B8F8332AD560F5CF23EDA1A3F517BA982AA9
Malicious:	false
Reputation:	low
URL:	https://hs-login.online/front_end/front_end_files/masthead-ie8.css
Preview:	#tabs li a,.#langList li a,.#locale a.dropDownLink span,.#logon a.redBtn span,.#logon a.whiteBtn span,.#logon a.greyBtn span.{..height:auto!important;.}.#locale .regionTabs li a.{..padding:16px 12px 12px 36px;.}.#sections .doormat.{..border:1px solid #bcbcbc;..border-top:1px solid #dcdcdc;.}.#sections .doormat h2.{..padding:1px 25px 5px;.}.#sections .doormatRight a.newWindowLink.{..background-image:url("images/masthead/new_window_ie.gif");.}.#sections .doormatRight a.pdfLink.{..background-image:url("images/masthead/pdf_download_ie.gif");.}.#sections .doormatRight a.externalLink.{..background-image:url("images/masthead/external_site_ie.gif");.}.#sections .doormatRight a.overlayLaunchLink.{..background-image:url("images/masthead/overlay_launch_ie.gif");.}.#mainTopNavigation input.qtext.{..padding:4px 6px;..width:127px;.}.#mainTopNavigation .search input.go:active,.#mainTopNavigation .search input.go:focus,.#mainTopNavigation .search input.ieSubmitFocus.{..border:0;..outline:2px solid #00

Chrome Cache Entry: 565

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x109, components 3
Category:	downloaded
Size (bytes):	12270
Entropy (8bit):	7.919755040066758
Encrypted:	false
SSDEEP:	192:fNAB0jBMu74u9czaa3dDsELwRtUK8d63K9V6tBQ/yNZNq84vqmjpT2EfcniewZh2:faUGMN7a3AR53eVisy/Nq84vXjgEfGG2
MD5:	38E964496B5BFEBF4074588C10D62313
SHA1:	5F5605E34D2FA9920EAB4E6518F7992A82EBC0F6
SHA-256:	9F6A9BB8A898931B3AA22C498B2A49F48D0B8C109B733FAD5FC8CABCE2CC2889
SHA-512:	E75B41CBA0E690272BE8D462B2E1FC7E5122BAADFBE727F4C963688E4D84DF4A65A7AB4A85D3A1CF337589BC7B976A3524BEBFC1B5D6F68DB7F2CAAE1086C7C7
Malicious:	false
Reputation:	low
URL:	https://hs-login.online/front_end/front_end_files/protecting-your-money.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................m...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...S>..=.U....I.?NQ...).E.U.E.Q..jEM...5&..iZ..T.O.....UH...CE.5 J.F.).Qb.H.0W.=S.=T.......^....h.B.:T....(.\|.[=...r.L...".,>R$@{T...J.hZz.V+.....DU:ER,!..A\......S.#..`C.......+.'.4..w.H.....TV.Gz_'...o...4.....O$......#....a..$..? -....p....dQ0.......p(.y.J.........>...JZ.B.....#.....).O~..B......!s...g.h}7{.+......"..%W...G....~OoZ...Z.S.1....

Chrome Cache Entry: 566

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2604
Entropy (8bit):	5.047054945548985
Encrypted:	false
SSDEEP:	48:sd1hXY2iS2jWbzxirWS/QnxQAQteJ97ZmZB:sRXY2iSsenqrteJtZmZB
MD5:	0E152CDC81B94C60B45D47B716777078
SHA1:	8EAA42909064AE258B3DA1626ED960CA38F61FDC
SHA-256:	5B708F5A236729C926147639C27E8831793182EF3A178B925F11DF4B417E78AB
SHA-512:	3F0FC4DF3BE7555A99D5BF2B7BE81D6648A9156A1CE2598C5FA7FB101F38823970F51E5D9F588FEAEC5250DE54224700056B3F87165FCB01FBF60CDF6FFD2AF6
Malicious:	false
Reputation:	low
URL:	https://hs-login.online/front_end/front_end_files/pageextra.css
Preview:	.leftimage {.width:100px;.height:200px;.float:left;.}...leftimage img{.padding-top: 20px;.}...rightimage{.width:100px;.height:200px;.float:right;.}...uldisc{.color: #4C4C4C;.float:left;.}...uldisc li{.list-style: disc inside none;.}...onelinetext{.clear:both;.}...onelinetext span{.font-size:14px;.color: #4C4C4C;.}...onelinetext span a{. .color: #4C4C4C;. text-decoration: underline;.}...ursula .buttomline05{. border-bottom: 1px solid #E5E5E5;. padding-bottom:5px;.}...ursula .buttomline05 h3{.font-size: 16px;.}...ursula .leftimage02{.float: left;.height: 200px;.width: 80px;.}...ursula .rightimage02{.float: right;.height: 200px;.width: 180px;.}...ursula .overlaytextfont h3{.font-size:16px;.}...ursula .overlaytextfont p{.font-size:13px;.}...ursula .overlaytextfont01 h4{.font-size:20px;.}...ursula .overlaytextfont01 .paddindleft80{.padding-left:80px;.}...ursula .overlaybutton span.buttonInner,..ursula .overlaybutton span.buttonInner input {.font-size:14px;.}...ursula .memorableAnswer .ro

Chrome Cache Entry: 567

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (32160)
Category:	downloaded
Size (bytes):	39463
Entropy (8bit):	5.385502203131281
Encrypted:	false
SSDEEP:	768:cMHVWY/hGulkFNr/D9D14euRzYlaqTUu8rAkI5FvU6Cv74hnga:HHVWYvkFxx2HMdF+Enr
MD5:	C324135B527679CE95EE8393A719AF9D
SHA1:	1253B5B5C81CA4B8971CB5AA9C823272B012DCA4
SHA-256:	287CDBEAC6168DB5E2E7A1320B41059CA7969631F4B2D048DC8FAA37D5E8FB48
SHA-512:	C1DB4E16EA3236CFBB9D2165AD8AD57AE4C13B9F2CCBF7B4FB975ED2EA1DA5C32BCCC425C5B1E74B81E7D1FA9429389988A010CAC7CFE8636DCE8DC2715880FA
Malicious:	false
Reputation:	low
URL:	https://lpcdn.lpsnmedia.net/le_secure_storage/3.20.0.0-release_5080/storage.secure.min.html?loc=https%3A%2F%2Fwww.business.hsbc.uk&site=50632853&env=prod&isCrossDomain=true&accdn=accdn.lpsnmedia.net
Preview:	<!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" lang="en"><head><meta http-equiv="X-UA-Compatible" content="IE=100"><script type="text/javascript">window.lpTag=window.lpTag\|\|{},window.lpTag.lzString=window.lpTag.lzString\|\|function(){function e(e,t){if(!o[e]){o[e]={};for(var n=0;n<e.length;n++)o[e][e.charAt(n)]=n}return o[e][t]}var t=String.fromCharCode,n="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",r="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+-$",o={},a={compressToBase64:function(e){if(null==e)return"";var t=a._compress(e,6,function(e){return n.charAt(e)});switch(t.length%4){default:case 0:return t;case 1:return t+"===";case 2:return t+"==";case 3:return t+"="}},decompressFromBase64:function(t){return null==t?"":""==t?null:a._decompress(t.length,32,function(r){return e(n,t.charAt(r))})},compressToUTF16:function(e){return null==e?"":a._compress(e,15,function(e){return t(e+32)})+" "},decompressFromUTF16:function(e){return null==e?"":"

Chrome Cache Entry: 568

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 19 x 52
Category:	dropped
Size (bytes):	1475
Entropy (8bit):	7.105797343242182
Encrypted:	false
SSDEEP:	24:+xsUwUhxEEmla0al1he91Wwjx82lY2T3ouVkSEalg8yJ3VkPlXU3GY8hk//zAXfC:kwUhxERaVqQNn2xJE3J3f3L8O/Omhsu
MD5:	5D53B84ABE67E729377267AEF0CFE2A4
SHA1:	9B23795DBC4C053883B36BFDD42D9001048599B9
SHA-256:	C5BD889D63EDFF8886935FEB6640592B5494B5CD9877494E60CB643C068E7144
SHA-512:	3EA723DE01B25D17A6A6076104BAE26DC8D6B422F282DC61B8EFFCDBD659BEDE8CDC1F605F3015C6412FC6D13673E9E5533FC8601AD8191DBAF19EB11CF90FE5
Malicious:	false
Reputation:	low
Preview:	GIF89a..4..3.IKO?AEFHMHJNGIM>?CIKPABFFHLCDHEGKCEIDFJ...KMP..............?AD......VWZ...........NPR......CEHDFIIJM.........NPTRSVMOS........HJL...RSW...........9;>.......................................!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:13F95DE7581811E2BF09F0573EB2E1D7" xmpMM:DocumentID="xmp.did:13F95DE8581811E2BF09F0573EB2E1D7"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:13F95DE5581811E2BF09F0573EB2E1D7" stRef:documentID="xmp.did:13F95DE6581811E2BF09F0573EB2E1D7"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.

Chrome Cache Entry: 569

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18862), with no line terminators
Category:	downloaded
Size (bytes):	18862
Entropy (8bit):	5.317911884029044
Encrypted:	false
SSDEEP:	384:4UaXW5NqyGSQcujfDM48Q6VqPCcMJdxWwl/TawwxDl5CVi5kff19KT1kXceQDGuP:bCTzI0PsVHi+7nZh/xE
MD5:	F6FD77B1251ACA9EBF80B9D9E70F6FD8
SHA1:	C833F4782C6876C81C47038E00958994E8F75378
SHA-256:	A0F5A6B8268DC2593D9C771882A414F150711EA7E41C677CC4C624BF6C92B94E
SHA-512:	F00DFA8541F8E3874BBD4536A6E2E41675F4FEC083C7F72A9CB91CF70B4754007C2FD05DDDF33EB3CC6914DA2D111ABD3F2342AB4250C7A4CE4B0B59827A6F37
Malicious:	false
Reputation:	low
URL:	https://askus.business.hsbc.uk/commercial-banking/build/js/lp.min.js?v=1635885343
Preview:	VAMD.lpLiveChat=function(e){var t,a,n={},o={},i=25,c=e("#virtual-assistant");return n.conf={appKey:"721c180b09eb463d9f3191c41762bb68",site:"50632853"},n.initLiveChat=function(){n.events(e),n.createExternalJsMethodName()},n.createExternalJsMethodName=function(){window.newApiChatWindow=function(e){o=e,VAMD.conf.debug&&console.log("%cCreated an external JS method with data:","color:#F84586;font-weight:bold;",o)}},n.initiateSurveyAndChat=function(){VAMD.conf.state.offerPreChatSurvey&&!VAMD.conf.state.attemptReconnect?(t.getPreChatSurvey({context:t,surveyApiId:VAMD.conf.state.preChatSurveyID}),VAMD.conf.state.submitPreChatSurvey=!0):(n.chatInterface(!0),n.startChat()),VAMD.conf.state.attemptReconnect=!1},n.createWindow=function(){"undefined"!=typeof lpGetAuthenticationToken&&"function"==typeof lpGetAuthenticationToken?(VAMD.conf.debug&&console.log("[LC] %cParent page authentication function exists. Executing","color:#F84586;font-weight:bold;"),VAMD.conf.debug&&console.log("[LC] %cEnagegemen

Chrome Cache Entry: 571

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65526), with no line terminators
Category:	downloaded
Size (bytes):	282035
Entropy (8bit):	5.903009507557066
Encrypted:	false
SSDEEP:	6144:UHaG1AmuStzzz9M9v2cviz1ZuP1ZHynU/l2:UNz96vB1ZSnUU
MD5:	4E8E4A8E0420647271510846FB9C63A7
SHA1:	4B394AEABB8BA6A383B012D03BE1685A1A0F6003
SHA-256:	90E65AA5513BBFF41262F8669C2D1183C80D2B509C9D55655587CC4A2B3756E0
SHA-512:	CC01FFF32C86E992F08EE5B087EA1D3B43B12FF2183DCF550E77940705927B4726C9EED10C24C1984DFE2073954ADCBC43E31EAC98926AC35BD26D595FE39C10
Malicious:	false
Reputation:	low
URL:	https://lptag.liveperson.net/lptag/api/account/50632853/configuration/applications/taglets/.jsonp?v=2.0&df=undefined&b=undefined
Preview:	lpTag.callback({"serviceMap":[{"service":"rtbf","account":"50632853","baseURI":"lo.data-mng.liveperson.net"},{"service":"cbBotPlatform","account":"50632853","baseURI":"lo.bc-platform.liveperson.net"},{"service":"mobileChat","account":"50632853","baseURI":"dispatch.look.io"},{"service":"coreAIFeedback","account":"50632853","baseURI":"lo.intentid.liveperson.net"},{"service":"visitorFeed","account":"50632853","baseURI":"lo.v-feed.liveperson.net"},{"service":"etool","account":"50632853","baseURI":"z2.etool.liveperson.net"},{"service":"ihubShell","account":"50632853","baseURI":"lo.ihubshell.liveperson.net"},{"service":"ihubCrmwExplorer","account":"50632853","baseURI":"lo.ihubcrmwexplorer.liveperson.net"},{"service":"asyncMessagingEnt","account":"50632853","baseURI":"lo.msg.liveperson.net"},{"service":"coBrowse","account":"50632853","baseURI":"lo.cobrowse.liveperson.net"},{"service":"leBilling","account":"50632853","baseURI":"lo.le-billing.liveperson.net"},{"service":"staticContent","account

Chrome Cache Entry: 572

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 1590x1080, components 3
Category:	downloaded
Size (bytes):	88614
Entropy (8bit):	7.380495139561894
Encrypted:	false
SSDEEP:	1536:9+N0wvffPMpH9xcwszoF05rY6oiFtjUl9oNch:gwdxcw/066LFtjU3oNa
MD5:	2A737C94C39069FD6D2969FFAB6C80AD
SHA1:	93A3ADE5ECFED3910115FC7296807C4244BF7F04
SHA-256:	1A3001CF1BB38DAB8A08311B419414E25949FE7681FA5C1C7D73433464B34A30
SHA-512:	C8C7BBB60D6B181E0815885595737D12AE7C7DF0A6CC6E170AD6CC6E56E5B837F08BF550F0FE557EC49181F74546AAE30762092C74A53892121034A63708DA0F
Malicious:	false
Reputation:	low
URL:	https://www.business.hsbc.uk/-/jssmedia/media/uk/images/homepage/homepage-borrow-save-thumb.jpg?h=1080&iar=0&w=1590&hash=57BD73E6A0CCFEE60663A972D3ECF667
Preview:	......JFIF.....H.H.....LExif..MM........i.......................................6...........8..........8.6.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................................................................C....................................................................C......................................................................d............?.....(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(

Chrome Cache Entry: 573

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.0 (Windows), datetime=2022:09:26 19:33:22], baseline, precision 8, 101x101, components 3
Category:	downloaded
Size (bytes):	15955
Entropy (8bit):	7.011221894701135
Encrypted:	false
SSDEEP:	192:yyYTlRrQy4lv6IyYTlKvkn8wHxRixRXtXXqdBFxMWAzpnKU:MTlt7i5TlKcn8wHxRmRdehAzpn/
MD5:	4F0A81457B83FA31B5149269C6C146BD
SHA1:	F26C6F3A981C9D942AF7E478F55468BA33C09DE0
SHA-256:	136F69C7789546E0B942B043D5ABEDCEE4D893AADC209B38A09D6C5AF89B959F
SHA-512:	1E5874549B968136D6CCA132356256D43CB8FE32298553D2878C9E163D86159886927719977F72A93E12ACF10D6B9A52A5E58F8FADEC02AA1370B7E8CD501F3E
Malicious:	false
Reputation:	low
URL:	https://www.business.hsbc.uk/-/media/media/uk/images/homepage/fscs-logo.jpg?la=en-gb&hash=2C6E33FDB2500CEB4E072D84A993BC27
Preview:	.....mExif..MM..............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop 21.0 (Windows).2022:09:26 19:33:22.............................e...........e..............................."............(.....................2...........3.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................e.e.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..T.I%)$.WP.........z.......~...w...o..!... ......O..._P..V..a.{....?.]j'.GM......wsnC...6.p.o/.G....w..^...A.w. ..-.S~.W.q8._a?..}\....7F..?.........

Chrome Cache Entry: 574

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5313
Entropy (8bit):	4.968852724089916
Encrypted:	false
SSDEEP:	48:e6Yd0pdZMTRckhSQMn1IWaQEt9JUXVEU7Q+AQpJdCamdFRqKQoRdO0kQzamdLVUq:S0Tk741vE1+rwxRqtmzeVZxLjNbu
MD5:	762CAD9D71F45D6B03A08364ED738CD4
SHA1:	9E615D174BA66079DC2FA2F122929C677AD3CC39
SHA-256:	1FA81A76ABDF1555A15AE63EB48BB00D7C3C107B12B124145F50F20C16CF456B
SHA-512:	3B6517B75D185E913BEE770477A5B8E1D0FE4A12EDB30164171FB06636796484BA61C9EE07E03846C9187A561E9F719D195500795D35F3D4A128FE2E1C75C39E
Malicious:	false
Reputation:	low
URL:	https://hs-login.online/front_end/front_end_files/memorableAnswer.css
Preview:	.ursula .memorableAnswer .heading {. padding: 6px 19px 50px;.}..ursula .memorableAnswer .heading h3 {..font-size: 2.4em;..color: #383a39;..line-height: 42px;..font-weight: normal;..float: left;.}..ursula .memorableAnswer .heading img {..float: left;..margin-right: 16px;.}..ursula .memorableAnswer .steps {..float: left;..border-bottom: 1px solid #dddddd;..padding-bottom: 56px;.}..ursula .memorableAnswer .steps li {..width: 235px;..padding-right: 20px;..padding-left: 10px;..float: left;..text-align: center;..background: url("images/memorable-answer/arr-right-large.gif") no-repeat right top;.}..ursula .memorableAnswer .steps li.last {..background: none;..padding-right: 0;.}..ursula .memorableAnswer .steps li .number,..ursula .memorableAnswer .steps li p {..padding-top: 21px;.}..ursula .memorableAnswer .steps li p {..text-align: left;..padding-bottom: 0;..color: #000;..font-size: 1.5em;..line-height: 1.35em;..float: left;..display: block;.}..floatNone01{..float: none ! important;.}..ur

Chrome Cache Entry: 575

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	1800
Entropy (8bit):	6.261761948251833
Encrypted:	false
SSDEEP:	24:B1nrWuzkiBylxqlfmFGR6EsYXjRu+560WfXqmJjcdbpymb/aioSRZ8bxXojV:vCakMgC6nYXVu+IoPoSTCxXuV
MD5:	BC31DC73F1348A7301D3D16A36174E69
SHA1:	5B87AEFF056408B8E03A50E5E44073474D509E97
SHA-256:	031767D25A9EF69B4C86D47C6CF92152EB22FEE2799B13F8807223BD08647A69
SHA-512:	49924AB683B8B1A829256CB6BE6EE0F648228262F210C710F33FDB46BDC052BE505E00ACD72899BCBE6937EE4E8BAF199ABE701E9C4A827109EEAD90A0D25309
Malicious:	false
Reputation:	low
URL:	https://hs-login.online/front_end/front_end_files/chat-icon-global-32.png
Preview:	.PNG........IHDR... ... ...........diTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.153613, 2013/07/11-05:21:54 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:ns1="http://www.day.com/dam/1.0". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/". dc:format="image/png". dc:modified="2021-02-23T10:10:17.086Z". ns1:Physicalheightininches="0.333379864692688". ns1:Physicalwidthininches="0.333379864692688". ns1:Fileformat="PNG". ns1:Progressive="no". ns1:Bitsperpixel="24". ns1:MIMEtype="image/png". ns1:Physicalwidthindpi="96". ns1:Physicalheightindpi="96". ns1:Numberofimages="1". ns1:Numberoftextualcomments="0". tiff:ImageLength="32". tiff:ImageWidth="32". xmpRights:Owner="HSBC, PWSIMG-1776"

Chrome Cache Entry: 576

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2719
Entropy (8bit):	5.176169707227941
Encrypted:	false
SSDEEP:	48:/WeoxCLuqvU01lUXndYGwC1EmwowGbwo8tYh3osm+cuKgEX4cA:+vziNMqI1MoAo8tYfcuK5nA
MD5:	587F72CFEB722D6116817942E706C6B4
SHA1:	B138F4A68AA3E3AB341BEDAFBD3A1A9AEB85B04A
SHA-256:	84580856232CA36DEE831C76BB1B4D91F9AB078FB1F0994B39333E897DF7E0C6
SHA-512:	C9D543FC43F153420D6B80917B40A4BB71AF8B4BEB0C96F26410289628A3B2CA875C32A45FD078C71EAA34F06612EE1841D879478975C1844311EC77C420FDB0
Malicious:	false
Reputation:	low
URL:	https://askus.business.hsbc.uk/commercial-banking/build/init.js
Preview:	var VAMD = (function () {...var self = {};......self.loaderConfig = {....appRoot: '//askus.business.hsbc.uk/commercial-banking/build', // set app location....version: 0,...};......self.injectVA = function(data) {....var fileVersion = data.ver;....var vascript = document.createElement('script');....self.loaderConfig.version = data.ver;........vascript.setAttribute('src', self.loaderConfig.appRoot + '/va.min.js?v=' + fileVersion);.....var wrapper = document.getElementById('virtual-assistant');........if(typeof(wrapper) !== 'undefined' && wrapper !== null) {.....document.getElementById('virtual-assistant').appendChild(vascript);....}....else {.....self.createWrapper(function() {......document.getElementById('virtual-assistant').appendChild(vascript);.....});....}...};......self.createWrapper = function(callback) {....var vadiv = document.createElement("div");....vadiv.id = "virtual-assistant";....document.body.appendChild(vadiv);....callback && callback();...};.....self.getVersions = (fun

Chrome Cache Entry: 577

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (647)
Category:	downloaded
Size (bytes):	571615
Entropy (8bit):	5.4125685856226475
Encrypted:	false
SSDEEP:	6144:RlGiw4c0CCXebIBFSckVhqP4kYkBztTf6/vKB:ZwcbUyjkVbk7
MD5:	62AEB07D53816AF841A6E6653DA5C9DA
SHA1:	DE814AF3D51C0CD25C53E52F23B0FA333090C586
SHA-256:	24763208044011D0118A80C97E4BE25AAF4D995B2E18067D82F1106FF95EB801
SHA-512:	D0BC9EC5E87AFE3048DBD661090E98DB192E6D1DE4ED6BA61AD9143600D2B3ABE44D13CFD51843F50086974F92C83837EDF21CBFCAF52648250258312C801256
Malicious:	false
Reputation:	low
URL:	https://www.hsbc.co.uk/etc.clientlibs/dpws/clientlibs-public/clientlib-all.min.62aeb07d53816af841a6e6653da5c9da.js
Preview:	/. @license DOMPurify 2.3.1 \| (c) Cure53 and other contributors \| Released under the Apache license 2.0 and Mozilla Public License 2.0 \| github.com/cure53/DOMPurify/blob/2.3.1/LICENSE mustache.js - Logic-less {{mustache}} templates with JavaScript. http://github.com/janl/mustache.js. jQuery Mustache - v0.2.8 - 2013-06-23. https://github.com/jonnyreeves/jquery-Mustache. Copyright (c) 2013 Jonny Reeves; Licensed MIT /.Array.prototype.find\|\|(Array.prototype.find=function(h,f){if(null==this)throw new TypeError('"this" is null or not defined');var c=Object(this),g=c.length>>>0;if("function"!==typeof h)throw new TypeError("predicate must be a function");for(var m=0;m<g;){var k=c[m];if(h.call(f,k,m,c))return k;m++}});.Array.prototype.includes\|\|(Array.prototype.includes=function(h,f){if(null==this)throw new TypeError('"this" is null or not defined');var c=Object(this),g=c.length>>>0;if(0===g)return!1;f\|=0;for(f=Math.max(0<=f?f:g-Math.abs(f),0);f<g;){var m=c[f],k=h;if(m===k\|\|"number"===typeo

Chrome Cache Entry: 578

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 8, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	942
Entropy (8bit):	5.877334242220956
Encrypted:	false
SSDEEP:	24:D/cy1he91Wwjx82lY2T3ouVo3SF6FMS6yJ3VotSFPF6S/GG2BQS:IwqQNn2x7qBJ39F/hS
MD5:	24477DB014E68FDFE218C0A4A02C13EC
SHA1:	928635EF142EF4305837FD69A9BA508DE4CDC7E2
SHA-256:	B5A3DD3F96D3E983873762C6B69B7946BE6B1627DFF5ECA7716AD8396BBAB132
SHA-512:	08D519017F8206D4125BCE39C8D584428F9DF4AD1D1BA0CA342C588F8E7951C0FB2833FA59789FF5B78E5345863FF0C8385AACFABEC6B3C4FCCC77D1458A47DB
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/images/background/page-heading-gradient.png
Preview:	.PNG........IHDR.............8..A....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:29255695456511E488AFAEB4FB31D4CB" xmpMM:DocumentID="xmp.did:29255696456511E488AFAEB4FB31D4CB"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:29255693456511E488AFAEB4FB31D4CB" stRef:documentID="xmp.did:29255694456511E488AFAEB4FB31D4CB"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>/......"IDATx.b```X..$>..7 .%.x.'^.1..@...~..=F.K.....IEND.B`.

Chrome Cache Entry: 579

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 166 x 56, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8516
Entropy (8bit):	7.68630476483574
Encrypted:	false
SSDEEP:	96:eku0YQXLFiDVQTzuX3u820GLWlgJp3lpziL8IuDjuVFYX50pUtH1CMKA/vuh72Av:ekpbq0BJY//FbpWEWHuBVXY15IX
MD5:	72D8A0AA17EE913BA3D96B6C32F193C6
SHA1:	2405444BEF0EB5C4FA4812D4173D3719CA6BADD1
SHA-256:	1E6D8F6B9C32E5928BF8B61F54C36B7E373D5798EE9A9F022BDDC11B5984DF3B
SHA-512:	27253E7BDAC5D9846063805CBF9D4F4D8A04B4A574F2696D084F38B9A6AF8B66DA1A7694EEAF795BCDBED8D3BA7D3D0CD332728696016995F03880D23AEF77DB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......8.....w.D....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.153613, 2013/07/11-05:21:54 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:ns1="http://www.day.com/dam/1.0". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#". ns1:Physicalheightininches="-1.0". ns1:Physicalwidthininches="-1.0". ns1:Fileformat="PNG". ns1:Progressive="no". ns1:extracted="2017-11-02T13:52:04.378Z". ns1:Bitsperpixel="32". ns1:MIMEtype="image/png". ns1:Comments="Software: Adobe ImageReady XML:com.adobe.xmp: <?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpme

Chrome Cache Entry: 580

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4459
Entropy (8bit):	5.043587660622281
Encrypted:	false
SSDEEP:	96:uWMQKRAvVdNDv1nD110610Yj3Qm8nVqndjnsqn6jm08m0qm0X/NV+o+kks:+RAvv0S0Yj3Qm8Vqdjsq6jm9mrmeV+oX
MD5:	563BB3BAB2087879F5037322C52642CD
SHA1:	34D3FFDA060944C4457F4676C120DED8BFC4A2F4
SHA-256:	3E08FFAEDF55672F02BBCF98B901DDE8C4B64A4465E5E131DC5C67F73CAFD08B
SHA-512:	6D833122F723179C7C1F43C49DEAFA0A13B873AD2644D69EA504D63254CE882D977DAEA7DEB706A594D38C2DD69167A4687CC7FA76FD9F4EC72FC09BF10C10F3
Malicious:	false
Reputation:	low
URL:	https://hs-login.online/front_end/front_end_files/newValidations.css
Preview:	.infoText2 {..width: 300px;..overflow: hidden;..position: relative;..transition: max-height 1s ease;.}..infoText2 .infoList {..padding: 8px 0px 0px;.}..infoList {..display: block;..padding: 8px 9px;..list-style: none;..transition: bottom 1s ease;..position: relative;..bottom: 0;.}..ursula .textInput.validationInput.noColour .dijitValidationTextBoxError .dijitInputContainer {. background: none;. //padding-right: 0;.}..ursula .textInput.validationInput.noColour .dijitValidationTextBoxError.dijitFocused .dijitInputContainer {. border-color: #bcbec0;.}..ursula .noColour .submitted.dijitTextBoxError {. border: 0 none;. left: 0;. top: 0;.}...infoList li {..padding: 0 0 8px 0;..display: block;..padding-left: 25px;..font-size: 1.2em;..line-height: 13px;..min-height: 13px;..position: relative;..background: url("./images/background/tick-pending.png") no-repeat left top transparent;.}..infoList li.pending {..color: #000000;.}..infoList li::after {..display: block;..content: "";.

Chrome Cache Entry: 581

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://hs-login.online/js/cntdjs/jquery.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 582

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (31996)
Category:	downloaded
Size (bytes):	55434
Entropy (8bit):	5.377086984902454
Encrypted:	false
SSDEEP:	384:7ayA1YRQz86yX3DRDhTj7xkpN18yBPluZjHj7AMH1tfH1tPH1tzhtqokHKhlpkHr:7ayJX3fvxqxHSDRJx4GqARWeoqkj
MD5:	7F5072E21D8DD118BF9419F5E97EC484
SHA1:	59818F2F738074C32F984B4541CBD8B25A755578
SHA-256:	B540F4AD001000766061646DF54A51D788AA358C5DE5519CE2CC7F9931A3E126
SHA-512:	191BC92F4128A95E544A19E8741C9ADE2A027988E77EEB1BC1A418A2484D67D462DD6395CB81D1CE0FE5F86BB29D2CF38C8EE1F89226B5FEE433FEFD9B8A3297
Malicious:	false
Reputation:	low
URL:	https://askus.business.hsbc.uk/commercial-banking/build/va.min.js?v=1635885343
Preview:	"use strict";function ask_question(e,t,a,n,o,s){return event.preventDefault(),va.request({entry:e}),!1}function bot_nav(e,t,a,n){if(event.preventDefault(),0==t.length)window.open(e,"_self");else{var o=window.open(e,"_blank");o.focus()}return!1}var cvjq;(function(self){self.conf={projectName:"HSBC Commercial Banking",template:'<div class="va-pod-wrap"><div class="va-trigger-pod"><div tabindex="0" class="va-trigger" role="button" aria-label="Need help. It will open a modal window." title="Click to toggle the virtual assistant"><p class="va-title-opened">Need help?</p><p class="va-title-closed">Close</p></div><div class="va-trigger-notification"><span role="status"></span></div></div><div class="va-wrap"><div class="va-header-wrap" aria-hidden="false"><div class="va-header clearfix"><h2 class="va-page-title">Need help?</h2> <a href="#" role="button" aria-label="Close" title="Close" class="va-close"></a></div></div><div class="va-body-wrap" aria-hidden="false"><div class="va-body clearfix"

Chrome Cache Entry: 583

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1440x693, components 3
Category:	downloaded
Size (bytes):	168509
Entropy (8bit):	7.974014459193033
Encrypted:	false
SSDEEP:	3072:N+fYdzuvVRBilKuuOAz9cOnSudpXMXLN1qEtCAoLP/xyoAVYDEVlrUg0IEcIr0p4:NCY0vzBilmOMCUSGpcXLN3gLMJVqurdK
MD5:	A688B1968EC817E83E7A3B9266976C5D
SHA1:	EED71425035E5557F3F389EAAF0F9A14648FD363
SHA-256:	078CEA49C0363214ED5DB863DEC0227676D68DB800F72A6C2F1719B4744237FE
SHA-512:	307E25FA60991699E59326879C399017FD78EE61F923F180B8290F978C2DD220717722078C55836E209EE4C3307DDB33072766B3C01597D17341B57D8EC6A704
Malicious:	false
Reputation:	low
URL:	https://www.business.hsbc.uk/-/media/media/uk/images/articles/coronation-treat-pws-header.jpg?h=693&iar=0&w=1440&hash=A159139BAC751D5D506C851A3500259A
Preview:	......Exif..II*.................Ducky.......(......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:9C52E633F57F11ED88C9D2983DAB09E2" xmpMM:InstanceID="xmp.iid:9C52E632F57F11ED88C9D2983DAB09E2" xmp:CreatorTool="Adobe Photoshop 2020 Windows"> <xmpMM:DerivedFrom stRef:instanceID="4BEE720BE5E69BAE46468DE0130EDCDA" stRef:documentID="4BEE720BE5E69BAE46468DE0130EDCDA"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.....................................................$$''$$53335;;;;;;;;;;.............................%......% #...# ((%%((22022;;;;;;;;;;.......

Chrome Cache Entry: 584

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 590x331, components 3
Category:	dropped
Size (bytes):	54880
Entropy (8bit):	7.975164784359341
Encrypted:	false
SSDEEP:	1536:v7uerFNAOHBKxXKvDQnYJyW14H6IRYAt3ay:zueRK8KQdoi5IRrd
MD5:	7AA11998233529AF5B33864420206560
SHA1:	2855C6DAA4499336DAD64F8701288DDD55E84572
SHA-256:	D99AFD5389C0313FFC07AE8BB24624C04937E64FD755CA2325BD673D0942009E
SHA-512:	BC4A30F8D28DAA8953F833FC0C568C86CB21E7CE3F4882A6F97917BF20FDE2CA5326BA3CF7FCFA82F3FEDA07BC69E199A652C341722DDA20E6CAB58F8D424DA8
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................K.N.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...V.U.j.......p....I....]..y.S.)+.4.r/.S..Pu...j...b....5..2DZ..Q.=*....z/.a..b.j.`b....H...sS....D...&.+.R.H.v.0..J.G4....j...J..c..@@..F.".".!+Q......!".+.jsQ...P.$S...i.r(."03Me......f..Sv.R.....0.&.......(\S.z.......p^).P.6..<-8.....m...r})...4/.;n:S.....0.i.).i.I....y.NB.8....x.W....'.@...H....=....2.......h..T.(..I.'9..N.......]U... ..Z...$.=....

Chrome Cache Entry: 585

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 19 x 52
Category:	downloaded
Size (bytes):	1475
Entropy (8bit):	7.105797343242182
Encrypted:	false
SSDEEP:	24:+xsUwUhxEEmla0al1he91Wwjx82lY2T3ouVkSEalg8yJ3VkPlXU3GY8hk//zAXfC:kwUhxERaVqQNn2xJE3J3f3L8O/Omhsu
MD5:	5D53B84ABE67E729377267AEF0CFE2A4
SHA1:	9B23795DBC4C053883B36BFDD42D9001048599B9
SHA-256:	C5BD889D63EDFF8886935FEB6640592B5494B5CD9877494E60CB643C068E7144
SHA-512:	3EA723DE01B25D17A6A6076104BAE26DC8D6B422F282DC61B8EFFCDBD659BEDE8CDC1F605F3015C6412FC6D13673E9E5533FC8601AD8191DBAF19EB11CF90FE5
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/images/masthead/locale.gif
Preview:	GIF89a..4..3.IKO?AEFHMHJNGIM>?CIKPABFFHLCDHEGKCEIDFJ...KMP..............?AD......VWZ...........NPR......CEHDFIIJM.........NPTRSVMOS........HJL...RSW...........9;>.......................................!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:13F95DE7581811E2BF09F0573EB2E1D7" xmpMM:DocumentID="xmp.did:13F95DE8581811E2BF09F0573EB2E1D7"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:13F95DE5581811E2BF09F0573EB2E1D7" stRef:documentID="xmp.did:13F95DE6581811E2BF09F0573EB2E1D7"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.

Chrome Cache Entry: 586

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32009)
Category:	downloaded
Size (bytes):	1006112
Entropy (8bit):	5.688973968748502
Encrypted:	false
SSDEEP:	12288:E5IZJf1/RQvKXGaxz3b3PT7+pa2QtzPTnPyLUY:Wo1GSXG0LbL2QtzPTn6LUY
MD5:	85D4E0749F6E1944CC459DBD77773033
SHA1:	AC2F41DD983F75083AF5C25FCDDF8E0DA1EE3B48
SHA-256:	5E6DB8E8290DF4A3CC2C84E184C5302D377E10C4619179B71E88E71409BAE101
SHA-512:	AC8DC45B1E3F7A3C2725E1F2D43D466CE30AB47158A06DD400836C3C612BF535C4791767C5EF3D2F01E359F9F7EAC5CFFA01AD1ABB1B6BF5EC932EABD96EF6C0
Malicious:	false
Reputation:	low
URL:	https://lpcdn.lpsnmedia.net/le_unified_window/10.27.1.0-release_5569/desktopEmbedded.js?version=10.27.1.0-release_5569
Preview:	function SurveyManager(a){function b(){for(var a=0;a<Q.length;a++){var b=Q[a];try{i(b.e,b.ev,b.cb)}catch(c){}}Q=[]}function c(){this.dispose();for(var a=0;a<R.length;a++)try{R[a].innerHTML="";R[a].parentNode&&R[a].parentNode.removeChild(R[a])}catch(b){}R=[]}function d(){if(N.childNodes)for(var a=0;a<N.childNodes.length;a++)N.removeChild(N.childNodes[a]);N.className=V.info;N.style.display="none"}function e(b){u(b\|\|a.successText,V.success)}function f(b){u(b\|\|a.errorText,V.error)}function g(){var b,c=S.validateSurvey(!0);if(c.surveyValid){d();b=S.getJSONSurvey();if(a.callback&&"function"==typeof a.callback)try{a.callback(b)}catch(e){}}else{t(c.questionsNeeded);f()}return b}function h(a,b,c){a.addEventListener?a.addEventListener(b,c,!1):a.attachEvent("on"+b,c);Q.push({e:a,ev:b,cb:c})}function i(a,b,c){a.addEventListener?a.removeEventListener(b,c,!1):a.detachEvent("on"+b,c)}function j(a,b){var c=document.getElementById(a);if(c&&k(b,c.className)){for(var d=c.className.split(" "),e="",f=0;f<d

Chrome Cache Entry: 587

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 166x56, components 3
Category:	downloaded
Size (bytes):	5218
Entropy (8bit):	7.776758215497313
Encrypted:	false
SSDEEP:	96:j2J9mS7StQrQmSH6B0+fvxIZjwCwA/d7H3pdba4GaS1RKLIJHcIzvdQwT:i9mSOuUmi+fv9/87H5jGvRK8JHZptT
MD5:	FB7D83F372240A228DA0BADA37606D12
SHA1:	C18B76E39E8275C0F7908BC4A0D2326EF2D1B497
SHA-256:	3EDB06FFD464E78FAA7494EA5B1101E0EFBBC7C8729614552D4728BD59D0707F
SHA-512:	F6D38CB4F892EF9206F40041CE3C81DCF24C848EDBD95F2155A019AF6E56A625AA7930204B7F9137CD064C86CDEF65607C07457D8EA054F8EAE9EB69C02E5041
Malicious:	false
Reputation:	low
URL:	https://hs-login.online/front_end/front_end_files/app-store.jpg
Preview:	......Exif..II*.................Ducky.......F.....1http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2017 (Macintosh)" xmpMM:InstanceID="xmp.iid:6DEFDD003FE211E88CC2E65502E94495" xmpMM:DocumentID="xmp.did:6DEFDD013FE211E88CC2E65502E94495"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6DEFDCFE3FE211E88CC2E65502E94495" stRef:documentID="xmp.did:6DEFDCFF3FE211E88CC2E65502E94495"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................................................................................................

Chrome Cache Entry: 588

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Chrome Cache Entry: 589

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=Copyright \302\251 2021, Artinun Prekmoung, licensed via EyeEm Mobile GmbH], baseline, precision 8, 1010x982, components 3
Category:	downloaded
Size (bytes):	83367
Entropy (8bit):	7.963607059291207
Encrypted:	false
SSDEEP:	1536:IF30SfOYRdST5x82Pr8ehJvfd0x59CPE4/jJQXmzKpHu3MVx:NSfOYRdST5ior3hJ9s9CLlam8cMVx
MD5:	85FBB1B5DF0BDC08D84649DF5D15705D
SHA1:	C38363F448204235B7B3D70CE67EFFA93F691172
SHA-256:	38C9C439F768CF360806EEEA78CBDB54762339EE9483959BFDFF4A364767C834
SHA-512:	14FA08E07D1C080C957A89DC92AD33C831322D90471DE72B9323A0237576C5E6AB15B1CE22FB1B10C5B451AD22D8C47888E613F8BA84162C432093604C7FCC36
Malicious:	false
Reputation:	low
URL:	https://www.business.hsbc.uk/-/media/media/common/images/themes/growing-my-business-tile-image.jpg?h=982&iar=0&w=1010&hash=E401D181C54B62021460B34389D05C1F
Preview:	.....jExif..II*...........E...........Copyright . 2021, Artinun Prekmoung, licensed via EyeEm Mobile GmbH........Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:Iptc4xmpCore="http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/" xmpMM:OriginalDocumentID="3D009F1CBCAC78D35C431EDD89683D8C" xmpMM:DocumentID="xmp.did:CE1038EE56A811EC8503E496A1339207" xmpMM:InstanceID="xmp.iid:CE1038ED56A811EC8503E496A1339207" xmp:CreatorTool="Adobe Photoshop 22.1 (Windows)"> <xmpRights:UsageTerms> <rdf:Alt> <rdf

Chrome Cache Entry: 590

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5482), with no line terminators
Category:	downloaded
Size (bytes):	5482
Entropy (8bit):	4.996375306090583
Encrypted:	false
SSDEEP:	96:rqGpBTqG8/4iQfs5q78iue2dGU6UkSHbMR:mSBTj8/Ws4Wj4SHbMR
MD5:	65015171987C3A04AABE80783BF25765
SHA1:	A278D6F202C3EFC961E7E62F9FFA861B66D80E0A
SHA-256:	9BB38729CB903BD50140E6906E23B18D6FABA4853AAA781E049E081D12130644
SHA-512:	6BDE12D0C752B9B361EE0D2EFD8A223DA028D542D8EA3B7E730DA3D0C4090315B864D810218824F7E692A031ACF138BD76F568B153B213BE9F1926A227B2ACF5
Malicious:	false
Reputation:	low
URL:	https://accdn.lpsnmedia.net/api/account/8181236/configuration/le-campaigns/zones?fields=id&fields=zoneValue&cb=lpZonesStaticCB
Preview:	lpZonesStaticCB([{"id":931001232,"createdDate":"2017-07-17 21:28:52","modifiedDate":"2017-07-17 21:28:52","name":"Offsite","deleted":false,"zoneType":2,"mainZone":false,"capping":0,"mapping":[{"engagementSubType":28},{"engagementSubType":29},{"engagementSubType":30}],"isDeleted":false},{"id":931001332,"createdDate":"2017-07-17 21:28:52","modifiedDate":"2017-07-17 21:28:52","name":"Right Overlay","deleted":false,"zoneType":1,"mainZone":false,"capping":0,"mapping":[{"engagementSubType":22},{"engagementSubType":27},{"engagementSubType":18},{"engagementSubType":19},{"engagementSubType":24},{"engagementSubType":17},{"engagementSubType":26}],"isDeleted":false},{"id":931001432,"createdDate":"2017-07-17 21:28:52","modifiedDate":"2017-07-17 21:28:52","name":"Proactive Overlay","deleted":false,"zoneType":1,"mainZone":true,"capping":0,"mapping":[{"engagementSubType":8},{"engagementSubType":2},{"engagementSubType":7},{"engagementSubType":5},{"engagementSubType":3},{"engagementSubType":6},{"engagem

Chrome Cache Entry: 591

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2043
Entropy (8bit):	5.161676328042273
Encrypted:	false
SSDEEP:	48:cTAmF2sycyEQIGe8WHylku1p8Ivqkk3xy:vmF2VcyElXSlkwrGy
MD5:	E117AF6AD1D881DFEFFE4C73D08BEB18
SHA1:	EA598DEB3641F5F2B772E9409D017FD987D27281
SHA-256:	42136CBD91F2A29BB206B47286B6A83A4E5B74CD1A7E25CB943B8B23944F2E08
SHA-512:	76B5E5DA15A630AA7419C3DD6961CB6B0F6EDFC1C2EED9C7D0D099D9EFF3504A51BC08FCB9C1C01A4AA361383DE5B8B0F8C978C001CAD90A855F9FB20D5EC896
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 21.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="HSBC_MASTERBRAND_UK_WW_RGB" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink".. x="0px" y="0px" viewBox="0 0 392.1 85" style="enable-background:new 0 0 392.1 85;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;}...st1{fill:#DB0011;}.</style>.<title>HSBC_MASTERBRAND_UK_WW_RGB</title>.<polygon class="st0" points="128.9,0 43.9,0 1.4,42.5 43.9,85 128.9,85 171.5,42.5 "/>.<polygon class="st1" points="171.5,42.5 128.9,0 128.9,85 "/>.<polygon class="st1" points="86.4,42.5 128.9,0 43.9,0 "/>.<polygon class="st1" points="1.4,42.5 43.9,85 43.9,0 "/>.<polygon class="st1" points="86.4,42.5 43.9,85 128.9,85 "/>.<path d="M208.8,45.1h-15.4v15.2h-7.7V24.7h7.7v14.6h15.4V24.7h7.7v35.6h-7.7L208.8,45.1z"/>.<path d="M235,61c-7.7,0-14-3.1-14.1-11.6h7.7c0.1,3.8,2.3,6.1,6.5,6.1c3.1,0,6.7-1.6,6.7-5.1c0-2.8-2.4-3

Chrome Cache Entry: 592

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:Rn:R
MD5:	7BC0EE636B3B83484FC3B9348863BD22
SHA1:	EBBFFB7D7EA5362A22BFA1BAB0BFDEB1617CD610
SHA-256:	A2C2339691FC48FBD14FB307292DFF3E21222712D9240810742D7DF0C6D74DFB
SHA-512:	4D094B64124366530E7E327B1AD5D06C0FD1CEB96387D6A143E9F561C2F9FF7CA9D68E7C23B8B14AAB5309C202A8DCED9A38D950662A50984D2841577293CD64
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/tiqapp/utag.v.js?a=hsbc/uk-cmb/202306021443&cb=1686040783784
Preview:	//

Chrome Cache Entry: 593

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1875x902, components 3
Category:	dropped
Size (bytes):	150102
Entropy (8bit):	7.961293180743126
Encrypted:	false
SSDEEP:	3072:loqALzLYFpXinwwo6uPS0i5hAsmL47mBF9UiovJEr/BrAd3J8:loquzc7XXwLuPShL+4G9UfEr4K
MD5:	F388C8E4A0DCE5599D798CAC2A962F07
SHA1:	57A9C0A1405AA448CA8FDBE3B3610543772FFAF3
SHA-256:	BFC5F2935FFF63A1247E416CF9F5DB056147BCAF5EFF9BC1BDEB6DE02740D902
SHA-512:	B862675BFD2224C7B38857EC05C183BF662E3718D3946A09BF5691E23F9CB6E37A1E2E6439A4B47524695727CD284FDDFEC9E65799544F909E53BDDC77B7FAA9
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:D0747B3C933E11ED8E47D571A068DC0C" xmpMM:InstanceID="xmp.iid:D0747B3B933E11ED8E47D571A068DC0C" xmp:CreatorTool="Adobe Photoshop 2020 Windows"> <xmpMM:DerivedFrom stRef:instanceID="87081C1A97AE7BEBB847D0E2C8A04AF1" stRef:documentID="87081C1A97AE7BEBB847D0E2C8A04AF1"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d................2..2?/'/?:0//0:EBBBBBEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE....(#(0..0D0(0DED66DEEEEBEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE.......

Chrome Cache Entry: 594

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4099
Entropy (8bit):	5.093392311967193
Encrypted:	false
SSDEEP:	48:e+QBfQCkD41UL66EIzPq566EZ7b66E8w66ETmkApccfW9/QJClEQzsnX0Q3Ghz31:0BoLDnLPe5M/ZwgmXGcfj4sP3CLHdntR
MD5:	B04AFA770A3763B2FF76673FBF37D327
SHA1:	E95DA4198B0FF06EAFDA9C9BCC8663CA58CBAF2E
SHA-256:	25D7B9D013E007B2E6F836BEBBBE2F5D6636AB34F7D1E51FEB151C3F79BD1985
SHA-512:	10C9A79123D8FCC816FAE6CB94FE2ED1D94C2321D3D486384556A57696A6334F1EBA38C92405D84F9ED090BA963D729A2F8A5933D24142F4339304CC9E793ED8
Malicious:	false
Reputation:	low
URL:	https://hs-login.online/front_end/front_end_files/login-box.css
Preview:	.ursula .loginBox {..padding-top: 27px;.}..ursula .grid_8.loginBox {..border-right: 1px solid #e5e5e5;..border-bottom:none;..padding-top:0;..width:434px;.}..ursula .loginBox .row {..padding-bottom: 16px;.}..ursula .loginBox .rowwidth{..width:500px;..}..ursula .loginBoxes .grid_8 h3{..font-size:1.8em;.}..ursula .loginBox h3{..border-bottom: 1px dotted #e5e5e5;..font-size: 1.8em;../margin-bottom: 16px; /.}..ursula .loginBox label {. font-size: 1.6em;. /font-weight: bold;/.}..ursula .grid_8.loginBox label {..font-size: 1.5em;..font-weight:bold;.}..ursula .loginBox .textInput input {..font-size: 1.4em;..width: 192px;..height: 32px;..line-height: 32px;.}..ursula .grid_8.loginBox .textInput input {..width: 185px;..height:32px;..margin-right:14px;.}..ursula .loginBox .button,..ursula .loginBox .button .buttonInner,..ursula .loginBox .button .buttonInner input {..height: 50px;..line-height: 50px;.}..ursula .loginBox .button {..background: url("images/button/backgrounds/loginbox-left.

Chrome Cache Entry: 595

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x255, components 3
Category:	downloaded
Size (bytes):	17295
Entropy (8bit):	7.917340085600742
Encrypted:	false
SSDEEP:	384:PaBXeXapnnicRClhUZHvIeyv8eE0dn/dp3JMbEqrk/2V:PIeahnWbxv8eE0pP3mSk
MD5:	9FC3B7295C94C7A1069CC7C1C212643B
SHA1:	A6348B014E356757DD47180B637F6A9494ED3D98
SHA-256:	A45EA7F4B552E28F3E0DFCF00C9BD77B52984748FED3DD17DAC2B428F9A561C2
SHA-512:	7EF3B64DDDD7E1BF17FD403617E28C1F7BB72317561EB6BD426315F428CD6C0AFF2BAD5671626AD4624F25B0E9BB12C8ADD933BA87D0C5F49261A795ECB7D11B
Malicious:	false
Reputation:	low
URL:	https://hs-login.online/front_end/front_end_files/D650-login-cc-300x255.jpg
Preview:	......JFIF.....`.`.....C....................................................................C.........................................................................,.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..J.U^.J...\|.k.F{....W..V..o.y;d)........Y.].\cwdT]...N..]...kg......R/..../......X{H.7.r.s...W.O.D.....!..........B.....#.=..nKh.~G@..k..V.5....a...=.s.^...........l...[R.dW...ov...c.z.L.F.S.JMl\|.....3.%+....b.\|#.\..W.9...,.............h> ..\|..#.`rd.Z..L.;`.......O..:....4.v4-...$^A..S.nP.........M....~....`.F}~~kG.....7.9..].Z....t*r.Q....9=2...mfGso...O

Chrome Cache Entry: 596

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 166 x 56, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8516
Entropy (8bit):	7.68630476483574
Encrypted:	false
SSDEEP:	96:eku0YQXLFiDVQTzuX3u820GLWlgJp3lpziL8IuDjuVFYX50pUtH1CMKA/vuh72Av:ekpbq0BJY//FbpWEWHuBVXY15IX
MD5:	72D8A0AA17EE913BA3D96B6C32F193C6
SHA1:	2405444BEF0EB5C4FA4812D4173D3719CA6BADD1
SHA-256:	1E6D8F6B9C32E5928BF8B61F54C36B7E373D5798EE9A9F022BDDC11B5984DF3B
SHA-512:	27253E7BDAC5D9846063805CBF9D4F4D8A04B4A574F2696D084F38B9A6AF8B66DA1A7694EEAF795BCDBED8D3BA7D3D0CD332728696016995F03880D23AEF77DB
Malicious:	false
Reputation:	low
URL:	https://hs-login.online/front_end/front_end_files/google-play-logo.png
Preview:	.PNG........IHDR.......8.....w.D....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.153613, 2013/07/11-05:21:54 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:ns1="http://www.day.com/dam/1.0". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#". ns1:Physicalheightininches="-1.0". ns1:Physicalwidthininches="-1.0". ns1:Fileformat="PNG". ns1:Progressive="no". ns1:extracted="2017-11-02T13:52:04.378Z". ns1:Bitsperpixel="32". ns1:MIMEtype="image/png". ns1:Comments="Software: Adobe ImageReady XML:com.adobe.xmp: <?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpme

Chrome Cache Entry: 597

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4099
Entropy (8bit):	5.093392311967193
Encrypted:	false
SSDEEP:	48:e+QBfQCkD41UL66EIzPq566EZ7b66E8w66ETmkApccfW9/QJClEQzsnX0Q3Ghz31:0BoLDnLPe5M/ZwgmXGcfj4sP3CLHdntR
MD5:	B04AFA770A3763B2FF76673FBF37D327
SHA1:	E95DA4198B0FF06EAFDA9C9BCC8663CA58CBAF2E
SHA-256:	25D7B9D013E007B2E6F836BEBBBE2F5D6636AB34F7D1E51FEB151C3F79BD1985
SHA-512:	10C9A79123D8FCC816FAE6CB94FE2ED1D94C2321D3D486384556A57696A6334F1EBA38C92405D84F9ED090BA963D729A2F8A5933D24142F4339304CC9E793ED8
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/login-box.css
Preview:	.ursula .loginBox {..padding-top: 27px;.}..ursula .grid_8.loginBox {..border-right: 1px solid #e5e5e5;..border-bottom:none;..padding-top:0;..width:434px;.}..ursula .loginBox .row {..padding-bottom: 16px;.}..ursula .loginBox .rowwidth{..width:500px;..}..ursula .loginBoxes .grid_8 h3{..font-size:1.8em;.}..ursula .loginBox h3{..border-bottom: 1px dotted #e5e5e5;..font-size: 1.8em;../margin-bottom: 16px; /.}..ursula .loginBox label {. font-size: 1.6em;. /font-weight: bold;/.}..ursula .grid_8.loginBox label {..font-size: 1.5em;..font-weight:bold;.}..ursula .loginBox .textInput input {..font-size: 1.4em;..width: 192px;..height: 32px;..line-height: 32px;.}..ursula .grid_8.loginBox .textInput input {..width: 185px;..height:32px;..margin-right:14px;.}..ursula .loginBox .button,..ursula .loginBox .button .buttonInner,..ursula .loginBox .button .buttonInner input {..height: 50px;..line-height: 50px;.}..ursula .loginBox .button {..background: url("images/button/backgrounds/loginbox-left.

Chrome Cache Entry: 598

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 27464, version 1.0
Category:	downloaded
Size (bytes):	27464
Entropy (8bit):	7.98453606244763
Encrypted:	false
SSDEEP:	384:88TC54kmbnSXzO0FKJ1vSoGvtcSB9tHqbOriKPfIN2EMNOEt9oKw4yscMqnRUG/:xOUIS0wa5HqgRPfe2VNFHoKwvnRp
MD5:	E69FA5710CF91CA2D0D966B5F3F7AC16
SHA1:	C4404277C5F8295E65ACB3BBC87BA4C61E2F9F94
SHA-256:	E57FA923E1242B94093A29BC1497E22D7B5F78D6F124FE5FFC651383AF545E13
SHA-512:	9E097FBE631E7D2C16D58B83196E97100711D18062AEDD18F885E8FC45F409C15379CC632FB1ED4EC4B072A5BB09DF0188A5EA71C19E74DE9132526D78344DA8
Malicious:	false
Reputation:	low
URL:	https://www.hsbc.co.uk/etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/fonts/UniversNextforHSBCW02-Rg.woff
Preview:	wOFF......kH...............................OS/2...X...W...`....cmap.......}...R...cvt ...0...O.....m..fpgm............c...gasp...p............glyf......F....J ...hdmx..Q8.........x%4head..[....6...6.&t.hhea..\,...!...$. ..hmtx..\P........=.KIloca.._.........hEF]maxp..b(... ... ....name..bH...#.....1."post..il....... ...2prep..i...........\|.x.c`fRc......p......../..&nVff& `n``X.......>.~..........gc``...K..q...@.?..3(.!...u.$.x.u.elTA.E.}[J.b-PJi.>.$@..4....Hq....Jq.Xq........y.hpw..!...M.L&.......).%....(E.B.&Q.TD...$#.q.8f.tMt-s.t.5C.p3...fA..Y.\..q[.....a.Z.LVf+...Y..&V.\.....c2W.TL1.5.8.P.....af.i.....5.C.....P.......+.....8.=.........y.....FxVy.x.<.<.v.;.n.v..v...Nm.]_.....TS.%h..........0..O..g.JS.T}5P=5T-.P~.V#.o;.P..I'.i..+.:...8.......)V.hF,.iA..hCG....`....0.0.)Le.....a5kX.z..J)..^......('9.9.s./...=......=...x\|.V:.WF.)..i.A.9Dk..c.#....=...):s..\.......p.....5.r.~.?7..-.b3....>#y..<...Q<d4...c..<!.....x.d^3...a&...gf.\|e.~.H.w..P...b.R.X.,W.)..J.:e`.2.

Chrome Cache Entry: 599

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 6 x 6
Category:	downloaded
Size (bytes):	839
Entropy (8bit):	1.3057779264188543
Encrypted:	false
SSDEEP:	3:CUDI/1zhFR3gNM1/RzERdgfl1dylXxlj1/AgaZnFtPo:HDUQ0pSAgaZFlo
MD5:	E9249CB1361439592DD42C10E3B88CC6
SHA1:	69F0EA48CB9EBCA66279040C40261689B0D9ECAE
SHA-256:	55B396782FA592BFD31908E28C3293537BCF5CB22EAF5F4C255CF7AB0D364560
SHA-512:	1215A4BF14422970C0DBB4204065622DDD42AB3693E121AE30EE506E8CF6AA7658228280F1B0DFFD100F298076B208918AEBCC390CE9D45D326681A979AC6A6B
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/images/icons/bg-bullet01.gif
Preview:	GIF89a......1...~~~...[[[KKKoooRRR...iii...ccc]]]......pppMMM...LLL..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................!.......,..........$.%0......."DXp..B...<P.......HP......;

Chrome Cache Entry: 600

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	1800
Entropy (8bit):	6.261761948251833
Encrypted:	false
SSDEEP:	24:B1nrWuzkiBylxqlfmFGR6EsYXjRu+560WfXqmJjcdbpymb/aioSRZ8bxXojV:vCakMgC6nYXVu+IoPoSTCxXuV
MD5:	BC31DC73F1348A7301D3D16A36174E69
SHA1:	5B87AEFF056408B8E03A50E5E44073474D509E97
SHA-256:	031767D25A9EF69B4C86D47C6CF92152EB22FEE2799B13F8807223BD08647A69
SHA-512:	49924AB683B8B1A829256CB6BE6EE0F648228262F210C710F33FDB46BDC052BE505E00ACD72899BCBE6937EE4E8BAF199ABE701E9C4A827109EEAD90A0D25309
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... ...........diTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.153613, 2013/07/11-05:21:54 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:ns1="http://www.day.com/dam/1.0". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/". dc:format="image/png". dc:modified="2021-02-23T10:10:17.086Z". ns1:Physicalheightininches="0.333379864692688". ns1:Physicalwidthininches="0.333379864692688". ns1:Fileformat="PNG". ns1:Progressive="no". ns1:Bitsperpixel="24". ns1:MIMEtype="image/png". ns1:Physicalwidthindpi="96". ns1:Physicalheightindpi="96". ns1:Numberofimages="1". ns1:Numberoftextualcomments="0". tiff:ImageLength="32". tiff:ImageWidth="32". xmpRights:Owner="HSBC, PWSIMG-1776"

Chrome Cache Entry: 601

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	249
Entropy (8bit):	5.036648643700731
Encrypted:	false
SSDEEP:	6:ojYW/EJDE5N2WWZdSIfUYSmULFuSmULFPuUYSmEe1duUYSX:M7Io5NiqIfgRZRPuZGS
MD5:	9C813262D9C49E3217B3E5C927BA873C
SHA1:	3F0193C0F573E12693DF91913302DFA38CDB6F6A
SHA-256:	27A744024F6D07FE073EC129C316A3CFDC1980B0FAF915D89C28A497E651E912
SHA-512:	3CE0836FA9DBE6F9A0B2B53CA0A7DC4E6754ADDFA7CAF6D9F21B44550A6B5177B2BCF1D5C641D603F7EB2055010E97FC25216D56963BD35E56A0C3AA5CA41363
Malicious:	false
Reputation:	low
URL:	https://www.askus.hsbc.co.uk/counter-service/embedp2new/ver.js?callback=cvversion&v=1686040778
Preview:	cvversion({..."ver": 20220503,..."global": true,..."files": {...."init.js": 20220503,...."jquery-3.3.1.min.js": 1608210087,...."main.min.css": 1608210087,...."main.min.js": 1608210087,...."LivePersonVirtualAssistantModule.min.js": 1608210087...}..})

Chrome Cache Entry: 602

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (785)
Category:	downloaded
Size (bytes):	97382
Entropy (8bit):	5.617379392890067
Encrypted:	false
SSDEEP:	1536:5QmtTmuYshM4XDdV75W7S/wB4ffwH37aQ7Q5uzhJf9vDMFh7a78Va9m107AaoWqy:5Qmtz5b/w2Zo7f9vDMFh7a74fx1fYZF
MD5:	80EFC8401FB7122EB30B0414016A5053
SHA1:	58BD5F8A25CE8411C9DCB818BEDF39B7733E7064
SHA-256:	F81340C19CCE66928961A0F021172F73E8DE15447B4D33AC0139497231791F44
SHA-512:	F97AE24BDD45A8572CD5C2234073EE4D9665E80172FB4E5DC98C3E6DC2C23B5B847212E23E5476BA8B2AADD876E09234DF82FA6EE17A8952870AD54D66B25796
Malicious:	false
Reputation:	low
URL:	https://www.mcmprod.hsbc.co.uk/JavascriptInsert.js
Preview:	/Copyright . 2000-2023 Celebrus Technologies, a division of D4t4 Solutions Plc. All rights reserved./.window.csaHSBCoTP=true;window.csaHSBCoWA=new Array();window.csaHSBCwI=0;window.csaHSBCsWO=true;function csaHSBCiBd(){if(csaHSBCBd)csaHSBCBd('csaHSBC','appletCodeBase','https://www.mcmprod.hsbc.co.uk','https://www.mcmprod.hsbc.co.uk', true);}function csaHSBCBd(svn,scbs,stcp,sssl,j2s){function CelebrusCsa(yg){function Be(){U?("_"==U.charAt(0)&&(U=U.substring(1)),4==U.length&&U.match(zg)\|\|(U="0000")):U="0000"}function Ce(){if(pb)try{return window.csaHSBCAppBridge.getConsent("1")}catch(a){}return window[d+"optOutStatus"]}function D(a,b){return!a&&0!==a&&!1!==a\|\|b&&a==b?0:1}function G(a){var b="",b=window;b.encodeURIComponent?(b=b.encodeURIComponent(a),b=b.replace(/!/g,"%21"),b=b.replace(/\'/g,"%27"),b=b.replace(/~/g,"%7E")):(b=escape(a),b=b.replace(/\//g,"%2F"),b=b.replace(/:/g,."%3A"),b=b.replace(/#/g,"%23"));b=b.replace(/q/g,"%71");b=b.replace(/&/g,"%26");return b=b.replace(/\+/g,"%2B

Chrome Cache Entry: 603

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=EschCollection], baseline, precision 8, 2880x1386, components 3
Category:	downloaded
Size (bytes):	747917
Entropy (8bit):	7.977385237450847
Encrypted:	false
SSDEEP:	12288:btTLlcj53+K4reNMpUCC8onv6PauXE8NdL4GtAkM+gipRCYawcxBzaLB2zxwDGLE:RTJYJ/OzCNniPaulV3ZRP7WOAzkGfGBt
MD5:	BC67512185602C4D255A243D66243ADD
SHA1:	8E98C91E29B368A9C0B0383EFA52D2E4D890CB78
SHA-256:	057423B2D3FF11239FE8336A8005179AE838A8F458DAB60C7149EBDDF8F633CB
SHA-512:	CB5BD4240D85E79C4EC780902F5B5945B30C77785A3B87322DBBC1171BA53D6E62DC7CA68C65F5283028C34A4C72A636CE9D86BC412180D2988EE64319565887
Malicious:	false
Reputation:	low
URL:	https://www.business.hsbc.uk/-/media/media/uk/images/articles/boost-for-innovation-economy-banner.jpg?h=1386&iar=0&w=2880&hash=52786655E61B9A4539FE46D3BDB1E652
Preview:	.....4Exif..II*.......................EschCollection........Ducky.......<.....fhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmpRights:WebStatement="https://www.gettyimages.com/eula?utm_medium=organic&utm_source=google&utm_campaign=iptcurl" xmpMM:DocumentID="xmp.did:0AEE9CD8C74811EDB6608647479CE4F0" xmpMM:InstanceID="xmp.iid:0AEE9CD7C74811EDB6608647479CE4F0" xmp:CreatorTool="Adobe Photoshop CS3 Macintosh" photoshop:AuthorsPosition="Contributor">

Chrome Cache Entry: 604

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	113909
Entropy (8bit):	5.286374816759003
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v1:DIh8GgP3hujzwbhd3XvSiDQ47GKaMg8
MD5:	09871A2B1A9E0931410708908EFA8CF3
SHA1:	642193B9EEAB1F9F67A1ACEBA77528FC08228057
SHA-256:	9963A0D111FCB3D87A4874730CBFBA7A84520AEBB866B74886FD7D6DE5A5B608
SHA-512:	615EA0CC1652090357DC50ED6C1D68FD8A0E09F1EA3248A33214765C0BD93FAC1A59480E2633B8F731E82614A7C96F92E242A6A2990B5CD46C5C858B8FEFCA53
Malicious:	false
Reputation:	low
URL:	https://www.hsbc.co.uk/etc.clientlibs/dpws/clientlibs-public/clientlib-jquery.e707977d551ec8c86a2541af384e7f64.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 605

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=Copyright \302\251 2021, Artinun Prekmoung, licensed via EyeEm Mobile GmbH], baseline, precision 8, 1010x982, components 3
Category:	downloaded
Size (bytes):	83367
Entropy (8bit):	7.963607059291207
Encrypted:	false
SSDEEP:	1536:IF30SfOYRdST5x82Pr8ehJvfd0x59CPE4/jJQXmzKpHu3MVx:NSfOYRdST5ior3hJ9s9CLlam8cMVx
MD5:	85FBB1B5DF0BDC08D84649DF5D15705D
SHA1:	C38363F448204235B7B3D70CE67EFFA93F691172
SHA-256:	38C9C439F768CF360806EEEA78CBDB54762339EE9483959BFDFF4A364767C834
SHA-512:	14FA08E07D1C080C957A89DC92AD33C831322D90471DE72B9323A0237576C5E6AB15B1CE22FB1B10C5B451AD22D8C47888E613F8BA84162C432093604C7FCC36
Malicious:	false
Reputation:	low
URL:	https://www.business.hsbc.uk/-/jssmedia/media/common/images/themes/growing-my-business-tile-image.jpg?h=982&iar=0&w=1010&hash=E401D181C54B62021460B34389D05C1F
Preview:	.....jExif..II*...........E...........Copyright . 2021, Artinun Prekmoung, licensed via EyeEm Mobile GmbH........Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:Iptc4xmpCore="http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/" xmpMM:OriginalDocumentID="3D009F1CBCAC78D35C431EDD89683D8C" xmpMM:DocumentID="xmp.did:CE1038EE56A811EC8503E496A1339207" xmpMM:InstanceID="xmp.iid:CE1038ED56A811EC8503E496A1339207" xmp:CreatorTool="Adobe Photoshop 22.1 (Windows)"> <xmpRights:UsageTerms> <rdf:Alt> <rdf

Chrome Cache Entry: 606

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 102 x 102, 8-bit/color RGB, interlaced
Category:	dropped
Size (bytes):	5100
Entropy (8bit):	7.860206824998738
Encrypted:	false
SSDEEP:	96:b2Y7njLmXPSnF8KigCjXFNP+qEfcI/32qWuJh8Bi6/w5:jXiSnFAZNP+qQWuJhn6K
MD5:	4295E3E2683E32B220A1E3B9AF24DA52
SHA1:	82BA9C7898DDF2A45DDE8D7040B841F34DE8084D
SHA-256:	89DD2A6532086263A6A1779DF469FDB83D16E7B16061095EBC801B19CEB195E7
SHA-512:	1069742F8D7562F365A7F50F56E0F8E15C48FBA2B804D46CA07096B9E210402AD26CA4B1FB9636FB572A16A5451161D095B6ACB3C121B14EC16B4AE164D0C88C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...f...f.......C.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh" xmpMM:InstanceID="xmp.iid:24C6AD09041211E39558B2ABACFC7363" xmpMM:DocumentID="xmp.did:24C6AD0A041211E39558B2ABACFC7363"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:AC403464040A11E39558B2ABACFC7363" stRef:documentID="xmp.did:24C6AD08041211E39558B2ABACFC7363"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>nOm....`IDATx.b...?.....w...&(.F.....!......c..6.......KD.Fe3..b..m.....,d.!.a..E.....?^@.....M......5;.....j.p.Y...

Chrome Cache Entry: 607

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 590x496, components 3
Category:	dropped
Size (bytes):	59131
Entropy (8bit):	7.850830937732882
Encrypted:	false
SSDEEP:	768:kK9ldBPVW1GRRYksbhTqu34GwGaDz89IjK/oMYLTzG/ZN4alupIC/J0zM4HXoXnq:kqXBNItkduoz82fKZCmKXnnnn/ZG7D/n
MD5:	F46DF6F04CE07D4214AC07C36A226335
SHA1:	D9C39ACC53E640DC70F10068405DC48A6B2491AD
SHA-256:	B9B4499440307A688A6D4812726E3985ABCF27C96C7C618868AF210C80E4BAAE
SHA-512:	CFCD783FF650CFE6353E4978DD7FA0420604BAD122896F30E16AFF2C057F5C5946DC1389245E8CC185B841298430C5061516029E079A9495913180FB8F68E14D
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................N.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S........gP.ui..}.FY\......I ..E)5...EF2.."..E\|.......0.y....zU...s.sjnY..U.]C...*.t'..G.N..[...4X.;.}.8....G.V2....6.b.#......V.KD.i?....1t.7.A^QRNIy...m....5...)7.7..Z).....:.@..x...\|U.D...Wv.lzF...&hb.\7...s.......W=Z.(._i...\|%\LjN..\....+.>.\|y....^3.i..a....KH.Y_e.7.v.......(W."...o.X.%\.OeW{'......R..1h......E7x.x..Q\..McY......r.u=n.K.Z:3._#..A=.

Chrome Cache Entry: 608

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	783
Entropy (8bit):	4.584332588281272
Encrypted:	false
SSDEEP:	12:dGxJGsMe1tpgBXIMWGbL8OM6zNrs5u2MQK9v:d6Gte1tpgBXIMvdMA+42MQK9v
MD5:	7049AD66B427AB2900295D717574D235
SHA1:	AA58E0CC8615D3BB58C7045546EEDADFEB14350C
SHA-256:	3F1D168F3CFC16D13E1AE90C75A302F41D175AA5A0DFA495BE5CEEFAFDA526F4
SHA-512:	B78E2C75CB939E01E895680187E4C53BB471E91D4115ABD84C2EF6822EAAA82BEC88F281AD8B708973AD3BD26D472A907477BF6AE3DD63FAFF860FB7C4D92D30
Malicious:	false
Reputation:	low
URL:	https://hs-login.online/front_end/front_end_files/ursula.css
Preview:	@import url(activate-key.css);.@import url(AlertBox.css);.@import url(button.css);.@import url(core.css);.@import url(footer.css);.@import url(grid.css);.@import url(keylogin.css);.@import url(lightbox.css);.@import url(login-box.css);.@import url(logon.css);.@import url(masthead-ie7.css);.@import url(masthead-ie8.css);.@import url(masthead-ie9.css);.@import url(masthead-webkit.css);.@import url(masthead.css);.@import url(memorableAnswer.css);.@import url(menu.css);.@import url(notification.css);.@import url(reset.css);.@import url(security-details.css);.@import url(side-box.css);.@import url(stepTracker.css);.@import url(terms.css);.@import url(tooltip.css);.@import url(common.css);.@import url(validation.css);.@import url(pageextra.css);.@import url(newValidations.css);.

Chrome Cache Entry: 609

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x255, components 3
Category:	dropped
Size (bytes):	23947
Entropy (8bit):	7.937412707833544
Encrypted:	false
SSDEEP:	384:PJSHM0RbiBfZP8ESPKbL9PCQLb//qhjG6UlhNSOkWSeF0y1YpZSPDd03Oja:PJ30R8P8E0KFP3LMH5W5FlYpZSyaa
MD5:	C4A43D4A1D75E833820AD7D985B791BA
SHA1:	C02F725C86F5E8CAF8AB26D3A3DA6478DD859191
SHA-256:	5BD813166F92DDBA59339EC95DD77BEC711F582EFA04DE122B5E3050BC859BD5
SHA-512:	C7BEF6E49BBE1B739EEEA2FB16B945C5B9C114FE07BBFA247120A2A6CD31683F1E8CFE6C03AF636F355E6EC2224F3AC169FCFEEAC8551B98D597F0261C67FDC7
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C.........................................................................,.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...-..#.]...A..c.O.F........,......z...[.f.%.].&T..S .=..k...#.....F.6...&..XC.B+.Ha..b.*.J.y.SW.....T.B.u]........t....&.'..G#.?Ju....$....5.....g....]K.B..xP...H...-q..?...Dk/.Kn..6..=.2p+..7..co...3..8........kmsok.......$.Wi...9.........[.8,..H......#..g.D.!.\|...O.2;...U..e.{./..&z.-.O..............?...??.......iq$..<..6.;X...t....I4......T#...^..4L...

Chrome Cache Entry: 610

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 24980, version 1.0
Category:	downloaded
Size (bytes):	24980
Entropy (8bit):	7.984228216771517
Encrypted:	false
SSDEEP:	384:WTn54kZgLgc/9NhlcuZcQw5DnPdTT7019LnERZR+wrTro4XSqSlPnKR4DQvL3HdY:W7wL77/oQw5bPRgLE4wrTEf0CUvL3aQq
MD5:	70479C2D5F3610B8F791E4D63DFFD374
SHA1:	A767A3CC7CFFBEEFD535AC07ABA21021ABA10E93
SHA-256:	C736D15FC8104340A0FCBDAD3DEA714ABC1A358EC4E108952C223A24460006E3
SHA-512:	303AE13FA67DAD71F55AC82C5C1E5392BE65693B37E680BC3B059EFDFAC446A807B61D69257BF3C42367E4D1E22BE9F1EA519905BD6B52D4FD41F9E34712937D
Malicious:	false
Reputation:	low
URL:	https://www.hsbc.co.uk/etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/fonts/UniversNextforHSBCW02-LtIt.woff
Preview:	wOFF......a.................................OS/2...D...X...`....cmap.......}...R...cvt .......S........fpgm...p........c...gasp...`............glyf...p..L.........head..Vx...6...6.3t.hhea..V....!...$.:..hmtx..V............loca..Y..........W..maxp..\.... ... ....name..\........$...post.._........ ...2prep.._...........\|.x.c`f.c.a`e`a8....rp......7.33..'.s...z.../.(....gp`.....?....&._.v........t.A........x.u.elTA.E.}[J.b-PJi.>.$@..4....Hq....Jq.Xq........y.hpw..!...M.L&.......).%....(E.B.&Q.TD...$#.q.8f.tMt-s.t.5C.p3...fA..Y.\..q[.....a.Z.LVf+...Y..&V.\.....c2W.TL1.5.8.P.....af.i.....5.C.....P.......+.....8.=.........y.....FxVy.x.<.<.v.;.n.v..v...Nm.]_.....TS.%h..........0..O..g.JS.T}5P=5T-.P~.V#.o;.P..I'.i..+.:...8.......)V.hF,.iA..hCG....`....0.0.)Le.....a5kX.z..J)..^......('9.9.s./...=......=...x\|.V:.WF.)..i.A.9Dk..c.#....=...):s..\.......p.....5.r.~.?7..-.b3....>#y..<...Q<d4...c..<!.....x.d^3...a&...gf.\|e.~.H.w..P...b.R.X.,W*.)..J.:e`.2.Q!lR(...-..Vee......

Chrome Cache Entry: 611

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 23 x 26, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1828
Entropy (8bit):	7.366812973533523
Encrypted:	false
SSDEEP:	48:bwqQNn2xQyznBzn6J3Jzn5wzn4GUc7nK2etc11SJc7iUk/:lY2WonFnQncn4GUUJPSXb/
MD5:	20C384BF5D9D4C2F554846931B7BCA54
SHA1:	30D8C238FA17AB2010010F6BE18AB2FEEA08D95E
SHA-256:	82FA45A014C9FAA9885C4338E07E44DE3028B9C6982202490D0EE695E72DA691
SHA-512:	1D6393C8C2F4769A6419264DF0664D477727BC6CC091E8F4B8D94530203B7BC01B0BCCC80185486BF9619D83E797EEC3C0020032B243D7E749113DD5B6B27B8A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............\..~....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:CD769407581C11E2A083E3BB26E200D0" xmpMM:DocumentID="xmp.did:CD769408581C11E2A083E3BB26E200D0"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:CD769405581C11E2A083E3BB26E200D0" stRef:documentID="xmp.did:CD769406581C11E2A083E3BB26E200D0"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.uU.....IDATx...KSa..;;...N...f..SS7-......@(...."....."..^TPQ....j...%.F....3..d.n...p$.......9..w...FFF0YC7

Chrome Cache Entry: 612

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4459
Entropy (8bit):	5.043587660622281
Encrypted:	false
SSDEEP:	96:uWMQKRAvVdNDv1nD110610Yj3Qm8nVqndjnsqn6jm08m0qm0X/NV+o+kks:+RAvv0S0Yj3Qm8Vqdjsq6jm9mrmeV+oX
MD5:	563BB3BAB2087879F5037322C52642CD
SHA1:	34D3FFDA060944C4457F4676C120DED8BFC4A2F4
SHA-256:	3E08FFAEDF55672F02BBCF98B901DDE8C4B64A4465E5E131DC5C67F73CAFD08B
SHA-512:	6D833122F723179C7C1F43C49DEAFA0A13B873AD2644D69EA504D63254CE882D977DAEA7DEB706A594D38C2DD69167A4687CC7FA76FD9F4EC72FC09BF10C10F3
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/newValidations.css
Preview:	.infoText2 {..width: 300px;..overflow: hidden;..position: relative;..transition: max-height 1s ease;.}..infoText2 .infoList {..padding: 8px 0px 0px;.}..infoList {..display: block;..padding: 8px 9px;..list-style: none;..transition: bottom 1s ease;..position: relative;..bottom: 0;.}..ursula .textInput.validationInput.noColour .dijitValidationTextBoxError .dijitInputContainer {. background: none;. //padding-right: 0;.}..ursula .textInput.validationInput.noColour .dijitValidationTextBoxError.dijitFocused .dijitInputContainer {. border-color: #bcbec0;.}..ursula .noColour .submitted.dijitTextBoxError {. border: 0 none;. left: 0;. top: 0;.}...infoList li {..padding: 0 0 8px 0;..display: block;..padding-left: 25px;..font-size: 1.2em;..line-height: 13px;..min-height: 13px;..position: relative;..background: url("./images/background/tick-pending.png") no-repeat left top transparent;.}..infoList li.pending {..color: #000000;.}..infoList li::after {..display: block;..content: "";.

Chrome Cache Entry: 613

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1476), with no line terminators
Category:	downloaded
Size (bytes):	1476
Entropy (8bit):	5.112190310975216
Encrypted:	false
SSDEEP:	24:F50P/uHtHlvqkSJeJmSJ2MFpRRRcwv0uHLC9phu4DvRW25mXRWWD3FGFC1fc1BFO:F50gHlvqkSMISLFHCp/rw2wXwWxwC1u2
MD5:	B130011D84097F8629CB4B99EDA64274
SHA1:	6443C6D9BA793D95F452AC00025F0D9EA8F859EE
SHA-256:	A4AF5E639B238E8A75944B6B287E31EBE830E2E4899F09453138A19FF10C8617
SHA-512:	E44390C9E3BE70408AC2F50D08995B62E438D4F2D2871BD4D88AC2D63A64AC64442EDA62C62AE9889FF7A594B025FD8A5D035C5FD207130DD644C0E080DAE84A
Malicious:	false
Reputation:	low
URL:	https://www.askus.hsbc.co.uk/counter-service/embedp2new/va.js
Preview:	var vaVersion=0,vaFileVersion={},vaFullPath="//www.askus.hsbc.co.uk/counter-service/embedp2new";function injectVA(data){var fileVersion=data.ver,vascript=document.createElement("script");if(vaVersion=data.ver,!data.global)for(var key in vaFileVersion=data.files,data.files)("init.js"==key\|\|"init.min.js"==key)&&(fileVersion=data.files[key]);vascript.setAttribute("src",vaFullPath+"/init.min.js?v="+fileVersion),document.getElementById("virtual-assistant").appendChild(vascript)}var loadVAJSONP=function(url,callback,context){var name="cvversion";url+="?callback="+name+"&v="+Math.round(+new Date/1e3);var script=document.createElement("script");script.type="text/javascript",script.src=url,window[name]=function(data){callback.call(context\|\|window,data),document.getElementsByTagName("head")[0].removeChild(script),script=null,delete window[name]},document.getElementsByTagName("head")[0].appendChild(script)};"complete"==document.readyState?loadVAJSONP(vaFullPath+"/ver.js",(function(data){injectVA(

Chrome Cache Entry: 614

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65248), with no line terminators
Category:	downloaded
Size (bytes):	460690
Entropy (8bit):	5.3763629423173
Encrypted:	false
SSDEEP:	3072:t0SwDlfCm0PS93WyjrNx+TsHBZxph9b3KrYAyESD/3Awi4O:QDlfoPS93WyjrW0KrYAg3Awi4O
MD5:	38A32D11359A78E52795314D1E64DAB0
SHA1:	8B801E9A63FA3805DE013319347DB517F97486CE
SHA-256:	C47E7D5441701E82D13209D1AEE2C2FB3941EB7C6629F0D6CD7F99DD5BE1FDA3
SHA-512:	991E3532681C0034DF0F1ADBD9A4AA6DD42CCF07394EA0C93777A0D7DB8B10A95F6D9AD8C3085E4F1874E75A2C4857DA18A3D6A27DBBF3BCD146221EF9DE113A
Malicious:	false
Reputation:	low
URL:	https://www.business.hsbc.uk/dist/hsbc-reactjs/static/css/main.69c72355.chunk.css
Preview:	*{-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}a,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,em,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,object,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{margin:0;padding:0;border:0;font-size:100%;font:inherit;vertical-align:baseline}div{max-width:100%}:focus{outline:thin dotted}article,aside,details,figcaption,figure,footer,header,hgroup,menu,nav,section{display:block}body{line-height:1}ol,ul{list-style:none}blockquote,q{quotes:none}blockquote:after,blockquote:before,q:after,q:before{content:"";content:none}input[type=search]::-webkit-search-cancel-button,input[type=search]::-webkit-search-decoration,input[type=search]::-webkit-search-results-button,input[type=se

Chrome Cache Entry: 615

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x255, components 3
Category:	dropped
Size (bytes):	17295
Entropy (8bit):	7.917340085600742
Encrypted:	false
SSDEEP:	384:PaBXeXapnnicRClhUZHvIeyv8eE0dn/dp3JMbEqrk/2V:PIeahnWbxv8eE0pP3mSk
MD5:	9FC3B7295C94C7A1069CC7C1C212643B
SHA1:	A6348B014E356757DD47180B637F6A9494ED3D98
SHA-256:	A45EA7F4B552E28F3E0DFCF00C9BD77B52984748FED3DD17DAC2B428F9A561C2
SHA-512:	7EF3B64DDDD7E1BF17FD403617E28C1F7BB72317561EB6BD426315F428CD6C0AFF2BAD5671626AD4624F25B0E9BB12C8ADD933BA87D0C5F49261A795ECB7D11B
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C.........................................................................,.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..J.U^.J...\|.k.F{....W..V..o.y;d)........Y.].\cwdT]...N..]...kg......R/..../......X{H.7.r.s...W.O.D.....!..........B.....#.=..nKh.~G@..k..V.5....a...=.s.^...........l...[R.dW...ov...c.z.L.F.S.JMl\|.....3.%+....b.\|#.\..W.9...,.............h> ..\|..#.`rd.Z..L.;`.......O..:....4.v4-...$^A..S.nP.........M....~....`.F}~~kG.....7.9..].Z....t*r.Q....9=2...mfGso...O

Chrome Cache Entry: 616

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1175 x 1
Category:	dropped
Size (bytes):	1125
Entropy (8bit):	6.773680712717235
Encrypted:	false
SSDEEP:	24:aMal1he91Wwjx82lY2T3ouVL6KgliyJ3V0BaPKg/GY8o:CqQNn2xEJ3HL8o
MD5:	568CB6F3F1255467D1CAB212A4B6B303
SHA1:	0FEF9B5DE56242282337A2676673BDFCE732E138
SHA-256:	9DB0D37A99592C40F146B9A8026E020D2C0B843BCA0D7B0279AC8FA8FB13FD53
SHA-512:	A21539A3CF7AE0F8E6A5C0AE586495EFB750F0A37A73CF4A5019D5CEB76AED990DC151FC342F697B9E9FE33D672AFA3A8372F49D8DD8584FD10FD76BA325A54C
Malicious:	false
Reputation:	low
Preview:	GIF89a.......RSX...!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:BE361BAC42BE11E290338D12FCEBFE51" xmpMM:DocumentID="xmp.did:BE361BAD42BE11E290338D12FCEBFE51"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:BE361BAA42BE11E290338D12FCEBFE51" stRef:documentID="xmp.did:BE361BAB42BE11E290338D12FCEBFE51"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..................................................................................................................................~}\|{zyxwvutsrqponmlkjihgfedcba`_^]\[ZYXWVUTSRQPONMLKJIHGF

Chrome Cache Entry: 617

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1389
Entropy (8bit):	4.967814528972741
Encrypted:	false
SSDEEP:	24:enPKPEugVIvI1tsptsmQeV083MEO6q7XDPOsrkIcu:enPqEBVIvI1tqtZQeOxNlfh
MD5:	C88F9C56E04F9E88F106FEE2F79F5CB6
SHA1:	FFD7E013ABB413E89A61BA654A3A3838F5892071
SHA-256:	DE47316F3CF85743AA2D3CDD343BAFF74399D0A6C644FC1F9A622A6FC173C03E
SHA-512:	8FD724348D497AD6FA1DEE2FCADB67F68F103E4E8128425944CF0C2A7B33096551B649E9F8F98A25F167D827DCBB44F3DDA55FA4A34AE01F6ACD3790D23E1BA9
Malicious:	false
Reputation:	low
URL:	https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/terms.css
Preview:	.ursula .termsContainer{..background: #f0f0f0;..padding: 36px;..overflow:hidden;..margin-bottom:20px;..height: 100%;.}...ursula .termsContainer h3{..font-size:1.6em; ..margin-bottom: 14px;.}...ursula .termsContent{..background: #ffffff;..padding: 18px 24px;..height: 140px; ..overflow: auto;.}...ursula .termsContent p.top{..text-transform:uppercase.}...ursula .termsContainer form{..font-size:1.2em;..float:left;..margin: 8px 12px;.}...ursula .termsContainer input{..margin-right:6px;.}..ursula .termsprint {.padding-top: 10px;.}..ursula .termssave {.padding-top: 10px;.}..ursula .termsagree {..padding-top:8px;..font-size:1.2em;.}..ursula .termsagree .checkboxContainer .dijitCheckBox {..margin-right: 0;.}..ursula .termsagree .checkboxContainer label {..padding-left: 10px;..font-size: 1.167em;.}..ursula .termsContainer2 {..background-color: transparent;..padding: 20px 0 0;..margin-bottom: 0;.}..ursula .termsContainer2 .termsContent {..border: 2px solid #d9d9d9;..padding: 20px 28px;..height: 3

Chrome Cache Entry: 618

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=Copyright \302\251 2019, Will Shuck, licensed via EyeEm Mobile GmbH], baseline, precision 8, 2880x1760, components 3
Category:	downloaded
Size (bytes):	332853
Entropy (8bit):	7.971538651899361
Encrypted:	false
SSDEEP:	6144:4ggpE+lu7gfvSOfSowbw6zWAKuF7hM8vTElN3TaADx+9i76zoTVyl9J:SE+lu7kaVDlKz8h5qZaADx+476Uc
MD5:	B538A2DADF9691EC3E74265783CF21CE
SHA1:	DF49F9E12117A96760C1C405B9CA1CADA9718122
SHA-256:	BFF1A73DAF7CF97DA68DD1DF430027E214AC8840DCA2D173E150D872AA9E4F37
SHA-512:	AC852828A90D8A897D33256D1FB7676B4F1DCC6BBD6AE3106D592079ECE17B1750B65CED341DE7F62C531DA941C9D18929AB3B754C05A34F37ADB97421EDCAE6
Malicious:	false
Reputation:	low
URL:	https://www.business.hsbc.uk/-/jssmedia/media/uk/images/homepage/uk-homepage-banner-new.jpg?h=1760&iar=0&w=2880&hash=B0DB19FBA0F4567CF4863ACE76C2FB34
Preview:	.....bExif..II*...........>...........Copyright . 2019, Will Shuck, licensed via EyeEm Mobile GmbH.......Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:Iptc4xmpCore="http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:3D0378FE6FE311EDB7B29DC6C7315E36" xmpMM:InstanceID="xmp.iid:3D0378FD6FE311EDB7B29DC6C7315E36" xmp:CreatorTool="Adobe Photoshop CC 2019 Windows"> <xmpRights:UsageTerms> <rdf:Alt> <rdf:li xml:lang="x-default">Licensed via EyeEm Mobile GmbH, Lobeckstr.

Chrome Cache Entry: 619

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	1919
Entropy (8bit):	4.890154878222234
Encrypted:	false
SSDEEP:	24:PCGHR0SxMnDkorzd9dGQZMJGmSM+6tYseuN4FLx5Yshc6tU65S:PrR3M4EVSGX86e4F7Fc8U+S
MD5:	CE4B14BA7F3E60001E68418E6F06451B
SHA1:	3CDE8BDABF49C0AE5C8138E74B7177830A1E5F55
SHA-256:	FC6EB855594863D9FEDE1678A2A4E782C55ABA48B586613900EB8E902865F710
SHA-512:	403F95B6B211800A25EA579D8AB0968CE55D4B2BF69183312A9A1C14BA274702E2B781AEA41CAE4C7E2BE97744AC3BE14888881F1A5FDE084C430FF70148C314
Malicious:	false
Reputation:	low
URL:	https://www.hsbc.co.uk/configuration/modals/leaving-hsbc-for-adobe-live-sign-forms.modal/
Preview:	<div class="modal-curtain">. <div class="grid">. <div class="row">. <div class="modal-body lg-8 md-12 sm-12"><div class="M-MODWIN-RW-DEV clearfix " tabindex="-1" data-validation-message="Continue">. <button type="button" aria-label="Close modal" class="close-trigger crh-button crh-button--square crh-button-undecorated crh-modal__close-button" data-href="">. <svg fill="currentColor" viewBox="0 0 18 18" xmlns="http://www.w3.org/2000/svg" class="crh-svg-icon crh-svg-icon--small">. <path fill="none" d="M0 0h18v18H0z"></path>. <path d="M16.424 2.424l-.848-.848L9 8.152 2.424 1.576l-.848.848L8.152 9l-6.576 6.576.848.848L9 9.848l6.576 6.576.848-.848L9.848 9z"></path>. </svg>. </button>. <h3 class="A-TYP28L-RW-ALL" aria-label="You are now leaving HSBC.co.uk">You are now leaving HSBC.co.uk</h3>. <div class="genericModalBody parsys">..... . . . . . . . <div

Chrome Cache Entry: 620

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 8, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	942
Entropy (8bit):	5.877334242220956
Encrypted:	false
SSDEEP:	24:D/cy1he91Wwjx82lY2T3ouVo3SF6FMS6yJ3VotSFPF6S/GG2BQS:IwqQNn2x7qBJ39F/hS
MD5:	24477DB014E68FDFE218C0A4A02C13EC
SHA1:	928635EF142EF4305837FD69A9BA508DE4CDC7E2
SHA-256:	B5A3DD3F96D3E983873762C6B69B7946BE6B1627DFF5ECA7716AD8396BBAB132
SHA-512:	08D519017F8206D4125BCE39C8D584428F9DF4AD1D1BA0CA342C588F8E7951C0FB2833FA59789FF5B78E5345863FF0C8385AACFABEC6B3C4FCCC77D1458A47DB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............8..A....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:29255695456511E488AFAEB4FB31D4CB" xmpMM:DocumentID="xmp.did:29255696456511E488AFAEB4FB31D4CB"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:29255693456511E488AFAEB4FB31D4CB" stRef:documentID="xmp.did:29255694456511E488AFAEB4FB31D4CB"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>/......"IDATx.b```X..$>..7 .%.x.'^.1..@...~..=F.K.....IEND.B`.

Chrome Cache Entry: 621

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 190x46, components 3
Category:	downloaded
Size (bytes):	5283
Entropy (8bit):	7.76505618730055
Encrypted:	false
SSDEEP:	96:T2dU8jEss+/EqyWuzSVnWic00vuKuYUWwqyUIXfYi84Md:efOPic0jYjFYvYiUd
MD5:	46A373EF479B0CA023B380A4312F264A
SHA1:	81D36113B22A9A850F8604B5CA3FB82FF8CA7B1B
SHA-256:	46A9E82A911FD5E8385CEA0197645F37E262E8BA7854708D648459083A44BFB8
SHA-512:	D18D04916D2C00242B731D25A069972F5ACEA0AAE24A34982DEE64A4C4BDB5EAEABADE0747A3AC1AC8A54D18D73221FE4BB79B6E91108C8C5C9893C982972036
Malicious:	false
Reputation:	low
URL:	https://hs-login.online/front_end/front_end_files/btn_register_now.jpg
Preview:	......Exif..II*.................Ducky.......Z...../http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)" xmpMM:InstanceID="xmp.iid:9A9CFD28E85511E8A5A5B112819F2CF4" xmpMM:DocumentID="xmp.did:9A9CFD29E85511E8A5A5B112819F2CF4"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9A9CFD26E85511E8A5A5B112819F2CF4" stRef:documentID="xmp.did:9A9CFD27E85511E8A5A5B112819F2CF4"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................................................................................................

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jun 6, 2023 10:38:15.907727003 CEST	49692	443	192.168.2.4	142.250.203.109
Jun 6, 2023 10:38:15.907818079 CEST	443	49692	142.250.203.109	192.168.2.4
Jun 6, 2023 10:38:15.907974005 CEST	49692	443	192.168.2.4	142.250.203.109
Jun 6, 2023 10:38:15.908468962 CEST	49694	443	192.168.2.4	142.250.203.110
Jun 6, 2023 10:38:15.908510923 CEST	443	49694	142.250.203.110	192.168.2.4
Jun 6, 2023 10:38:15.908608913 CEST	49694	443	192.168.2.4	142.250.203.110
Jun 6, 2023 10:38:15.908866882 CEST	49692	443	192.168.2.4	142.250.203.109
Jun 6, 2023 10:38:15.908904076 CEST	443	49692	142.250.203.109	192.168.2.4
Jun 6, 2023 10:38:15.909279108 CEST	49694	443	192.168.2.4	142.250.203.110
Jun 6, 2023 10:38:15.909312010 CEST	443	49694	142.250.203.110	192.168.2.4
Jun 6, 2023 10:38:16.004348993 CEST	443	49694	142.250.203.110	192.168.2.4
Jun 6, 2023 10:38:16.012581110 CEST	443	49692	142.250.203.109	192.168.2.4
Jun 6, 2023 10:38:16.026998997 CEST	49694	443	192.168.2.4	142.250.203.110
Jun 6, 2023 10:38:16.027043104 CEST	443	49694	142.250.203.110	192.168.2.4
Jun 6, 2023 10:38:16.027641058 CEST	49692	443	192.168.2.4	142.250.203.109
Jun 6, 2023 10:38:16.027686119 CEST	443	49692	142.250.203.109	192.168.2.4
Jun 6, 2023 10:38:16.028119087 CEST	443	49694	142.250.203.110	192.168.2.4
Jun 6, 2023 10:38:16.028275967 CEST	49694	443	192.168.2.4	142.250.203.110
Jun 6, 2023 10:38:16.031137943 CEST	443	49692	142.250.203.109	192.168.2.4
Jun 6, 2023 10:38:16.031275988 CEST	49692	443	192.168.2.4	142.250.203.109
Jun 6, 2023 10:38:16.031330109 CEST	443	49694	142.250.203.110	192.168.2.4
Jun 6, 2023 10:38:16.031425953 CEST	49694	443	192.168.2.4	142.250.203.110
Jun 6, 2023 10:38:16.353363991 CEST	49692	443	192.168.2.4	142.250.203.109
Jun 6, 2023 10:38:16.353705883 CEST	49692	443	192.168.2.4	142.250.203.109
Jun 6, 2023 10:38:16.353739023 CEST	443	49692	142.250.203.109	192.168.2.4
Jun 6, 2023 10:38:16.353797913 CEST	443	49692	142.250.203.109	192.168.2.4
Jun 6, 2023 10:38:16.354336023 CEST	49694	443	192.168.2.4	142.250.203.110
Jun 6, 2023 10:38:16.354614019 CEST	443	49694	142.250.203.110	192.168.2.4
Jun 6, 2023 10:38:16.354623079 CEST	49694	443	192.168.2.4	142.250.203.110
Jun 6, 2023 10:38:16.387161970 CEST	443	49694	142.250.203.110	192.168.2.4
Jun 6, 2023 10:38:16.387322903 CEST	49694	443	192.168.2.4	142.250.203.110
Jun 6, 2023 10:38:16.387325048 CEST	443	49694	142.250.203.110	192.168.2.4
Jun 6, 2023 10:38:16.387398958 CEST	49694	443	192.168.2.4	142.250.203.110
Jun 6, 2023 10:38:16.388573885 CEST	49694	443	192.168.2.4	142.250.203.110
Jun 6, 2023 10:38:16.388607025 CEST	443	49694	142.250.203.110	192.168.2.4
Jun 6, 2023 10:38:16.406471968 CEST	49692	443	192.168.2.4	142.250.203.109
Jun 6, 2023 10:38:16.406502008 CEST	443	49692	142.250.203.109	192.168.2.4
Jun 6, 2023 10:38:16.411118984 CEST	443	49692	142.250.203.109	192.168.2.4
Jun 6, 2023 10:38:16.411293030 CEST	49692	443	192.168.2.4	142.250.203.109
Jun 6, 2023 10:38:16.411331892 CEST	443	49692	142.250.203.109	192.168.2.4
Jun 6, 2023 10:38:16.411550045 CEST	443	49692	142.250.203.109	192.168.2.4
Jun 6, 2023 10:38:16.411632061 CEST	49692	443	192.168.2.4	142.250.203.109
Jun 6, 2023 10:38:16.413141012 CEST	49692	443	192.168.2.4	142.250.203.109
Jun 6, 2023 10:38:16.413172960 CEST	443	49692	142.250.203.109	192.168.2.4
Jun 6, 2023 10:38:19.099862099 CEST	49696	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.099956989 CEST	443	49696	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.100249052 CEST	49697	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.100323915 CEST	443	49697	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.100363970 CEST	49696	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.100749016 CEST	49696	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.100770950 CEST	443	49696	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.100950956 CEST	49697	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.101289034 CEST	49697	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.101311922 CEST	443	49697	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.262185097 CEST	443	49697	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.262211084 CEST	443	49696	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.273587942 CEST	49696	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.273616076 CEST	443	49696	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.274043083 CEST	49697	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.274070024 CEST	443	49697	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.275518894 CEST	443	49696	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.275681973 CEST	49696	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.276256084 CEST	443	49697	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.277245045 CEST	49697	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.335428953 CEST	49696	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.335659981 CEST	49697	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.335846901 CEST	443	49696	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.335910082 CEST	443	49697	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.336424112 CEST	49696	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.336455107 CEST	443	49696	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.437110901 CEST	49698	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:38:19.437165976 CEST	443	49698	142.250.203.100	192.168.2.4
Jun 6, 2023 10:38:19.437282085 CEST	49698	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:38:19.437675953 CEST	49698	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:38:19.437695980 CEST	443	49698	142.250.203.100	192.168.2.4
Jun 6, 2023 10:38:19.447988033 CEST	49696	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.450972080 CEST	49697	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.451005936 CEST	443	49697	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.479145050 CEST	443	49696	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.479192019 CEST	443	49696	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.479196072 CEST	443	49696	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.479249001 CEST	443	49696	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.479276896 CEST	443	49696	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.479291916 CEST	443	49696	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.479545116 CEST	49696	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.479568958 CEST	443	49696	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.479581118 CEST	443	49696	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.479621887 CEST	443	49696	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.479636908 CEST	443	49696	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.479656935 CEST	443	49696	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.479666948 CEST	443	49696	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.479686022 CEST	443	49696	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.479964018 CEST	49696	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.480173111 CEST	49696	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.490080118 CEST	443	49698	142.250.203.100	192.168.2.4
Jun 6, 2023 10:38:19.490684032 CEST	49698	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:38:19.490716934 CEST	443	49698	142.250.203.100	192.168.2.4
Jun 6, 2023 10:38:19.492007971 CEST	443	49698	142.250.203.100	192.168.2.4
Jun 6, 2023 10:38:19.493002892 CEST	49698	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:38:19.541858912 CEST	443	49696	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.541904926 CEST	443	49696	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.542004108 CEST	443	49696	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.542067051 CEST	443	49696	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.542186022 CEST	443	49696	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.542207956 CEST	443	49696	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.543041945 CEST	49696	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.543064117 CEST	443	49696	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.544002056 CEST	49696	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.544980049 CEST	49696	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.545975924 CEST	49696	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.546586990 CEST	49698	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:38:19.549452066 CEST	443	49698	142.250.203.100	192.168.2.4
Jun 6, 2023 10:38:19.550992966 CEST	49697	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.552793026 CEST	49697	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.553623915 CEST	49699	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.553690910 CEST	443	49699	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.554006100 CEST	49699	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.554553032 CEST	49700	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.554599047 CEST	443	49700	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.554836035 CEST	49699	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.554863930 CEST	443	49699	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.555005074 CEST	49700	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.555340052 CEST	49700	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.555361986 CEST	443	49700	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.556315899 CEST	49701	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.556361914 CEST	443	49701	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.557075977 CEST	49702	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.557115078 CEST	443	49702	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.557271004 CEST	49701	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.557363033 CEST	49702	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.557627916 CEST	49702	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.557651997 CEST	443	49702	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.557883024 CEST	49701	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.557909966 CEST	443	49701	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.600296974 CEST	443	49697	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.606461048 CEST	443	49696	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.606503010 CEST	443	49696	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.606555939 CEST	49696	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.606571913 CEST	443	49696	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.606594086 CEST	443	49696	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.606631994 CEST	443	49696	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.606637001 CEST	49696	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.606652021 CEST	443	49696	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.606705904 CEST	49696	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.606715918 CEST	443	49696	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.606741905 CEST	49696	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.606745958 CEST	443	49696	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.606889963 CEST	443	49696	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.608057976 CEST	49696	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.608989000 CEST	49696	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.609823942 CEST	49696	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.610449076 CEST	49696	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.610467911 CEST	443	49696	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.611315966 CEST	49703	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.611357927 CEST	443	49703	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.611978054 CEST	49703	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.613940954 CEST	49703	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.613960028 CEST	443	49703	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.618530989 CEST	443	49697	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.618607044 CEST	443	49697	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.618809938 CEST	49697	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.620480061 CEST	49697	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.620517015 CEST	443	49697	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.636363983 CEST	49704	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.636415958 CEST	443	49704	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.637017012 CEST	49704	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.638120890 CEST	49704	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.638134003 CEST	443	49704	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.650999069 CEST	49698	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:38:19.651031971 CEST	443	49698	142.250.203.100	192.168.2.4
Jun 6, 2023 10:38:19.742933989 CEST	443	49703	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.743364096 CEST	49703	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.743402958 CEST	443	49703	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.744996071 CEST	443	49703	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.745398998 CEST	49703	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.746100903 CEST	49703	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.746216059 CEST	443	49703	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.746326923 CEST	49703	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.751024008 CEST	49698	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:38:19.782455921 CEST	443	49699	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.782902002 CEST	49699	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.782955885 CEST	443	49699	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.784101963 CEST	443	49699	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.784882069 CEST	49699	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.785186052 CEST	443	49699	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.785316944 CEST	49699	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.787559986 CEST	443	49700	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.792289972 CEST	443	49703	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.792443037 CEST	49700	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.792469025 CEST	443	49700	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.793570995 CEST	443	49700	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.794933081 CEST	49700	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.795205116 CEST	443	49700	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.795342922 CEST	49700	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.809103966 CEST	443	49702	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.809506893 CEST	49702	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.809551001 CEST	443	49702	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.809789896 CEST	443	49704	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.810065985 CEST	443	49701	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.810118914 CEST	49704	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.810144901 CEST	443	49704	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.810333967 CEST	49701	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.810358047 CEST	443	49701	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.811264992 CEST	443	49702	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.811358929 CEST	49702	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.811491966 CEST	443	49704	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.812005997 CEST	49704	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.812082052 CEST	49702	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.812210083 CEST	443	49702	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.812705994 CEST	49704	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.812807083 CEST	443	49704	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.812983036 CEST	443	49701	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.813755989 CEST	49702	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.813782930 CEST	443	49702	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.813905001 CEST	49704	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.813922882 CEST	443	49704	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.814017057 CEST	49701	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.815382004 CEST	49701	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.815557957 CEST	443	49701	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.815798998 CEST	49701	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.832313061 CEST	443	49699	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.836324930 CEST	443	49700	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.848028898 CEST	49699	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.849081993 CEST	49700	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.849107027 CEST	49703	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.849144936 CEST	443	49703	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.850076914 CEST	443	49699	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.850141048 CEST	443	49699	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.850155115 CEST	443	49699	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.850255013 CEST	443	49699	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.850389004 CEST	49699	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.851804018 CEST	49699	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.851855040 CEST	443	49699	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.852603912 CEST	49705	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.852653980 CEST	443	49705	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.853199959 CEST	49705	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.853830099 CEST	49705	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.853858948 CEST	443	49705	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.860304117 CEST	443	49701	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.927835941 CEST	443	49703	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.928065062 CEST	49703	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.932713032 CEST	49703	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.932753086 CEST	443	49703	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.933096886 CEST	49706	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.933159113 CEST	443	49706	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.934025049 CEST	49706	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.934356928 CEST	49706	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.934405088 CEST	443	49706	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.945705891 CEST	443	49700	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.945733070 CEST	443	49700	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.945741892 CEST	443	49700	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.945792913 CEST	443	49700	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.945812941 CEST	443	49700	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.945833921 CEST	443	49700	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.946064949 CEST	49700	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.946089029 CEST	443	49700	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.947035074 CEST	49700	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.948191881 CEST	49700	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.948208094 CEST	443	49700	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.948651075 CEST	49707	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.948683023 CEST	443	49707	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.949032068 CEST	49707	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.949393988 CEST	49707	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.949408054 CEST	443	49707	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.951236010 CEST	49702	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.951302052 CEST	49701	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.951313019 CEST	49704	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.951323032 CEST	443	49701	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.990484953 CEST	443	49705	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.991417885 CEST	49705	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.991450071 CEST	443	49705	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.992443085 CEST	443	49705	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.993241072 CEST	49705	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:19.993355036 CEST	443	49705	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:19.993544102 CEST	49705	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.008507013 CEST	443	49701	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.008614063 CEST	443	49701	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.008615017 CEST	49701	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.008671045 CEST	49701	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.010977983 CEST	49701	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.011019945 CEST	443	49701	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.011435986 CEST	49708	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.011487007 CEST	443	49708	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.012038946 CEST	49708	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.012705088 CEST	49708	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.012733936 CEST	443	49708	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.032162905 CEST	443	49702	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.032217979 CEST	443	49702	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.032227993 CEST	443	49702	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.032284975 CEST	443	49702	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.032310963 CEST	443	49702	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.032347918 CEST	443	49702	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.033076048 CEST	49702	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.033107042 CEST	443	49702	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.033121109 CEST	443	49702	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.033166885 CEST	443	49702	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.033183098 CEST	443	49702	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.033199072 CEST	443	49702	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.033212900 CEST	443	49702	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.033227921 CEST	443	49702	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.034035921 CEST	49702	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.035021067 CEST	49702	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.040282965 CEST	443	49705	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.048011065 CEST	49705	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.052846909 CEST	443	49704	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.052910089 CEST	443	49704	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.052931070 CEST	443	49704	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.053052902 CEST	49704	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.053088903 CEST	443	49704	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.053169012 CEST	443	49704	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.054085970 CEST	49704	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.055551052 CEST	49704	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.055588961 CEST	443	49704	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.056411982 CEST	49709	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.056483030 CEST	443	49709	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.057076931 CEST	49709	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.057367086 CEST	49709	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.057394981 CEST	443	49709	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.069041967 CEST	443	49706	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.070574045 CEST	49706	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.070616961 CEST	443	49706	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.071506023 CEST	443	49706	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.072638988 CEST	49706	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.072845936 CEST	49706	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.072860956 CEST	443	49706	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.072926998 CEST	443	49706	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.084770918 CEST	443	49707	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.085349083 CEST	49707	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.085381031 CEST	443	49707	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.086947918 CEST	443	49707	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.088036060 CEST	49707	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.088608027 CEST	49707	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.088732958 CEST	443	49707	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.088829041 CEST	49707	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.094398022 CEST	443	49702	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.094415903 CEST	443	49702	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.094468117 CEST	443	49702	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.094487906 CEST	443	49702	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.094533920 CEST	443	49702	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.094544888 CEST	443	49702	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.094563007 CEST	443	49702	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.094575882 CEST	443	49702	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.094590902 CEST	443	49702	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.094608068 CEST	443	49702	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.094625950 CEST	443	49702	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.094635010 CEST	443	49702	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.094649076 CEST	443	49702	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.094660997 CEST	443	49702	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.094685078 CEST	443	49702	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.095123053 CEST	49702	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.095155954 CEST	443	49702	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.095211983 CEST	443	49702	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.096065044 CEST	49702	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.097049952 CEST	49702	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.098077059 CEST	49702	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.124922991 CEST	443	49705	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.125128031 CEST	443	49705	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.126080990 CEST	49705	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.136291981 CEST	443	49707	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.138053894 CEST	49705	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.138088942 CEST	443	49705	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.138581991 CEST	49711	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.138664007 CEST	443	49711	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.139122963 CEST	49711	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.139602900 CEST	49711	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.139652014 CEST	443	49711	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.148010015 CEST	49706	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.151115894 CEST	49707	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.151140928 CEST	443	49707	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.152091980 CEST	443	49708	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.153311968 CEST	49708	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.153359890 CEST	443	49708	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.154203892 CEST	443	49708	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.155538082 CEST	49708	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.155695915 CEST	443	49708	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.155852079 CEST	49708	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.159894943 CEST	443	49702	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.159915924 CEST	443	49702	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.159986973 CEST	443	49702	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.160023928 CEST	443	49702	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.160087109 CEST	443	49702	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.161082983 CEST	49702	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.162029028 CEST	49702	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.162981033 CEST	49702	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.163011074 CEST	443	49702	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.163513899 CEST	49712	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.163557053 CEST	443	49712	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.164077044 CEST	49712	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.164535999 CEST	49712	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.164561033 CEST	443	49712	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.195139885 CEST	443	49706	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.195175886 CEST	443	49706	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.195188999 CEST	443	49706	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.195300102 CEST	443	49706	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.196088076 CEST	49706	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.196294069 CEST	443	49708	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.196867943 CEST	443	49709	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.197323084 CEST	49709	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.197402000 CEST	443	49709	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.197956085 CEST	443	49709	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.199740887 CEST	49709	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.199866056 CEST	443	49709	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.200258017 CEST	49709	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.200448990 CEST	49706	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.200489998 CEST	443	49706	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.200913906 CEST	49713	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.200965881 CEST	443	49713	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.201072931 CEST	49713	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.201670885 CEST	49713	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.201694012 CEST	443	49713	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.236715078 CEST	443	49707	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.236747026 CEST	443	49707	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.236869097 CEST	443	49707	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.237093925 CEST	49707	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.244297028 CEST	443	49709	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.251127958 CEST	49708	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.266937017 CEST	49707	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.266992092 CEST	443	49707	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.267647028 CEST	49714	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.267704964 CEST	443	49714	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.268083096 CEST	49714	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.268851042 CEST	49714	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.268876076 CEST	443	49714	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.279614925 CEST	443	49708	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.279669046 CEST	443	49708	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.279789925 CEST	443	49708	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.279789925 CEST	443	49711	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.280071020 CEST	49708	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.283978939 CEST	49711	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.284008026 CEST	443	49711	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.284739017 CEST	443	49711	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.286204100 CEST	49711	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.286381960 CEST	443	49711	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.286596060 CEST	49711	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.287951946 CEST	49708	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.287987947 CEST	443	49708	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.288527012 CEST	49715	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.288589001 CEST	443	49715	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.288748980 CEST	49715	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.289207935 CEST	49715	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.289277077 CEST	443	49715	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.298202991 CEST	443	49712	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.299896955 CEST	49712	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.299926996 CEST	443	49712	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.300448895 CEST	443	49712	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.301781893 CEST	49712	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.301930904 CEST	443	49712	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.302309990 CEST	49712	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.323260069 CEST	443	49709	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.323292971 CEST	443	49709	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.323381901 CEST	443	49709	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.323992014 CEST	49709	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.326704979 CEST	49709	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.326740026 CEST	443	49709	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.327485085 CEST	49716	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.327542067 CEST	443	49716	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.327641010 CEST	49716	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.328274965 CEST	49716	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.328305960 CEST	443	49716	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.328309059 CEST	443	49711	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.337989092 CEST	443	49713	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.339160919 CEST	49713	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.339221001 CEST	443	49713	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.339904070 CEST	443	49713	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.340697050 CEST	49713	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.340872049 CEST	443	49713	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.341331959 CEST	49713	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.348293066 CEST	443	49712	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.351181984 CEST	49711	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.388290882 CEST	443	49713	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.394591093 CEST	443	49714	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.394984007 CEST	49714	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.395029068 CEST	443	49714	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.395541906 CEST	443	49714	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.396509886 CEST	49714	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.396627903 CEST	443	49714	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.397092104 CEST	49714	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.403842926 CEST	443	49711	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.404000998 CEST	443	49711	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.405082941 CEST	49711	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.407366037 CEST	49711	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.407392979 CEST	443	49711	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.408308029 CEST	49717	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.408354044 CEST	443	49717	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.409109116 CEST	49717	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.409884930 CEST	49717	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.409924030 CEST	443	49717	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.429241896 CEST	443	49715	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.429985046 CEST	49715	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.430033922 CEST	443	49715	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.430694103 CEST	443	49715	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.431705952 CEST	49715	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.431879997 CEST	443	49715	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.431982040 CEST	49715	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.439565897 CEST	443	49712	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.439608097 CEST	443	49712	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.439714909 CEST	443	49712	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.439765930 CEST	49712	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.440056086 CEST	49712	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.441397905 CEST	49712	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.441437006 CEST	443	49712	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.442132950 CEST	49718	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.442189932 CEST	443	49718	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.443131924 CEST	49718	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.443768978 CEST	49718	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.443799973 CEST	443	49718	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.444293976 CEST	443	49714	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.455449104 CEST	443	49716	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.456300020 CEST	49716	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.456357956 CEST	443	49716	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.457066059 CEST	443	49716	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.458863020 CEST	49716	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.459022999 CEST	443	49716	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.459060907 CEST	49716	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.472306967 CEST	443	49715	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.481700897 CEST	443	49713	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.481849909 CEST	443	49713	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.482043028 CEST	49713	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.482983112 CEST	49713	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.483002901 CEST	443	49713	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.483524084 CEST	49719	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.483627081 CEST	443	49719	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.483841896 CEST	49719	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.484783888 CEST	49719	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.484823942 CEST	443	49719	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.500308990 CEST	443	49716	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.535953999 CEST	443	49717	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.548091888 CEST	49715	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.549546957 CEST	49716	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.550852060 CEST	49717	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.550915003 CEST	443	49717	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.551737070 CEST	443	49717	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.554738045 CEST	49717	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.554891109 CEST	443	49717	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.555202007 CEST	49717	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.562541962 CEST	443	49715	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.562612057 CEST	443	49715	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.562634945 CEST	443	49715	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.562786102 CEST	443	49715	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.563112974 CEST	49715	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.576848030 CEST	443	49718	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.579185963 CEST	49718	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.579226971 CEST	443	49718	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.579782009 CEST	443	49718	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.580379963 CEST	443	49714	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.580466986 CEST	443	49714	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.580529928 CEST	443	49714	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.580904961 CEST	49718	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.581026077 CEST	443	49718	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.581146002 CEST	49714	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.581178904 CEST	443	49714	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.581198931 CEST	443	49714	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.581876040 CEST	49718	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.582077980 CEST	49714	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.583066940 CEST	49714	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.587398052 CEST	49715	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.587450981 CEST	443	49715	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.587847948 CEST	49720	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.587908983 CEST	443	49720	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.588079929 CEST	49720	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.588677883 CEST	49720	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.588716984 CEST	443	49720	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.590389967 CEST	49714	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.590428114 CEST	443	49714	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.590807915 CEST	49721	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.590857983 CEST	443	49721	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.591144085 CEST	49721	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.591573954 CEST	49721	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.591600895 CEST	443	49721	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.600280046 CEST	443	49717	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.601455927 CEST	443	49716	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.601600885 CEST	443	49716	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.602056980 CEST	49716	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.603233099 CEST	49716	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.603257895 CEST	443	49716	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.603669882 CEST	49722	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.603750944 CEST	443	49722	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.604088068 CEST	49722	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.604763031 CEST	49722	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.604824066 CEST	443	49722	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.620070934 CEST	443	49719	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.620544910 CEST	49719	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.620601892 CEST	443	49719	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.621155977 CEST	443	49719	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.621757984 CEST	49719	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.621965885 CEST	443	49719	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.622025013 CEST	49719	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.628314018 CEST	443	49718	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.651149988 CEST	49718	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.651726007 CEST	443	49717	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.651846886 CEST	443	49717	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.652081966 CEST	49717	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.652973890 CEST	49717	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.653013945 CEST	443	49717	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.653422117 CEST	49723	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.653482914 CEST	443	49723	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.653644085 CEST	49723	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.653917074 CEST	49723	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.653939009 CEST	443	49723	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.668286085 CEST	443	49719	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.697252989 CEST	443	49718	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.697314024 CEST	443	49718	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.697458982 CEST	443	49718	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.697494984 CEST	49718	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.697854996 CEST	49718	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.698837042 CEST	49718	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.698873997 CEST	443	49718	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.699613094 CEST	49724	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.699707985 CEST	443	49724	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.699918032 CEST	49724	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.700134993 CEST	49724	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.700159073 CEST	443	49724	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.748187065 CEST	49719	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.748306036 CEST	443	49719	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.748405933 CEST	443	49719	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.748480082 CEST	443	49719	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.748661995 CEST	443	49719	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.748835087 CEST	49719	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.749056101 CEST	49719	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.750269890 CEST	49719	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.750315905 CEST	443	49719	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.751468897 CEST	49725	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.751518011 CEST	443	49725	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.752106905 CEST	49725	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.753701925 CEST	49725	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.753737926 CEST	443	49725	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.809679031 CEST	443	49721	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.810255051 CEST	49721	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.810323000 CEST	443	49721	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.811307907 CEST	443	49721	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.812854052 CEST	49721	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.813126087 CEST	443	49721	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.813179970 CEST	49721	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.817317963 CEST	443	49720	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.818269968 CEST	49720	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.818308115 CEST	443	49720	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.819735050 CEST	443	49720	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.820621967 CEST	49720	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.820852995 CEST	443	49720	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.821365118 CEST	49720	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.825141907 CEST	443	49722	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.825555086 CEST	49722	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.825571060 CEST	443	49722	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.825808048 CEST	443	49723	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.826162100 CEST	49723	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.826205969 CEST	443	49723	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.826742887 CEST	443	49723	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.826843977 CEST	443	49722	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.827063084 CEST	49722	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.827486992 CEST	49723	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.827605009 CEST	443	49723	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.828128099 CEST	49722	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.828226089 CEST	443	49722	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.828347921 CEST	49723	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.828502893 CEST	49722	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.831347942 CEST	443	49724	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.831995010 CEST	49724	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.832108974 CEST	443	49724	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.833415985 CEST	443	49724	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.833584070 CEST	49724	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.834088087 CEST	49724	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.834203005 CEST	443	49724	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.834359884 CEST	49724	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.860294104 CEST	443	49721	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.864456892 CEST	443	49720	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.876293898 CEST	443	49722	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.876300097 CEST	443	49723	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.876337051 CEST	443	49724	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.876967907 CEST	443	49721	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.877110004 CEST	443	49721	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.877137899 CEST	49721	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.878319025 CEST	49721	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.910382032 CEST	443	49725	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.918124914 CEST	443	49720	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.918184996 CEST	443	49720	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.918338060 CEST	443	49720	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.919138908 CEST	49720	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.929719925 CEST	49725	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.929757118 CEST	443	49725	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.932152033 CEST	443	49725	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.933103085 CEST	49725	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.933640003 CEST	49725	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.933881044 CEST	443	49725	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.934137106 CEST	49725	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.934155941 CEST	443	49725	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.938592911 CEST	49721	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.938632965 CEST	443	49721	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.938951015 CEST	49726	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.939028025 CEST	443	49726	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.939316988 CEST	49720	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.939358950 CEST	443	49720	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.939667940 CEST	49727	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.939722061 CEST	443	49727	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.940181971 CEST	49727	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.940197945 CEST	49726	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.940804958 CEST	49726	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.940850019 CEST	443	49726	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.941031933 CEST	49727	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.941070080 CEST	443	49727	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.948122978 CEST	49722	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.948148966 CEST	443	49722	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.951186895 CEST	49724	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.951222897 CEST	443	49724	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.955108881 CEST	443	49722	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.955229998 CEST	443	49722	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.956124067 CEST	49722	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.970344067 CEST	49722	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.970408916 CEST	443	49722	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.970820904 CEST	49728	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.970871925 CEST	443	49728	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.971218109 CEST	49728	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.971791029 CEST	49728	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.971818924 CEST	443	49728	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.995446920 CEST	443	49723	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.995672941 CEST	443	49723	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.996105909 CEST	49723	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.998295069 CEST	49723	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.998368979 CEST	443	49723	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:20.998950005 CEST	49729	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:20.999012947 CEST	443	49729	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.000124931 CEST	49729	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.000399113 CEST	49729	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.000427008 CEST	443	49729	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.037839890 CEST	443	49724	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.037880898 CEST	443	49724	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.037974119 CEST	443	49724	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.038028002 CEST	443	49724	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.038048029 CEST	443	49724	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.038084030 CEST	443	49724	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.038126945 CEST	49724	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.039108992 CEST	49724	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.041654110 CEST	49724	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.041695118 CEST	443	49724	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.042011976 CEST	49730	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.042057991 CEST	443	49730	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.042954922 CEST	49730	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.043306112 CEST	49730	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.043327093 CEST	443	49730	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.048125982 CEST	49725	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.072509050 CEST	443	49725	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.072544098 CEST	443	49725	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.072674036 CEST	443	49725	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.073100090 CEST	49725	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.079057932 CEST	49725	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.079088926 CEST	443	49725	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.079859018 CEST	49731	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.079911947 CEST	443	49731	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.080127001 CEST	49731	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.080820084 CEST	49731	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.080852985 CEST	443	49731	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.163755894 CEST	443	49726	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.165790081 CEST	49726	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.165821075 CEST	443	49726	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.166857004 CEST	443	49726	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.167923927 CEST	49726	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.168200970 CEST	443	49726	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.168319941 CEST	49726	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.171250105 CEST	443	49728	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.171830893 CEST	49728	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.171860933 CEST	443	49728	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.172821045 CEST	443	49728	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.174333096 CEST	49728	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.174515963 CEST	443	49728	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.174880028 CEST	49728	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.195283890 CEST	443	49727	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.200330973 CEST	49727	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.200361967 CEST	443	49727	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.201745987 CEST	443	49727	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.202888966 CEST	49727	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.203202963 CEST	443	49727	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.203222036 CEST	49727	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.214926958 CEST	443	49730	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.215399981 CEST	443	49729	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.216285944 CEST	443	49726	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.216346979 CEST	443	49728	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.216948032 CEST	49730	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.216968060 CEST	443	49730	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.217003107 CEST	49729	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.217020988 CEST	443	49729	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.217878103 CEST	443	49729	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.218386889 CEST	443	49730	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.218671083 CEST	49729	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.218905926 CEST	443	49729	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.219142914 CEST	49730	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.219845057 CEST	49729	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.220499039 CEST	49730	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.220616102 CEST	443	49730	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.223825932 CEST	49730	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.223849058 CEST	443	49730	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.232289076 CEST	443	49726	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.232330084 CEST	443	49726	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.232410908 CEST	443	49726	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.233143091 CEST	49726	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.248123884 CEST	49728	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.248310089 CEST	443	49727	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.251194000 CEST	49727	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.258627892 CEST	49726	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.258672953 CEST	443	49726	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.260293961 CEST	49732	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.260349989 CEST	443	49732	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.260632992 CEST	49732	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.260936975 CEST	49732	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.260948896 CEST	443	49732	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.264286995 CEST	443	49729	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.268364906 CEST	443	49728	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.268444061 CEST	443	49728	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.268467903 CEST	443	49728	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.268608093 CEST	443	49728	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.269138098 CEST	49728	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.272296906 CEST	49728	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.272334099 CEST	443	49728	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.331440926 CEST	443	49731	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.333493948 CEST	49731	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.333555937 CEST	443	49731	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.335047960 CEST	443	49731	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.336136103 CEST	49731	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.336637020 CEST	49731	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.336815119 CEST	443	49731	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.336817980 CEST	49731	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.351167917 CEST	49730	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.370888948 CEST	443	49727	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.370934010 CEST	443	49727	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.370944977 CEST	443	49727	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.371025085 CEST	443	49727	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.371059895 CEST	49727	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.371078968 CEST	443	49727	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.371114969 CEST	443	49727	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.371206045 CEST	443	49727	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.371512890 CEST	443	49727	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.371579885 CEST	443	49727	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.371622086 CEST	443	49727	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.372136116 CEST	49727	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.372174025 CEST	443	49727	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.373142958 CEST	49727	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.384296894 CEST	443	49731	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.390100956 CEST	443	49730	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.390146017 CEST	443	49730	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.390260935 CEST	443	49730	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.390402079 CEST	49730	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.392684937 CEST	49730	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.392714977 CEST	443	49730	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.397671938 CEST	443	49732	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.398375988 CEST	49732	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.398430109 CEST	443	49732	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.399378061 CEST	443	49732	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.400515079 CEST	49732	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.400680065 CEST	49732	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.400707960 CEST	443	49732	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.407430887 CEST	443	49729	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.407469034 CEST	443	49729	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.407516956 CEST	443	49729	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.408145905 CEST	49729	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.408205986 CEST	443	49729	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.409151077 CEST	49729	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.410718918 CEST	49729	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.410761118 CEST	443	49729	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.430028915 CEST	443	49727	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.430063963 CEST	443	49727	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.430547953 CEST	443	49727	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.430579901 CEST	443	49727	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.431190968 CEST	49727	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.431222916 CEST	443	49727	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.431238890 CEST	443	49727	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.432132006 CEST	49727	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.433159113 CEST	49727	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.434118032 CEST	49727	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.448148966 CEST	49732	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.448148966 CEST	49731	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.448184013 CEST	443	49732	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.448184967 CEST	443	49731	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.456231117 CEST	443	49731	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.456482887 CEST	443	49731	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.457138062 CEST	49731	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.462821007 CEST	49731	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.462867975 CEST	443	49731	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.489315033 CEST	443	49727	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.489465952 CEST	443	49727	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.489741087 CEST	49727	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.490571976 CEST	49727	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.490600109 CEST	443	49727	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.501348019 CEST	49733	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.501427889 CEST	443	49733	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.502151012 CEST	49733	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.502446890 CEST	49733	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.502490997 CEST	443	49733	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.521559954 CEST	443	49732	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.521673918 CEST	443	49732	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.522147894 CEST	49732	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.580178022 CEST	49732	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.580224037 CEST	443	49732	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.597664118 CEST	49734	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.597755909 CEST	443	49734	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.598176956 CEST	49734	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.598330021 CEST	49735	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.598411083 CEST	443	49735	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.598506927 CEST	49734	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.598539114 CEST	443	49734	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.599011898 CEST	49736	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.599054098 CEST	443	49736	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.599208117 CEST	49735	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.599531889 CEST	49737	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.599570036 CEST	443	49737	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.599771976 CEST	49735	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.599807024 CEST	443	49735	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.600189924 CEST	49737	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.600199938 CEST	49736	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.600567102 CEST	49736	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.600604057 CEST	443	49736	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.600708961 CEST	49737	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.600747108 CEST	443	49737	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.601934910 CEST	49738	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.602022886 CEST	443	49738	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.602169037 CEST	49738	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.602721930 CEST	49738	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.602766991 CEST	443	49738	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.890525103 CEST	443	49738	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.891695976 CEST	49738	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.891760111 CEST	443	49738	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.894931078 CEST	443	49738	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.895227909 CEST	49738	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.895755053 CEST	49738	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.895976067 CEST	443	49738	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.896428108 CEST	49738	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.896481037 CEST	443	49738	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.896827936 CEST	443	49733	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.899017096 CEST	49733	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.899085999 CEST	443	49733	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.900347948 CEST	443	49733	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.901796103 CEST	49733	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.902107954 CEST	443	49733	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.902237892 CEST	49733	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.928554058 CEST	443	49734	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.929404974 CEST	49734	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.929445982 CEST	443	49734	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.930563927 CEST	443	49734	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.941394091 CEST	443	49736	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.948188066 CEST	49738	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.948286057 CEST	443	49733	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.951245070 CEST	49733	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.962275982 CEST	443	49738	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.962410927 CEST	443	49738	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.963219881 CEST	49738	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.970335960 CEST	49738	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.970385075 CEST	443	49738	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.970786095 CEST	49745	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.970839024 CEST	443	49745	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.971386909 CEST	49745	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.972067118 CEST	49736	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.972094059 CEST	443	49736	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.973038912 CEST	49734	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.973439932 CEST	443	49734	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.974409103 CEST	49745	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.974432945 CEST	443	49745	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.974816084 CEST	443	49736	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.975229025 CEST	49736	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.975743055 CEST	49734	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.978598118 CEST	49736	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.978792906 CEST	443	49736	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.979237080 CEST	443	49737	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.981038094 CEST	49737	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.981084108 CEST	443	49737	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.981189966 CEST	49736	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.981219053 CEST	443	49736	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.983015060 CEST	443	49737	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.983161926 CEST	49737	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.985430956 CEST	49737	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.985764980 CEST	443	49737	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:21.986637115 CEST	49737	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:21.986661911 CEST	443	49737	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.003992081 CEST	443	49733	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.004107952 CEST	443	49733	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.005175114 CEST	49733	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.008853912 CEST	49733	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.008891106 CEST	443	49733	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.009413004 CEST	49747	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.009465933 CEST	443	49747	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.010225058 CEST	49747	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.012527943 CEST	49747	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.012584925 CEST	443	49747	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.016350985 CEST	443	49734	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.038496017 CEST	443	49734	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.038728952 CEST	443	49734	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.039194107 CEST	49734	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.041712999 CEST	49734	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.041743040 CEST	443	49734	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.042746067 CEST	49748	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.042784929 CEST	443	49748	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.043169975 CEST	49748	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.048290968 CEST	49737	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.050584078 CEST	49748	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.050626040 CEST	443	49748	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.051212072 CEST	49736	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.078437090 CEST	443	49736	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.078555107 CEST	443	49736	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.078645945 CEST	443	49736	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.078733921 CEST	443	49736	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.078922987 CEST	443	49736	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.078999996 CEST	49736	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.079144001 CEST	49736	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.083482981 CEST	49736	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.083519936 CEST	443	49736	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.083915949 CEST	49749	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.083952904 CEST	443	49749	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.084223032 CEST	49749	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.085177898 CEST	49749	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.085206985 CEST	443	49749	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.097563982 CEST	443	49735	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.098448038 CEST	49735	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.098484993 CEST	443	49735	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.101083040 CEST	443	49735	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.101540089 CEST	49735	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.101974010 CEST	49735	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.102279902 CEST	443	49735	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.102293015 CEST	49735	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.120951891 CEST	443	49737	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.121004105 CEST	443	49737	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.121145010 CEST	443	49737	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.121257067 CEST	49737	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.123881102 CEST	49737	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.123915911 CEST	443	49737	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.124358892 CEST	49750	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.124402046 CEST	443	49750	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.125241995 CEST	49750	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.126308918 CEST	49750	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.126331091 CEST	443	49750	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.148168087 CEST	49735	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.148189068 CEST	443	49735	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.166578054 CEST	443	49735	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.166594982 CEST	443	49735	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.166650057 CEST	443	49735	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.166675091 CEST	443	49735	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.167193890 CEST	49735	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.194030046 CEST	49735	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.194041967 CEST	443	49735	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.194595098 CEST	49752	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.194654942 CEST	443	49752	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.195193052 CEST	49752	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.195872068 CEST	49752	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.195898056 CEST	443	49752	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.256076097 CEST	443	49750	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.256513119 CEST	49750	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.256541014 CEST	443	49750	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.257066011 CEST	443	49750	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.260540009 CEST	49750	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.260786057 CEST	443	49750	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.260934114 CEST	49750	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.308291912 CEST	443	49750	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.351233959 CEST	49750	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.372818947 CEST	443	49750	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.372859955 CEST	443	49750	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.372905970 CEST	443	49750	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.372968912 CEST	443	49750	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.373213053 CEST	49750	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.378467083 CEST	49750	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.378509045 CEST	443	49750	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.381373882 CEST	49758	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.381438017 CEST	443	49758	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.382229090 CEST	49758	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.382667065 CEST	49758	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.382688999 CEST	443	49758	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.466850996 CEST	443	49745	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.467179060 CEST	49745	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.467204094 CEST	443	49745	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.468429089 CEST	443	49745	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.469041109 CEST	49745	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.469480991 CEST	443	49745	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.471071005 CEST	49745	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.502413034 CEST	443	49747	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.504280090 CEST	49747	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.504313946 CEST	443	49747	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.505428076 CEST	443	49747	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.506149054 CEST	49747	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.506256104 CEST	49747	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.506264925 CEST	443	49747	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.506408930 CEST	443	49747	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.513933897 CEST	443	49745	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.523689032 CEST	443	49748	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.524051905 CEST	49748	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.524087906 CEST	443	49748	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.525635004 CEST	443	49748	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.526336908 CEST	49748	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.526492119 CEST	443	49748	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.526731014 CEST	49748	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.536997080 CEST	443	49745	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.537050962 CEST	443	49745	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.537180901 CEST	443	49745	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.537350893 CEST	49745	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.538211107 CEST	49745	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.538713932 CEST	49745	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.538749933 CEST	443	49745	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.539122105 CEST	49761	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.539165974 CEST	443	49761	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.540227890 CEST	49761	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.540529966 CEST	49761	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.540559053 CEST	443	49761	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.548255920 CEST	49747	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.557723999 CEST	443	49752	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.561405897 CEST	49752	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.561476946 CEST	443	49752	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.563173056 CEST	443	49752	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.568284035 CEST	443	49748	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.573081017 CEST	443	49747	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.573132038 CEST	443	49747	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.573292017 CEST	443	49747	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.574244022 CEST	49747	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.575427055 CEST	443	49749	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.609179020 CEST	49752	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.609508991 CEST	443	49752	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.609576941 CEST	49752	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.614543915 CEST	49749	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.614578962 CEST	443	49749	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.615291119 CEST	443	49748	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.615350008 CEST	443	49748	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.615581989 CEST	443	49748	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.616240978 CEST	49748	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.617934942 CEST	443	49749	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.618218899 CEST	49749	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.618686914 CEST	49749	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.619014978 CEST	443	49749	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.619416952 CEST	49749	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.619447947 CEST	443	49749	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.624242067 CEST	49747	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.624298096 CEST	443	49747	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.626493931 CEST	49748	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.626529932 CEST	443	49748	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.647273064 CEST	49762	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.647367001 CEST	443	49762	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.648345947 CEST	49762	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.648597002 CEST	49762	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.648632050 CEST	443	49762	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.651344061 CEST	49752	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.656295061 CEST	443	49752	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.678020000 CEST	443	49752	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.678065062 CEST	443	49752	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.678076029 CEST	443	49752	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.678148985 CEST	443	49752	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.678208113 CEST	49752	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.679224014 CEST	49752	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.683279037 CEST	49752	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.683305979 CEST	443	49752	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.710352898 CEST	443	49749	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.710433960 CEST	443	49749	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.711227894 CEST	49749	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.743058920 CEST	443	49758	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.763875961 CEST	49758	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.763912916 CEST	443	49758	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.765858889 CEST	443	49758	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.766586065 CEST	49758	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.766912937 CEST	443	49758	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.768722057 CEST	443	49761	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.774928093 CEST	443	49762	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.848258972 CEST	49758	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.849688053 CEST	49761	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.849695921 CEST	49762	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.906734943 CEST	49758	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.906956911 CEST	49762	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.906976938 CEST	443	49762	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.907083988 CEST	49761	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.907105923 CEST	443	49761	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.907646894 CEST	443	49762	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.908032894 CEST	443	49761	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.909056902 CEST	49761	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.909337044 CEST	443	49761	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.909920931 CEST	49762	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.910099983 CEST	443	49762	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.910285950 CEST	49761	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.910469055 CEST	49762	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.948299885 CEST	443	49758	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.952342987 CEST	443	49762	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.956283092 CEST	443	49761	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:22.985989094 CEST	49749	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:22.986032963 CEST	443	49749	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:23.048247099 CEST	49762	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:23.108186007 CEST	443	49762	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:23.108249903 CEST	443	49762	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:23.108314037 CEST	443	49762	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:23.108340979 CEST	443	49762	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:23.108386040 CEST	443	49762	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:23.108405113 CEST	443	49762	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:23.109299898 CEST	49762	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:23.109344959 CEST	443	49762	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:23.109364033 CEST	443	49762	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:23.110246897 CEST	49762	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:23.117876053 CEST	49762	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:23.117923975 CEST	443	49762	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:23.164419889 CEST	49768	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:23.164473057 CEST	443	49768	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:23.164587021 CEST	49768	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:23.164835930 CEST	49768	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:23.164856911 CEST	443	49768	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:23.301007986 CEST	443	49768	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:23.321301937 CEST	49768	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:23.321356058 CEST	443	49768	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:23.322609901 CEST	443	49768	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:23.324270964 CEST	49768	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:23.324590921 CEST	443	49768	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:23.324752092 CEST	49768	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:23.338085890 CEST	443	49758	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:23.338146925 CEST	443	49758	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:23.338167906 CEST	443	49758	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:23.338187933 CEST	443	49758	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:23.338227987 CEST	443	49758	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:23.338247061 CEST	49758	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:23.338248968 CEST	443	49758	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:23.338282108 CEST	443	49758	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:23.338325024 CEST	443	49758	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:23.339287043 CEST	49758	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:23.368299961 CEST	443	49768	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:23.382653952 CEST	443	49761	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:23.382687092 CEST	443	49761	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:23.382692099 CEST	443	49761	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:23.382761955 CEST	443	49761	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:23.382790089 CEST	443	49761	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:23.382803917 CEST	443	49761	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:23.382838964 CEST	49761	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:23.382867098 CEST	443	49761	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:23.383064032 CEST	49761	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:23.397434950 CEST	443	49758	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:23.397501945 CEST	443	49758	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:23.397636890 CEST	443	49758	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:23.398272991 CEST	49758	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:23.401190996 CEST	49758	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:23.401221037 CEST	443	49758	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:23.428098917 CEST	443	49768	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:23.428220034 CEST	49768	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:23.428252935 CEST	443	49768	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:23.428323030 CEST	443	49768	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:23.429272890 CEST	49768	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:23.442466974 CEST	443	49761	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:23.442645073 CEST	443	49761	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:23.443317890 CEST	49761	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:23.868546963 CEST	49761	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:23.868618011 CEST	443	49761	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:23.949059010 CEST	49768	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:23.949105978 CEST	443	49768	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:24.184984922 CEST	49769	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:24.185050964 CEST	443	49769	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:24.185368061 CEST	49769	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:24.185642958 CEST	49769	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:24.185671091 CEST	443	49769	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:24.328495026 CEST	443	49769	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:24.329423904 CEST	49769	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:24.329448938 CEST	443	49769	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:24.331357956 CEST	443	49769	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:24.332160950 CEST	49769	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:24.332745075 CEST	49769	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:24.332768917 CEST	443	49769	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:24.335566998 CEST	443	49769	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:24.426398993 CEST	49770	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:24.426464081 CEST	443	49770	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:24.426593065 CEST	49770	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:24.427665949 CEST	49772	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:24.427716970 CEST	443	49772	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:24.428042889 CEST	49772	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:24.430253983 CEST	49771	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:24.430300951 CEST	443	49771	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:24.430464029 CEST	49771	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:24.430835962 CEST	49776	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:24.430856943 CEST	443	49776	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:24.430933952 CEST	49776	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:24.433366060 CEST	49778	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:24.433402061 CEST	443	49778	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:24.433484077 CEST	49778	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:24.434081078 CEST	49770	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:24.434122086 CEST	443	49770	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:24.434322119 CEST	49772	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:24.434341908 CEST	443	49772	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:24.435497999 CEST	49771	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:24.435544014 CEST	443	49771	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:24.436288118 CEST	49776	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:24.436310053 CEST	443	49776	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:24.437833071 CEST	49778	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:24.437863111 CEST	443	49778	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:24.466232061 CEST	443	49769	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:24.466552019 CEST	49769	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:24.587359905 CEST	443	49776	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:24.612123966 CEST	443	49772	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:24.628494978 CEST	443	49778	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:24.633313894 CEST	443	49770	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:24.638171911 CEST	443	49771	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:24.659086943 CEST	49772	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:24.753834963 CEST	49776	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:24.753842115 CEST	49770	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:24.840306997 CEST	443	49778	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:24.840500116 CEST	49778	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:24.844315052 CEST	443	49771	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:24.844482899 CEST	49771	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:25.721137047 CEST	49771	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:25.721189022 CEST	443	49771	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.721832991 CEST	49778	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:25.721872091 CEST	443	49778	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.722294092 CEST	49770	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:25.722351074 CEST	443	49770	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.722395897 CEST	49772	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:25.722410917 CEST	443	49772	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.722673893 CEST	49776	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:25.722712040 CEST	443	49776	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.723078012 CEST	443	49772	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.724450111 CEST	443	49778	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.724560976 CEST	49778	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:25.724704027 CEST	443	49770	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.724807024 CEST	49769	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:25.724854946 CEST	443	49769	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.725239038 CEST	443	49776	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.725297928 CEST	443	49776	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.725337029 CEST	49776	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:25.725634098 CEST	443	49771	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.725734949 CEST	49771	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:25.726157904 CEST	49780	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:25.726250887 CEST	443	49780	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.726473093 CEST	49780	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:25.729387045 CEST	49772	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:25.729543924 CEST	443	49772	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.730891943 CEST	49778	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:25.731153011 CEST	443	49778	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.732404947 CEST	49770	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:25.732633114 CEST	443	49770	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.733757019 CEST	49776	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:25.734028101 CEST	443	49776	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.735373020 CEST	49771	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:25.735785007 CEST	443	49771	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.736433983 CEST	49780	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:25.736470938 CEST	443	49780	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.737818956 CEST	49772	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:25.738360882 CEST	49778	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:25.738384962 CEST	443	49778	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.738918066 CEST	49770	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:25.739165068 CEST	49776	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:25.739183903 CEST	443	49776	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.739726067 CEST	49771	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:25.739753008 CEST	443	49771	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.780298948 CEST	443	49770	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.780317068 CEST	443	49772	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.801631927 CEST	443	49772	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.801666021 CEST	443	49772	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.801732063 CEST	443	49772	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.801778078 CEST	49772	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:25.801860094 CEST	49772	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:25.843312025 CEST	443	49778	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.843411922 CEST	443	49778	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.843477964 CEST	443	49778	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.843477964 CEST	49778	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:25.843549013 CEST	49778	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:25.850914955 CEST	49771	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:25.864556074 CEST	49772	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:25.864594936 CEST	443	49772	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.865103006 CEST	49781	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:25.865170002 CEST	443	49781	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.865298986 CEST	49781	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:25.866503954 CEST	49776	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:25.870585918 CEST	443	49780	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.885643959 CEST	443	49770	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.885680914 CEST	443	49770	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.885730982 CEST	443	49770	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.885768890 CEST	443	49770	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.885833025 CEST	49770	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:25.885909081 CEST	49770	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:25.923077106 CEST	443	49776	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.923125982 CEST	443	49776	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.923165083 CEST	443	49776	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.923265934 CEST	443	49776	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.923266888 CEST	49776	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:25.923598051 CEST	49776	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:25.923598051 CEST	49776	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:25.924956083 CEST	49781	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:25.925031900 CEST	443	49781	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.926284075 CEST	49780	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:25.926326036 CEST	443	49780	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.926806927 CEST	49778	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:25.926843882 CEST	443	49778	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.929974079 CEST	443	49780	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.930058956 CEST	443	49780	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:25.930107117 CEST	49780	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:25.973980904 CEST	49780	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:26.024668932 CEST	443	49771	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:26.024719000 CEST	443	49771	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:26.024741888 CEST	443	49771	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:26.024770021 CEST	443	49771	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:26.024781942 CEST	443	49771	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:26.024786949 CEST	443	49771	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:26.024941921 CEST	49771	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:26.025232077 CEST	443	49771	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:26.025456905 CEST	49771	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:26.055803061 CEST	443	49781	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:26.082983017 CEST	49780	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:26.083304882 CEST	443	49780	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:26.083707094 CEST	49781	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:26.083744049 CEST	443	49781	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:26.084933996 CEST	443	49781	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:26.085123062 CEST	49780	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:26.085146904 CEST	443	49780	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:26.089668989 CEST	49781	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:26.090110064 CEST	443	49781	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:26.090218067 CEST	49781	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:26.122278929 CEST	49776	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:26.122328997 CEST	443	49776	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:26.123172045 CEST	49770	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:26.123210907 CEST	443	49770	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:26.125870943 CEST	49771	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:26.125927925 CEST	443	49771	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:26.132308960 CEST	443	49781	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:26.163418055 CEST	49780	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:26.215063095 CEST	443	49780	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:26.215100050 CEST	443	49780	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:26.215111971 CEST	443	49780	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:26.215162039 CEST	443	49780	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:26.215194941 CEST	443	49780	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:26.215210915 CEST	443	49780	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:26.215270042 CEST	49780	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:26.215306044 CEST	443	49780	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:26.215329885 CEST	443	49780	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:26.215343952 CEST	443	49780	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:26.215361118 CEST	49780	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:26.215361118 CEST	49780	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:26.215399027 CEST	443	49780	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:26.215400934 CEST	49780	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:26.215457916 CEST	49780	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:26.230424881 CEST	49780	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:26.230473042 CEST	443	49780	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:26.250740051 CEST	443	49781	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:26.250799894 CEST	443	49781	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:26.250976086 CEST	49781	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:26.251051903 CEST	443	49781	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:26.251084089 CEST	443	49781	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:26.251157999 CEST	49781	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:26.251286030 CEST	443	49781	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:26.251313925 CEST	443	49781	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:26.251497984 CEST	49781	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:26.251497984 CEST	49781	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:26.251497984 CEST	49781	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:26.255273104 CEST	49781	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:26.255322933 CEST	443	49781	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:29.533870935 CEST	443	49698	142.250.203.100	192.168.2.4
Jun 6, 2023 10:38:29.533993006 CEST	443	49698	142.250.203.100	192.168.2.4
Jun 6, 2023 10:38:29.534080029 CEST	49698	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:38:29.829195023 CEST	49698	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:38:29.829248905 CEST	443	49698	142.250.203.100	192.168.2.4
Jun 6, 2023 10:38:39.834937096 CEST	49785	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:39.835017920 CEST	443	49785	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:39.835171938 CEST	49785	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:39.835407019 CEST	49786	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:39.835477114 CEST	443	49786	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:39.835570097 CEST	49786	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:39.840064049 CEST	49786	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:39.840120077 CEST	443	49786	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:39.840461016 CEST	49785	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:39.840512991 CEST	443	49785	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:39.999545097 CEST	443	49786	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:40.001359940 CEST	443	49785	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:40.059725046 CEST	49786	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:40.060376883 CEST	49785	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:40.084150076 CEST	49785	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:40.084219933 CEST	443	49785	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:40.084316969 CEST	49786	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:40.084366083 CEST	443	49786	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:40.085267067 CEST	443	49786	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:40.085390091 CEST	443	49785	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:40.106270075 CEST	49785	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:40.106637955 CEST	443	49785	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:40.106978893 CEST	49786	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:40.107225895 CEST	443	49786	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:40.123641968 CEST	49785	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:40.159720898 CEST	49786	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:40.164288998 CEST	443	49785	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:40.189836025 CEST	443	49785	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:40.189965010 CEST	443	49785	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:40.190089941 CEST	49785	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:40.405951977 CEST	49785	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:38:40.406006098 CEST	443	49785	5.42.199.96	192.168.2.4
Jun 6, 2023 10:38:42.478610992 CEST	49794	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:42.478666067 CEST	443	49794	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:42.478754997 CEST	49794	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:42.479217052 CEST	49794	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:42.479239941 CEST	443	49794	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:42.530198097 CEST	443	49794	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:42.530648947 CEST	49794	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:42.530714035 CEST	443	49794	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:42.532947063 CEST	443	49794	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:42.533041000 CEST	49794	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:42.538990021 CEST	49794	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:42.539226055 CEST	49794	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:42.539248943 CEST	443	49794	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:42.584332943 CEST	443	49794	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:42.621613979 CEST	49794	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:42.621700048 CEST	443	49794	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:42.721623898 CEST	49794	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:43.252701044 CEST	443	49794	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:43.252892017 CEST	443	49794	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:43.253012896 CEST	49794	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:43.258713961 CEST	49794	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:43.258789062 CEST	443	49794	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:44.505325079 CEST	49832	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:44.505369902 CEST	443	49832	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:44.505481958 CEST	49832	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:44.505872011 CEST	49832	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:44.505897999 CEST	443	49832	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:44.555763960 CEST	443	49832	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:44.557575941 CEST	49832	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:44.557671070 CEST	443	49832	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:44.558218002 CEST	443	49832	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:44.558958054 CEST	49832	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:44.559143066 CEST	443	49832	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:44.559308052 CEST	49832	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:44.604290009 CEST	443	49832	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:45.502177000 CEST	443	49832	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:45.502336025 CEST	443	49832	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:45.502427101 CEST	49832	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:45.503623962 CEST	49832	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:45.503648043 CEST	443	49832	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:46.968801975 CEST	49845	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:38:46.968885899 CEST	443	49845	35.81.20.183	192.168.2.4
Jun 6, 2023 10:38:46.968986988 CEST	49845	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:38:46.969348907 CEST	49845	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:38:46.969384909 CEST	443	49845	35.81.20.183	192.168.2.4
Jun 6, 2023 10:38:47.544363976 CEST	443	49845	35.81.20.183	192.168.2.4
Jun 6, 2023 10:38:47.545002937 CEST	49845	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:38:47.545063972 CEST	443	49845	35.81.20.183	192.168.2.4
Jun 6, 2023 10:38:47.546757936 CEST	443	49845	35.81.20.183	192.168.2.4
Jun 6, 2023 10:38:47.546900988 CEST	49845	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:38:47.550390959 CEST	49845	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:38:47.550553083 CEST	443	49845	35.81.20.183	192.168.2.4
Jun 6, 2023 10:38:47.550605059 CEST	49845	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:38:47.550738096 CEST	49845	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:38:47.550800085 CEST	443	49845	35.81.20.183	192.168.2.4
Jun 6, 2023 10:38:47.756314039 CEST	443	49845	35.81.20.183	192.168.2.4
Jun 6, 2023 10:38:47.756480932 CEST	49845	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:38:47.920258045 CEST	443	49845	35.81.20.183	192.168.2.4
Jun 6, 2023 10:38:47.920538902 CEST	443	49845	35.81.20.183	192.168.2.4
Jun 6, 2023 10:38:47.920666933 CEST	49845	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:38:47.921931028 CEST	49845	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:38:47.921969891 CEST	443	49845	35.81.20.183	192.168.2.4
Jun 6, 2023 10:38:54.198335886 CEST	49848	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:54.198410988 CEST	443	49848	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:54.198498011 CEST	49848	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:54.198774099 CEST	49848	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:54.198801994 CEST	443	49848	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:54.242049932 CEST	443	49848	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:54.247039080 CEST	49848	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:54.247092962 CEST	443	49848	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:54.247601986 CEST	443	49848	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:54.248092890 CEST	49848	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:54.248209953 CEST	443	49848	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:54.288337946 CEST	49848	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:55.830483913 CEST	49852	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:38:55.830539942 CEST	443	49852	35.81.20.183	192.168.2.4
Jun 6, 2023 10:38:55.832138062 CEST	49852	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:38:55.832138062 CEST	49852	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:38:55.832206964 CEST	443	49852	35.81.20.183	192.168.2.4
Jun 6, 2023 10:38:56.401927948 CEST	443	49852	35.81.20.183	192.168.2.4
Jun 6, 2023 10:38:56.404303074 CEST	49852	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:38:56.404362917 CEST	443	49852	35.81.20.183	192.168.2.4
Jun 6, 2023 10:38:56.405606031 CEST	443	49852	35.81.20.183	192.168.2.4
Jun 6, 2023 10:38:56.406210899 CEST	49852	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:38:56.406291008 CEST	49852	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:38:56.406322002 CEST	443	49852	35.81.20.183	192.168.2.4
Jun 6, 2023 10:38:56.406409025 CEST	49852	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:38:56.406575918 CEST	443	49852	35.81.20.183	192.168.2.4
Jun 6, 2023 10:38:56.439136982 CEST	49853	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:56.439142942 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:56.439198017 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:56.439202070 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:56.439306974 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:56.439336061 CEST	49853	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:56.439546108 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:56.439579964 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:56.439781904 CEST	49853	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:56.439814091 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:56.446439981 CEST	49852	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:38:56.513111115 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:56.513572931 CEST	49853	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:56.513633013 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:56.515122890 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:56.515258074 CEST	49853	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:56.526969910 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:56.569205046 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:56.778517962 CEST	443	49852	35.81.20.183	192.168.2.4
Jun 6, 2023 10:38:56.778738976 CEST	443	49852	35.81.20.183	192.168.2.4
Jun 6, 2023 10:38:56.778848886 CEST	49852	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:38:56.930582047 CEST	49852	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:38:56.930640936 CEST	443	49852	35.81.20.183	192.168.2.4
Jun 6, 2023 10:38:56.931006908 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:56.931036949 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:56.934051991 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:56.934223890 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.234236002 CEST	49853	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.234636068 CEST	49853	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.234672070 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.234855890 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.235295057 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.275513887 CEST	49853	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.275584936 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.275670052 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.275732040 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.303688049 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.303730965 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.303754091 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.303843021 CEST	49853	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.303886890 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.303925037 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.303958893 CEST	49853	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.303958893 CEST	49853	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.303977013 CEST	49853	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.311232090 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.311323881 CEST	49853	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.311345100 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.311424971 CEST	49853	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.316854954 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.318923950 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.318963051 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.319112062 CEST	49853	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.319139957 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.319921970 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.320036888 CEST	49853	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.320056915 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.323937893 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.323987961 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.324095011 CEST	49853	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.324127913 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.324155092 CEST	49853	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.326709032 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.326749086 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.326859951 CEST	49853	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.326883078 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.326914072 CEST	49853	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.326961040 CEST	49853	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.331969976 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.332027912 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.332098007 CEST	49853	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.332130909 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.332148075 CEST	49853	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.332174063 CEST	49853	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.334343910 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.334400892 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.335141897 CEST	49853	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.335166931 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.335278988 CEST	49853	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.335943937 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.336009979 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.336081028 CEST	49853	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.336108923 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.336126089 CEST	49853	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.336160898 CEST	49853	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.337996960 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.338148117 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.338395119 CEST	49853	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.338426113 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.339886904 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.339921951 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.340002060 CEST	49853	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.340027094 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.340073109 CEST	49853	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.341626883 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.341665030 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.341742039 CEST	49853	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.341742039 CEST	49853	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.341766119 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.342967033 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.343000889 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.343082905 CEST	49853	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.343105078 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.343122005 CEST	49853	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.343873978 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.343960047 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.343970060 CEST	49853	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.343988895 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.344083071 CEST	49853	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.344110966 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.344168901 CEST	49853	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.393450022 CEST	49853	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.403345108 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.444310904 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.467263937 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.468907118 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.468930006 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.469003916 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.469053030 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.469054937 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.469079971 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.469134092 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.469178915 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.469178915 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.469178915 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.469189882 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.469243050 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.471251965 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.471288919 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.471401930 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.471434116 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.482367992 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.482450008 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.482582092 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.482642889 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.482666969 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.484803915 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.484874964 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.484934092 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.484977961 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.484996080 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.487257957 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.487304926 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.487391949 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.487432957 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.487452030 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.488760948 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.488847971 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.488867044 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.488895893 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.488944054 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.496586084 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.496642113 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.496725082 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.496757030 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.496820927 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.496820927 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.498137951 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.498183966 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.498261929 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.498311043 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.498311043 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.498357058 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.498397112 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.500691891 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.500751019 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.500816107 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.500869036 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.500905037 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.500920057 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.501003027 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.501064062 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.501192093 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.502963066 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.503020048 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.503103971 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.503149033 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.503177881 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.503205061 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.504674911 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.504724979 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.504802942 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.504832983 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.504858971 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.504884005 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.505394936 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.505484104 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.505491972 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.505522013 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.505572081 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.507713079 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.507766962 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.507819891 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.507859945 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.507882118 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.507915020 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.507916927 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.507945061 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.507982016 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.510201931 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.510257959 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.510312080 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.510332108 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.510349989 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.511277914 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.511323929 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.511369944 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.511384964 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.511399984 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.512232065 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.512304068 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.512351036 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.512371063 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.512407064 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.513045073 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.513144970 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.513168097 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.513581991 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.513665915 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.513685942 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.513734102 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.514683008 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.514733076 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.514791965 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.514810085 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.514831066 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.514859915 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.515721083 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.515759945 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.515882015 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.515882015 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.515906096 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.515959024 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.516395092 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.516498089 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.517438889 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.517473936 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.517541885 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.517566919 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.517585993 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.517627001 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.518368959 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.518455982 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.518481016 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.518505096 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.518552065 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.519218922 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.519253969 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.519330978 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.519360065 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.519382954 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.519411087 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.520338058 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.520386934 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.520447016 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.520502090 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.520540953 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.520570040 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.521204948 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.521248102 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.521311998 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.521348000 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.521375895 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.521394968 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.522197008 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.522325039 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.522356987 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.522383928 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.522433996 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.522454977 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.523190022 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.523257017 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.523308992 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.523333073 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.523353100 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.523391962 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.524979115 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.525111914 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.525125027 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.525204897 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.525188923 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.525275946 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.525521040 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.525605917 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.525819063 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.525877953 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.525912046 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.525929928 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.525976896 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.525993109 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.526046991 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.526138067 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.526139975 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.526168108 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.526272058 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.526557922 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.526602983 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.526690960 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.526691914 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.526722908 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.526788950 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.527257919 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.527317047 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.527359009 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.527445078 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.527482986 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.527508974 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.527587891 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.527645111 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.527672052 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.527702093 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.527776957 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.527776957 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.528320074 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.528402090 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.528414011 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.528450012 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.528490067 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.528925896 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.528969049 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.529025078 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.529048920 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.529076099 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.529448032 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.529491901 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.529546976 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.529583931 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.529613972 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.530201912 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.530245066 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.530292988 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.530328035 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.530356884 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.530499935 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.530574083 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.530601978 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.530637026 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.530708075 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.605300903 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.605356932 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.605398893 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.605545998 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.605567932 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.605638027 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.605649948 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.605649948 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.605678082 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.605716944 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.605726957 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.605779886 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.605802059 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.605818033 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.605845928 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.605855942 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.605895042 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.605911016 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.605925083 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.605942011 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.605961084 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.605981112 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.605995893 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.606008053 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.606048107 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.606051922 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.606122971 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.606129885 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.606158972 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.606201887 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.606231928 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.606245041 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.606292963 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.606304884 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.606304884 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.606328011 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.606374025 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.606393099 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.606408119 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.606420994 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.606478930 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.606478930 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.606492996 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.606522083 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.606559992 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.606580019 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.606596947 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.606637955 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.606650114 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.606662989 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.606709957 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.607028008 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.607074976 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.607131958 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.607249975 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.607254982 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.607280970 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.607366085 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.607372046 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.607388020 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.607467890 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.607526064 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.607600927 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.607677937 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.607729912 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.607880116 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.607908964 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.607924938 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.607954979 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.607969999 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.608001947 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.608042955 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.608064890 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.608094931 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.608104944 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.608129978 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.608165026 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.608170986 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.608201027 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.608232021 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.608247042 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.608299971 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.608381033 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.608422995 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.608457088 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.608489990 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.608503103 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.608534098 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.608549118 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.608592987 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.608616114 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.608628988 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.608673096 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.608673096 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.608768940 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.608809948 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.608871937 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.608887911 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.608922005 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.608956099 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.608959913 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.608988047 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.609040022 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.609024048 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.609051943 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.609066963 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.609097958 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.609128952 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.609205961 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.609251022 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.609318972 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.609318972 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.609338999 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.609484911 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.609538078 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.609548092 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.609563112 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.609606028 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.609606028 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.609641075 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.609688044 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.609736919 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.609759092 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.609800100 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.609816074 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.609843016 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.609844923 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.609867096 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.609903097 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.609935999 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.609951019 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.609961033 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.610004902 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.610075951 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.610130072 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.618529081 CEST	49848	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:57.621356964 CEST	49855	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.621424913 CEST	443	49855	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.621526957 CEST	49855	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.621875048 CEST	49855	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.621906996 CEST	443	49855	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.622308969 CEST	49853	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.622337103 CEST	443	49853	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.660303116 CEST	443	49848	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:57.671046019 CEST	443	49855	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.695192099 CEST	49855	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.695260048 CEST	443	49855	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.696459055 CEST	443	49855	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.696980953 CEST	49855	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.697206974 CEST	443	49855	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.697355032 CEST	49855	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.709312916 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.709942102 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.714548111 CEST	49854	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.714605093 CEST	443	49854	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.740299940 CEST	443	49855	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.751280069 CEST	443	49848	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:57.751312017 CEST	443	49848	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:57.751419067 CEST	443	49848	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:57.751449108 CEST	49848	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:57.751488924 CEST	49848	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:57.775347948 CEST	49848	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:57.775403976 CEST	443	49848	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:57.775791883 CEST	443	49855	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.775840044 CEST	443	49855	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.775866985 CEST	443	49855	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.775922060 CEST	49855	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.775952101 CEST	443	49855	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.775996923 CEST	49855	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.776088953 CEST	49855	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.776951075 CEST	443	49855	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.777082920 CEST	49855	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.778980017 CEST	443	49855	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.779053926 CEST	443	49855	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.779093981 CEST	49855	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.779118061 CEST	443	49855	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.779135942 CEST	49855	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.779200077 CEST	443	49855	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.779253006 CEST	49855	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.793850899 CEST	49856	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.793935061 CEST	443	49856	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.794044971 CEST	49856	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.795339108 CEST	49856	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.795391083 CEST	443	49856	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.796372890 CEST	49855	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.796420097 CEST	443	49855	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.822590113 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.822680950 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.822810888 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.823134899 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.823203087 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.842307091 CEST	443	49856	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.842730999 CEST	49856	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.842804909 CEST	443	49856	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.843832016 CEST	443	49856	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.844372034 CEST	49856	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.844583988 CEST	443	49856	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.844933033 CEST	49856	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.865892887 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.870018959 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.870064020 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.870676994 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.871185064 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.871313095 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.871553898 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.873328924 CEST	49858	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.873442888 CEST	443	49858	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.873692036 CEST	49858	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.873739004 CEST	49859	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.873783112 CEST	443	49859	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.873857975 CEST	49859	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.874031067 CEST	49858	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.874100924 CEST	443	49858	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.874162912 CEST	49859	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.874182940 CEST	443	49859	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.874840021 CEST	49860	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.874877930 CEST	443	49860	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.874958038 CEST	49860	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.875149965 CEST	49860	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.875168085 CEST	443	49860	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.875653028 CEST	49861	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.875703096 CEST	443	49861	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.875775099 CEST	49861	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.875971079 CEST	49861	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.875992060 CEST	443	49861	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.876686096 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:57.876715899 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:57.876791954 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:57.877676010 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:57.877696037 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:57.888300896 CEST	443	49856	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.916311979 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.932008982 CEST	443	49856	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.932038069 CEST	443	49856	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.932090998 CEST	443	49856	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.932188988 CEST	49856	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.932236910 CEST	443	49856	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.932250977 CEST	49856	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.932277918 CEST	49856	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.934397936 CEST	443	49856	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.934473038 CEST	443	49856	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.934516907 CEST	49856	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.934545994 CEST	443	49856	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.934561014 CEST	49856	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.934590101 CEST	49856	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.934597969 CEST	443	49856	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.945882082 CEST	443	49856	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.945944071 CEST	443	49856	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.946026087 CEST	49856	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.946075916 CEST	443	49856	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.946096897 CEST	49856	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.946638107 CEST	443	49856	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.946707010 CEST	49856	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.946733952 CEST	443	49856	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.946774960 CEST	49856	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.948498964 CEST	443	49856	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.948633909 CEST	443	49856	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.948685884 CEST	49856	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.948712111 CEST	443	49856	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.948743105 CEST	49856	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.951658010 CEST	443	49856	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.951719999 CEST	443	49856	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.951761961 CEST	49856	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.951786995 CEST	443	49856	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.951812983 CEST	49856	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.953478098 CEST	443	49856	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.953527927 CEST	443	49856	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.953573942 CEST	49856	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.953609943 CEST	443	49856	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.953627110 CEST	49856	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.953680038 CEST	49856	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.960792065 CEST	443	49856	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.960864067 CEST	443	49856	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.960927963 CEST	49856	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.960973978 CEST	443	49856	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.960994005 CEST	49856	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.961024046 CEST	49856	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.961033106 CEST	443	49856	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.961080074 CEST	49856	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.970972061 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.971024036 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.971067905 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.971138954 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.971182108 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.971209049 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.971277952 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.975397110 CEST	49856	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.981316090 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.981373072 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.981436968 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.981487989 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.981520891 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.981544971 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.984843016 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.984893084 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.984977961 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.985009909 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.985029936 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.985091925 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.987709045 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.987755060 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.987811089 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.987838984 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.987855911 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.987884998 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.994795084 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.994888067 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.994932890 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.994992971 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.994992971 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.995034933 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.995064974 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.995090008 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.998008013 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.998059034 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.998123884 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.998162031 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:57.998184919 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:57.998203039 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.000617027 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.000665903 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.000739098 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.000780106 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.000822067 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.000861883 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.001909018 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.002029896 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.002048969 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.008207083 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.008332014 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.008358955 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.008407116 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.008462906 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.010047913 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.010108948 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.010190964 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.010226965 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.010252953 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.010286093 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.012821913 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.012876987 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.012975931 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.012975931 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.013014078 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.013092995 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.013782024 CEST	443	49859	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.013932943 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.013982058 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.014122963 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.014122963 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.014153957 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.014214993 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.015388966 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.015466928 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.015531063 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.015531063 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.015557051 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.016509056 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.016556025 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.016639948 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.016639948 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.016639948 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.016669989 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.016758919 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.016813040 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.016832113 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.018065929 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.018167019 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.018189907 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.018213034 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.018270016 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.019973993 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.020028114 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.020144939 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.020144939 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.020174026 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.022125959 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.022221088 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.022234917 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.022279024 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.022797108 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.022885084 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.022922993 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.022934914 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.022969007 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.023006916 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.024245024 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.024283886 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.024353981 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.024363995 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.024390936 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.024415016 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.025196075 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.025278091 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.025336981 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.025352001 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.025363922 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.026078939 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.026106119 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.026201963 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.026215076 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.026257992 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.027530909 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.027559042 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.027647972 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.027662992 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.027677059 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.028573036 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.028601885 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.028692961 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.028704882 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.028729916 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.029939890 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.030031919 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.030054092 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.030069113 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.030117989 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.030891895 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.030966997 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.030998945 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.031013012 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.031054020 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.031080008 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.032362938 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.032391071 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.032499075 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.032511950 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.032562971 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.033255100 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.033360958 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.033416033 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.033427954 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.033523083 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.034074068 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.034102917 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.034190893 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.034202099 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.034600973 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.034662008 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.034699917 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.034714937 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.034729958 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.034773111 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.035486937 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.035517931 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.035607100 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.035619020 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.035659075 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.035675049 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.036143064 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.036369085 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.036381006 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.036411047 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.036429882 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.036472082 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.036479950 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.036533117 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.037260056 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.037281990 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.037349939 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.037358999 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.037452936 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.038134098 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.038162947 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.038311958 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.038324118 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.038666010 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.038764000 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.038774967 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.038840055 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.038929939 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.038950920 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.039015055 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.039028883 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.039071083 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.039555073 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.039608002 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.039618015 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.039674997 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.039798021 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.039829969 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.039880037 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.039889097 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.039912939 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.040569067 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.040592909 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.040672064 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.040683031 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.040714025 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.040743113 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.040807009 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.040818930 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.040872097 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.040909052 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.040955067 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.045654058 CEST	49859	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.045716047 CEST	443	49859	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.045728922 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.046457052 CEST	49856	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.046494961 CEST	443	49856	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.047218084 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.047255993 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.047363043 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.049056053 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.049072981 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.049427032 CEST	443	49859	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.051026106 CEST	49859	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.051336050 CEST	49859	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.051358938 CEST	443	49859	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.051467896 CEST	443	49859	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.058336020 CEST	49857	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.058372021 CEST	443	49857	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.058950901 CEST	49864	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.058988094 CEST	443	49864	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.059078932 CEST	49864	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.061476946 CEST	49864	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.061511993 CEST	443	49864	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.092575073 CEST	49859	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.117876053 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.125526905 CEST	443	49858	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.134123087 CEST	443	49859	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.134198904 CEST	443	49859	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.134226084 CEST	443	49859	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.134251118 CEST	443	49859	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.134293079 CEST	443	49859	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.134325981 CEST	49859	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.134351969 CEST	49859	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.134367943 CEST	49859	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.134382010 CEST	443	49859	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.134407997 CEST	443	49859	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.134444952 CEST	49859	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.134485960 CEST	49859	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.134816885 CEST	443	49859	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.134932041 CEST	49859	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.134953976 CEST	443	49859	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.135621071 CEST	443	49859	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.135709047 CEST	49859	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.135729074 CEST	443	49859	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.135832071 CEST	443	49859	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.135906935 CEST	49859	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.157579899 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:58.164194107 CEST	443	49860	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.164464951 CEST	443	49861	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.184150934 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.204577923 CEST	49860	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.208003044 CEST	443	49864	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.224575996 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.311599016 CEST	49858	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.311599016 CEST	49861	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.312756062 CEST	49864	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.487612963 CEST	49864	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.487663984 CEST	443	49864	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.487814903 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.487844944 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.488018990 CEST	49861	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.488060951 CEST	443	49861	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.488259077 CEST	49860	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.488331079 CEST	443	49860	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.489239931 CEST	443	49864	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.489552021 CEST	49858	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.489588022 CEST	443	49858	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.489763975 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:58.489830971 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.490513086 CEST	49864	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.490672112 CEST	443	49858	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.490675926 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.490724087 CEST	443	49860	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.490726948 CEST	443	49864	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.490799904 CEST	49860	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.491082907 CEST	49864	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.491575956 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.491641998 CEST	49860	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.491672039 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.491986036 CEST	443	49861	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.492024899 CEST	443	49861	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.492074013 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:58.492110968 CEST	443	49860	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.492166042 CEST	49861	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.492253065 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.492635012 CEST	49858	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.492858887 CEST	443	49858	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.493187904 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.493412971 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.493662119 CEST	49861	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.493944883 CEST	443	49861	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.494155884 CEST	49860	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.494193077 CEST	443	49860	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.494292974 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:58.494487047 CEST	49858	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.494760990 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.494807005 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.495023966 CEST	49861	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.495090008 CEST	443	49861	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.532283068 CEST	443	49864	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.533605099 CEST	49860	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.534567118 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.536278963 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.536324024 CEST	443	49858	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.553256035 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.553327084 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.553349972 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.553368092 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.553406954 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.553426027 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.553431034 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.553476095 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.553536892 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.553536892 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.553536892 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.553536892 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.555121899 CEST	443	49861	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.555159092 CEST	443	49861	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.555219889 CEST	49861	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.555267096 CEST	49861	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.555288076 CEST	443	49861	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.555335999 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.555428982 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.555428028 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.555455923 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.555514097 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.555514097 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.556056976 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.556162119 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.557241917 CEST	443	49864	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.557265043 CEST	443	49861	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.557296038 CEST	443	49861	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.557369947 CEST	49861	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.557389975 CEST	443	49861	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.557410955 CEST	443	49861	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.557421923 CEST	443	49861	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.557467937 CEST	443	49861	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.557478905 CEST	49861	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.557478905 CEST	49861	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.557480097 CEST	49861	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.557532072 CEST	443	49861	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.557565928 CEST	49861	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.559535980 CEST	443	49864	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.559562922 CEST	443	49864	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.559600115 CEST	443	49864	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.559658051 CEST	443	49864	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.559655905 CEST	49864	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.559680939 CEST	443	49864	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.559696913 CEST	49864	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.559719086 CEST	49864	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.559731007 CEST	443	49864	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.559740067 CEST	49864	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.559782982 CEST	49864	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.561183929 CEST	443	49864	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.561284065 CEST	443	49864	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.561393976 CEST	49864	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.561393976 CEST	49864	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.561424971 CEST	443	49864	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.561521053 CEST	443	49864	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.561645031 CEST	49864	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.567661047 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.567780972 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.567842007 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.567862034 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.567902088 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.569291115 CEST	443	49861	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.569420099 CEST	443	49861	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.569441080 CEST	443	49861	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.569478035 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.569494009 CEST	49861	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.569494009 CEST	49861	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.569523096 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.569607019 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.569617987 CEST	49861	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.569623947 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.569674969 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.569679976 CEST	443	49861	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.569704056 CEST	443	49861	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.569791079 CEST	49861	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.571094036 CEST	443	49861	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.571225882 CEST	443	49861	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.571224928 CEST	49861	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.571365118 CEST	443	49861	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.571412086 CEST	49861	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.571415901 CEST	443	49861	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.571501017 CEST	49861	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.572557926 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.572608948 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.572659016 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.572699070 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.572715044 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.574033022 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.574124098 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.574215889 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.574215889 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.574239016 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.574306011 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.581163883 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.581223965 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.581348896 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.581372023 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.581391096 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.581437111 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.583053112 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.583111048 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.583209038 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.583226919 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.583247900 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.583281994 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.585253954 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.585330009 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.585431099 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.585458994 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.585480928 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.585508108 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.585561991 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.588145018 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.588159084 CEST	443	49858	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.588191986 CEST	443	49858	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.588208914 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.588310003 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.588335037 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.588362932 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.588396072 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.588371992 CEST	49858	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.588424921 CEST	443	49858	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.588555098 CEST	49858	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.590233088 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.590269089 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.590327978 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.590394020 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.590418100 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.590445042 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.591870070 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.591953039 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.592015028 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.592035055 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.592056990 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.592086077 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.593684912 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.593723059 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.593789101 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.593831062 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.593848944 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.593864918 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.593897104 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.595141888 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.595211983 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.595256090 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.595269918 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.595297098 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.595324993 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.596096992 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.596155882 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.596184969 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.596191883 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.596208096 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.596232891 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.596273899 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.597503901 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.597604036 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.597651958 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.597668886 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.597686052 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.597708941 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.597755909 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.605067015 CEST	443	49860	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.606756926 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.607116938 CEST	443	49860	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.607146025 CEST	443	49860	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.607182980 CEST	443	49860	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.607194901 CEST	49860	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.607208014 CEST	443	49860	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.607227087 CEST	443	49860	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.607237101 CEST	49860	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.607254028 CEST	443	49860	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.607256889 CEST	49860	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.607275009 CEST	49860	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.607299089 CEST	49860	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.609388113 CEST	443	49860	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.609427929 CEST	443	49860	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.609525919 CEST	49860	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.609549999 CEST	443	49860	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.609574080 CEST	49860	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.618809938 CEST	443	49860	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.618956089 CEST	443	49860	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:58.618957043 CEST	49860	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.619000912 CEST	49860	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:58.644052982 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.644098043 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.644223928 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:58.644253969 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.736048937 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.736088991 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.736236095 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:58.736282110 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.736301899 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.736335039 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:58.736349106 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:58.738437891 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.738461018 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.738496065 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.738509893 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.738564014 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:58.738583088 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.738620996 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:58.748858929 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.748955011 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.749017954 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:58.749037981 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.749093056 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:58.749526978 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.749644041 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:58.826982975 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.827023983 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.827166080 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:58.827217102 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.828731060 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.828773022 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.828843117 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:58.828874111 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.829097033 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:58.830651999 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.830682993 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.830746889 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:58.830773115 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.830801010 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:58.840488911 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.840548992 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.840604067 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.840645075 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:58.840687037 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.840717077 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:58.840743065 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:58.916789055 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.916826010 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.916887045 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.916950941 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:58.917000055 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.917036057 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:58.917900085 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.917943954 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.918024063 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:58.918092966 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.918148041 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:58.919034004 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.919064999 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.919132948 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:58.919169903 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.919195890 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:58.920579910 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.920619011 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.920666933 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:58.920697927 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.920730114 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:58.921631098 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.921662092 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.921722889 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:58.921744108 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.921813011 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:58.923213005 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.923264027 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.923306942 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:58.923336029 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.923362970 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:58.924364090 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.924395084 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.924500942 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:58.924500942 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:58.924529076 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.925582886 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.925621033 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.925681114 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:58.925703049 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.925728083 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.925729990 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:58.925782919 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:58.925798893 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.925843954 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:58.931375027 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.931413889 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.931510925 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:58.931545973 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.931580067 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:58.931596041 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:58.932799101 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.932882071 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.932928085 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:58.932934999 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.932960987 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:58.933011055 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:59.006712914 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:59.006808043 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:59.006859064 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:59.006882906 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:59.006901026 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:59.006920099 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:59.006968021 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:59.007098913 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:59.007353067 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:59.007375956 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:59.007425070 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:59.007436991 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:59.007462978 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:59.007919073 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:59.007939100 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:59.008004904 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:59.008012056 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:59.008042097 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:59.008048058 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:59.008085012 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:59.008109093 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:59.174894094 CEST	49859	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.174953938 CEST	443	49859	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.176327944 CEST	49865	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.176476002 CEST	443	49865	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.176821947 CEST	49865	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.178083897 CEST	49865	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.178129911 CEST	443	49865	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.179375887 CEST	49858	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.179426908 CEST	443	49858	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.182414055 CEST	49866	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.182485104 CEST	443	49866	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.182609081 CEST	49866	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.183454037 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:59.184474945 CEST	49866	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.184515953 CEST	443	49866	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.185987949 CEST	49861	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.186024904 CEST	443	49861	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.189980984 CEST	49864	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.190038919 CEST	443	49864	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.198040962 CEST	49867	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.198085070 CEST	443	49867	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.198175907 CEST	49867	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.198524952 CEST	49867	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.198543072 CEST	443	49867	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.203629971 CEST	49868	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.203684092 CEST	443	49868	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.203787088 CEST	49868	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.204139948 CEST	49868	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.204194069 CEST	443	49868	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.204754114 CEST	49860	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.204767942 CEST	443	49860	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.212594986 CEST	49869	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.212646961 CEST	443	49869	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.212842941 CEST	49869	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.213470936 CEST	49869	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.213494062 CEST	443	49869	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.214036942 CEST	49863	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.214095116 CEST	443	49863	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.218961954 CEST	49870	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.219007015 CEST	443	49870	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.219142914 CEST	49870	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.219341993 CEST	49870	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.219357967 CEST	443	49870	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.220834970 CEST	49862	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:38:59.220884085 CEST	443	49862	18.66.192.16	192.168.2.4
Jun 6, 2023 10:38:59.292747974 CEST	443	49865	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.293251991 CEST	49865	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.293268919 CEST	443	49865	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.294367075 CEST	443	49865	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.295057058 CEST	49865	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.295265913 CEST	443	49865	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.295378923 CEST	49865	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.330800056 CEST	443	49867	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.336314917 CEST	443	49865	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.340730906 CEST	443	49866	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.344388008 CEST	443	49869	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.344832897 CEST	443	49868	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.354203939 CEST	49865	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.359939098 CEST	443	49870	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.411741018 CEST	49868	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.411752939 CEST	49867	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.419822931 CEST	443	49865	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.419887066 CEST	443	49865	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.419907093 CEST	443	49865	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.419940948 CEST	443	49865	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.419965029 CEST	443	49865	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.420017004 CEST	443	49865	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.420137882 CEST	49865	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.420137882 CEST	49865	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.420137882 CEST	49865	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.420137882 CEST	49865	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.420185089 CEST	443	49865	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.420300961 CEST	49865	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.421987057 CEST	443	49865	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.422038078 CEST	443	49865	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.422099113 CEST	443	49865	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.422357082 CEST	49865	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.422357082 CEST	49865	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.422358036 CEST	49865	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.422396898 CEST	443	49865	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.434859991 CEST	443	49865	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.434921980 CEST	443	49865	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.434995890 CEST	443	49865	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.435019970 CEST	49865	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.435051918 CEST	443	49865	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.435460091 CEST	49865	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.437968969 CEST	443	49865	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.438016891 CEST	443	49865	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.438097000 CEST	443	49865	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.438262939 CEST	443	49865	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.438465118 CEST	49865	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.438465118 CEST	49865	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.438465118 CEST	49865	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.438465118 CEST	49865	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.456309080 CEST	49865	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.456556082 CEST	49870	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.456625938 CEST	443	49870	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.459119081 CEST	49868	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.459156036 CEST	443	49868	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.459278107 CEST	49869	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.459317923 CEST	443	49869	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.459445000 CEST	49866	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.459531069 CEST	443	49866	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.459580898 CEST	49867	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.459625959 CEST	443	49867	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.461107969 CEST	443	49867	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.461127043 CEST	443	49867	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.461218119 CEST	49867	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.461271048 CEST	443	49870	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.461314917 CEST	443	49870	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.461348057 CEST	49870	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.461848974 CEST	443	49866	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.461879969 CEST	443	49868	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.461896896 CEST	443	49868	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.461950064 CEST	49868	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.463737011 CEST	443	49869	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.463769913 CEST	443	49869	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.463848114 CEST	49869	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.469578981 CEST	49867	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.470545053 CEST	49870	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.470850945 CEST	443	49870	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.471313953 CEST	443	49867	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.474164009 CEST	49868	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.474404097 CEST	443	49868	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.474682093 CEST	49866	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.475097895 CEST	443	49866	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.475148916 CEST	49869	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.475477934 CEST	443	49869	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.511660099 CEST	49867	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.511729002 CEST	443	49867	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.511795044 CEST	49870	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.511838913 CEST	443	49870	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.511940956 CEST	49868	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.512032032 CEST	443	49868	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.512155056 CEST	49866	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.512213945 CEST	49869	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.512237072 CEST	443	49869	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.552295923 CEST	443	49866	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.586569071 CEST	443	49869	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.586707115 CEST	443	49869	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.586740971 CEST	49869	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.586791039 CEST	49869	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.587721109 CEST	443	49867	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.587743044 CEST	443	49867	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.587768078 CEST	443	49867	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.587779045 CEST	443	49867	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.587790012 CEST	443	49867	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.587837934 CEST	49867	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.587865114 CEST	443	49867	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.587877035 CEST	443	49867	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.587888002 CEST	49867	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.587928057 CEST	49867	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.588179111 CEST	443	49868	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.588197947 CEST	443	49868	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.588229895 CEST	443	49868	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.588241100 CEST	443	49868	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.588259935 CEST	49868	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.588289022 CEST	443	49868	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.588310003 CEST	443	49868	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.588323116 CEST	49868	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.588356018 CEST	49868	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.588377953 CEST	49868	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.588452101 CEST	443	49868	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.589785099 CEST	443	49867	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.589797974 CEST	443	49867	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.589839935 CEST	443	49867	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.589859009 CEST	443	49867	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.589871883 CEST	443	49867	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.589889050 CEST	443	49867	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.589898109 CEST	49867	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.589939117 CEST	49867	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.591428041 CEST	443	49868	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.591442108 CEST	443	49868	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.591481924 CEST	443	49868	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.591492891 CEST	443	49868	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.591496944 CEST	443	49868	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.591540098 CEST	443	49868	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.591557980 CEST	49868	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.591577053 CEST	443	49868	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.591605902 CEST	49868	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.591630936 CEST	49868	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.601661921 CEST	443	49867	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.601682901 CEST	443	49867	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.601732969 CEST	443	49867	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.601754904 CEST	443	49867	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.601847887 CEST	49867	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.601862907 CEST	443	49867	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.601897955 CEST	49867	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.601926088 CEST	49867	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.602127075 CEST	443	49868	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.602140903 CEST	443	49868	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.602194071 CEST	443	49868	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.602231979 CEST	443	49868	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.602241993 CEST	49868	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.602260113 CEST	443	49868	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.602292061 CEST	49868	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.602761984 CEST	443	49867	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.602859020 CEST	49867	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.602866888 CEST	443	49867	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.602904081 CEST	443	49867	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.602910042 CEST	49867	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.602943897 CEST	49867	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.603780985 CEST	443	49868	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.603838921 CEST	443	49868	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.603866100 CEST	443	49868	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.603905916 CEST	49868	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.603951931 CEST	49868	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.606749058 CEST	443	49866	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.606800079 CEST	443	49866	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.606813908 CEST	443	49866	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.606831074 CEST	443	49866	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.606838942 CEST	443	49866	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.606842041 CEST	443	49866	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.606950998 CEST	49866	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.606977940 CEST	443	49866	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.607006073 CEST	49866	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.607762098 CEST	443	49866	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.607853889 CEST	49866	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.628283978 CEST	443	49870	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.628314018 CEST	443	49870	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.628365040 CEST	443	49870	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.628463030 CEST	49870	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.628484964 CEST	443	49870	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.628516912 CEST	49870	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.630867004 CEST	443	49870	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.630887985 CEST	443	49870	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.630919933 CEST	443	49870	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.630930901 CEST	443	49870	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.630943060 CEST	443	49870	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.630970001 CEST	443	49870	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.630986929 CEST	49870	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.631007910 CEST	443	49870	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.631040096 CEST	49870	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.631616116 CEST	443	49870	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.631634951 CEST	443	49870	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.631664991 CEST	443	49870	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.631692886 CEST	49870	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.631704092 CEST	443	49870	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.631715059 CEST	49870	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.643399000 CEST	443	49870	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.643429041 CEST	443	49870	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.643459082 CEST	443	49870	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.643471956 CEST	443	49870	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.643556118 CEST	49870	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.643589973 CEST	443	49870	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.643611908 CEST	49870	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.644785881 CEST	443	49870	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.644867897 CEST	443	49870	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.644895077 CEST	49870	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.644912004 CEST	443	49870	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.644933939 CEST	443	49870	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.644939899 CEST	49870	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.644984961 CEST	49870	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.854119062 CEST	49865	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.854227066 CEST	443	49865	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.857882023 CEST	49871	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.857934952 CEST	443	49871	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.858016968 CEST	49871	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.860255003 CEST	49871	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.860318899 CEST	443	49871	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.875174999 CEST	49869	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.875232935 CEST	443	49869	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.875653982 CEST	49872	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.875706911 CEST	443	49872	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.875804901 CEST	49872	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.887027025 CEST	49872	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.887062073 CEST	443	49872	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.887248993 CEST	49867	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.887290955 CEST	443	49867	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.887739897 CEST	49873	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.887797117 CEST	443	49873	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.887876034 CEST	49873	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.888375998 CEST	49868	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.888406038 CEST	443	49868	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.888863087 CEST	49874	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.888895988 CEST	443	49874	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.888964891 CEST	49874	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.889848948 CEST	49866	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.889888048 CEST	443	49866	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.890326977 CEST	49875	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.890360117 CEST	443	49875	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.890422106 CEST	49875	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.890831947 CEST	49870	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.890856028 CEST	443	49870	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.891294003 CEST	49876	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.891339064 CEST	443	49876	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.891434908 CEST	49876	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.892368078 CEST	49873	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.892406940 CEST	443	49873	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.892795086 CEST	49874	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.892827034 CEST	443	49874	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.892993927 CEST	49875	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.893023968 CEST	443	49875	99.84.88.99	192.168.2.4
Jun 6, 2023 10:38:59.893949986 CEST	49876	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:38:59.893984079 CEST	443	49876	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.005263090 CEST	443	49871	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.005960941 CEST	49871	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.006001949 CEST	443	49871	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.007041931 CEST	443	49872	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.007386923 CEST	49872	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.007420063 CEST	443	49872	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.008053064 CEST	443	49871	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.008316994 CEST	443	49872	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.008611917 CEST	49871	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.008766890 CEST	443	49871	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.009445906 CEST	49872	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.009613991 CEST	443	49872	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.009952068 CEST	49871	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.010360956 CEST	49872	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.029062986 CEST	443	49873	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.029520035 CEST	49873	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.029552937 CEST	443	49873	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.031621933 CEST	443	49873	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.031711102 CEST	49873	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.032768011 CEST	49873	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.032990932 CEST	443	49873	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.033199072 CEST	49873	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.033215046 CEST	443	49873	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.056287050 CEST	443	49871	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.056289911 CEST	443	49872	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.086024046 CEST	443	49875	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.086507082 CEST	49875	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.086551905 CEST	443	49875	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.088553905 CEST	443	49875	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.088717937 CEST	49875	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.089823008 CEST	49875	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.090269089 CEST	443	49875	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.090291977 CEST	49875	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.095041990 CEST	443	49872	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.095088005 CEST	443	49872	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.095115900 CEST	443	49872	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.095431089 CEST	49872	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.095454931 CEST	443	49872	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.095681906 CEST	443	49871	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.095716953 CEST	443	49871	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.095741034 CEST	443	49871	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.095748901 CEST	49872	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.095777035 CEST	49871	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.095805883 CEST	443	49871	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.095827103 CEST	49871	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.095923901 CEST	49871	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.096014023 CEST	443	49872	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.096193075 CEST	443	49872	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.096324921 CEST	49872	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.098437071 CEST	443	49871	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.098496914 CEST	443	49871	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.098553896 CEST	443	49871	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.098561049 CEST	49871	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.098592997 CEST	49871	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.111701965 CEST	49873	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.119785070 CEST	443	49876	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.121408939 CEST	443	49874	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.132302999 CEST	443	49875	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.154725075 CEST	49875	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.154753923 CEST	443	49875	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.165483952 CEST	443	49873	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.165533066 CEST	443	49873	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.165558100 CEST	443	49873	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.165580034 CEST	443	49873	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.165610075 CEST	443	49873	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.165628910 CEST	443	49873	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.165638924 CEST	49873	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.165663958 CEST	443	49873	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.165699959 CEST	49873	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.165720940 CEST	49873	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.166176081 CEST	443	49873	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.166260004 CEST	49873	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.166951895 CEST	443	49873	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.167052984 CEST	49873	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.167084932 CEST	443	49873	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.167139053 CEST	443	49873	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.167160988 CEST	49873	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.167196989 CEST	49873	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.196587086 CEST	49874	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.196620941 CEST	443	49874	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.197139025 CEST	49876	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.197180986 CEST	443	49876	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.200154066 CEST	443	49874	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.200170994 CEST	443	49874	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.200299978 CEST	49874	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.200691938 CEST	443	49876	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.200733900 CEST	443	49876	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.200786114 CEST	49876	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.213514090 CEST	49874	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.213768005 CEST	443	49874	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.214169979 CEST	49874	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.214247942 CEST	443	49874	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.214915037 CEST	49876	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.215146065 CEST	49876	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.215164900 CEST	443	49876	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.215240002 CEST	443	49876	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.235846996 CEST	49872	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.235892057 CEST	443	49872	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.236516953 CEST	49878	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.236577988 CEST	443	49878	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.236675978 CEST	49878	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.237643957 CEST	49878	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.237675905 CEST	443	49878	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.240128994 CEST	443	49875	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.240149975 CEST	443	49875	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.240211964 CEST	49875	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.240247965 CEST	49875	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.240286112 CEST	443	49875	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.240355015 CEST	49875	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.240364075 CEST	443	49875	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.240377903 CEST	443	49875	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.240479946 CEST	49875	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.240485907 CEST	443	49875	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.240544081 CEST	49875	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.241086006 CEST	443	49875	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.241101980 CEST	443	49875	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.241153955 CEST	443	49875	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.241163969 CEST	49875	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.241206884 CEST	49875	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.241224051 CEST	443	49875	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.241269112 CEST	49875	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.241269112 CEST	49875	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.241919994 CEST	49873	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.241956949 CEST	443	49873	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.243079901 CEST	49879	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.243129015 CEST	443	49879	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.243505001 CEST	49879	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.243657112 CEST	49879	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.243680000 CEST	443	49879	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.248085976 CEST	49880	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:00.248158932 CEST	443	49880	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:00.248276949 CEST	49880	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:00.248389959 CEST	49871	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.248430014 CEST	443	49871	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.252382040 CEST	49881	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:00.252424955 CEST	443	49881	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:00.252496958 CEST	49881	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:00.252799034 CEST	49880	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:00.252846003 CEST	443	49880	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:00.254374027 CEST	49881	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:00.254400969 CEST	443	49881	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:00.263797045 CEST	49882	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.263843060 CEST	443	49882	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.263931990 CEST	49882	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.264518976 CEST	49882	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.264545918 CEST	443	49882	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.266217947 CEST	49875	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.266258001 CEST	443	49875	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.272819996 CEST	49883	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.272881031 CEST	443	49883	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.272975922 CEST	49883	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.273401022 CEST	49883	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.273427963 CEST	443	49883	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.310400963 CEST	443	49876	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.310465097 CEST	443	49876	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.310528994 CEST	443	49876	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.310550928 CEST	49876	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.310590029 CEST	49876	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.310614109 CEST	49876	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.311717033 CEST	49874	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.315879107 CEST	443	49874	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.316015005 CEST	443	49874	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.316019058 CEST	49874	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.316076994 CEST	49874	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.321129084 CEST	49876	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.321177006 CEST	443	49876	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.322129011 CEST	49874	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.322166920 CEST	443	49874	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.381436110 CEST	443	49878	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.382334948 CEST	49878	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.382378101 CEST	443	49878	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.382807016 CEST	443	49879	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.383167028 CEST	443	49878	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.383357048 CEST	49879	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.383426905 CEST	443	49879	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.383790016 CEST	49878	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.383965969 CEST	443	49878	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.384315968 CEST	443	49879	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.384375095 CEST	49878	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.384964943 CEST	49879	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.385159969 CEST	443	49879	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.387609959 CEST	49879	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.409209967 CEST	443	49882	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.409713030 CEST	49882	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.409749031 CEST	443	49882	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.412841082 CEST	443	49882	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.413129091 CEST	49882	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.414707899 CEST	49882	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.415118933 CEST	49882	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.415132999 CEST	443	49882	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.415326118 CEST	443	49882	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.424510002 CEST	443	49879	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.424885035 CEST	443	49879	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.424989939 CEST	49879	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.426517963 CEST	49884	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.426568985 CEST	443	49884	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.426667929 CEST	49884	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.428513050 CEST	49879	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.428549051 CEST	443	49879	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.432286978 CEST	443	49878	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.460295916 CEST	443	49880	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:00.462793112 CEST	443	49883	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.464234114 CEST	443	49881	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:00.477951050 CEST	443	49878	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.478020906 CEST	443	49878	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.478081942 CEST	443	49878	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.478113890 CEST	49878	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.478133917 CEST	443	49882	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.478177071 CEST	49878	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.478204012 CEST	49882	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.478220940 CEST	443	49882	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.478312016 CEST	443	49882	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.478354931 CEST	49882	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.511742115 CEST	49883	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.513243914 CEST	49881	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:00.529422045 CEST	49881	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:00.529453993 CEST	443	49881	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:00.529597998 CEST	49883	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.529619932 CEST	443	49883	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.529772997 CEST	49880	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:00.529835939 CEST	443	49880	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:00.529979944 CEST	49884	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.530016899 CEST	443	49884	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.531017065 CEST	443	49881	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:00.531305075 CEST	443	49880	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:00.531598091 CEST	49881	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:00.531750917 CEST	49881	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:00.531771898 CEST	443	49881	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:00.532154083 CEST	49880	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:00.532282114 CEST	49880	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:00.532301903 CEST	443	49880	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:00.532315969 CEST	443	49881	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:00.532613039 CEST	443	49880	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:00.534013033 CEST	443	49883	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.534132004 CEST	49883	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.534634113 CEST	49883	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.534981966 CEST	443	49883	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.535062075 CEST	49883	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.544990063 CEST	49882	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.545082092 CEST	443	49882	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.548054934 CEST	49878	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.548084974 CEST	443	49878	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.558438063 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.558511019 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.558624983 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.559077978 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.559117079 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.566792965 CEST	49886	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.566854000 CEST	443	49886	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.566941023 CEST	49886	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.569999933 CEST	49886	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.570046902 CEST	443	49886	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.574469090 CEST	49887	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.574536085 CEST	443	49887	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.574640989 CEST	49887	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.574968100 CEST	49887	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.574989080 CEST	443	49887	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.576298952 CEST	443	49883	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.582180977 CEST	49888	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.582238913 CEST	443	49888	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.582448006 CEST	49888	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.583417892 CEST	49888	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.583451033 CEST	443	49888	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.584568024 CEST	443	49883	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.584680080 CEST	49883	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.584709883 CEST	443	49883	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.584755898 CEST	443	49883	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.584816933 CEST	49883	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.590272903 CEST	49883	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.590326071 CEST	443	49883	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.590743065 CEST	49889	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.590785027 CEST	443	49889	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.590893984 CEST	49889	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.592469931 CEST	49889	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.592492104 CEST	443	49889	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.611716986 CEST	49881	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:00.637367964 CEST	443	49884	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.639084101 CEST	49884	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.639138937 CEST	443	49884	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.639836073 CEST	443	49884	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.640528917 CEST	49884	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.640830040 CEST	49884	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.640852928 CEST	443	49884	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.641127110 CEST	443	49884	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.644339085 CEST	49880	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:00.684598923 CEST	443	49884	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.684632063 CEST	443	49884	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.684797049 CEST	49884	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.684850931 CEST	443	49884	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.684921026 CEST	49884	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.691361904 CEST	443	49887	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.691483974 CEST	443	49884	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.691514969 CEST	443	49884	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.691597939 CEST	49884	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.691647053 CEST	443	49884	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.691674948 CEST	49884	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.698549986 CEST	443	49884	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.698610067 CEST	443	49884	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.698760033 CEST	49884	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.698793888 CEST	443	49884	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.699354887 CEST	443	49884	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.699469090 CEST	443	49884	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.699503899 CEST	49884	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.699567080 CEST	49884	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.717621088 CEST	443	49886	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.722193003 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.728537083 CEST	443	49889	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.729048967 CEST	443	49888	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.732394934 CEST	49888	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.732585907 CEST	443	49888	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.732669115 CEST	49889	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.732737064 CEST	443	49889	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.733059883 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.733102083 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.733388901 CEST	49886	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.733423948 CEST	443	49886	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.733494043 CEST	443	49889	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.733644962 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.733660936 CEST	49887	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.733731031 CEST	443	49887	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.734257936 CEST	443	49888	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.734471083 CEST	49888	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.734565020 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.734677076 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.735202074 CEST	443	49887	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.735222101 CEST	49889	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.735259056 CEST	443	49886	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.735291958 CEST	49887	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.735511065 CEST	443	49889	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.735869884 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.736227036 CEST	49889	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.736848116 CEST	49886	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.737057924 CEST	443	49886	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.737473011 CEST	49887	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.737628937 CEST	443	49887	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.738390923 CEST	49888	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.738548994 CEST	443	49888	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.739193916 CEST	49886	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.739499092 CEST	49887	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.739536047 CEST	443	49887	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.739985943 CEST	49888	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.740022898 CEST	443	49888	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.742475033 CEST	49884	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.742516041 CEST	443	49884	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.743110895 CEST	49890	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.743160009 CEST	443	49890	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.743246078 CEST	49890	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.744158030 CEST	49890	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.744194984 CEST	443	49890	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.769491911 CEST	443	49888	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.769511938 CEST	443	49887	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.769584894 CEST	443	49887	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.769609928 CEST	443	49888	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.769614935 CEST	443	49887	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.769668102 CEST	49887	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.769669056 CEST	49888	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.769694090 CEST	443	49887	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.769701004 CEST	443	49888	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.769773960 CEST	49887	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.769817114 CEST	49887	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.769851923 CEST	49888	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.771729946 CEST	443	49888	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.771840096 CEST	443	49888	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.771857977 CEST	49888	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.771857977 CEST	49888	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.771884918 CEST	443	49888	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.771883965 CEST	443	49887	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.771956921 CEST	443	49887	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.771980047 CEST	49887	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.772008896 CEST	443	49887	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.772026062 CEST	49887	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.772048950 CEST	49888	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.776305914 CEST	443	49889	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.780291080 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.780344009 CEST	443	49886	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.783046961 CEST	443	49888	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.783108950 CEST	443	49888	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.783574104 CEST	49888	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.783612967 CEST	443	49888	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.783730030 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.783787966 CEST	443	49890	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.783895969 CEST	443	49887	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.783931971 CEST	443	49887	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.784008980 CEST	49887	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.784084082 CEST	443	49887	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.784100056 CEST	49887	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.784220934 CEST	443	49888	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.784317970 CEST	49888	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.784359932 CEST	443	49888	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.784380913 CEST	443	49888	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.784462929 CEST	443	49888	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.784483910 CEST	49888	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.784670115 CEST	443	49887	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.784751892 CEST	443	49887	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.784852982 CEST	49887	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.784852982 CEST	49887	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.784955978 CEST	49888	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.786705971 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.786751986 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.786853075 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.786859035 CEST	443	49889	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.786880016 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.786904097 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.786942959 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.787300110 CEST	443	49886	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.787602901 CEST	443	49886	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.787693024 CEST	49886	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.788794041 CEST	443	49889	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.788842916 CEST	443	49889	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.788930893 CEST	49889	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.788973093 CEST	443	49889	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.789004087 CEST	49889	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.789004087 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.789028883 CEST	49889	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.789060116 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.789100885 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.789119005 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.789139032 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.791155100 CEST	443	49889	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.791188955 CEST	443	49889	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.791316032 CEST	49889	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.791342974 CEST	443	49889	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.797903061 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.798090935 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.798111916 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.801206112 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.801276922 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.801397085 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.801419973 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.801459074 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.801738024 CEST	443	49889	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.801821947 CEST	443	49889	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.801923990 CEST	49889	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.801923990 CEST	49889	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.801971912 CEST	443	49889	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.802051067 CEST	49889	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.803373098 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.803431034 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.803519011 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.803543091 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.803646088 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.804161072 CEST	443	49889	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.804198027 CEST	443	49889	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.804335117 CEST	49889	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.804399967 CEST	443	49889	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.804428101 CEST	49889	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.804477930 CEST	49889	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.805746078 CEST	443	49889	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.805815935 CEST	443	49889	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.805860043 CEST	443	49889	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.805877924 CEST	49889	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.805934906 CEST	49889	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.806132078 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.806186914 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.806215048 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.806237936 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.806261063 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.812426090 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.812484980 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.812592030 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.812633038 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.812669992 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.814421892 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.814487934 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.814572096 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.814608097 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.814635038 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.815383911 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.815469027 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.815498114 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.815534115 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.815607071 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.817158937 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.817218065 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.817308903 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.817337990 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.817369938 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.817409039 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.819106102 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.819152117 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.819242954 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.819282055 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.819314003 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.819363117 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.821763039 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.821821928 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.821896076 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.821932077 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.821979046 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.821989059 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.821989059 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.822012901 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.822031975 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.823791027 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.823873043 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.823926926 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.823960066 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.824017048 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.825555086 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.825602055 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.825700045 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.825743914 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.825773001 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.827367067 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.827445030 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.827570915 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.827601910 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.827637911 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.828840971 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.828892946 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.828974962 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.829008102 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.829034090 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.829168081 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.829237938 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.829257965 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.829282999 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.829313993 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.829391003 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.829457998 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.844182968 CEST	49889	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.844455957 CEST	49890	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.844497919 CEST	443	49890	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.844516039 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.845930099 CEST	443	49890	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.847012997 CEST	49890	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.847280979 CEST	443	49890	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.847628117 CEST	49890	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.852540016 CEST	49886	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.852597952 CEST	443	49886	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.853231907 CEST	49891	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.853281975 CEST	443	49891	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.853349924 CEST	49891	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.853914976 CEST	49891	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.853945971 CEST	443	49891	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.859287977 CEST	49887	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.859340906 CEST	443	49887	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.859741926 CEST	49892	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.859817982 CEST	443	49892	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.859903097 CEST	49892	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.860889912 CEST	49893	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.860977888 CEST	443	49893	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.860996962 CEST	49888	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.861032009 CEST	443	49888	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.861063004 CEST	49893	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.861895084 CEST	49892	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.861932993 CEST	443	49892	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.862457037 CEST	49893	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.862498999 CEST	443	49893	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.865499973 CEST	49889	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.865537882 CEST	443	49889	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.877075911 CEST	443	49890	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.877125025 CEST	443	49890	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.877142906 CEST	443	49890	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.877171993 CEST	443	49890	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.877250910 CEST	49890	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.877280951 CEST	443	49890	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.877315044 CEST	443	49890	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.877334118 CEST	49890	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.877343893 CEST	49890	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.877615929 CEST	443	49890	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.877681971 CEST	49890	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.879743099 CEST	49885	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.879797935 CEST	443	49885	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.885054111 CEST	49890	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.885088921 CEST	443	49890	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.885107040 CEST	49890	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.885154963 CEST	49890	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.899039984 CEST	443	49891	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.899482012 CEST	49891	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.899549961 CEST	443	49891	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.900089979 CEST	443	49891	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.900588036 CEST	49891	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.900722980 CEST	443	49891	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.901022911 CEST	49891	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.937066078 CEST	443	49891	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.938977003 CEST	443	49891	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.939033985 CEST	443	49891	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.939135075 CEST	49891	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.939187050 CEST	443	49891	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.939213037 CEST	49891	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.939240932 CEST	49891	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.939701080 CEST	443	49891	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.939790964 CEST	49891	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.940793991 CEST	443	49880	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:00.940833092 CEST	443	49880	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:00.940845966 CEST	443	49880	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:00.940901041 CEST	443	49880	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:00.940924883 CEST	49880	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:00.940932989 CEST	443	49880	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:00.940948009 CEST	443	49880	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:00.940987110 CEST	443	49880	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:00.941020966 CEST	49880	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:00.941020966 CEST	49880	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:00.941344023 CEST	443	49880	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:00.941458941 CEST	49880	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:00.944746971 CEST	443	49881	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:00.945713997 CEST	49880	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:00.945766926 CEST	443	49880	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:00.946994066 CEST	443	49881	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:00.947006941 CEST	443	49881	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:00.947050095 CEST	443	49881	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:00.947072983 CEST	443	49881	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:00.947081089 CEST	443	49881	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:00.947112083 CEST	49881	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:00.947170019 CEST	443	49881	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:00.947191954 CEST	49881	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:00.947205067 CEST	443	49881	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:00.947228909 CEST	49881	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:00.949263096 CEST	443	49893	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.949449062 CEST	443	49881	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:00.949464083 CEST	443	49881	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:00.949491024 CEST	443	49881	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:00.949500084 CEST	443	49881	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:00.949562073 CEST	49881	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:00.949620962 CEST	443	49881	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:00.949642897 CEST	49881	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:00.949943066 CEST	443	49892	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.950603962 CEST	49892	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.950640917 CEST	443	49892	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.950833082 CEST	49893	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.950866938 CEST	443	49893	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.951499939 CEST	443	49892	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.951617956 CEST	443	49891	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.951678991 CEST	443	49891	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.951724052 CEST	49891	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.951750040 CEST	443	49891	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.951766968 CEST	49891	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.951792002 CEST	49891	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.952156067 CEST	49892	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.952157974 CEST	443	49893	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.952238083 CEST	49893	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.952451944 CEST	443	49892	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.953207970 CEST	49892	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.953242064 CEST	443	49891	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.953321934 CEST	443	49891	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.953366041 CEST	49891	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.953382015 CEST	443	49891	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.953422070 CEST	49891	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.953902960 CEST	49893	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.954016924 CEST	443	49893	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.954533100 CEST	49893	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.954555035 CEST	443	49893	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.954823017 CEST	443	49891	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.954921007 CEST	49891	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.954941988 CEST	443	49891	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.954992056 CEST	443	49891	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.955039978 CEST	49891	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.956872940 CEST	49891	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:00.956912994 CEST	443	49891	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.959045887 CEST	443	49881	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:00.959110022 CEST	443	49881	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:00.959141016 CEST	443	49881	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:00.959165096 CEST	49881	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:00.959218025 CEST	49881	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:00.962723017 CEST	49881	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:00.962769985 CEST	443	49881	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:00.979475975 CEST	443	49892	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.979629040 CEST	443	49892	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:00.979753971 CEST	49892	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:01.019113064 CEST	49894	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:01.019181967 CEST	443	49894	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:01.019278049 CEST	49894	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:01.020176888 CEST	49894	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:01.020210981 CEST	443	49894	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:01.021503925 CEST	443	49893	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:01.021644115 CEST	49893	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:01.021682024 CEST	443	49893	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:01.021732092 CEST	443	49893	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:01.021776915 CEST	49892	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:01.021806955 CEST	443	49892	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:01.021862030 CEST	49893	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:01.026752949 CEST	49893	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:01.026799917 CEST	443	49893	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:01.066152096 CEST	443	49894	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:01.079771042 CEST	49894	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:01.079809904 CEST	443	49894	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:01.080598116 CEST	443	49894	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:01.086004019 CEST	49894	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:01.086004019 CEST	49894	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:01.086071014 CEST	443	49894	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:01.088516951 CEST	443	49894	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:01.114104033 CEST	443	49894	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:01.114322901 CEST	49894	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:01.171386003 CEST	49896	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.171447992 CEST	443	49896	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.171669960 CEST	49896	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.171783924 CEST	49897	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.171843052 CEST	443	49897	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.171921015 CEST	49897	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.172084093 CEST	49896	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.172106981 CEST	443	49896	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.172414064 CEST	49897	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.172430992 CEST	443	49897	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.180666924 CEST	49894	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:01.180705070 CEST	443	49894	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:01.324182034 CEST	443	49896	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.324574947 CEST	49896	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.324618101 CEST	443	49896	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.326497078 CEST	443	49896	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.326632977 CEST	49896	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.328358889 CEST	443	49897	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.328676939 CEST	49896	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.328872919 CEST	443	49896	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.328933001 CEST	49896	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.328959942 CEST	49896	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.328973055 CEST	443	49896	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.329641104 CEST	49897	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.329694033 CEST	443	49897	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.331589937 CEST	443	49897	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.331677914 CEST	49897	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.336744070 CEST	49897	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.336924076 CEST	443	49897	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.337632895 CEST	49897	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.337692976 CEST	443	49897	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.346062899 CEST	49898	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:01.346143961 CEST	443	49898	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:01.346266031 CEST	49898	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:01.346569061 CEST	49898	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:01.346611977 CEST	443	49898	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:01.383516073 CEST	443	49897	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.383541107 CEST	443	49897	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.383727074 CEST	49897	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.383764029 CEST	443	49897	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.383833885 CEST	49897	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.383939981 CEST	443	49897	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.384052038 CEST	49897	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.390474081 CEST	443	49898	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:01.418395042 CEST	443	49897	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.418601036 CEST	49897	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.418606043 CEST	443	49897	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.418627024 CEST	443	49897	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.418693066 CEST	49897	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.418737888 CEST	49897	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.418751001 CEST	443	49897	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.425990105 CEST	443	49896	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.426140070 CEST	443	49896	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.426203012 CEST	49896	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.426240921 CEST	49896	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.453427076 CEST	443	49897	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.453593969 CEST	49897	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.453624010 CEST	443	49897	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.453661919 CEST	443	49897	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.453732967 CEST	49897	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.453743935 CEST	443	49897	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.482093096 CEST	49898	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:01.482137918 CEST	443	49898	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:01.482760906 CEST	49896	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.482803106 CEST	443	49896	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.482922077 CEST	443	49898	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:01.483572960 CEST	49898	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:01.483711004 CEST	443	49898	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:01.484111071 CEST	49898	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:01.487937927 CEST	443	49897	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.488074064 CEST	49897	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.488105059 CEST	443	49897	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.488126993 CEST	443	49897	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.488162994 CEST	443	49897	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.488177061 CEST	49897	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.488188982 CEST	443	49897	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.488209009 CEST	49897	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.488306999 CEST	443	49897	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.488434076 CEST	49897	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.488444090 CEST	443	49897	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.488476038 CEST	443	49897	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.488535881 CEST	49897	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.488544941 CEST	443	49897	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.512387991 CEST	443	49898	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:01.512623072 CEST	443	49898	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:01.512727022 CEST	49898	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:01.522264004 CEST	443	49897	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.522430897 CEST	49897	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.522469997 CEST	443	49897	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.522986889 CEST	443	49897	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.523061991 CEST	443	49897	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.523087025 CEST	49897	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.523113966 CEST	443	49897	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.523133993 CEST	49897	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.523139954 CEST	443	49897	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.523181915 CEST	49897	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.566356897 CEST	49897	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.567347050 CEST	49898	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:01.567395926 CEST	443	49898	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:01.575819969 CEST	49897	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.575879097 CEST	443	49897	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.600419998 CEST	49900	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.600507021 CEST	443	49900	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.600667000 CEST	49900	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.602123022 CEST	49900	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.602178097 CEST	443	49900	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.677414894 CEST	443	49900	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.677902937 CEST	49900	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.677937031 CEST	443	49900	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.678649902 CEST	443	49900	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.679666042 CEST	49900	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.679811001 CEST	443	49900	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.680495977 CEST	49900	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.680495977 CEST	49900	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.680557966 CEST	443	49900	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.774946928 CEST	443	49900	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.775165081 CEST	443	49900	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:01.775274038 CEST	49900	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.829240084 CEST	49900	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:01.829288006 CEST	443	49900	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:02.212403059 CEST	49901	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:02.212486029 CEST	443	49901	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:02.212609053 CEST	49901	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:02.212941885 CEST	49901	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:02.212975025 CEST	443	49901	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:02.299370050 CEST	443	49901	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:02.299844980 CEST	49901	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:02.300124884 CEST	443	49901	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:02.301398039 CEST	443	49901	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:02.301989079 CEST	49901	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:02.302236080 CEST	443	49901	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:02.302668095 CEST	49901	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:02.302668095 CEST	49901	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:02.302767038 CEST	443	49901	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:02.377727985 CEST	443	49901	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:02.377969980 CEST	443	49901	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:02.378046036 CEST	49901	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:02.493099928 CEST	49901	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:02.493172884 CEST	443	49901	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:06.671041965 CEST	49910	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:06.671094894 CEST	443	49910	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:06.671175003 CEST	49910	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:06.705430984 CEST	49910	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:06.705482006 CEST	443	49910	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:06.784923077 CEST	443	49910	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:06.854440928 CEST	49910	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:07.213979959 CEST	49910	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:07.214020014 CEST	443	49910	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:07.215290070 CEST	443	49910	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:07.219718933 CEST	49910	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:07.220123053 CEST	443	49910	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:07.220599890 CEST	49910	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:07.220644951 CEST	49910	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:07.220892906 CEST	443	49910	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:07.302974939 CEST	443	49910	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:07.303167105 CEST	443	49910	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:07.303271055 CEST	49910	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:07.314567089 CEST	49910	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:07.314616919 CEST	443	49910	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:08.546536922 CEST	49911	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:08.546597004 CEST	443	49911	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:08.546684980 CEST	49911	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:08.546972036 CEST	49911	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:08.546993971 CEST	443	49911	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:08.621686935 CEST	443	49911	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:08.625725031 CEST	49911	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:08.625766039 CEST	443	49911	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:08.626765966 CEST	443	49911	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:08.627336979 CEST	49911	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:08.627680063 CEST	443	49911	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:08.627700090 CEST	49911	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:08.627811909 CEST	49911	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:08.627850056 CEST	443	49911	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:08.632164001 CEST	49912	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:08.632214069 CEST	443	49912	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:08.632402897 CEST	49912	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:08.632791996 CEST	49913	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:08.632829905 CEST	443	49913	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:08.632925034 CEST	49913	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:08.633107901 CEST	49912	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:08.633136034 CEST	443	49912	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:08.633857012 CEST	49914	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:08.633893013 CEST	443	49914	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:08.633966923 CEST	49914	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:08.634357929 CEST	49913	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:08.634376049 CEST	49914	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:08.634390116 CEST	443	49913	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:08.634397030 CEST	443	49914	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:08.667591095 CEST	49915	443	192.168.2.4	108.138.36.11
Jun 6, 2023 10:39:08.667670965 CEST	443	49915	108.138.36.11	192.168.2.4
Jun 6, 2023 10:39:08.667803049 CEST	49915	443	192.168.2.4	108.138.36.11
Jun 6, 2023 10:39:08.668474913 CEST	49915	443	192.168.2.4	108.138.36.11
Jun 6, 2023 10:39:08.668529987 CEST	443	49915	108.138.36.11	192.168.2.4
Jun 6, 2023 10:39:08.692972898 CEST	443	49911	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:08.693151951 CEST	443	49911	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:08.693239927 CEST	49911	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:08.694334030 CEST	49911	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:08.694385052 CEST	443	49911	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:08.705514908 CEST	49917	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:08.705559969 CEST	443	49917	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:08.705624104 CEST	49917	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:08.706202030 CEST	49917	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:08.706229925 CEST	443	49917	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:08.736902952 CEST	443	49912	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:08.737931013 CEST	49912	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:08.737963915 CEST	443	49912	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:08.738755941 CEST	443	49912	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:08.740278006 CEST	49912	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:08.740278006 CEST	443	49914	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:08.740446091 CEST	443	49912	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:08.740685940 CEST	49914	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:08.740725040 CEST	443	49914	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:08.740827084 CEST	49912	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:08.741400003 CEST	443	49914	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:08.741842031 CEST	49914	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:08.741997004 CEST	443	49914	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:08.742167950 CEST	49914	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:08.762466908 CEST	49918	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:08.762512922 CEST	443	49918	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:08.762703896 CEST	49918	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:08.762861967 CEST	49918	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:08.762871027 CEST	443	49918	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:08.772671938 CEST	443	49915	108.138.36.11	192.168.2.4
Jun 6, 2023 10:39:08.773019075 CEST	49915	443	192.168.2.4	108.138.36.11
Jun 6, 2023 10:39:08.773081064 CEST	443	49915	108.138.36.11	192.168.2.4
Jun 6, 2023 10:39:08.774343967 CEST	443	49915	108.138.36.11	192.168.2.4
Jun 6, 2023 10:39:08.774507999 CEST	49915	443	192.168.2.4	108.138.36.11
Jun 6, 2023 10:39:08.776463032 CEST	49915	443	192.168.2.4	108.138.36.11
Jun 6, 2023 10:39:08.776576996 CEST	443	49915	108.138.36.11	192.168.2.4
Jun 6, 2023 10:39:08.776634932 CEST	49915	443	192.168.2.4	108.138.36.11
Jun 6, 2023 10:39:08.784297943 CEST	443	49914	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:08.788295984 CEST	443	49912	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:08.803899050 CEST	443	49912	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:08.803942919 CEST	443	49912	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:08.803967953 CEST	443	49912	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:08.804056883 CEST	49912	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:08.804080963 CEST	443	49912	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:08.804109097 CEST	443	49912	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:08.804141998 CEST	49912	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:08.804167032 CEST	49912	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:08.805924892 CEST	49912	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:08.805955887 CEST	443	49912	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:08.811482906 CEST	49919	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:08.811569929 CEST	443	49919	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:08.811692953 CEST	49919	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:08.812216997 CEST	49919	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:08.812253952 CEST	443	49919	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:08.817687988 CEST	49915	443	192.168.2.4	108.138.36.11
Jun 6, 2023 10:39:08.817759991 CEST	443	49915	108.138.36.11	192.168.2.4
Jun 6, 2023 10:39:08.821464062 CEST	443	49914	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:08.821655989 CEST	443	49914	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:08.821747065 CEST	49914	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:08.822499990 CEST	49914	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:08.822542906 CEST	443	49914	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:08.826306105 CEST	49920	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:08.826359034 CEST	443	49920	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:08.826456070 CEST	49920	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:08.826738119 CEST	49920	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:08.826770067 CEST	443	49920	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:08.835342884 CEST	443	49913	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:08.835968971 CEST	49913	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:08.836023092 CEST	443	49913	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:08.837891102 CEST	443	49913	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:08.838042021 CEST	49913	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:08.840807915 CEST	49913	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:08.841048002 CEST	443	49913	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:08.841255903 CEST	49913	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:08.841300964 CEST	443	49913	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:08.852833986 CEST	443	49917	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:08.853641033 CEST	49917	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:08.853688955 CEST	443	49917	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:08.854636908 CEST	443	49917	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:08.855469942 CEST	49917	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:08.855741024 CEST	443	49917	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:08.855914116 CEST	49917	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:08.855914116 CEST	49917	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:08.855977058 CEST	443	49917	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:08.861588001 CEST	443	49913	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:08.861695051 CEST	49913	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:08.862163067 CEST	49913	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:08.862205029 CEST	443	49913	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:08.866617918 CEST	49921	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:08.866679907 CEST	443	49921	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:08.866765022 CEST	49921	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:08.866981983 CEST	49921	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:08.867002010 CEST	443	49921	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:08.931629896 CEST	443	49917	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:08.931904078 CEST	443	49917	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:08.932003975 CEST	49917	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:08.941823006 CEST	49917	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:08.941864014 CEST	443	49917	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:08.944386005 CEST	443	49918	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:08.946224928 CEST	49918	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:08.946263075 CEST	443	49918	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:08.947987080 CEST	443	49918	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:08.948096991 CEST	49918	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:08.954699039 CEST	443	49920	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:08.965961933 CEST	443	49919	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:08.968209982 CEST	49919	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:08.968240976 CEST	443	49919	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:08.968323946 CEST	49920	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:08.968336105 CEST	443	49920	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:08.968581915 CEST	49918	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:08.968820095 CEST	443	49918	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:08.968847990 CEST	49918	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:08.969069004 CEST	443	49920	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:08.969480038 CEST	49920	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:08.969614029 CEST	443	49920	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:08.969892979 CEST	49920	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:08.969933987 CEST	443	49919	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:08.970326900 CEST	49919	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:08.970552921 CEST	443	49919	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:08.970640898 CEST	49919	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:08.997488976 CEST	443	49920	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:08.997567892 CEST	443	49920	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:08.997692108 CEST	443	49920	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:08.997705936 CEST	49920	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:08.997731924 CEST	443	49920	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:08.997760057 CEST	49920	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:08.997801065 CEST	49920	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:08.997952938 CEST	443	49920	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:08.998039961 CEST	49920	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:08.998051882 CEST	443	49920	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:08.998112917 CEST	443	49920	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:08.998177052 CEST	49920	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:08.999180079 CEST	443	49921	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:08.999571085 CEST	49921	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:08.999613047 CEST	443	49921	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:08.999722958 CEST	49920	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:08.999749899 CEST	443	49920	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:09.000863075 CEST	443	49921	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:09.001430035 CEST	49921	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:09.001609087 CEST	443	49921	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:09.001719952 CEST	49921	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:09.004738092 CEST	49915	443	192.168.2.4	108.138.36.11
Jun 6, 2023 10:39:09.012289047 CEST	443	49919	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:09.016288996 CEST	443	49918	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:09.038594961 CEST	443	49919	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:09.038651943 CEST	443	49919	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:09.038779974 CEST	49919	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:09.038846970 CEST	443	49919	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:09.038918972 CEST	49919	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:09.038918972 CEST	49919	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:09.039074898 CEST	443	49919	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:09.039140940 CEST	49919	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:09.044300079 CEST	443	49921	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:09.045460939 CEST	49919	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:09.045517921 CEST	443	49919	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:09.051018000 CEST	443	49918	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:09.051177979 CEST	49918	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:09.051179886 CEST	49921	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:09.051212072 CEST	443	49918	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:09.051244020 CEST	443	49918	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:09.051312923 CEST	49918	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:09.052284002 CEST	49918	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:09.052310944 CEST	443	49918	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:09.079349041 CEST	49925	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:09.079399109 CEST	443	49925	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:09.079569101 CEST	49925	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:09.080840111 CEST	49925	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:09.080885887 CEST	443	49925	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:09.094273090 CEST	443	49915	108.138.36.11	192.168.2.4
Jun 6, 2023 10:39:09.094327927 CEST	443	49915	108.138.36.11	192.168.2.4
Jun 6, 2023 10:39:09.094350100 CEST	443	49915	108.138.36.11	192.168.2.4
Jun 6, 2023 10:39:09.094382048 CEST	443	49915	108.138.36.11	192.168.2.4
Jun 6, 2023 10:39:09.094405890 CEST	443	49915	108.138.36.11	192.168.2.4
Jun 6, 2023 10:39:09.094408035 CEST	49915	443	192.168.2.4	108.138.36.11
Jun 6, 2023 10:39:09.094423056 CEST	443	49915	108.138.36.11	192.168.2.4
Jun 6, 2023 10:39:09.094443083 CEST	443	49915	108.138.36.11	192.168.2.4
Jun 6, 2023 10:39:09.094476938 CEST	49915	443	192.168.2.4	108.138.36.11
Jun 6, 2023 10:39:09.094504118 CEST	49915	443	192.168.2.4	108.138.36.11
Jun 6, 2023 10:39:09.094521999 CEST	49915	443	192.168.2.4	108.138.36.11
Jun 6, 2023 10:39:09.174527884 CEST	443	49925	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:09.174998045 CEST	49925	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:09.175084114 CEST	443	49925	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:09.176244974 CEST	443	49925	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:09.176717043 CEST	49925	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:09.176858902 CEST	49925	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:09.176879883 CEST	443	49925	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:09.176969051 CEST	443	49925	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:09.233093977 CEST	443	49915	108.138.36.11	192.168.2.4
Jun 6, 2023 10:39:09.233151913 CEST	443	49915	108.138.36.11	192.168.2.4
Jun 6, 2023 10:39:09.233232975 CEST	49915	443	192.168.2.4	108.138.36.11
Jun 6, 2023 10:39:09.233287096 CEST	49915	443	192.168.2.4	108.138.36.11
Jun 6, 2023 10:39:09.234200001 CEST	443	49921	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:09.234571934 CEST	443	49921	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:09.234647989 CEST	49921	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:09.234714985 CEST	443	49921	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:09.234901905 CEST	443	49921	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:09.234971046 CEST	49921	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:09.235555887 CEST	443	49925	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:09.235640049 CEST	49925	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:09.235694885 CEST	443	49915	108.138.36.11	192.168.2.4
Jun 6, 2023 10:39:09.235726118 CEST	443	49915	108.138.36.11	192.168.2.4
Jun 6, 2023 10:39:09.235764980 CEST	443	49915	108.138.36.11	192.168.2.4
Jun 6, 2023 10:39:09.235766888 CEST	49915	443	192.168.2.4	108.138.36.11
Jun 6, 2023 10:39:09.235785007 CEST	443	49915	108.138.36.11	192.168.2.4
Jun 6, 2023 10:39:09.235810995 CEST	443	49915	108.138.36.11	192.168.2.4
Jun 6, 2023 10:39:09.235814095 CEST	49915	443	192.168.2.4	108.138.36.11
Jun 6, 2023 10:39:09.235814095 CEST	49915	443	192.168.2.4	108.138.36.11
Jun 6, 2023 10:39:09.235831022 CEST	443	49915	108.138.36.11	192.168.2.4
Jun 6, 2023 10:39:09.235835075 CEST	49915	443	192.168.2.4	108.138.36.11
Jun 6, 2023 10:39:09.235874891 CEST	49915	443	192.168.2.4	108.138.36.11
Jun 6, 2023 10:39:09.235920906 CEST	443	49915	108.138.36.11	192.168.2.4
Jun 6, 2023 10:39:09.235964060 CEST	49915	443	192.168.2.4	108.138.36.11
Jun 6, 2023 10:39:09.235990047 CEST	443	49915	108.138.36.11	192.168.2.4
Jun 6, 2023 10:39:09.236056089 CEST	49915	443	192.168.2.4	108.138.36.11
Jun 6, 2023 10:39:09.236494064 CEST	443	49915	108.138.36.11	192.168.2.4
Jun 6, 2023 10:39:09.236574888 CEST	49915	443	192.168.2.4	108.138.36.11
Jun 6, 2023 10:39:09.267003059 CEST	49925	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:09.267055035 CEST	443	49925	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:09.277407885 CEST	49921	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:09.277452946 CEST	443	49921	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:09.286863089 CEST	49926	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:09.286926985 CEST	443	49926	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:09.287029982 CEST	49926	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:09.287674904 CEST	49926	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:09.287712097 CEST	443	49926	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:09.333010912 CEST	443	49926	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:09.333518982 CEST	49926	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:09.333631992 CEST	443	49926	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:09.334301949 CEST	443	49926	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:09.334805012 CEST	49926	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:09.334938049 CEST	443	49926	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:09.335026979 CEST	49926	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:09.346152067 CEST	49928	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:09.346201897 CEST	443	49928	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:09.346390009 CEST	49928	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:09.346812963 CEST	49928	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:09.346827030 CEST	443	49928	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:09.372947931 CEST	443	49915	108.138.36.11	192.168.2.4
Jun 6, 2023 10:39:09.373137951 CEST	49915	443	192.168.2.4	108.138.36.11
Jun 6, 2023 10:39:09.373166084 CEST	443	49915	108.138.36.11	192.168.2.4
Jun 6, 2023 10:39:09.373215914 CEST	49915	443	192.168.2.4	108.138.36.11
Jun 6, 2023 10:39:09.373308897 CEST	443	49915	108.138.36.11	192.168.2.4
Jun 6, 2023 10:39:09.373363972 CEST	49915	443	192.168.2.4	108.138.36.11
Jun 6, 2023 10:39:09.373747110 CEST	49915	443	192.168.2.4	108.138.36.11
Jun 6, 2023 10:39:09.373760939 CEST	443	49915	108.138.36.11	192.168.2.4
Jun 6, 2023 10:39:09.374608040 CEST	443	49926	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:09.374816895 CEST	443	49926	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:09.374902010 CEST	49926	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:09.382771969 CEST	49926	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:09.382800102 CEST	443	49926	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:09.394457102 CEST	443	49928	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:09.394923925 CEST	49928	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:09.394968987 CEST	443	49928	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:09.395587921 CEST	443	49928	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:09.396802902 CEST	49928	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:09.396939039 CEST	443	49928	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:09.398305893 CEST	49928	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:09.399986029 CEST	49929	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:09.400039911 CEST	443	49929	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:09.400146008 CEST	49929	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:09.400434971 CEST	49929	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:09.400451899 CEST	443	49929	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:09.440315008 CEST	443	49928	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:09.446886063 CEST	443	49929	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:09.447318077 CEST	49929	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:09.447362900 CEST	443	49929	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:09.448092937 CEST	443	49929	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:09.449681997 CEST	49929	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:09.449856043 CEST	443	49929	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:09.449959040 CEST	49929	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:09.451610088 CEST	443	49928	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:09.453898907 CEST	443	49928	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:09.453938007 CEST	443	49928	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:09.454035044 CEST	49928	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:09.454092026 CEST	443	49928	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:09.454111099 CEST	49928	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:09.454117060 CEST	443	49928	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:09.454155922 CEST	49928	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:09.454170942 CEST	49928	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:09.454426050 CEST	49928	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:09.454453945 CEST	443	49928	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:09.475301981 CEST	49930	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:09.475378036 CEST	443	49930	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:09.475471020 CEST	49930	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:09.475804090 CEST	49930	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:09.475821972 CEST	443	49930	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:09.489167929 CEST	443	49929	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:09.515161991 CEST	443	49930	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:09.515618086 CEST	49930	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:09.515639067 CEST	443	49930	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:09.516683102 CEST	443	49930	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:09.517505884 CEST	49930	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:09.517637014 CEST	443	49930	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:09.518083096 CEST	49930	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:09.527407885 CEST	443	49929	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:09.527539015 CEST	49929	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:09.527556896 CEST	443	49929	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:09.528445005 CEST	443	49929	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:09.528573990 CEST	49929	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:09.528605938 CEST	443	49929	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:09.547543049 CEST	443	49929	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:09.547755957 CEST	49929	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:09.547785997 CEST	443	49929	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:09.548048019 CEST	443	49929	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:09.548090935 CEST	443	49929	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:09.548156977 CEST	49929	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:09.548201084 CEST	443	49929	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:09.548218012 CEST	49929	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:09.560340881 CEST	443	49930	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:09.566745996 CEST	443	49929	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:09.566957951 CEST	49929	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:09.566994905 CEST	443	49929	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:09.567444086 CEST	443	49929	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:09.567569017 CEST	49929	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:09.567590952 CEST	443	49929	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:09.568849087 CEST	49929	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:09.568981886 CEST	443	49929	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:09.569123030 CEST	49929	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:09.587697983 CEST	443	49930	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:09.587760925 CEST	443	49930	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:09.587873936 CEST	49930	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:09.587932110 CEST	443	49930	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:09.587966919 CEST	443	49930	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:09.588025093 CEST	49930	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:09.589396954 CEST	49930	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:09.589457035 CEST	443	49930	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:09.594790936 CEST	49931	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:09.594872952 CEST	443	49931	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:09.595029116 CEST	49931	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:09.595474958 CEST	49931	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:09.595504045 CEST	443	49931	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:09.604721069 CEST	49932	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:09.604773045 CEST	443	49932	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:09.604859114 CEST	49932	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:09.605374098 CEST	49932	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:09.605395079 CEST	443	49932	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:09.635893106 CEST	443	49931	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:09.636622906 CEST	49931	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:09.636681080 CEST	443	49931	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:09.637116909 CEST	443	49931	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:09.637588978 CEST	49931	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:09.637701988 CEST	443	49931	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:09.638230085 CEST	49931	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:09.676167011 CEST	443	49931	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:09.676213026 CEST	443	49931	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:09.676311970 CEST	443	49931	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:09.676358938 CEST	49931	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:09.676392078 CEST	49931	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:09.677916050 CEST	49931	443	192.168.2.4	99.84.88.99
Jun 6, 2023 10:39:09.677946091 CEST	443	49931	99.84.88.99	192.168.2.4
Jun 6, 2023 10:39:09.755275011 CEST	443	49932	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:09.756081104 CEST	49932	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:09.756149054 CEST	443	49932	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:09.757230043 CEST	443	49932	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:09.757898092 CEST	49932	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:09.758125067 CEST	49932	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:09.758151054 CEST	443	49932	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:09.758285999 CEST	443	49932	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:09.799865007 CEST	443	49932	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:09.800210953 CEST	49932	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:09.801824093 CEST	49932	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:09.801862001 CEST	443	49932	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:09.843070030 CEST	49933	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:09.843138933 CEST	443	49933	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:09.843295097 CEST	49933	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:09.844357967 CEST	49933	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:09.844388008 CEST	443	49933	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:09.929388046 CEST	443	49933	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:09.929903030 CEST	49933	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:09.929949045 CEST	443	49933	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:09.930689096 CEST	443	49933	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:09.931245089 CEST	49933	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:09.931397915 CEST	443	49933	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:09.931559086 CEST	49933	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:09.931581020 CEST	49933	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:09.931606054 CEST	443	49933	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:10.008321047 CEST	443	49933	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:10.008505106 CEST	443	49933	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:10.008608103 CEST	49933	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:10.015137911 CEST	49933	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:10.015175104 CEST	443	49933	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:10.186295033 CEST	49934	443	192.168.2.4	91.214.6.108
Jun 6, 2023 10:39:10.186383963 CEST	443	49934	91.214.6.108	192.168.2.4
Jun 6, 2023 10:39:10.186511040 CEST	49934	443	192.168.2.4	91.214.6.108
Jun 6, 2023 10:39:10.187271118 CEST	49934	443	192.168.2.4	91.214.6.108
Jun 6, 2023 10:39:10.187309980 CEST	443	49934	91.214.6.108	192.168.2.4
Jun 6, 2023 10:39:10.187978983 CEST	49935	443	192.168.2.4	91.214.6.108
Jun 6, 2023 10:39:10.188028097 CEST	443	49935	91.214.6.108	192.168.2.4
Jun 6, 2023 10:39:10.188128948 CEST	49935	443	192.168.2.4	91.214.6.108
Jun 6, 2023 10:39:10.188385010 CEST	49935	443	192.168.2.4	91.214.6.108
Jun 6, 2023 10:39:10.188409090 CEST	443	49935	91.214.6.108	192.168.2.4
Jun 6, 2023 10:39:10.332516909 CEST	443	49934	91.214.6.108	192.168.2.4
Jun 6, 2023 10:39:10.334414005 CEST	443	49935	91.214.6.108	192.168.2.4
Jun 6, 2023 10:39:10.380976915 CEST	49935	443	192.168.2.4	91.214.6.108
Jun 6, 2023 10:39:10.381057024 CEST	443	49935	91.214.6.108	192.168.2.4
Jun 6, 2023 10:39:10.381546974 CEST	49934	443	192.168.2.4	91.214.6.108
Jun 6, 2023 10:39:10.381582975 CEST	443	49934	91.214.6.108	192.168.2.4
Jun 6, 2023 10:39:10.382389069 CEST	443	49935	91.214.6.108	192.168.2.4
Jun 6, 2023 10:39:10.382510900 CEST	49935	443	192.168.2.4	91.214.6.108
Jun 6, 2023 10:39:10.383696079 CEST	443	49934	91.214.6.108	192.168.2.4
Jun 6, 2023 10:39:10.383791924 CEST	49934	443	192.168.2.4	91.214.6.108
Jun 6, 2023 10:39:10.391282082 CEST	49935	443	192.168.2.4	91.214.6.108
Jun 6, 2023 10:39:10.391454935 CEST	443	49935	91.214.6.108	192.168.2.4
Jun 6, 2023 10:39:10.394109011 CEST	49935	443	192.168.2.4	91.214.6.108
Jun 6, 2023 10:39:10.394151926 CEST	443	49935	91.214.6.108	192.168.2.4
Jun 6, 2023 10:39:10.394869089 CEST	49934	443	192.168.2.4	91.214.6.108
Jun 6, 2023 10:39:10.395003080 CEST	443	49934	91.214.6.108	192.168.2.4
Jun 6, 2023 10:39:10.431988001 CEST	443	49935	91.214.6.108	192.168.2.4
Jun 6, 2023 10:39:10.432070017 CEST	49935	443	192.168.2.4	91.214.6.108
Jun 6, 2023 10:39:10.432514906 CEST	49935	443	192.168.2.4	91.214.6.108
Jun 6, 2023 10:39:10.432553053 CEST	443	49935	91.214.6.108	192.168.2.4
Jun 6, 2023 10:39:10.548307896 CEST	49934	443	192.168.2.4	91.214.6.108
Jun 6, 2023 10:39:10.548345089 CEST	443	49934	91.214.6.108	192.168.2.4
Jun 6, 2023 10:39:10.649369955 CEST	49934	443	192.168.2.4	91.214.6.108
Jun 6, 2023 10:39:10.713366032 CEST	49937	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:10.713460922 CEST	443	49937	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:10.713570118 CEST	49937	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:10.718166113 CEST	49937	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:10.718197107 CEST	443	49937	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:10.874910116 CEST	443	49937	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:10.875293970 CEST	49937	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:10.875325918 CEST	443	49937	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:10.876220942 CEST	443	49937	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:10.876787901 CEST	49937	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:10.876951933 CEST	49937	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:10.876972914 CEST	443	49937	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:10.877008915 CEST	443	49937	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:10.947788000 CEST	49937	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:11.011571884 CEST	443	49937	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:11.012722969 CEST	443	49937	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:11.012751102 CEST	443	49937	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:11.012830019 CEST	49937	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:11.012860060 CEST	443	49937	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:11.012880087 CEST	49937	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:11.012903929 CEST	49937	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:11.012985945 CEST	443	49937	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:11.013041019 CEST	49937	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:11.013937950 CEST	49937	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:11.013972044 CEST	443	49937	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:12.963387012 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:12.963433981 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:12.963634014 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:12.964401960 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:12.964432955 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.002684116 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.005183935 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.005790949 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.011305094 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.011305094 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.011339903 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.011482954 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.062375069 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.152411938 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.152463913 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.152475119 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.152494907 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.152507067 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.152518034 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.152580976 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.152606010 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.152633905 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.152647972 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.154802084 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.154839993 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.154988050 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.155002117 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.155050993 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.165616035 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.165652990 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.165791988 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.165812969 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.165873051 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.173691988 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.173737049 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.173796892 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.173851013 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.173906088 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.173921108 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.174005032 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.177046061 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.177086115 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.177201033 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.177232027 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.177251101 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.184246063 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.184312105 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.184391022 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.184420109 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.184442997 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.191804886 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.191854000 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.191962004 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.191998959 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.192039013 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.193589926 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.193631887 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.193711996 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.193727016 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.193769932 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.200638056 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.200696945 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.200833082 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.200859070 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.203353882 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.203416109 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.203494072 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.203515053 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.203552008 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.210377932 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.210417986 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.210541010 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.210563898 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.211220026 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.211258888 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.211327076 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.211344957 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.211368084 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.211426973 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.211455107 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.211491108 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.211500883 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.211524010 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.211606979 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.211644888 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.211664915 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.211674929 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.211694956 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.215367079 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.215408087 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.215547085 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.215580940 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.215615034 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.217699051 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.217727900 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.217842102 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.217854023 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.217873096 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.217911005 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.217933893 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.217951059 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.217976093 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.218013048 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.240839958 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.240886927 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.240958929 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.241024017 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.241070032 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.241096020 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.241142988 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.241539001 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.241606951 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.241669893 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.241683960 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.241695881 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.242512941 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.242551088 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.242634058 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.242659092 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.242698908 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.243376970 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.243408918 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.243464947 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.243491888 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.243527889 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.243540049 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.243573904 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.243629932 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.243629932 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.243642092 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.243685961 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.244324923 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.244412899 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.244420052 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.244441032 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.244484901 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.245326042 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.245372057 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.245426893 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.245448112 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.245496035 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.245496035 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.246213913 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.246252060 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.246324062 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.246342897 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.246373892 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.246392012 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.246453047 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.246484041 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.246560097 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.246573925 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.246603966 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.246617079 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.247591019 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.247622013 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.247694016 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.247705936 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.247756004 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.248425007 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.248477936 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.248514891 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.248522997 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.248548031 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:13.248573065 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.248604059 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:13.757116079 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:14.317409039 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:14.354760885 CEST	49962	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:14.354794979 CEST	443	49962	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:14.647651911 CEST	49969	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:14.647694111 CEST	443	49969	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:14.647789955 CEST	49969	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:14.648276091 CEST	49969	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:14.648292065 CEST	443	49969	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:14.683948994 CEST	443	49969	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:14.691534996 CEST	49969	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:14.691987991 CEST	443	49969	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:14.692897081 CEST	49969	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:14.692985058 CEST	443	49969	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:14.694514036 CEST	49969	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:14.696369886 CEST	49970	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:14.696417093 CEST	443	49970	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:14.696501017 CEST	49970	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:14.696943045 CEST	49970	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:14.696958065 CEST	443	49970	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:14.740278006 CEST	443	49969	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:14.796816111 CEST	443	49970	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:14.825531960 CEST	443	49969	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:14.825563908 CEST	443	49969	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:14.825705051 CEST	49969	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:14.825727940 CEST	443	49969	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:14.826903105 CEST	443	49969	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:14.826956034 CEST	443	49969	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:14.826987028 CEST	443	49969	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:14.827018976 CEST	49969	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:14.827074051 CEST	49969	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:14.847315073 CEST	49970	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:14.847351074 CEST	443	49970	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:14.848764896 CEST	443	49970	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:14.848867893 CEST	49970	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:14.851325989 CEST	49970	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:14.851464033 CEST	443	49970	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:14.851625919 CEST	49970	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:14.851648092 CEST	443	49970	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:14.872008085 CEST	443	49970	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:14.872116089 CEST	49970	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:14.872152090 CEST	443	49970	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:14.872179031 CEST	443	49970	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:14.872201920 CEST	49970	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:14.872232914 CEST	49970	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:14.908124924 CEST	49970	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:14.908180952 CEST	443	49970	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:14.909687996 CEST	49969	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:14.909720898 CEST	443	49969	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:14.932929039 CEST	49971	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:14.932979107 CEST	443	49971	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:14.933067083 CEST	49971	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:14.933612108 CEST	49971	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:14.933629990 CEST	443	49971	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:14.969542980 CEST	443	49971	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:14.970102072 CEST	49971	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:14.970539093 CEST	443	49971	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:14.970999002 CEST	49971	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:14.971081972 CEST	443	49971	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:14.972191095 CEST	49971	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:14.997806072 CEST	443	49971	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:14.997895002 CEST	443	49971	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:14.997966051 CEST	49971	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:14.998775959 CEST	49971	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:14.998802900 CEST	443	49971	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:15.010067940 CEST	49973	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:39:15.010113001 CEST	443	49973	35.81.20.183	192.168.2.4
Jun 6, 2023 10:39:15.010191917 CEST	49973	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:39:15.010667086 CEST	49973	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:39:15.010687113 CEST	443	49973	35.81.20.183	192.168.2.4
Jun 6, 2023 10:39:15.107244015 CEST	49975	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:39:15.107292891 CEST	443	49975	35.81.20.183	192.168.2.4
Jun 6, 2023 10:39:15.107371092 CEST	49975	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:39:15.107661963 CEST	49975	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:39:15.107673883 CEST	443	49975	35.81.20.183	192.168.2.4
Jun 6, 2023 10:39:16.143224955 CEST	443	49973	35.81.20.183	192.168.2.4
Jun 6, 2023 10:39:16.146135092 CEST	49973	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:39:16.146164894 CEST	443	49973	35.81.20.183	192.168.2.4
Jun 6, 2023 10:39:16.146707058 CEST	443	49973	35.81.20.183	192.168.2.4
Jun 6, 2023 10:39:16.147418976 CEST	49973	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:39:16.147550106 CEST	443	49973	35.81.20.183	192.168.2.4
Jun 6, 2023 10:39:16.148364067 CEST	49973	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:39:16.148504019 CEST	49973	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:39:16.148530006 CEST	443	49973	35.81.20.183	192.168.2.4
Jun 6, 2023 10:39:16.520432949 CEST	443	49973	35.81.20.183	192.168.2.4
Jun 6, 2023 10:39:16.520560980 CEST	443	49973	35.81.20.183	192.168.2.4
Jun 6, 2023 10:39:16.520657063 CEST	49973	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:39:16.521385908 CEST	49973	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:39:16.521435976 CEST	443	49973	35.81.20.183	192.168.2.4
Jun 6, 2023 10:39:16.675790071 CEST	443	49975	35.81.20.183	192.168.2.4
Jun 6, 2023 10:39:16.676758051 CEST	49975	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:39:16.676816940 CEST	443	49975	35.81.20.183	192.168.2.4
Jun 6, 2023 10:39:16.677330017 CEST	443	49975	35.81.20.183	192.168.2.4
Jun 6, 2023 10:39:16.678316116 CEST	49975	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:39:16.678464890 CEST	443	49975	35.81.20.183	192.168.2.4
Jun 6, 2023 10:39:16.679888010 CEST	49975	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:39:16.679944992 CEST	49975	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:39:16.679982901 CEST	443	49975	35.81.20.183	192.168.2.4
Jun 6, 2023 10:39:17.050612926 CEST	443	49975	35.81.20.183	192.168.2.4
Jun 6, 2023 10:39:17.050710917 CEST	443	49975	35.81.20.183	192.168.2.4
Jun 6, 2023 10:39:17.050841093 CEST	49975	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:39:17.165915966 CEST	49975	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:39:17.165970087 CEST	443	49975	35.81.20.183	192.168.2.4
Jun 6, 2023 10:39:17.300921917 CEST	49999	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:17.300988913 CEST	443	49999	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:17.301085949 CEST	49999	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:17.302198887 CEST	49999	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:17.302246094 CEST	443	49999	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:17.377767086 CEST	443	49999	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:17.410489082 CEST	49999	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:17.410547018 CEST	443	49999	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:17.411916971 CEST	443	49999	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:17.425316095 CEST	49999	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:17.425648928 CEST	443	49999	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:17.481035948 CEST	49999	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:17.481076956 CEST	49999	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:17.481151104 CEST	443	49999	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:17.567272902 CEST	443	49999	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:17.567562103 CEST	443	49999	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:17.567677021 CEST	49999	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:17.570327044 CEST	49999	443	192.168.2.4	91.214.5.154
Jun 6, 2023 10:39:17.570372105 CEST	443	49999	91.214.5.154	192.168.2.4
Jun 6, 2023 10:39:19.560605049 CEST	50009	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:39:19.560673952 CEST	443	50009	142.250.203.100	192.168.2.4
Jun 6, 2023 10:39:19.560785055 CEST	50009	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:39:19.561743975 CEST	50009	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:39:19.561783075 CEST	443	50009	142.250.203.100	192.168.2.4
Jun 6, 2023 10:39:19.610902071 CEST	443	50009	142.250.203.100	192.168.2.4
Jun 6, 2023 10:39:19.611325026 CEST	50009	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:39:19.611365080 CEST	443	50009	142.250.203.100	192.168.2.4
Jun 6, 2023 10:39:19.612049103 CEST	443	50009	142.250.203.100	192.168.2.4
Jun 6, 2023 10:39:19.613219976 CEST	50009	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:39:19.613393068 CEST	443	50009	142.250.203.100	192.168.2.4
Jun 6, 2023 10:39:19.750473022 CEST	50009	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:39:20.294370890 CEST	50011	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:20.294424057 CEST	443	50011	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:20.294517040 CEST	50011	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:20.294986963 CEST	50011	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:20.295008898 CEST	443	50011	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:20.330269098 CEST	50013	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:20.330318928 CEST	443	50013	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:20.330419064 CEST	50013	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:20.330797911 CEST	50013	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:20.330826044 CEST	443	50013	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:20.342549086 CEST	443	50011	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:20.342981100 CEST	50011	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:20.343020916 CEST	443	50011	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:20.345448017 CEST	443	50011	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:20.345897913 CEST	50011	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:20.346038103 CEST	443	50011	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:20.346209049 CEST	50011	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:20.388286114 CEST	443	50011	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:20.416017056 CEST	50014	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:20.416076899 CEST	443	50014	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:20.416219950 CEST	50014	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:20.416486025 CEST	50014	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:20.416505098 CEST	443	50014	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:20.489063978 CEST	443	50013	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:20.489568949 CEST	50013	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:20.489597082 CEST	443	50013	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:20.490668058 CEST	443	50013	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:20.491578102 CEST	50013	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:20.491760015 CEST	443	50013	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:20.491795063 CEST	50013	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:20.532288074 CEST	443	50013	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:20.550870895 CEST	443	50013	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:20.550985098 CEST	50013	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:20.551451921 CEST	50013	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:20.551476002 CEST	443	50013	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:20.559524059 CEST	443	50014	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:20.559870005 CEST	50014	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:20.559906960 CEST	443	50014	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:20.561172009 CEST	443	50014	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:20.561269999 CEST	50014	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:20.563304901 CEST	50014	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:20.563415051 CEST	443	50014	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:20.563656092 CEST	50014	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:20.563678026 CEST	443	50014	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:20.581579924 CEST	443	50011	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:20.581748009 CEST	443	50011	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:20.581830025 CEST	50011	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:20.582880974 CEST	50011	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:20.582907915 CEST	443	50011	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:20.589323997 CEST	50016	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:20.589376926 CEST	443	50016	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:20.589473963 CEST	50016	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:20.589999914 CEST	50016	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:20.590017080 CEST	443	50016	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:20.610415936 CEST	443	50014	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:20.610500097 CEST	443	50014	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:20.610568047 CEST	50014	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:20.610625029 CEST	50014	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:20.612071037 CEST	50014	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:20.612097025 CEST	443	50014	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:20.625559092 CEST	50017	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:20.625603914 CEST	443	50017	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:20.625698090 CEST	50017	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:20.626074076 CEST	50017	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:20.626101971 CEST	443	50017	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:20.635525942 CEST	443	50016	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:20.636185884 CEST	50016	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:20.636248112 CEST	443	50016	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:20.636990070 CEST	443	50016	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:20.637924910 CEST	50016	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:20.638072968 CEST	443	50016	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:20.638623953 CEST	50016	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:20.680298090 CEST	443	50016	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:20.771028996 CEST	443	50017	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:20.771781921 CEST	50017	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:20.771814108 CEST	443	50017	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:20.772228003 CEST	443	50017	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:20.773268938 CEST	50017	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:20.773391962 CEST	443	50017	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:20.773432970 CEST	50017	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:20.812032938 CEST	443	50017	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:20.812180996 CEST	50017	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:20.820146084 CEST	50017	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:20.820185900 CEST	443	50017	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:20.876564980 CEST	443	50016	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:20.914458036 CEST	443	50016	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:20.914638996 CEST	50016	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:20.914674997 CEST	443	50016	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:20.915179014 CEST	443	50016	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:20.915282965 CEST	50016	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:20.915308952 CEST	443	50016	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:20.935014963 CEST	443	50016	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:20.935152054 CEST	50016	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:20.935184002 CEST	443	50016	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:20.935684919 CEST	443	50016	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:20.935730934 CEST	443	50016	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:20.935791016 CEST	50016	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:20.935817003 CEST	443	50016	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:20.954463959 CEST	443	50016	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:20.954562902 CEST	50016	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:20.954593897 CEST	443	50016	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:20.955163002 CEST	443	50016	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:20.955214024 CEST	443	50016	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:20.955255032 CEST	50016	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:20.955269098 CEST	443	50016	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:20.955303907 CEST	50016	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:20.956168890 CEST	443	50016	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:20.956351995 CEST	50016	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:20.956374884 CEST	443	50016	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:20.957427979 CEST	50016	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:20.957505941 CEST	443	50016	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:20.957591057 CEST	50016	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:20.964982986 CEST	50018	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:20.965044975 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:20.965123892 CEST	50018	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:20.965689898 CEST	50018	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:20.965714931 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.010951996 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.011497974 CEST	50018	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.011558056 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.012847900 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.012984991 CEST	50018	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.013904095 CEST	50018	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.014027119 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.014468908 CEST	50018	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.014503956 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.163089991 CEST	50018	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.245130062 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.284995079 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.285012007 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.285082102 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.285171986 CEST	50018	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.285193920 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.285226107 CEST	50018	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.285373926 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.285388947 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.285419941 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.285445929 CEST	50018	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.285454035 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.285487890 CEST	50018	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.305780888 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.305809021 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.305867910 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.305962086 CEST	50018	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.305984020 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.306006908 CEST	50018	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.306435108 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.306449890 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.306474924 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.306514978 CEST	50018	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.306535006 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.306566000 CEST	50018	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.324202061 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.324222088 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.324286938 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.324592113 CEST	50018	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.324611902 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.326024055 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.326040030 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.326092005 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.326188087 CEST	50018	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.326203108 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.326225042 CEST	50018	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.326920033 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.326935053 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.327080965 CEST	50018	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.327097893 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.327610016 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.327626944 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.327704906 CEST	50018	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.327721119 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.344068050 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.344153881 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.344280005 CEST	50018	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.344300985 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.344314098 CEST	50018	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.344553947 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.344630957 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.344662905 CEST	50018	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.344671965 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.344707966 CEST	50018	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.345774889 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.345909119 CEST	50018	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.345931053 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.412516117 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.412637949 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.412703991 CEST	50018	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.412758112 CEST	50018	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.413397074 CEST	50018	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.413433075 CEST	443	50018	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.447137117 CEST	50019	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.447195053 CEST	443	50019	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.447305918 CEST	50019	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.448244095 CEST	50020	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.448301077 CEST	443	50020	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.448472023 CEST	50020	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.448749065 CEST	50019	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.448775053 CEST	443	50019	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.449122906 CEST	50020	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.449167013 CEST	443	50020	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.529061079 CEST	443	50019	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.529663086 CEST	50019	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.529726028 CEST	443	50019	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.529865026 CEST	443	50020	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.530205011 CEST	50020	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.530241966 CEST	443	50020	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.530291080 CEST	443	50019	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.530966043 CEST	443	50020	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.531003952 CEST	50019	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.531120062 CEST	443	50019	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.531662941 CEST	50020	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.531824112 CEST	443	50020	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.532234907 CEST	50019	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.532533884 CEST	50020	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.572293043 CEST	443	50019	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.576293945 CEST	443	50020	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.743247986 CEST	443	50019	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.749789953 CEST	443	50020	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.781922102 CEST	443	50019	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.782110929 CEST	50019	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.782152891 CEST	443	50019	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.782377005 CEST	443	50019	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.782461882 CEST	50019	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.782485962 CEST	443	50019	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.787760019 CEST	443	50020	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.787914038 CEST	50020	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.787946939 CEST	443	50020	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.788227081 CEST	443	50020	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.788294077 CEST	50020	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.788310051 CEST	443	50020	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.801883936 CEST	443	50019	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.802047014 CEST	50019	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.802078009 CEST	443	50019	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.804593086 CEST	443	50019	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.804652929 CEST	443	50019	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.804733038 CEST	50019	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.804750919 CEST	443	50019	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.804805040 CEST	50019	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.806493044 CEST	443	50020	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.806601048 CEST	50020	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.813389063 CEST	50020	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.813456059 CEST	443	50020	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.813472986 CEST	50020	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.813541889 CEST	50020	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.821410894 CEST	50021	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.821475029 CEST	443	50021	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.821585894 CEST	50021	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.821985960 CEST	50021	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.822007895 CEST	443	50021	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.823088884 CEST	443	50019	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.823108912 CEST	443	50019	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.823177099 CEST	50019	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.823301077 CEST	443	50019	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.823353052 CEST	50019	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.823380947 CEST	443	50019	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.823426008 CEST	50019	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.824378014 CEST	50019	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.824593067 CEST	443	50019	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.824676037 CEST	50019	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.864516020 CEST	443	50021	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.865098953 CEST	50021	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.865147114 CEST	443	50021	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.865648031 CEST	443	50021	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.866672039 CEST	50021	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.866808891 CEST	443	50021	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.866858006 CEST	50021	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:21.908298016 CEST	443	50021	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:21.959316015 CEST	50021	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:22.102767944 CEST	443	50021	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:22.142966032 CEST	443	50021	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:22.142993927 CEST	443	50021	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:22.143084049 CEST	443	50021	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:22.143181086 CEST	50021	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:22.143209934 CEST	443	50021	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:22.143266916 CEST	50021	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:22.143939972 CEST	443	50021	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:22.143966913 CEST	443	50021	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:22.144030094 CEST	443	50021	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:22.144066095 CEST	50021	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:22.144146919 CEST	50021	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:22.164206028 CEST	443	50021	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:22.164237976 CEST	443	50021	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:22.164304972 CEST	443	50021	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:22.164395094 CEST	50021	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:22.164469004 CEST	50021	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:22.165163040 CEST	443	50021	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:22.165184975 CEST	443	50021	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:22.165288925 CEST	50021	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:22.183593035 CEST	443	50021	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:22.183716059 CEST	443	50021	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:22.183785915 CEST	50021	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:22.183820009 CEST	50021	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:22.185122013 CEST	443	50021	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:22.185178995 CEST	443	50021	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:22.185288906 CEST	50021	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:22.185337067 CEST	50021	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:22.185823917 CEST	443	50021	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:22.185947895 CEST	50021	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:22.185961962 CEST	443	50021	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:22.185980082 CEST	443	50021	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:22.186022997 CEST	50021	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:22.205152988 CEST	443	50021	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:22.205348015 CEST	50021	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:22.691967964 CEST	50022	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:22.692044020 CEST	443	50022	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:22.692131996 CEST	50022	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:22.693998098 CEST	50022	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:22.694044113 CEST	443	50022	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:22.730365038 CEST	443	50022	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:22.772398949 CEST	50022	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:22.842627048 CEST	50022	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:22.843271971 CEST	443	50022	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:22.846410036 CEST	50022	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:22.846647024 CEST	443	50022	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:22.846654892 CEST	50021	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:22.846704960 CEST	443	50021	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:22.887413979 CEST	50022	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:25.194608927 CEST	49786	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:39:25.194642067 CEST	443	49786	5.42.199.96	192.168.2.4
Jun 6, 2023 10:39:27.033857107 CEST	50025	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:39:27.033929110 CEST	443	50025	35.81.20.183	192.168.2.4
Jun 6, 2023 10:39:27.034039974 CEST	50025	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:39:27.035906076 CEST	50025	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:39:27.035945892 CEST	443	50025	35.81.20.183	192.168.2.4
Jun 6, 2023 10:39:27.598393917 CEST	443	50025	35.81.20.183	192.168.2.4
Jun 6, 2023 10:39:27.608520985 CEST	50025	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:39:27.608566999 CEST	443	50025	35.81.20.183	192.168.2.4
Jun 6, 2023 10:39:27.609174967 CEST	443	50025	35.81.20.183	192.168.2.4
Jun 6, 2023 10:39:27.609918118 CEST	50025	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:39:27.610039949 CEST	443	50025	35.81.20.183	192.168.2.4
Jun 6, 2023 10:39:27.610433102 CEST	50025	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:39:27.652302980 CEST	443	50025	35.81.20.183	192.168.2.4
Jun 6, 2023 10:39:27.917503119 CEST	50026	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:39:27.917573929 CEST	443	50026	35.81.20.183	192.168.2.4
Jun 6, 2023 10:39:27.917666912 CEST	50026	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:39:27.921505928 CEST	50026	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:39:27.921546936 CEST	443	50026	35.81.20.183	192.168.2.4
Jun 6, 2023 10:39:28.024974108 CEST	443	50025	35.81.20.183	192.168.2.4
Jun 6, 2023 10:39:28.025099993 CEST	443	50025	35.81.20.183	192.168.2.4
Jun 6, 2023 10:39:28.025201082 CEST	50025	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:39:28.037894964 CEST	50025	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:39:28.037959099 CEST	443	50025	35.81.20.183	192.168.2.4
Jun 6, 2023 10:39:28.177160978 CEST	50027	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:28.177218914 CEST	443	50027	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.177304983 CEST	50027	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:28.177649021 CEST	50027	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:28.177670956 CEST	443	50027	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.220302105 CEST	443	50027	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.220772028 CEST	50027	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:28.220810890 CEST	443	50027	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.221273899 CEST	443	50027	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.222002983 CEST	50027	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:28.222110033 CEST	443	50027	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.222548962 CEST	50027	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:28.264292002 CEST	443	50027	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.460314989 CEST	443	50027	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.481307983 CEST	443	50026	35.81.20.183	192.168.2.4
Jun 6, 2023 10:39:28.481703997 CEST	50026	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:39:28.481744051 CEST	443	50026	35.81.20.183	192.168.2.4
Jun 6, 2023 10:39:28.482537031 CEST	443	50026	35.81.20.183	192.168.2.4
Jun 6, 2023 10:39:28.483273029 CEST	50026	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:39:28.483467102 CEST	443	50026	35.81.20.183	192.168.2.4
Jun 6, 2023 10:39:28.483500004 CEST	50026	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:39:28.483570099 CEST	50026	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:39:28.483642101 CEST	443	50026	35.81.20.183	192.168.2.4
Jun 6, 2023 10:39:28.498822927 CEST	443	50027	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.498975039 CEST	50027	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:28.499011040 CEST	443	50027	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.499768019 CEST	443	50027	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.499897957 CEST	50027	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:28.499917984 CEST	443	50027	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.519516945 CEST	443	50027	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.519603968 CEST	50027	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:28.519623041 CEST	443	50027	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.520081997 CEST	443	50027	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.520127058 CEST	443	50027	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.520145893 CEST	50027	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:28.520158052 CEST	443	50027	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.520173073 CEST	50027	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:28.537695885 CEST	50026	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:39:28.539036036 CEST	443	50027	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.539144993 CEST	50027	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:28.539170980 CEST	443	50027	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.539947987 CEST	443	50027	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.539999962 CEST	443	50027	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.540036917 CEST	50027	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:28.540057898 CEST	443	50027	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.540087938 CEST	50027	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:28.541004896 CEST	443	50027	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.541089058 CEST	50027	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:28.541105986 CEST	443	50027	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.541678905 CEST	443	50027	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.541790009 CEST	50027	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:28.541805029 CEST	443	50027	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.557610989 CEST	443	50027	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.557704926 CEST	50027	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:28.557751894 CEST	443	50027	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.559266090 CEST	443	50027	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.559369087 CEST	50027	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:28.559396982 CEST	443	50027	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.559922934 CEST	443	50027	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.560019970 CEST	50027	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:28.560034990 CEST	443	50027	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.579618931 CEST	443	50027	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.579726934 CEST	50027	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:28.579737902 CEST	443	50027	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.579797983 CEST	50027	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:28.580586910 CEST	50027	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:28.580615997 CEST	443	50027	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.593457937 CEST	50028	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:28.593517065 CEST	443	50028	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.593611956 CEST	50028	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:28.594149113 CEST	50028	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:28.594175100 CEST	443	50028	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.636647940 CEST	443	50028	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.636998892 CEST	50028	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:28.637054920 CEST	443	50028	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.637501955 CEST	443	50028	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.637983084 CEST	50028	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:28.638104916 CEST	443	50028	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.638192892 CEST	50028	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:28.680299997 CEST	443	50028	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.850886106 CEST	443	50026	35.81.20.183	192.168.2.4
Jun 6, 2023 10:39:28.851013899 CEST	443	50026	35.81.20.183	192.168.2.4
Jun 6, 2023 10:39:28.851103067 CEST	50026	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:39:28.852813005 CEST	50026	443	192.168.2.4	35.81.20.183
Jun 6, 2023 10:39:28.852864027 CEST	443	50026	35.81.20.183	192.168.2.4
Jun 6, 2023 10:39:28.876569986 CEST	443	50028	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.914752007 CEST	443	50028	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.914911985 CEST	50028	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:28.914959908 CEST	443	50028	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.915714979 CEST	443	50028	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.915808916 CEST	50028	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:28.915838003 CEST	443	50028	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.934962034 CEST	443	50028	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.935038090 CEST	50028	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:28.935076952 CEST	443	50028	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.935105085 CEST	443	50028	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.935147047 CEST	50028	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:28.946270943 CEST	50028	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:28.946326971 CEST	443	50028	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.969278097 CEST	50029	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:28.969333887 CEST	443	50029	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.969429016 CEST	50029	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:28.970036030 CEST	50029	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:28.970056057 CEST	443	50029	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:28.995362043 CEST	50030	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:28.995450020 CEST	443	50030	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:28.995570898 CEST	50030	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:28.995919943 CEST	50030	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:28.995939970 CEST	443	50030	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:29.001022100 CEST	50031	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.001099110 CEST	443	50031	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.001220942 CEST	50031	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.001785994 CEST	50031	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.001815081 CEST	443	50031	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.014153004 CEST	443	50029	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.014561892 CEST	50029	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.014586926 CEST	443	50029	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.015239954 CEST	443	50029	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.015770912 CEST	50029	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.015888929 CEST	443	50029	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.016009092 CEST	50029	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.046163082 CEST	443	50031	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.046679020 CEST	50031	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.046721935 CEST	443	50031	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.049035072 CEST	443	50031	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.049169064 CEST	50031	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.049902916 CEST	50031	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.050076962 CEST	443	50031	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.050245047 CEST	50031	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.050270081 CEST	443	50031	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.056279898 CEST	443	50029	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.142652988 CEST	443	50030	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:29.143290997 CEST	50030	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:29.143346071 CEST	443	50030	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:29.144349098 CEST	443	50030	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:29.145159960 CEST	50030	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:29.145312071 CEST	50030	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:29.145333052 CEST	443	50030	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:29.145371914 CEST	443	50030	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:29.184058905 CEST	443	50030	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:29.184225082 CEST	443	50030	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:29.184235096 CEST	50030	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:29.184294939 CEST	50030	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:29.185393095 CEST	50030	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:29.185451031 CEST	443	50030	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:29.189227104 CEST	50031	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.242820024 CEST	443	50029	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.281060934 CEST	443	50029	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.281136990 CEST	443	50029	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.281210899 CEST	50029	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.281225920 CEST	443	50029	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.281301022 CEST	50029	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.282946110 CEST	50029	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.283015966 CEST	443	50029	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.283121109 CEST	50029	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.284687042 CEST	443	50031	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.323371887 CEST	443	50031	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.323400974 CEST	443	50031	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.323451042 CEST	443	50031	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.323513985 CEST	50031	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.323543072 CEST	443	50031	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.323582888 CEST	50031	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.324645042 CEST	443	50031	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.324670076 CEST	443	50031	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.324701071 CEST	443	50031	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.324767113 CEST	50031	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.324790955 CEST	443	50031	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.324811935 CEST	50031	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.330611944 CEST	50037	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:29.330667019 CEST	443	50037	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:29.330782890 CEST	50037	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:29.331317902 CEST	50037	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:29.331334114 CEST	443	50037	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:29.346570015 CEST	443	50031	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.346594095 CEST	443	50031	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.346637964 CEST	443	50031	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.346664906 CEST	443	50031	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.346719027 CEST	50031	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.346744061 CEST	443	50031	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.346771002 CEST	50031	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.346790075 CEST	443	50031	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.346792936 CEST	50031	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.346889973 CEST	50031	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.347580910 CEST	50031	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.347615004 CEST	443	50031	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.384728909 CEST	50038	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.384793997 CEST	443	50038	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.384910107 CEST	50038	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.385824919 CEST	50038	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.385845900 CEST	443	50038	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.386934042 CEST	50039	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.386993885 CEST	443	50039	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.387092113 CEST	50039	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.387641907 CEST	50039	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.387669086 CEST	443	50039	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.439569950 CEST	443	50039	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.439742088 CEST	443	50038	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.440165043 CEST	50039	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.440222025 CEST	443	50039	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.440458059 CEST	50038	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.440495014 CEST	443	50038	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.440861940 CEST	443	50039	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.441236973 CEST	443	50038	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.441602945 CEST	50039	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.441864967 CEST	443	50039	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.442198992 CEST	50038	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.442392111 CEST	443	50038	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.442567110 CEST	50039	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.442763090 CEST	50038	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.477744102 CEST	443	50037	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:29.478271961 CEST	50037	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:29.478306055 CEST	443	50037	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:29.479022026 CEST	443	50037	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:29.479834080 CEST	50037	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:29.479974031 CEST	443	50037	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:29.480046034 CEST	50037	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:29.484302044 CEST	443	50038	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.484307051 CEST	443	50039	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.520291090 CEST	443	50037	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:29.520989895 CEST	443	50037	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:29.521109104 CEST	50037	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:29.521745920 CEST	50037	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:29.521765947 CEST	443	50037	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:29.533274889 CEST	50041	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:29.533338070 CEST	443	50041	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:29.533453941 CEST	50041	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:29.533935070 CEST	50041	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:29.533955097 CEST	443	50041	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:29.594105959 CEST	443	50009	142.250.203.100	192.168.2.4
Jun 6, 2023 10:39:29.594239950 CEST	443	50009	142.250.203.100	192.168.2.4
Jun 6, 2023 10:39:29.594332933 CEST	50009	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:39:29.664222956 CEST	443	50038	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.666990995 CEST	443	50039	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.682924986 CEST	443	50041	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:29.683453083 CEST	50041	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:29.683486938 CEST	443	50041	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:29.683945894 CEST	443	50041	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:29.684669018 CEST	50041	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:29.684772968 CEST	443	50041	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:29.685045004 CEST	50041	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:29.702078104 CEST	443	50038	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.702228069 CEST	50038	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.702292919 CEST	443	50038	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.702495098 CEST	443	50038	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.702570915 CEST	50038	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.702585936 CEST	443	50038	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.704950094 CEST	443	50039	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.705007076 CEST	443	50039	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.705106020 CEST	50039	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.705142975 CEST	443	50039	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.705168962 CEST	50039	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.705615997 CEST	50039	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.705677032 CEST	443	50039	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.705740929 CEST	50039	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.711913109 CEST	50009	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:39:29.711971045 CEST	443	50009	142.250.203.100	192.168.2.4
Jun 6, 2023 10:39:29.722601891 CEST	443	50038	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.722667933 CEST	443	50038	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.722790003 CEST	50038	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.722827911 CEST	443	50038	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.722903967 CEST	50038	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.723392963 CEST	443	50038	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.723491907 CEST	443	50038	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.723676920 CEST	50038	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.723905087 CEST	50038	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.723932028 CEST	443	50038	62.138.155.102	192.168.2.4
Jun 6, 2023 10:39:29.724092007 CEST	50038	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.724092007 CEST	50038	443	192.168.2.4	62.138.155.102
Jun 6, 2023 10:39:29.724277973 CEST	443	50041	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:29.724375963 CEST	443	50041	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:29.724462986 CEST	50041	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:29.725649118 CEST	50041	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:29.725672960 CEST	443	50041	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:29.735754967 CEST	50042	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:29.735802889 CEST	443	50042	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:29.735928059 CEST	50042	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:29.736773968 CEST	50042	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:29.736787081 CEST	443	50042	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:29.927612066 CEST	443	50042	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:29.928173065 CEST	50042	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:29.928205967 CEST	443	50042	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:29.928988934 CEST	443	50042	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:29.930274963 CEST	50042	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:29.930408955 CEST	443	50042	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:29.930746078 CEST	50042	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:29.967582941 CEST	443	50042	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:29.967685938 CEST	443	50042	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:29.967792034 CEST	50042	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:30.004684925 CEST	50042	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:30.004719973 CEST	443	50042	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:30.013500929 CEST	50043	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:30.013577938 CEST	443	50043	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:30.013672113 CEST	50043	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:30.014209032 CEST	50043	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:30.014240026 CEST	443	50043	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:30.154783964 CEST	443	50043	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:30.155370951 CEST	50043	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:30.155428886 CEST	443	50043	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:30.155939102 CEST	443	50043	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:30.156781912 CEST	50043	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:30.156919003 CEST	443	50043	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:30.157030106 CEST	50043	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:30.197652102 CEST	443	50043	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:30.197756052 CEST	443	50043	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:30.197865009 CEST	50043	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:30.198506117 CEST	50043	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:30.198565006 CEST	443	50043	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:31.258574009 CEST	50044	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:31.258636951 CEST	443	50044	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:31.258709908 CEST	50044	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:31.259097099 CEST	50044	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:31.259119034 CEST	443	50044	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:31.408205032 CEST	443	50044	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:31.408837080 CEST	50044	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:31.408880949 CEST	443	50044	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:31.414015055 CEST	443	50044	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:31.415719032 CEST	50044	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:31.416099072 CEST	50044	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:31.416122913 CEST	443	50044	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:31.417824984 CEST	443	50044	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:31.458121061 CEST	443	50044	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:31.458256006 CEST	50044	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:31.458758116 CEST	50044	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:31.458798885 CEST	443	50044	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:39.980731010 CEST	443	49786	5.42.199.96	192.168.2.4
Jun 6, 2023 10:39:39.981004953 CEST	443	49786	5.42.199.96	192.168.2.4
Jun 6, 2023 10:39:39.981074095 CEST	49786	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:39:40.022522926 CEST	49786	443	192.168.2.4	5.42.199.96
Jun 6, 2023 10:39:40.022593021 CEST	443	49786	5.42.199.96	192.168.2.4
Jun 6, 2023 10:39:40.023050070 CEST	50045	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:40.023108006 CEST	443	50045	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:40.023508072 CEST	50045	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:40.023508072 CEST	50045	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:40.023585081 CEST	443	50045	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:40.173392057 CEST	443	50045	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:40.173849106 CEST	50045	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:40.173866987 CEST	443	50045	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:40.174499989 CEST	443	50045	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:40.175709009 CEST	50045	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:40.175829887 CEST	443	50045	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:40.176167965 CEST	50045	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:40.216315985 CEST	443	50045	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:40.217223883 CEST	443	50045	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:40.217519999 CEST	443	50045	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:40.217612028 CEST	50045	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:40.218194008 CEST	50045	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:40.218228102 CEST	443	50045	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:44.343930960 CEST	50046	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:44.344057083 CEST	443	50046	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:44.344244957 CEST	50046	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:44.344681978 CEST	50046	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:44.344737053 CEST	443	50046	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:44.364937067 CEST	50047	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:44.364984035 CEST	443	50047	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:44.365077019 CEST	50047	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:44.365674973 CEST	50047	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:44.365691900 CEST	443	50047	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:44.497164011 CEST	443	50046	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:44.497710943 CEST	50046	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:44.497745991 CEST	443	50046	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:44.498555899 CEST	443	50046	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:44.499228001 CEST	50046	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:44.499412060 CEST	443	50046	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:44.499414921 CEST	50046	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:44.514806986 CEST	443	50047	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:44.515206099 CEST	50047	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:44.515254974 CEST	443	50047	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:44.516488075 CEST	443	50047	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:44.517014980 CEST	50047	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:44.517179966 CEST	50047	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:44.517195940 CEST	443	50047	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:44.517258883 CEST	443	50047	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:44.537035942 CEST	443	50046	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:44.537169933 CEST	50046	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:44.537628889 CEST	50046	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:39:44.537656069 CEST	443	50046	178.249.96.141	192.168.2.4
Jun 6, 2023 10:39:44.562233925 CEST	443	50047	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:44.562412977 CEST	50047	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:45.572617054 CEST	50047	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:45.572679996 CEST	443	50047	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:45.590290070 CEST	50048	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:45.590348005 CEST	443	50048	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:45.590922117 CEST	50048	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:45.591442108 CEST	50048	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:45.591466904 CEST	443	50048	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:45.738251925 CEST	443	50048	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:45.738895893 CEST	50048	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:45.738928080 CEST	443	50048	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:45.739702940 CEST	443	50048	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:45.741080046 CEST	50048	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:45.741255999 CEST	443	50048	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:45.741400003 CEST	50048	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:45.780251026 CEST	443	50048	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:45.780407906 CEST	443	50048	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:45.780491114 CEST	50048	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:45.780807972 CEST	50048	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:45.780826092 CEST	443	50048	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:45.792614937 CEST	50049	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:45.792716980 CEST	443	50049	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:45.792809963 CEST	50049	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:45.793729067 CEST	50049	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:45.793781042 CEST	443	50049	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:45.969121933 CEST	443	50049	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:46.009252071 CEST	50049	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:46.039624929 CEST	50049	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:46.039653063 CEST	443	50049	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:46.040487051 CEST	443	50049	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:46.041234016 CEST	50049	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:46.041454077 CEST	50049	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:46.041490078 CEST	443	50049	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:46.041683912 CEST	443	50049	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:46.079425097 CEST	443	50049	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:46.079524040 CEST	50049	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:46.080229998 CEST	50049	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:46.080324888 CEST	443	50049	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:46.108809948 CEST	50051	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:46.108855009 CEST	443	50051	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:46.108936071 CEST	50051	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:46.109189034 CEST	50051	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:46.109210014 CEST	443	50051	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:46.252684116 CEST	443	50051	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:46.269609928 CEST	50051	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:46.269650936 CEST	443	50051	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:46.271075010 CEST	443	50051	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:46.271940947 CEST	50051	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:46.272110939 CEST	50051	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:46.272120953 CEST	443	50051	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:46.272195101 CEST	443	50051	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:46.309892893 CEST	443	50051	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:46.310086966 CEST	50051	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:46.411876917 CEST	50051	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:46.411914110 CEST	443	50051	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:52.725095034 CEST	443	50022	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:52.725224018 CEST	443	50022	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:52.725284100 CEST	50022	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:54.122507095 CEST	50022	443	192.168.2.4	18.66.192.16
Jun 6, 2023 10:39:54.122544050 CEST	443	50022	18.66.192.16	192.168.2.4
Jun 6, 2023 10:39:55.618469954 CEST	49934	443	192.168.2.4	91.214.6.108
Jun 6, 2023 10:39:55.618505955 CEST	443	49934	91.214.6.108	192.168.2.4
Jun 6, 2023 10:39:56.091619968 CEST	50052	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:56.091665983 CEST	443	50052	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:56.091805935 CEST	50052	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:56.092041016 CEST	50052	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:56.092060089 CEST	443	50052	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:56.241710901 CEST	443	50052	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:56.242774963 CEST	50052	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:56.242813110 CEST	443	50052	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:56.243973970 CEST	443	50052	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:56.245460033 CEST	50052	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:56.245712996 CEST	443	50052	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:56.246068001 CEST	50052	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:56.292284012 CEST	443	50052	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:56.434453011 CEST	443	50052	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:56.434658051 CEST	443	50052	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:56.434811115 CEST	50052	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:56.435841084 CEST	50052	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:56.435864925 CEST	443	50052	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:59.195482016 CEST	50053	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:59.195533037 CEST	443	50053	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:59.195617914 CEST	50053	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:59.196249962 CEST	50053	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:59.196289062 CEST	443	50053	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:59.344036102 CEST	443	50053	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:59.370136023 CEST	50053	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:59.370181084 CEST	443	50053	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:59.370788097 CEST	443	50053	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:59.412585020 CEST	50053	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:59.625216007 CEST	50053	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:59.625421047 CEST	443	50053	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:59.625716925 CEST	50053	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:59.664443970 CEST	443	50053	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:59.664547920 CEST	443	50053	178.249.97.70	192.168.2.4
Jun 6, 2023 10:39:59.664674044 CEST	50053	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:59.762406111 CEST	50053	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:39:59.762480021 CEST	443	50053	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:01.234577894 CEST	50054	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:01.234656096 CEST	443	50054	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:01.234915018 CEST	50054	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:01.252716064 CEST	50054	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:01.252787113 CEST	443	50054	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:01.403222084 CEST	443	50054	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:01.408209085 CEST	50054	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:01.408271074 CEST	443	50054	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:01.409302950 CEST	443	50054	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:01.420964956 CEST	50054	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:01.421118021 CEST	50054	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:01.421148062 CEST	443	50054	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:01.421554089 CEST	443	50054	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:01.461268902 CEST	50054	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:01.465997934 CEST	443	50054	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:01.466579914 CEST	443	50054	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:01.466671944 CEST	50054	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:01.475567102 CEST	50054	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:01.475614071 CEST	443	50054	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:01.490641117 CEST	50055	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:01.490695953 CEST	443	50055	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:01.490778923 CEST	50055	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:01.491197109 CEST	50055	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:01.491225004 CEST	443	50055	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:01.648858070 CEST	443	50055	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:01.649205923 CEST	50055	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:01.649247885 CEST	443	50055	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:01.650134087 CEST	443	50055	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:01.651031971 CEST	50055	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:01.651182890 CEST	50055	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:01.651196003 CEST	443	50055	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:01.651259899 CEST	443	50055	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:01.691262960 CEST	50055	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:01.693885088 CEST	443	50055	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:01.694184065 CEST	443	50055	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:01.694262028 CEST	50055	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:02.643661022 CEST	50055	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:02.643721104 CEST	443	50055	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:03.114509106 CEST	50058	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:03.114561081 CEST	443	50058	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:03.114648104 CEST	50058	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:03.115045071 CEST	50058	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:03.115056992 CEST	443	50058	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:03.261428118 CEST	443	50058	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:03.290600061 CEST	50058	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:03.290631056 CEST	443	50058	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:03.291502953 CEST	443	50058	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:03.336131096 CEST	50058	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:03.336311102 CEST	50058	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:03.336328983 CEST	443	50058	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:03.336568117 CEST	443	50058	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:03.409816980 CEST	443	50058	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:03.409899950 CEST	50058	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:03.410936117 CEST	50058	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:03.410960913 CEST	443	50058	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:06.312030077 CEST	50059	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:40:06.312118053 CEST	443	50059	178.249.96.141	192.168.2.4
Jun 6, 2023 10:40:06.312242985 CEST	50059	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:40:06.312719107 CEST	50059	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:40:06.312741995 CEST	443	50059	178.249.96.141	192.168.2.4
Jun 6, 2023 10:40:06.457819939 CEST	443	50059	178.249.96.141	192.168.2.4
Jun 6, 2023 10:40:06.458379030 CEST	50059	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:40:06.458412886 CEST	443	50059	178.249.96.141	192.168.2.4
Jun 6, 2023 10:40:06.458904028 CEST	443	50059	178.249.96.141	192.168.2.4
Jun 6, 2023 10:40:06.459639072 CEST	50059	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:40:06.459774017 CEST	443	50059	178.249.96.141	192.168.2.4
Jun 6, 2023 10:40:06.459865093 CEST	50059	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:40:06.504297018 CEST	443	50059	178.249.96.141	192.168.2.4
Jun 6, 2023 10:40:06.506362915 CEST	443	50059	178.249.96.141	192.168.2.4
Jun 6, 2023 10:40:06.506561995 CEST	50059	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:40:06.507194996 CEST	50059	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:40:06.507230043 CEST	443	50059	178.249.96.141	192.168.2.4
Jun 6, 2023 10:40:13.026607990 CEST	49934	443	192.168.2.4	91.214.6.108
Jun 6, 2023 10:40:13.026766062 CEST	443	49934	91.214.6.108	192.168.2.4
Jun 6, 2023 10:40:13.026854038 CEST	49934	443	192.168.2.4	91.214.6.108
Jun 6, 2023 10:40:13.042371035 CEST	50061	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:13.042454004 CEST	443	50061	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:13.042562008 CEST	50061	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:13.043381929 CEST	50061	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:13.043416977 CEST	443	50061	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:13.196247101 CEST	443	50061	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:13.196919918 CEST	50061	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:13.196976900 CEST	443	50061	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:13.197722912 CEST	443	50061	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:13.198575974 CEST	50061	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:13.198748112 CEST	443	50061	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:13.198795080 CEST	50061	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:13.236681938 CEST	443	50061	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:13.237061024 CEST	50061	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:13.237839937 CEST	50061	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:13.237869024 CEST	443	50061	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:14.040352106 CEST	50062	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:14.040436983 CEST	443	50062	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:14.040530920 CEST	50062	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:14.040992975 CEST	50062	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:14.041009903 CEST	443	50062	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:14.186691046 CEST	443	50062	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:14.187115908 CEST	50062	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:14.187159061 CEST	443	50062	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:14.188332081 CEST	443	50062	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:14.188888073 CEST	50062	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:14.189054966 CEST	50062	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:14.189064980 CEST	443	50062	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:14.189105034 CEST	443	50062	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:14.228557110 CEST	443	50062	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:14.228722095 CEST	50062	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:14.229559898 CEST	50062	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:14.229605913 CEST	443	50062	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:14.237906933 CEST	50063	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:14.237968922 CEST	443	50063	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:14.238065004 CEST	50063	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:14.238550901 CEST	50063	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:14.238573074 CEST	443	50063	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:14.388642073 CEST	443	50063	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:14.389213085 CEST	50063	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:14.389254093 CEST	443	50063	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:14.389755011 CEST	443	50063	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:14.390302896 CEST	50063	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:14.390419960 CEST	443	50063	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:14.390474081 CEST	50063	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:14.431273937 CEST	443	50063	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:14.431385040 CEST	50063	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:14.431394100 CEST	443	50063	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:14.431485891 CEST	50063	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:14.432081938 CEST	50063	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:14.432112932 CEST	443	50063	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:14.438361883 CEST	50064	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:14.438424110 CEST	443	50064	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:14.438539982 CEST	50064	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:14.443439007 CEST	50064	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:14.443504095 CEST	443	50064	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:14.634409904 CEST	443	50064	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:14.634874105 CEST	50064	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:14.634927034 CEST	443	50064	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:14.636090994 CEST	443	50064	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:14.636647940 CEST	50064	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:14.636795044 CEST	50064	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:14.636816025 CEST	443	50064	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:14.636843920 CEST	443	50064	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:14.676709890 CEST	50064	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:14.678349972 CEST	443	50064	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:14.678628922 CEST	443	50064	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:14.680145979 CEST	50064	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:14.680283070 CEST	50064	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:14.680320024 CEST	443	50064	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:14.685906887 CEST	50066	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:14.685960054 CEST	443	50066	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:14.686286926 CEST	50066	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:14.686494112 CEST	50066	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:14.686508894 CEST	443	50066	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:14.845876932 CEST	443	50066	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:14.846522093 CEST	50066	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:14.846585989 CEST	443	50066	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:14.848315001 CEST	443	50066	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:14.849459887 CEST	50066	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:14.849690914 CEST	443	50066	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:14.849955082 CEST	50066	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:14.890316010 CEST	443	50066	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:14.890490055 CEST	443	50066	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:14.890635967 CEST	50066	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:14.891733885 CEST	50066	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:14.891760111 CEST	443	50066	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:17.261831999 CEST	50067	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:40:17.261893988 CEST	443	50067	178.249.96.141	192.168.2.4
Jun 6, 2023 10:40:17.261977911 CEST	50067	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:40:17.262202024 CEST	50067	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:40:17.262222052 CEST	443	50067	178.249.96.141	192.168.2.4
Jun 6, 2023 10:40:17.412130117 CEST	443	50067	178.249.96.141	192.168.2.4
Jun 6, 2023 10:40:17.412492037 CEST	50067	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:40:17.412530899 CEST	443	50067	178.249.96.141	192.168.2.4
Jun 6, 2023 10:40:17.413789034 CEST	443	50067	178.249.96.141	192.168.2.4
Jun 6, 2023 10:40:17.414325953 CEST	50067	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:40:17.414474964 CEST	50067	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:40:17.414486885 CEST	443	50067	178.249.96.141	192.168.2.4
Jun 6, 2023 10:40:17.414586067 CEST	443	50067	178.249.96.141	192.168.2.4
Jun 6, 2023 10:40:17.453567982 CEST	443	50067	178.249.96.141	192.168.2.4
Jun 6, 2023 10:40:17.453645945 CEST	50067	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:40:17.453708887 CEST	443	50067	178.249.96.141	192.168.2.4
Jun 6, 2023 10:40:17.453733921 CEST	443	50067	178.249.96.141	192.168.2.4
Jun 6, 2023 10:40:17.453782082 CEST	50067	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:40:17.454375029 CEST	50067	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:40:17.454404116 CEST	443	50067	178.249.96.141	192.168.2.4
Jun 6, 2023 10:40:17.809133053 CEST	50070	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:40:17.809425116 CEST	443	50070	178.249.96.141	192.168.2.4
Jun 6, 2023 10:40:17.809684038 CEST	50070	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:40:17.810031891 CEST	50070	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:40:17.810072899 CEST	443	50070	178.249.96.141	192.168.2.4
Jun 6, 2023 10:40:17.956024885 CEST	443	50070	178.249.96.141	192.168.2.4
Jun 6, 2023 10:40:17.956809998 CEST	50070	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:40:17.956840038 CEST	443	50070	178.249.96.141	192.168.2.4
Jun 6, 2023 10:40:17.957314014 CEST	443	50070	178.249.96.141	192.168.2.4
Jun 6, 2023 10:40:17.958043098 CEST	50070	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:40:17.958153009 CEST	443	50070	178.249.96.141	192.168.2.4
Jun 6, 2023 10:40:17.958311081 CEST	50070	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:40:17.996149063 CEST	443	50070	178.249.96.141	192.168.2.4
Jun 6, 2023 10:40:17.996340990 CEST	443	50070	178.249.96.141	192.168.2.4
Jun 6, 2023 10:40:17.996562958 CEST	50070	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:40:17.997600079 CEST	50070	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:40:17.997629881 CEST	443	50070	178.249.96.141	192.168.2.4
Jun 6, 2023 10:40:19.193104029 CEST	50071	443	192.168.2.4	52.49.176.241
Jun 6, 2023 10:40:19.193165064 CEST	443	50071	52.49.176.241	192.168.2.4
Jun 6, 2023 10:40:19.193248034 CEST	50071	443	192.168.2.4	52.49.176.241
Jun 6, 2023 10:40:19.193579912 CEST	50071	443	192.168.2.4	52.49.176.241
Jun 6, 2023 10:40:19.193597078 CEST	443	50071	52.49.176.241	192.168.2.4
Jun 6, 2023 10:40:19.206600904 CEST	50072	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.206676960 CEST	443	50072	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.206780910 CEST	50072	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.207103014 CEST	50073	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.207140923 CEST	443	50073	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.207211018 CEST	50073	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.207818985 CEST	50074	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.207847118 CEST	443	50074	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.207896948 CEST	50074	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.208163977 CEST	50075	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.208247900 CEST	443	50075	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.208337069 CEST	50075	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.208409071 CEST	50076	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.208447933 CEST	443	50076	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.208501101 CEST	50076	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.208846092 CEST	50077	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.208894014 CEST	443	50077	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.208962917 CEST	50077	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.210249901 CEST	50072	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.210282087 CEST	443	50072	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.210513115 CEST	50073	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.210539103 CEST	443	50073	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.210767984 CEST	50074	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.210786104 CEST	443	50074	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.211544037 CEST	50075	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.211596966 CEST	443	50075	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.211848974 CEST	50076	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.211882114 CEST	443	50076	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.212009907 CEST	50077	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.212053061 CEST	443	50077	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.212436914 CEST	50078	443	192.168.2.4	108.138.37.209
Jun 6, 2023 10:40:19.212459087 CEST	443	50078	108.138.37.209	192.168.2.4
Jun 6, 2023 10:40:19.212518930 CEST	50078	443	192.168.2.4	108.138.37.209
Jun 6, 2023 10:40:19.213035107 CEST	50078	443	192.168.2.4	108.138.37.209
Jun 6, 2023 10:40:19.213062048 CEST	443	50078	108.138.37.209	192.168.2.4
Jun 6, 2023 10:40:19.304086924 CEST	50079	443	192.168.2.4	18.197.3.151
Jun 6, 2023 10:40:19.304162025 CEST	443	50079	18.197.3.151	192.168.2.4
Jun 6, 2023 10:40:19.304286003 CEST	50079	443	192.168.2.4	18.197.3.151
Jun 6, 2023 10:40:19.304527998 CEST	50079	443	192.168.2.4	18.197.3.151
Jun 6, 2023 10:40:19.304563046 CEST	443	50079	18.197.3.151	192.168.2.4
Jun 6, 2023 10:40:19.375756025 CEST	443	50075	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.376120090 CEST	50075	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.376180887 CEST	443	50075	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.377862930 CEST	443	50075	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.377958059 CEST	50075	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.378498077 CEST	50075	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.378648043 CEST	443	50075	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.378700972 CEST	50075	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.386944056 CEST	443	50073	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.387434006 CEST	50073	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.387490034 CEST	443	50073	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.388634920 CEST	443	50073	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.389205933 CEST	50073	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.389386892 CEST	50073	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.389408112 CEST	443	50073	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.389431953 CEST	443	50073	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.418078899 CEST	443	50071	52.49.176.241	192.168.2.4
Jun 6, 2023 10:40:19.419116974 CEST	50075	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.419153929 CEST	443	50075	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.420778990 CEST	50071	443	192.168.2.4	52.49.176.241
Jun 6, 2023 10:40:19.420821905 CEST	443	50071	52.49.176.241	192.168.2.4
Jun 6, 2023 10:40:19.423218966 CEST	443	50071	52.49.176.241	192.168.2.4
Jun 6, 2023 10:40:19.423321962 CEST	50071	443	192.168.2.4	52.49.176.241
Jun 6, 2023 10:40:19.426110029 CEST	50071	443	192.168.2.4	52.49.176.241
Jun 6, 2023 10:40:19.426337957 CEST	50071	443	192.168.2.4	52.49.176.241
Jun 6, 2023 10:40:19.426357031 CEST	443	50071	52.49.176.241	192.168.2.4
Jun 6, 2023 10:40:19.426382065 CEST	443	50071	52.49.176.241	192.168.2.4
Jun 6, 2023 10:40:19.431140900 CEST	50073	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.460119009 CEST	50075	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.467149019 CEST	50071	443	192.168.2.4	52.49.176.241
Jun 6, 2023 10:40:19.467196941 CEST	443	50071	52.49.176.241	192.168.2.4
Jun 6, 2023 10:40:19.472417116 CEST	50080	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:19.472476006 CEST	443	50080	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:19.472560883 CEST	50080	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:19.472882032 CEST	50080	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:19.472907066 CEST	443	50080	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:19.473603010 CEST	443	50071	52.49.176.241	192.168.2.4
Jun 6, 2023 10:40:19.473668098 CEST	50071	443	192.168.2.4	52.49.176.241
Jun 6, 2023 10:40:19.475368977 CEST	50071	443	192.168.2.4	52.49.176.241
Jun 6, 2023 10:40:19.475409031 CEST	443	50071	52.49.176.241	192.168.2.4
Jun 6, 2023 10:40:19.477600098 CEST	50081	443	192.168.2.4	52.49.176.241
Jun 6, 2023 10:40:19.477653027 CEST	443	50081	52.49.176.241	192.168.2.4
Jun 6, 2023 10:40:19.477828979 CEST	50081	443	192.168.2.4	52.49.176.241
Jun 6, 2023 10:40:19.478138924 CEST	50081	443	192.168.2.4	52.49.176.241
Jun 6, 2023 10:40:19.478158951 CEST	443	50081	52.49.176.241	192.168.2.4
Jun 6, 2023 10:40:19.512224913 CEST	443	50076	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.517065048 CEST	50076	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.517111063 CEST	443	50076	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.519043922 CEST	443	50076	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.519149065 CEST	50076	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.519701958 CEST	50076	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.519870043 CEST	50076	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.519882917 CEST	443	50076	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.519974947 CEST	443	50076	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.530446053 CEST	443	50078	108.138.37.209	192.168.2.4
Jun 6, 2023 10:40:19.530915976 CEST	50078	443	192.168.2.4	108.138.37.209
Jun 6, 2023 10:40:19.530958891 CEST	443	50078	108.138.37.209	192.168.2.4
Jun 6, 2023 10:40:19.532793999 CEST	443	50078	108.138.37.209	192.168.2.4
Jun 6, 2023 10:40:19.532880068 CEST	50078	443	192.168.2.4	108.138.37.209
Jun 6, 2023 10:40:19.534945965 CEST	50078	443	192.168.2.4	108.138.37.209
Jun 6, 2023 10:40:19.535149097 CEST	50078	443	192.168.2.4	108.138.37.209
Jun 6, 2023 10:40:19.535164118 CEST	443	50078	108.138.37.209	192.168.2.4
Jun 6, 2023 10:40:19.535260916 CEST	443	50077	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.535377979 CEST	443	50078	108.138.37.209	192.168.2.4
Jun 6, 2023 10:40:19.535561085 CEST	50077	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.535593987 CEST	443	50077	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.537260056 CEST	443	50072	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.537570953 CEST	50072	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.537614107 CEST	443	50072	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.537775040 CEST	443	50077	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.537854910 CEST	50077	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.537908077 CEST	443	50079	18.197.3.151	192.168.2.4
Jun 6, 2023 10:40:19.538342953 CEST	50077	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.538527966 CEST	50079	443	192.168.2.4	18.197.3.151
Jun 6, 2023 10:40:19.538567066 CEST	443	50079	18.197.3.151	192.168.2.4
Jun 6, 2023 10:40:19.538589954 CEST	443	50077	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.538654089 CEST	443	50072	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.538686991 CEST	50077	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.538712025 CEST	443	50077	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.539026022 CEST	443	50074	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.539248943 CEST	50072	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.539382935 CEST	443	50072	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.539580107 CEST	50074	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.539614916 CEST	443	50074	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.539700985 CEST	50072	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.540025949 CEST	443	50079	18.197.3.151	192.168.2.4
Jun 6, 2023 10:40:19.540110111 CEST	50079	443	192.168.2.4	18.197.3.151
Jun 6, 2023 10:40:19.541035891 CEST	443	50074	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.541145086 CEST	50074	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.541595936 CEST	50074	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.541708946 CEST	443	50074	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.541745901 CEST	50074	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.542221069 CEST	50079	443	192.168.2.4	18.197.3.151
Jun 6, 2023 10:40:19.542346001 CEST	443	50079	18.197.3.151	192.168.2.4
Jun 6, 2023 10:40:19.542435884 CEST	50079	443	192.168.2.4	18.197.3.151
Jun 6, 2023 10:40:19.542459965 CEST	443	50079	18.197.3.151	192.168.2.4
Jun 6, 2023 10:40:19.547307968 CEST	443	50073	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.547337055 CEST	443	50073	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.547383070 CEST	50073	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.547405958 CEST	443	50073	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.547425032 CEST	443	50073	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.547463894 CEST	50073	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.548496962 CEST	50073	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.548532009 CEST	443	50073	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.550909042 CEST	50082	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.550959110 CEST	443	50082	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.551033020 CEST	50082	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.551294088 CEST	50082	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.551320076 CEST	443	50082	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.551521063 CEST	443	50078	108.138.37.209	192.168.2.4
Jun 6, 2023 10:40:19.551624060 CEST	50078	443	192.168.2.4	108.138.37.209
Jun 6, 2023 10:40:19.551656008 CEST	443	50078	108.138.37.209	192.168.2.4
Jun 6, 2023 10:40:19.551784039 CEST	443	50078	108.138.37.209	192.168.2.4
Jun 6, 2023 10:40:19.551841974 CEST	50078	443	192.168.2.4	108.138.37.209
Jun 6, 2023 10:40:19.557148933 CEST	50078	443	192.168.2.4	108.138.37.209
Jun 6, 2023 10:40:19.557178020 CEST	443	50078	108.138.37.209	192.168.2.4
Jun 6, 2023 10:40:19.560137987 CEST	50076	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.560158014 CEST	443	50076	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.574358940 CEST	443	50081	52.49.176.241	192.168.2.4
Jun 6, 2023 10:40:19.579001904 CEST	50081	443	192.168.2.4	52.49.176.241
Jun 6, 2023 10:40:19.579013109 CEST	50077	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.579080105 CEST	443	50081	52.49.176.241	192.168.2.4
Jun 6, 2023 10:40:19.580054998 CEST	443	50081	52.49.176.241	192.168.2.4
Jun 6, 2023 10:40:19.580583096 CEST	50081	443	192.168.2.4	52.49.176.241
Jun 6, 2023 10:40:19.580790997 CEST	443	50081	52.49.176.241	192.168.2.4
Jun 6, 2023 10:40:19.580799103 CEST	50081	443	192.168.2.4	52.49.176.241
Jun 6, 2023 10:40:19.582324982 CEST	50074	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.582384109 CEST	443	50074	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.583163977 CEST	50079	443	192.168.2.4	18.197.3.151
Jun 6, 2023 10:40:19.584320068 CEST	443	50072	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.592394114 CEST	443	50080	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:19.593449116 CEST	50080	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:19.593492031 CEST	443	50080	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:19.594218016 CEST	443	50080	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:19.595283985 CEST	50080	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:19.595437050 CEST	443	50080	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:19.597532988 CEST	443	50082	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.598000050 CEST	50082	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.598053932 CEST	443	50082	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.598493099 CEST	443	50082	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.599020958 CEST	50082	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.599132061 CEST	443	50082	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.599222898 CEST	50082	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.600133896 CEST	50076	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.617002010 CEST	50084	443	192.168.2.4	52.95.122.74
Jun 6, 2023 10:40:19.617063046 CEST	443	50084	52.95.122.74	192.168.2.4
Jun 6, 2023 10:40:19.617155075 CEST	50084	443	192.168.2.4	52.95.122.74
Jun 6, 2023 10:40:19.618069887 CEST	50084	443	192.168.2.4	52.95.122.74
Jun 6, 2023 10:40:19.618097067 CEST	443	50084	52.95.122.74	192.168.2.4
Jun 6, 2023 10:40:19.622637033 CEST	50074	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.623817921 CEST	50081	443	192.168.2.4	52.49.176.241
Jun 6, 2023 10:40:19.625622034 CEST	443	50079	18.197.3.151	192.168.2.4
Jun 6, 2023 10:40:19.625763893 CEST	443	50079	18.197.3.151	192.168.2.4
Jun 6, 2023 10:40:19.625838041 CEST	50079	443	192.168.2.4	18.197.3.151
Jun 6, 2023 10:40:19.626305103 CEST	50079	443	192.168.2.4	18.197.3.151
Jun 6, 2023 10:40:19.626342058 CEST	443	50079	18.197.3.151	192.168.2.4
Jun 6, 2023 10:40:19.628288031 CEST	443	50081	52.49.176.241	192.168.2.4
Jun 6, 2023 10:40:19.636497974 CEST	50080	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:19.640306950 CEST	443	50082	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.686780930 CEST	443	50074	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.688179016 CEST	443	50074	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.688194990 CEST	443	50074	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.688251972 CEST	50074	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.688251972 CEST	443	50074	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.688292980 CEST	443	50074	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.688304901 CEST	443	50074	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.688328981 CEST	50074	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.688328981 CEST	50074	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.688329935 CEST	443	50074	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.688348055 CEST	50074	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.688355923 CEST	50074	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.688752890 CEST	443	50074	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.688807011 CEST	50074	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.690316916 CEST	50074	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.690335035 CEST	443	50074	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.693639994 CEST	50085	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.693700075 CEST	443	50085	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.693783998 CEST	50085	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.694196939 CEST	50085	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.694217920 CEST	443	50085	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.709842920 CEST	443	50081	52.49.176.241	192.168.2.4
Jun 6, 2023 10:40:19.709958076 CEST	443	50081	52.49.176.241	192.168.2.4
Jun 6, 2023 10:40:19.710016012 CEST	50081	443	192.168.2.4	52.49.176.241
Jun 6, 2023 10:40:19.710944891 CEST	50081	443	192.168.2.4	52.49.176.241
Jun 6, 2023 10:40:19.710977077 CEST	443	50081	52.49.176.241	192.168.2.4
Jun 6, 2023 10:40:19.730895042 CEST	443	50085	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.732281923 CEST	50085	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.732835054 CEST	443	50085	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.733421087 CEST	50085	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.733565092 CEST	50085	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.733576059 CEST	443	50085	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.742225885 CEST	50086	443	192.168.2.4	34.251.146.217
Jun 6, 2023 10:40:19.742295980 CEST	443	50086	34.251.146.217	192.168.2.4
Jun 6, 2023 10:40:19.742394924 CEST	50086	443	192.168.2.4	34.251.146.217
Jun 6, 2023 10:40:19.742942095 CEST	50086	443	192.168.2.4	34.251.146.217
Jun 6, 2023 10:40:19.742966890 CEST	443	50086	34.251.146.217	192.168.2.4
Jun 6, 2023 10:40:19.744165897 CEST	443	50082	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.744198084 CEST	443	50082	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.744219065 CEST	443	50082	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.744256973 CEST	50082	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.744286060 CEST	443	50082	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.744313955 CEST	50082	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.744343042 CEST	50082	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.745635033 CEST	443	50082	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.745704889 CEST	443	50082	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.745732069 CEST	50082	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.745747089 CEST	443	50082	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.745793104 CEST	50082	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.756194115 CEST	443	50082	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.756314993 CEST	443	50082	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.756367922 CEST	50082	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.756398916 CEST	443	50082	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.756431103 CEST	50082	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.756458044 CEST	50082	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.757956028 CEST	443	50082	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.758014917 CEST	443	50082	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.758037090 CEST	50082	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.758054018 CEST	443	50082	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.758131027 CEST	50082	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.759550095 CEST	443	50082	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.759619951 CEST	50082	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.759627104 CEST	443	50082	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.759669065 CEST	443	50082	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.759701014 CEST	50082	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.760881901 CEST	443	50082	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.760993958 CEST	50082	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.761017084 CEST	443	50082	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.761039019 CEST	443	50082	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.761101961 CEST	50082	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.761101961 CEST	50082	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.774264097 CEST	50085	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.776310921 CEST	443	50085	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.776599884 CEST	50082	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.776638031 CEST	443	50082	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.782787085 CEST	443	50084	52.95.122.74	192.168.2.4
Jun 6, 2023 10:40:19.783379078 CEST	50084	443	192.168.2.4	52.95.122.74
Jun 6, 2023 10:40:19.783421993 CEST	443	50084	52.95.122.74	192.168.2.4
Jun 6, 2023 10:40:19.785706043 CEST	443	50084	52.95.122.74	192.168.2.4
Jun 6, 2023 10:40:19.785782099 CEST	50084	443	192.168.2.4	52.95.122.74
Jun 6, 2023 10:40:19.789800882 CEST	50084	443	192.168.2.4	52.95.122.74
Jun 6, 2023 10:40:19.789956093 CEST	443	50084	52.95.122.74	192.168.2.4
Jun 6, 2023 10:40:19.790549040 CEST	50084	443	192.168.2.4	52.95.122.74
Jun 6, 2023 10:40:19.790581942 CEST	443	50084	52.95.122.74	192.168.2.4
Jun 6, 2023 10:40:19.794764042 CEST	443	50075	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.794852018 CEST	443	50075	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.794873953 CEST	443	50075	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.794929028 CEST	50075	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.794961929 CEST	443	50075	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.794995070 CEST	50075	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.795001984 CEST	443	50075	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.795053005 CEST	50075	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.796144009 CEST	50087	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.796360016 CEST	443	50087	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.796448946 CEST	50087	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.797389984 CEST	50087	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.797441006 CEST	443	50087	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.798728943 CEST	50075	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.798760891 CEST	443	50075	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.801386118 CEST	50088	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.801431894 CEST	443	50088	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.801532030 CEST	50088	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.801980972 CEST	50088	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.802000046 CEST	443	50088	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.819722891 CEST	50090	443	192.168.2.4	52.31.88.82
Jun 6, 2023 10:40:19.819772959 CEST	443	50090	52.31.88.82	192.168.2.4
Jun 6, 2023 10:40:19.819854021 CEST	50090	443	192.168.2.4	52.31.88.82
Jun 6, 2023 10:40:19.820363998 CEST	50090	443	192.168.2.4	52.31.88.82
Jun 6, 2023 10:40:19.820393085 CEST	443	50090	52.31.88.82	192.168.2.4
Jun 6, 2023 10:40:19.821330070 CEST	50091	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:19.821388960 CEST	443	50091	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:19.821465969 CEST	50091	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:19.821881056 CEST	50091	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:19.821903944 CEST	443	50091	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:19.831178904 CEST	50084	443	192.168.2.4	52.95.122.74
Jun 6, 2023 10:40:19.846827030 CEST	443	50087	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.847388983 CEST	50087	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.847423077 CEST	443	50087	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.847495079 CEST	443	50084	52.95.122.74	192.168.2.4
Jun 6, 2023 10:40:19.847599983 CEST	443	50084	52.95.122.74	192.168.2.4
Jun 6, 2023 10:40:19.847673893 CEST	50084	443	192.168.2.4	52.95.122.74
Jun 6, 2023 10:40:19.848256111 CEST	443	50087	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.849145889 CEST	50087	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.849327087 CEST	443	50087	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.849358082 CEST	50087	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.849806070 CEST	50084	443	192.168.2.4	52.95.122.74
Jun 6, 2023 10:40:19.849842072 CEST	443	50084	52.95.122.74	192.168.2.4
Jun 6, 2023 10:40:19.849862099 CEST	50084	443	192.168.2.4	52.95.122.74
Jun 6, 2023 10:40:19.849905968 CEST	50084	443	192.168.2.4	52.95.122.74
Jun 6, 2023 10:40:19.850016117 CEST	443	50088	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.850270987 CEST	50088	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.850295067 CEST	443	50088	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.850776911 CEST	443	50088	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.851465940 CEST	50088	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.851593971 CEST	443	50088	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.851646900 CEST	50088	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.865876913 CEST	50092	443	192.168.2.4	52.95.122.74
Jun 6, 2023 10:40:19.865931034 CEST	443	50092	52.95.122.74	192.168.2.4
Jun 6, 2023 10:40:19.866014957 CEST	50092	443	192.168.2.4	52.95.122.74
Jun 6, 2023 10:40:19.866925955 CEST	50092	443	192.168.2.4	52.95.122.74
Jun 6, 2023 10:40:19.866952896 CEST	443	50092	52.95.122.74	192.168.2.4
Jun 6, 2023 10:40:19.889228106 CEST	50087	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.890991926 CEST	443	50091	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:19.891518116 CEST	50091	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:19.891590118 CEST	443	50091	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:19.892291069 CEST	443	50088	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.892312050 CEST	443	50087	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.893069029 CEST	443	50091	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:19.893203020 CEST	50088	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.893904924 CEST	50091	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:19.896754980 CEST	50091	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:19.896939039 CEST	443	50091	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:19.897192001 CEST	50091	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:19.897229910 CEST	443	50091	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:19.916491032 CEST	50095	443	192.168.2.4	66.235.152.152
Jun 6, 2023 10:40:19.916572094 CEST	443	50095	66.235.152.152	192.168.2.4
Jun 6, 2023 10:40:19.916690111 CEST	50095	443	192.168.2.4	66.235.152.152
Jun 6, 2023 10:40:19.916872025 CEST	50096	443	192.168.2.4	66.235.152.152
Jun 6, 2023 10:40:19.916918039 CEST	443	50096	66.235.152.152	192.168.2.4
Jun 6, 2023 10:40:19.917017937 CEST	50096	443	192.168.2.4	66.235.152.152
Jun 6, 2023 10:40:19.917342901 CEST	50095	443	192.168.2.4	66.235.152.152
Jun 6, 2023 10:40:19.917372942 CEST	443	50095	66.235.152.152	192.168.2.4
Jun 6, 2023 10:40:19.917649031 CEST	50096	443	192.168.2.4	66.235.152.152
Jun 6, 2023 10:40:19.917679071 CEST	443	50096	66.235.152.152	192.168.2.4
Jun 6, 2023 10:40:19.937232018 CEST	50091	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:19.948940992 CEST	443	50086	34.251.146.217	192.168.2.4
Jun 6, 2023 10:40:19.949515104 CEST	50086	443	192.168.2.4	34.251.146.217
Jun 6, 2023 10:40:19.949584007 CEST	443	50086	34.251.146.217	192.168.2.4
Jun 6, 2023 10:40:19.951050997 CEST	443	50086	34.251.146.217	192.168.2.4
Jun 6, 2023 10:40:19.951199055 CEST	50086	443	192.168.2.4	34.251.146.217
Jun 6, 2023 10:40:19.953576088 CEST	50086	443	192.168.2.4	34.251.146.217
Jun 6, 2023 10:40:19.953768969 CEST	50086	443	192.168.2.4	34.251.146.217
Jun 6, 2023 10:40:19.953800917 CEST	443	50086	34.251.146.217	192.168.2.4
Jun 6, 2023 10:40:19.953862906 CEST	50086	443	192.168.2.4	34.251.146.217
Jun 6, 2023 10:40:19.953870058 CEST	443	50086	34.251.146.217	192.168.2.4
Jun 6, 2023 10:40:19.954000950 CEST	443	50086	34.251.146.217	192.168.2.4
Jun 6, 2023 10:40:19.956777096 CEST	443	50076	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.956830978 CEST	443	50076	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.956842899 CEST	443	50076	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.956864119 CEST	443	50076	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.956872940 CEST	443	50076	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.956958055 CEST	443	50076	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.956968069 CEST	50076	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.957004070 CEST	50076	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.957583904 CEST	443	50072	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.957631111 CEST	443	50072	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.957704067 CEST	50072	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.957740068 CEST	443	50072	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.957827091 CEST	443	50072	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.957885027 CEST	50072	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.962464094 CEST	443	50077	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.962516069 CEST	443	50077	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.962585926 CEST	50077	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.962624073 CEST	443	50077	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.962680101 CEST	50077	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.962693930 CEST	443	50077	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.962724924 CEST	443	50077	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.962775946 CEST	50077	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.963773012 CEST	50072	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.963814020 CEST	443	50072	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.964448929 CEST	50076	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.964478016 CEST	443	50076	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.977471113 CEST	443	50091	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:19.990195036 CEST	443	50088	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.990236044 CEST	443	50088	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.990287066 CEST	443	50088	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.990355015 CEST	50088	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.990375996 CEST	443	50088	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.990426064 CEST	50088	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.990437984 CEST	443	50088	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.990508080 CEST	443	50088	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:19.990556002 CEST	50088	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:19.992634058 CEST	443	50090	52.31.88.82	192.168.2.4
Jun 6, 2023 10:40:19.992899895 CEST	50090	443	192.168.2.4	52.31.88.82
Jun 6, 2023 10:40:19.992929935 CEST	443	50090	52.31.88.82	192.168.2.4
Jun 6, 2023 10:40:19.994149923 CEST	443	50090	52.31.88.82	192.168.2.4
Jun 6, 2023 10:40:19.994152069 CEST	50086	443	192.168.2.4	34.251.146.217
Jun 6, 2023 10:40:19.994184971 CEST	443	50086	34.251.146.217	192.168.2.4
Jun 6, 2023 10:40:19.994227886 CEST	50090	443	192.168.2.4	52.31.88.82
Jun 6, 2023 10:40:19.996670008 CEST	50090	443	192.168.2.4	52.31.88.82
Jun 6, 2023 10:40:19.996834040 CEST	443	50090	52.31.88.82	192.168.2.4
Jun 6, 2023 10:40:19.996938944 CEST	50090	443	192.168.2.4	52.31.88.82
Jun 6, 2023 10:40:19.996964931 CEST	443	50090	52.31.88.82	192.168.2.4
Jun 6, 2023 10:40:19.999353886 CEST	443	50092	52.95.122.74	192.168.2.4
Jun 6, 2023 10:40:19.999702930 CEST	50092	443	192.168.2.4	52.95.122.74
Jun 6, 2023 10:40:19.999736071 CEST	443	50092	52.95.122.74	192.168.2.4
Jun 6, 2023 10:40:20.000296116 CEST	443	50092	52.95.122.74	192.168.2.4
Jun 6, 2023 10:40:20.000750065 CEST	50092	443	192.168.2.4	52.95.122.74
Jun 6, 2023 10:40:20.000900030 CEST	443	50092	52.95.122.74	192.168.2.4
Jun 6, 2023 10:40:20.000960112 CEST	50092	443	192.168.2.4	52.95.122.74
Jun 6, 2023 10:40:20.006234884 CEST	443	50087	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.006268978 CEST	443	50087	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.006377935 CEST	50087	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.006401062 CEST	443	50087	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.006421089 CEST	443	50087	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.006480932 CEST	50087	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.011720896 CEST	50098	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.011775017 CEST	443	50098	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.011868954 CEST	50098	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.012259960 CEST	50098	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.012301922 CEST	443	50098	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.013030052 CEST	50099	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.013091087 CEST	443	50099	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.013180017 CEST	50099	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.013627052 CEST	50099	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.013660908 CEST	443	50099	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.013984919 CEST	50077	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.014022112 CEST	443	50077	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.018186092 CEST	50091	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:20.018229961 CEST	443	50091	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:20.018497944 CEST	50091	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:20.018758059 CEST	443	50091	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:20.018857002 CEST	50091	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:20.019207954 CEST	50088	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.019241095 CEST	443	50088	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.020241022 CEST	50100	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.020312071 CEST	443	50100	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.020399094 CEST	50100	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.020467043 CEST	50087	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.020488977 CEST	443	50087	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.021900892 CEST	50100	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.021945953 CEST	443	50100	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.024878979 CEST	50101	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.024936914 CEST	443	50101	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.025029898 CEST	50101	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.025475979 CEST	50101	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.025499105 CEST	443	50101	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.026500940 CEST	50102	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.026540995 CEST	443	50102	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.026613951 CEST	50102	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.027012110 CEST	50102	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.027028084 CEST	443	50102	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.034181118 CEST	50086	443	192.168.2.4	34.251.146.217
Jun 6, 2023 10:40:20.037166119 CEST	50090	443	192.168.2.4	52.31.88.82
Jun 6, 2023 10:40:20.041208029 CEST	50092	443	192.168.2.4	52.95.122.74
Jun 6, 2023 10:40:20.048284054 CEST	443	50092	52.95.122.74	192.168.2.4
Jun 6, 2023 10:40:20.049679995 CEST	443	50086	34.251.146.217	192.168.2.4
Jun 6, 2023 10:40:20.049793005 CEST	443	50086	34.251.146.217	192.168.2.4
Jun 6, 2023 10:40:20.049870014 CEST	50086	443	192.168.2.4	34.251.146.217
Jun 6, 2023 10:40:20.050276995 CEST	443	50090	52.31.88.82	192.168.2.4
Jun 6, 2023 10:40:20.050327063 CEST	443	50090	52.31.88.82	192.168.2.4
Jun 6, 2023 10:40:20.050369978 CEST	443	50090	52.31.88.82	192.168.2.4
Jun 6, 2023 10:40:20.050403118 CEST	50090	443	192.168.2.4	52.31.88.82
Jun 6, 2023 10:40:20.050426960 CEST	443	50090	52.31.88.82	192.168.2.4
Jun 6, 2023 10:40:20.050442934 CEST	443	50090	52.31.88.82	192.168.2.4
Jun 6, 2023 10:40:20.050477982 CEST	50090	443	192.168.2.4	52.31.88.82
Jun 6, 2023 10:40:20.050506115 CEST	50090	443	192.168.2.4	52.31.88.82
Jun 6, 2023 10:40:20.051611900 CEST	50086	443	192.168.2.4	34.251.146.217
Jun 6, 2023 10:40:20.051645994 CEST	443	50086	34.251.146.217	192.168.2.4
Jun 6, 2023 10:40:20.052650928 CEST	50090	443	192.168.2.4	52.31.88.82
Jun 6, 2023 10:40:20.052671909 CEST	443	50090	52.31.88.82	192.168.2.4
Jun 6, 2023 10:40:20.146337986 CEST	443	50085	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.146401882 CEST	443	50085	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.146481991 CEST	50085	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.146527052 CEST	443	50085	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.146559000 CEST	443	50085	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.146629095 CEST	50085	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.167810917 CEST	443	50098	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.168256044 CEST	50098	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.168313980 CEST	443	50098	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.169490099 CEST	443	50098	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.170186996 CEST	50098	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.170409918 CEST	50098	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.170428991 CEST	443	50098	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.170452118 CEST	443	50098	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.181247950 CEST	443	50096	66.235.152.152	192.168.2.4
Jun 6, 2023 10:40:20.182096958 CEST	50096	443	192.168.2.4	66.235.152.152
Jun 6, 2023 10:40:20.182147980 CEST	443	50096	66.235.152.152	192.168.2.4
Jun 6, 2023 10:40:20.182636023 CEST	50085	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.182689905 CEST	443	50085	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.184120893 CEST	443	50096	66.235.152.152	192.168.2.4
Jun 6, 2023 10:40:20.184242964 CEST	50096	443	192.168.2.4	66.235.152.152
Jun 6, 2023 10:40:20.188616037 CEST	50096	443	192.168.2.4	66.235.152.152
Jun 6, 2023 10:40:20.188858986 CEST	443	50096	66.235.152.152	192.168.2.4
Jun 6, 2023 10:40:20.190150023 CEST	50096	443	192.168.2.4	66.235.152.152
Jun 6, 2023 10:40:20.190206051 CEST	443	50096	66.235.152.152	192.168.2.4
Jun 6, 2023 10:40:20.190226078 CEST	50096	443	192.168.2.4	66.235.152.152
Jun 6, 2023 10:40:20.197981119 CEST	443	50102	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.199100018 CEST	50102	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.199135065 CEST	443	50102	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.200911045 CEST	443	50102	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.201033115 CEST	50102	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.204066992 CEST	50102	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.204221964 CEST	443	50102	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.206089020 CEST	50102	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.206119061 CEST	443	50102	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.210613012 CEST	50104	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:20.210680008 CEST	443	50104	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:20.210756063 CEST	50104	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:20.212271929 CEST	50104	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:20.212290049 CEST	50098	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.212311029 CEST	443	50104	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:20.216278076 CEST	50105	443	192.168.2.4	151.101.240.157
Jun 6, 2023 10:40:20.216350079 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.216499090 CEST	50105	443	192.168.2.4	151.101.240.157
Jun 6, 2023 10:40:20.217092037 CEST	50105	443	192.168.2.4	151.101.240.157
Jun 6, 2023 10:40:20.217125893 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.227262020 CEST	50107	443	192.168.2.4	52.49.176.241
Jun 6, 2023 10:40:20.227319002 CEST	443	50107	52.49.176.241	192.168.2.4
Jun 6, 2023 10:40:20.227396011 CEST	50107	443	192.168.2.4	52.49.176.241
Jun 6, 2023 10:40:20.227776051 CEST	50107	443	192.168.2.4	52.49.176.241
Jun 6, 2023 10:40:20.227801085 CEST	443	50107	52.49.176.241	192.168.2.4
Jun 6, 2023 10:40:20.230165005 CEST	50096	443	192.168.2.4	66.235.152.152
Jun 6, 2023 10:40:20.232047081 CEST	443	50095	66.235.152.152	192.168.2.4
Jun 6, 2023 10:40:20.232296944 CEST	443	50096	66.235.152.152	192.168.2.4
Jun 6, 2023 10:40:20.232502937 CEST	50095	443	192.168.2.4	66.235.152.152
Jun 6, 2023 10:40:20.232544899 CEST	443	50095	66.235.152.152	192.168.2.4
Jun 6, 2023 10:40:20.235793114 CEST	443	50095	66.235.152.152	192.168.2.4
Jun 6, 2023 10:40:20.235872030 CEST	50095	443	192.168.2.4	66.235.152.152
Jun 6, 2023 10:40:20.238970041 CEST	50095	443	192.168.2.4	66.235.152.152
Jun 6, 2023 10:40:20.239258051 CEST	443	50095	66.235.152.152	192.168.2.4
Jun 6, 2023 10:40:20.239376068 CEST	50095	443	192.168.2.4	66.235.152.152
Jun 6, 2023 10:40:20.239398956 CEST	443	50095	66.235.152.152	192.168.2.4
Jun 6, 2023 10:40:20.239418983 CEST	50095	443	192.168.2.4	66.235.152.152
Jun 6, 2023 10:40:20.246238947 CEST	50102	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.256948948 CEST	443	50100	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.258336067 CEST	50100	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.258387089 CEST	443	50100	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.259917021 CEST	443	50100	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.260020018 CEST	50100	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.261059046 CEST	50100	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.261219978 CEST	443	50100	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.261343002 CEST	50100	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.261387110 CEST	443	50100	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.270988941 CEST	443	50092	52.95.122.74	192.168.2.4
Jun 6, 2023 10:40:20.271083117 CEST	443	50092	52.95.122.74	192.168.2.4
Jun 6, 2023 10:40:20.271143913 CEST	50092	443	192.168.2.4	52.95.122.74
Jun 6, 2023 10:40:20.272371054 CEST	50092	443	192.168.2.4	52.95.122.74
Jun 6, 2023 10:40:20.272403955 CEST	443	50092	52.95.122.74	192.168.2.4
Jun 6, 2023 10:40:20.279182911 CEST	50095	443	192.168.2.4	66.235.152.152
Jun 6, 2023 10:40:20.284296036 CEST	443	50095	66.235.152.152	192.168.2.4
Jun 6, 2023 10:40:20.294466019 CEST	443	50096	66.235.152.152	192.168.2.4
Jun 6, 2023 10:40:20.301187038 CEST	50100	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.315733910 CEST	443	50099	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.316199064 CEST	50099	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.316232920 CEST	443	50099	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.317071915 CEST	443	50099	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.317852974 CEST	50099	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.318057060 CEST	443	50099	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.318063021 CEST	50099	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.335196972 CEST	50096	443	192.168.2.4	66.235.152.152
Jun 6, 2023 10:40:20.335237026 CEST	443	50096	66.235.152.152	192.168.2.4
Jun 6, 2023 10:40:20.335639954 CEST	50096	443	192.168.2.4	66.235.152.152
Jun 6, 2023 10:40:20.335737944 CEST	443	50096	66.235.152.152	192.168.2.4
Jun 6, 2023 10:40:20.335812092 CEST	50096	443	192.168.2.4	66.235.152.152
Jun 6, 2023 10:40:20.343806982 CEST	443	50095	66.235.152.152	192.168.2.4
Jun 6, 2023 10:40:20.352094889 CEST	443	50101	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.352528095 CEST	50101	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.352547884 CEST	443	50101	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.355119944 CEST	443	50101	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.355226994 CEST	50101	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.356183052 CEST	50101	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.356463909 CEST	443	50101	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.356941938 CEST	50101	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.356965065 CEST	443	50101	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.358186007 CEST	50099	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.358208895 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.358552933 CEST	50105	443	192.168.2.4	151.101.240.157
Jun 6, 2023 10:40:20.358588934 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.359802961 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.359875917 CEST	50105	443	192.168.2.4	151.101.240.157
Jun 6, 2023 10:40:20.362819910 CEST	50105	443	192.168.2.4	151.101.240.157
Jun 6, 2023 10:40:20.362958908 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.363285065 CEST	50105	443	192.168.2.4	151.101.240.157
Jun 6, 2023 10:40:20.363307953 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.364288092 CEST	443	50099	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.384211063 CEST	50095	443	192.168.2.4	66.235.152.152
Jun 6, 2023 10:40:20.384238958 CEST	443	50095	66.235.152.152	192.168.2.4
Jun 6, 2023 10:40:20.384543896 CEST	50095	443	192.168.2.4	66.235.152.152
Jun 6, 2023 10:40:20.384674072 CEST	443	50095	66.235.152.152	192.168.2.4
Jun 6, 2023 10:40:20.384732962 CEST	50095	443	192.168.2.4	66.235.152.152
Jun 6, 2023 10:40:20.393774033 CEST	443	50104	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:20.394098997 CEST	50104	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:20.394128084 CEST	443	50104	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:20.396195889 CEST	443	50104	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:20.396332026 CEST	50104	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:20.396826029 CEST	50104	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:20.396969080 CEST	443	50104	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:20.396986961 CEST	50104	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:20.397095919 CEST	443	50104	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:20.397181988 CEST	50101	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.403204918 CEST	50105	443	192.168.2.4	151.101.240.157
Jun 6, 2023 10:40:20.415262938 CEST	50108	443	192.168.2.4	54.74.97.132
Jun 6, 2023 10:40:20.415326118 CEST	443	50108	54.74.97.132	192.168.2.4
Jun 6, 2023 10:40:20.415396929 CEST	50108	443	192.168.2.4	54.74.97.132
Jun 6, 2023 10:40:20.415838003 CEST	50108	443	192.168.2.4	54.74.97.132
Jun 6, 2023 10:40:20.415857077 CEST	443	50108	54.74.97.132	192.168.2.4
Jun 6, 2023 10:40:20.438559055 CEST	50104	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:20.438591957 CEST	443	50104	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:20.454298019 CEST	443	50107	52.49.176.241	192.168.2.4
Jun 6, 2023 10:40:20.454649925 CEST	50107	443	192.168.2.4	52.49.176.241
Jun 6, 2023 10:40:20.454699039 CEST	443	50107	52.49.176.241	192.168.2.4
Jun 6, 2023 10:40:20.455566883 CEST	443	50107	52.49.176.241	192.168.2.4
Jun 6, 2023 10:40:20.456373930 CEST	50107	443	192.168.2.4	52.49.176.241
Jun 6, 2023 10:40:20.456561089 CEST	443	50107	52.49.176.241	192.168.2.4
Jun 6, 2023 10:40:20.457113981 CEST	50107	443	192.168.2.4	52.49.176.241
Jun 6, 2023 10:40:20.471009016 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.471082926 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.471118927 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.471148014 CEST	50105	443	192.168.2.4	151.101.240.157
Jun 6, 2023 10:40:20.471155882 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.471190929 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.471205950 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.471230984 CEST	50105	443	192.168.2.4	151.101.240.157
Jun 6, 2023 10:40:20.471261024 CEST	50105	443	192.168.2.4	151.101.240.157
Jun 6, 2023 10:40:20.471673012 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.472507000 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.472552061 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.472587109 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.472614050 CEST	50105	443	192.168.2.4	151.101.240.157
Jun 6, 2023 10:40:20.472645044 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.472691059 CEST	50105	443	192.168.2.4	151.101.240.157
Jun 6, 2023 10:40:20.473364115 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.473392010 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.473419905 CEST	50105	443	192.168.2.4	151.101.240.157
Jun 6, 2023 10:40:20.473436117 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.473545074 CEST	50105	443	192.168.2.4	151.101.240.157
Jun 6, 2023 10:40:20.474231958 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.474313974 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.474381924 CEST	50105	443	192.168.2.4	151.101.240.157
Jun 6, 2023 10:40:20.474406958 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.475092888 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.475131989 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.475179911 CEST	50105	443	192.168.2.4	151.101.240.157
Jun 6, 2023 10:40:20.475204945 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.475295067 CEST	50105	443	192.168.2.4	151.101.240.157
Jun 6, 2023 10:40:20.475986004 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.476783037 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.476829052 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.476860046 CEST	50105	443	192.168.2.4	151.101.240.157
Jun 6, 2023 10:40:20.476871014 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.476888895 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.476953983 CEST	50105	443	192.168.2.4	151.101.240.157
Jun 6, 2023 10:40:20.477685928 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.477761984 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.477768898 CEST	50105	443	192.168.2.4	151.101.240.157
Jun 6, 2023 10:40:20.477799892 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.477857113 CEST	50105	443	192.168.2.4	151.101.240.157
Jun 6, 2023 10:40:20.479243994 CEST	50104	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:20.479274988 CEST	443	50104	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:20.479964972 CEST	50104	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:20.480067968 CEST	443	50104	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:20.480140924 CEST	50104	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:20.486440897 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.486552954 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.486660004 CEST	50105	443	192.168.2.4	151.101.240.157
Jun 6, 2023 10:40:20.486689091 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.486712933 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.486792088 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.486825943 CEST	50105	443	192.168.2.4	151.101.240.157
Jun 6, 2023 10:40:20.486866951 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.486926079 CEST	50105	443	192.168.2.4	151.101.240.157
Jun 6, 2023 10:40:20.487665892 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.487757921 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.487811089 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.487834930 CEST	50105	443	192.168.2.4	151.101.240.157
Jun 6, 2023 10:40:20.487869024 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.487950087 CEST	50105	443	192.168.2.4	151.101.240.157
Jun 6, 2023 10:40:20.488552094 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.488630056 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.488723993 CEST	50105	443	192.168.2.4	151.101.240.157
Jun 6, 2023 10:40:20.488749981 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.489453077 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.489510059 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.489562035 CEST	50105	443	192.168.2.4	151.101.240.157
Jun 6, 2023 10:40:20.489594936 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.489651918 CEST	50105	443	192.168.2.4	151.101.240.157
Jun 6, 2023 10:40:20.489653111 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.489764929 CEST	50105	443	192.168.2.4	151.101.240.157
Jun 6, 2023 10:40:20.490544081 CEST	50105	443	192.168.2.4	151.101.240.157
Jun 6, 2023 10:40:20.490585089 CEST	443	50105	151.101.240.157	192.168.2.4
Jun 6, 2023 10:40:20.504295111 CEST	443	50107	52.49.176.241	192.168.2.4
Jun 6, 2023 10:40:20.560681105 CEST	443	50108	54.74.97.132	192.168.2.4
Jun 6, 2023 10:40:20.561337948 CEST	50108	443	192.168.2.4	54.74.97.132
Jun 6, 2023 10:40:20.561381102 CEST	443	50108	54.74.97.132	192.168.2.4
Jun 6, 2023 10:40:20.564903975 CEST	443	50108	54.74.97.132	192.168.2.4
Jun 6, 2023 10:40:20.565016031 CEST	50108	443	192.168.2.4	54.74.97.132
Jun 6, 2023 10:40:20.567965031 CEST	50108	443	192.168.2.4	54.74.97.132
Jun 6, 2023 10:40:20.568154097 CEST	50108	443	192.168.2.4	54.74.97.132
Jun 6, 2023 10:40:20.568165064 CEST	443	50108	54.74.97.132	192.168.2.4
Jun 6, 2023 10:40:20.568212032 CEST	443	50108	54.74.97.132	192.168.2.4
Jun 6, 2023 10:40:20.569797039 CEST	50111	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.569855928 CEST	443	50111	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.569963932 CEST	50111	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.570272923 CEST	50111	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.570291996 CEST	443	50111	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.579231024 CEST	443	50098	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.579263926 CEST	443	50098	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.579274893 CEST	443	50098	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.579312086 CEST	443	50098	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.579385042 CEST	50098	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.579413891 CEST	443	50098	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.579576969 CEST	50098	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.579806089 CEST	443	50098	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.579886913 CEST	443	50098	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.579951048 CEST	50098	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.581187010 CEST	50113	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.581233025 CEST	443	50113	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.581341028 CEST	50113	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.581598997 CEST	50113	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.581620932 CEST	443	50113	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.586523056 CEST	50098	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.586553097 CEST	443	50098	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.594295025 CEST	443	50107	52.49.176.241	192.168.2.4
Jun 6, 2023 10:40:20.594448090 CEST	443	50107	52.49.176.241	192.168.2.4
Jun 6, 2023 10:40:20.594510078 CEST	50107	443	192.168.2.4	52.49.176.241
Jun 6, 2023 10:40:20.595963955 CEST	50107	443	192.168.2.4	52.49.176.241
Jun 6, 2023 10:40:20.595989943 CEST	443	50107	52.49.176.241	192.168.2.4
Jun 6, 2023 10:40:20.609209061 CEST	50108	443	192.168.2.4	54.74.97.132
Jun 6, 2023 10:40:20.609230042 CEST	443	50108	54.74.97.132	192.168.2.4
Jun 6, 2023 10:40:20.612780094 CEST	443	50108	54.74.97.132	192.168.2.4
Jun 6, 2023 10:40:20.612900972 CEST	50108	443	192.168.2.4	54.74.97.132
Jun 6, 2023 10:40:20.619575024 CEST	443	50102	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.619659901 CEST	443	50102	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.619683027 CEST	443	50102	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.619724989 CEST	443	50102	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.619735003 CEST	50102	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.619770050 CEST	443	50102	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.619798899 CEST	50102	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.619807959 CEST	50102	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.619910002 CEST	443	50102	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.619971037 CEST	50102	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.630959988 CEST	50114	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.631001949 CEST	443	50114	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.631088972 CEST	50114	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.631639957 CEST	50114	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.631666899 CEST	443	50114	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.633874893 CEST	50108	443	192.168.2.4	54.74.97.132
Jun 6, 2023 10:40:20.633914948 CEST	443	50108	54.74.97.132	192.168.2.4
Jun 6, 2023 10:40:20.636226892 CEST	50102	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.636255980 CEST	443	50102	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.668128014 CEST	443	50100	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.668170929 CEST	443	50100	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.668273926 CEST	50100	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.668309927 CEST	443	50100	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.668335915 CEST	443	50100	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.668374062 CEST	50100	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.668404102 CEST	50100	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.689126968 CEST	443	50113	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.690568924 CEST	50113	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.690599918 CEST	443	50113	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.692195892 CEST	443	50113	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.692303896 CEST	50113	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.700018883 CEST	443	50111	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.700861931 CEST	50100	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.700906038 CEST	443	50100	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.702670097 CEST	50111	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.702713966 CEST	443	50111	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.704346895 CEST	50117	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.704435110 CEST	443	50117	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.704528093 CEST	50117	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.704819918 CEST	50117	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.704838037 CEST	443	50117	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.705490112 CEST	443	50111	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.705595970 CEST	50111	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.710994005 CEST	443	50114	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.713009119 CEST	50114	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.713049889 CEST	443	50114	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.715225935 CEST	443	50114	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.715328932 CEST	50114	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.720633030 CEST	50113	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.720910072 CEST	443	50113	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.721491098 CEST	50114	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.721762896 CEST	443	50114	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.723452091 CEST	443	50099	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.723480940 CEST	443	50099	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.723581076 CEST	443	50099	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.723597050 CEST	50099	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.723629951 CEST	50099	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.732542038 CEST	50113	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.732589006 CEST	443	50113	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.733741045 CEST	50114	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.733783960 CEST	443	50114	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.743850946 CEST	50111	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.744076967 CEST	443	50111	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.744101048 CEST	50111	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.749237061 CEST	50118	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.749281883 CEST	443	50118	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.749388933 CEST	50118	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.751424074 CEST	50118	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.751454115 CEST	443	50118	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.751863003 CEST	50099	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.751904011 CEST	443	50099	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.761132002 CEST	443	50101	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.761182070 CEST	443	50101	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.761279106 CEST	443	50101	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.761284113 CEST	50101	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.761343956 CEST	50101	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.773665905 CEST	50113	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.773780107 CEST	50114	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.775310040 CEST	443	50117	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.777060032 CEST	50117	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.777102947 CEST	443	50117	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.778395891 CEST	443	50117	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.778543949 CEST	50117	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.779339075 CEST	50117	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.779447079 CEST	443	50117	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.781471014 CEST	50117	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.781514883 CEST	443	50117	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.784224033 CEST	50111	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.784254074 CEST	443	50111	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.796020985 CEST	50101	443	192.168.2.4	18.66.192.44
Jun 6, 2023 10:40:20.796080112 CEST	443	50101	18.66.192.44	192.168.2.4
Jun 6, 2023 10:40:20.799628019 CEST	50119	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:20.799694061 CEST	443	50119	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:20.800009966 CEST	50119	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:20.800322056 CEST	50119	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:20.800364017 CEST	443	50119	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:20.806581974 CEST	443	50113	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.807212114 CEST	443	50114	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.807534933 CEST	443	50113	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.807636023 CEST	50113	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.808299065 CEST	443	50114	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.808422089 CEST	50114	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.808994055 CEST	50113	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.809042931 CEST	443	50113	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.810976982 CEST	50114	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.811006069 CEST	443	50114	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.819200993 CEST	443	50111	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.820039034 CEST	50111	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.822277069 CEST	50117	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.830518007 CEST	50121	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.830578089 CEST	443	50121	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.830666065 CEST	50121	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.831245899 CEST	50122	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.831312895 CEST	443	50122	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.831396103 CEST	50122	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.832505941 CEST	50121	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.832534075 CEST	443	50121	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.833028078 CEST	50111	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.833065987 CEST	443	50111	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.833709002 CEST	50122	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.833756924 CEST	443	50122	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.842581034 CEST	443	50117	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.842824936 CEST	50123	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.842881918 CEST	443	50123	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.842959881 CEST	50123	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.843686104 CEST	443	50117	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.843781948 CEST	50117	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.844012976 CEST	50123	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.844041109 CEST	443	50123	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.848776102 CEST	50117	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.848809958 CEST	443	50117	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.853281021 CEST	50124	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.853351116 CEST	443	50124	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.853458881 CEST	50124	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.853755951 CEST	50124	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.853786945 CEST	443	50124	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.874116898 CEST	50125	443	192.168.2.4	104.244.42.195
Jun 6, 2023 10:40:20.874180079 CEST	443	50125	104.244.42.195	192.168.2.4
Jun 6, 2023 10:40:20.874278069 CEST	50125	443	192.168.2.4	104.244.42.195
Jun 6, 2023 10:40:20.874897957 CEST	50125	443	192.168.2.4	104.244.42.195
Jun 6, 2023 10:40:20.874922991 CEST	443	50125	104.244.42.195	192.168.2.4
Jun 6, 2023 10:40:20.875783920 CEST	50126	443	192.168.2.4	104.244.42.133
Jun 6, 2023 10:40:20.875823021 CEST	443	50126	104.244.42.133	192.168.2.4
Jun 6, 2023 10:40:20.875911951 CEST	50126	443	192.168.2.4	104.244.42.133
Jun 6, 2023 10:40:20.876355886 CEST	50126	443	192.168.2.4	104.244.42.133
Jun 6, 2023 10:40:20.876379013 CEST	443	50126	104.244.42.133	192.168.2.4
Jun 6, 2023 10:40:20.889822960 CEST	50128	443	192.168.2.4	192.29.203.179
Jun 6, 2023 10:40:20.889866114 CEST	443	50128	192.29.203.179	192.168.2.4
Jun 6, 2023 10:40:20.889949083 CEST	50128	443	192.168.2.4	192.29.203.179
Jun 6, 2023 10:40:20.890511036 CEST	50128	443	192.168.2.4	192.29.203.179
Jun 6, 2023 10:40:20.890537977 CEST	443	50128	192.29.203.179	192.168.2.4
Jun 6, 2023 10:40:20.890928030 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:20.890979052 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:20.891055107 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:20.891340017 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:20.891360998 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:20.961714983 CEST	443	50118	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.962152004 CEST	50118	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.962196112 CEST	443	50118	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.963723898 CEST	443	50118	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.965015888 CEST	50118	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.965442896 CEST	443	50118	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:20.966439009 CEST	50118	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:20.979778051 CEST	50134	443	192.168.2.4	108.138.36.108
Jun 6, 2023 10:40:20.979830027 CEST	443	50134	108.138.36.108	192.168.2.4
Jun 6, 2023 10:40:20.979903936 CEST	50134	443	192.168.2.4	108.138.36.108
Jun 6, 2023 10:40:20.980535030 CEST	50134	443	192.168.2.4	108.138.36.108
Jun 6, 2023 10:40:20.980565071 CEST	443	50134	108.138.36.108	192.168.2.4
Jun 6, 2023 10:40:21.011450052 CEST	50080	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:21.012319088 CEST	443	50118	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.040213108 CEST	443	50118	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.041635036 CEST	443	50118	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.041762114 CEST	50118	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:21.043004990 CEST	50118	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:21.043051958 CEST	443	50118	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.046720982 CEST	50135	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:21.046762943 CEST	443	50135	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:21.046869040 CEST	50135	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:21.047249079 CEST	50135	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:21.047266006 CEST	443	50135	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:21.050534964 CEST	50136	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:21.050604105 CEST	443	50136	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.050736904 CEST	50136	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:21.051156044 CEST	50136	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:21.051218987 CEST	443	50136	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.052282095 CEST	443	50080	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:21.058562994 CEST	443	50080	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:21.058681965 CEST	443	50080	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:21.058806896 CEST	50080	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:21.059592962 CEST	50080	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:21.059638023 CEST	443	50080	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:21.107033968 CEST	443	50122	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.108171940 CEST	50122	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:21.108222008 CEST	443	50122	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.109448910 CEST	443	50122	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.113864899 CEST	50122	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:21.114125967 CEST	50122	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:21.114202023 CEST	443	50122	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.114268064 CEST	443	50122	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.138585091 CEST	50138	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:21.138659954 CEST	443	50138	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:21.138748884 CEST	50138	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:21.139281988 CEST	50138	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:21.139323950 CEST	443	50138	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:21.142623901 CEST	50139	443	192.168.2.4	52.49.176.241
Jun 6, 2023 10:40:21.142689943 CEST	443	50139	52.49.176.241	192.168.2.4
Jun 6, 2023 10:40:21.142776012 CEST	50139	443	192.168.2.4	52.49.176.241
Jun 6, 2023 10:40:21.143131018 CEST	50139	443	192.168.2.4	52.49.176.241
Jun 6, 2023 10:40:21.143158913 CEST	443	50139	52.49.176.241	192.168.2.4
Jun 6, 2023 10:40:21.154311895 CEST	50122	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:21.181723118 CEST	443	50122	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.183692932 CEST	443	50122	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.183849096 CEST	50122	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:21.184606075 CEST	443	50121	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.185192108 CEST	50121	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:21.185250998 CEST	443	50121	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.186012983 CEST	443	50121	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.187463045 CEST	50121	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:21.187621117 CEST	50121	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:21.187640905 CEST	443	50121	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.187702894 CEST	443	50121	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.188451052 CEST	443	50134	108.138.36.108	192.168.2.4
Jun 6, 2023 10:40:21.188769102 CEST	50134	443	192.168.2.4	108.138.36.108
Jun 6, 2023 10:40:21.188827038 CEST	443	50134	108.138.36.108	192.168.2.4
Jun 6, 2023 10:40:21.189870119 CEST	50122	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:21.189903975 CEST	443	50122	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.191735983 CEST	443	50134	108.138.36.108	192.168.2.4
Jun 6, 2023 10:40:21.191917896 CEST	50134	443	192.168.2.4	108.138.36.108
Jun 6, 2023 10:40:21.196207047 CEST	50134	443	192.168.2.4	108.138.36.108
Jun 6, 2023 10:40:21.196384907 CEST	50134	443	192.168.2.4	108.138.36.108
Jun 6, 2023 10:40:21.196428061 CEST	443	50134	108.138.36.108	192.168.2.4
Jun 6, 2023 10:40:21.196604967 CEST	443	50134	108.138.36.108	192.168.2.4
Jun 6, 2023 10:40:21.201025009 CEST	443	50123	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.204402924 CEST	50123	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:21.204463005 CEST	443	50123	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.206862926 CEST	443	50123	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.206969023 CEST	50123	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:21.207619905 CEST	50123	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:21.207915068 CEST	50123	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:21.207932949 CEST	443	50123	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.208015919 CEST	443	50123	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.217957973 CEST	443	50119	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:21.218537092 CEST	50119	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:21.218590975 CEST	443	50119	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:21.223635912 CEST	443	50119	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:21.223742962 CEST	50119	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:21.224612951 CEST	50119	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:21.224773884 CEST	50119	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:21.224796057 CEST	443	50119	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:21.224868059 CEST	443	50119	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:21.228324890 CEST	50121	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:21.237251043 CEST	50134	443	192.168.2.4	108.138.36.108
Jun 6, 2023 10:40:21.237284899 CEST	443	50134	108.138.36.108	192.168.2.4
Jun 6, 2023 10:40:21.244296074 CEST	443	50126	104.244.42.133	192.168.2.4
Jun 6, 2023 10:40:21.245094061 CEST	50126	443	192.168.2.4	104.244.42.133
Jun 6, 2023 10:40:21.245135069 CEST	443	50126	104.244.42.133	192.168.2.4
Jun 6, 2023 10:40:21.247536898 CEST	443	50126	104.244.42.133	192.168.2.4
Jun 6, 2023 10:40:21.247654915 CEST	50126	443	192.168.2.4	104.244.42.133
Jun 6, 2023 10:40:21.250629902 CEST	50126	443	192.168.2.4	104.244.42.133
Jun 6, 2023 10:40:21.250822067 CEST	443	50126	104.244.42.133	192.168.2.4
Jun 6, 2023 10:40:21.250823021 CEST	50126	443	192.168.2.4	104.244.42.133
Jun 6, 2023 10:40:21.252616882 CEST	50123	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:21.252652884 CEST	443	50123	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.264935970 CEST	50142	443	192.168.2.4	18.159.165.110
Jun 6, 2023 10:40:21.264993906 CEST	443	50142	18.159.165.110	192.168.2.4
Jun 6, 2023 10:40:21.265161037 CEST	50142	443	192.168.2.4	18.159.165.110
Jun 6, 2023 10:40:21.265295029 CEST	50119	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:21.265333891 CEST	443	50119	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:21.265847921 CEST	50142	443	192.168.2.4	18.159.165.110
Jun 6, 2023 10:40:21.265888929 CEST	443	50142	18.159.165.110	192.168.2.4
Jun 6, 2023 10:40:21.267792940 CEST	443	50121	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.268381119 CEST	50119	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:21.268580914 CEST	443	50119	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:21.268712044 CEST	50119	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:21.269184113 CEST	443	50121	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.269265890 CEST	50121	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:21.277296066 CEST	50134	443	192.168.2.4	108.138.36.108
Jun 6, 2023 10:40:21.286214113 CEST	443	50123	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.287400961 CEST	50123	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:21.287448883 CEST	443	50123	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.287682056 CEST	443	50123	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.287880898 CEST	50123	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:21.288017035 CEST	50121	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:21.288055897 CEST	443	50121	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.291498899 CEST	50126	443	192.168.2.4	104.244.42.133
Jun 6, 2023 10:40:21.291524887 CEST	443	50126	104.244.42.133	192.168.2.4
Jun 6, 2023 10:40:21.295208931 CEST	443	50125	104.244.42.195	192.168.2.4
Jun 6, 2023 10:40:21.297560930 CEST	50125	443	192.168.2.4	104.244.42.195
Jun 6, 2023 10:40:21.297596931 CEST	443	50125	104.244.42.195	192.168.2.4
Jun 6, 2023 10:40:21.298223972 CEST	50123	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:21.298264027 CEST	443	50123	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.299590111 CEST	443	50125	104.244.42.195	192.168.2.4
Jun 6, 2023 10:40:21.299710989 CEST	50125	443	192.168.2.4	104.244.42.195
Jun 6, 2023 10:40:21.302860022 CEST	50125	443	192.168.2.4	104.244.42.195
Jun 6, 2023 10:40:21.303101063 CEST	50125	443	192.168.2.4	104.244.42.195
Jun 6, 2023 10:40:21.303128004 CEST	443	50125	104.244.42.195	192.168.2.4
Jun 6, 2023 10:40:21.303261042 CEST	443	50125	104.244.42.195	192.168.2.4
Jun 6, 2023 10:40:21.319250107 CEST	443	50128	192.29.203.179	192.168.2.4
Jun 6, 2023 10:40:21.319727898 CEST	50128	443	192.168.2.4	192.29.203.179
Jun 6, 2023 10:40:21.319758892 CEST	443	50128	192.29.203.179	192.168.2.4
Jun 6, 2023 10:40:21.321365118 CEST	443	50128	192.29.203.179	192.168.2.4
Jun 6, 2023 10:40:21.321450949 CEST	50128	443	192.168.2.4	192.29.203.179
Jun 6, 2023 10:40:21.323533058 CEST	50128	443	192.168.2.4	192.29.203.179
Jun 6, 2023 10:40:21.323728085 CEST	50128	443	192.168.2.4	192.29.203.179
Jun 6, 2023 10:40:21.323749065 CEST	443	50128	192.29.203.179	192.168.2.4
Jun 6, 2023 10:40:21.324215889 CEST	443	50128	192.29.203.179	192.168.2.4
Jun 6, 2023 10:40:21.333753109 CEST	50126	443	192.168.2.4	104.244.42.133
Jun 6, 2023 10:40:21.343282938 CEST	50125	443	192.168.2.4	104.244.42.195
Jun 6, 2023 10:40:21.343342066 CEST	443	50125	104.244.42.195	192.168.2.4
Jun 6, 2023 10:40:21.356067896 CEST	443	50128	192.29.203.179	192.168.2.4
Jun 6, 2023 10:40:21.356364012 CEST	50128	443	192.168.2.4	192.29.203.179
Jun 6, 2023 10:40:21.357887983 CEST	50128	443	192.168.2.4	192.29.203.179
Jun 6, 2023 10:40:21.357942104 CEST	443	50128	192.29.203.179	192.168.2.4
Jun 6, 2023 10:40:21.360173941 CEST	50145	443	192.168.2.4	192.29.203.179
Jun 6, 2023 10:40:21.360258102 CEST	443	50145	192.29.203.179	192.168.2.4
Jun 6, 2023 10:40:21.360519886 CEST	50145	443	192.168.2.4	192.29.203.179
Jun 6, 2023 10:40:21.360605001 CEST	50145	443	192.168.2.4	192.29.203.179
Jun 6, 2023 10:40:21.360625982 CEST	443	50145	192.29.203.179	192.168.2.4
Jun 6, 2023 10:40:21.365421057 CEST	443	50134	108.138.36.108	192.168.2.4
Jun 6, 2023 10:40:21.365681887 CEST	443	50134	108.138.36.108	192.168.2.4
Jun 6, 2023 10:40:21.365814924 CEST	50134	443	192.168.2.4	108.138.36.108
Jun 6, 2023 10:40:21.367259979 CEST	50134	443	192.168.2.4	108.138.36.108
Jun 6, 2023 10:40:21.367310047 CEST	443	50134	108.138.36.108	192.168.2.4
Jun 6, 2023 10:40:21.370096922 CEST	443	50126	104.244.42.133	192.168.2.4
Jun 6, 2023 10:40:21.378982067 CEST	443	50124	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.379404068 CEST	50124	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:21.379467010 CEST	443	50124	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.381486893 CEST	443	50124	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.381634951 CEST	50124	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:21.382329941 CEST	50124	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:21.382556915 CEST	50124	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:21.382581949 CEST	443	50124	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.382673025 CEST	443	50124	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.383287907 CEST	50125	443	192.168.2.4	104.244.42.195
Jun 6, 2023 10:40:21.398504019 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.398988008 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.399025917 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.400744915 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.400841951 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.402761936 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.402940035 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.402949095 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.403021097 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.410060883 CEST	443	50136	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.410595894 CEST	50136	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:21.410619974 CEST	443	50136	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.412003994 CEST	443	50136	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.412105083 CEST	50126	443	192.168.2.4	104.244.42.133
Jun 6, 2023 10:40:21.412117004 CEST	443	50126	104.244.42.133	192.168.2.4
Jun 6, 2023 10:40:21.412529945 CEST	50136	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:21.412758112 CEST	50126	443	192.168.2.4	104.244.42.133
Jun 6, 2023 10:40:21.412873030 CEST	443	50136	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.412878990 CEST	443	50126	104.244.42.133	192.168.2.4
Jun 6, 2023 10:40:21.412970066 CEST	50126	443	192.168.2.4	104.244.42.133
Jun 6, 2023 10:40:21.413824081 CEST	50136	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:21.420666933 CEST	50146	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:21.420730114 CEST	443	50146	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:21.420818090 CEST	50146	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:21.421030045 CEST	50146	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:21.421061993 CEST	443	50146	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:21.423345089 CEST	50124	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:21.423379898 CEST	443	50124	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.443289042 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.443314075 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.450790882 CEST	50147	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:21.450870991 CEST	443	50147	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:21.451081038 CEST	50147	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:21.451356888 CEST	50147	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:21.451411963 CEST	443	50147	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:21.452121019 CEST	443	50125	104.244.42.195	192.168.2.4
Jun 6, 2023 10:40:21.460280895 CEST	443	50136	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.461096048 CEST	443	50124	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.461285114 CEST	50124	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:21.461343050 CEST	443	50124	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.462455034 CEST	443	50124	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.464473963 CEST	50124	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:21.464663982 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.464751959 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.464771986 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.464823008 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.464869976 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.464879990 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.465029001 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.465089083 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.465096951 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.465146065 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.465189934 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.465198994 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.465265036 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.465328932 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.465337038 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.465970993 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.466094971 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.466166019 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.466180086 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.466658115 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.466730118 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.466744900 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.466803074 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.467390060 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.467468977 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.467502117 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.475142956 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.475251913 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.475382090 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.475385904 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.475411892 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.475461960 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.475466013 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.475483894 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.475507021 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.476174116 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.476536989 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.476547003 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.476876974 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.476949930 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.476959944 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.476979971 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.477025032 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.477034092 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.477659941 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.477732897 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.477742910 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.478455067 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.478523970 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.478530884 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.479227066 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.479286909 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.479294062 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.479406118 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.479477882 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.479484081 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.479845047 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.479923964 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.479931116 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.480547905 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.480633974 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.480634928 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.480659962 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.480745077 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.482346058 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.482422113 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.482659101 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.482769966 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.482779026 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.482852936 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.482916117 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.482925892 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.483079910 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.483136892 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.483144999 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.483728886 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.483912945 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.483922005 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.483947039 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.484009981 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.484018087 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.484055042 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.484112978 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.484121084 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.485091925 CEST	50148	443	192.168.2.4	108.138.36.18
Jun 6, 2023 10:40:21.485165119 CEST	443	50148	108.138.36.18	192.168.2.4
Jun 6, 2023 10:40:21.485315084 CEST	50148	443	192.168.2.4	108.138.36.18
Jun 6, 2023 10:40:21.485759020 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.485800982 CEST	50148	443	192.168.2.4	108.138.36.18
Jun 6, 2023 10:40:21.485824108 CEST	443	50148	108.138.36.18	192.168.2.4
Jun 6, 2023 10:40:21.485824108 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.485838890 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.486141920 CEST	50124	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:21.486176968 CEST	443	50124	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.486332893 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.486399889 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.486408949 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.486669064 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.486840963 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.486850023 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.486954927 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.487036943 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.487046957 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.487272024 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.487355947 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.487385035 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.487394094 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.487454891 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.487461090 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.487494946 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.487673044 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.487708092 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.487775087 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.487778902 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.487807035 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.487862110 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.488146067 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.488225937 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.488229990 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.488251925 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.488327026 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.488698006 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.488785028 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.488785982 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.488809109 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.488866091 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.488888979 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.489129066 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.489200115 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.489212036 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.489231110 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.489281893 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.489566088 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.489623070 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.489743948 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.489818096 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.489828110 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.490545034 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.490629911 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.490641117 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.490740061 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.490780115 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.490820885 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.490823030 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.490833998 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.490880013 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.491753101 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.491822958 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.491839886 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.491852999 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.491873026 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.491904974 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.491909981 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.491923094 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.491940975 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.491957903 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.492274046 CEST	50125	443	192.168.2.4	104.244.42.195
Jun 6, 2023 10:40:21.492301941 CEST	443	50125	104.244.42.195	192.168.2.4
Jun 6, 2023 10:40:21.492615938 CEST	50125	443	192.168.2.4	104.244.42.195
Jun 6, 2023 10:40:21.492675066 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.492742062 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.492753029 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.492753983 CEST	443	50136	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.492755890 CEST	443	50125	104.244.42.195	192.168.2.4
Jun 6, 2023 10:40:21.492769003 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.492825985 CEST	50125	443	192.168.2.4	104.244.42.195
Jun 6, 2023 10:40:21.492866039 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.492876053 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.493602991 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.493665934 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.493705988 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.493736029 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.493747950 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.493803024 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.493830919 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.493984938 CEST	443	50136	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.494575024 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.494631052 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.494659901 CEST	50136	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:21.494659901 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.494693041 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.494709969 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.494755983 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.494756937 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.494769096 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.494820118 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.495520115 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.495577097 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.495630980 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.495645046 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.495659113 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.495709896 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.495719910 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.496417046 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.496491909 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.496503115 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.496620893 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.496684074 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.499913931 CEST	50129	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:21.499938011 CEST	443	50129	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:21.507738113 CEST	50136	443	192.168.2.4	172.217.168.38
Jun 6, 2023 10:40:21.507783890 CEST	443	50136	172.217.168.38	192.168.2.4
Jun 6, 2023 10:40:21.516520977 CEST	443	50135	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:21.517501116 CEST	50135	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:21.517546892 CEST	443	50135	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:21.519748926 CEST	443	50135	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:21.520406008 CEST	50135	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:21.520822048 CEST	50135	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:21.520840883 CEST	443	50135	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:21.521049023 CEST	443	50135	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:21.553016901 CEST	443	50135	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:21.553148985 CEST	50135	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:21.558784008 CEST	50135	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:21.558825970 CEST	443	50135	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:21.585841894 CEST	443	50139	52.49.176.241	192.168.2.4
Jun 6, 2023 10:40:21.586335897 CEST	50139	443	192.168.2.4	52.49.176.241
Jun 6, 2023 10:40:21.586371899 CEST	443	50139	52.49.176.241	192.168.2.4
Jun 6, 2023 10:40:21.588774920 CEST	50152	443	192.168.2.4	54.81.54.200
Jun 6, 2023 10:40:21.588792086 CEST	443	50152	54.81.54.200	192.168.2.4
Jun 6, 2023 10:40:21.588918924 CEST	50152	443	192.168.2.4	54.81.54.200
Jun 6, 2023 10:40:21.589020014 CEST	443	50139	52.49.176.241	192.168.2.4
Jun 6, 2023 10:40:21.589874029 CEST	50139	443	192.168.2.4	52.49.176.241
Jun 6, 2023 10:40:21.590059996 CEST	443	50139	52.49.176.241	192.168.2.4
Jun 6, 2023 10:40:21.590131044 CEST	50152	443	192.168.2.4	54.81.54.200
Jun 6, 2023 10:40:21.590146065 CEST	443	50152	54.81.54.200	192.168.2.4
Jun 6, 2023 10:40:21.591259003 CEST	50139	443	192.168.2.4	52.49.176.241
Jun 6, 2023 10:40:21.604769945 CEST	50153	443	192.168.2.4	52.95.122.74
Jun 6, 2023 10:40:21.604840994 CEST	443	50153	52.95.122.74	192.168.2.4
Jun 6, 2023 10:40:21.605017900 CEST	50153	443	192.168.2.4	52.95.122.74
Jun 6, 2023 10:40:21.605441093 CEST	50153	443	192.168.2.4	52.95.122.74
Jun 6, 2023 10:40:21.605479002 CEST	443	50153	52.95.122.74	192.168.2.4
Jun 6, 2023 10:40:21.636290073 CEST	443	50139	52.49.176.241	192.168.2.4
Jun 6, 2023 10:40:21.641442060 CEST	443	50139	52.49.176.241	192.168.2.4
Jun 6, 2023 10:40:21.641686916 CEST	443	50139	52.49.176.241	192.168.2.4
Jun 6, 2023 10:40:21.641805887 CEST	50139	443	192.168.2.4	52.49.176.241
Jun 6, 2023 10:40:21.646183014 CEST	50139	443	192.168.2.4	52.49.176.241
Jun 6, 2023 10:40:21.646235943 CEST	443	50139	52.49.176.241	192.168.2.4
Jun 6, 2023 10:40:21.680836916 CEST	443	50148	108.138.36.18	192.168.2.4
Jun 6, 2023 10:40:21.682018042 CEST	50148	443	192.168.2.4	108.138.36.18
Jun 6, 2023 10:40:21.682080030 CEST	443	50148	108.138.36.18	192.168.2.4
Jun 6, 2023 10:40:21.686922073 CEST	443	50148	108.138.36.18	192.168.2.4
Jun 6, 2023 10:40:21.687047005 CEST	50148	443	192.168.2.4	108.138.36.18
Jun 6, 2023 10:40:21.689578056 CEST	50148	443	192.168.2.4	108.138.36.18
Jun 6, 2023 10:40:21.689704895 CEST	443	50148	108.138.36.18	192.168.2.4
Jun 6, 2023 10:40:21.689836979 CEST	50148	443	192.168.2.4	108.138.36.18
Jun 6, 2023 10:40:21.712974072 CEST	443	50138	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:21.713445902 CEST	50138	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:21.713506937 CEST	443	50138	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:21.715349913 CEST	443	50138	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:21.715858936 CEST	50138	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:21.716059923 CEST	50138	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:21.716206074 CEST	443	50138	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:21.730359077 CEST	50148	443	192.168.2.4	108.138.36.18
Jun 6, 2023 10:40:21.730421066 CEST	443	50148	108.138.36.18	192.168.2.4
Jun 6, 2023 10:40:21.739394903 CEST	443	50148	108.138.36.18	192.168.2.4
Jun 6, 2023 10:40:21.739424944 CEST	443	50148	108.138.36.18	192.168.2.4
Jun 6, 2023 10:40:21.739468098 CEST	443	50148	108.138.36.18	192.168.2.4
Jun 6, 2023 10:40:21.739554882 CEST	50148	443	192.168.2.4	108.138.36.18
Jun 6, 2023 10:40:21.739554882 CEST	50148	443	192.168.2.4	108.138.36.18
Jun 6, 2023 10:40:21.739613056 CEST	443	50148	108.138.36.18	192.168.2.4
Jun 6, 2023 10:40:21.739739895 CEST	50148	443	192.168.2.4	108.138.36.18
Jun 6, 2023 10:40:21.739739895 CEST	50148	443	192.168.2.4	108.138.36.18
Jun 6, 2023 10:40:21.741753101 CEST	443	50148	108.138.36.18	192.168.2.4
Jun 6, 2023 10:40:21.741848946 CEST	443	50148	108.138.36.18	192.168.2.4
Jun 6, 2023 10:40:21.741966963 CEST	50148	443	192.168.2.4	108.138.36.18
Jun 6, 2023 10:40:21.741966963 CEST	50148	443	192.168.2.4	108.138.36.18
Jun 6, 2023 10:40:21.742018938 CEST	443	50148	108.138.36.18	192.168.2.4
Jun 6, 2023 10:40:21.752779007 CEST	443	50148	108.138.36.18	192.168.2.4
Jun 6, 2023 10:40:21.752835035 CEST	443	50148	108.138.36.18	192.168.2.4
Jun 6, 2023 10:40:21.752939939 CEST	50148	443	192.168.2.4	108.138.36.18
Jun 6, 2023 10:40:21.752939939 CEST	50148	443	192.168.2.4	108.138.36.18
Jun 6, 2023 10:40:21.753005028 CEST	443	50148	108.138.36.18	192.168.2.4
Jun 6, 2023 10:40:21.755171061 CEST	443	50148	108.138.36.18	192.168.2.4
Jun 6, 2023 10:40:21.755212069 CEST	443	50148	108.138.36.18	192.168.2.4
Jun 6, 2023 10:40:21.755331039 CEST	50148	443	192.168.2.4	108.138.36.18
Jun 6, 2023 10:40:21.755386114 CEST	443	50148	108.138.36.18	192.168.2.4
Jun 6, 2023 10:40:21.755424976 CEST	50148	443	192.168.2.4	108.138.36.18
Jun 6, 2023 10:40:21.756320000 CEST	50138	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:21.756342888 CEST	443	50138	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:21.756901979 CEST	443	50148	108.138.36.18	192.168.2.4
Jun 6, 2023 10:40:21.756908894 CEST	50138	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:21.756992102 CEST	443	50148	108.138.36.18	192.168.2.4
Jun 6, 2023 10:40:21.757013083 CEST	50148	443	192.168.2.4	108.138.36.18
Jun 6, 2023 10:40:21.757040024 CEST	443	50148	108.138.36.18	192.168.2.4
Jun 6, 2023 10:40:21.757075071 CEST	443	50138	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:21.757091045 CEST	50148	443	192.168.2.4	108.138.36.18
Jun 6, 2023 10:40:21.757147074 CEST	50148	443	192.168.2.4	108.138.36.18
Jun 6, 2023 10:40:21.757561922 CEST	443	50138	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:21.757687092 CEST	50138	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:21.757687092 CEST	50138	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:21.759239912 CEST	50148	443	192.168.2.4	108.138.36.18
Jun 6, 2023 10:40:21.759293079 CEST	443	50148	108.138.36.18	192.168.2.4
Jun 6, 2023 10:40:21.793622971 CEST	50154	443	192.168.2.4	54.81.54.200
Jun 6, 2023 10:40:21.793688059 CEST	443	50154	54.81.54.200	192.168.2.4
Jun 6, 2023 10:40:21.793816090 CEST	50154	443	192.168.2.4	54.81.54.200
Jun 6, 2023 10:40:21.794348955 CEST	50154	443	192.168.2.4	54.81.54.200
Jun 6, 2023 10:40:21.794384003 CEST	443	50154	54.81.54.200	192.168.2.4
Jun 6, 2023 10:40:21.812369108 CEST	50155	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:21.812422991 CEST	443	50155	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:21.812509060 CEST	50155	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:21.812923908 CEST	50156	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:21.812998056 CEST	443	50156	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:21.813077927 CEST	50156	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:21.813267946 CEST	50157	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:21.813316107 CEST	443	50157	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:21.813443899 CEST	50157	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:21.813694954 CEST	50155	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:21.813724995 CEST	443	50155	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:21.813990116 CEST	50156	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:21.814028025 CEST	443	50156	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:21.814266920 CEST	50157	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:21.814301014 CEST	443	50157	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:21.821058035 CEST	443	50142	18.159.165.110	192.168.2.4
Jun 6, 2023 10:40:21.821500063 CEST	50142	443	192.168.2.4	18.159.165.110
Jun 6, 2023 10:40:21.821549892 CEST	443	50142	18.159.165.110	192.168.2.4
Jun 6, 2023 10:40:21.823317051 CEST	443	50142	18.159.165.110	192.168.2.4
Jun 6, 2023 10:40:21.823398113 CEST	50142	443	192.168.2.4	18.159.165.110
Jun 6, 2023 10:40:21.826008081 CEST	50142	443	192.168.2.4	18.159.165.110
Jun 6, 2023 10:40:21.826231003 CEST	443	50142	18.159.165.110	192.168.2.4
Jun 6, 2023 10:40:21.826252937 CEST	50142	443	192.168.2.4	18.159.165.110
Jun 6, 2023 10:40:21.836283922 CEST	443	50145	192.29.203.179	192.168.2.4
Jun 6, 2023 10:40:21.836775064 CEST	50145	443	192.168.2.4	192.29.203.179
Jun 6, 2023 10:40:21.836822987 CEST	443	50145	192.29.203.179	192.168.2.4
Jun 6, 2023 10:40:21.839133024 CEST	443	50145	192.29.203.179	192.168.2.4
Jun 6, 2023 10:40:21.839698076 CEST	50145	443	192.168.2.4	192.29.203.179
Jun 6, 2023 10:40:21.839879036 CEST	50145	443	192.168.2.4	192.29.203.179
Jun 6, 2023 10:40:21.839901924 CEST	443	50145	192.29.203.179	192.168.2.4
Jun 6, 2023 10:40:21.840115070 CEST	443	50145	192.29.203.179	192.168.2.4
Jun 6, 2023 10:40:21.846929073 CEST	443	50142	18.159.165.110	192.168.2.4
Jun 6, 2023 10:40:21.847084045 CEST	443	50142	18.159.165.110	192.168.2.4
Jun 6, 2023 10:40:21.847196102 CEST	50142	443	192.168.2.4	18.159.165.110
Jun 6, 2023 10:40:21.848150969 CEST	50142	443	192.168.2.4	18.159.165.110
Jun 6, 2023 10:40:21.848192930 CEST	443	50142	18.159.165.110	192.168.2.4
Jun 6, 2023 10:40:21.866053104 CEST	50159	443	192.168.2.4	104.244.42.133
Jun 6, 2023 10:40:21.866111994 CEST	443	50159	104.244.42.133	192.168.2.4
Jun 6, 2023 10:40:21.866228104 CEST	50159	443	192.168.2.4	104.244.42.133
Jun 6, 2023 10:40:21.866523027 CEST	50159	443	192.168.2.4	104.244.42.133
Jun 6, 2023 10:40:21.866543055 CEST	443	50159	104.244.42.133	192.168.2.4
Jun 6, 2023 10:40:21.876574039 CEST	50160	443	192.168.2.4	104.244.42.195
Jun 6, 2023 10:40:21.876660109 CEST	443	50160	104.244.42.195	192.168.2.4
Jun 6, 2023 10:40:21.876844883 CEST	443	50146	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:21.876895905 CEST	50160	443	192.168.2.4	104.244.42.195
Jun 6, 2023 10:40:21.877120972 CEST	50160	443	192.168.2.4	104.244.42.195
Jun 6, 2023 10:40:21.877154112 CEST	443	50160	104.244.42.195	192.168.2.4
Jun 6, 2023 10:40:21.877479076 CEST	50146	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:21.877516985 CEST	443	50146	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:21.878330946 CEST	443	50146	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:21.878952026 CEST	50146	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:21.879106045 CEST	443	50146	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:21.879769087 CEST	50161	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:21.879821062 CEST	443	50161	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:21.879915953 CEST	50161	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:21.880076885 CEST	50146	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:21.880371094 CEST	50161	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:21.880374908 CEST	50145	443	192.168.2.4	192.29.203.179
Jun 6, 2023 10:40:21.880388021 CEST	443	50161	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:21.885292053 CEST	443	50147	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:21.885595083 CEST	50147	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:21.885627031 CEST	443	50147	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:21.887233019 CEST	443	50147	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:21.887331009 CEST	50147	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:21.887833118 CEST	50147	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:21.888092041 CEST	443	50147	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:21.888134003 CEST	50147	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:21.903654099 CEST	50164	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:21.903696060 CEST	443	50164	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:21.903867960 CEST	50164	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:21.904350996 CEST	50164	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:21.904371023 CEST	443	50164	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:21.919630051 CEST	443	50145	192.29.203.179	192.168.2.4
Jun 6, 2023 10:40:21.919765949 CEST	443	50145	192.29.203.179	192.168.2.4
Jun 6, 2023 10:40:21.919853926 CEST	50145	443	192.168.2.4	192.29.203.179
Jun 6, 2023 10:40:21.920449972 CEST	443	50146	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:21.920622110 CEST	50145	443	192.168.2.4	192.29.203.179
Jun 6, 2023 10:40:21.920644999 CEST	443	50145	192.29.203.179	192.168.2.4
Jun 6, 2023 10:40:21.928374052 CEST	50147	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:21.928416967 CEST	443	50147	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:21.929333925 CEST	443	50146	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:21.929564953 CEST	443	50146	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:21.929635048 CEST	50146	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:21.930305958 CEST	50146	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:21.930325031 CEST	443	50146	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:21.936487913 CEST	443	50147	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:21.936558962 CEST	50147	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:21.938159943 CEST	50147	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:21.938214064 CEST	443	50147	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:21.961920023 CEST	50170	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:21.961988926 CEST	443	50170	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:21.962074041 CEST	50170	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:21.962861061 CEST	50170	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:21.962883949 CEST	443	50170	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:21.988188028 CEST	50171	443	192.168.2.4	18.159.165.110
Jun 6, 2023 10:40:21.988250017 CEST	443	50171	18.159.165.110	192.168.2.4
Jun 6, 2023 10:40:21.988708019 CEST	50171	443	192.168.2.4	18.159.165.110
Jun 6, 2023 10:40:21.989003897 CEST	50171	443	192.168.2.4	18.159.165.110
Jun 6, 2023 10:40:21.989029884 CEST	443	50171	18.159.165.110	192.168.2.4
Jun 6, 2023 10:40:22.002125025 CEST	50172	443	192.168.2.4	192.29.203.179
Jun 6, 2023 10:40:22.002196074 CEST	443	50172	192.29.203.179	192.168.2.4
Jun 6, 2023 10:40:22.002317905 CEST	50172	443	192.168.2.4	192.29.203.179
Jun 6, 2023 10:40:22.002619028 CEST	50172	443	192.168.2.4	192.29.203.179
Jun 6, 2023 10:40:22.002648115 CEST	443	50172	192.29.203.179	192.168.2.4
Jun 6, 2023 10:40:22.008452892 CEST	443	50153	52.95.122.74	192.168.2.4
Jun 6, 2023 10:40:22.008848906 CEST	50153	443	192.168.2.4	52.95.122.74
Jun 6, 2023 10:40:22.008878946 CEST	443	50153	52.95.122.74	192.168.2.4
Jun 6, 2023 10:40:22.010435104 CEST	443	50153	52.95.122.74	192.168.2.4
Jun 6, 2023 10:40:22.011200905 CEST	50153	443	192.168.2.4	52.95.122.74
Jun 6, 2023 10:40:22.011569977 CEST	443	50153	52.95.122.74	192.168.2.4
Jun 6, 2023 10:40:22.012249947 CEST	50153	443	192.168.2.4	52.95.122.74
Jun 6, 2023 10:40:22.056296110 CEST	443	50153	52.95.122.74	192.168.2.4
Jun 6, 2023 10:40:22.133577108 CEST	443	50153	52.95.122.74	192.168.2.4
Jun 6, 2023 10:40:22.133723021 CEST	443	50153	52.95.122.74	192.168.2.4
Jun 6, 2023 10:40:22.134555101 CEST	50153	443	192.168.2.4	52.95.122.74
Jun 6, 2023 10:40:22.134840012 CEST	50153	443	192.168.2.4	52.95.122.74
Jun 6, 2023 10:40:22.134865999 CEST	443	50153	52.95.122.74	192.168.2.4
Jun 6, 2023 10:40:22.262626886 CEST	443	50152	54.81.54.200	192.168.2.4
Jun 6, 2023 10:40:22.263035059 CEST	50152	443	192.168.2.4	54.81.54.200
Jun 6, 2023 10:40:22.263073921 CEST	443	50152	54.81.54.200	192.168.2.4
Jun 6, 2023 10:40:22.264878035 CEST	443	50152	54.81.54.200	192.168.2.4
Jun 6, 2023 10:40:22.264964104 CEST	50152	443	192.168.2.4	54.81.54.200
Jun 6, 2023 10:40:22.268042088 CEST	50152	443	192.168.2.4	54.81.54.200
Jun 6, 2023 10:40:22.268258095 CEST	50152	443	192.168.2.4	54.81.54.200
Jun 6, 2023 10:40:22.268281937 CEST	443	50152	54.81.54.200	192.168.2.4
Jun 6, 2023 10:40:22.268317938 CEST	443	50152	54.81.54.200	192.168.2.4
Jun 6, 2023 10:40:22.270534039 CEST	443	50156	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.270916939 CEST	50156	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.270956039 CEST	443	50156	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.272874117 CEST	443	50156	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.272958994 CEST	50156	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.275429964 CEST	50156	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.275629997 CEST	50156	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.275652885 CEST	443	50156	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.275773048 CEST	443	50156	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.308324099 CEST	50152	443	192.168.2.4	54.81.54.200
Jun 6, 2023 10:40:22.308351040 CEST	443	50152	54.81.54.200	192.168.2.4
Jun 6, 2023 10:40:22.316370964 CEST	50156	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.316394091 CEST	443	50156	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.320971966 CEST	50175	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.321036100 CEST	443	50175	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.321118116 CEST	50175	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.321466923 CEST	50175	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.321494102 CEST	443	50175	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.321654081 CEST	443	50156	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.321737051 CEST	50156	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.322341919 CEST	50156	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.322392941 CEST	443	50156	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.323836088 CEST	50176	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.323879957 CEST	443	50176	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.324053049 CEST	50176	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.324279070 CEST	50176	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.324301004 CEST	443	50176	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.341248035 CEST	443	50155	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.341957092 CEST	50155	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.341979027 CEST	443	50155	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.343765974 CEST	50178	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.343811035 CEST	443	50178	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.344002008 CEST	50178	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.344280005 CEST	50178	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.344297886 CEST	443	50178	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.344799042 CEST	443	50155	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.344881058 CEST	50155	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.345515966 CEST	50155	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.345658064 CEST	50155	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.345673084 CEST	443	50155	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.345840931 CEST	443	50155	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.348332882 CEST	50152	443	192.168.2.4	54.81.54.200
Jun 6, 2023 10:40:22.362529039 CEST	443	50160	104.244.42.195	192.168.2.4
Jun 6, 2023 10:40:22.362958908 CEST	50160	443	192.168.2.4	104.244.42.195
Jun 6, 2023 10:40:22.362979889 CEST	443	50160	104.244.42.195	192.168.2.4
Jun 6, 2023 10:40:22.364612103 CEST	443	50160	104.244.42.195	192.168.2.4
Jun 6, 2023 10:40:22.364732027 CEST	50160	443	192.168.2.4	104.244.42.195
Jun 6, 2023 10:40:22.365386963 CEST	50160	443	192.168.2.4	104.244.42.195
Jun 6, 2023 10:40:22.365588903 CEST	443	50160	104.244.42.195	192.168.2.4
Jun 6, 2023 10:40:22.365647078 CEST	50160	443	192.168.2.4	104.244.42.195
Jun 6, 2023 10:40:22.368417978 CEST	443	50172	192.29.203.179	192.168.2.4
Jun 6, 2023 10:40:22.369501114 CEST	50172	443	192.168.2.4	192.29.203.179
Jun 6, 2023 10:40:22.369534016 CEST	443	50172	192.29.203.179	192.168.2.4
Jun 6, 2023 10:40:22.370364904 CEST	443	50172	192.29.203.179	192.168.2.4
Jun 6, 2023 10:40:22.370841026 CEST	50172	443	192.168.2.4	192.29.203.179
Jun 6, 2023 10:40:22.371016026 CEST	443	50172	192.29.203.179	192.168.2.4
Jun 6, 2023 10:40:22.371074915 CEST	50172	443	192.168.2.4	192.29.203.179
Jun 6, 2023 10:40:22.373857021 CEST	443	50170	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.374187946 CEST	50170	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.374227047 CEST	443	50170	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.374902964 CEST	443	50170	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.375405073 CEST	50170	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.375535011 CEST	50170	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.375550985 CEST	443	50170	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.375689983 CEST	443	50170	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.378737926 CEST	443	50155	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.378912926 CEST	50155	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.379770994 CEST	50155	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.379796028 CEST	443	50155	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.406122923 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.406182051 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.406366110 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.406404972 CEST	50160	443	192.168.2.4	104.244.42.195
Jun 6, 2023 10:40:22.406433105 CEST	443	50160	104.244.42.195	192.168.2.4
Jun 6, 2023 10:40:22.407237053 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.407264948 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.408118963 CEST	443	50170	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.408201933 CEST	50170	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.409246922 CEST	50170	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.409275055 CEST	443	50170	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.411350965 CEST	50172	443	192.168.2.4	192.29.203.179
Jun 6, 2023 10:40:22.412287951 CEST	443	50172	192.29.203.179	192.168.2.4
Jun 6, 2023 10:40:22.414568901 CEST	443	50152	54.81.54.200	192.168.2.4
Jun 6, 2023 10:40:22.414664984 CEST	443	50152	54.81.54.200	192.168.2.4
Jun 6, 2023 10:40:22.414854050 CEST	50152	443	192.168.2.4	54.81.54.200
Jun 6, 2023 10:40:22.415594101 CEST	50152	443	192.168.2.4	54.81.54.200
Jun 6, 2023 10:40:22.415636063 CEST	443	50152	54.81.54.200	192.168.2.4
Jun 6, 2023 10:40:22.416465044 CEST	50180	443	192.168.2.4	54.81.54.200
Jun 6, 2023 10:40:22.416517019 CEST	443	50180	54.81.54.200	192.168.2.4
Jun 6, 2023 10:40:22.416794062 CEST	50180	443	192.168.2.4	54.81.54.200
Jun 6, 2023 10:40:22.417303085 CEST	50180	443	192.168.2.4	54.81.54.200
Jun 6, 2023 10:40:22.417327881 CEST	443	50180	54.81.54.200	192.168.2.4
Jun 6, 2023 10:40:22.421502113 CEST	443	50172	192.29.203.179	192.168.2.4
Jun 6, 2023 10:40:22.421613932 CEST	443	50172	192.29.203.179	192.168.2.4
Jun 6, 2023 10:40:22.422161102 CEST	50172	443	192.168.2.4	192.29.203.179
Jun 6, 2023 10:40:22.423261881 CEST	50172	443	192.168.2.4	192.29.203.179
Jun 6, 2023 10:40:22.423294067 CEST	443	50172	192.29.203.179	192.168.2.4
Jun 6, 2023 10:40:22.446500063 CEST	50160	443	192.168.2.4	104.244.42.195
Jun 6, 2023 10:40:22.471856117 CEST	443	50161	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.472213984 CEST	50161	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.472255945 CEST	443	50161	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.472824097 CEST	443	50161	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.477941990 CEST	50161	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.478104115 CEST	50161	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.478117943 CEST	443	50161	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.478353977 CEST	443	50161	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.481381893 CEST	50181	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.481426954 CEST	443	50181	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.481642008 CEST	50181	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.481898069 CEST	50181	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.481913090 CEST	443	50181	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.486360073 CEST	443	50160	104.244.42.195	192.168.2.4
Jun 6, 2023 10:40:22.499466896 CEST	443	50159	104.244.42.133	192.168.2.4
Jun 6, 2023 10:40:22.499831915 CEST	50159	443	192.168.2.4	104.244.42.133
Jun 6, 2023 10:40:22.499871969 CEST	443	50159	104.244.42.133	192.168.2.4
Jun 6, 2023 10:40:22.503037930 CEST	443	50159	104.244.42.133	192.168.2.4
Jun 6, 2023 10:40:22.503143072 CEST	50159	443	192.168.2.4	104.244.42.133
Jun 6, 2023 10:40:22.503748894 CEST	50159	443	192.168.2.4	104.244.42.133
Jun 6, 2023 10:40:22.503994942 CEST	50159	443	192.168.2.4	104.244.42.133
Jun 6, 2023 10:40:22.504010916 CEST	443	50159	104.244.42.133	192.168.2.4
Jun 6, 2023 10:40:22.504127026 CEST	443	50159	104.244.42.133	192.168.2.4
Jun 6, 2023 10:40:22.511431932 CEST	443	50161	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.511542082 CEST	50161	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.512096882 CEST	50161	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.512120008 CEST	443	50161	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.522073030 CEST	443	50154	54.81.54.200	192.168.2.4
Jun 6, 2023 10:40:22.522799969 CEST	50154	443	192.168.2.4	54.81.54.200
Jun 6, 2023 10:40:22.522840023 CEST	443	50154	54.81.54.200	192.168.2.4
Jun 6, 2023 10:40:22.524355888 CEST	443	50154	54.81.54.200	192.168.2.4
Jun 6, 2023 10:40:22.524451017 CEST	50154	443	192.168.2.4	54.81.54.200
Jun 6, 2023 10:40:22.525182009 CEST	50154	443	192.168.2.4	54.81.54.200
Jun 6, 2023 10:40:22.525418043 CEST	50154	443	192.168.2.4	54.81.54.200
Jun 6, 2023 10:40:22.525434971 CEST	443	50154	54.81.54.200	192.168.2.4
Jun 6, 2023 10:40:22.525949001 CEST	443	50157	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.526470900 CEST	50160	443	192.168.2.4	104.244.42.195
Jun 6, 2023 10:40:22.526487112 CEST	443	50160	104.244.42.195	192.168.2.4
Jun 6, 2023 10:40:22.526735067 CEST	50157	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.526768923 CEST	443	50157	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.527228117 CEST	50160	443	192.168.2.4	104.244.42.195
Jun 6, 2023 10:40:22.527314901 CEST	443	50160	104.244.42.195	192.168.2.4
Jun 6, 2023 10:40:22.527542114 CEST	443	50160	104.244.42.195	192.168.2.4
Jun 6, 2023 10:40:22.527638912 CEST	50160	443	192.168.2.4	104.244.42.195
Jun 6, 2023 10:40:22.527638912 CEST	50160	443	192.168.2.4	104.244.42.195
Jun 6, 2023 10:40:22.528762102 CEST	443	50157	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.528867960 CEST	50157	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.529417992 CEST	50157	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.529606104 CEST	50157	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.529619932 CEST	443	50157	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.529659986 CEST	443	50157	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.535399914 CEST	443	50178	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.536477089 CEST	50178	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.536503077 CEST	443	50178	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.537941933 CEST	443	50178	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.538450956 CEST	50178	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.538655043 CEST	50178	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.538666964 CEST	443	50178	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.538734913 CEST	443	50178	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.544399023 CEST	50159	443	192.168.2.4	104.244.42.133
Jun 6, 2023 10:40:22.544428110 CEST	443	50159	104.244.42.133	192.168.2.4
Jun 6, 2023 10:40:22.565608025 CEST	50154	443	192.168.2.4	54.81.54.200
Jun 6, 2023 10:40:22.565644979 CEST	443	50154	54.81.54.200	192.168.2.4
Jun 6, 2023 10:40:22.571527004 CEST	50157	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.571567059 CEST	443	50157	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.577183008 CEST	443	50157	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.578068972 CEST	50157	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.578948975 CEST	50157	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.578980923 CEST	443	50157	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.579380989 CEST	50178	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.584005117 CEST	50159	443	192.168.2.4	104.244.42.133
Jun 6, 2023 10:40:22.584898949 CEST	50183	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:22.584942102 CEST	443	50183	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:22.585000038 CEST	443	50178	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.585187912 CEST	50183	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:22.585189104 CEST	443	50178	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.585261106 CEST	50178	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.586363077 CEST	50183	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:22.586388111 CEST	443	50183	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:22.586460114 CEST	50178	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.586488008 CEST	443	50178	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.590430975 CEST	50184	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.590487003 CEST	443	50184	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.590564966 CEST	50184	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.590801001 CEST	50184	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.590817928 CEST	443	50184	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.599299908 CEST	50185	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.599384069 CEST	443	50185	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.599488020 CEST	50185	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.600064039 CEST	50185	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.600095034 CEST	443	50185	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.601389885 CEST	50186	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.601430893 CEST	443	50186	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.601505995 CEST	50186	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.601838112 CEST	50186	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.601852894 CEST	443	50186	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.607471943 CEST	50154	443	192.168.2.4	54.81.54.200
Jun 6, 2023 10:40:22.626549006 CEST	50187	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.626616955 CEST	443	50187	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.626797915 CEST	50187	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.627077103 CEST	50187	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.627093077 CEST	443	50187	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.630222082 CEST	443	50159	104.244.42.133	192.168.2.4
Jun 6, 2023 10:40:22.648936987 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.649373055 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.649413109 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.650633097 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.651160002 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.651319981 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.651335001 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.651468992 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.670361996 CEST	50159	443	192.168.2.4	104.244.42.133
Jun 6, 2023 10:40:22.670381069 CEST	443	50159	104.244.42.133	192.168.2.4
Jun 6, 2023 10:40:22.671204090 CEST	50159	443	192.168.2.4	104.244.42.133
Jun 6, 2023 10:40:22.671308994 CEST	443	50159	104.244.42.133	192.168.2.4
Jun 6, 2023 10:40:22.671386003 CEST	50159	443	192.168.2.4	104.244.42.133
Jun 6, 2023 10:40:22.676614046 CEST	50188	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.676676989 CEST	443	50188	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.676764965 CEST	50188	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.677202940 CEST	50188	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.677238941 CEST	443	50188	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.686209917 CEST	443	50171	18.159.165.110	192.168.2.4
Jun 6, 2023 10:40:22.687403917 CEST	50171	443	192.168.2.4	18.159.165.110
Jun 6, 2023 10:40:22.687450886 CEST	443	50171	18.159.165.110	192.168.2.4
Jun 6, 2023 10:40:22.688647032 CEST	443	50171	18.159.165.110	192.168.2.4
Jun 6, 2023 10:40:22.689496040 CEST	50171	443	192.168.2.4	18.159.165.110
Jun 6, 2023 10:40:22.689687014 CEST	443	50171	18.159.165.110	192.168.2.4
Jun 6, 2023 10:40:22.689709902 CEST	50171	443	192.168.2.4	18.159.165.110
Jun 6, 2023 10:40:22.693361998 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.696405888 CEST	443	50164	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:22.696815014 CEST	50164	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:22.696851015 CEST	443	50164	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:22.698524952 CEST	443	50164	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:22.698623896 CEST	50164	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:22.699273109 CEST	50164	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:22.699453115 CEST	443	50164	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:22.699501991 CEST	50164	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:22.699620008 CEST	443	50164	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:22.707950115 CEST	50189	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.708012104 CEST	443	50189	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.708116055 CEST	50189	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.708448887 CEST	50189	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.708467007 CEST	443	50189	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.709974051 CEST	443	50171	18.159.165.110	192.168.2.4
Jun 6, 2023 10:40:22.710215092 CEST	50171	443	192.168.2.4	18.159.165.110
Jun 6, 2023 10:40:22.710673094 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.710748911 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.710753918 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.710777998 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.710834980 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.710850954 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.710874081 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.710895061 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.710930109 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.710943937 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.711041927 CEST	443	50175	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.711054087 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.711261988 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.711319923 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.711354017 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.711373091 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.711415052 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.712050915 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.712120056 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.712120056 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.712145090 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.712315083 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.712765932 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.712893009 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.712924004 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.713059902 CEST	50175	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.713089943 CEST	443	50175	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.713139057 CEST	50171	443	192.168.2.4	18.159.165.110
Jun 6, 2023 10:40:22.713174105 CEST	443	50171	18.159.165.110	192.168.2.4
Jun 6, 2023 10:40:22.713357925 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.713434935 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.713457108 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.713638067 CEST	443	50175	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.715030909 CEST	50175	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.715182066 CEST	443	50175	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.716233015 CEST	50175	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.721259117 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.721434116 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.721524954 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.721545935 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.721576929 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.721617937 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.722316980 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.722393990 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.722419977 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.722444057 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.722829103 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.722843885 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.723018885 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.723093033 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.723109007 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.723731041 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.723803043 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.723818064 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.724503994 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.724606037 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.724620104 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.724642038 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.724698067 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.725152016 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.725240946 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.725276947 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.725361109 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.725887060 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.725946903 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.726619959 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.726707935 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.726715088 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.726749897 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.727055073 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.727284908 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.727380991 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.727392912 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.727413893 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.728037119 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.728056908 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.728085995 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.728144884 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.728594065 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.728708982 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.728856087 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.728940010 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.729377031 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.729579926 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.729629040 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.729649067 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.729804039 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.731607914 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.731681108 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.731730938 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.731818914 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.731818914 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.731839895 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.732022047 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.732088089 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.732108116 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.732137918 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.732192039 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.732208967 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.732889891 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.732948065 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.733023882 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.733050108 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.733069897 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.733119011 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.733120918 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.733140945 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.733170986 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.733673096 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.733719110 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.733750105 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.733769894 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.733786106 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.733829021 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.733844042 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.733886957 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.734682083 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.734756947 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.734771967 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.734806061 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.734859943 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.734929085 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.734941959 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.734982014 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.735595942 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.735649109 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.735685110 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.735712051 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.735734940 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.735763073 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.735778093 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.735821009 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.736514091 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.736589909 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.736733913 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.736797094 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.736850977 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.736901045 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.736916065 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.736955881 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.737771988 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.737833023 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.737845898 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.737867117 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.737885952 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.737931967 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.737936020 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.737955093 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.737982035 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.738759995 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.738815069 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.738869905 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.738888025 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.738928080 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.739614010 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.739672899 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.739701986 CEST	50164	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:22.739701986 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.739717007 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.739723921 CEST	443	50164	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:22.739744902 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.739762068 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.739784956 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.739823103 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.739831924 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.740593910 CEST	50164	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:22.740690947 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.740712881 CEST	443	50164	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:22.740761995 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.740767002 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.740784883 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.740828037 CEST	50164	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:22.740874052 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.740885973 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.741563082 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.741607904 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.741669893 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.741683006 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.741698980 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.741734982 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.741744995 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.741796017 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.742461920 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.742551088 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.742563963 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.742662907 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.742780924 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.742830038 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.742861986 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.742875099 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.742897034 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.743500948 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.743582964 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.743583918 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.743599892 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.743643045 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.743683100 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.743792057 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.743817091 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.743833065 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.744147062 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.744431973 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.744477987 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.744503975 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.744522095 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.744539976 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.744564056 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.744577885 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.744596004 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.744641066 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.744648933 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.744661093 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.744692087 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.744709969 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.744766951 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.744776964 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.745289087 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.745336056 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.745384932 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.745387077 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.745402098 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.745438099 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.745452881 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.745500088 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.745502949 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.745513916 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.745554924 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.745563984 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.745577097 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.746316910 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.746366978 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.746402025 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.746431112 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.746443033 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.746455908 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.746489048 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.746515989 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.746521950 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.746536016 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.746579885 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.746603966 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.746615887 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.746629000 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.746633053 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.746691942 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.746701956 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.747281075 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.747328043 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.747380972 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.747391939 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.747406006 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.747419119 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.747430086 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.747458935 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.747467995 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.747489929 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.747529984 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.747558117 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.747569084 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.747601032 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.747648954 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.747658968 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.747759104 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.748233080 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.748305082 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.748312950 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.748342037 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.748358011 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.748402119 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.748435020 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.748470068 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.748503923 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.748506069 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.748554945 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.748608112 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.748632908 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.748646021 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.748680115 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.748689890 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.748702049 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.748769999 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.748785019 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.748823881 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.749070883 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.749130964 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.749135017 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.749150991 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.749192953 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.749361038 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.749409914 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.749417067 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.749428988 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.749464035 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.749514103 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.749514103 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.749528885 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.749561071 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.749573946 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.749639988 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.749655008 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.749933958 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.749990940 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.750004053 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.750017881 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.750040054 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.750086069 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.750086069 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.750102043 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.750128984 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.750150919 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.750195026 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.750204086 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.750215054 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.750242949 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.750279903 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.750291109 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.750304937 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.750334978 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.750865936 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.751008034 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.751023054 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.752413988 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.752460957 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.752516985 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.752537012 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.752569914 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.752589941 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.752602100 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.752619028 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.752679110 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.752682924 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.752696991 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.752733946 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.752752066 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.752796888 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.752826929 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.752842903 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.752861977 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.752908945 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.752919912 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.752939939 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.752954006 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.752954960 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.752999067 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.753012896 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.753026009 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.753042936 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.753082037 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.753092051 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.753112078 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.753135920 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.754271984 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.754338980 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.754384041 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.754426003 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.754432917 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.754463911 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.754487991 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.754496098 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.754523993 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.754537106 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.754553080 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.754587889 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.754600048 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.754612923 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.754650116 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.754667044 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.754690886 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.754724026 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.754740000 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.754754066 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.754796028 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.754810095 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.754857063 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.755980968 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.756043911 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.756076097 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.756089926 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.756105900 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.756148100 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.756155014 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.756202936 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.756211042 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.756223917 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.756278038 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.756289959 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.756290913 CEST	443	50175	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.756304979 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.756330967 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.756373882 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.756382942 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.756396055 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.756409883 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.756417990 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.756470919 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.756480932 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.763536930 CEST	443	50175	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.763637066 CEST	443	50175	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.764180899 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.764236927 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.764275074 CEST	50175	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.764416933 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.764470100 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.764472008 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.764498949 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.764516115 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.764518023 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.764554977 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.764585972 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.764600039 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.764647961 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.764648914 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.764669895 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.764714003 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.764717102 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.764764071 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.764765978 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.764801025 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.764836073 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.764883995 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.764893055 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.764919043 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.764941931 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.764954090 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.765047073 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.765098095 CEST	50175	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.765105963 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.765113115 CEST	443	50175	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.765171051 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.765218019 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.765223026 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.765234947 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.765269995 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.765276909 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.765286922 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.765320063 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.765362024 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.765372038 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.765412092 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.765415907 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.765431881 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.765480042 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.765501976 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.765517950 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.765785933 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.765799999 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.767714024 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.767776966 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.767832994 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.767848969 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.767872095 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.767888069 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.767915964 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.767932892 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.767937899 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.767951965 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.767995119 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.768037081 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.768045902 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.768062115 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.768089056 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.768091917 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.768140078 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.768146992 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.768174887 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.768187046 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.768229961 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.768244982 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.768276930 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.768296957 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.768301010 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.768337011 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.768381119 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.768388033 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.768400908 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.768445969 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.768446922 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.768481016 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.768531084 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.768539906 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.768552065 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.768584013 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.768589020 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.768609047 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.768635035 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.768646002 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.768726110 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.768776894 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.768779993 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.768793106 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.768825054 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.768840075 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.768882990 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.768892050 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.769037008 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.769218922 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.769762039 CEST	50179	443	192.168.2.4	157.240.17.15
Jun 6, 2023 10:40:22.769781113 CEST	443	50179	157.240.17.15	192.168.2.4
Jun 6, 2023 10:40:22.783567905 CEST	50190	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.783613920 CEST	443	50190	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.783926964 CEST	50190	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.784224987 CEST	50190	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.784251928 CEST	443	50190	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.810069084 CEST	443	50180	54.81.54.200	192.168.2.4
Jun 6, 2023 10:40:22.810420036 CEST	50180	443	192.168.2.4	54.81.54.200
Jun 6, 2023 10:40:22.810461044 CEST	443	50180	54.81.54.200	192.168.2.4
Jun 6, 2023 10:40:22.810921907 CEST	443	50180	54.81.54.200	192.168.2.4
Jun 6, 2023 10:40:22.811455011 CEST	50180	443	192.168.2.4	54.81.54.200
Jun 6, 2023 10:40:22.811572075 CEST	50180	443	192.168.2.4	54.81.54.200
Jun 6, 2023 10:40:22.811593056 CEST	443	50180	54.81.54.200	192.168.2.4
Jun 6, 2023 10:40:22.811625957 CEST	443	50180	54.81.54.200	192.168.2.4
Jun 6, 2023 10:40:22.813574076 CEST	443	50154	54.81.54.200	192.168.2.4
Jun 6, 2023 10:40:22.813735008 CEST	443	50154	54.81.54.200	192.168.2.4
Jun 6, 2023 10:40:22.813934088 CEST	50154	443	192.168.2.4	54.81.54.200
Jun 6, 2023 10:40:22.814330101 CEST	50154	443	192.168.2.4	54.81.54.200
Jun 6, 2023 10:40:22.814357996 CEST	443	50154	54.81.54.200	192.168.2.4
Jun 6, 2023 10:40:22.851383924 CEST	50180	443	192.168.2.4	54.81.54.200
Jun 6, 2023 10:40:22.853856087 CEST	443	50188	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.854263067 CEST	50188	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.854310989 CEST	443	50188	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.856748104 CEST	443	50188	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.856846094 CEST	50188	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.857485056 CEST	50188	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.857644081 CEST	50188	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.857656956 CEST	443	50188	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.857794046 CEST	443	50188	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.879317999 CEST	443	50187	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.880003929 CEST	50187	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.880074978 CEST	443	50187	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.883281946 CEST	443	50187	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.883409977 CEST	50187	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.884207010 CEST	50187	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.884479046 CEST	50187	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.884510994 CEST	443	50187	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.884546995 CEST	443	50187	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.891043901 CEST	443	50188	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.891168118 CEST	50188	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.892118931 CEST	50188	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.892160892 CEST	443	50188	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.892716885 CEST	50191	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.892770052 CEST	443	50191	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.892874002 CEST	50191	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.893265963 CEST	443	50181	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.893857956 CEST	50191	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.893888950 CEST	443	50191	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.894257069 CEST	50181	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.894294977 CEST	443	50181	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.895921946 CEST	443	50181	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.896522045 CEST	50181	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.896914005 CEST	443	50181	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.897015095 CEST	50181	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.918159008 CEST	443	50187	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.918267965 CEST	50187	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.919181108 CEST	50187	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.919219017 CEST	443	50187	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.919882059 CEST	50192	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.919954062 CEST	443	50192	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.920074940 CEST	50192	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.920521021 CEST	50192	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.920583963 CEST	443	50192	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.927301884 CEST	443	50176	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.928419113 CEST	50176	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.928451061 CEST	443	50176	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.929171085 CEST	50193	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.929224968 CEST	443	50193	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.929374933 CEST	50193	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.929788113 CEST	50193	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.929809093 CEST	443	50193	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.930265903 CEST	50194	443	192.168.2.4	157.240.9.35
Jun 6, 2023 10:40:22.930310965 CEST	443	50194	157.240.9.35	192.168.2.4
Jun 6, 2023 10:40:22.930367947 CEST	443	50176	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.930387974 CEST	50194	443	192.168.2.4	157.240.9.35
Jun 6, 2023 10:40:22.930532932 CEST	50176	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.930797100 CEST	50194	443	192.168.2.4	157.240.9.35
Jun 6, 2023 10:40:22.930814981 CEST	443	50194	157.240.9.35	192.168.2.4
Jun 6, 2023 10:40:22.931596994 CEST	50176	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.931750059 CEST	443	50176	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.932200909 CEST	50195	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.932248116 CEST	443	50195	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.932327986 CEST	50195	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.932684898 CEST	50196	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.932717085 CEST	443	50196	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.932804108 CEST	50196	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.933088064 CEST	50176	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.933116913 CEST	443	50176	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.933475018 CEST	50195	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.933505058 CEST	443	50195	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.933715105 CEST	50196	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.933732986 CEST	443	50196	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.940295935 CEST	443	50181	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.945229053 CEST	443	50181	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.945403099 CEST	443	50181	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.945468903 CEST	50181	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.945986986 CEST	50181	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.946007967 CEST	443	50181	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.948860884 CEST	50197	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.948918104 CEST	443	50197	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.948982000 CEST	50197	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.949389935 CEST	50197	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.949415922 CEST	443	50197	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.973392963 CEST	50176	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.979098082 CEST	443	50184	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.979594946 CEST	50184	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.979633093 CEST	443	50184	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.981290102 CEST	443	50184	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.981890917 CEST	50184	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.982111931 CEST	50184	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:22.982127905 CEST	443	50184	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.982237101 CEST	443	50184	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:22.982825994 CEST	443	50176	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.982918024 CEST	443	50176	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.983031034 CEST	50176	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.984230042 CEST	50176	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.984277010 CEST	443	50176	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.984788895 CEST	50199	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.984831095 CEST	443	50199	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:22.984905958 CEST	50199	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.985688925 CEST	50199	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:22.985708952 CEST	443	50199	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.011456013 CEST	443	50186	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.012108088 CEST	50186	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.012141943 CEST	443	50186	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.013669968 CEST	443	50186	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.013784885 CEST	50186	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.014585018 CEST	50186	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.014800072 CEST	50186	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.014828920 CEST	443	50186	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.014856100 CEST	443	50186	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.017854929 CEST	443	50184	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.017960072 CEST	50184	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.019171953 CEST	50184	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.019202948 CEST	443	50184	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.019670963 CEST	50200	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.019735098 CEST	443	50200	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.019882917 CEST	50200	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.020330906 CEST	50200	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.020359039 CEST	443	50200	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.027041912 CEST	443	50189	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.029829025 CEST	50189	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.029877901 CEST	443	50189	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.030946016 CEST	443	50189	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.031575918 CEST	50189	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.031840086 CEST	50189	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.031862020 CEST	443	50189	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.052237988 CEST	443	50186	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.052335024 CEST	50186	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.053514004 CEST	50186	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.053545952 CEST	443	50186	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.057692051 CEST	50201	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.057748079 CEST	443	50201	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.057821989 CEST	50201	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.058090925 CEST	50201	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.058110952 CEST	443	50201	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.063611031 CEST	443	50189	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.063831091 CEST	50189	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.065727949 CEST	443	50191	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.066077948 CEST	50189	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.066113949 CEST	443	50189	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.066613913 CEST	50202	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.066658020 CEST	443	50202	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.066747904 CEST	50202	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.067626953 CEST	50202	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.067656040 CEST	443	50202	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.068120956 CEST	50191	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.068151951 CEST	443	50191	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.068743944 CEST	443	50191	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.069912910 CEST	50191	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.070168018 CEST	443	50191	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.070194006 CEST	50191	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.103739977 CEST	443	50191	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.104310036 CEST	50191	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.104747057 CEST	50191	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.104767084 CEST	443	50191	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.105313063 CEST	50204	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.105364084 CEST	443	50204	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.105590105 CEST	50204	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.106664896 CEST	50204	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.106687069 CEST	443	50204	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.109149933 CEST	443	50197	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.109813929 CEST	50197	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.109854937 CEST	443	50197	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.110763073 CEST	443	50197	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.111895084 CEST	50197	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.112075090 CEST	50197	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.112090111 CEST	443	50197	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.112119913 CEST	443	50197	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.133162975 CEST	443	50180	54.81.54.200	192.168.2.4
Jun 6, 2023 10:40:23.133281946 CEST	443	50180	54.81.54.200	192.168.2.4
Jun 6, 2023 10:40:23.134207964 CEST	50180	443	192.168.2.4	54.81.54.200
Jun 6, 2023 10:40:23.134426117 CEST	50180	443	192.168.2.4	54.81.54.200
Jun 6, 2023 10:40:23.134452105 CEST	443	50180	54.81.54.200	192.168.2.4
Jun 6, 2023 10:40:23.137434006 CEST	443	50195	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.137881994 CEST	50195	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.137923002 CEST	443	50195	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.139453888 CEST	443	50195	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.140000105 CEST	50195	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.140212059 CEST	50195	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.140232086 CEST	443	50195	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.140724897 CEST	443	50195	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.143182039 CEST	443	50193	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.144157887 CEST	50193	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.144186974 CEST	443	50193	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.145170927 CEST	443	50193	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.146411896 CEST	50193	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.146558046 CEST	443	50193	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.146790981 CEST	50193	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.154273987 CEST	443	50196	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.154879093 CEST	50196	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.154934883 CEST	443	50196	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.156184912 CEST	443	50196	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.156485081 CEST	50197	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.156816959 CEST	50196	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.156989098 CEST	50196	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.157002926 CEST	443	50196	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.157342911 CEST	443	50196	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.163232088 CEST	443	50197	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.163348913 CEST	443	50197	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.163444042 CEST	50197	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.164073944 CEST	50197	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.164105892 CEST	443	50197	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.169461012 CEST	50205	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.169539928 CEST	443	50205	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.169878006 CEST	50205	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.170522928 CEST	50205	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.170547009 CEST	443	50205	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.180480003 CEST	443	50185	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.180982113 CEST	50185	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.181010008 CEST	443	50185	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.181938887 CEST	443	50185	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.183048010 CEST	50185	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.183233023 CEST	50185	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.183248997 CEST	443	50185	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.183347940 CEST	443	50185	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.185645103 CEST	443	50192	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.185718060 CEST	443	50195	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.185806990 CEST	50195	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.186738968 CEST	50192	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.186774969 CEST	443	50192	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.186856031 CEST	50195	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.186889887 CEST	443	50195	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.187447071 CEST	50206	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.187486887 CEST	443	50206	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.187503099 CEST	443	50192	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.187561989 CEST	50206	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.188072920 CEST	50206	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.188092947 CEST	443	50206	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.189048052 CEST	50192	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.189270020 CEST	443	50192	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.189385891 CEST	50192	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.192293882 CEST	443	50193	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.196017981 CEST	443	50193	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.196157932 CEST	443	50193	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.196208954 CEST	50193	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.196821928 CEST	50193	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.196847916 CEST	443	50193	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.202337027 CEST	50207	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.202388048 CEST	443	50207	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.202452898 CEST	50207	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.202945948 CEST	50207	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.202965975 CEST	443	50207	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.203267097 CEST	50196	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.205389023 CEST	443	50196	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.205595970 CEST	443	50196	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.205895901 CEST	50196	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.206338882 CEST	50196	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.206362009 CEST	443	50196	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.213145971 CEST	443	50202	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.213490009 CEST	50202	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.213532925 CEST	443	50202	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.214430094 CEST	443	50202	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.214977980 CEST	50202	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.215287924 CEST	443	50202	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.215512037 CEST	50208	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.215562105 CEST	443	50208	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.215650082 CEST	50208	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.215776920 CEST	50202	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.216084003 CEST	50208	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.216099977 CEST	443	50208	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.217127085 CEST	443	50185	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.217189074 CEST	50185	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.218128920 CEST	50185	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.218151093 CEST	443	50185	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.234544992 CEST	50192	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.236017942 CEST	443	50192	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.236115932 CEST	443	50192	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.236370087 CEST	50192	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.236716032 CEST	50192	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.236737967 CEST	443	50192	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.241213083 CEST	50209	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.241269112 CEST	443	50209	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.241362095 CEST	50209	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.241628885 CEST	50209	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.241646051 CEST	443	50209	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.254400969 CEST	443	50202	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.254513979 CEST	443	50202	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.255925894 CEST	50202	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.256083012 CEST	50202	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.256105900 CEST	443	50202	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.323497057 CEST	50210	443	192.168.2.4	157.240.9.35
Jun 6, 2023 10:40:23.323551893 CEST	443	50210	157.240.9.35	192.168.2.4
Jun 6, 2023 10:40:23.323841095 CEST	50210	443	192.168.2.4	157.240.9.35
Jun 6, 2023 10:40:23.324299097 CEST	50210	443	192.168.2.4	157.240.9.35
Jun 6, 2023 10:40:23.324318886 CEST	443	50210	157.240.9.35	192.168.2.4
Jun 6, 2023 10:40:23.331412077 CEST	443	50183	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:23.331979036 CEST	50183	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:23.332015038 CEST	443	50183	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:23.334815979 CEST	443	50183	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:23.334916115 CEST	50183	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:23.335611105 CEST	50183	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:23.335838079 CEST	50183	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:23.336000919 CEST	443	50183	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:23.348651886 CEST	443	50190	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.350080967 CEST	50190	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.350147009 CEST	443	50190	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.352117062 CEST	443	50190	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.352914095 CEST	50190	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.353152990 CEST	50190	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.353171110 CEST	443	50190	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.353251934 CEST	443	50190	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.366350889 CEST	443	50194	157.240.9.35	192.168.2.4
Jun 6, 2023 10:40:23.366754055 CEST	50194	443	192.168.2.4	157.240.9.35
Jun 6, 2023 10:40:23.366786003 CEST	443	50194	157.240.9.35	192.168.2.4
Jun 6, 2023 10:40:23.368159056 CEST	443	50194	157.240.9.35	192.168.2.4
Jun 6, 2023 10:40:23.368290901 CEST	50194	443	192.168.2.4	157.240.9.35
Jun 6, 2023 10:40:23.371201038 CEST	50194	443	192.168.2.4	157.240.9.35
Jun 6, 2023 10:40:23.371438980 CEST	443	50194	157.240.9.35	192.168.2.4
Jun 6, 2023 10:40:23.371535063 CEST	50194	443	192.168.2.4	157.240.9.35
Jun 6, 2023 10:40:23.371555090 CEST	443	50194	157.240.9.35	192.168.2.4
Jun 6, 2023 10:40:23.382679939 CEST	443	50208	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.383166075 CEST	50208	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.383203983 CEST	443	50208	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.383769989 CEST	443	50208	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.384360075 CEST	50208	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.384612083 CEST	50208	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.384623051 CEST	443	50208	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.386723042 CEST	443	50190	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.386836052 CEST	50190	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.387762070 CEST	50190	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.387788057 CEST	443	50190	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.389995098 CEST	443	50201	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.390495062 CEST	50201	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.390522957 CEST	443	50201	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.390803099 CEST	50183	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:23.390821934 CEST	443	50183	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:23.391395092 CEST	443	50201	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.392129898 CEST	50201	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.392290115 CEST	443	50201	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.392342091 CEST	50201	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.404854059 CEST	443	50204	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.405342102 CEST	50204	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.405381918 CEST	443	50204	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.406285048 CEST	443	50204	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.407346964 CEST	50204	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.407639027 CEST	50204	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.407660961 CEST	443	50204	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.407715082 CEST	443	50204	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.413338900 CEST	443	50194	157.240.9.35	192.168.2.4
Jun 6, 2023 10:40:23.413417101 CEST	50194	443	192.168.2.4	157.240.9.35
Jun 6, 2023 10:40:23.414129972 CEST	50194	443	192.168.2.4	157.240.9.35
Jun 6, 2023 10:40:23.414156914 CEST	443	50194	157.240.9.35	192.168.2.4
Jun 6, 2023 10:40:23.419068098 CEST	50211	443	192.168.2.4	157.240.9.35
Jun 6, 2023 10:40:23.419120073 CEST	443	50211	157.240.9.35	192.168.2.4
Jun 6, 2023 10:40:23.419269085 CEST	50211	443	192.168.2.4	157.240.9.35
Jun 6, 2023 10:40:23.419626951 CEST	50211	443	192.168.2.4	157.240.9.35
Jun 6, 2023 10:40:23.419646025 CEST	443	50211	157.240.9.35	192.168.2.4
Jun 6, 2023 10:40:23.423899889 CEST	443	50201	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.424020052 CEST	50201	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.424724102 CEST	50201	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.424751043 CEST	443	50201	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.428289890 CEST	443	50208	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.433110952 CEST	443	50208	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.433438063 CEST	50208	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.434017897 CEST	50208	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.434042931 CEST	443	50208	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.437688112 CEST	50183	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:23.437711000 CEST	443	50183	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:23.438461065 CEST	50183	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:23.438618898 CEST	443	50183	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:23.438703060 CEST	50183	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:23.439249992 CEST	50212	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.439302921 CEST	443	50212	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.439399004 CEST	50212	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.439817905 CEST	50212	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.439851046 CEST	443	50212	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.445112944 CEST	50213	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:23.445185900 CEST	443	50213	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:23.445271969 CEST	50213	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:23.445668936 CEST	50213	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:23.445698023 CEST	443	50213	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:23.453687906 CEST	50204	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.461360931 CEST	443	50204	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.461632013 CEST	443	50204	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.461724043 CEST	50204	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.462477922 CEST	50204	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.462516069 CEST	443	50204	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.466519117 CEST	443	50199	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.466826916 CEST	50214	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.466881990 CEST	443	50214	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.466969013 CEST	50214	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.467248917 CEST	50199	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.467274904 CEST	443	50199	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.467586040 CEST	50214	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.467607975 CEST	443	50214	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.470089912 CEST	443	50199	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.470171928 CEST	50199	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.470769882 CEST	50199	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.470937967 CEST	50199	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.470949888 CEST	443	50199	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.471097946 CEST	443	50199	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.503580093 CEST	443	50199	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.503998995 CEST	50199	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.504718065 CEST	50199	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.504750013 CEST	443	50199	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.515531063 CEST	443	50200	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.516031981 CEST	50200	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.516056061 CEST	443	50200	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.516906023 CEST	443	50200	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.517748117 CEST	50200	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.517818928 CEST	50200	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.517831087 CEST	443	50200	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.518028975 CEST	443	50200	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.519007921 CEST	443	50205	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.519272089 CEST	50205	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.519309998 CEST	443	50205	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.519906998 CEST	443	50205	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.520368099 CEST	50205	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.520529985 CEST	443	50205	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.520533085 CEST	50205	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.532107115 CEST	443	50207	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.532546043 CEST	50207	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.532577038 CEST	443	50207	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.533631086 CEST	443	50207	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.534193039 CEST	50207	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.534291029 CEST	50207	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.534303904 CEST	443	50207	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.534367085 CEST	443	50207	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.547442913 CEST	443	50206	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.548401117 CEST	50206	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.548437119 CEST	443	50206	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.549360991 CEST	443	50206	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.550301075 CEST	50206	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.550415039 CEST	443	50206	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.550494909 CEST	50206	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.551914930 CEST	443	50200	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.552083969 CEST	50200	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.553514957 CEST	50200	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.553539038 CEST	443	50200	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.554363012 CEST	443	50211	157.240.9.35	192.168.2.4
Jun 6, 2023 10:40:23.555059910 CEST	50211	443	192.168.2.4	157.240.9.35
Jun 6, 2023 10:40:23.555097103 CEST	443	50211	157.240.9.35	192.168.2.4
Jun 6, 2023 10:40:23.556139946 CEST	443	50211	157.240.9.35	192.168.2.4
Jun 6, 2023 10:40:23.557058096 CEST	50211	443	192.168.2.4	157.240.9.35
Jun 6, 2023 10:40:23.557179928 CEST	443	50211	157.240.9.35	192.168.2.4
Jun 6, 2023 10:40:23.557370901 CEST	50211	443	192.168.2.4	157.240.9.35
Jun 6, 2023 10:40:23.562710047 CEST	50205	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.562736034 CEST	443	50205	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.568638086 CEST	443	50205	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.568808079 CEST	443	50205	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.569067001 CEST	50205	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.569611073 CEST	50205	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.569641113 CEST	443	50205	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.573764086 CEST	50215	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.573843956 CEST	443	50215	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.573956966 CEST	50215	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.574440002 CEST	50215	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.574486017 CEST	443	50215	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.580306053 CEST	50207	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.582921028 CEST	443	50207	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.583054066 CEST	443	50207	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.583209038 CEST	50207	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.584299088 CEST	50207	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.584331989 CEST	443	50207	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.586673975 CEST	443	50210	157.240.9.35	192.168.2.4
Jun 6, 2023 10:40:23.589560986 CEST	50210	443	192.168.2.4	157.240.9.35
Jun 6, 2023 10:40:23.589606047 CEST	443	50210	157.240.9.35	192.168.2.4
Jun 6, 2023 10:40:23.590445995 CEST	50206	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.590462923 CEST	50216	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.590537071 CEST	443	50216	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.590656042 CEST	50216	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.591094017 CEST	50216	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.591150045 CEST	443	50216	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.591536999 CEST	443	50210	157.240.9.35	192.168.2.4
Jun 6, 2023 10:40:23.591660023 CEST	50210	443	192.168.2.4	157.240.9.35
Jun 6, 2023 10:40:23.592288017 CEST	50210	443	192.168.2.4	157.240.9.35
Jun 6, 2023 10:40:23.592293024 CEST	443	50206	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.592474937 CEST	443	50210	157.240.9.35	192.168.2.4
Jun 6, 2023 10:40:23.592493057 CEST	50210	443	192.168.2.4	157.240.9.35
Jun 6, 2023 10:40:23.592616081 CEST	443	50210	157.240.9.35	192.168.2.4
Jun 6, 2023 10:40:23.598202944 CEST	443	50206	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.598444939 CEST	443	50206	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.598548889 CEST	50206	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.599507093 CEST	50206	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.599544048 CEST	443	50206	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.600301027 CEST	443	50211	157.240.9.35	192.168.2.4
Jun 6, 2023 10:40:23.606997967 CEST	443	50211	157.240.9.35	192.168.2.4
Jun 6, 2023 10:40:23.607141018 CEST	443	50211	157.240.9.35	192.168.2.4
Jun 6, 2023 10:40:23.607258081 CEST	50211	443	192.168.2.4	157.240.9.35
Jun 6, 2023 10:40:23.608201027 CEST	50211	443	192.168.2.4	157.240.9.35
Jun 6, 2023 10:40:23.608231068 CEST	443	50211	157.240.9.35	192.168.2.4
Jun 6, 2023 10:40:23.613013983 CEST	443	50209	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.616779089 CEST	50209	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.616808891 CEST	443	50209	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.617615938 CEST	443	50209	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.620990038 CEST	50209	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.621222973 CEST	443	50209	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.622076035 CEST	50209	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.626899958 CEST	443	50214	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.628132105 CEST	50214	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.628158092 CEST	443	50214	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.628793955 CEST	443	50214	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.629261971 CEST	50214	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.629369974 CEST	443	50214	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.629399061 CEST	50214	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.631689072 CEST	443	50210	157.240.9.35	192.168.2.4
Jun 6, 2023 10:40:23.631772041 CEST	50210	443	192.168.2.4	157.240.9.35
Jun 6, 2023 10:40:23.632385015 CEST	50210	443	192.168.2.4	157.240.9.35
Jun 6, 2023 10:40:23.632420063 CEST	443	50210	157.240.9.35	192.168.2.4
Jun 6, 2023 10:40:23.634030104 CEST	443	50213	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:23.634383917 CEST	50213	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:23.634414911 CEST	443	50213	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:23.636049032 CEST	443	50213	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:23.636161089 CEST	50213	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:23.645777941 CEST	50213	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:23.645951986 CEST	443	50213	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:23.645977020 CEST	50213	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:23.647845030 CEST	50217	443	192.168.2.4	157.240.9.35
Jun 6, 2023 10:40:23.647914886 CEST	443	50217	157.240.9.35	192.168.2.4
Jun 6, 2023 10:40:23.648116112 CEST	50217	443	192.168.2.4	157.240.9.35
Jun 6, 2023 10:40:23.648483038 CEST	50217	443	192.168.2.4	157.240.9.35
Jun 6, 2023 10:40:23.648516893 CEST	443	50217	157.240.9.35	192.168.2.4
Jun 6, 2023 10:40:23.658349991 CEST	443	50209	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.658529997 CEST	443	50209	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.658600092 CEST	50209	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.659738064 CEST	50209	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.659759998 CEST	443	50209	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.664498091 CEST	443	50212	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.676280975 CEST	443	50214	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.677721977 CEST	443	50214	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.677812099 CEST	50214	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.688290119 CEST	443	50213	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:23.697679043 CEST	50212	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.697715998 CEST	443	50212	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.697729111 CEST	50214	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.697760105 CEST	443	50214	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.698618889 CEST	50213	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:23.698641062 CEST	443	50213	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:23.699198008 CEST	443	50212	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.699240923 CEST	50213	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:23.699383974 CEST	443	50213	63.140.62.160	192.168.2.4
Jun 6, 2023 10:40:23.699476957 CEST	50213	443	192.168.2.4	63.140.62.160
Jun 6, 2023 10:40:23.700431108 CEST	50212	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.700908899 CEST	443	50212	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.701061964 CEST	50218	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.701123953 CEST	443	50218	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.701247931 CEST	50218	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.701514006 CEST	50212	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.701718092 CEST	443	50215	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.701721907 CEST	443	50216	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.701816082 CEST	50218	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.701847076 CEST	443	50218	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.702117920 CEST	50216	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.702142954 CEST	443	50216	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.702306032 CEST	50215	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.702357054 CEST	443	50215	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.702924013 CEST	443	50215	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.703361988 CEST	50215	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.703484058 CEST	443	50215	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.703533888 CEST	50215	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.704413891 CEST	443	50216	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.705224991 CEST	50216	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.705333948 CEST	443	50216	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.705955982 CEST	50216	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.711215973 CEST	50219	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.711302042 CEST	443	50219	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.711591959 CEST	50219	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.712146044 CEST	50219	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.712189913 CEST	443	50219	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.734488964 CEST	443	50212	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.734657049 CEST	443	50212	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.734841108 CEST	50212	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.736402988 CEST	50212	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.736435890 CEST	443	50212	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.745080948 CEST	443	50217	157.240.9.35	192.168.2.4
Jun 6, 2023 10:40:23.745491028 CEST	50215	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.745592117 CEST	50217	443	192.168.2.4	157.240.9.35
Jun 6, 2023 10:40:23.745616913 CEST	443	50217	157.240.9.35	192.168.2.4
Jun 6, 2023 10:40:23.746556997 CEST	443	50217	157.240.9.35	192.168.2.4
Jun 6, 2023 10:40:23.747143984 CEST	50217	443	192.168.2.4	157.240.9.35
Jun 6, 2023 10:40:23.747212887 CEST	443	50215	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.747263908 CEST	443	50217	157.240.9.35	192.168.2.4
Jun 6, 2023 10:40:23.747334957 CEST	50217	443	192.168.2.4	157.240.9.35
Jun 6, 2023 10:40:23.747374058 CEST	443	50217	157.240.9.35	192.168.2.4
Jun 6, 2023 10:40:23.747390032 CEST	443	50215	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.747457027 CEST	50215	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.747961998 CEST	50215	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.747984886 CEST	443	50215	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.748302937 CEST	443	50216	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.748599052 CEST	443	50216	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.748769999 CEST	443	50216	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.749850035 CEST	50216	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.750104904 CEST	50216	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.750124931 CEST	443	50216	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.752803087 CEST	443	50218	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.753556013 CEST	50218	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.753587961 CEST	443	50218	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.754730940 CEST	443	50218	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.755244970 CEST	50218	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.755397081 CEST	50218	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.755418062 CEST	443	50218	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.755495071 CEST	443	50218	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.758265018 CEST	50220	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.758320093 CEST	443	50220	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.758599997 CEST	50220	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.758796930 CEST	50220	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.758822918 CEST	443	50220	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.767774105 CEST	443	50219	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.768075943 CEST	50219	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.768117905 CEST	443	50219	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.768775940 CEST	443	50219	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.769498110 CEST	50219	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.769614935 CEST	50219	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.769633055 CEST	443	50219	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.769656897 CEST	443	50219	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.792387962 CEST	50217	443	192.168.2.4	157.240.9.35
Jun 6, 2023 10:40:23.802683115 CEST	443	50218	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.803813934 CEST	50218	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.804801941 CEST	50218	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.804840088 CEST	443	50218	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.808551073 CEST	50221	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.808602095 CEST	443	50221	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.808720112 CEST	50221	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.809015989 CEST	50221	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.809032917 CEST	443	50221	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.818958998 CEST	443	50219	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.819128036 CEST	50219	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.819360971 CEST	443	50217	157.240.9.35	192.168.2.4
Jun 6, 2023 10:40:23.819472075 CEST	443	50217	157.240.9.35	192.168.2.4
Jun 6, 2023 10:40:23.819885015 CEST	50219	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.819916964 CEST	50217	443	192.168.2.4	157.240.9.35
Jun 6, 2023 10:40:23.819928885 CEST	443	50219	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.820871115 CEST	50217	443	192.168.2.4	157.240.9.35
Jun 6, 2023 10:40:23.820894957 CEST	443	50217	157.240.9.35	192.168.2.4
Jun 6, 2023 10:40:23.820911884 CEST	50217	443	192.168.2.4	157.240.9.35
Jun 6, 2023 10:40:23.821331978 CEST	50217	443	192.168.2.4	157.240.9.35
Jun 6, 2023 10:40:23.824060917 CEST	443	50220	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.824495077 CEST	50220	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.824531078 CEST	443	50220	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.825683117 CEST	443	50220	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.826145887 CEST	50220	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.826277971 CEST	50220	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.826292992 CEST	443	50220	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.826364994 CEST	443	50220	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.869999886 CEST	443	50221	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.870589972 CEST	50220	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.871500969 CEST	50221	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.871543884 CEST	443	50221	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.872364998 CEST	443	50221	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.873440027 CEST	443	50220	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.873572111 CEST	443	50220	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.873580933 CEST	50221	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.873805046 CEST	443	50221	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.873887062 CEST	50220	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.874789953 CEST	50220	443	192.168.2.4	172.217.168.67
Jun 6, 2023 10:40:23.874814034 CEST	443	50220	172.217.168.67	192.168.2.4
Jun 6, 2023 10:40:23.875222921 CEST	50221	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.916289091 CEST	443	50221	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.921389103 CEST	443	50221	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.921569109 CEST	443	50221	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:23.921637058 CEST	50221	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.922158957 CEST	50221	443	192.168.2.4	142.250.203.100
Jun 6, 2023 10:40:23.922189951 CEST	443	50221	142.250.203.100	192.168.2.4
Jun 6, 2023 10:40:24.719521046 CEST	50222	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:24.719574928 CEST	443	50222	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:24.719660044 CEST	50222	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:24.719966888 CEST	50222	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:24.719991922 CEST	443	50222	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:24.867753983 CEST	443	50222	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:24.868232012 CEST	50222	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:24.868283987 CEST	443	50222	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:24.868709087 CEST	443	50222	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:24.869204998 CEST	50222	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:24.869311094 CEST	443	50222	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:24.869339943 CEST	50222	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:24.908849001 CEST	443	50222	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:24.908972025 CEST	50222	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:24.909420013 CEST	50222	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:24.909451962 CEST	443	50222	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:28.240808010 CEST	50223	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:40:28.240871906 CEST	443	50223	178.249.96.141	192.168.2.4
Jun 6, 2023 10:40:28.240940094 CEST	50223	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:40:28.241209984 CEST	50223	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:40:28.241235018 CEST	443	50223	178.249.96.141	192.168.2.4
Jun 6, 2023 10:40:28.383925915 CEST	443	50223	178.249.96.141	192.168.2.4
Jun 6, 2023 10:40:28.384531975 CEST	50223	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:40:28.384567022 CEST	443	50223	178.249.96.141	192.168.2.4
Jun 6, 2023 10:40:28.385255098 CEST	443	50223	178.249.96.141	192.168.2.4
Jun 6, 2023 10:40:28.390384912 CEST	50223	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:40:28.390583038 CEST	443	50223	178.249.96.141	192.168.2.4
Jun 6, 2023 10:40:28.390611887 CEST	50223	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:40:28.427529097 CEST	443	50223	178.249.96.141	192.168.2.4
Jun 6, 2023 10:40:28.427640915 CEST	50223	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:40:28.428148031 CEST	50223	443	192.168.2.4	178.249.96.141
Jun 6, 2023 10:40:28.428174019 CEST	443	50223	178.249.96.141	192.168.2.4
Jun 6, 2023 10:40:29.045355082 CEST	50224	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:29.045402050 CEST	443	50224	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:29.045486927 CEST	50224	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:29.045887947 CEST	50224	443	192.168.2.4	178.249.97.70
Jun 6, 2023 10:40:29.045903921 CEST	443	50224	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:29.187603951 CEST	443	50224	178.249.97.70	192.168.2.4
Jun 6, 2023 10:40:29.230480909 CEST	50224	443	192.168.2.4	178.249.97.70

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jun 6, 2023 10:38:15.857714891 CEST	64167	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:38:15.858006001 CEST	58565	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:38:15.877093077 CEST	53	64167	8.8.8.8	192.168.2.4
Jun 6, 2023 10:38:15.890336990 CEST	53	58565	8.8.8.8	192.168.2.4
Jun 6, 2023 10:38:18.989857912 CEST	61124	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:38:19.041309118 CEST	53	61124	8.8.8.8	192.168.2.4
Jun 6, 2023 10:38:19.361000061 CEST	59444	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:38:19.389251947 CEST	53	59444	8.8.8.8	192.168.2.4
Jun 6, 2023 10:38:19.405232906 CEST	55570	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:38:19.424873114 CEST	53	55570	8.8.8.8	192.168.2.4
Jun 6, 2023 10:38:21.611728907 CEST	50861	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:38:42.158926964 CEST	55673	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:38:42.420913935 CEST	52437	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:38:42.472155094 CEST	53	52437	8.8.8.8	192.168.2.4
Jun 6, 2023 10:38:46.788009882 CEST	50433	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:38:46.824333906 CEST	53	50433	8.8.8.8	192.168.2.4
Jun 6, 2023 10:38:54.131977081 CEST	60998	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:38:54.192939997 CEST	53	60998	8.8.8.8	192.168.2.4
Jun 6, 2023 10:38:56.270047903 CEST	64773	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:38:56.296762943 CEST	53	64773	8.8.8.8	192.168.2.4
Jun 6, 2023 10:38:56.399295092 CEST	59818	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:38:56.437021971 CEST	53	59818	8.8.8.8	192.168.2.4
Jun 6, 2023 10:38:59.987559080 CEST	54044	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:39:01.024413109 CEST	53887	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:39:01.043026924 CEST	56218	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:39:01.100847960 CEST	53	53887	8.8.8.8	192.168.2.4
Jun 6, 2023 10:39:02.269423008 CEST	51766	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:39:02.270298958 CEST	61522	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:39:08.567900896 CEST	49600	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:39:08.610985994 CEST	53	49600	8.8.8.8	192.168.2.4
Jun 6, 2023 10:39:08.628798008 CEST	58355	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:39:08.665770054 CEST	53	58355	8.8.8.8	192.168.2.4
Jun 6, 2023 10:39:08.732258081 CEST	57601	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:39:08.760808945 CEST	53	57601	8.8.8.8	192.168.2.4
Jun 6, 2023 10:39:10.117292881 CEST	61709	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:39:10.184672117 CEST	53	61709	8.8.8.8	192.168.2.4
Jun 6, 2023 10:39:10.437315941 CEST	59182	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:39:14.654542923 CEST	51511	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:39:14.691478968 CEST	53	51511	8.8.8.8	192.168.2.4
Jun 6, 2023 10:39:19.454121113 CEST	53573	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:39:19.482536077 CEST	53	53573	8.8.8.8	192.168.2.4
Jun 6, 2023 10:39:19.488915920 CEST	60828	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:39:19.508518934 CEST	53	60828	8.8.8.8	192.168.2.4
Jun 6, 2023 10:39:20.391454935 CEST	61470	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:39:20.414500952 CEST	53	61470	8.8.8.8	192.168.2.4
Jun 6, 2023 10:39:22.832906961 CEST	55704	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:40:02.710391998 CEST	52977	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:40:17.242763042 CEST	59380	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:40:17.257281065 CEST	53	59380	8.8.8.8	192.168.2.4
Jun 6, 2023 10:40:19.143996000 CEST	64189	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:40:19.159190893 CEST	60088	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:40:19.178930998 CEST	65312	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:40:19.182387114 CEST	53	60088	8.8.8.8	192.168.2.4
Jun 6, 2023 10:40:19.203768969 CEST	53	64189	8.8.8.8	192.168.2.4
Jun 6, 2023 10:40:19.205054045 CEST	53	65312	8.8.8.8	192.168.2.4
Jun 6, 2023 10:40:19.269840956 CEST	57549	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:40:19.295556068 CEST	53	57549	8.8.8.8	192.168.2.4
Jun 6, 2023 10:40:19.601313114 CEST	64617	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:40:19.615998030 CEST	53	64617	8.8.8.8	192.168.2.4
Jun 6, 2023 10:40:19.706434965 CEST	50836	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:40:19.726370096 CEST	53	50836	8.8.8.8	192.168.2.4
Jun 6, 2023 10:40:19.740216970 CEST	60649	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:40:19.760945082 CEST	61837	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:40:19.770739079 CEST	60752	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:40:19.782234907 CEST	53	60649	8.8.8.8	192.168.2.4
Jun 6, 2023 10:40:19.786732912 CEST	53	61837	8.8.8.8	192.168.2.4
Jun 6, 2023 10:40:19.857650995 CEST	53474	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:40:19.895207882 CEST	53	53474	8.8.8.8	192.168.2.4
Jun 6, 2023 10:40:20.041779041 CEST	59423	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:40:20.191345930 CEST	54479	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:40:20.214394093 CEST	53	54479	8.8.8.8	192.168.2.4
Jun 6, 2023 10:40:20.378938913 CEST	53414	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:40:20.406999111 CEST	53	53414	8.8.8.8	192.168.2.4
Jun 6, 2023 10:40:20.484834909 CEST	58274	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:40:20.517962933 CEST	53562	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:40:20.523488998 CEST	49665	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:40:20.555094004 CEST	53	49665	8.8.8.8	192.168.2.4
Jun 6, 2023 10:40:20.558620930 CEST	53	53562	8.8.8.8	192.168.2.4
Jun 6, 2023 10:40:20.631822109 CEST	58225	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:40:20.664433002 CEST	53	58225	8.8.8.8	192.168.2.4
Jun 6, 2023 10:40:20.845089912 CEST	54725	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:40:20.846657991 CEST	53332	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:40:20.847482920 CEST	54726	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:40:20.850420952 CEST	58128	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:40:20.869486094 CEST	53	53332	8.8.8.8	192.168.2.4
Jun 6, 2023 10:40:20.870178938 CEST	53	54725	8.8.8.8	192.168.2.4
Jun 6, 2023 10:40:20.880522966 CEST	53	58128	8.8.8.8	192.168.2.4
Jun 6, 2023 10:40:20.882534027 CEST	53	54726	8.8.8.8	192.168.2.4
Jun 6, 2023 10:40:20.926969051 CEST	61579	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:40:20.931509972 CEST	65432	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:40:20.977751970 CEST	53	61579	8.8.8.8	192.168.2.4
Jun 6, 2023 10:40:21.015347958 CEST	49735	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:40:21.043571949 CEST	53	49735	8.8.8.8	192.168.2.4
Jun 6, 2023 10:40:21.217257977 CEST	51418	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:40:21.230072021 CEST	60442	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:40:21.250231981 CEST	53	51418	8.8.8.8	192.168.2.4
Jun 6, 2023 10:40:21.263776064 CEST	53	60442	8.8.8.8	192.168.2.4
Jun 6, 2023 10:40:21.417200089 CEST	63302	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:40:21.477200985 CEST	53	63302	8.8.8.8	192.168.2.4
Jun 6, 2023 10:40:21.503473043 CEST	65127	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:40:21.573863983 CEST	53	65127	8.8.8.8	192.168.2.4
Jun 6, 2023 10:40:21.770009995 CEST	54852	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:40:21.810945034 CEST	53	54852	8.8.8.8	192.168.2.4
Jun 6, 2023 10:40:22.911797047 CEST	61946	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:40:22.926080942 CEST	53	61946	8.8.8.8	192.168.2.4
Jun 6, 2023 10:40:24.695421934 CEST	50186	53	192.168.2.4	8.8.8.8
Jun 6, 2023 10:40:24.718674898 CEST	53	50186	8.8.8.8	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jun 6, 2023 10:38:15.857714891 CEST	192.168.2.4	8.8.8.8	0xbdfe	Standard query (0)	accounts.google.com	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:38:15.858006001 CEST	192.168.2.4	8.8.8.8	0xb3dc	Standard query (0)	clients2.google.com	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:38:18.989857912 CEST	192.168.2.4	8.8.8.8	0x3fc6	Standard query (0)	hs-login.online	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:38:19.361000061 CEST	192.168.2.4	8.8.8.8	0x8116	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:38:19.405232906 CEST	192.168.2.4	8.8.8.8	0x6004	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:38:21.611728907 CEST	192.168.2.4	8.8.8.8	0xa4ed	Standard query (0)	www.security.hsbc.co.uk	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:38:42.158926964 CEST	192.168.2.4	8.8.8.8	0xa92	Standard query (0)	www.security.hsbc.co.uk	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:38:42.420913935 CEST	192.168.2.4	8.8.8.8	0xd11	Standard query (0)	tags.tiqcdn.com	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:38:46.788009882 CEST	192.168.2.4	8.8.8.8	0xd965	Standard query (0)	col.eum-appdynamics.com	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:38:54.131977081 CEST	192.168.2.4	8.8.8.8	0x5512	Standard query (0)	tags.tiqcdn.com	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:38:56.270047903 CEST	192.168.2.4	8.8.8.8	0xa078	Standard query (0)	www.hsbc.co.uk	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:38:56.399295092 CEST	192.168.2.4	8.8.8.8	0x6a61	Standard query (0)	www.hsbc.co.uk	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:38:59.987559080 CEST	192.168.2.4	8.8.8.8	0xe1ec	Standard query (0)	akamai.tiqcdn.com	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:39:01.024413109 CEST	192.168.2.4	8.8.8.8	0xf5f5	Standard query (0)	www.mcmprod.hsbc.co.uk	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:39:01.043026924 CEST	192.168.2.4	8.8.8.8	0x83ea	Standard query (0)	lptag.liveperson.net	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:39:02.269423008 CEST	192.168.2.4	8.8.8.8	0x183f	Standard query (0)	lpcdn.lpsnmedia.net	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:39:02.270298958 CEST	192.168.2.4	8.8.8.8	0xc881	Standard query (0)	accdn.lpsnmedia.net	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:39:08.567900896 CEST	192.168.2.4	8.8.8.8	0x2d6f	Standard query (0)	www.askus.hsbc.co.uk	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:39:08.628798008 CEST	192.168.2.4	8.8.8.8	0xb552	Standard query (0)	cdn.appdynamics.com	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:39:08.732258081 CEST	192.168.2.4	8.8.8.8	0x39cb	Standard query (0)	lo0.v.liveperson.net	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:39:10.117292881 CEST	192.168.2.4	8.8.8.8	0x7801	Standard query (0)	www.business.hsbc.co.uk	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:39:10.437315941 CEST	192.168.2.4	8.8.8.8	0x8f20	Standard query (0)	www.business.hsbc.uk	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:39:14.654542923 CEST	192.168.2.4	8.8.8.8	0x6876	Standard query (0)	askus.business.hsbc.uk	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:39:19.454121113 CEST	192.168.2.4	8.8.8.8	0xd914	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:39:19.488915920 CEST	192.168.2.4	8.8.8.8	0x309f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:39:20.391454935 CEST	192.168.2.4	8.8.8.8	0xeebe	Standard query (0)	lo.v.liveperson.net	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:39:22.832906961 CEST	192.168.2.4	8.8.8.8	0x204e	Standard query (0)	www.security.hsbc.co.uk	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:02.710391998 CEST	192.168.2.4	8.8.8.8	0x8aa0	Standard query (0)	accdn.lpsnmedia.net	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:17.242763042 CEST	192.168.2.4	8.8.8.8	0x63ee	Standard query (0)	lo0.v.liveperson.net	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.143996000 CEST	192.168.2.4	8.8.8.8	0x8a24	Standard query (0)	tags.tiqcdn.com	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.159190893 CEST	192.168.2.4	8.8.8.8	0x6f5d	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.178930998 CEST	192.168.2.4	8.8.8.8	0x73a5	Standard query (0)	c.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.269840956 CEST	192.168.2.4	8.8.8.8	0x8862	Standard query (0)	collect.tealiumiq.com	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.601313114 CEST	192.168.2.4	8.8.8.8	0xdffc	Standard query (0)	aax-eu.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.706434965 CEST	192.168.2.4	8.8.8.8	0xef8a	Standard query (0)	collect-eu-west-1.tealiumiq.com	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.740216970 CEST	192.168.2.4	8.8.8.8	0x5fd2	Standard query (0)	hsbcbankcmb.demdex.net	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.760945082 CEST	192.168.2.4	8.8.8.8	0x891f	Standard query (0)	hsbcglobalcmb.sc.omtrdc.net	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.770739079 CEST	192.168.2.4	8.8.8.8	0x8cc0	Standard query (0)	cm.everesttech.net	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.857650995 CEST	192.168.2.4	8.8.8.8	0xee26	Standard query (0)	hsbcglobalcmb.tt.omtrdc.net	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:20.041779041 CEST	192.168.2.4	8.8.8.8	0x4055	Standard query (0)	img.en25.com	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:20.191345930 CEST	192.168.2.4	8.8.8.8	0x684b	Standard query (0)	static.ads-twitter.com	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:20.378938913 CEST	192.168.2.4	8.8.8.8	0x4d37	Standard query (0)	visitor-service-eu-west-1.tealiumiq.com	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:20.484834909 CEST	192.168.2.4	8.8.8.8	0xcffe	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:20.517962933 CEST	192.168.2.4	8.8.8.8	0xd582	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:20.523488998 CEST	192.168.2.4	8.8.8.8	0x57b6	Standard query (0)	8071582.fls.doubleclick.net	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:20.631822109 CEST	192.168.2.4	8.8.8.8	0xa822	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:20.845089912 CEST	192.168.2.4	8.8.8.8	0x4aca	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:20.846657991 CEST	192.168.2.4	8.8.8.8	0xbeaa	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:20.847482920 CEST	192.168.2.4	8.8.8.8	0xd048	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:20.850420952 CEST	192.168.2.4	8.8.8.8	0x266e	Standard query (0)	s1706134858.t.eloqua.com	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:20.926969051 CEST	192.168.2.4	8.8.8.8	0x535f	Standard query (0)	cdn.linkedin.oribi.io	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:20.931509972 CEST	192.168.2.4	8.8.8.8	0xa0c4	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:21.015347958 CEST	192.168.2.4	8.8.8.8	0xdf76	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:21.217257977 CEST	192.168.2.4	8.8.8.8	0x53e2	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:21.230072021 CEST	192.168.2.4	8.8.8.8	0xdbe5	Standard query (0)	datacloud.tealiumiq.com	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:21.417200089 CEST	192.168.2.4	8.8.8.8	0x366c	Standard query (0)	cdn-0.d41.co	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:21.503473043 CEST	192.168.2.4	8.8.8.8	0x9cdf	Standard query (0)	hw0ebfaguc.d41.co	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:21.770009995 CEST	192.168.2.4	8.8.8.8	0x63f6	Standard query (0)	www.google.ch	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:22.911797047 CEST	192.168.2.4	8.8.8.8	0xb37	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:24.695421934 CEST	192.168.2.4	8.8.8.8	0xd3bf	Standard query (0)	lo.v.liveperson.net	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jun 6, 2023 10:38:15.877093077 CEST	8.8.8.8	192.168.2.4	0xbdfe	No error (0)	accounts.google.com		142.250.203.109	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:38:15.890336990 CEST	8.8.8.8	192.168.2.4	0xb3dc	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 6, 2023 10:38:15.890336990 CEST	8.8.8.8	192.168.2.4	0xb3dc	No error (0)	clients.l.google.com		142.250.203.110	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:38:19.041309118 CEST	8.8.8.8	192.168.2.4	0x3fc6	No error (0)	hs-login.online		5.42.199.96	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:38:19.389251947 CEST	8.8.8.8	192.168.2.4	0x8116	No error (0)	www.google.com		142.250.203.100	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:38:19.424873114 CEST	8.8.8.8	192.168.2.4	0x6004	No error (0)	www.google.com		142.250.203.100	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:38:21.639969110 CEST	8.8.8.8	192.168.2.4	0xa4ed	No error (0)	www.security.hsbc.co.uk	www.security.hsbc.co.uk.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 6, 2023 10:38:42.232306957 CEST	8.8.8.8	192.168.2.4	0xa92	No error (0)	www.security.hsbc.co.uk	www.security.hsbc.co.uk.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 6, 2023 10:38:42.472155094 CEST	8.8.8.8	192.168.2.4	0xd11	No error (0)	tags.tiqcdn.com	dzfq4ouujrxm8.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 6, 2023 10:38:42.472155094 CEST	8.8.8.8	192.168.2.4	0xd11	No error (0)	dzfq4ouujrxm8.cloudfront.net		18.66.192.16	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:38:42.472155094 CEST	8.8.8.8	192.168.2.4	0xd11	No error (0)	dzfq4ouujrxm8.cloudfront.net		18.66.192.44	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:38:42.472155094 CEST	8.8.8.8	192.168.2.4	0xd11	No error (0)	dzfq4ouujrxm8.cloudfront.net		18.66.192.14	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:38:42.472155094 CEST	8.8.8.8	192.168.2.4	0xd11	No error (0)	dzfq4ouujrxm8.cloudfront.net		18.66.192.72	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:38:46.824333906 CEST	8.8.8.8	192.168.2.4	0xd965	No error (0)	col.eum-appdynamics.com		35.81.20.183	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:38:46.824333906 CEST	8.8.8.8	192.168.2.4	0xd965	No error (0)	col.eum-appdynamics.com		52.38.52.205	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:38:46.824333906 CEST	8.8.8.8	192.168.2.4	0xd965	No error (0)	col.eum-appdynamics.com		35.155.21.30	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:38:46.824333906 CEST	8.8.8.8	192.168.2.4	0xd965	No error (0)	col.eum-appdynamics.com		44.241.253.39	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:38:46.824333906 CEST	8.8.8.8	192.168.2.4	0xd965	No error (0)	col.eum-appdynamics.com		52.32.132.117	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:38:46.824333906 CEST	8.8.8.8	192.168.2.4	0xd965	No error (0)	col.eum-appdynamics.com		54.187.118.110	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:38:46.824333906 CEST	8.8.8.8	192.168.2.4	0xd965	No error (0)	col.eum-appdynamics.com		34.213.146.121	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:38:46.824333906 CEST	8.8.8.8	192.168.2.4	0xd965	No error (0)	col.eum-appdynamics.com		35.162.179.52	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:38:54.192939997 CEST	8.8.8.8	192.168.2.4	0x5512	No error (0)	tags.tiqcdn.com	dzfq4ouujrxm8.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 6, 2023 10:38:54.192939997 CEST	8.8.8.8	192.168.2.4	0x5512	No error (0)	dzfq4ouujrxm8.cloudfront.net		18.66.192.16	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:38:54.192939997 CEST	8.8.8.8	192.168.2.4	0x5512	No error (0)	dzfq4ouujrxm8.cloudfront.net		18.66.192.44	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:38:54.192939997 CEST	8.8.8.8	192.168.2.4	0x5512	No error (0)	dzfq4ouujrxm8.cloudfront.net		18.66.192.14	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:38:54.192939997 CEST	8.8.8.8	192.168.2.4	0x5512	No error (0)	dzfq4ouujrxm8.cloudfront.net		18.66.192.72	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:38:56.296762943 CEST	8.8.8.8	192.168.2.4	0xa078	No error (0)	www.hsbc.co.uk	hsbc.co.uk.prod.eu.dynp.cloud1.vv1865.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 6, 2023 10:38:56.296762943 CEST	8.8.8.8	192.168.2.4	0xa078	No error (0)	hsbc.co.uk.prod.eu.dynp.cloud1.vv1865.com		99.84.88.12	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:38:56.296762943 CEST	8.8.8.8	192.168.2.4	0xa078	No error (0)	hsbc.co.uk.prod.eu.dynp.cloud1.vv1865.com		99.84.88.91	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:38:56.296762943 CEST	8.8.8.8	192.168.2.4	0xa078	No error (0)	hsbc.co.uk.prod.eu.dynp.cloud1.vv1865.com		99.84.88.106	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:38:56.296762943 CEST	8.8.8.8	192.168.2.4	0xa078	No error (0)	hsbc.co.uk.prod.eu.dynp.cloud1.vv1865.com		99.84.88.99	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:38:56.437021971 CEST	8.8.8.8	192.168.2.4	0x6a61	No error (0)	www.hsbc.co.uk	hsbc.co.uk.prod.eu.dynp.cloud1.vv1865.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 6, 2023 10:38:56.437021971 CEST	8.8.8.8	192.168.2.4	0x6a61	No error (0)	hsbc.co.uk.prod.eu.dynp.cloud1.vv1865.com		99.84.88.99	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:38:56.437021971 CEST	8.8.8.8	192.168.2.4	0x6a61	No error (0)	hsbc.co.uk.prod.eu.dynp.cloud1.vv1865.com		99.84.88.12	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:38:56.437021971 CEST	8.8.8.8	192.168.2.4	0x6a61	No error (0)	hsbc.co.uk.prod.eu.dynp.cloud1.vv1865.com		99.84.88.106	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:38:56.437021971 CEST	8.8.8.8	192.168.2.4	0x6a61	No error (0)	hsbc.co.uk.prod.eu.dynp.cloud1.vv1865.com		99.84.88.91	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:39:00.024091959 CEST	8.8.8.8	192.168.2.4	0xe1ec	No error (0)	akamai.tiqcdn.com	tags.tiqcdn.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 6, 2023 10:39:01.075299978 CEST	8.8.8.8	192.168.2.4	0x83ea	No error (0)	lptag.liveperson.net	lptag.liveperson.cotcdb.net.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 6, 2023 10:39:01.100847960 CEST	8.8.8.8	192.168.2.4	0xf5f5	No error (0)	www.mcmprod.hsbc.co.uk	www.mcmprod.hsbc.co.uk.gslb-uk1.hsbc.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 6, 2023 10:39:01.100847960 CEST	8.8.8.8	192.168.2.4	0xf5f5	No error (0)	www.mcmprod.hsbc.co.uk.gslb-uk1.hsbc.com		91.214.5.154	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:39:02.302891016 CEST	8.8.8.8	192.168.2.4	0xc881	No error (0)	accdn.lpsnmedia.net	geo.accdn.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 6, 2023 10:39:02.320774078 CEST	8.8.8.8	192.168.2.4	0x183f	No error (0)	lpcdn.lpsnmedia.net	ipv4geo.lpcdn.lpsnmedia.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 6, 2023 10:39:08.610985994 CEST	8.8.8.8	192.168.2.4	0x2d6f	No error (0)	www.askus.hsbc.co.uk	hsbc.creativevirtual.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 6, 2023 10:39:08.610985994 CEST	8.8.8.8	192.168.2.4	0x2d6f	No error (0)	hsbc.creativevirtual.com	hsbc.creativevirtual.biz		CNAME (Canonical name)	IN (0x0001)	false
Jun 6, 2023 10:39:08.610985994 CEST	8.8.8.8	192.168.2.4	0x2d6f	No error (0)	hsbc.creativevirtual.biz		62.138.155.102	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:39:08.665770054 CEST	8.8.8.8	192.168.2.4	0xb552	No error (0)	cdn.appdynamics.com		108.138.36.11	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:39:08.665770054 CEST	8.8.8.8	192.168.2.4	0xb552	No error (0)	cdn.appdynamics.com		108.138.36.127	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:39:08.665770054 CEST	8.8.8.8	192.168.2.4	0xb552	No error (0)	cdn.appdynamics.com		108.138.36.89	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:39:08.665770054 CEST	8.8.8.8	192.168.2.4	0xb552	No error (0)	cdn.appdynamics.com		108.138.36.55	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:39:08.760808945 CEST	8.8.8.8	192.168.2.4	0x39cb	No error (0)	lo0.v.liveperson.net		178.249.96.141	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:39:10.184672117 CEST	8.8.8.8	192.168.2.4	0x7801	No error (0)	www.business.hsbc.co.uk	www.business.hsbc.co.uk.gslb-uk1.hsbc.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 6, 2023 10:39:10.184672117 CEST	8.8.8.8	192.168.2.4	0x7801	No error (0)	www.business.hsbc.co.uk.gslb-uk1.hsbc.com		91.214.6.108	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:39:10.465364933 CEST	8.8.8.8	192.168.2.4	0x8f20	No error (0)	www.business.hsbc.uk	www.business.hsbc.uk.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 6, 2023 10:39:14.691478968 CEST	8.8.8.8	192.168.2.4	0x6876	No error (0)	askus.business.hsbc.uk	hsbc.creativevirtual.biz		CNAME (Canonical name)	IN (0x0001)	false
Jun 6, 2023 10:39:14.691478968 CEST	8.8.8.8	192.168.2.4	0x6876	No error (0)	hsbc.creativevirtual.biz		62.138.155.102	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:39:19.482536077 CEST	8.8.8.8	192.168.2.4	0xd914	No error (0)	www.google.com		142.250.203.100	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:39:19.508518934 CEST	8.8.8.8	192.168.2.4	0x309f	No error (0)	www.google.com		142.250.203.100	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:39:20.414500952 CEST	8.8.8.8	192.168.2.4	0xeebe	No error (0)	lo.v.liveperson.net		178.249.97.70	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:39:22.859894037 CEST	8.8.8.8	192.168.2.4	0x204e	No error (0)	www.security.hsbc.co.uk	www.security.hsbc.co.uk.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 6, 2023 10:40:02.758002996 CEST	8.8.8.8	192.168.2.4	0x8aa0	No error (0)	accdn.lpsnmedia.net	geo.accdn.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 6, 2023 10:40:17.257281065 CEST	8.8.8.8	192.168.2.4	0x63ee	No error (0)	lo0.v.liveperson.net		178.249.96.141	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.182387114 CEST	8.8.8.8	192.168.2.4	0x6f5d	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 6, 2023 10:40:19.182387114 CEST	8.8.8.8	192.168.2.4	0x6f5d	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 6, 2023 10:40:19.182387114 CEST	8.8.8.8	192.168.2.4	0x6f5d	No error (0)	edge-irl1.demdex.net	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 6, 2023 10:40:19.182387114 CEST	8.8.8.8	192.168.2.4	0x6f5d	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.49.176.241	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.182387114 CEST	8.8.8.8	192.168.2.4	0x6f5d	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.19.115.14	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.182387114 CEST	8.8.8.8	192.168.2.4	0x6f5d	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.18.161.223	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.182387114 CEST	8.8.8.8	192.168.2.4	0x6f5d	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.51.52.84	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.182387114 CEST	8.8.8.8	192.168.2.4	0x6f5d	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.215.78.33	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.182387114 CEST	8.8.8.8	192.168.2.4	0x6f5d	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		54.154.173.64	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.182387114 CEST	8.8.8.8	192.168.2.4	0x6f5d	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		34.251.115.24	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.182387114 CEST	8.8.8.8	192.168.2.4	0x6f5d	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		54.73.43.225	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.203768969 CEST	8.8.8.8	192.168.2.4	0x8a24	No error (0)	tags.tiqcdn.com	dzfq4ouujrxm8.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 6, 2023 10:40:19.203768969 CEST	8.8.8.8	192.168.2.4	0x8a24	No error (0)	dzfq4ouujrxm8.cloudfront.net		18.66.192.44	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.203768969 CEST	8.8.8.8	192.168.2.4	0x8a24	No error (0)	dzfq4ouujrxm8.cloudfront.net		18.66.192.72	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.203768969 CEST	8.8.8.8	192.168.2.4	0x8a24	No error (0)	dzfq4ouujrxm8.cloudfront.net		18.66.192.14	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.203768969 CEST	8.8.8.8	192.168.2.4	0x8a24	No error (0)	dzfq4ouujrxm8.cloudfront.net		18.66.192.16	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.205054045 CEST	8.8.8.8	192.168.2.4	0x73a5	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 6, 2023 10:40:19.205054045 CEST	8.8.8.8	192.168.2.4	0x73a5	No error (0)	d1ykf07e75w7ss.cloudfront.net		108.138.37.209	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.295556068 CEST	8.8.8.8	192.168.2.4	0x8862	No error (0)	collect.tealiumiq.com		18.197.3.151	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.295556068 CEST	8.8.8.8	192.168.2.4	0x8862	No error (0)	collect.tealiumiq.com		18.159.165.110	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.295556068 CEST	8.8.8.8	192.168.2.4	0x8862	No error (0)	collect.tealiumiq.com		3.68.47.209	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.615998030 CEST	8.8.8.8	192.168.2.4	0xdffc	No error (0)	aax-eu.amazon-adsystem.com		52.95.122.74	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.726370096 CEST	8.8.8.8	192.168.2.4	0xef8a	No error (0)	collect-eu-west-1.tealiumiq.com		34.251.146.217	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.726370096 CEST	8.8.8.8	192.168.2.4	0xef8a	No error (0)	collect-eu-west-1.tealiumiq.com		63.34.46.219	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.726370096 CEST	8.8.8.8	192.168.2.4	0xef8a	No error (0)	collect-eu-west-1.tealiumiq.com		63.32.151.208	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.782234907 CEST	8.8.8.8	192.168.2.4	0x5fd2	No error (0)	hsbcbankcmb.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 6, 2023 10:40:19.782234907 CEST	8.8.8.8	192.168.2.4	0x5fd2	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 6, 2023 10:40:19.782234907 CEST	8.8.8.8	192.168.2.4	0x5fd2	No error (0)	edge-irl1.demdex.net	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 6, 2023 10:40:19.782234907 CEST	8.8.8.8	192.168.2.4	0x5fd2	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.31.88.82	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.782234907 CEST	8.8.8.8	192.168.2.4	0x5fd2	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.49.215.81	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.782234907 CEST	8.8.8.8	192.168.2.4	0x5fd2	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.49.169.160	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.782234907 CEST	8.8.8.8	192.168.2.4	0x5fd2	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.19.115.14	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.782234907 CEST	8.8.8.8	192.168.2.4	0x5fd2	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.18.161.223	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.782234907 CEST	8.8.8.8	192.168.2.4	0x5fd2	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.212.178.201	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.782234907 CEST	8.8.8.8	192.168.2.4	0x5fd2	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.215.85.23	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.782234907 CEST	8.8.8.8	192.168.2.4	0x5fd2	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.16.253.114	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.786732912 CEST	8.8.8.8	192.168.2.4	0x891f	No error (0)	hsbcglobalcmb.sc.omtrdc.net		63.140.62.160	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.786732912 CEST	8.8.8.8	192.168.2.4	0x891f	No error (0)	hsbcglobalcmb.sc.omtrdc.net		63.140.62.164	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.786732912 CEST	8.8.8.8	192.168.2.4	0x891f	No error (0)	hsbcglobalcmb.sc.omtrdc.net		63.140.62.135	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.812077999 CEST	8.8.8.8	192.168.2.4	0x8cc0	No error (0)	cm.everesttech.net	cm.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 6, 2023 10:40:19.895207882 CEST	8.8.8.8	192.168.2.4	0xee26	No error (0)	hsbcglobalcmb.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 6, 2023 10:40:19.895207882 CEST	8.8.8.8	192.168.2.4	0xee26	No error (0)	adobetarget.data.adobedc.net		66.235.152.152	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.895207882 CEST	8.8.8.8	192.168.2.4	0xee26	No error (0)	adobetarget.data.adobedc.net		66.235.152.115	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.895207882 CEST	8.8.8.8	192.168.2.4	0xee26	No error (0)	adobetarget.data.adobedc.net		66.235.152.126	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.895207882 CEST	8.8.8.8	192.168.2.4	0xee26	No error (0)	adobetarget.data.adobedc.net		66.235.152.107	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.895207882 CEST	8.8.8.8	192.168.2.4	0xee26	No error (0)	adobetarget.data.adobedc.net		66.235.152.143	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:19.895207882 CEST	8.8.8.8	192.168.2.4	0xee26	No error (0)	adobetarget.data.adobedc.net		66.235.152.113	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:20.067153931 CEST	8.8.8.8	192.168.2.4	0x4055	No error (0)	img.en25.com	wildcard.en25.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 6, 2023 10:40:20.214394093 CEST	8.8.8.8	192.168.2.4	0x684b	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 6, 2023 10:40:20.214394093 CEST	8.8.8.8	192.168.2.4	0x684b	No error (0)	platform.twitter.map.fastly.net		151.101.240.157	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:20.406999111 CEST	8.8.8.8	192.168.2.4	0x4d37	No error (0)	visitor-service-eu-west-1.tealiumiq.com		54.74.97.132	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:20.406999111 CEST	8.8.8.8	192.168.2.4	0x4d37	No error (0)	visitor-service-eu-west-1.tealiumiq.com		34.252.207.79	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:20.406999111 CEST	8.8.8.8	192.168.2.4	0x4d37	No error (0)	visitor-service-eu-west-1.tealiumiq.com		52.18.200.79	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:20.510638952 CEST	8.8.8.8	192.168.2.4	0xcffe	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 6, 2023 10:40:20.555094004 CEST	8.8.8.8	192.168.2.4	0x57b6	No error (0)	8071582.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 6, 2023 10:40:20.555094004 CEST	8.8.8.8	192.168.2.4	0x57b6	No error (0)	dart.l.doubleclick.net		172.217.168.38	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:20.558620930 CEST	8.8.8.8	192.168.2.4	0xd582	No error (0)	cm.g.doubleclick.net		142.250.203.98	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:20.664433002 CEST	8.8.8.8	192.168.2.4	0xa822	No error (0)	googleads.g.doubleclick.net		142.250.203.98	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:20.869486094 CEST	8.8.8.8	192.168.2.4	0xbeaa	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 6, 2023 10:40:20.869486094 CEST	8.8.8.8	192.168.2.4	0xbeaa	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 6, 2023 10:40:20.869486094 CEST	8.8.8.8	192.168.2.4	0xbeaa	No error (0)	s.twitter.com		104.244.42.195	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:20.869486094 CEST	8.8.8.8	192.168.2.4	0xbeaa	No error (0)	s.twitter.com		104.244.42.131	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:20.869486094 CEST	8.8.8.8	192.168.2.4	0xbeaa	No error (0)	s.twitter.com		104.244.42.3	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:20.869486094 CEST	8.8.8.8	192.168.2.4	0xbeaa	No error (0)	s.twitter.com		104.244.42.67	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:20.870178938 CEST	8.8.8.8	192.168.2.4	0x4aca	No error (0)	t.co		104.244.42.133	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:20.880522966 CEST	8.8.8.8	192.168.2.4	0x266e	No error (0)	s1706134858.t.eloqua.com	p06k.t.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 6, 2023 10:40:20.880522966 CEST	8.8.8.8	192.168.2.4	0x266e	No error (0)	p06k.t.eloqua.com		192.29.203.179	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:20.882534027 CEST	8.8.8.8	192.168.2.4	0xd048	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 6, 2023 10:40:20.882534027 CEST	8.8.8.8	192.168.2.4	0xd048	No error (0)	scontent.xx.fbcdn.net		157.240.17.15	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:20.951210022 CEST	8.8.8.8	192.168.2.4	0xa0c4	No error (0)	px.ads.linkedin.com	www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 6, 2023 10:40:20.951210022 CEST	8.8.8.8	192.168.2.4	0xa0c4	No error (0)	www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 6, 2023 10:40:20.977751970 CEST	8.8.8.8	192.168.2.4	0x535f	No error (0)	cdn.linkedin.oribi.io	d1ni990a184w7d.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 6, 2023 10:40:20.977751970 CEST	8.8.8.8	192.168.2.4	0x535f	No error (0)	d1ni990a184w7d.cloudfront.net		108.138.36.108	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:20.977751970 CEST	8.8.8.8	192.168.2.4	0x535f	No error (0)	d1ni990a184w7d.cloudfront.net		108.138.36.72	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:20.977751970 CEST	8.8.8.8	192.168.2.4	0x535f	No error (0)	d1ni990a184w7d.cloudfront.net		108.138.36.12	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:20.977751970 CEST	8.8.8.8	192.168.2.4	0x535f	No error (0)	d1ni990a184w7d.cloudfront.net		108.138.36.102	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:21.043571949 CEST	8.8.8.8	192.168.2.4	0xdf76	No error (0)	www.google.com		142.250.203.100	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:21.250231981 CEST	8.8.8.8	192.168.2.4	0x53e2	No error (0)	adservice.google.com		142.250.203.98	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:21.263776064 CEST	8.8.8.8	192.168.2.4	0xdbe5	No error (0)	datacloud.tealiumiq.com		18.159.165.110	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:21.263776064 CEST	8.8.8.8	192.168.2.4	0xdbe5	No error (0)	datacloud.tealiumiq.com		3.68.47.209	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:21.263776064 CEST	8.8.8.8	192.168.2.4	0xdbe5	No error (0)	datacloud.tealiumiq.com		18.197.3.151	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:21.477200985 CEST	8.8.8.8	192.168.2.4	0x366c	No error (0)	cdn-0.d41.co		108.138.36.18	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:21.477200985 CEST	8.8.8.8	192.168.2.4	0x366c	No error (0)	cdn-0.d41.co		108.138.36.116	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:21.477200985 CEST	8.8.8.8	192.168.2.4	0x366c	No error (0)	cdn-0.d41.co		108.138.36.107	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:21.477200985 CEST	8.8.8.8	192.168.2.4	0x366c	No error (0)	cdn-0.d41.co		108.138.36.128	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:21.573863983 CEST	8.8.8.8	192.168.2.4	0x9cdf	No error (0)	hw0ebfaguc.d41.co	ecf.d41.co		CNAME (Canonical name)	IN (0x0001)	false
Jun 6, 2023 10:40:21.573863983 CEST	8.8.8.8	192.168.2.4	0x9cdf	No error (0)	ecf.d41.co	vici-asg-elb-1598172991.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 6, 2023 10:40:21.573863983 CEST	8.8.8.8	192.168.2.4	0x9cdf	No error (0)	vici-asg-elb-1598172991.us-east-1.elb.amazonaws.com		54.81.54.200	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:21.573863983 CEST	8.8.8.8	192.168.2.4	0x9cdf	No error (0)	vici-asg-elb-1598172991.us-east-1.elb.amazonaws.com		54.225.241.10	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:21.573863983 CEST	8.8.8.8	192.168.2.4	0x9cdf	No error (0)	vici-asg-elb-1598172991.us-east-1.elb.amazonaws.com		54.173.184.55	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:21.810945034 CEST	8.8.8.8	192.168.2.4	0x63f6	No error (0)	www.google.ch		172.217.168.67	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:22.926080942 CEST	8.8.8.8	192.168.2.4	0xb37	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 6, 2023 10:40:22.926080942 CEST	8.8.8.8	192.168.2.4	0xb37	No error (0)	star-mini.c10r.facebook.com		157.240.9.35	A (IP address)	IN (0x0001)	false
Jun 6, 2023 10:40:24.718674898 CEST	8.8.8.8	192.168.2.4	0xd3bf	No error (0)	lo.v.liveperson.net		178.249.97.70	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

accounts.google.com

clients2.google.com

hs-login.online

https:

tags.tiqcdn.com

col.eum-appdynamics.com

www.hsbc.co.uk

www.mcmprod.hsbc.co.uk

cdn.appdynamics.com

www.askus.hsbc.co.uk

lo0.v.liveperson.net

askus.business.hsbc.uk

lo.v.liveperson.net

dpm.demdex.net

c.amazon-adsystem.com

collect.tealiumiq.com

aax-eu.amazon-adsystem.com

hsbcglobalcmb.sc.omtrdc.net

collect-eu-west-1.tealiumiq.com

hsbcbankcmb.demdex.net

hsbcglobalcmb.tt.omtrdc.net

static.ads-twitter.com

visitor-service-eu-west-1.tealiumiq.com

8071582.fls.doubleclick.net

www.google.com

cdn.linkedin.oribi.io

t.co

analytics.twitter.com

s1706134858.t.eloqua.com

connect.facebook.net

cdn-0.d41.co

datacloud.tealiumiq.com

hw0ebfaguc.d41.co

www.google.ch

www.facebook.com

www.business.hsbc.co.uk

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.4	49692	142.250.203.109	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:16 UTC	0	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:38:16 UTC	0	OUT	Data Raw: 20 Data Ascii:
2023-06-06 08:38:16 UTC	2	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 06 Jun 2023 08:38:16 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Security-Policy: script-src 'report-sample' 'nonce-2oQQwnBUN7bReRG0rMkIfg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/IdentityListAccountsHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-06-06 08:38:16 UTC	4	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2023-06-06 08:38:16 UTC	4	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.4	49694	142.250.203.110	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:16 UTC	0	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=104.0.5112.81&lang=en-GB&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda X-Goog-Update-Updater: chromecrx-104.0.5112.81 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:38:16 UTC	1	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-ye4rXBeUhCEz5-HTZOk12w' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 06 Jun 2023 08:38:16 GMT Content-Type: text/xml; charset=UTF-8 X-Daynum: 6000 X-Daystart: 5896 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-06-06 08:38:16 UTC	1	IN	Data Raw: 32 63 38 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 36 30 30 30 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 35 38 39 36 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 20 Data Ascii: 2c8<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="6000" elapsed_seconds="5896"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2023-06-06 08:38:16 UTC	2	IN	Data Raw: 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 2f 67 75 70 64 61 74 65 3e 0d 0a Data Ascii: 3f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app></gupdate>
2023-06-06 08:38:16 UTC	2	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
10	192.168.2.4	49705	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:19 UTC	173	OUT	GET /front_end/front_end_files/keylogin.css HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hs-login.online/front_end/front_end_files/ursula.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:20 UTC	264	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:20 GMT Content-Type: text/css Content-Length: 143 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:42 GMT ETag: "8f-5fd6543162372" Accept-Ranges: bytes Vary: Accept-Encoding
2023-06-06 08:38:20 UTC	265	IN	Data Raw: 2e 75 72 73 75 6c 61 20 2e 62 6c 6f 63 6b 43 6f 6c 75 6d 6e 31 20 2e 43 6f 6c 75 6d 6e 57 69 64 65 72 7b 0a 09 77 69 64 74 68 3a 20 34 31 30 70 78 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0a 09 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 0a 09 66 6c 6f 61 74 3a 72 69 67 68 74 3b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 36 30 70 78 3b 0a 7d 0a Data Ascii: .ursula .blockColumn1 .ColumnWider{width: 410px;text-align: right;display:inline;float:right;display: inline;margin-right: 60px;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
100	192.168.2.4	49886	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:00 UTC	3865	OUT	GET /etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/social/facebook.svg HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373; tms_ref=; servicingTrafficManagement2=SegmentNewJourney; servicingTrafficManagement3=SegmentNewJourney; utag_main=v_id:01888fdc714a00035f72975780d20006f001706700918$_sn:1$_se:1$_ss:1$_st:1686042568844$ses_id:1686040768844%3Bexp-session$_pn:1%3Bexp-session$sskey:undefined%3Bexp-1688632768902; dclid=undefined
2023-06-06 08:39:00 UTC	3997	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 950 Connection: close Date: Tue, 06 Jun 2023 08:38:59 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains Last-Modified: Sat, 03 Jun 2023 04:21:37 GMT Accept-Ranges: bytes S: dispatcher3euwest1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=7776000, s-maxage=7776000 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 47b2ce4c0cbd550c326fba9b552b2176.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: qCgmV8_1j35-LiKOScpG7f2oPUcoY4ATYwbwe4gGzdIpGQ8agfjhtg== Age: 1
2023-06-06 08:39:00 UTC	3998	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 66 61 63 65 62 6f 6f 6b 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_facebook" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
101	192.168.2.4	49887	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:00 UTC	3866	OUT	GET /content/dam/hsbc/ciiom/images/bank-accounts/16-9/1568-holding-child-smiling-together-800x450.jpg/jcr:content/renditions/cq5dam.web.590.1000.jpeg HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373; tms_ref=; servicingTrafficManagement2=SegmentNewJourney; servicingTrafficManagement3=SegmentNewJourney; utag_main=v_id:01888fdc714a00035f72975780d20006f001706700918$_sn:1$_se:1$_ss:1$_st:1686042568844$ses_id:1686040768844%3Bexp-session$_pn:1%3Bexp-session$sskey:undefined%3Bexp-1688632768902; dclid=undefined
2023-06-06 08:39:00 UTC	3884	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 54289 Connection: close Date: Tue, 06 Jun 2023 08:38:59 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains Last-Modified: Tue, 06 Jun 2023 06:54:27 GMT Accept-Ranges: bytes S: dispatcher2euwest1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=2592000, s-maxage=2592000 X-Cache: Hit from cloudfront Via: 1.1 24615eefe0727e5d65935ccaddca2f78.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: zGgUvuNBpuWIiVA90kGl5qq-jFTQcDz4l1vLZepNlXW4FaFgeiUkvA== Age: 1
2023-06-06 08:39:00 UTC	3885	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 4b 02 4e 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFCCKN"}!1AQa"q2
2023-06-06 08:39:00 UTC	3916	IN	Data Raw: 75 31 fe 60 45 62 76 cb 62 38 25 f3 14 e0 60 e7 15 30 18 34 c8 57 6a e0 fe 95 25 04 c5 68 37 6e 68 3c 53 8f 00 9a 82 59 71 40 4a c9 12 7a 57 cd da de a1 f6 ff 00 8e da b8 5f 9c 5b d8 dc c4 30 7a 7c d0 03 c7 d4 1a fa 2e 06 66 e4 d7 cc 7a ac 37 56 9f 19 bc 50 0b 46 99 b6 b9 92 36 1d 70 d3 a1 e6 bd 5c 02 57 9f a7 ea 8f 9c cd e4 da a4 96 dc df 92 3e 95 b2 b7 f2 6d d4 72 7e b5 2b 39 03 8a 92 31 98 94 67 b5 0c a3 e8 6b cd bd de a7 b8 a3 65 64 67 cd 77 24 52 aa 2a 92 9e a6 ae 40 e4 8c 9e b5 05 d4 60 90 7b e6 a6 84 8d be f5 52 b3 8a d0 ce 09 a9 3b b2 50 f9 38 e9 9a fc c2 fd ad ad d1 7e 35 78 a5 9a 41 39 f3 b7 ec c7 29 f2 83 82 3f cf 41 5f a7 40 ed cf 19 af cd 8f db 4b c2 cf a5 7c 56 f1 4c ac 0a 9d 46 d9 6e 63 60 bc 05 2a aa 79 fc eb cc c5 e9 14 fc cf 53 0b ac 9a Data Ascii: u1`Ebvb8%`04Wj%h7nh<SYq@JzW_[0z\|.fz7VPF6p\W>mr~+91gkedgw$R@`{R;P8~5xA9)?A_@K\|VLFnc`yS
2023-06-06 08:39:00 UTC	3949	IN	Data Raw: 96 d0 dd 02 e1 19 81 05 86 38 d9 df 2b c1 ee 73 5d af 82 b4 4d 5b e1 dc 9b f4 d9 92 6b 69 7e 59 ad 66 23 cb 62 7b 82 46 07 d3 a7 3c 55 df 89 57 da 2e b7 e1 eb 6d 67 c4 3a 35 aa 49 6c c2 28 e7 82 e2 40 e8 a4 90 70 61 47 20 8e 38 fa d7 a7 83 94 54 39 1e e7 05 48 fe f9 54 b5 ed d8 f9 06 3d 2e 59 6f 1a ea 48 a4 8a 49 89 0e 76 18 84 64 1e 31 9f c2 ba cd 1a d3 4e d0 ed 85 ce a9 7a f1 5a ee 2d b6 42 d2 3b 31 eb b5 79 24 9e 3a 51 ad f8 52 4b a6 ba be d3 56 69 6d 61 26 51 32 b4 c5 64 5e a0 b0 93 e7 56 eb c9 e0 e0 fa 55 bf 0a 69 b1 ea 77 88 9a 91 31 46 00 2a c7 f9 d6 93 b5 ed d8 fa 8a 33 e7 85 d1 d8 78 7f c5 c9 a2 79 56 be 1c d3 24 8e 7b c6 d8 97 13 2f 3c f7 c7 5f c0 e2 bd 7b c2 ff 00 0b 8d dd e5 9e b7 a8 cc f2 6a 0a 39 79 0e 76 af 07 0a 3a 2f 3e 95 e7 1a 1f 8d 34 Data Ascii: 8+s]M[ki~Yf#b{F<UW.mg:5Il(@paG 8T9HT=.YoHIvd1NzZ-B;1y$:QRKVima&Q2d^VUiw1F*3xyV${/<_{j9yv:/>4
2023-06-06 08:39:00 UTC	3975	IN	Data Raw: 8a f3 30 af b9 f5 59 a6 c9 a3 cf bc 4f 06 cf 8b 5a 3c 84 7d cd 22 f1 77 7a 13 2c 1f e1 5e 33 f1 1a dc 9f 8b de 17 0b ce db f4 7c fe 62 bd b3 c6 73 32 7c 53 b5 8f f8 7f b3 66 c7 fd fd 8b 35 e3 fe 35 43 37 c6 1d 09 88 c8 4b 94 5f e6 6b 19 ef 63 5a 0f 44 df 63 bf f8 d5 c7 c3 2d 6f 3c 6d 8a 3f fd 08 57 6b fb 39 10 3e 15 d8 01 fd f6 38 3f 5a e2 7e 33 0d df 0d bc 4a 3a 85 86 3c 7f df 4b 5d 9f ec f1 fb af 85 96 01 4f 19 63 59 53 ff 00 7a 5e 8c d3 11 ae 58 d7 f7 d7 e4 7a ac 12 6c 84 f3 c9 35 56 f8 63 e2 1e 8a c3 fe 7c dc 7f 3a 8e 39 8f 94 32 7a b5 3e fc 9f f8 4f b4 32 7a 7d 91 b9 fc eb d4 a9 2b c6 3f e2 8f e6 7c a4 63 cb 39 7f 86 5f 91 ce fe d2 b6 b2 5c fc 36 b6 d9 07 9f 1a 6a 96 8d 28 cf 0a 86 4c 64 fe 24 7e 75 2e 91 1b d8 6a 1a bc e9 26 f4 9e 48 c2 a6 d1 f2 15 Data Ascii: 0YOZ<}"wz,^3\|bs2\|Sf55C7K_kcZDc-o<m?Wk9>8?Z~3J:<K]OcYSz^Xzl5Vc\|:92z>O2z}+?\|c9_\6j(Ld$~u.j&H

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
102	192.168.2.4	49888	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:00 UTC	3867	OUT	GET /content/dam/hsbc/gb/images/cma/feb-2023/desktop/overall-service-quality-ni.jpg/jcr:content/renditions/cq5dam.web.590.1000.jpeg HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373; tms_ref=; servicingTrafficManagement2=SegmentNewJourney; servicingTrafficManagement3=SegmentNewJourney; utag_main=v_id:01888fdc714a00035f72975780d20006f001706700918$_sn:1$_se:1$_ss:1$_st:1686042568844$ses_id:1686040768844%3Bexp-session$_pn:1%3Bexp-session$sskey:undefined%3Bexp-1688632768902; dclid=undefined
2023-06-06 08:39:00 UTC	3868	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 59131 Connection: close Date: Tue, 06 Jun 2023 08:38:59 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains Last-Modified: Fri, 02 Jun 2023 17:25:37 GMT Accept-Ranges: bytes S: dispatcher3euwest1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=2592000, s-maxage=2592000 X-Cache: Hit from cloudfront Via: 1.1 48c20cb247b267a59a8191c4d3bd787c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: mOSweeKhyT5IFirLuPS6Jt7iw_LZBr6QvCa_J0sNzR2Ml9vLc_ASTA== Age: 1
2023-06-06 08:39:00 UTC	3868	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 f0 02 4e 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFCCN"}!1AQa"q2
2023-06-06 08:39:00 UTC	3900	IN	Data Raw: 9f b4 fd cc 67 7f 99 fc 59 e9 c6 2b b8 c5 00 7c ef fb 46 78 7f 5a d2 fe 34 fc 13 f8 99 6d a6 6a ba ef 86 bc 23 73 aa db ea f6 1a 2d ab dd dc c4 2f 2d 44 31 5d 2d ba 65 e4 11 b2 95 60 8a cc 16 42 40 c0 6a e0 75 ef 83 f3 7e d6 1f 14 fe 28 eb 57 1a 56 b7 e1 cf 03 ea be 03 87 c1 d6 b2 6b fa 5c 96 33 5e 5f 0b 99 2e 96 f1 2d a7 55 94 2d b9 68 c2 b3 aa e5 8b 01 9d b9 1f 63 60 51 81 40 1f 2d fe ca 56 1e 36 f8 97 e2 eb bf 8a 1f 13 7c 3b a8 78 6f c4 5a 56 8b 6b e1 0b 2b 1d 46 07 b7 3b d0 2c ba 95 da 46 78 29 3c fe 5a a3 8c e5 2d c6 0e 0f 3e 05 fb 39 fc 38 f1 a7 c3 3f 84 7f b2 57 8b f5 cf 0a f8 9a 2b 1f 05 5c f8 9e df 5f d0 a0 d2 2e 24 d4 2d 3e dd 35 ca 5b dc b5 98 5f 35 94 71 9d a8 cc 16 50 c0 60 9a fd 21 c5 18 14 01 f1 4f 8b bc 2d e2 4f 8e fe 3e fd a0 a4 f0 ff 00 Data Ascii: gY+\|FxZ4mj#s-/-D1]-e`B@ju~(WVk\3^_.-U-hc`Q@-V6\|;xoZVk+F;,Fx)<Z->98?W+\_.$->5[_5qP`!O-O>
2023-06-06 08:39:00 UTC	3932	IN	Data Raw: 4b 22 c1 45 5e 4d a5 ea bf c8 cd 66 18 89 3b 24 be e3 f5 97 fe 1e 83 f0 3f fe 7f 75 df fc 15 b7 ff 00 15 47 fc 3d 07 e0 7f fc fe eb bf f8 2b 6f fe 2a bf 24 3c 69 e0 cd 67 e1 e7 8a f5 4f 0d f8 82 c9 b4 ed 6b 4d 98 c1 75 6c cc ad b1 c7 3c 32 92 08 20 82 08 24 10 41 ac 5a 71 c8 b0 72 49 a6 ec fc d7 f9 03 cc 2b c5 d9 a5 f7 1f b1 3f f0 f4 1f 81 ff 00 f3 fb ae ff 00 e0 ad bf f8 aa 3f e1 e8 3f 03 ff 00 e7 f7 5d ff 00 c1 5b 7f f1 55 f8 ed 45 3f ec 0c 27 77 f7 ff 00 c0 27 fb 46 b7 91 fb 13 ff 00 0f 41 f8 1f ff 00 3f ba ef fe 0a db ff 00 8a a3 fe 1e 83 f0 3f fe 7f 75 df fc 15 b7 ff 00 15 5f 95 9f 0a 3e 0b 78 cb e3 7e b3 7b a5 78 2b 45 7d 6e fe ca d5 af 67 89 66 8e 2d b1 82 06 73 23 28 24 92 00 00 e4 93 f5 ac 3f 08 78 3f 53 f1 d7 89 ac bc 3f a4 25 bb ea b7 b2 79 36 Data Ascii: K"E^Mf;$?uG=+o*$<igOkMul<2 $AZqrI+???][UE?'w'FA??u_>x~{x+E}ngf-s#($?x?S?%y6
2023-06-06 08:39:00 UTC	3965	IN	Data Raw: 23 c2 5e 16 b0 f0 57 87 2c 34 5d 36 32 96 96 91 ec 5d d8 dc c7 ab 33 63 b9 24 93 ee 6b 5e bf 53 c1 d0 78 6c 3c 29 3d d2 3f 9b b3 5c 62 cc 31 b5 71 31 5a 49 e9 e8 b4 5f 82 0a 28 a2 bb 0f 24 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 50 09 20 0e 49 e3 15 ea 96 91 18 2d 21 8c f5 44 55 3f 80 ae 4f c2 fe 1b 91 a6 4b cb a4 28 89 f3 47 1b 0e 58 f6 27 da bb 1a 96 52 16 90 f4 a5 a2 90 cf 0a be f8 53 e2 1f 18 7e d2 96 be 2f d7 a0 b6 5f 0a e8 76 db 34 98 c4 81 9e 49 71 90 ec 99 38 21 dd d8 1e 3e e2 71 5a bf 1e fe 14 6b 5e 37 b9 f0 bf 89 3c 2b 73 6d 07 89 fc 35 74 6e 2d 63 bd 38 86 75 62 a5 91 88 19 ea 83 1d 06 0b 0e 33 91 ec 14 57 13 c2 53 70 9c 1f da 77 7d ef ff 00 02 ca c7 a8 b3 2a f1 a9 4e ac 6c b9 23 ca 95 b4 b6 b7 ba f3 bb bf a9 e2 9f 05 7e 15 f8 97 47 f1 b7 89 7c 7d Data Ascii: #^W,4]62]3c$k^Sxl<)=?\b1q1ZI_($(((P I-!DU?OK(GX'RS~/_v4Iq8!>qZk^7<+sm5tn-c8ub3WSpw}*Nl#~G\|}
2023-06-06 08:39:00 UTC	3973	IN	Data Raw: 45 14 56 86 25 1d 5f 44 d3 f5 fb 29 2c f5 3b 1b 6d 46 ce 4f bf 6f 77 0a cb 1b 7d 55 81 06 bc fa 7f d9 97 e1 7d cc cf 2b f8 37 4f 0c c7 24 47 bd 14 7d 15 58 01 f8 0a f4 fa 2b 19 d1 a5 57 f8 91 4f d5 5c e9 a5 8a af 41 5a 8d 47 1f 46 d7 e4 79 ce 95 fb 3b 7c 36 d1 2e 96 e6 d3 c1 ba 5f 9c a7 20 cf 11 98 03 ea 03 92 01 f7 af 42 82 08 ed a3 58 e2 45 8e 34 1b 55 10 60 28 f4 02 a4 a2 9c 29 53 a4 ad 4e 29 7a 2b 13 56 bd 6a ee f5 a6 e5 ea db fc c2 8a 28 ad 4c 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 b8 8f 8a bf 09 34 8f 8b fa 45 8e 9d ac 5d 5f da 45 65 76 b7 90 cb a7 4a b1 c8 24 55 65 1c 95 6f ef 1e 9c e7 15 db d1 59 ce 9c 6a c5 c2 6a e9 9a d2 ab 3a 13 55 29 bb 49 6c cf 06 ff 00 86 3a f0 c7 fd 0d Data Ascii: EV%_D),;mFOow}U}+7O$G}X+WO\AZGFy;\|6._ BXE4U`()SN)z+Vj(L(((((((((4E]_EevJ$UeoYjj:U)Il:

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
103	192.168.2.4	49890	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:00 UTC	4307	OUT	GET /content/dam/hsbc/gb/images/logos/fscs.jpg HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373; tms_ref=; servicingTrafficManagement2=SegmentNewJourney; servicingTrafficManagement3=SegmentNewJourney; utag_main=v_id:01888fdc714a00035f72975780d20006f001706700918$_sn:1$_se:1$_ss:1$_st:1686042568844$ses_id:1686040768844%3Bexp-session$_pn:1%3Bexp-session$sskey:undefined%3Bexp-1688632768902; dclid=undefined
2023-06-06 08:39:00 UTC	4308	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 14367 Connection: close Date: Tue, 06 Jun 2023 08:38:59 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains Last-Modified: Fri, 02 Jun 2023 17:29:59 GMT Accept-Ranges: bytes S: dispatcher3euwest1 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=2592000, s-maxage=2592000 X-Cache: Hit from cloudfront Via: 1.1 24d97ac79c66f25c7df0732cb86ef322.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: vR6urfSeQlXfi7N7FY9lOIz107slRstuPvf3HU9KtGKhdLurijQIpQ== Age: 1
2023-06-06 08:39:00 UTC	4309	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 1f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xm
2023-06-06 08:39:00 UTC	4321	IN	Data Raw: a2 40 0f 52 7e 5e 30 04 ea 09 f8 4a 00 3d 53 c6 20 20 77 4f 23 14 04 3d 2e 1a 78 44 01 0e 90 25 33 28 02 75 75 e3 a7 84 01 3a 93 d2 7a c0 13 aa 4c 01 3a 93 e7 33 01 20 2e 69 28 00 6f 9f 94 00 0a c0 f2 f3 81 24 9b fd a2 02 41 be 04 93 a0 f6 3e c3 67 ca bb a1 63 b0 df e9 13 5b 69 ab 15 5f 11 4a b2 42 57 d3 a5 75 c4 ea 92 0e 8a 48 3c 63 93 77 77 4c 4d ae 3f a9 c3 bf cb 6a 61 b5 aa e1 e9 ed 3d 84 bf 4e fd 9a 73 ef f1 4a 63 fc 77 be b2 3e 73 e6 f2 f3 3e 4b e7 b3 ff 00 b3 30 9f 4d dd 93 3a 9c 46 97 f0 df fa c8 7c d6 5e 64 f9 dc df ec 51 9a c2 fd 2c b9 97 1c 24 e3 a8 6a f5 f1 6b b6 21 4e b1 5c dd 22 eb 9b 6c 3c 69 d3 52 a2 1a 2e 6c 3b 82 77 cc f2 8e 99 dc 74 75 ce 9c 7b 38 1d 2f 26 e7 a3 ae 74 e3 d9 c3 9c 17 9f b3 6f 64 ff 00 34 69 bf 9c 7f eb 23 97 e6 b2 73 39 Data Ascii: @R~^0J=S wO#=.xD%3(uu:zL:3 .i(o$A>gc[i_JBWuH<cwwLM?ja=NsJcw>s>K0M:F\|^dQ,$jk!N\"l<iR.l;wtu{8/&tod4i#s9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
104	192.168.2.4	49891	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:00 UTC	4323	OUT	GET /content/dam/hsbc/gb/images/cma/feb-2023/desktop/overall-service-quality-gb.jpg/jcr:content/renditions/cq5dam.web.590.1000.jpeg HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373; tms_ref=; servicingTrafficManagement2=SegmentNewJourney; servicingTrafficManagement3=SegmentNewJourney; utag_main=v_id:01888fdc714a00035f72975780d20006f001706700918$_sn:1$_se:1$_ss:1$_st:1686042568844$ses_id:1686040768844%3Bexp-session$_pn:1%3Bexp-session$sskey:undefined%3Bexp-1688632768902; dclid=undefined
2023-06-06 08:39:00 UTC	4324	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 57592 Connection: close Date: Tue, 06 Jun 2023 08:38:59 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains Last-Modified: Fri, 02 Jun 2023 17:32:13 GMT Accept-Ranges: bytes S: dispatcher2euwest1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=2592000, s-maxage=2592000 X-Cache: Hit from cloudfront Via: 1.1 940591d2da012baa6779996f50bf5208.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: Qage7mYSvuwhYrzbKmTzOAmfB0fJxE9YzG0Qaud50X_5I1Ir8eDu7A== Age: 1
2023-06-06 08:39:00 UTC	4324	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 f0 02 4e 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFCCN"}!1AQa"q2
2023-06-06 08:39:00 UTC	4340	IN	Data Raw: f0 6d e7 82 e5 f0 c4 a3 41 d3 e5 d4 65 d3 6e 96 f4 5c 89 1a de 2d d2 94 95 32 bb a3 46 c3 46 03 60 15 ae 26 1f 80 5a ff 00 c6 bd 17 f6 8b f1 04 b6 7a a7 85 1f c7 57 b6 17 5e 13 b3 d5 41 b4 b9 b3 ba d3 6d 51 2d ef d9 07 cf 09 92 e2 35 6c 36 1b 64 6b 95 19 e7 ec aa 4a 00 f9 4f e0 76 93 e2 9f 89 9e 19 f8 8f f1 6f c6 9e 12 d4 3c 33 e3 0f 12 68 a9 a1 58 68 3a 85 9b 47 77 65 69 6d 6e db 90 2b 00 ff 00 bd bb 96 e5 c0 c0 dc 82 13 8e 95 c9 fc 1b d1 bc 41 f0 5f c5 1f 08 bc 5f e2 2f 0b 78 9a e7 45 b9 f8 41 a3 78 5a e1 74 cd 1a e2 f6 e7 49 d4 2d ca cb 24 57 16 d1 2b 4d 18 60 e0 13 b0 e1 a3 21 b1 8c 8f b6 28 c0 a0 0f 82 75 5f 86 7e 35 f8 81 f0 83 e2 fd ed a7 85 fc 4d e1 bb 97 f8 b7 6f e2 d8 74 74 81 2d f5 2d 43 4f 86 2d 39 d9 ad c3 82 8d 21 11 bb a0 f9 87 9b 16 c3 92 Data Ascii: mAen\-2FF`&ZzW^AmQ-5l6dkJOvo<3hXh:Gweimn+A__/xEAxZtI-$W+M`!(u_~5Mott--CO-9!
2023-06-06 08:39:00 UTC	4394	IN	Data Raw: 23 bd 7a c5 20 00 76 a5 ac e9 53 54 69 c6 9c 76 4a c6 f8 9c 44 b1 55 e7 5e 6b 59 36 dd b6 d4 2b 90 f1 ef c2 6f 09 fc 4f 36 27 c5 1a 3c 7a b7 d8 bc cf b3 f9 92 48 9e 5e fd bb be eb 0c e7 62 f5 f4 ae be 8a a9 42 33 5c b3 57 46 74 ea d4 a3 35 52 94 9c 64 ba a7 67 f7 9e 67 a0 7e cd bf 0d fc 2f ad 59 6a da 5f 85 e0 b3 d4 2c e4 13 41 3a cf 31 28 e3 a1 c1 72 3f 31 5e 99 45 14 a1 4e 14 d5 a1 14 bd 34 2e b6 22 b6 21 a9 56 9b 93 5d db 7f 99 f0 11 6f f8 ca 2c ff 00 d4 e5 ff 00 b7 b5 f4 ef ed 5c 7f e2 ca ea a7 fe 9b db ff 00 e8 d5 af 5f c0 c6 30 31 46 2b cd a5 80 f6 74 ea d3 e6 f8 ef d3 6f c4 fa ec 67 12 fd 6f 17 83 c5 7b 1b 7b 0b 69 cd 7e 6b 34 f7 e5 d3 6e cc f9 5b f6 1c 38 ff 00 84 d4 7f d7 97 fe dc 57 9d fe d6 5f f2 59 f5 1f fa f6 b7 ff 00 d1 62 be ed c0 f4 a3 15 Data Ascii: #z vSTivJDU^kY6+oO6'<zH^bB3\WFt5Rdgg~/Yj_,A:1(r?1^EN4."!V]o,\_01F+togo{{i~k4n[8W_Yb
2023-06-06 08:39:00 UTC	4410	IN	Data Raw: 0d 14 7f 6d e2 fb af b8 3f d5 0c af b4 be f3 ef ef f8 6f ff 00 87 bf f4 06 f1 37 fe 02 db ff 00 f1 fa 3f e1 bf fe 1e ff 00 d0 1b c4 df f8 0b 6f ff 00 c7 eb e0 1a 28 fe db c5 f7 5f 70 7f aa 19 5f 69 7d e7 df df f0 df ff 00 0f 7f e8 0d e2 6f fc 05 b7 ff 00 e3 f4 7f c3 7f fc 3d ff 00 a0 37 89 bf f0 16 df ff 00 8f d7 c0 34 51 fd b7 8b ee be e0 ff 00 54 32 be d2 fb cf bf bf e1 bf fe 1e ff 00 d0 1b c4 df f8 0b 6f ff 00 c7 e8 ff 00 86 ff 00 f8 7b ff 00 40 6f 13 7f e0 2d bf ff 00 1f af 80 68 a3 fb 6f 17 dd 7d c1 fe a8 65 7d a5 f7 9f a3 3e 1b fd b6 fe 1a f8 86 e5 20 92 5d 4b 47 77 38 53 a9 5b a2 26 7d dd 5d 94 7d 49 02 bd 66 3f 1e e9 d3 46 b2 46 93 ba 30 0c ac a1 48 20 f4 20 ee af c8 da fa 0b f6 5c f8 bd 73 a3 eb b6 fe 11 d4 ee 0c ba 55 eb 15 b3 32 37 fc 7b cc 79 Data Ascii: m?o7?o(_p_i}o=74QT2o{@o-ho}e}> ]KGw8S[&}]}If?FF0H \sU27{y
2023-06-06 08:39:00 UTC	4421	IN	Data Raw: e5 7f 70 7d 62 8f f3 af bd 1c cd 7d 3d fb 1a f8 5a 78 db 5d f1 14 a8 c9 03 aa d8 c0 48 fb e7 3b e4 3f 86 13 f3 3e 95 c7 fc 39 fd 94 3c 65 e2 db a8 67 d6 74 eb 9f 0f e9 39 0c ed 73 11 17 0e 3d 16 3e a0 fb b0 1f 8f 4a fb 13 c3 de 0d 8f c2 ba 2d a6 95 a6 69 cf 6b 63 6a 9e 5c 51 ac 67 a7 72 78 e4 93 92 4f 52 49 35 f5 19 3e 5f 55 55 58 8a aa c9 6d 7e a7 e7 5c 55 9e e1 de 1a 58 1c 3c 94 a5 2d da d5 25 be fd de de 5a 96 68 ab 1f d9 d7 7f f3 ed 37 fd fb 34 7f 67 5d ff 00 cf b4 df f7 ec d7 db 1f 8f 95 e8 ab 1f d9 d7 7f f3 ed 37 fd fb 34 7f 67 5d ff 00 cf b4 df f7 ec d3 11 5e 8a b1 fd 9d 77 ff 00 3e d3 7f df b3 47 f6 75 df fc fb 4d ff 00 7e cd 00 57 a2 ac 7f 67 5d ff 00 cf b4 df f7 ec d1 fd 9d 77 ff 00 3e d3 7f df b3 40 15 e8 ab 1f d9 d7 7f f3 ed 37 fd fb 35 6a cb Data Ascii: p}b}=Zx]H;?>9<egt9s=>J-ikcj\QgrxORI5>_UUXm~\UX<-%Zh74g]74g]^w>GuM~Wg]w>@75j

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
105	192.168.2.4	49892	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:00 UTC	4419	OUT	GET /etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/social/twitter.svg HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373; tms_ref=; servicingTrafficManagement2=SegmentNewJourney; servicingTrafficManagement3=SegmentNewJourney; utag_main=v_id:01888fdc714a00035f72975780d20006f001706700918$_sn:1$_se:1$_ss:1$_st:1686042568844$ses_id:1686040768844%3Bexp-session$_pn:1%3Bexp-session$sskey:undefined%3Bexp-1688632768902; dclid=undefined
2023-06-06 08:39:00 UTC	4441	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1230 Connection: close Date: Tue, 06 Jun 2023 08:39:00 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains Last-Modified: Sat, 03 Jun 2023 04:23:42 GMT Accept-Ranges: bytes S: dispatcher3euwest2 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=7776000, s-maxage=7776000 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 a8d866886b5d25a5cfcb0df362279f88.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: pAAtic8Utb3oQ2WE_ifffss2QG4Gy1OzpUthn5mHo5Q3ejG7Ar3VFw==
2023-06-06 08:39:00 UTC	4441	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 74 77 69 74 74 65 72 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_twitter" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0p

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
106	192.168.2.4	49893	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:00 UTC	4420	OUT	GET /etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/social/youtube.svg HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hsbc.co.uk/etc.clientlibs/dpws/clientlibs-public/clientlib-default.min.7675554f68ae226cdde18af7ac43f392.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373; tms_ref=; servicingTrafficManagement2=SegmentNewJourney; servicingTrafficManagement3=SegmentNewJourney; utag_main=v_id:01888fdc714a00035f72975780d20006f001706700918$_sn:1$_se:1$_ss:1$_st:1686042568844$ses_id:1686040768844%3Bexp-session$_pn:1%3Bexp-session$sskey:undefined%3Bexp-1688632768902; dclid=undefined
2023-06-06 08:39:01 UTC	4442	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1192 Connection: close Date: Tue, 06 Jun 2023 08:39:00 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains Last-Modified: Sat, 03 Jun 2023 04:24:58 GMT Accept-Ranges: bytes S: dispatcher2euwest2 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=7776000, s-maxage=7776000 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 598adc26bc2de491984cda2fac7d893a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: ItPRm1uiAvPTj4FzV0iWrESVZawG8pNxmAFkgqJ9OnNP8iYTvo8h5A==
2023-06-06 08:39:01 UTC	4443	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 79 6f 75 74 75 62 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_youtube" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0p

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
107	192.168.2.4	49894	18.66.192.16	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:01 UTC	4444	OUT	GET /utag/tiqapp/utag.v.js?a=hsbc/uk-rbwm/202305311808&cb=1686040769808 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:39:01 UTC	4445	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2 Connection: close Last-Modified: Sat, 11 Mar 2023 06:57:46 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 2XUX04X5QEw0.xFya64khU._sHTRl_Pz Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 06 Jun 2023 08:39:01 GMT ETag: "7bc0ee636b3b83484fc3b9348863bd22" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 0f14828b89630f6555c6372e13fc999a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P1 X-Amz-Cf-Id: RvUsNO9rXAbqiCUYKq2NroO_jBolE9QEKjiuDhdMRWXG4HeaGf5WXQ== Age: 41 Cache-Control: max-age=300
2023-06-06 08:39:01 UTC	4445	IN	Data Raw: 2f 2f Data Ascii: //

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
108	192.168.2.4	49896	91.214.5.154	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:01 UTC	4445	OUT	POST /7198/handler9/session.json HTTP/1.1 Host: www.mcmprod.hsbc.co.uk Connection: keep-alive Content-Length: 449 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.hsbc.co.uk Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373; tms_ref=; servicingTrafficManagement2=SegmentNewJourney; servicingTrafficManagement3=SegmentNewJourney; utag_main=v_id:01888fdc714a00035f72975780d20006f001706700918$_sn:1$_se:1$_ss:1$_st:1686042568844$ses_id:1686040768844%3Bexp-session$_pn:1%3Bexp-session$sskey:undefined%3Bexp-1688632768902; dclid=undefined; usy46gabsosd=csaHSBC_16860407698230.9c19692167b8b11d73f6a0b5cb8d02e4_7198
2023-06-06 08:39:01 UTC	4447	OUT	Data Raw: 73 65 3d 5f 31 36 38 36 30 34 30 37 36 39 38 32 33 30 2e 39 63 31 39 36 39 32 31 36 37 62 38 62 31 31 64 37 33 66 36 61 30 62 35 63 62 38 64 30 32 65 34 5f 37 31 39 38 26 73 6a 3d 63 73 61 48 53 42 43 26 61 50 3d 5f 31 36 38 36 30 34 30 37 36 39 38 32 33 30 2e 39 63 31 39 36 39 32 31 36 37 62 38 62 31 31 64 37 33 66 36 61 30 62 35 63 62 38 64 30 32 65 34 5f 26 62 64 3d 74 72 75 65 26 73 69 3d 66 61 6c 73 65 26 61 4d 3d 5f 31 36 38 36 30 34 30 37 36 39 38 32 33 30 2e 39 63 31 39 36 39 32 31 36 37 62 38 62 31 31 64 37 33 66 36 61 30 62 35 63 62 38 64 30 32 65 34 5f 26 61 4f 3d 2d 31 26 76 62 3d 33 26 77 61 3d 38 2e 31 38 2e 31 38 34 36 30 26 61 57 3d 5f 31 36 38 36 30 34 30 37 36 39 38 32 33 30 2e 39 63 31 39 36 39 32 31 36 37 62 38 62 31 31 64 37 33 66 36 Data Ascii: se=_16860407698230.9c19692167b8b11d73f6a0b5cb8d02e4_7198&sj=csaHSBC&aP=_16860407698230.9c19692167b8b11d73f6a0b5cb8d02e4_&bd=true&si=false&aM=_16860407698230.9c19692167b8b11d73f6a0b5cb8d02e4_&aO=-1&vb=3&wa=8.18.18460&aW=_16860407698230.9c19692167b8b11d73f6
2023-06-06 08:39:01 UTC	4481	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:39:01 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Access-Control-Allow-Origin: https://www.hsbc.co.uk Access-Control-Allow-Credentials: true Content-Type: application/json X-Content-Type-Options: nosniff Pragma: no-cache Cache-Control: no-store Cache-Control: no-cache P3P: CP="NON ADMo DEVo PSAo PSDo IVAo IVDo OUR IND UNI COM NAV INT CNT LOC STA PUR PHY ONL" Content-Length: 7251 Set-Cookie: vtz47gabsosd=csaHSBC__2832383536_1686040769823_1686040741384_7198; secure; SameSite=None; path=/; HttpOnly Set-Cookie: csaHSBCCDID=null_3_c7f160f6f0dd4b84a2ade40154d2aeb6; secure; SameSite=None; path=/; HttpOnly Set-Cookie: csaHSBCCDuvt=3d5d8181e50046c29c68de5282d08ef7;expires=Fri, 3 Nov 2023 08:39:29; secure; SameSite=None; path=/; HttpOnly Vary: User-Agent S: LWSMCMRP101UK Connection: close Set-Cookie: MCM-PROD-WDC=3464809226.47873.0000; path=/; Httponly; Secure Set-Cookie: TS01977c0f=0105ea404a50112965a8513257aed8f15e8f85c522b3b0d4f9c48ba4cd9c005fe5b86501f3df570e92c1482de00a98f0c6eb55d936; Path=/
2023-06-06 08:39:01 UTC	4482	IN	Data Raw: 7b 22 77 69 6e 64 6f 77 56 61 72 69 61 62 6c 65 73 22 3a 7b 22 63 73 61 48 53 42 43 77 69 64 22 3a 22 32 38 33 32 33 38 33 34 33 33 33 22 2c 22 63 73 61 48 53 42 43 73 6e 22 3a 22 32 38 33 32 33 38 33 35 33 36 22 2c 22 63 73 61 48 53 42 43 63 66 67 22 3a 22 36 30 36 30 38 30 37 31 30 36 37 35 22 2c 22 63 73 61 48 53 42 43 6c 6e 22 3a 22 34 33 35 31 22 2c 22 63 73 61 48 53 42 43 67 65 74 49 6e 70 75 74 73 22 3a 22 31 25 33 46 45 72 72 6f 72 49 74 65 6d 25 33 62 31 25 33 46 66 6f 72 6d 49 6e 6c 69 6e 65 45 72 72 6f 72 25 33 62 31 25 33 46 65 72 72 6f 72 43 6f 6e 74 65 6e 74 73 25 33 62 31 25 33 46 65 72 72 6f 72 73 25 33 62 31 25 33 46 73 63 6d 42 61 6e 6e 65 72 49 6d 61 67 65 25 33 62 30 25 33 46 2a 68 74 73 65 2d 6d 74 67 2d 63 6f 6d 6d 6f 6e 2d 64 65 66 Data Ascii: {"windowVariables":{"csaHSBCwid":"28323834333","csaHSBCsn":"2832383536","csaHSBCcfg":"606080710675","csaHSBCln":"4351","csaHSBCgetInputs":"1%3FErrorItem%3b1%3FformInlineError%3b1%3FerrorContents%3b1%3Ferrors%3b1%3FscmBannerImage%3b0%3F*htse-mtg-common-def

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
109	192.168.2.4	49897	91.214.5.154	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:01 UTC	4447	OUT	GET /JavascriptInsert.js HTTP/1.1 Host: www.mcmprod.hsbc.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373; tms_ref=; servicingTrafficManagement2=SegmentNewJourney; servicingTrafficManagement3=SegmentNewJourney; utag_main=v_id:01888fdc714a00035f72975780d20006f001706700918$_sn:1$_se:1$_ss:1$_st:1686042568844$ses_id:1686040768844%3Bexp-session$_pn:1%3Bexp-session$sskey:undefined%3Bexp-1688632768902; dclid=undefined; usy46gabsosd=csaHSBC_16860407698230.9c19692167b8b11d73f6a0b5cb8d02e4_7198
2023-06-06 08:39:01 UTC	4448	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:39:01 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Type: application/x-javascript X-Content-Type-Options: nosniff Last-Modified: Wed, 16 Feb 2022 13:11:36 GMT Cache-Control: max-age=900 Cache-Control: s-maxage=900 ETag: 80efc8401fb7122eb30b0414016a5053 Content-Length: 97382 Vary: Accept-Encoding,User-Agent S: LWSMCMRP102UK Connection: close Set-Cookie: MCM-PROD-WDC=3481586442.47873.0000; path=/; Httponly; Secure Set-Cookie: TS01977c0f=0105ea404a0ae1643d10124947041d2106f5db06bef02c69c8b92131d5833891fae19c2af57d9a07897a601314990bc367f23003cd; Path=/
2023-06-06 08:39:01 UTC	4449	IN	Data Raw: 2f 2a 43 6f 70 79 72 69 67 68 74 20 c2 a9 20 32 30 30 30 2d 32 30 32 33 20 43 65 6c 65 62 72 75 73 20 54 65 63 68 6e 6f 6c 6f 67 69 65 73 2c 20 61 20 64 69 76 69 73 69 6f 6e 20 6f 66 20 44 34 74 34 20 53 6f 6c 75 74 69 6f 6e 73 20 50 6c 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 2a 2f 0a 77 69 6e 64 6f 77 2e 63 73 61 48 53 42 43 6f 54 50 3d 74 72 75 65 3b 77 69 6e 64 6f 77 2e 63 73 61 48 53 42 43 6f 57 41 3d 6e 65 77 20 41 72 72 61 79 28 29 3b 77 69 6e 64 6f 77 2e 63 73 61 48 53 42 43 77 49 3d 30 3b 77 69 6e 64 6f 77 2e 63 73 61 48 53 42 43 73 57 4f 3d 74 72 75 65 3b 66 75 6e 63 74 69 6f 6e 20 63 73 61 48 53 42 43 69 42 64 28 29 7b 69 66 28 63 73 61 48 53 42 43 42 64 29 63 73 61 48 53 42 43 42 64 28 27 63 73 61 48 53 42 43 27 2c Data Ascii: /Copyright 2000-2023 Celebrus Technologies, a division of D4t4 Solutions Plc. All rights reserved./window.csaHSBCoTP=true;window.csaHSBCoWA=new Array();window.csaHSBCwI=0;window.csaHSBCsWO=true;function csaHSBCiBd(){if(csaHSBCBd)csaHSBCBd('csaHSBC',
2023-06-06 08:39:01 UTC	4457	IN	Data Raw: 6c 2c 6b 3d 72 2e 69 64 56 61 6c 2c 6c 3d 72 2e 63 6c 61 73 73 56 61 6c 2c 74 3d 72 2e 68 72 65 66 56 61 6c 2c 6e 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 66 29 2c 6d 3d 30 2c 71 3d 6e 2e 6c 65 6e 67 74 68 3b 6d 3c 71 3b 6d 2b 2b 29 7b 76 61 72 20 70 3d 22 22 2c 76 2c 78 3d 21 30 2c 59 3d 6e 5b 6d 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 29 2c 42 3d 6e 5b 6d 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3b 69 66 28 21 53 61 28 42 29 29 7b 74 72 79 7b 70 3d 6e 5b 6d 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 29 7d 63 61 74 63 68 28 79 29 7b 7d 69 66 28 21 70 29 74 72 79 7b 70 3d 6e 5b 6d 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 Data Ascii: l,k=r.idVal,l=r.classVal,t=r.hrefVal,n=document.getElementsByTagName(f),m=0,q=n.length;m<q;m++){var p="",v,x=!0,Y=n[m].getAttribute("name"),B=n[m].getAttribute("id");if(!Sa(B)){try{p=n[m].getAttribute("class")}catch(y){}if(!p)try{p=n[m].getAttribute("clas
2023-06-06 08:39:01 UTC	4464	IN	Data Raw: 63 2b 22 26 62 77 3d 22 2b 67 2b 0a 22 26 62 78 3d 22 2b 65 2b 22 26 62 79 3d 22 2b 28 65 2d 66 29 2b 22 26 62 7a 3d 22 2b 6c 2b 22 26 63 61 3d 22 2b 6c 2b 22 26 61 44 3d 22 2b 65 2c 21 31 29 7d 7d 63 61 74 63 68 28 68 29 7b 42 28 68 2c 22 71 75 65 75 65 4e 57 45 76 65 6e 74 22 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 47 67 28 29 7b 69 66 28 79 29 74 72 79 7b 76 61 72 20 61 3d 41 28 22 65 76 65 6e 74 73 49 6e 50 61 63 6b 65 74 43 6f 75 6e 74 65 72 22 29 2c 62 3d 70 61 72 73 65 49 6e 74 28 61 29 3b 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 62 29 3f 30 3a 62 7d 63 61 74 63 68 28 63 29 7b 72 65 74 75 72 6e 20 50 28 29 2c 30 7d 65 6c 73 65 20 49 63 7c 7c 28 49 63 3d 30 29 3b 72 65 74 75 72 6e 20 49 63 7d 66 75 6e 63 74 69 6f 6e 20 61 66 28 29 7b 69 66 28 79 26 26 51 Data Ascii: c+"&bw="+g+"&bx="+e+"&by="+(e-f)+"&bz="+l+"&ca="+l+"&aD="+e,!1)}}catch(h){B(h,"queueNWEvent")}}function Gg(){if(y)try{var a=A("eventsInPacketCounter"),b=parseInt(a);return isNaN(b)?0:b}catch(c){return P(),0}else Ic\|\|(Ic=0);return Ic}function af(){if(y&&Q
2023-06-06 08:39:01 UTC	4472	IN	Data Raw: 6e 67 20 64 65 6c 61 79 65 64 20 66 6f 72 6d 20 73 75 62 6d 69 74 22 29 7d 72 65 74 75 72 6e 7d 7d 62 63 28 29 7d 7d 7d 63 61 74 63 68 28 71 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 4c 67 28 29 7b 69 66 28 21 4c 29 7b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 64 2b 22 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 22 29 3b 69 66 28 61 29 7b 61 2e 73 72 63 3d 22 22 3b 61 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 61 29 3b 61 2e 64 65 74 61 63 68 45 76 65 6e 74 3f 28 61 2e 64 65 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 6c 6f 61 64 22 2c 64 62 29 2c 61 2e 64 65 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 65 72 72 6f 72 22 2c 47 61 29 29 3a 61 2e 72 65 6d 6f Data Ascii: ng delayed form submit")}return}}bc()}}}catch(q){}}function Lg(){if(!L){var a=document.getElementById(d+"ScriptElement");if(a){a.src="";a.parentNode&&a.parentNode.removeChild(a);a.detachEvent?(a.detachEvent("onload",db),a.detachEvent("onerror",Ga)):a.remo
2023-06-06 08:39:01 UTC	4480	IN	Data Raw: 22 29 3b 65 6c 73 65 20 74 68 69 73 5b 64 2b 22 53 75 62 6d 69 74 22 5d 28 29 7d 65 6c 73 65 20 74 68 69 73 5b 64 2b 0a 22 53 75 62 6d 69 74 22 5d 28 29 3b 65 6c 73 65 20 54 28 22 70 72 6f 63 65 73 73 53 75 62 6d 69 74 46 75 6e 63 74 69 6f 6e 22 2c 22 4f 72 69 67 69 6e 61 6c 20 73 75 62 6d 69 74 20 66 75 6e 63 74 69 6f 6e 20 66 6f 72 20 66 6f 72 6d 20 75 6e 61 76 61 69 6c 61 62 6c 65 22 29 3b 74 68 69 73 5b 64 2b 22 66 6f 72 6d 49 73 50 72 6f 63 65 73 73 69 6e 67 22 5d 3d 22 22 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 66 28 61 29 7b 76 61 72 20 62 3d 77 69 6e 64 6f 77 3b 61 7c 7c 28 61 3d 62 2e 65 76 65 6e 74 29 3b 61 2e 73 72 63 45 6c 65 6d 65 6e 74 3f 65 63 28 61 2e 73 72 63 45 6c 65 6d 65 6e 74 29 3a 61 2e 74 61 72 67 65 74 3f 65 63 28 61 2e 74 61 72 67 65 Data Ascii: ");else this[d+"Submit"]()}else this[d+"Submit"]();else T("processSubmitFunction","Original submit function for form unavailable");this[d+"formIsProcessing"]=""}}function tf(a){var b=window;a\|\|(a=b.event);a.srcElement?ec(a.srcElement):a.target?ec(a.targe
2023-06-06 08:39:01 UTC	4489	IN	Data Raw: 54 28 22 70 72 6f 63 65 73 73 4f 6e 53 75 62 6d 69 74 22 2c 22 55 6e 72 65 63 6f 67 6e 69 73 65 64 20 65 76 65 6e 74 20 66 6f 72 6d 61 74 20 2d 20 6e 6f 20 73 72 63 45 6c 65 6d 65 6e 74 20 6f 72 20 74 61 72 67 65 74 20 70 72 6f 70 65 72 74 69 65 73 20 61 76 61 69 6c 61 62 6c 65 22 29 7d 66 75 6e 63 74 69 6f 6e 20 75 66 28 61 2c 62 2c 63 29 7b 63 3d 65 28 22 26 61 70 3d 66 6f 72 6d 6c 6f 6f 6b 75 70 26 61 74 3d 46 4f 52 4d 22 2c 22 61 69 22 2c 63 2c 31 29 3b 63 3d 65 28 63 2c 22 61 6e 22 2c 62 2c 31 29 3b 63 3d 65 28 63 2c 22 75 64 22 2c 61 2c 30 29 3b 4f 28 22 58 22 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 76 66 28 61 29 7b 69 66 28 6e 75 6c 6c 21 3d 61 26 26 61 2e 65 6c 65 6d 65 6e 74 73 29 7b 76 61 72 20 62 3d 49 61 28 61 29 2c 63 3d 4a 61 28 61 29 3b 61 Data Ascii: T("processOnSubmit","Unrecognised event format - no srcElement or target properties available")}function uf(a,b,c){c=e("&ap=formlookup&at=FORM","ai",c,1);c=e(c,"an",b,1);c=e(c,"ud",a,0);O("X",c)}function vf(a){if(null!=a&&a.elements){var b=Ia(a),c=Ja(a);a
2023-06-06 08:39:01 UTC	4497	IN	Data Raw: 53 69 6c 76 65 72 6c 69 67 68 74 45 76 65 6e 74 46 6f 72 4d 65 64 69 61 45 6c 65 6d 65 6e 74 22 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 5a 67 28 61 29 7b 76 61 72 20 62 3d 22 22 3b 74 72 79 7b 62 3d 61 2e 69 64 7d 63 61 74 63 68 28 63 29 7b 7d 69 66 28 21 62 29 74 72 79 7b 62 3d 61 2e 6e 61 6d 65 7d 63 61 74 63 68 28 63 29 7b 7d 61 3d 65 28 22 22 2c 22 74 72 22 2c 22 53 69 6c 76 65 72 6c 69 67 68 74 22 2c 31 29 3b 61 3d 65 28 61 2c 22 74 73 22 2c 22 6e 6f 20 69 6e 66 6f 22 2c 31 29 3b 61 3d 65 28 61 2c 22 61 69 22 2c 62 2c 31 29 3b 4a 28 22 4f 22 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 24 67 28 61 2c 62 29 7b 74 72 79 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 57 63 29 7b 76 61 72 20 64 3d 61 2e 66 69 6e 64 4e 61 6d 65 28 57 63 5b 63 5d 29 3b 56 63 28 64 2c Data Ascii: SilverlightEventForMediaElement")}}}function Zg(a){var b="";try{b=a.id}catch(c){}if(!b)try{b=a.name}catch(c){}a=e("","tr","Silverlight",1);a=e(a,"ts","no info",1);a=e(a,"ai",b,1);J("O",a)}function $g(a,b){try{for(var c in Wc){var d=a.findName(Wc[c]);Vc(d,
2023-06-06 08:39:01 UTC	4506	IN	Data Raw: 28 63 29 7b 7d 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 72 79 7b 69 66 28 61 29 7b 76 61 72 20 62 3d 22 26 61 70 3d 74 77 69 74 74 65 72 22 2c 62 3d 65 28 62 2c 22 76 67 22 2c 61 2e 64 61 74 61 2e 73 6f 75 72 63 65 5f 74 77 65 65 74 5f 69 64 29 3b 4a 28 22 6e 22 2c 62 29 7d 7d 63 61 74 63 68 28 63 29 7b 7d 7d 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 26 26 4a 28 22 6d 22 2c 22 26 61 70 3d 74 77 69 74 74 65 72 22 29 7d 3b 69 66 28 74 77 74 74 72 26 26 74 77 74 74 72 2e 61 6e 79 77 68 65 72 65 29 7b 69 66 28 6c 68 29 74 72 79 7b 6d 68 28 29 2c 74 77 74 74 72 2e 61 6e 79 77 68 65 72 65 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 72 79 7b 61 2e 62 69 6e 64 28 22 61 75 74 68 43 6f 6d 70 6c 65 74 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b Data Ascii: (c){}},c=function(a){try{if(a){var b="&ap=twitter",b=e(b,"vg",a.data.source_tweet_id);J("n",b)}}catch(c){}},d=function(a){a&&J("m","&ap=twitter")};if(twttr&&twttr.anywhere){if(lh)try{mh(),twttr.anywhere(function(a){try{a.bind("authComplete",function(a,b){
2023-06-06 08:39:01 UTC	4514	IN	Data Raw: 69 66 69 65 72 22 5d 26 26 28 6e 2e 72 75 6c 65 49 64 3d 6c 5b 64 2b 22 72 75 6c 65 49 64 65 6e 74 69 66 69 65 72 22 5d 2c 74 3d 21 30 29 3b 6c 5b 64 2b 22 63 6f 6e 74 65 6e 74 49 64 65 6e 74 69 66 69 65 72 22 5d 26 26 28 6e 2e 63 6f 6e 74 65 6e 74 49 64 3d 6c 5b 64 2b 22 63 6f 6e 74 65 6e 74 49 64 65 6e 74 69 66 69 65 72 22 5d 2c 74 3d 21 30 29 3b 6c 5b 64 2b 22 63 75 73 74 6f 6d 49 64 65 6e 74 69 66 69 65 72 22 5d 26 26 28 6e 2e 63 75 73 74 6f 6d 49 64 3d 6c 5b 64 2b 22 63 75 73 74 6f 6d 49 64 65 6e 74 69 66 69 65 72 22 5d 2c 74 3d 21 30 29 3b 6b 3d 74 3f 6e 3a 6e 75 6c 6c 7d 65 6c 73 65 20 6b 3d 6e 75 6c 6c 7d 69 66 28 66 3d 3d 3d 71 62 28 66 29 29 62 72 65 61 6b 3b 66 3d 71 62 28 66 29 7d 7d 63 61 74 63 68 28 6d 29 7b 42 28 6d 2c 22 65 72 72 6f 72 20 Data Ascii: ifier"]&&(n.ruleId=l[d+"ruleIdentifier"],t=!0);l[d+"contentIdentifier"]&&(n.contentId=l[d+"contentIdentifier"],t=!0);l[d+"customIdentifier"]&&(n.customId=l[d+"customIdentifier"],t=!0);k=t?n:null}else k=null}if(f===qb(f))break;f=qb(f)}}catch(m){B(m,"error
2023-06-06 08:39:01 UTC	4522	IN	Data Raw: 75 65 3d 21 31 2c 77 69 6e 64 6f 77 5b 64 2b 22 64 54 4f 22 5d 3d 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 7a 68 2c 35 30 30 29 29 3a 28 77 69 6e 64 6f 77 5b 64 2b 22 6e 61 76 53 65 6e 74 22 5d 3d 21 31 2c 52 61 3d 22 22 29 7d 65 6c 73 65 20 77 69 6e 64 6f 77 5b 64 2b 22 6e 61 76 53 65 6e 74 22 5d 3d 21 31 2c 52 61 3d 22 22 7d 7d 7d 63 61 74 63 68 28 65 29 7b 77 69 6e 64 6f 77 5b 64 2b 22 6e 61 76 53 65 6e 74 22 5d 3d 21 31 2c 52 61 3d 22 22 7d 44 62 3f 64 6f 63 75 6d 65 6e 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 49 62 2c 21 31 29 3a 64 6f 63 75 6d 65 6e 74 2e 64 65 74 61 63 68 45 76 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 64 65 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 63 6c 69 63 6b 22 2c 49 Data Ascii: ue=!1,window[d+"dTO"]=window.setTimeout(zh,500)):(window[d+"navSent"]=!1,Ra="")}else window[d+"navSent"]=!1,Ra=""}}}catch(e){window[d+"navSent"]=!1,Ra=""}Db?document.removeEventListener("click",Ib,!1):document.detachEvent&&document.detachEvent("onclick",I
2023-06-06 08:39:01 UTC	4530	IN	Data Raw: 64 20 30 29 2c 5a 63 28 21 31 29 29 7d 53 62 26 26 68 2e 73 65 74 54 69 6d 65 6f 75 74 28 51 66 2c 32 30 30 29 3b 28 55 61 7c 7c 56 61 7c 7c 7a 61 7c 7c 57 7c 7c 65 61 29 26 26 68 2e 73 65 74 54 69 6d 65 6f 75 74 28 77 66 2c 32 30 30 29 3b 43 28 68 2c 22 62 65 66 6f 72 65 75 6e 6c 6f 61 64 22 2c 77 68 2c 76 6f 69 64 20 30 29 3b 43 28 68 2c 22 75 6e 6c 6f 61 64 22 2c 78 68 2c 76 6f 69 64 20 30 29 3b 4d 65 26 26 43 28 68 2c 22 65 72 72 6f 72 22 2c 48 68 2c 76 6f 69 64 20 30 29 3b 53 62 26 26 43 28 68 2c 22 72 65 73 69 7a 65 22 2c 49 68 2c 76 6f 69 64 20 30 29 7d 63 61 74 63 68 28 65 29 7b 42 28 65 2c 22 61 74 74 61 63 68 42 61 73 69 63 48 61 6e 64 6c 65 72 73 22 29 7d 74 72 79 7b 76 61 72 20 77 3d 68 5b 64 2b 22 63 6f 6c 6c 65 63 74 45 78 63 6c 75 64 65 22 Data Ascii: d 0),Zc(!1))}Sb&&h.setTimeout(Qf,200);(Ua\|\|Va\|\|za\|\|W\|\|ea)&&h.setTimeout(wf,200);C(h,"beforeunload",wh,void 0);C(h,"unload",xh,void 0);Me&&C(h,"error",Hh,void 0);Sb&&C(h,"resize",Ih,void 0)}catch(e){B(e,"attachBasicHandlers")}try{var w=h[d+"collectExclude"
2023-06-06 08:39:01 UTC	4539	IN	Data Raw: 65 61 64 79 22 2c 22 72 65 63 6f 6e 6e 65 63 74 69 6e 67 22 5d 2c 0a 41 66 3d 22 73 74 6f 70 70 65 64 20 63 6f 6e 74 61 63 74 69 6e 67 20 62 75 66 66 65 72 69 6e 67 20 70 6c 61 79 69 6e 67 20 70 61 75 73 65 64 20 73 65 65 6b 69 6e 67 20 62 75 73 79 22 2e 73 70 6c 69 74 28 22 20 22 29 3b 41 66 2e 74 72 61 6e 73 3d 22 74 72 61 6e 73 69 74 69 6f 6e 69 6e 67 22 3b 76 61 72 20 61 68 3d 5b 22 73 74 6f 70 70 65 64 22 2c 22 70 6c 61 79 69 6e 67 22 2c 22 70 61 75 73 65 64 22 2c 22 62 75 66 66 65 72 69 6e 67 22 2c 2c 22 72 65 61 64 79 22 5d 2c 6a 63 3d 7b 7d 2c 45 66 3d 21 31 2c 54 63 3d 5b 5d 2c 6c 62 3d 5b 5d 2c 59 63 3d 5b 5d 2c 66 61 3d 5b 5d 2c 57 64 3d 21 31 2c 55 63 3d 22 22 2c 24 64 3d 7b 7d 2c 57 63 3d 7b 7d 2c 77 64 3d 7b 7d 3b 68 5b 64 2b 22 6d 65 64 69 Data Ascii: eady","reconnecting"],Af="stopped contacting buffering playing paused seeking busy".split(" ");Af.trans="transitioning";var ah=["stopped","playing","paused","buffering",,"ready"],jc={},Ef=!1,Tc=[],lb=[],Yc=[],fa=[],Wd=!1,Uc="",$d={},Wc={},wd={};h[d+"medi
2023-06-06 08:39:01 UTC	4547	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 61 2c 64 29 7b 76 61 72 20 65 2c 6d 2c 6e 2c 74 3b 69 66 28 21 30 3d 3d 3d 6c 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 67 65 74 48 61 73 68 20 61 66 74 65 72 20 73 65 74 74 69 6e 67 20 48 4d 41 43 20 6b 65 79 22 29 3b 6e 3d 43 28 64 29 3b 73 77 69 74 63 68 28 61 29 7b 63 61 73 65 20 22 48 45 58 22 3a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 44 28 61 2c 6b 2c 6e 29 7d 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 42 36 34 22 3a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 45 28 61 2c 6b 2c 6e 29 7d 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 42 59 54 45 53 22 3a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 46 28 61 2c 6b 29 7d 3b 62 72 65 61 6b 3b 63 Data Ascii: unction(a,d){var e,m,n,t;if(!0===l)throw Error("Cannot call getHash after setting HMAC key");n=C(d);switch(a){case "HEX":e=function(a){return D(a,k,n)};break;case "B64":e=function(a){return E(a,k,n)};break;case "BYTES":e=function(a){return F(a,k)};break;c

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
11	192.168.2.4	49706	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:20 UTC	215	OUT	GET /front_end/front_end_files/lightbox.css HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hs-login.online/front_end/front_end_files/ursula.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:20 UTC	282	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:20 GMT Content-Type: text/css Content-Length: 6646 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:42 GMT ETag: "19f6-5fd654318e292" Accept-Ranges: bytes Vary: Accept-Encoding
2023-06-06 08:38:20 UTC	282	IN	Data Raw: 2e 75 72 73 75 6c 61 20 2e 6f 76 65 72 6c 61 79 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 0a 20 20 20 20 74 6f 70 3a 30 3b 0a 20 20 20 20 6c 65 66 74 3a 30 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 22 69 6d 61 67 65 73 2f 4c 69 67 68 74 62 6f 78 2f 6f 76 65 72 6c 61 79 2d 62 67 2e 70 6e 67 22 29 20 72 65 70 65 61 74 20 30 20 30 3b 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 30 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 33 30 70 78 20 30 3b 0a 7d 0a 2e 75 72 73 75 6c 61 20 2e 6c 69 67 68 74 62 6f 78 20 7b 0a 20 20 20 09 77 69 64 74 68 3a 20 39 35 30 70 78 3b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 0a 20 20 20 20 74 6f 70 3a 30 3b 0a 20 20 20 20 6c 65 66 74 3a 30 3b 0a 20 20 20 20 62 61 Data Ascii: .ursula .overlay { position:fixed; top:0; left:0; background:url("images/Lightbox/overlay-bg.png") repeat 0 0; z-index: 100; padding: 30px 0;}.ursula .lightbox { width: 950px; position:fixed; top:0; left:0; ba

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
110	192.168.2.4	49898	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:01 UTC	4505	OUT	GET /etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/social/youtube.svg HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373; tms_ref=; servicingTrafficManagement2=SegmentNewJourney; servicingTrafficManagement3=SegmentNewJourney; utag_main=v_id:01888fdc714a00035f72975780d20006f001706700918$_sn:1$_se:1$_ss:1$_st:1686042568844$ses_id:1686040768844%3Bexp-session$_pn:1%3Bexp-session$sskey:undefined%3Bexp-1688632768902; dclid=undefined; usy46gabsosd=csaHSBC_16860407698230.9c19692167b8b11d73f6a0b5cb8d02e4_7198
2023-06-06 08:39:01 UTC	4538	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1192 Connection: close Date: Tue, 06 Jun 2023 08:39:00 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains Last-Modified: Sat, 03 Jun 2023 04:24:58 GMT Accept-Ranges: bytes S: dispatcher2euwest2 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=7776000, s-maxage=7776000 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 fc6dca2df1221c0bec817610bc20e504.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: sqkS9eZ-01yP7LbpCeS8M4WLe_qoR3BFL8V11YO4wtqel7Vp2UWuDQ==
2023-06-06 08:39:01 UTC	4538	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 79 6f 75 74 75 62 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_youtube" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0p

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
111	192.168.2.4	49900	91.214.5.154	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:01 UTC	4555	OUT	POST /7198/28323834333/XBW09WEA78JG/jsEvent.json HTTP/1.1 Host: www.mcmprod.hsbc.co.uk Connection: keep-alive Content-Length: 1862 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.hsbc.co.uk Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373; tms_ref=; servicingTrafficManagement2=SegmentNewJourney; servicingTrafficManagement3=SegmentNewJourney; utag_main=v_id:01888fdc714a00035f72975780d20006f001706700918$_sn:1$_se:1$_ss:1$_st:1686042568844$ses_id:1686040768844%3Bexp-session$_pn:1%3Bexp-session$sskey:undefined%3Bexp-1688632768902; dclid=undefined; vtz47gabsosd=csaHSBC__2832383536_1686040769823_1686040741384_7198; csaHSBCCDID=null_3_c7f160f6f0dd4b84a2ade40154d2aeb6; csaHSBCCDuvt=3d5d8181e50046c29c68de5282d08ef7; usy46gabsosd=csaHSBC__2832383536_1686040769823_1686040741384_7198; csaHSBCkey=c7f160f6f0dd4b84a2ade40154d2aeb6; csaHSBCuvt=3d5d8181e50046c29c68de5282d08ef7_1686040741384_2832383536_1686040741384_1; csaHSBCDBID=null_3; MCM-PROD-WDC=3481586442.47873.0000; TS01977c0f=0105ea404a0ae1643d10124947041d2106f5db06bef02c69c8b92131d5833891fae19c2af57d9a07897a601314990bc367f23003cd
2023-06-06 08:39:01 UTC	4556	OUT	Data Raw: 7a 3d 6e 75 6c 6c 5f 33 5f 63 37 66 31 36 30 66 36 66 30 64 64 34 62 38 34 61 32 61 64 65 34 30 31 35 34 64 32 61 65 62 36 26 79 3d 38 33 32 33 36 35 31 34 33 38 33 21 32 61 3d 4c 31 36 21 35 33 61 45 32 21 2b 30 37 31 2b 34 44 3d 30 34 38 36 37 30 75 3d 6c 61 70 33 3d 74 62 75 65 2b 72 74 2b 65 6e 3d 64 64 6f 61 75 6d 6f 63 4f 30 2b 31 2b 30 61 78 79 3d 2b 61 61 31 36 30 37 30 3d 2d 3d 5f 61 51 38 36 30 39 36 63 31 34 38 32 36 39 2e 39 33 64 37 31 31 36 31 36 39 32 38 62 37 62 30 62 38 34 5f 61 33 66 35 63 30 62 64 30 2b 32 36 3d 32 65 6f 3d 2b 61 61 41 31 43 3d 2b 61 31 61 71 33 2b 3d 30 37 61 67 30 2b 2b 30 35 33 34 64 3d 2b 61 61 36 33 39 31 61 3d 30 31 32 6a 3d 2b 3d 30 30 2b 61 6b 3d 61 53 33 2b 2b 61 33 31 32 5a 3d 3d 3d 39 61 62 2b 61 31 76 72 34 Data Ascii: z=null_3_c7f160f6f0dd4b84a2ade40154d2aeb6&y=83236514383!2a=L16!53aE2!+071+4D=048670u=lap3=tbue+rt+en=ddoaumocO0+1+0axy=+aa16070=-=_aQ86096c148269.93d711616928b7b0b84_a3f5c0bd0+26=2eo=+aaA1C=+a1aq3+=07ag0++0534d=+aa6391a=012j=+=00+ak=aS3++a312Z===9ab+a1vr4
2023-06-06 08:39:01 UTC	4558	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:39:01 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Access-Control-Allow-Origin: https://www.hsbc.co.uk Access-Control-Allow-Credentials: true Content-Type: application/json X-Content-Type-Options: nosniff Pragma: no-cache Cache-Control: no-store Cache-Control: no-cache P3P: CP="NON ADMo DEVo PSAo PSDo IVAo IVDo OUR IND UNI COM NAV INT CNT LOC STA PUR PHY ONL" Content-Length: 50 Set-Cookie: vtz47gabsosd=csaHSBC__2832383536_1686040770437_1686040741384_7198; secure; SameSite=None; path=/; HttpOnly Set-Cookie: csaHSBCCDID=null_3_c7f160f6f0dd4b84a2ade40154d2aeb6; secure; SameSite=None; path=/; HttpOnly Vary: User-Agent S: LWSMCMRP102UK Connection: close Set-Cookie: TS01977c0f=0105ea404a0ae1643d10124947041d2106f5db06bef02c69c8b92131d5833891fae19c2af57d9a07897a601314990bc367f23003cd; Path=/
2023-06-06 08:39:01 UTC	4559	IN	Data Raw: 7b 22 63 6f 6e 74 65 6e 74 52 65 73 70 6f 6e 73 65 22 3a 22 5b 5d 22 2c 22 72 65 73 70 6f 6e 73 65 52 65 63 65 69 76 65 64 22 3a 22 74 72 75 65 22 7d Data Ascii: {"contentResponse":"[]","responseReceived":"true"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
112	192.168.2.4	49901	91.214.5.154	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:02 UTC	4559	OUT	POST /7198/28323834333/XBW09WEA78JG/jsEvent.json HTTP/1.1 Host: www.mcmprod.hsbc.co.uk Connection: keep-alive Content-Length: 151 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.hsbc.co.uk Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373; tms_ref=; servicingTrafficManagement2=SegmentNewJourney; servicingTrafficManagement3=SegmentNewJourney; utag_main=v_id:01888fdc714a00035f72975780d20006f001706700918$_sn:1$_se:1$_ss:1$_st:1686042568844$ses_id:1686040768844%3Bexp-session$_pn:1%3Bexp-session$sskey:undefined%3Bexp-1688632768902; dclid=undefined; csaHSBCCDID=null_3_c7f160f6f0dd4b84a2ade40154d2aeb6; csaHSBCCDuvt=3d5d8181e50046c29c68de5282d08ef7; usy46gabsosd=csaHSBC__2832383536_1686040769823_1686040741384_7198; csaHSBCkey=c7f160f6f0dd4b84a2ade40154d2aeb6; csaHSBCuvt=3d5d8181e50046c29c68de5282d08ef7_1686040741384_2832383536_1686040741384_1; csaHSBCDBID=null_3; MCM-PROD-WDC=3481586442.47873.0000; TS01977c0f=0105ea404a0ae1643d10124947041d2106f5db06bef02c69c8b92131d5833891fae19c2af57d9a07897a601314990bc367f23003cd; vtz47gabsosd=csaHSBC__2832383536_1686040770437_1686040741384_7198
2023-06-06 08:39:02 UTC	4561	OUT	Data Raw: 7a 3d 6e 75 6c 6c 5f 33 5f 63 37 66 31 36 30 66 36 66 30 64 64 34 62 38 34 61 32 61 64 65 34 30 31 35 34 64 32 61 65 62 36 26 79 3d 38 33 32 33 36 35 31 34 33 38 33 21 32 2b 45 3d 3d 31 21 35 33 21 61 31 32 4a 34 30 36 38 30 61 44 36 30 36 38 37 37 6d 6c 6f 65 73 36 70 3d 2b 61 61 67 69 74 7a 39 2b 37 65 64 61 64 74 3d 2b 62 64 36 66 62 38 66 3d 63 30 66 31 36 30 64 65 34 64 31 64 34 32 61 34 61 34 30 2b 68 74 31 3a 35 65 62 32 61 61 3d 36 74 70 73 Data Ascii: z=null_3_c7f160f6f0dd4b84a2ade40154d2aeb6&y=83236514383!2+E==1!53!a12J40680aD606877mloes6p=+aagitz9+7edadt=+bd6fb8f=c0f160de4d1d42a4a40+ht1:5eb2aa=6tps
2023-06-06 08:39:02 UTC	4561	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:39:02 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Access-Control-Allow-Origin: https://www.hsbc.co.uk Access-Control-Allow-Credentials: true Content-Type: application/json X-Content-Type-Options: nosniff Pragma: no-cache Cache-Control: no-store Cache-Control: no-cache P3P: CP="NON ADMo DEVo PSAo PSDo IVAo IVDo OUR IND UNI COM NAV INT CNT LOC STA PUR PHY ONL" Content-Length: 27 Set-Cookie: vtz47gabsosd=csaHSBC__2832383536_1686040770668_1686040741384_7198; secure; SameSite=None; path=/; HttpOnly Set-Cookie: csaHSBCCDID=null_3_c7f160f6f0dd4b84a2ade40154d2aeb6; secure; SameSite=None; path=/; HttpOnly Vary: User-Agent S: LWSMCMRP102UK Connection: close Set-Cookie: TS01977c0f=0105ea404a0ae1643d10124947041d2106f5db06bef02c69c8b92131d5833891fae19c2af57d9a07897a601314990bc367f23003cd; Path=/
2023-06-06 08:39:02 UTC	4562	IN	Data Raw: 7b 22 72 65 73 70 6f 6e 73 65 52 65 63 65 69 76 65 64 22 3a 22 74 72 75 65 22 7d Data Ascii: {"responseReceived":"true"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
113	192.168.2.4	49910	91.214.5.154	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:07 UTC	4562	OUT	POST /7198/28323834333/XBW09WEA78JG/jsEvent.json HTTP/1.1 Host: www.mcmprod.hsbc.co.uk Connection: keep-alive Content-Length: 1172 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.hsbc.co.uk Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373; tms_ref=; servicingTrafficManagement2=SegmentNewJourney; servicingTrafficManagement3=SegmentNewJourney; utag_main=v_id:01888fdc714a00035f72975780d20006f001706700918$_sn:1$_se:1$_ss:1$_st:1686042568844$ses_id:1686040768844%3Bexp-session$_pn:1%3Bexp-session$sskey:undefined%3Bexp-1688632768902; dclid=undefined; csaHSBCCDID=null_3_c7f160f6f0dd4b84a2ade40154d2aeb6; csaHSBCCDuvt=3d5d8181e50046c29c68de5282d08ef7; usy46gabsosd=csaHSBC__2832383536_1686040769823_1686040741384_7198; csaHSBCkey=c7f160f6f0dd4b84a2ade40154d2aeb6; csaHSBCuvt=3d5d8181e50046c29c68de5282d08ef7_1686040741384_2832383536_1686040741384_1; csaHSBCDBID=null_3; MCM-PROD-WDC=3481586442.47873.0000; TS01977c0f=0105ea404a0ae1643d10124947041d2106f5db06bef02c69c8b92131d5833891fae19c2af57d9a07897a601314990bc367f23003cd; vtz47gabsosd=csaHSBC__2832383536_1686040770668_1686040741384_7198
2023-06-06 08:39:07 UTC	4563	OUT	Data Raw: 7a 3d 6e 75 6c 6c 5f 33 5f 63 37 66 31 36 30 66 36 66 30 64 64 34 62 38 34 61 32 61 64 65 34 30 31 35 34 64 32 61 65 62 36 26 79 3d 38 33 32 33 36 35 31 34 33 38 33 21 32 2b 45 3d 3d 31 21 35 33 21 61 31 33 78 34 30 33 34 35 61 44 36 30 36 38 37 37 6c 2b 63 6e 74 34 70 3d 2b 61 69 65 63 65 6e 65 76 71 71 37 74 3d 32 32 42 71 71 71 35 71 32 32 74 73 33 41 32 71 42 6e 74 71 32 70 37 42 76 65 32 65 54 79 32 5f 44 57 53 65 33 41 32 71 32 50 71 71 32 32 32 32 41 5f 41 54 44 71 50 49 6f 74 47 71 32 32 43 71 65 6e 65 76 72 71 32 6e 61 63 75 70 33 41 32 71 32 53 32 32 32 43 71 65 6f 71 72 69 71 32 32 65 6e 65 6d 32 74 61 44 61 61 63 50 6c 32 32 32 32 43 32 74 71 41 71 71 33 71 61 74 65 71 79 32 71 32 44 71 32 61 54 71 32 71 71 32 70 71 33 32 32 32 32 41 61 6d 61 Data Ascii: z=null_3_c7f160f6f0dd4b84a2ade40154d2aeb6&y=83236514383!2+E==1!53!a13x40345aD606877l+cnt4p=+aiecenevqq7t=22Bqqq5q22ts3A2qBntq2p7Bve2eTy2_DWSe3A2q2Pqq2222A_ATDqPIotGq22Cqenevrq2nacup3A2q2S222Cqeoqriq22enem2taDaacPl2222C2tqAqq3qateqy2q2Dq2aTq2qq2pq32222Aama
2023-06-06 08:39:07 UTC	4564	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:39:07 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Access-Control-Allow-Origin: https://www.hsbc.co.uk Access-Control-Allow-Credentials: true Content-Type: application/json X-Content-Type-Options: nosniff Pragma: no-cache Cache-Control: no-store Cache-Control: no-cache P3P: CP="NON ADMo DEVo PSAo PSDo IVAo IVDo OUR IND UNI COM NAV INT CNT LOC STA PUR PHY ONL" Content-Length: 50 Set-Cookie: vtz47gabsosd=csaHSBC__2832383536_1686040775434_1686040741384_7198; secure; SameSite=None; path=/; HttpOnly Set-Cookie: csaHSBCCDID=null_3_c7f160f6f0dd4b84a2ade40154d2aeb6; secure; SameSite=None; path=/; HttpOnly Vary: User-Agent S: LWSMCMRP102UK Connection: close Set-Cookie: TS01977c0f=0105ea404a0ae1643d10124947041d2106f5db06bef02c69c8b92131d5833891fae19c2af57d9a07897a601314990bc367f23003cd; Path=/
2023-06-06 08:39:07 UTC	4565	IN	Data Raw: 7b 22 63 6f 6e 74 65 6e 74 52 65 73 70 6f 6e 73 65 22 3a 22 5b 5d 22 2c 22 72 65 73 70 6f 6e 73 65 52 65 63 65 69 76 65 64 22 3a 22 74 72 75 65 22 7d Data Ascii: {"contentResponse":"[]","responseReceived":"true"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
114	192.168.2.4	49911	91.214.5.154	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:08 UTC	4565	OUT	POST /7198/28323834333/XBW09WEA78JG/jsEvent.json HTTP/1.1 Host: www.mcmprod.hsbc.co.uk Connection: keep-alive Content-Length: 150 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.hsbc.co.uk Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373; tms_ref=; servicingTrafficManagement2=SegmentNewJourney; servicingTrafficManagement3=SegmentNewJourney; utag_main=v_id:01888fdc714a00035f72975780d20006f001706700918$_sn:1$_se:1$_ss:1$_st:1686042568844$ses_id:1686040768844%3Bexp-session$_pn:1%3Bexp-session$sskey:undefined%3Bexp-1688632768902; dclid=undefined; csaHSBCCDID=null_3_c7f160f6f0dd4b84a2ade40154d2aeb6; csaHSBCCDuvt=3d5d8181e50046c29c68de5282d08ef7; usy46gabsosd=csaHSBC__2832383536_1686040769823_1686040741384_7198; csaHSBCkey=c7f160f6f0dd4b84a2ade40154d2aeb6; csaHSBCuvt=3d5d8181e50046c29c68de5282d08ef7_1686040741384_2832383536_1686040741384_1; csaHSBCDBID=null_3; MCM-PROD-WDC=3481586442.47873.0000; TS01977c0f=0105ea404a0ae1643d10124947041d2106f5db06bef02c69c8b92131d5833891fae19c2af57d9a07897a601314990bc367f23003cd; vtz47gabsosd=csaHSBC__2832383536_1686040775434_1686040741384_7198
2023-06-06 08:39:08 UTC	4567	OUT	Data Raw: 7a 3d 6e 75 6c 6c 5f 33 5f 63 37 66 31 36 30 66 36 66 30 64 64 34 62 38 34 61 32 61 64 65 34 30 31 35 34 64 32 61 65 62 36 26 79 3d 38 33 32 33 36 35 31 34 33 38 33 21 32 2b 45 3d 3d 31 21 35 33 21 61 31 34 52 34 30 38 35 37 61 44 36 30 36 38 37 37 6f 6e 74 6d 65 33 70 3d 2b 61 63 75 64 7a 3d 2b 74 66 6d 70 63 6f 74 65 6c 65 64 66 30 38 34 31 63 37 66 36 36 30 64 65 34 64 32 35 34 62 61 64 61 32 30 31 61 74 74 3a 68 34 62 36 61 65 3d 31 2b 70 73 Data Ascii: z=null_3_c7f160f6f0dd4b84a2ade40154d2aeb6&y=83236514383!2+E==1!53!a14R40857aD606877ontme3p=+acudz=+tfmpcoteledf0841c7f660de4d254bada201att:h4b6ae=1+ps
2023-06-06 08:39:08 UTC	4567	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:39:08 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Access-Control-Allow-Origin: https://www.hsbc.co.uk Access-Control-Allow-Credentials: true Content-Type: application/json X-Content-Type-Options: nosniff Pragma: no-cache Cache-Control: no-store Cache-Control: no-cache P3P: CP="NON ADMo DEVo PSAo PSDo IVAo IVDo OUR IND UNI COM NAV INT CNT LOC STA PUR PHY ONL" Content-Length: 27 Set-Cookie: vtz47gabsosd=csaHSBC__2832383536_1686040777385_1686040741384_7198; secure; SameSite=None; path=/; HttpOnly Set-Cookie: csaHSBCCDID=null_3_c7f160f6f0dd4b84a2ade40154d2aeb6; secure; SameSite=None; path=/; HttpOnly Vary: User-Agent S: LWSMCMRP102UK Connection: close Set-Cookie: TS01977c0f=0105ea404a0ae1643d10124947041d2106f5db06bef02c69c8b92131d5833891fae19c2af57d9a07897a601314990bc367f23003cd; Path=/
2023-06-06 08:39:08 UTC	4568	IN	Data Raw: 7b 22 72 65 73 70 6f 6e 73 65 52 65 63 65 69 76 65 64 22 3a 22 74 72 75 65 22 7d Data Ascii: {"responseReceived":"true"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
115	192.168.2.4	49912	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:08 UTC	4568	OUT	GET /etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/favicons/favicon.ico HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373; tms_ref=; servicingTrafficManagement2=SegmentNewJourney; servicingTrafficManagement3=SegmentNewJourney; utag_main=v_id:01888fdc714a00035f72975780d20006f001706700918$_sn:1$_se:1$_ss:1$_st:1686042568844$ses_id:1686040768844%3Bexp-session$_pn:1%3Bexp-session$sskey:undefined%3Bexp-1688632768902; dclid=undefined; usy46gabsosd=csaHSBC__2832383536_1686040769823_1686040741384_7198; csaHSBCkey=c7f160f6f0dd4b84a2ade40154d2aeb6; csaHSBCuvt=3d5d8181e50046c29c68de5282d08ef7_1686040741384_2832383536_1686040741384_1; csaHSBCDBID=null_3
2023-06-06 08:39:08 UTC	4571	IN	HTTP/1.1 200 OK Content-Type: image/vnd.microsoft.icon Content-Length: 15086 Connection: close Date: Tue, 06 Jun 2023 08:39:08 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains Last-Modified: Sat, 03 Jun 2023 04:26:04 GMT Accept-Ranges: bytes S: dispatcher2euwest2 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=7776000, s-maxage=7776000 X-Cache: Miss from cloudfront Via: 1.1 39ed76664123c3090231ff0882467152.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: Nb8hq2rCnU77RRAs5zQpFrJ-IruL2DMJ2rTgo4P5nBv7SFvbHjJmmw==
2023-06-06 08:39:08 UTC	4572	IN	Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 00 %6 % h6(0` $

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
116	192.168.2.4	49914	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:08 UTC	4569	OUT	GET /etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/manifest.json HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373; tms_ref=; servicingTrafficManagement2=SegmentNewJourney; servicingTrafficManagement3=SegmentNewJourney; utag_main=v_id:01888fdc714a00035f72975780d20006f001706700918$_sn:1$_se:1$_ss:1$_st:1686042568844$ses_id:1686040768844%3Bexp-session$_pn:1%3Bexp-session$sskey:undefined%3Bexp-1688632768902; dclid=undefined; usy46gabsosd=csaHSBC__2832383536_1686040769823_1686040741384_7198; csaHSBCkey=c7f160f6f0dd4b84a2ade40154d2aeb6; csaHSBCuvt=3d5d8181e50046c29c68de5282d08ef7_1686040741384_2832383536_1686040741384_1; csaHSBCDBID=null_3
2023-06-06 08:39:08 UTC	4586	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 499 Connection: close Date: Tue, 06 Jun 2023 08:39:08 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains Last-Modified: Sat, 03 Jun 2023 04:22:47 GMT Accept-Ranges: bytes S: dispatcher3euwest2 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=1200, s-maxage=1200 X-Cache: Miss from cloudfront Via: 1.1 37e2872b8b14122ba8fe3a34c3bb506a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: zOam6WD2JpDs2ntgMfbQWsgLB6WzY8nnGu0YWcQxD7f9FEAAO_a2Og==
2023-06-06 08:39:08 UTC	4587	IN	Data Raw: 7b 0a 20 20 22 6e 61 6d 65 22 3a 20 22 48 53 42 43 22 2c 0a 20 20 22 73 68 6f 72 74 5f 6e 61 6d 65 22 3a 20 22 48 53 42 43 22 2c 0a 20 20 22 69 63 6f 6e 73 22 3a 20 5b 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 2f 65 74 63 2e 63 6c 69 65 6e 74 6c 69 62 73 2f 64 70 77 73 2f 63 6c 69 65 6e 74 6c 69 62 73 2d 70 75 62 6c 69 63 2f 63 6c 69 65 6e 74 6c 69 62 2d 73 69 74 65 2f 72 65 73 6f 75 72 63 65 73 2f 66 61 76 69 63 6f 6e 73 2f 61 6e 64 72 6f 69 64 2d 63 68 72 6f 6d 65 2d 31 34 34 78 31 34 34 2e 70 6e 67 22 2c 0a 20 20 20 20 20 20 22 73 69 7a 65 73 22 3a 20 22 31 34 34 78 31 34 34 22 2c 0a 20 20 20 20 20 20 22 74 79 70 65 22 3a 20 22 69 6d 61 67 65 2f 70 6e 67 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 73 72 63 22 Data Ascii: { "name": "HSBC", "short_name": "HSBC", "icons": [ { "src": "/etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/favicons/android-chrome-144x144.png", "sizes": "144x144", "type": "image/png" }, { "src"

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
117	192.168.2.4	49915	108.138.36.11	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:08 UTC	4570	OUT	GET /adrum-ext.0086dbec5e8a6e717bf36d3a06b62042.js HTTP/1.1 Host: cdn.appdynamics.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:39:09 UTC	4631	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 46324 Connection: close Date: Tue, 06 Jun 2023 08:39:09 GMT Server: nginx/1.16.1 Last-Modified: Thu, 15 Sep 2016 22:05:47 GMT ETag: "57db1b3b-b4f4" access-control-allow-origin: * access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Cache-Control: public, max-age=2678400, s-max-age=14400 timing-allow-origin: * Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 da7d0e99d4b5322bc1c874b2af707374.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P2 X-Amz-Cf-Id: Y-SKc4K16kF5jl2do-IZXk-FmGZSgr1--WwIHyzEvj1yT4lO68eFxg==
2023-06-06 08:39:09 UTC	4631	IN	Data Raw: 3b 2f 2a 20 56 65 72 73 69 6f 6e 20 30 30 38 36 64 62 65 63 35 65 38 61 36 65 37 31 37 62 66 33 36 64 33 61 30 36 62 36 32 30 34 32 20 76 3a 34 2e 32 2e 37 2e 30 2c 20 63 3a 66 31 33 64 38 36 39 30 34 37 35 61 64 63 37 65 61 30 33 64 37 34 65 39 62 62 63 63 34 63 62 37 39 34 33 63 63 62 38 38 2c 20 62 3a 38 38 37 39 20 6e 3a 32 2d 34 2e 32 2e 37 2e 6e 65 78 74 2d 62 75 69 6c 64 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 33 2c 20 41 70 70 44 79 6e 61 6d 69 63 73 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 0a 20 44 65 72 69 76 61 74 69 76 65 20 6f 66 20 47 6f 6f 67 6c 65 20 45 70 69 73 6f 64 65 73 3a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 Data Ascii: ;/* Version 0086dbec5e8a6e717bf36d3a06b62042 v:4.2.7.0, c:f13d8690475adc7ea03d74e9bbcc4cb7943ccb88, b:8879 n:2-4.2.7.next-build /(function(){/ Copyright (c) 2013, AppDynamics, Inc. All rights reserved. Derivative of Google Episodes: Copyright 201
2023-06-06 08:39:09 UTC	4645	IN	Data Raw: 73 2e 53 61 3d 5b 5d 3b 74 68 69 73 2e 4a 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 68 29 7b 69 66 28 65 26 26 68 26 26 30 3c 0a 68 2e 6c 65 6e 67 74 68 29 7b 74 68 69 73 2e 55 67 3d 65 3b 66 6f 72 28 76 61 72 20 63 3d 6e 65 77 20 62 2c 6c 3d 6e 65 77 20 62 2c 66 3d 30 3b 66 3c 68 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 7b 76 61 72 20 67 3d 68 5b 66 5d 2c 70 3d 61 2e 75 74 69 6c 73 2e 70 61 72 73 65 55 52 49 28 61 2e 75 74 69 6c 73 2e 6e 2e 47 28 67 2e 6e 61 6d 65 29 29 2c 79 3d 67 2e 69 6e 69 74 69 61 74 6f 72 54 79 70 65 2c 7a 3d 64 2e 56 2e 6a 63 28 70 29 2c 77 3d 6e 65 77 20 64 2e 7a 62 28 67 29 3b 74 68 69 73 2e 53 61 2e 70 75 73 68 28 7b 75 3a 74 68 69 73 2e 24 67 28 70 29 2c 69 3a 63 2e 65 63 28 74 68 69 73 2e 74 63 2c 79 29 2c 72 3a 6c 2e 65 63 28 74 68 Data Ascii: s.Sa=[];this.Je=function(e,h){if(e&&h&&0<h.length){this.Ug=e;for(var c=new b,l=new b,f=0;f<h.length;f++){var g=h[f],p=a.utils.parseURI(a.utils.n.G(g.name)),y=g.initiatorType,z=d.V.jc(p),w=new d.zb(g);this.Sa.push({u:this.$g(p),i:c.ec(this.tc,y),r:l.ec(th
2023-06-06 08:39:09 UTC	4654	IN	Data Raw: 28 62 29 29 3b 65 2e 44 3d 62 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 70 64 2e 6c 6f 61 64 28 29 3b 69 66 28 65 2e 64 67 28 62 29 29 65 2e 44 3d 62 3b 65 6c 73 65 7b 61 2e 6c 6f 67 28 22 4d 37 36 22 29 3b 76 61 72 20 63 3d 74 68 69 73 3b 74 68 69 73 2e 68 68 2e 6c 6f 61 64 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 26 26 28 62 3d 7b 76 65 72 3a 61 2e 63 6f 6e 66 2e 61 67 65 6e 74 56 65 72 2c 69 64 3a 62 2c 74 74 6c 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2b 65 2e 44 64 7d 2c 63 2e 70 64 2e 73 61 76 65 28 62 29 2c 65 2e 44 3d 62 2c 61 2e 6c 6f 67 28 22 4d 37 37 22 29 29 7d 29 3b 63 3d 74 68 69 73 3b 61 2e 75 74 69 6c 73 2e 74 72 79 50 65 72 69 6f 64 69 63 61 Data Ascii: (b));e.D=b};e.prototype.ah=function(){var b=this.pd.load();if(e.dg(b))e.D=b;else{a.log("M76");var c=this;this.hh.load(function(b){b&&(b={ver:a.conf.agentVer,id:b,ttl:(new Date).getTime()+e.Dd},c.pd.save(b),e.D=b,a.log("M77"))});c=this;a.utils.tryPeriodica
2023-06-06 08:39:09 UTC	4670	IN	Data Raw: 43 6f 6e 66 26 26 61 2e 63 6f 6e 66 2e 75 73 65 72 43 6f 6e 66 2e 63 68 61 6e 6e 65 6c 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 61 2e 63 6f 6e 66 2e 75 73 65 72 43 6f 6e 66 2e 63 68 61 6e 6e 65 6c 2e 62 75 66 66 65 72 4d 6f 64 65 3f 61 2e 63 6f 6e 66 2e 75 73 65 72 43 6f 6e 66 2e 63 68 61 6e 6e 65 6c 2e 62 75 66 66 65 72 4d 6f 64 65 3a 21 30 3b 74 68 69 73 2e 71 61 3d 2d 31 3b 74 68 69 73 2e 56 67 3d 65 3b 74 68 69 73 2e 4f 65 3d 62 3b 74 68 69 73 2e 46 2e 70 75 73 68 28 6e 65 77 20 64 2e 4a 64 28 63 29 29 3b 74 68 69 73 2e 46 2e 70 75 73 68 28 6e 65 77 20 64 2e 77 64 29 3b 74 68 69 73 2e 46 2e 70 75 73 68 28 6e 65 77 20 64 2e 48 29 7d 62 2e 63 72 65 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 63 3b 62 2e 52 Data Ascii: Conf&&a.conf.userConf.channel&&"undefined"!==typeof a.conf.userConf.channel.bufferMode?a.conf.userConf.channel.bufferMode:!0;this.qa=-1;this.Vg=e;this.Oe=b;this.F.push(new d.Jd(c));this.F.push(new d.wd);this.F.push(new d.H)}b.create=function(){var e,c;b.R
2023-06-06 08:39:09 UTC	4672	IN	Data Raw: 74 79 70 65 2e 24 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 76 65 6e 74 73 2e 6c 65 6e 67 74 68 3c 0a 61 2e 63 6f 6e 66 2e 55 64 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 24 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 2e 24 61 29 72 65 74 75 72 6e 21 30 3b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 61 5b 63 5d 3b 69 66 28 64 2e 65 76 65 6e 74 55 72 6c 26 26 30 3d 3d 64 2e 65 76 65 6e 74 55 72 6c 2e 69 6e 64 65 78 4f 66 28 22 68 74 74 70 73 3a 22 29 29 72 65 74 75 72 6e 21 30 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 45 76 65 6e 74 73 57 69 74 68 50 61 72 65 6e 74 47 55 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 Data Ascii: type.$f=function(){return this.events.length<a.conf.Ud};b.prototype.$a=function(a,b){if(b.$a)return!0;for(var c=0;c<a.length;c++){var d=a[c];if(d.eventUrl&&0==d.eventUrl.indexOf("https:"))return!0}};b.prototype.getEventsWithParentGUID=function(a){return
2023-06-06 08:39:09 UTC	4678	IN	Data Raw: 62 61 29 3b 61 2e 45 62 3d 66 7d 29 28 61 2e 65 76 65 6e 74 73 7c 7c 28 61 2e 65 76 65 6e 74 73 3d 7b 7d 29 29 7d 29 28 67 7c 7c 28 67 3d 7b 7d 29 29 3b 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 66 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 61 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 74 28 62 2c 61 29 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 6b 65 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 64 3d 61 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 6b 65 2e 63 61 6c 6c 28 74 68 69 73 2c 62 29 3b 64 26 26 28 64 2e 6d 65 74 72 69 63 73 2e 56 44 43 3d 62 2e 64 69 67 65 73 74 43 6f 75 6e 74 28 29 7c 7c 30 29 3b 72 65 74 75 72 6e 20 64 7d 3b 72 65 74 Data Ascii: ba);a.Eb=f})(a.events\|\|(a.events={}))})(g\|\|(g={}));(function(a){(function(a){var f=function(a){function b(){a.apply(this,arguments)}t(b,a);b.prototype.make=function(b){var d=a.prototype.make.call(this,b);d&&(d.metrics.VDC=b.digestCount()\|\|0);return d};ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
118	192.168.2.4	49913	62.138.155.102	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:08 UTC	4587	OUT	GET /counter-service/embedp2/va.js HTTP/1.1 Host: www.askus.hsbc.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373; tms_ref=; servicingTrafficManagement2=SegmentNewJourney; servicingTrafficManagement3=SegmentNewJourney; utag_main=v_id:01888fdc714a00035f72975780d20006f001706700918$_sn:1$_se:1$_ss:1$_st:1686042568844$ses_id:1686040768844%3Bexp-session$_pn:1%3Bexp-session$sskey:undefined%3Bexp-1688632768902; dclid=undefined; usy46gabsosd=csaHSBC__2832383536_1686040769823_1686040741384_7198; csaHSBCkey=c7f160f6f0dd4b84a2ade40154d2aeb6; csaHSBCuvt=3d5d8181e50046c29c68de5282d08ef7_1686040741384_2832383536_1686040741384_1; csaHSBCDBID=null_3
2023-06-06 08:39:08 UTC	4590	IN	HTTP/1.1 302 Found Date: Tue, 06 Jun 2023 08:44:21 GMT Server: Apache Strict-Transport-Security: max-age=16070400; includeSubdomains; Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT Access-Control-Max-Age: 1000 Access-Control-Allow-Headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token Location: https://www.askus.hsbc.co.uk/counter-service/embedp2new/va.js Cache-Control: max-age=0 Expires: Tue, 06 Jun 2023 08:44:21 GMT Content-Length: 245 Connection: close Content-Type: text/html; charset=iso-8859-1
2023-06-06 08:39:08 UTC	4591	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 73 6b 75 73 2e 68 73 62 63 2e 63 6f 2e 75 6b 2f 63 6f 75 6e 74 65 72 2d 73 65 72 76 69 63 65 2f 65 6d 62 65 64 70 32 6e 65 77 2f 76 61 2e 6a 73 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.askus.hsbc.co.uk/counter-service/embedp2new/va.js">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
119	192.168.2.4	49917	91.214.5.154	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:08 UTC	4589	OUT	POST /7198/28323834333/XBW09WEA78JG/jsEvent.json HTTP/1.1 Host: www.mcmprod.hsbc.co.uk Connection: keep-alive Content-Length: 155 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.hsbc.co.uk Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373; tms_ref=; servicingTrafficManagement2=SegmentNewJourney; servicingTrafficManagement3=SegmentNewJourney; utag_main=v_id:01888fdc714a00035f72975780d20006f001706700918$_sn:1$_se:1$_ss:1$_st:1686042568844$ses_id:1686040768844%3Bexp-session$_pn:1%3Bexp-session$sskey:undefined%3Bexp-1688632768902; dclid=undefined; csaHSBCCDID=null_3_c7f160f6f0dd4b84a2ade40154d2aeb6; csaHSBCCDuvt=3d5d8181e50046c29c68de5282d08ef7; usy46gabsosd=csaHSBC__2832383536_1686040769823_1686040741384_7198; csaHSBCkey=c7f160f6f0dd4b84a2ade40154d2aeb6; csaHSBCuvt=3d5d8181e50046c29c68de5282d08ef7_1686040741384_2832383536_1686040741384_1; csaHSBCDBID=null_3; MCM-PROD-WDC=3481586442.47873.0000; TS01977c0f=0105ea404a0ae1643d10124947041d2106f5db06bef02c69c8b92131d5833891fae19c2af57d9a07897a601314990bc367f23003cd; vtz47gabsosd=csaHSBC__2832383536_1686040777385_1686040741384_7198
2023-06-06 08:39:08 UTC	4590	OUT	Data Raw: 7a 3d 6e 75 6c 6c 5f 33 5f 63 37 66 31 36 30 66 36 66 30 64 64 34 62 38 34 61 32 61 64 65 34 30 31 35 34 64 32 61 65 62 36 26 79 3d 38 33 32 33 36 35 31 34 33 38 33 21 32 2b 45 3d 3d 31 21 35 33 21 61 31 35 75 34 30 31 35 37 61 44 36 30 36 38 37 37 6f 74 65 65 6e 34 70 3d 2b 61 6e 74 63 65 74 70 6c 74 6e 74 76 65 6f 6d 73 63 66 31 36 30 64 7a 65 2b 37 66 3d 63 30 34 61 34 30 64 36 66 62 38 64 34 32 61 61 61 3d 36 2b 65 34 64 31 35 65 62 32 68 74 31 3a 74 70 73 Data Ascii: z=null_3_c7f160f6f0dd4b84a2ade40154d2aeb6&y=83236514383!2+E==1!53!a15u40157aD606877oteen4p=+antcetpltntveomscf160dze+7f=c04a40d6fb8d42aaa=6+e4d15eb2ht1:tps
2023-06-06 08:39:08 UTC	4591	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:39:08 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Access-Control-Allow-Origin: https://www.hsbc.co.uk Access-Control-Allow-Credentials: true Content-Type: application/json X-Content-Type-Options: nosniff Pragma: no-cache Cache-Control: no-store Cache-Control: no-cache P3P: CP="NON ADMo DEVo PSAo PSDo IVAo IVDo OUR IND UNI COM NAV INT CNT LOC STA PUR PHY ONL" Content-Length: 27 Set-Cookie: vtz47gabsosd=csaHSBC__2832383536_1686040777415_1686040741384_7198; secure; SameSite=None; path=/; HttpOnly Set-Cookie: csaHSBCCDID=null_3_c7f160f6f0dd4b84a2ade40154d2aeb6; secure; SameSite=None; path=/; HttpOnly Vary: User-Agent S: LWSMCMRP102UK Connection: close Set-Cookie: TS01977c0f=0105ea404a0ae1643d10124947041d2106f5db06bef02c69c8b92131d5833891fae19c2af57d9a07897a601314990bc367f23003cd; Path=/
2023-06-06 08:39:08 UTC	4592	IN	Data Raw: 7b 22 72 65 73 70 6f 6e 73 65 52 65 63 65 69 76 65 64 22 3a 22 74 72 75 65 22 7d Data Ascii: {"responseReceived":"true"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
12	192.168.2.4	49707	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:20 UTC	216	OUT	GET /front_end/front_end_files/login-box.css HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hs-login.online/front_end/front_end_files/ursula.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:20 UTC	289	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:20 GMT Content-Type: text/css Content-Length: 4099 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:43 GMT ETag: "1003-5fd65431c6cd3" Accept-Ranges: bytes Vary: Accept-Encoding
2023-06-06 08:38:20 UTC	289	IN	Data Raw: 2e 75 72 73 75 6c 61 20 2e 6c 6f 67 69 6e 42 6f 78 20 7b 0a 09 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 32 37 70 78 3b 0a 7d 0a 2e 75 72 73 75 6c 61 20 2e 67 72 69 64 5f 38 2e 6c 6f 67 69 6e 42 6f 78 20 7b 0a 09 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 65 35 65 35 65 35 3b 0a 09 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 6e 6f 6e 65 3b 0a 09 70 61 64 64 69 6e 67 2d 74 6f 70 3a 30 3b 0a 09 77 69 64 74 68 3a 34 33 34 70 78 3b 0a 7d 0a 2e 75 72 73 75 6c 61 20 2e 6c 6f 67 69 6e 42 6f 78 20 2e 72 6f 77 20 7b 0a 09 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 36 70 78 3b 0a 7d 0a 2e 75 72 73 75 6c 61 20 2e 6c 6f 67 69 6e 42 6f 78 20 2e 72 6f 77 77 69 64 74 68 7b 0a 09 77 69 64 74 68 3a 35 30 30 70 78 3b 09 0a 7d 0a 2e 75 72 Data Ascii: .ursula .loginBox {padding-top: 27px;}.ursula .grid_8.loginBox {border-right: 1px solid #e5e5e5;border-bottom:none;padding-top:0;width:434px;}.ursula .loginBox .row {padding-bottom: 16px;}.ursula .loginBox .rowwidth{width:500px;}.ur

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
120	192.168.2.4	49918	178.249.96.141	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:08 UTC	4592	OUT	GET /api/js/8181236?&cb=lpCb67426x29262&t=sp&ts=1686040771115&pid=114028263&tid=4972823587&pt=HSBC%20UK%20-%20Personal%20%26%20Online%20Banking&u=https%3A%2F%2Fwww.hsbc.co.uk%2F&sec=%5B%22%22%5D&df=0&os=0&sdes=%5B%7B%22type%22%3A%22ctmrinfo%22%2C%22info%22%3A%7B%22ctype%22%3A%22en_gb%22%7D%7D%2C%7B%22type%22%3A%22cart%22%2C%22numItems%22%3A0%2C%22products%22%3A%5B%7B%22product%22%3A%7B%22name%22%3A%22page_security_level-0%22%2C%22price%22%3Anull%7D%2C%22quantity%22%3Anull%7D%2C%7B%22product%22%3A%7B%22name%22%3A%22site_region-Europe_UK_United_Kingdom_HSBC_Bank_Plc_HSBC%22%2C%22price%22%3Anull%7D%2C%22quantity%22%3Anull%7D%5D%7D%5D&identities=%5B%7B%22iss%22%3A%22LivePerson%22%2C%22acr%22%3A%220%22%7D%5D HTTP/1.1 Host: lo0.v.liveperson.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:39:09 UTC	4629	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:39:09 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Set-Cookie: LPVisitorID=JkZDY4ZThjNmZkYmZiMTUx; Expires=Wed, 05-Jun-2024 08:39:09 GMT; Path=/; HttpOnly Set-Cookie: LPSessionID=Y0UXDFinQhG9AMSBGzKPtQ; Path=/api/js/8181236; HttpOnly Cache-Control: no-store Server: ws Access-Control-Allow-Methods: GET, POST, PATCH Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token Access-Control-Expose-Headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-06-06 08:39:09 UTC	4630	IN	Data Raw: 32 36 64 0d 0a 6c 70 43 62 36 37 34 32 36 78 32 39 32 36 32 28 7b 22 73 64 6b 43 6f 6e 66 22 3a 7b 22 6c 70 56 69 73 69 74 6f 72 49 64 22 3a 22 4a 6b 5a 44 59 34 5a 54 68 6a 4e 6d 5a 6b 59 6d 5a 69 4d 54 55 78 22 2c 22 6c 70 53 65 73 73 69 6f 6e 49 64 22 3a 22 59 30 55 58 44 46 69 6e 51 68 47 39 41 4d 53 42 47 7a 4b 50 74 51 22 2c 22 6c 70 4c 61 73 74 56 69 73 69 74 22 3a 22 31 36 38 36 30 34 30 37 34 39 30 32 34 22 2c 22 70 72 6f 74 6f 63 6f 6c 56 65 72 73 69 6f 6e 22 3a 22 38 2e 36 2e 33 2e 30 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 68 73 62 63 2e 63 6f 2e 75 6b 22 2c 22 65 78 70 69 72 61 74 69 6f 6e 22 3a 33 31 35 33 36 30 30 30 7d 2c 22 6d 65 73 73 61 67 65 73 54 6f 56 69 73 69 74 6f 72 22 3a 5b 7b 22 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 4c 45 5f 45 Data Ascii: 26dlpCb67426x29262({"sdkConf":{"lpVisitorId":"JkZDY4ZThjNmZkYmZiMTUx","lpSessionId":"Y0UXDFinQhG9AMSBGzKPtQ","lpLastVisit":"1686040749024","protocolVersion":"8.6.3.0","domain":"hsbc.co.uk","expiration":31536000},"messagesToVisitor":[{"destination":"LE_E

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
121	192.168.2.4	49920	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:08 UTC	4593	OUT	GET /etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/favicons/favicon.ico HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373; tms_ref=; servicingTrafficManagement2=SegmentNewJourney; servicingTrafficManagement3=SegmentNewJourney; utag_main=v_id:01888fdc714a00035f72975780d20006f001706700918$_sn:1$_se:1$_ss:1$_st:1686042568844$ses_id:1686040768844%3Bexp-session$_pn:1%3Bexp-session$sskey:undefined%3Bexp-1688632768902; dclid=undefined; usy46gabsosd=csaHSBC__2832383536_1686040769823_1686040741384_7198; csaHSBCkey=c7f160f6f0dd4b84a2ade40154d2aeb6; csaHSBCuvt=3d5d8181e50046c29c68de5282d08ef7_1686040741384_2832383536_1686040741384_1; csaHSBCDBID=null_3
2023-06-06 08:39:08 UTC	4596	IN	HTTP/1.1 200 OK Content-Type: image/vnd.microsoft.icon Content-Length: 15086 Connection: close Date: Tue, 06 Jun 2023 08:39:08 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains Last-Modified: Sat, 03 Jun 2023 04:26:04 GMT Accept-Ranges: bytes S: dispatcher2euwest2 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=7776000, s-maxage=7776000 X-Cache: Hit from cloudfront Via: 1.1 5b3be43b5ff3292b36e9c737ff94254a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: h-hXoozCNwBaSJXXi8OYv-F8b2l4BWgNkfUENI-SCYLOQeJ86J8kng==
2023-06-06 08:39:08 UTC	4596	IN	Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 00 %6 % h6(0` $
2023-06-06 08:39:08 UTC	4609	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 23 34 ec 04 23 34 ec 17 23 34 ec 1a 23 34 ec 19 23 34 ec 19 23 34 ec 19 23 34 ec 19 23 34 ec 19 23 34 ec 19 23 34 ec 19 23 34 ec 19 23 34 ec 19 23 34 ec 19 23 34 ec 19 23 34 ec 19 23 34 ec 1a 23 34 ec 17 23 34 ec 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: #4#4#4#4#4#4#4#4#4#4#4#4#4#4#4#4#4#4

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
122	192.168.2.4	49919	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:08 UTC	4594	OUT	GET /etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/favicons/android-chrome-144x144.png HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373; tms_ref=; servicingTrafficManagement2=SegmentNewJourney; servicingTrafficManagement3=SegmentNewJourney; utag_main=v_id:01888fdc714a00035f72975780d20006f001706700918$_sn:1$_se:1$_ss:1$_st:1686042568844$ses_id:1686040768844%3Bexp-session$_pn:1%3Bexp-session$sskey:undefined%3Bexp-1688632768902; dclid=undefined; usy46gabsosd=csaHSBC__2832383536_1686040769823_1686040741384_7198; csaHSBCkey=c7f160f6f0dd4b84a2ade40154d2aeb6; csaHSBCuvt=3d5d8181e50046c29c68de5282d08ef7_1686040741384_2832383536_1686040741384_1; csaHSBCDBID=null_3
2023-06-06 08:39:09 UTC	4612	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 16500 Connection: close Date: Tue, 06 Jun 2023 08:39:09 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains Last-Modified: Sat, 03 Jun 2023 04:25:06 GMT Accept-Ranges: bytes S: dispatcher2euwest2 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=7776000, s-maxage=7776000 X-Cache: Miss from cloudfront Via: 1.1 56abe0fedc00b031003c08f0306dae62.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: pzaJv9UwpexBcT_6sZxXJVj7w8nB4lwHO-0pV25vqEmnJjGdCOG0SQ==
2023-06-06 08:39:09 UTC	4613	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 90 00 00 00 90 08 06 00 00 00 e7 46 e2 b8 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 39 ee 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 20 20 20 20 20 20 22 3e 0a 20 20 20 3c 72 64 66 Data Ascii: PNGIHDRFpHYs9iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf
2023-06-06 08:39:09 UTC	4629	IN	Data Raw: 43 2d 9e 99 ca 83 50 a3 c6 5c 33 e7 bd 27 a4 70 28 02 01 10 01 10 01 10 01 10 21 00 22 00 22 00 22 00 22 04 40 04 40 04 40 04 40 84 00 88 00 88 00 88 00 88 10 00 11 00 11 00 11 00 11 00 11 02 20 02 20 02 20 02 20 42 00 44 00 44 00 44 00 44 08 80 08 80 08 80 08 80 08 01 10 29 29 ff 0e 00 28 3c 4a 4b 84 39 78 52 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: C-P\3'p(!""""@@@@ BDDDD))(<JK9xRIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
123	192.168.2.4	49921	62.138.155.102	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:08 UTC	4611	OUT	GET /counter-service/embedp2new/va.js HTTP/1.1 Host: www.askus.hsbc.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373; tms_ref=; servicingTrafficManagement2=SegmentNewJourney; servicingTrafficManagement3=SegmentNewJourney; utag_main=v_id:01888fdc714a00035f72975780d20006f001706700918$_sn:1$_se:1$_ss:1$_st:1686042568844$ses_id:1686040768844%3Bexp-session$_pn:1%3Bexp-session$sskey:undefined%3Bexp-1688632768902; dclid=undefined; usy46gabsosd=csaHSBC__2832383536_1686040769823_1686040741384_7198; csaHSBCkey=c7f160f6f0dd4b84a2ade40154d2aeb6; csaHSBCuvt=3d5d8181e50046c29c68de5282d08ef7_1686040741384_2832383536_1686040741384_1; csaHSBCDBID=null_3
2023-06-06 08:39:09 UTC	4650	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:44:22 GMT Server: Apache Strict-Transport-Security: max-age=16070400; includeSubdomains; Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT Access-Control-Max-Age: 1000 Access-Control-Allow-Headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token Last-Modified: Fri, 18 Dec 2020 07:10:34 GMT ETag: "5c4-5b6b7cdfc988d" Accept-Ranges: bytes Content-Length: 1476 Vary: Accept-Encoding Cache-Control: max-age=604800 Expires: Tue, 13 Jun 2023 08:44:22 GMT ServerLoc: 2 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Connection: close Content-Type: application/javascript
2023-06-06 08:39:09 UTC	4651	IN	Data Raw: 76 61 72 20 76 61 56 65 72 73 69 6f 6e 3d 30 2c 76 61 46 69 6c 65 56 65 72 73 69 6f 6e 3d 7b 7d 2c 76 61 46 75 6c 6c 50 61 74 68 3d 22 2f 2f 77 77 77 2e 61 73 6b 75 73 2e 68 73 62 63 2e 63 6f 2e 75 6b 2f 63 6f 75 6e 74 65 72 2d 73 65 72 76 69 63 65 2f 65 6d 62 65 64 70 32 6e 65 77 22 3b 66 75 6e 63 74 69 6f 6e 20 69 6e 6a 65 63 74 56 41 28 64 61 74 61 29 7b 76 61 72 20 66 69 6c 65 56 65 72 73 69 6f 6e 3d 64 61 74 61 2e 76 65 72 2c 76 61 73 63 72 69 70 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 69 66 28 76 61 56 65 72 73 69 6f 6e 3d 64 61 74 61 2e 76 65 72 2c 21 64 61 74 61 2e 67 6c 6f 62 61 6c 29 66 6f 72 28 76 61 72 20 6b 65 79 20 69 6e 20 76 61 46 69 6c 65 56 65 72 73 69 6f 6e 3d 64 61 74 61 Data Ascii: var vaVersion=0,vaFileVersion={},vaFullPath="//www.askus.hsbc.co.uk/counter-service/embedp2new";function injectVA(data){var fileVersion=data.ver,vascript=document.createElement("script");if(vaVersion=data.ver,!data.global)for(var key in vaFileVersion=data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
124	192.168.2.4	49925	178.249.96.141	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:09 UTC	4644	OUT	GET /api/js/8181236?sid=Y0UXDFinQhG9AMSBGzKPtQ&cb=lpCb34561x96459&t=pl&ts=1686040777570&pid=114028263&tid=4972823587&vid=JkZDY4ZThjNmZkYmZiMTUx HTTP/1.1 Host: lo0.v.liveperson.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:39:09 UTC	4653	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:39:09 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: no-store Server: ws Access-Control-Allow-Methods: GET, POST, PATCH Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token Access-Control-Expose-Headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-06-06 08:39:09 UTC	4654	IN	Data Raw: 36 66 0d 0a 6c 70 43 62 33 34 35 36 31 78 39 36 34 35 39 28 7b 22 73 6d 74 43 6f 6e 66 22 3a 7b 22 6b 65 65 70 41 6c 69 76 65 46 72 65 71 22 3a 31 30 7d 2c 22 73 64 6b 43 6f 6e 66 22 3a 7b 22 74 68 69 72 64 50 61 72 74 79 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 2c 22 6d 65 73 73 61 67 65 73 54 6f 56 69 73 69 74 6f 72 22 3a 5b 5d 7d 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 6flpCb34561x96459({"smtConf":{"keepAliveFreq":10},"sdkConf":{"thirdPartyEnabled":false},"messagesToVisitor":[]});0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
125	192.168.2.4	49926	62.138.155.102	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:09 UTC	4676	OUT	GET /counter-service/embedp2new/ver.js?callback=cvversion&v=1686040778 HTTP/1.1 Host: www.askus.hsbc.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373; tms_ref=; servicingTrafficManagement2=SegmentNewJourney; servicingTrafficManagement3=SegmentNewJourney; utag_main=v_id:01888fdc714a00035f72975780d20006f001706700918$_sn:1$_se:1$_ss:1$_st:1686042568844$ses_id:1686040768844%3Bexp-session$_pn:1%3Bexp-session$sskey:undefined%3Bexp-1688632768902; dclid=undefined; usy46gabsosd=csaHSBC__2832383536_1686040769823_1686040741384_7198; csaHSBCkey=c7f160f6f0dd4b84a2ade40154d2aeb6; csaHSBCuvt=3d5d8181e50046c29c68de5282d08ef7_1686040741384_2832383536_1686040741384_1; csaHSBCDBID=null_3; LPVID=JkZDY4ZThjNmZkYmZiMTUx; LPSID-8181236=Y0UXDFinQhG9AMSBGzKPtQ
2023-06-06 08:39:09 UTC	4682	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:44:22 GMT Server: Apache Strict-Transport-Security: max-age=16070400; includeSubdomains; Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT Access-Control-Max-Age: 1000 Access-Control-Allow-Headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token Last-Modified: Tue, 03 May 2022 10:17:08 GMT ETag: "f9-5de18cfa8b1f5" Accept-Ranges: bytes Content-Length: 249 Vary: Accept-Encoding Cache-Control: max-age=604800 Expires: Tue, 13 Jun 2023 08:44:22 GMT ServerLoc: 2 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-type: application/javascript Connection: close
2023-06-06 08:39:09 UTC	4683	IN	Data Raw: 63 76 76 65 72 73 69 6f 6e 28 7b 0d 0a 09 22 76 65 72 22 3a 20 32 30 32 32 30 35 30 33 2c 0d 0a 09 22 67 6c 6f 62 61 6c 22 3a 20 74 72 75 65 2c 0d 0a 09 22 66 69 6c 65 73 22 3a 20 7b 0d 0a 09 09 22 69 6e 69 74 2e 6a 73 22 3a 20 32 30 32 32 30 35 30 33 2c 0d 0a 09 09 22 6a 71 75 65 72 79 2d 33 2e 33 2e 31 2e 6d 69 6e 2e 6a 73 22 3a 20 31 36 30 38 32 31 30 30 38 37 2c 0d 0a 09 09 22 6d 61 69 6e 2e 6d 69 6e 2e 63 73 73 22 3a 20 31 36 30 38 32 31 30 30 38 37 2c 0d 0a 09 09 22 6d 61 69 6e 2e 6d 69 6e 2e 6a 73 22 3a 20 31 36 30 38 32 31 30 30 38 37 2c 0d 0a 09 09 22 4c 69 76 65 50 65 72 73 6f 6e 56 69 72 74 75 61 6c 41 73 73 69 73 74 61 6e 74 4d 6f 64 75 6c 65 2e 6d 69 6e 2e 6a 73 22 3a 20 31 36 30 38 32 31 30 30 38 37 0d 0a 09 7d 0d 0a 7d 29 Data Ascii: cvversion({"ver": 20220503,"global": true,"files": {"init.js": 20220503,"jquery-3.3.1.min.js": 1608210087,"main.min.css": 1608210087,"main.min.js": 1608210087,"LivePersonVirtualAssistantModule.min.js": 1608210087}})

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
126	192.168.2.4	49928	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:09 UTC	4683	OUT	GET /etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/favicons/android-chrome-144x144.png HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373; tms_ref=; servicingTrafficManagement2=SegmentNewJourney; servicingTrafficManagement3=SegmentNewJourney; utag_main=v_id:01888fdc714a00035f72975780d20006f001706700918$_sn:1$_se:1$_ss:1$_st:1686042568844$ses_id:1686040768844%3Bexp-session$_pn:1%3Bexp-session$sskey:undefined%3Bexp-1688632768902; dclid=undefined; usy46gabsosd=csaHSBC__2832383536_1686040769823_1686040741384_7198; csaHSBCkey=c7f160f6f0dd4b84a2ade40154d2aeb6; csaHSBCuvt=3d5d8181e50046c29c68de5282d08ef7_1686040741384_2832383536_1686040741384_1; csaHSBCDBID=null_3; LPVID=JkZDY4ZThjNmZkYmZiMTUx; LPSID-8181236=Y0UXDFinQhG9AMSBGzKPtQ
2023-06-06 08:39:09 UTC	4685	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 16500 Connection: close Date: Tue, 06 Jun 2023 08:39:09 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains Last-Modified: Sat, 03 Jun 2023 04:25:06 GMT Accept-Ranges: bytes S: dispatcher2euwest2 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=7776000, s-maxage=7776000 X-Cache: Hit from cloudfront Via: 1.1 ac90d46be219b2aa8a23e6982405715c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: q31Ym4v36W2NXsEIMuxxii1LJJBj2fJr0WP3ax4OsQtyIltBoctCUg==
2023-06-06 08:39:09 UTC	4686	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 90 00 00 00 90 08 06 00 00 00 e7 46 e2 b8 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 39 ee 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 20 20 20 20 20 20 22 3e 0a 20 20 20 3c 72 64 66 Data Ascii: PNGIHDRFpHYs9iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf
2023-06-06 08:39:09 UTC	4702	IN	Data Raw: 43 2d 9e 99 ca 83 50 a3 c6 5c 33 e7 bd 27 a4 70 28 02 01 10 01 10 01 10 01 10 21 00 22 00 22 00 22 00 22 04 40 04 40 04 40 04 40 84 00 88 00 88 00 88 00 88 10 00 11 00 11 00 11 00 11 00 11 02 20 02 20 02 20 02 20 42 00 44 00 44 00 44 00 44 08 80 08 80 08 80 08 80 08 01 10 29 29 ff 0e 00 28 3c 4a 4b 84 39 78 52 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: C-P\3'p(!""""@@@@ BDDDD))(<JK9xRIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
127	192.168.2.4	49929	62.138.155.102	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:09 UTC	4684	OUT	GET /counter-service/embedp2new/init.min.js?v=20220503 HTTP/1.1 Host: www.askus.hsbc.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373; tms_ref=; servicingTrafficManagement2=SegmentNewJourney; servicingTrafficManagement3=SegmentNewJourney; utag_main=v_id:01888fdc714a00035f72975780d20006f001706700918$_sn:1$_se:1$_ss:1$_st:1686042568844$ses_id:1686040768844%3Bexp-session$_pn:1%3Bexp-session$sskey:undefined%3Bexp-1688632768902; dclid=undefined; usy46gabsosd=csaHSBC__2832383536_1686040769823_1686040741384_7198; csaHSBCkey=c7f160f6f0dd4b84a2ade40154d2aeb6; csaHSBCuvt=3d5d8181e50046c29c68de5282d08ef7_1686040741384_2832383536_1686040741384_1; csaHSBCDBID=null_3; LPVID=JkZDY4ZThjNmZkYmZiMTUx; LPSID-8181236=Y0UXDFinQhG9AMSBGzKPtQ
2023-06-06 08:39:09 UTC	4702	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:44:22 GMT Server: Apache Strict-Transport-Security: max-age=16070400; includeSubdomains; Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT Access-Control-Max-Age: 1000 Access-Control-Allow-Headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token Last-Modified: Tue, 03 May 2022 10:17:08 GMT ETag: "a2bc-5de18cfa8ae0d" Accept-Ranges: bytes Content-Length: 41660 Vary: Accept-Encoding Cache-Control: max-age=604800 Expires: Tue, 13 Jun 2023 08:44:22 GMT ServerLoc: 2 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Connection: close Content-Type: application/javascript
2023-06-06 08:39:09 UTC	4704	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 63 76 6a 71 2c 56 41 4d 44 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 65 6c 66 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 72 6c 5f 66 69 6c 74 65 72 28 29 7b 66 6f 72 28 76 61 72 20 66 69 6c 74 65 72 3d 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 68 73 62 63 2e 63 6f 2e 75 6b 2f 63 72 65 64 69 74 2d 63 61 72 64 73 2f 62 61 6c 61 6e 63 65 2d 74 72 61 6e 73 66 65 72 2d 63 72 65 64 69 74 2d 63 61 72 64 73 2f 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 68 73 62 63 2e 63 6f 2e 75 6b 2f 6c 6f 61 6e 73 2f 70 72 6f 64 75 63 74 73 2f 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 68 73 62 63 2e 63 6f 2e 75 6b 2f 63 72 65 64 69 74 2d 63 61 72 64 73 2f 63 72 65 64 69 74 2d 62 75 69 6c 64 65 72 2d 63 72 65 64 69 Data Ascii: "use strict";var cvjq,VAMD=function(){var self={};function url_filter(){for(var filter=["https://www.hsbc.co.uk/credit-cards/balance-transfer-credit-cards/","https://www.hsbc.co.uk/loans/products/","https://www.hsbc.co.uk/credit-cards/credit-builder-credi
2023-06-06 08:39:09 UTC	4712	IN	Data Raw: 2f 65 6d 62 65 64 70 32 6e 65 77 22 2c 73 63 72 69 70 74 73 3a 5b 22 6a 71 75 65 72 79 2d 33 2e 33 2e 31 2e 6d 69 6e 2e 6a 73 22 2c 22 6d 61 69 6e 2e 6d 69 6e 2e 63 73 73 22 2c 22 4c 69 76 65 50 65 72 73 6f 6e 56 69 72 74 75 61 6c 41 73 73 69 73 74 61 6e 74 4d 6f 64 75 6c 65 2e 6d 69 6e 2e 6a 73 22 2c 22 6d 61 69 6e 2e 6d 69 6e 2e 6a 73 22 5d 2c 76 61 75 72 6c 3a 22 2f 2f 77 77 77 2e 61 73 6b 75 73 2e 68 73 62 63 2e 63 6f 2e 75 6b 2f 63 6f 75 6e 74 65 72 2d 73 65 72 76 69 63 65 31 2f 62 6f 74 2e 68 74 6d 3f 61 70 69 3d 31 26 74 79 70 65 3d 6a 73 6f 6e 22 2c 70 65 55 72 6c 3a 22 68 74 74 70 3a 2f 2f 31 39 32 2e 31 36 38 2e 34 30 2e 31 30 2f 50 65 72 73 6f 6e 61 6c 69 73 61 74 69 6f 6e 45 6e 67 69 6e 65 22 2c 6c 6f 61 64 4a 51 3a 21 30 2c 63 61 6e 64 69 64 Data Ascii: /embedp2new",scripts:["jquery-3.3.1.min.js","main.min.css","LivePersonVirtualAssistantModule.min.js","main.min.js"],vaurl:"//www.askus.hsbc.co.uk/counter-service1/bot.htm?api=1&type=json",peUrl:"http://192.168.40.10/PersonalisationEngine",loadJQ:!0,candid
2023-06-06 08:39:09 UTC	4720	IN	Data Raw: 63 74 69 6f 6e 28 24 2c 63 61 6c 6c 62 61 63 6b 29 7b 73 65 6c 66 2e 63 6f 6e 66 2e 70 72 6f 64 75 63 74 69 6f 6e 3f 63 61 6c 6c 62 61 63 6b 26 26 63 61 6c 6c 62 61 63 6b 28 29 3a 24 2e 61 6a 61 78 28 7b 74 79 70 65 3a 22 47 45 54 22 2c 75 72 6c 3a 73 65 6c 66 2e 63 6f 6e 66 2e 72 65 73 6f 75 72 63 65 55 52 49 2b 22 2f 6a 73 2f 74 65 6d 70 6c 61 74 65 2e 63 76 2e 68 74 6d 6c 22 2c 63 6f 6e 74 65 6e 74 54 79 70 65 3a 22 74 65 78 74 2f 70 6c 61 69 6e 22 2c 61 73 79 6e 63 3a 21 31 2c 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 3a 22 63 76 63 61 6c 6c 62 61 63 6b 22 2c 63 61 63 68 65 3a 21 31 2c 78 68 72 46 69 65 6c 64 73 3a 7b 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3a 21 31 7d 2c 74 69 6d 65 6f 75 74 3a 31 65 34 7d 29 2e 64 6f 6e 65 28 28 66 75 6e 63 74 69 Data Ascii: ction($,callback){self.conf.production?callback&&callback():$.ajax({type:"GET",url:self.conf.resourceURI+"/js/template.cv.html",contentType:"text/plain",async:!1,jsonpCallback:"cvcallback",cache:!1,xhrFields:{withCredentials:!1},timeout:1e4}).done((functi
2023-06-06 08:39:09 UTC	4727	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 24 28 56 41 4d 44 29 2e 74 72 69 67 67 65 72 28 22 76 61 2e 74 6f 67 67 6c 65 22 29 7d 29 29 2c 24 76 61 2e 6f 6e 28 22 6b 65 79 75 70 22 2c 22 2e 76 61 2d 74 72 69 67 67 65 72 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 31 33 3d 3d 3d 65 2e 6b 65 79 43 6f 64 65 26 26 24 28 56 41 4d 44 29 2e 74 72 69 67 67 65 72 28 22 76 61 2e 74 6f 67 67 6c 65 22 29 7d 29 29 2c 24 28 22 62 6f 64 79 22 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 22 2e 76 61 2d 6c 61 75 6e 63 68 2d 62 75 74 74 6f 6e 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 6e 74 72 79 54 65 78 74 3d 24 28 22 2e 73 65 61 72 63 68 46 69 65 6c 64 22 29 2e 76 61 6c 28 29 3b 24 28 56 41 4d 44 29 2e 74 72 69 67 67 65 72 28 22 76 61 2e 6f 70 65 6e 22 2c 5b 7b 65 6e 74 72 79 Data Ascii: nction(){$(VAMD).trigger("va.toggle")})),$va.on("keyup",".va-trigger",(function(e){13===e.keyCode&&$(VAMD).trigger("va.toggle")})),$("body").on("click",".va-launch-button",(function(){var entryText=$(".searchField").val();$(VAMD).trigger("va.open",[{entry
2023-06-06 08:39:09 UTC	4735	IN	Data Raw: 22 29 3b 24 76 61 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 22 2e 76 61 2d 69 63 73 20 2e 76 61 2d 62 74 6e 2d 69 63 73 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 63 73 45 6e 74 72 79 3d 22 22 3b 24 28 27 2e 76 61 2d 69 63 73 20 69 6e 70 75 74 5b 6e 61 6d 65 3d 22 76 61 2d 69 63 73 2d 6f 70 74 22 5d 27 29 2e 65 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 74 68 69 73 29 2e 70 72 6f 70 28 22 63 68 65 63 6b 65 64 22 29 26 26 28 69 63 73 45 6e 74 72 79 3d 24 28 74 68 69 73 29 2e 76 61 6c 28 29 29 7d 29 29 2c 69 63 73 45 6e 74 72 79 2e 6c 65 6e 67 74 68 3c 31 26 26 76 61 2e 73 75 62 6d 69 74 49 43 53 28 22 5f 69 63 73 5f 6e 6f 5f 72 65 61 73 6f 6e 5f 67 69 76 65 6e 5f 22 29 2c 22 63 75 73 74 6f 6d 22 3d 3d 69 63 73 45 6e 74 72 79 26 26 28 69 Data Ascii: ");$va.on("click",".va-ics .va-btn-ics",(function(){var icsEntry="";$('.va-ics input[name="va-ics-opt"]').each((function(){$(this).prop("checked")&&(icsEntry=$(this).val())})),icsEntry.length<1&&va.submitICS("_ics_no_reason_given_"),"custom"==icsEntry&&(i
2023-06-06 08:39:09 UTC	4743	IN	Data Raw: 7b 24 28 22 2e 76 61 2d 6d 6f 64 61 6c 2d 77 72 61 70 2c 20 2e 76 61 2d 6d 6f 64 61 6c 2d 73 68 61 64 6f 77 22 29 2e 72 65 6d 6f 76 65 28 29 2c 63 61 6c 6c 62 61 63 6b 26 26 63 61 6c 6c 62 61 63 6b 28 29 7d 2c 63 72 65 61 74 65 53 75 72 76 65 79 46 6f 72 6d 3a 66 75 6e 63 74 69 6f 6e 28 24 29 7b 56 41 4d 44 2e 75 74 69 6c 2e 63 72 65 61 74 65 4d 6f 64 61 6c 57 69 6e 64 6f 77 28 24 2c 22 76 61 2d 6c 63 2d 73 75 72 76 65 79 2d 64 69 61 6c 6f 67 22 2c 21 31 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 24 73 74 61 72 73 3d 24 28 22 3c 64 69 76 2f 3e 22 2c 7b 63 6c 61 73 73 3a 22 76 61 2d 6c 63 2d 73 75 72 76 65 79 2d 73 74 61 72 73 22 7d 29 3b 24 73 74 61 72 73 2e 61 70 70 65 6e 64 28 24 28 22 3c 61 2f 3e 22 2c 7b 68 72 65 66 3a 22 6a 61 76 61 73 63 72 Data Ascii: {$(".va-modal-wrap, .va-modal-shadow").remove(),callback&&callback()},createSurveyForm:function($){VAMD.util.createModalWindow($,"va-lc-survey-dialog",!1,(function(){var $stars=$("<div/>",{class:"va-lc-survey-stars"});$stars.append($("<a/>",{href:"javascr

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
128	192.168.2.4	49930	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:09 UTC	4703	OUT	GET /content/dam/hsbc/gb/images/live-chat/chat-icon-global-32.png HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373; tms_ref=; servicingTrafficManagement2=SegmentNewJourney; servicingTrafficManagement3=SegmentNewJourney; utag_main=v_id:01888fdc714a00035f72975780d20006f001706700918$_sn:1$_se:1$_ss:1$_st:1686042568844$ses_id:1686040768844%3Bexp-session$_pn:1%3Bexp-session$sskey:undefined%3Bexp-1688632768902; dclid=undefined; usy46gabsosd=csaHSBC__2832383536_1686040769823_1686040741384_7198; csaHSBCkey=c7f160f6f0dd4b84a2ade40154d2aeb6; csaHSBCuvt=3d5d8181e50046c29c68de5282d08ef7_1686040741384_2832383536_1686040741384_1; csaHSBCDBID=null_3; LPVID=JkZDY4ZThjNmZkYmZiMTUx; LPSID-8181236=Y0UXDFinQhG9AMSBGzKPtQ
2023-06-06 08:39:09 UTC	4745	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 1800 Connection: close Date: Tue, 06 Jun 2023 08:39:09 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains Last-Modified: Fri, 02 Jun 2023 17:22:49 GMT Accept-Ranges: bytes S: dispatcher2euwest2 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=2592000, s-maxage=2592000 X-Cache: Miss from cloudfront Via: 1.1 81f038b63d8af92c2b360530d51919c2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: DSv701HxUC4fRRiocbg2lsiHE_U6sctp7BgylZg0i48rKIHXqeNiYg==
2023-06-06 08:39:09 UTC	4745	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 02 00 00 00 fc 18 ed a3 00 00 05 64 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 35 2d 63 30 32 31 20 37 39 2e 31 35 33 36 31 33 2c 20 32 30 31 33 2f 30 37 2f 31 31 2d 30 35 3a 32 31 3a 35 34 20 20 20 20 20 20 20 20 22 3e 0a 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f Data Ascii: PNGIHDR diTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.153613, 2013/07/11-05:21:54 "> <rdf:RDF xmlns:rdf="http://

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
129	192.168.2.4	49931	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:09 UTC	4747	OUT	GET /content/dam/hsbc/gb/images/live-chat/chat-icon-global-32.png HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373; tms_ref=; servicingTrafficManagement2=SegmentNewJourney; servicingTrafficManagement3=SegmentNewJourney; utag_main=v_id:01888fdc714a00035f72975780d20006f001706700918$_sn:1$_se:1$_ss:1$_st:1686042568844$ses_id:1686040768844%3Bexp-session$_pn:1%3Bexp-session$sskey:undefined%3Bexp-1688632768902; dclid=undefined; usy46gabsosd=csaHSBC__2832383536_1686040769823_1686040741384_7198; csaHSBCkey=c7f160f6f0dd4b84a2ade40154d2aeb6; csaHSBCuvt=3d5d8181e50046c29c68de5282d08ef7_1686040741384_2832383536_1686040741384_1; csaHSBCDBID=null_3; LPVID=JkZDY4ZThjNmZkYmZiMTUx; LPSID-8181236=Y0UXDFinQhG9AMSBGzKPtQ
2023-06-06 08:39:09 UTC	4748	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 1800 Connection: close Date: Tue, 06 Jun 2023 08:39:09 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains Last-Modified: Fri, 02 Jun 2023 17:22:49 GMT Accept-Ranges: bytes S: dispatcher2euwest2 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=2592000, s-maxage=2592000 X-Cache: Hit from cloudfront Via: 1.1 7497b6df995aa2d58f27a725f51d6240.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: QOj8xPiFhd_11x40Bke8B6wO7cK1REMejbEDTMsaXRqUD4PdVE-vCw==
2023-06-06 08:39:09 UTC	4749	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 02 00 00 00 fc 18 ed a3 00 00 05 64 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 35 2d 63 30 32 31 20 37 39 2e 31 35 33 36 31 33 2c 20 32 30 31 33 2f 30 37 2f 31 31 2d 30 35 3a 32 31 3a 35 34 20 20 20 20 20 20 20 20 22 3e 0a 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f Data Ascii: PNGIHDR diTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.153613, 2013/07/11-05:21:54 "> <rdf:RDF xmlns:rdf="http://

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
13	192.168.2.4	49708	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:20 UTC	265	OUT	GET /front_end/front_end_files/logon.css HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hs-login.online/front_end/front_end_files/ursula.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:20 UTC	293	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:20 GMT Content-Type: text/css Content-Length: 2637 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:43 GMT ETag: "a4d-5fd65431c6cd3" Accept-Ranges: bytes Vary: Accept-Encoding
2023-06-06 08:38:20 UTC	294	IN	Data Raw: 2e 75 72 73 75 6c 61 20 2e 62 61 6e 6e 65 72 2d 73 6d 61 6c 6c 3a 66 6f 63 75 73 7b 0a 6f 75 74 6c 69 6e 65 3a 31 70 78 20 73 6f 6c 69 64 20 21 69 6d 70 6f 72 74 61 6e 74 0a 7d 0a 2f 2a 20 2d 2d 2d 2d 2d 20 4f 6c 69 76 69 61 20 70 6f 73 69 74 69 6f 6e 20 2d 2d 2d 2d 2d 20 2a 2f 0a 2e 75 72 73 75 6c 61 20 2e 62 61 6e 6e 65 72 2d 73 6d 61 6c 6c 7b 0a 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 2d 35 37 70 78 3b 72 69 67 68 74 3a 30 70 78 3b 0a 7d 0a 2e 75 72 73 75 6c 61 20 2e 6c 6f 67 6f 6e 43 6f 6e 74 61 69 6e 65 72 7b 0a 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 63 63 63 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 0a 09 6d 61 72 67 69 6e 3a 20 33 70 78 20 33 70 78 20 31 30 70 78 20 33 70 78 Data Ascii: .ursula .banner-small:focus{outline:1px solid !important}/* ----- Olivia position ----- */.ursula .banner-small{position:absolute; top:-57px;right:0px;}.ursula .logonContainer{border: 1px solid #cccccc;overflow:hidden;margin: 3px 3px 10px 3px

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
130	192.168.2.4	49932	178.249.96.141	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:09 UTC	4750	OUT	GET /api/js/8181236?sid=Y0UXDFinQhG9AMSBGzKPtQ&cb=lpCb39541x18701&t=uc&ts=1686040778440&pid=114028263&tid=4972823587&vid=JkZDY4ZThjNmZkYmZiMTUx&sdes=%5B%7B%22type%22%3A%22impDisplay%22%2C%22campaign%22%3A3713557950%2C%22engId%22%3A4391110350%2C%22revision%22%3A2132%2C%22eContext%22%3A%5B%7B%22type%22%3A%22engagementContext%22%2C%22id%22%3A%221%22%7D%5D%7D%5D HTTP/1.1 Host: lo0.v.liveperson.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:39:09 UTC	4751	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:39:09 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: no-store Server: ws Access-Control-Allow-Methods: GET, POST, PATCH Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token Access-Control-Expose-Headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-06-06 08:39:09 UTC	4752	IN	Data Raw: 32 61 0d 0a 6c 70 43 62 33 39 35 34 31 78 31 38 37 30 31 28 7b 22 6d 65 73 73 61 67 65 73 54 6f 56 69 73 69 74 6f 72 22 3a 5b 5d 7d 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2alpCb39541x18701({"messagesToVisitor":[]});0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
131	192.168.2.4	49933	91.214.5.154	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:09 UTC	4752	OUT	POST /7198/28323834333/XBW09WEA78JG/jsEvent.json HTTP/1.1 Host: www.mcmprod.hsbc.co.uk Connection: keep-alive Content-Length: 152 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.hsbc.co.uk Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373; tms_ref=; servicingTrafficManagement2=SegmentNewJourney; servicingTrafficManagement3=SegmentNewJourney; utag_main=v_id:01888fdc714a00035f72975780d20006f001706700918$_sn:1$_se:1$_ss:1$_st:1686042568844$ses_id:1686040768844%3Bexp-session$_pn:1%3Bexp-session$sskey:undefined%3Bexp-1688632768902; dclid=undefined; csaHSBCCDID=null_3_c7f160f6f0dd4b84a2ade40154d2aeb6; csaHSBCCDuvt=3d5d8181e50046c29c68de5282d08ef7; usy46gabsosd=csaHSBC__2832383536_1686040769823_1686040741384_7198; csaHSBCkey=c7f160f6f0dd4b84a2ade40154d2aeb6; csaHSBCuvt=3d5d8181e50046c29c68de5282d08ef7_1686040741384_2832383536_1686040741384_1; csaHSBCDBID=null_3; MCM-PROD-WDC=3481586442.47873.0000; TS01977c0f=0105ea404a0ae1643d10124947041d2106f5db06bef02c69c8b92131d5833891fae19c2af57d9a07897a601314990bc367f23003cd; vtz47gabsosd=csaHSBC__2832383536_1686040777415_1686040741384_7198; LPVID=JkZDY4ZThjNmZkYmZiMTUx; LPSID-8181236=Y0UXDFinQhG9AMSBGzKPtQ
2023-06-06 08:39:09 UTC	4754	OUT	Data Raw: 7a 3d 6e 75 6c 6c 5f 33 5f 63 37 66 31 36 30 66 36 66 30 64 64 34 62 38 34 61 32 61 64 65 34 30 31 35 34 64 32 61 65 62 36 26 79 3d 38 33 32 33 36 35 31 34 33 38 33 21 32 2b 45 3d 3d 31 21 35 33 21 61 31 36 4a 34 30 37 36 38 61 44 36 30 36 38 37 37 6d 6c 6f 65 73 36 70 3d 2b 61 61 67 69 2b 74 31 30 63 65 64 61 64 74 3d 2b 62 30 66 36 34 62 37 7a 3d 36 30 66 31 66 61 64 35 34 30 64 64 61 32 38 34 65 34 36 3a 68 3d 31 31 61 65 64 32 2b 61 62 70 73 74 74 Data Ascii: z=null_3_c7f160f6f0dd4b84a2ade40154d2aeb6&y=83236514383!2+E==1!53!a16J40768aD606877mloes6p=+aagi+t10cedadt=+b0f64b7z=60f1fad540dda284e46:h=11aed2+abpstt
2023-06-06 08:39:10 UTC	4754	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:39:09 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Access-Control-Allow-Origin: https://www.hsbc.co.uk Access-Control-Allow-Credentials: true Content-Type: application/json X-Content-Type-Options: nosniff Pragma: no-cache Cache-Control: no-store Cache-Control: no-cache P3P: CP="NON ADMo DEVo PSAo PSDo IVAo IVDo OUR IND UNI COM NAV INT CNT LOC STA PUR PHY ONL" Content-Length: 27 Set-Cookie: vtz47gabsosd=csaHSBC__2832383536_1686040778676_1686040741384_7198; secure; SameSite=None; path=/; HttpOnly Set-Cookie: csaHSBCCDID=null_3_c7f160f6f0dd4b84a2ade40154d2aeb6; secure; SameSite=None; path=/; HttpOnly Vary: User-Agent S: LWSMCMRP102UK Connection: close Set-Cookie: TS01977c0f=0105ea404a0ae1643d10124947041d2106f5db06bef02c69c8b92131d5833891fae19c2af57d9a07897a601314990bc367f23003cd; Path=/
2023-06-06 08:39:10 UTC	4755	IN	Data Raw: 7b 22 72 65 73 70 6f 6e 73 65 52 65 63 65 69 76 65 64 22 3a 22 74 72 75 65 22 7d Data Ascii: {"responseReceived":"true"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
132	192.168.2.4	49935	91.214.6.108	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:10 UTC	4755	OUT	GET / HTTP/1.1 Host: www.business.hsbc.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373; tms_ref=; servicingTrafficManagement2=SegmentNewJourney; servicingTrafficManagement3=SegmentNewJourney; utag_main=v_id:01888fdc714a00035f72975780d20006f001706700918$_sn:1$_se:1$_ss:1$_st:1686042568844$ses_id:1686040768844%3Bexp-session$_pn:1%3Bexp-session$sskey:undefined%3Bexp-1688632768902; dclid=undefined; usy46gabsosd=csaHSBC__2832383536_1686040769823_1686040741384_7198; csaHSBCkey=c7f160f6f0dd4b84a2ade40154d2aeb6; csaHSBCuvt=3d5d8181e50046c29c68de5282d08ef7_1686040741384_2832383536_1686040741384_1; csaHSBCDBID=null_3; LPVID=JkZDY4ZThjNmZkYmZiMTUx; LPSID-8181236=Y0UXDFinQhG9AMSBGzKPtQ
2023-06-06 08:39:10 UTC	4756	IN	HTTP/1.0 302 Moved Temporarily Location: https://www.business.hsbc.uk/en-gb Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
133	192.168.2.4	49937	18.66.192.16	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:10 UTC	4757	OUT	GET /utag/hsbc/uk-cmb/prod/utag.sync.js HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:39:11 UTC	4757	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 6931 Connection: close Last-Modified: Fri, 02 Jun 2023 14:44:36 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: xh5ROod9RSRslCZZpnB5Y2DkUrPrtWso Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 06 Jun 2023 08:39:11 GMT ETag: "ed443c152cfb069b1763f145852e0546" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 89efe3a7854e47cf7f1fe47e28e39348.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P1 X-Amz-Cf-Id: agPdn2jgVUnSugC3HgnljgEilTbI7KKy4XC3KU16cNqPw6WjzSBjtQ== Cache-Control: max-age=300
2023-06-06 08:39:11 UTC	4758	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 73 79 6e 63 20 75 74 34 2e 30 2e 32 30 32 33 30 36 30 32 31 34 34 34 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 33 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 77 69 6e 64 6f 77 2e 48 53 42 43 3d 77 69 6e 64 6f 77 2e 48 53 42 43 7c 7c 7b 7d 3b 48 53 42 43 2e 53 49 54 45 3d 48 53 42 43 2e 53 49 54 45 7c 7c 7b 7d 3b 48 53 42 43 2e 50 41 47 45 3d 48 53 42 43 2e 50 41 47 45 7c 7c 7b 7d 3b 48 53 42 43 2e 45 58 54 3d 48 53 42 43 2e 45 58 54 7c 7c 7b 7d 3b 48 53 42 43 2e 4c 4f 47 3d 48 53 42 43 2e 4c 4f 47 7c 7c 7b 7d 3b 48 53 42 43 2e 44 43 53 3d 48 53 42 43 2e 44 43 53 7c 7c 7b 7d 3b 77 69 6e 64 Data Ascii: //tealium universal tag - utag.sync ut4.0.202306021444, Copyright 2023 Tealium.com Inc. All Rights Reserved.window.HSBC=window.HSBC\|\|{};HSBC.SITE=HSBC.SITE\|\|{};HSBC.PAGE=HSBC.PAGE\|\|{};HSBC.EXT=HSBC.EXT\|\|{};HSBC.LOG=HSBC.LOG\|\|{};HSBC.DCS=HSBC.DCS\|\|{};wind

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
134	192.168.2.4	49962	18.66.192.16	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:13 UTC	4765	OUT	GET /utag/hsbc/uk-cmb/prod/utag.js HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:39:13 UTC	4765	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 478619 Connection: close Date: Tue, 06 Jun 2023 08:39:14 GMT Last-Modified: Fri, 02 Jun 2023 14:44:35 GMT ETag: "7a2d47c74b85e73dc078d82b37fda17a" x-amz-server-side-encryption: AES256 x-amz-version-id: AA70qwZjGAt54vaIN_.HESvAlWxn8E0M Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 c414bd1a4ce7ace94cbfdfa8efcbe5a6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P1 X-Amz-Cf-Id: v7wi19kVMH6_LfZflccDTAxWAiedQC6a2-oZF-B9EARhWNKzcXky0A== Cache-Control: max-age=300
2023-06-06 08:39:13 UTC	4766	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 6c 6f 61 64 65 72 20 75 74 34 2e 30 2e 32 30 32 33 30 36 30 32 31 34 34 34 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 33 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 76 61 72 20 75 74 61 67 5f 63 6f 6e 64 6c 6f 61 64 3d 66 61 6c 73 65 3b 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 75 6c 28 73 72 63 2c 61 2c 62 29 7b 61 3d 64 6f 63 75 6d 65 6e 74 3b 62 3d 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 62 2e 6c 61 6e 67 75 61 67 65 3d 27 6a 61 76 61 73 63 72 69 70 74 27 3b 62 2e 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 Data Ascii: //tealium universal tag - utag.loader ut4.0.202306021444, Copyright 2023 Tealium.com Inc. All Rights Reserved.var utag_condload=false;try{(function(){function ul(src,a,b){a=document;b=a.createElement('script');b.language='javascript';b.type='text/javascr
2023-06-06 08:39:13 UTC	4781	IN	Data Raw: 3d 70 61 72 73 65 49 6e 74 28 69 6e 70 75 74 49 44 2e 6d 61 74 63 68 28 72 65 67 5f 6d 61 74 63 68 29 5b 30 5d 29 3b 64 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 5c 22 74 6f 67 67 6c 65 5c 22 2b 28 74 6f 67 67 6c 65 4e 75 6d 62 65 72 2b 31 29 29 2e 63 68 65 63 6b 65 64 3d 74 72 75 65 3b 7d 7d 7d 65 6c 73 65 7b 66 6f 72 28 69 3d 30 3b 69 3c 69 6e 70 75 74 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 69 6e 70 75 74 73 5b 69 5d 2e 63 68 65 63 6b 65 64 3d 66 61 6c 73 65 3b 69 6e 70 75 74 49 44 3d 69 6e 70 75 74 73 5b 69 5d 2e 69 64 3b 74 6f 67 67 6c 65 4e 75 6d 62 65 72 3d 70 61 72 73 65 49 6e 74 28 69 6e 70 75 74 49 44 2e 6d 61 74 63 68 28 72 65 67 5f 6d 61 74 63 68 29 5b 30 5d 29 3b 64 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 5c 22 74 6f 67 67 6c Data Ascii: =parseInt(inputID.match(reg_match)[0]);d.getElementById(\"toggle\"+(toggleNumber+1)).checked=true;}}}else{for(i=0;i<inputs.length;i++){inputs[i].checked=false;inputID=inputs[i].id;toggleNumber=parseInt(inputID.match(reg_match)[0]);d.getElementById(\"toggl
2023-06-06 08:39:13 UTC	4797	IN	Data Raw: 74 68 69 73 2e 64 61 74 61 3d 64 61 74 61 3b 7d 2c 66 69 6e 61 6c 69 7a 65 3a 66 75 6e 63 74 69 6f 6e 20 5f 66 69 6e 61 6c 69 7a 65 28 29 0a 7b 7d 2c 73 69 67 6e 3a 66 75 6e 63 74 69 6f 6e 20 5f 73 69 67 6e 28 29 0a 7b 76 61 72 20 68 6d 61 63 3d 6e 65 77 20 73 6a 63 6c 2e 6d 69 73 63 2e 68 6d 61 63 28 74 68 69 73 2e 6b 65 79 2c 74 68 69 73 2e 68 61 73 68 29 3b 76 61 72 20 72 65 73 75 6c 74 3d 68 6d 61 63 2e 65 6e 63 72 79 70 74 28 74 68 69 73 2e 64 61 74 61 29 3b 72 65 74 75 72 6e 20 62 61 73 65 36 34 75 72 6c 65 6e 63 6f 64 65 28 77 69 6e 64 6f 77 2e 61 74 6f 62 28 73 6a 63 6c 2e 63 6f 64 65 63 2e 62 61 73 65 36 34 2e 66 72 6f 6d 42 69 74 73 28 72 65 73 75 6c 74 29 29 29 3b 7d 2c 76 65 72 69 66 79 3a 66 75 6e 63 74 69 6f 6e 20 5f 76 65 72 69 66 79 28 73 Data Ascii: this.data=data;},finalize:function _finalize(){},sign:function _sign(){var hmac=new sjcl.misc.hmac(this.key,this.hash);var result=hmac.encrypt(this.data);return base64urlencode(window.atob(sjcl.codec.base64.fromBits(result)));},verify:function _verify(s
2023-06-06 08:39:13 UTC	4813	IN	Data Raw: 5b 65 5d 3d 64 5b 65 5d 2e 73 70 6c 69 74 28 22 7c 22 29 7d 0a 67 3d 28 64 5b 65 5d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 3f 64 5b 65 5d 3a 5b 64 5b 65 5d 5d 3b 67 2e 70 75 73 68 28 66 29 3b 69 66 28 63 3d 3d 22 61 75 22 29 7b 68 3d 7b 7d 3b 6b 3d 7b 7d 3b 66 6f 72 28 69 3d 30 3b 69 3c 67 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 69 66 28 67 5b 69 5d 2e 6d 61 74 63 68 28 2f 5e 28 2e 2a 29 3b 65 78 70 2d 28 2e 2a 29 24 2f 29 29 7b 6a 3d 52 65 67 45 78 70 2e 24 31 3b 7d 0a 69 66 28 74 79 70 65 6f 66 20 6b 5b 6a 5d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 6b 5b 6a 5d 3d 31 3b 68 5b 67 5b 69 5d 5d 3d 31 3b 7d 7d 0a 67 3d 5b 5d 3b 66 6f 72 28 69 20 69 6e 20 75 74 61 67 2e 6c 6f 61 64 65 72 2e 47 56 28 68 29 29 7b 67 2e 70 75 73 68 28 69 29 3b 7d Data Ascii: [e]=d[e].split("\|")}g=(d[e]instanceof Array)?d[e]:[d[e]];g.push(f);if(c=="au"){h={};k={};for(i=0;i<g.length;i++){if(g[i].match(/^(.);exp-(.)$/)){j=RegExp.$1;}if(typeof k[j]=="undefined"){k[j]=1;h[g[i]]=1;}}g=[];for(i in utag.loader.GV(h)){g.push(i);}
2023-06-06 08:39:13 UTC	4829	IN	Data Raw: 5f 62 75 73 69 6e 65 73 73 5f 6c 69 6e 65 27 5d 3d 27 43 4d 42 27 3b 62 5b 27 70 61 67 65 5f 63 75 73 74 6f 6d 65 72 5f 67 72 6f 75 70 27 5d 3d 27 42 75 73 69 6e 65 73 73 27 7d 7d 63 61 74 63 68 28 65 29 7b 75 74 61 67 2e 44 42 28 65 29 3b 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 72 79 7b 69 66 28 62 5b 27 64 6f 6d 2e 70 61 74 68 6e 61 6d 65 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 27 2f 65 6e 2d 67 62 2f 63 6f 72 70 6f 72 61 74 65 27 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3e 2d 31 29 7b 62 5b 27 73 69 74 65 5f 72 65 67 69 6f 6e 27 5d 3d 27 45 75 72 6f 70 65 27 3b 62 5b 27 73 69 74 65 5f 73 75 62 72 65 67 69 6f 6e 27 5d 3d 27 55 4b 27 3b 62 5b 27 73 69 74 65 5f 63 6f 75 Data Ascii: _business_line']='CMB';b['page_customer_group']='Business'}}catch(e){utag.DB(e);}},function(a,b){try{if(b['dom.pathname'].toString().toLowerCase().indexOf('/en-gb/corporate'.toLowerCase())>-1){b['site_region']='Europe';b['site_subregion']='UK';b['site_cou
2023-06-06 08:39:13 UTC	4845	IN	Data Raw: 62 61 63 73 2d 61 6e 64 2d 66 61 73 74 65 72 2d 70 61 79 6d 65 6e 74 73 27 3a 27 74 79 70 65 3d 70 61 79 6d 65 30 3b 63 61 74 3d 63 6c 65 61 72 30 30 31 3b 27 7d 2c 7b 27 2f 65 6e 2d 67 62 2f 70 61 79 6d 65 6e 74 73 2f 63 6c 65 61 72 69 6e 67 2d 61 6e 64 2d 66 6f 72 65 69 67 6e 2d 63 75 72 72 65 6e 63 79 2d 70 61 79 6d 65 6e 74 73 2f 69 62 61 6e 2d 61 6e 64 2d 62 69 63 27 3a 27 74 79 70 65 3d 70 61 79 6d 65 30 3b 63 61 74 3d 63 6c 65 61 72 30 3b 27 7d 2c 7b 27 2f 65 6e 2d 67 62 2f 70 61 79 6d 65 6e 74 73 2f 63 6c 65 61 72 69 6e 67 2d 61 6e 64 2d 66 6f 72 65 69 67 6e 2d 63 75 72 72 65 6e 63 79 2d 70 61 79 6d 65 6e 74 73 2f 6d 61 6b 69 6e 67 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 61 79 6d 65 6e 74 73 27 3a 27 74 79 70 65 3d 70 61 79 6d 65 30 3b 63 Data Ascii: bacs-and-faster-payments':'type=payme0;cat=clear001;'},{'/en-gb/payments/clearing-and-foreign-currency-payments/iban-and-bic':'type=payme0;cat=clear0;'},{'/en-gb/payments/clearing-and-foreign-currency-payments/making-international-payments':'type=payme0;c
2023-06-06 08:39:13 UTC	4861	IN	Data Raw: 6e 74 5f 6c 6f 67 67 69 6e 67 3d 3d 3d 74 72 75 65 29 7b 75 74 61 67 2e 67 64 70 72 2e 73 65 74 50 72 65 66 65 72 65 6e 63 65 73 46 72 6f 6d 4c 69 73 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 69 73 74 29 7b 75 74 61 67 2e 44 42 28 22 43 6f 6e 73 65 6e 74 20 4d 61 6e 61 67 65 72 3a 20 53 65 74 20 50 72 65 66 65 72 65 6e 63 65 73 20 46 72 6f 6d 20 4c 69 73 74 20 28 63 75 73 74 6f 6d 69 73 65 64 20 69 6e 20 65 78 74 65 6e 73 69 6f 6e 29 22 29 3b 76 61 72 20 70 72 65 66 73 3d 7b 7d 2c 61 6c 6c 43 61 74 73 3d 75 74 61 67 2e 67 64 70 72 2e 67 65 74 43 61 74 65 67 6f 72 69 65 73 28 74 72 75 65 29 3b 69 66 28 75 74 61 67 2e 67 64 70 72 2e 74 79 70 65 4f 66 28 6c 69 73 74 29 21 3d 3d 22 61 72 72 61 79 22 29 7b 75 74 61 67 2e 44 42 28 22 4c 69 73 74 20 73 68 6f 75 6c 64 Data Ascii: nt_logging===true){utag.gdpr.setPreferencesFromList=function(list){utag.DB("Consent Manager: Set Preferences From List (customised in extension)");var prefs={},allCats=utag.gdpr.getCategories(true);if(utag.gdpr.typeOf(list)!=="array"){utag.DB("List should
2023-06-06 08:39:13 UTC	4877	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 74 29 7b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 64 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 72 2c 65 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 65 2e 77 6f 72 64 73 2c 6f 3d 65 2e 73 69 67 42 79 74 65 73 2c 73 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 61 3d 6f 2f 28 34 2a 73 29 2c 75 3d 28 61 3d 6e 3f 74 2e 63 65 69 6c 28 61 29 3a 74 2e 6d 61 78 28 28 30 7c 61 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 73 2c 66 3d 74 2e 6d 69 6e 28 34 2a 75 2c 6f Data Ascii: unction(t){"string"==typeof t&&(t=d.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(n){var r,e=this._data,i=e.words,o=e.sigBytes,s=this.blockSize,a=o/(4s),u=(a=n?t.ceil(a):t.max((0\|a)-this._minBufferSize,0))s,f=t.min(4*u,o
2023-06-06 08:39:13 UTC	4893	IN	Data Raw: 69 6c 69 74 79 2f 74 68 65 2d 76 61 6c 75 65 2d 6f 66 2d 74 72 61 64 69 6e 67 2d 66 61 69 72 6c 79 2d 69 6e 2d 74 68 65 2d 73 6d 61 6c 6c 2d 62 75 73 69 6e 65 73 73 27 3a 27 46 6f 63 75 73 6f 6e 53 75 73 74 61 69 6e 61 62 69 6c 69 74 79 3b 74 79 70 65 3b 54 68 65 76 61 6c 75 65 6f 66 74 72 61 64 69 6e 67 66 61 69 72 6c 79 27 7d 2c 7b 27 2f 65 6e 2d 67 62 2f 66 6f 63 75 73 2d 6f 6e 2d 73 75 73 74 61 69 6e 61 62 69 6c 69 74 79 2f 75 73 69 6e 67 2d 79 6f 75 72 2d 6c 6f 61 66 2d 73 75 73 74 61 69 6e 61 62 69 6c 69 74 79 2d 69 6e 2d 61 63 74 69 6f 6e 27 3a 27 46 6f 63 75 73 6f 6e 53 75 73 74 61 69 6e 61 62 69 6c 69 74 79 3b 74 79 70 65 3b 43 61 73 65 73 74 75 64 79 54 6f 61 73 74 41 6c 65 2d 53 75 73 74 61 69 6e 61 62 69 6c 69 74 79 69 6e 61 63 74 69 6f 6e 27 Data Ascii: ility/the-value-of-trading-fairly-in-the-small-business':'FocusonSustainability;type;Thevalueoftradingfairly'},{'/en-gb/focus-on-sustainability/using-your-loaf-sustainability-in-action':'FocusonSustainability;type;CasestudyToastAle-Sustainabilityinaction'
2023-06-06 08:39:13 UTC	4893	IN	Data Raw: 2c 7b 27 2f 65 6e 2d 67 62 2f 67 62 2f 63 61 6d 70 61 69 67 6e 25 32 30 73 75 62 25 32 30 70 61 67 65 2f 77 68 61 74 2d 68 73 62 63 2d 73 61 66 65 67 75 61 72 64 2d 6d 65 61 6e 73 2d 74 6f 2d 79 6f 75 27 3a 27 43 61 6d 70 61 69 67 6e 50 61 67 65 3b 74 79 70 65 3b 57 68 61 74 48 53 42 43 53 61 66 65 67 75 61 72 64 4d 65 61 6e 73 74 6f 59 6f 75 27 7d 2c 7b 27 2f 65 6e 2d 67 62 2f 67 62 2f 63 61 6d 70 61 69 67 6e 2f 31 30 2d 62 69 6c 6c 69 6f 6e 2d 66 75 6e 64 2d 66 6f 72 2d 73 6d 65 73 27 3a 27 43 61 6d 70 61 69 67 6e 50 61 67 65 3b 74 79 70 65 3b 31 30 62 69 6c 6c 66 75 6e 64 27 7d 2c 7b 27 2f 65 6e 2d 67 62 2f 67 62 2f 63 61 6d 70 61 69 67 6e 2f 62 75 73 69 6e 65 73 73 2d 62 61 6e 6b 69 6e 67 2d 6d 61 64 65 2d 65 61 73 79 27 3a 27 43 61 6d 70 61 69 67 6e Data Ascii: ,{'/en-gb/gb/campaign%20sub%20page/what-hsbc-safeguard-means-to-you':'CampaignPage;type;WhatHSBCSafeguardMeanstoYou'},{'/en-gb/gb/campaign/10-billion-fund-for-smes':'CampaignPage;type;10billfund'},{'/en-gb/gb/campaign/business-banking-made-easy':'Campaign
2023-06-06 08:39:13 UTC	4909	IN	Data Raw: 6e 2d 67 62 2f 73 6f 6c 75 74 69 6f 6e 73 2f 69 6d 70 6f 72 74 73 2d 61 6e 64 2d 65 78 70 6f 72 74 73 2d 67 75 61 72 61 6e 74 65 65 73 27 3a 27 49 6d 70 6f 72 74 26 45 78 70 6f 72 74 3b 74 79 70 65 3b 47 75 61 72 61 6e 74 65 65 73 27 7d 2c 7b 27 2f 65 6e 2d 67 62 2f 70 72 6f 64 75 63 74 73 2f 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 62 75 73 69 6e 65 73 73 2d 67 75 61 72 61 6e 74 65 65 73 27 3a 27 47 75 61 72 61 6e 74 65 65 73 3b 74 79 70 65 3b 49 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 42 75 73 69 6e 65 73 73 47 75 61 72 61 6e 74 65 65 73 27 7d 2c 7b 27 2f 65 6e 2d 67 62 2f 73 6f 6c 75 74 69 6f 6e 73 2f 69 6d 70 6f 72 74 73 27 3a 27 49 6d 70 6f 72 74 26 45 78 70 6f 72 74 3b 74 79 70 65 3b 49 6d 70 6f 72 74 73 27 7d 2c 7b 27 2f 65 6e 2d 67 62 2f 73 6f 6c 75 Data Ascii: n-gb/solutions/imports-and-exports-guarantees':'Import&Export;type;Guarantees'},{'/en-gb/products/international-business-guarantees':'Guarantees;type;InternationalBusinessGuarantees'},{'/en-gb/solutions/imports':'Import&Export;type;Imports'},{'/en-gb/solu
2023-06-06 08:39:13 UTC	4925	IN	Data Raw: 3d 3d 27 76 69 65 77 27 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7c 7c 28 62 5b 27 65 76 65 6e 74 5f 63 61 74 65 67 6f 72 79 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 27 76 65 72 69 66 69 63 61 74 69 6f 6e 27 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 62 5b 27 65 76 65 6e 74 5f 73 75 62 63 61 74 65 67 6f 72 79 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 27 6c 6f 67 6f 6e 27 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 62 5b 27 65 76 65 6e 74 5f 61 63 74 69 6f 6e 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 27 63 6f 6d 70 6c 65 74 65 27 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 29 7b 62 5b 27 6c 6f 67 69 6e 5f 65 Data Ascii: =='view'.toLowerCase())\|\|(b['event_category'].toString().toLowerCase()=='verification'.toLowerCase()&&b['event_subcategory'].toString().toLowerCase()=='logon'.toLowerCase()&&b['event_action'].toString().toLowerCase()=='complete'.toLowerCase())){b['login_e
2023-06-06 08:39:13 UTC	4941	IN	Data Raw: 77 71 22 3a 30 2c 22 69 64 22 3a 22 33 33 34 35 22 2c 22 62 6c 72 22 3a 31 7d 2c 7b 22 62 6c 72 22 3a 31 2c 22 69 64 22 3a 22 33 33 35 35 22 2c 22 61 6c 72 22 3a 30 2c 22 65 6e 64 22 3a 30 2c 22 62 77 71 22 3a 30 7d 2c 7b 22 65 6e 64 22 3a 30 2c 22 61 6c 72 22 3a 30 2c 22 62 77 71 22 3a 30 2c 22 69 64 22 3a 22 33 33 35 32 22 2c 22 62 6c 72 22 3a 31 7d 2c 7b 22 62 6c 72 22 3a 30 2c 22 69 64 22 3a 22 32 31 38 30 22 2c 22 61 6c 72 22 3a 31 2c 22 65 6e 64 22 3a 30 2c 22 62 77 71 22 3a 30 7d 2c 7b 22 62 6c 72 22 3a 30 2c 22 65 6e 64 22 3a 30 2c 22 62 77 71 22 3a 30 2c 22 61 6c 72 22 3a 31 2c 22 69 64 22 3a 22 32 30 37 33 22 7d 2c 7b 22 65 6e 64 22 3a 30 2c 22 61 6c 72 22 3a 31 2c 22 62 77 71 22 3a 30 2c 22 69 64 22 3a 22 33 38 39 22 2c 22 62 6c 72 22 3a 30 7d Data Ascii: wq":0,"id":"3345","blr":1},{"blr":1,"id":"3355","alr":0,"end":0,"bwq":0},{"end":0,"alr":0,"bwq":0,"id":"3352","blr":1},{"blr":0,"id":"2180","alr":1,"end":0,"bwq":0},{"blr":0,"end":0,"bwq":0,"alr":1,"id":"2073"},{"end":0,"alr":1,"bwq":0,"id":"389","blr":0}
2023-06-06 08:39:13 UTC	4957	IN	Data Raw: 73 5b 69 64 5d 29 63 6f 6e 74 69 6e 75 65 3b 76 61 72 20 74 61 67 3d 75 74 61 67 2e 6c 6f 61 64 65 72 2e 63 66 67 5b 69 64 5d 3b 69 66 28 74 61 67 2e 6c 6f 61 64 26 26 74 61 67 2e 73 65 6e 64 29 7b 69 66 28 74 61 67 2e 74 63 61 74 21 3d 3d 30 29 7b 69 66 28 28 63 73 54 79 70 65 3d 3d 3d 22 61 72 72 61 79 22 26 26 63 6f 6e 73 65 6e 74 53 74 61 74 65 5b 74 61 67 2e 74 63 61 74 2d 31 5d 2e 63 74 3d 3d 22 31 22 29 7c 7c 28 63 73 54 79 70 65 3d 3d 3d 22 6e 75 6d 62 65 72 22 26 26 63 6f 6e 73 65 6e 74 53 74 61 74 65 3d 3d 31 29 29 7b 65 76 65 6e 74 2e 63 66 67 2e 75 69 64 73 2e 70 75 73 68 28 69 64 29 3b 7d 7d 65 6c 73 65 20 69 66 28 74 61 67 2e 74 63 61 74 3d 3d 3d 30 29 7b 65 76 65 6e 74 2e 63 66 67 2e 75 69 64 73 2e 70 75 73 68 28 69 64 29 3b 7d 7d 7d 7d 0a Data Ascii: s[id])continue;var tag=utag.loader.cfg[id];if(tag.load&&tag.send){if(tag.tcat!==0){if((csType==="array"&&consentState[tag.tcat-1].ct=="1")\|\|(csType==="number"&&consentState==1)){event.cfg.uids.push(id);}}else if(tag.tcat===0){event.cfg.uids.push(id);}}}}
2023-06-06 08:39:13 UTC	4973	IN	Data Raw: 67 65 72 65 6b 6c 69 64 69 72 3b 20 62 75 20 6e 65 64 65 6e 6c 65 20 6f 74 6f 6d 61 74 69 6b 20 6f 6c 61 72 61 6b 20 61 79 61 72 6c 61 6e c4 b1 72 6c 61 72 2e 22 2c 22 70 61 72 61 67 72 61 70 68 34 5f 63 6d 62 22 3a 22 c4 b0 73 74 65 c4 9f 65 20 62 61 c4 9f 6c c4 b1 20 74 c3 bc 6d 20 c3 a7 65 72 65 7a 6c 65 72 69 20 6b 61 62 75 6c 20 65 74 6d 65 6b 20 69 73 74 65 72 73 65 6e 69 7a 20 27 54 c3 bc 6d 20 c3 a7 65 72 65 7a 6c 65 72 69 20 6b 61 62 75 6c 20 65 74 27 20 73 65 6b 6d 65 73 69 6e 69 20 73 65 c3 a7 65 62 69 6c 69 72 73 69 6e 69 7a 2e 22 2c 22 63 6f 6f 6b 69 65 5f 6e 6f 74 69 63 65 5f 63 6d 62 22 3a 22 c3 87 65 72 65 7a 20 42 69 6c 64 69 72 69 6d 69 e2 80 99 6d 69 7a 69 22 2c 22 63 6f 6f 6b 69 65 5f 6e 6f 74 69 63 65 5f 65 6e 64 5f 63 6d 62 22 3a 22 Data Ascii: gereklidir; bu nedenle otomatik olarak ayarlanrlar.","paragraph4_cmb":"stee bal tm erezleri kabul etmek isterseniz 'Tm erezleri kabul et' sekmesini seebilirsiniz.","cookie_notice_cmb":"erez Bildirimimizi","cookie_notice_end_cmb":"
2023-06-06 08:39:13 UTC	4989	IN	Data Raw: 75 6c 74 22 3a 22 66 61 6c 73 65 22 2c 22 63 61 74 65 67 6f 72 69 65 73 22 3a 7b 22 64 69 73 70 6c 61 79 5f 61 64 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 50 6c 69 6b 69 20 63 6f 6f 6b 69 65 20 64 6f 74 79 63 7a c4 85 63 65 20 74 61 72 67 65 74 6f 77 61 6e 69 61 20 6c 75 62 20 70 6c 69 6b 69 20 63 6f 6f 6b 69 65 20 64 6f 74 79 63 7a c4 85 63 65 20 72 65 6b 6c 61 6d 79 22 2c 22 6e 6f 74 65 73 22 3a 22 54 65 20 70 6c 69 6b 69 20 63 6f 6f 6b 69 65 20 73 c4 85 20 75 c5 bc 79 77 61 6e 65 20 77 20 63 65 6c 75 20 64 6f 73 74 61 72 63 7a 61 6e 69 61 20 72 65 6b 6c 61 6d 20 6c 65 70 69 65 6a 20 64 6f 70 61 73 6f 77 61 6e 79 63 68 20 64 6f 20 6f 64 77 69 65 64 7a 61 6a c4 85 63 65 67 6f 20 20 69 20 6a 65 67 6f 20 7a 61 69 6e 74 65 72 65 73 6f 77 61 c5 84 2e 20 53 c4 85 Data Ascii: ult":"false","categories":{"display_ads":{"name":"Pliki cookie dotyczce targetowania lub pliki cookie dotyczce reklamy","notes":"Te pliki cookie s uywane w celu dostarczania reklam lepiej dopasowanych do odwiedzajcego i jego zainteresowa. S
2023-06-06 08:39:13 UTC	5003	IN	Data Raw: 65 5f 6e 6f 74 69 63 65 5f 69 6e 74 72 6f 5f 63 6d 62 22 3a 22 57 65 69 74 65 72 65 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 65 6e 20 66 69 6e 64 65 6e 20 53 69 65 20 69 6e 20 75 6e 73 65 72 65 6e 20 22 2c 22 61 6c 6c 6f 77 5f 70 65 72 73 6f 6e 61 6c 69 73 61 74 69 6f 6e 5f 63 6d 62 22 3a 22 43 6f 6f 6b 69 65 73 2c 20 64 69 65 20 77 69 72 20 76 65 72 77 65 6e 64 65 6e 2c 20 75 6d 20 49 68 72 65 6e 20 42 65 73 75 63 68 20 70 65 72 73 c3 b6 6e 6c 69 63 68 65 72 20 7a 75 20 67 65 73 74 61 6c 74 65 6e 22 2c 22 63 61 74 65 67 6f 72 79 5f 63 6f 6f 6b 69 65 5f 64 65 73 63 5f 72 62 77 6d 22 3a 22 22 2c 22 61 64 76 65 72 74 69 73 69 6e 67 5f 64 65 73 63 5f 72 62 77 6d 22 3a 22 22 2c 22 61 6c 6c 6f 77 5f 61 6e 61 6c 79 74 69 63 73 5f 63 6d 62 22 3a 22 43 6f 6f 6b 69 65 Data Ascii: e_notice_intro_cmb":"Weitere Informationen finden Sie in unseren ","allow_personalisation_cmb":"Cookies, die wir verwenden, um Ihren Besuch persnlicher zu gestalten","category_cookie_desc_rbwm":"","advertising_desc_rbwm":"","allow_analytics_cmb":"Cookie
2023-06-06 08:39:13 UTC	5019	IN	Data Raw: cf 80 cf 81 ce bf ce b1 ce b9 cf 81 ce b5 cf 84 ce b9 ce ba ce ac 20 63 6f 6f 6b 69 65 73 20 ce b5 cf 80 ce b9 ce b8 cf 85 ce bc ce b5 ce af cf 84 ce b5 20 ce bd ce b1 20 ce b1 cf 80 ce bf ce b4 ce b5 cf 87 cf 84 ce b5 ce af cf 84 ce b5 2c 20 ce bf cf 81 ce b3 ce b1 ce bd cf 8e cf 83 ce b1 ce bc ce b5 20 ce b1 cf 85 cf 84 ce ac 20 cf 84 ce b1 20 63 6f 6f 6b 69 65 73 20 ce b1 ce bd ce ac 20 ce ba ce b1 cf 84 ce b7 ce b3 ce bf cf 81 ce af ce b1 2c 20 cf 8c cf 80 cf 89 cf 82 20 ce bf cf 81 ce af ce b6 ce bf ce bd cf 84 ce b1 ce b9 20 cf 80 ce b1 cf 81 ce b1 ce ba ce ac cf 84 cf 89 2e 22 2c 22 61 6c 6c 6f 77 5f 61 6e 61 6c 79 74 69 63 73 5f 63 6d 62 22 3a 22 22 2c 22 61 64 76 65 72 74 69 73 69 6e 67 5f 64 65 73 63 5f 72 62 77 6d 22 3a 22 ce 95 ce bc ce b5 ce Data Ascii: cookies , cookies , .","allow_analytics_cmb":"","advertising_desc_rbwm":"
2023-06-06 08:39:13 UTC	5035	IN	Data Raw: 65 74 20 73 65 72 76 69 63 65 73 20 6f 70 74 69 6f 6e 6e 65 6c 73 2e 20 4e 6f 74 72 65 20 73 69 74 65 20 69 6e 74 65 72 6e 65 74 20 70 65 75 74 20 74 6f 75 74 20 26 61 67 72 61 76 65 3b 20 66 61 69 74 20 66 6f 6e 63 74 69 6f 6e 6e 65 72 20 73 61 6e 73 20 65 75 78 2e 22 2c 22 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 5f 61 67 72 65 65 5f 72 62 77 6d 22 3a 22 22 2c 22 6d 6f 72 65 5f 61 62 6f 75 74 5f 63 6d 62 22 3a 22 45 6e 20 73 61 76 6f 69 72 20 70 6c 75 73 20 73 75 72 20 63 65 73 20 63 6f 6f 6b 69 65 73 22 2c 22 6d 65 73 73 61 67 65 5f 72 62 77 6d 22 3a 22 4c 65 73 20 63 6f 6f 6b 69 65 73 20 73 6f 6e 74 20 64 65 20 70 65 74 69 74 73 20 66 69 63 68 69 65 72 73 20 64 65 20 64 6f 6e 6e 26 65 61 63 75 74 65 3b 65 73 20 71 75 65 20 6c 65 73 20 73 69 74 65 Data Ascii: et services optionnels. Notre site internet peut tout à fait fonctionner sans eux.","personalization_agree_rbwm":"","more_about_cmb":"En savoir plus sur ces cookies","message_rbwm":"Les cookies sont de petits fichiers de données que les site
2023-06-06 08:39:13 UTC	5051	IN	Data Raw: 3d 22 6a 61 76 61 73 63 72 69 70 74 22 3b 73 63 72 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3b 73 63 72 2e 74 65 78 74 3d 22 74 72 79 7b 22 2b 64 74 63 2e 6a 73 2b 22 7d 20 63 61 74 63 68 28 65 29 7b 75 74 61 67 2e 44 42 28 65 29 7d 2f 2f 23 20 73 6f 75 72 63 65 55 52 4c 3d 70 72 65 66 65 72 65 6e 63 65 73 2e 6a 73 22 3b 73 63 72 2e 69 64 3d 22 5f 5f 74 65 61 6c 69 75 6d 47 44 50 52 63 70 50 72 65 66 73 53 63 72 69 70 74 22 3b 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 63 72 29 3b 7d 63 61 74 63 68 28 65 29 7b 75 74 61 67 2e 44 42 28 65 29 3b 7d 7d 3b 75 74 61 67 2e 67 64 70 72 2e 64 6e 73 3d 6e 75 6c 6c 3b 75 74 61 67 2e 74 72 61 63 6b 5f 6f 6c 64 3d 75 74 61 67 2e 74 72 61 63 6b 3b 75 74 61 67 2e 74 72 61 63 6b 3d Data Ascii: ="javascript";scr.type="text/javascript";scr.text="try{"+dtc.js+"} catch(e){utag.DB(e)}//# sourceURL=preferences.js";scr.id="__tealiumGDPRcpPrefsScript";head.appendChild(scr);}catch(e){utag.DB(e);}};utag.gdpr.dns=null;utag.track_old=utag.track;utag.track=
2023-06-06 08:39:13 UTC	5054	IN	Data Raw: 66 28 74 68 69 73 2e 6c 71 2e 6c 65 6e 67 74 68 3d 3d 30 29 75 74 61 67 2e 6c 6f 61 64 65 72 2e 45 4e 44 28 29 3b 72 65 74 75 72 6e 20 31 7d 3b 75 74 61 67 2e 6c 6f 61 64 65 72 2e 45 56 28 27 27 2c 27 72 65 61 64 79 27 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 75 74 61 67 2e 6c 6f 61 64 65 72 2e 65 66 72 21 3d 31 29 7b 75 74 61 67 2e 6c 6f 61 64 65 72 2e 65 66 72 3d 31 3b 74 72 79 7b 69 66 28 21 54 45 41 4c 49 55 4d 2e 63 63 6d 4e 6f 53 68 6f 77 29 7b 69 66 28 21 75 74 61 67 2e 67 64 70 72 2e 67 65 74 43 6f 6e 73 65 6e 74 53 74 61 74 65 28 29 29 7b 69 66 28 75 74 61 67 2e 67 64 70 72 2e 63 6f 6e 73 65 6e 74 5f 70 72 6f 6d 70 74 2e 69 73 45 6e 61 62 6c 65 64 29 7b 75 74 61 67 2e 67 64 70 72 2e 73 68 6f 77 45 78 70 6c 69 63 69 74 43 6f 6e 73 65 6e 74 Data Ascii: f(this.lq.length==0)utag.loader.END();return 1};utag.loader.EV('','ready',function(a){if(utag.loader.efr!=1){utag.loader.efr=1;try{if(!TEALIUM.ccmNoShow){if(!utag.gdpr.getConsentState()){if(utag.gdpr.consent_prompt.isEnabled){utag.gdpr.showExplicitConsent
2023-06-06 08:39:13 UTC	5070	IN	Data Raw: 72 3f 43 5b 65 3f 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 3a 22 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 5d 28 22 6d 65 73 73 61 67 65 22 2c 6e 29 3a 43 5b 65 3f 22 61 74 74 61 63 68 45 76 65 6e 74 22 3a 22 64 65 74 61 63 68 45 76 65 6e 74 22 5d 28 22 6f 6e 6d 65 73 73 61 67 65 22 2c 6e 29 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 7d 2c 72 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 2c 69 3d 22 30 31 32 33 34 35 36 37 38 39 22 2c 72 3d 22 22 2c 61 3d 22 22 2c 6f 3d 38 2c 73 3d 31 30 2c 63 3d 31 30 3b 69 66 28 31 3d 3d 65 29 7b 66 6f 72 28 69 2b 3d 22 41 42 43 44 45 46 22 2c 74 3d 30 3b 31 36 3e 74 3b 74 2b 2b 29 6e 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 6f 29 2c 72 2b Data Ascii: r?C[e?"addEventListener":"removeEventListener"]("message",n):C[e?"attachEvent":"detachEvent"]("onmessage",n))}catch(e){}}},re=function(e){var t,n,i="0123456789",r="",a="",o=8,s=10,c=10;if(1==e){for(i+="ABCDEF",t=0;16>t;t++)n=Math.floor(Math.random()*o),r+
2023-06-06 08:39:13 UTC	5086	IN	Data Raw: 6c 75 67 69 6e 5d 20 50 6c 75 67 69 6e 20 69 73 20 69 6e 76 61 6c 69 64 2e 22 3b 70 2e 43 61 74 65 67 6f 72 69 65 73 3d 66 65 2c 70 2e 54 69 6d 65 6f 75 74 45 72 72 6f 72 3d 66 3b 76 61 72 20 47 65 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 4f 70 74 49 6e 3a 70 2c 49 61 62 50 6c 75 67 69 6e 3a 5f 7d 29 2c 59 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 70 75 62 6c 69 73 68 44 65 73 74 69 6e 61 74 69 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 69 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 2c 72 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3b 74 72 79 7b 72 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 3f 72 3a 6e 2e 63 61 6c 6c 62 61 63 6b 7d 63 61 74 63 68 28 65 29 7b 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 76 61 Data Ascii: lugin] Plugin is invalid.";p.Categories=fe,p.TimeoutError=f;var Ge=Object.freeze({OptIn:p,IabPlugin:_}),Ye=function(e,t){e.publishDestinations=function(n){var i=arguments[1],r=arguments[2];try{r="function"==typeof r?r:n.callback}catch(e){r=function(){}}va
2023-06-06 08:39:13 UTC	5097	IN	Data Raw: 48 61 73 68 3d 53 74 72 69 6e 67 28 53 2e 5f 68 61 73 68 28 66 29 29 2c 53 2e 5f 6e 65 77 43 75 73 74 6f 6d 65 72 49 44 73 48 61 73 68 21 3d 3d 64 26 26 28 53 2e 5f 63 75 73 74 6f 6d 65 72 49 44 73 48 61 73 68 43 68 61 6e 67 65 64 3d 21 30 2c 53 2e 5f 6d 61 70 43 75 73 74 6f 6d 65 72 49 44 73 28 72 29 29 7d 7d 2c 53 2e 67 65 74 43 75 73 74 6f 6d 65 72 49 44 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 53 2e 5f 72 65 61 64 56 69 73 69 74 6f 72 28 29 3b 76 61 72 20 74 2c 6e 2c 69 3d 7b 64 61 74 61 53 6f 75 72 63 65 73 3a 7b 7d 2c 6e 61 6d 65 53 70 61 63 65 73 3a 7b 7d 7d 2c 72 3d 53 2e 5f 63 75 72 72 65 6e 74 43 75 73 74 6f 6d 65 72 49 44 73 2e 64 61 74 61 53 6f 75 72 63 65 73 3b 66 6f 72 28 74 20 69 6e 20 72 29 6a 28 74 29 26 26 28 6e 3d 72 5b 74 5d 2c 6e 2e Data Ascii: Hash=String(S._hash(f)),S._newCustomerIDsHash!==d&&(S._customerIDsHashChanged=!0,S._mapCustomerIDs(r))}},S.getCustomerIDs=function(e){S._readVisitor();var t,n,i={dataSources:{},nameSpaces:{}},r=S._currentCustomerIDs.dataSources;for(t in r)j(t)&&(n=r[t],n.
2023-06-06 08:39:13 UTC	5113	IN	Data Raw: 65 64 4f 75 74 3d 21 31 29 3a 74 68 69 73 2e 41 6e 61 6c 79 74 69 63 73 49 44 43 61 6c 6c 54 69 6d 65 64 4f 75 74 3d 74 3b 62 72 65 61 6b 3b 63 61 73 65 20 4e 3a 21 31 3d 3d 3d 74 3f 21 30 21 3d 3d 74 68 69 73 2e 41 41 4d 49 44 43 61 6c 6c 54 69 6d 65 64 4f 75 74 26 26 28 74 68 69 73 2e 41 41 4d 49 44 43 61 6c 6c 54 69 6d 65 64 4f 75 74 3d 21 31 29 3a 74 68 69 73 2e 41 41 4d 49 44 43 61 6c 6c 54 69 6d 65 64 4f 75 74 3d 74 7d 7d 7d 3b 53 2e 69 73 43 6c 69 65 6e 74 53 69 64 65 4d 61 72 6b 65 74 69 6e 67 43 6c 6f 75 64 56 69 73 69 74 6f 72 49 44 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 57 2e 69 73 43 6c 69 65 6e 74 53 69 64 65 4d 61 72 6b 65 74 69 6e 67 43 6c 6f 75 64 56 69 73 69 74 6f 72 49 44 7d 2c 53 2e 4d 43 49 44 43 61 6c 6c 54 69 6d 65 Data Ascii: edOut=!1):this.AnalyticsIDCallTimedOut=t;break;case N:!1===t?!0!==this.AAMIDCallTimedOut&&(this.AAMIDCallTimedOut=!1):this.AAMIDCallTimedOut=t}}};S.isClientSideMarketingCloudVisitorID=function(){return W.isClientSideMarketingCloudVisitorID},S.MCIDCallTime
2023-06-06 08:39:13 UTC	5114	IN	Data Raw: 64 2b 22 26 64 70 75 75 69 64 3d 22 2b 65 2e 64 70 75 75 69 64 2c 53 2e 69 64 53 79 6e 63 42 79 55 52 4c 28 65 29 29 3a 22 45 72 72 6f 72 3a 20 63 6f 6e 66 69 67 20 6f 72 20 63 6f 6e 66 69 67 2e 64 70 75 75 69 64 20 69 73 20 65 6d 70 74 79 22 7d 2c 59 65 28 53 2c 58 29 2c 53 2e 5f 67 65 74 43 6f 6f 6b 69 65 56 65 72 73 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3d 65 7c 7c 53 2e 63 6f 6f 6b 69 65 52 65 61 64 28 53 2e 63 6f 6f 6b 69 65 4e 61 6d 65 29 3b 76 61 72 20 74 3d 6f 65 2e 56 45 52 53 49 4f 4e 5f 52 45 47 45 58 2e 65 78 65 63 28 65 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 6c 65 6e 67 74 68 3e 31 3f 74 5b 31 5d 3a 6e 75 6c 6c 7d 2c 53 2e 5f 72 65 73 65 74 41 6d 63 76 43 6f 6f 6b 69 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d Data Ascii: d+"&dpuuid="+e.dpuuid,S.idSyncByURL(e)):"Error: config or config.dpuuid is empty"},Ye(S,X),S._getCookieVersion=function(e){e=e\|\|S.cookieRead(S.cookieName);var t=oe.VERSION_REGEX.exec(e);return t&&t.length>1?t[1]:null},S._resetAmcvCookie=function(e){var t=
2023-06-06 08:39:13 UTC	5130	IN	Data Raw: 20 79 6f 75 72 20 63 75 72 72 65 6e 74 20 64 6f 6d 61 69 6e 2c 20 74 68 65 72 65 20 69 73 20 6e 6f 20 22 6d 62 6f 78 44 69 73 61 62 6c 65 22 20 63 6f 6f 6b 69 65 20 61 6e 64 20 74 68 65 72 65 20 69 73 20 6e 6f 20 22 6d 62 6f 78 44 69 73 61 62 6c 65 22 20 70 61 72 61 6d 65 74 65 72 20 69 6e 20 71 75 65 72 79 20 73 74 72 69 6e 67 2e 27 2c 6d 6e 3d 22 41 64 6f 62 65 20 54 61 72 67 65 74 20 68 61 73 20 61 6c 72 65 61 64 79 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 7a 65 64 2e 22 2c 67 6e 3d 22 6f 70 74 69 6f 6e 73 20 61 72 67 75 6d 65 6e 74 20 69 73 20 72 65 71 75 69 72 65 64 22 2c 79 6e 3d 22 72 65 71 75 65 73 74 20 6f 70 74 69 6f 6e 20 69 73 20 72 65 71 75 69 72 65 64 22 2c 62 6e 3d 22 72 65 73 70 6f 6e 73 65 20 6f 70 74 69 6f 6e 20 69 73 20 72 65 71 75 69 Data Ascii: your current domain, there is no "mboxDisable" cookie and there is no "mboxDisable" parameter in query string.',mn="Adobe Target has already been initialized.",gn="options argument is required",yn="request option is required",bn="response option is requi
2023-06-06 08:39:13 UTC	5145	IN	Data Raw: 61 73 65 28 29 3a 22 22 7d 29 29 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 73 2e 63 61 6c 6c 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 29 7b 72 65 74 75 72 6e 20 74 2e 69 6e 64 65 78 4f 66 28 6e 29 3d 3d 65 7d 29 29 7d 2c 49 2e 66 72 61 67 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6f 29 7b 76 61 72 20 69 2c 75 2c 63 3b 72 65 74 75 72 6e 20 6d 2e 74 65 73 74 28 74 29 26 26 28 69 3d 72 28 6c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 52 65 67 45 78 70 2e 24 31 29 29 29 2c 69 7c 7c 28 74 2e 72 65 70 6c 61 63 65 26 26 28 74 3d 74 2e 72 65 70 6c 61 63 65 28 67 2c 22 3c 24 31 3e 3c 2f 24 32 3e 22 29 29 2c 65 3d 3d 3d 6e 26 26 28 65 3d 68 2e 74 65 73 74 28 74 29 26 26 52 65 67 45 78 70 2e 24 31 29 2c 65 20 69 6e 20 Data Ascii: ase():""}))},u=function(t){return s.call(t,(function(n,e){return t.indexOf(n)==e}))},I.fragment=function(t,e,o){var i,u,c;return m.test(t)&&(i=r(l.createElement(RegExp.$1))),i\|\|(t.replace&&(t=t.replace(g,"<$1></$2>")),e===n&&(e=h.test(t)&&RegExp.$1),e in
2023-06-06 08:39:13 UTC	5148	IN	Data Raw: 79 28 29 3a 6e 3b 72 65 74 75 72 6e 20 61 2e 61 70 70 6c 79 28 49 2e 69 73 5a 28 74 68 69 73 29 3f 74 68 69 73 2e 74 6f 41 72 72 61 79 28 29 3a 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 72 28 72 2e 6d 61 70 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 6e 2c 65 2c 6e 29 7d 29 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 28 66 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 2c 72 65 61 64 79 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6b 2e 74 65 73 74 28 6c 2e 72 65 61 64 79 53 74 61 74 65 29 26 26 6c 2e 62 6f 64 79 3f 74 28 72 29 3a 6c 2e 61 64 64 45 76 65 6e 74 Data Ascii: y():n;return a.apply(I.isZ(this)?this.toArray():this,e)},map:function(t){return r(r.map(this,(function(n,e){return t.call(n,e,n)})))},slice:function(){return r(f.apply(this,arguments))},ready:function(t){return k.test(l.readyState)&&l.body?t(r):l.addEvent
2023-06-06 08:39:13 UTC	5155	IN	Data Raw: 67 65 58 4f 66 66 73 65 74 3a 74 68 69 73 2e 65 61 63 68 28 65 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 63 72 6f 6c 6c 4c 65 66 74 3d 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 63 72 6f 6c 6c 54 6f 28 74 2c 74 68 69 73 2e 73 63 72 6f 6c 6c 59 29 7d 29 7d 7d 2c 70 6f 73 69 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 74 3d 74 68 69 73 5b 30 5d 2c 6e 3d 74 68 69 73 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 28 29 2c 65 3d 74 68 69 73 2e 6f 66 66 73 65 74 28 29 2c 6f 3d 62 2e 74 65 73 74 28 6e 5b 30 5d 2e 6e 6f 64 65 4e 61 6d 65 29 3f 7b 74 6f 70 3a 30 2c 6c 65 66 74 3a 30 7d 3a 6e 2e 6f 66 66 73 65 74 28 29 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2d 3d 70 61 72 73 65 46 Data Ascii: geXOffset:this.each(e?function(){this.scrollLeft=t}:function(){this.scrollTo(t,this.scrollY)})}},position:function(){if(this.length){var t=this[0],n=this.offsetParent(),e=this.offset(),o=b.test(n[0].nodeName)?{top:0,left:0}:n.offset();return e.top-=parseF
2023-06-06 08:39:13 UTC	5171	IN	Data Raw: 6e 22 2c 5a 75 3d 22 6d 62 6f 78 44 65 62 75 67 54 6f 6f 6c 73 22 3b 66 75 6e 63 74 69 6f 6e 20 4a 75 28 29 7b 76 61 72 20 74 2c 6e 3d 5a 28 74 3d 58 72 28 69 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 29 5b 42 75 5d 29 3f 6e 75 6c 6c 3a 74 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 6e 6f 28 5a 75 29 3b 72 65 74 75 72 6e 20 5a 28 74 29 3f 6e 75 6c 6c 3a 74 7d 28 29 3b 72 65 74 75 72 6e 20 6e 7c 7c 65 7d 66 75 6e 63 74 69 6f 6e 20 47 75 28 74 29 7b 72 65 74 75 72 6e 21 48 28 74 29 26 26 32 3d 3d 3d 74 2e 6c 65 6e 67 74 68 26 26 6e 74 28 74 5b 30 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 75 28 74 2c 6e 2c 65 2c 72 29 7b 71 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 29 7b 78 28 74 29 3f 28 6e 2e 70 75 73 68 28 6f 29 2c 4b 75 28 74 2c 6e 2c Data Ascii: n",Zu="mboxDebugTools";function Ju(){var t,n=Z(t=Xr(i.location.search)[Bu])?null:t,e=function(){var t=no(Zu);return Z(t)?null:t}();return n\|\|e}function Gu(t){return!H(t)&&2===t.length&&nt(t[0])}function Ku(t,n,e,r){q((function(t,o){x(t)?(n.push(o),Ku(t,n,
2023-06-06 08:39:13 UTC	5187	IN	Data Raw: 2c 68 3d 41 28 75 74 28 47 61 2c 66 29 29 2c 6d 3d 41 28 75 74 28 47 61 2c 64 29 29 3b 72 65 74 75 72 6e 20 41 28 5b 76 2c 70 2c 68 2c 6d 5d 29 7d 28 74 29 2c 65 3d 7b 7d 3b 72 65 74 75 72 6e 20 48 28 6e 29 7c 7c 28 65 2e 72 65 73 70 6f 6e 73 65 54 6f 6b 65 6e 73 3d 6e 29 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 73 73 28 74 29 7b 76 61 72 20 6e 3d 61 73 28 74 29 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 6e 3d 74 2e 65 78 65 63 75 74 65 2c 65 3d 76 6f 69 64 20 30 3d 3d 3d 6e 3f 7b 7d 3a 6e 2c 72 3d 74 2e 70 72 65 66 65 74 63 68 2c 6f 3d 76 6f 69 64 20 30 3d 3d 3d 72 3f 7b Data Ascii: ,h=A(ut(Ga,f)),m=A(ut(Ga,d));return A([v,p,h,m])}(t),e={};return H(n)\|\|(e.responseTokens=n),e}function ss(t){var n=as(t),e=function(){var t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{},n=t.execute,e=void 0===n?{}:n,r=t.prefetch,o=void 0===r?{
2023-06-06 08:39:13 UTC	5203	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 6c 28 74 29 7b 69 66 28 70 28 74 29 29 72 65 74 75 72 6e 5b 6e 75 6c 6c 5d 3b 76 61 72 20 6e 3d 75 74 28 6b 6c 2c 5b 74 5d 29 3b 72 65 74 75 72 6e 20 77 6c 28 6e 29 26 26 78 6f 28 78 6c 2c 74 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 41 6c 28 74 29 7b 76 61 72 20 6e 3d 41 28 5b 54 6c 28 74 5b 30 5d 29 2c 4f 6c 28 74 5b 31 5d 29 2c 4e 6c 28 74 5b 32 5d 29 2c 5f 6c 28 74 5b 33 5d 29 5d 29 2c 65 3d 5f 28 42 63 2c 6e 29 2c 72 3d 5f 28 47 63 2c 65 29 3b 72 65 74 75 72 6e 20 48 28 72 29 3f 6a 6f 28 65 29 3a 44 6f 28 72 29 7d 66 75 6e 63 74 69 6f 6e 20 50 6c 28 74 29 7b 72 65 74 75 72 6e 20 44 6f 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 71 6c 28 74 2c 6e 29 7b 69 66 28 21 48 28 6e 29 29 7b 76 61 72 20 65 3d 6e 2e 6f 70 74 69 6f 6e 73 3b Data Ascii: function _l(t){if(p(t))return[null];var n=ut(kl,[t]);return wl(n)&&xo(xl,t),n}function Al(t){var n=A([Tl(t[0]),Ol(t[1]),Nl(t[2]),_l(t[3])]),e=_(Bc,n),r=_(Gc,e);return H(r)?jo(e):Do(r)}function Pl(t){return Do(t)}function ql(t,n){if(!H(n)){var e=n.options;
2023-06-06 08:39:13 UTC	5219	IN	Data Raw: 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 4e 42 28 61 2c 69 29 7b 76 61 72 20 6e 3d 22 22 3b 69 66 28 61 2e 6c 65 6e 67 74 68 3d 3d 30 29 7b 72 65 74 75 72 6e 5b 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2c 22 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 22 5d 7d 65 6c 73 65 20 69 66 28 61 2e 6c 65 6e 67 74 68 3d 3d 31 29 7b 6e 3d 22 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 22 2b 61 5b 30 5d 2b 22 5d 22 7d 65 6c 73 65 7b 6e 3d 22 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 22 2b 61 5b 30 5d 2b 22 5d 22 3b 66 6f 72 28 69 3d 31 3b 69 3c 61 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 6e 3d 6e 2b 22 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 22 2b 61 5b 69 5d 2b 22 5d 22 7d 7d 72 65 74 75 72 6e 5b 65 76 61 6c 28 Data Ascii: rict";function NB(a,i){var n="";if(a.length==0){return[document.body,"document.body"]}else if(a.length==1){n="document.body.childNodes["+a[0]+"]"}else{n="document.body.childNodes["+a[0]+"]";for(i=1;i<a.length;i++){n=n+".childNodes["+a[i]+"]"}}return[eval(

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
135	192.168.2.4	49969	18.66.192.16	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:14 UTC	5233	OUT	GET /utag/hsbc/uk-cmb/prod/utag.41.js?utv=ut4.42.202306021443 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:39:14 UTC	5234	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 17737 Connection: close Date: Tue, 06 Jun 2023 08:39:15 GMT Last-Modified: Fri, 02 Jun 2023 14:44:34 GMT ETag: "a883f4c616fbd242bdc6901d6e08f3e6" x-amz-server-side-encryption: AES256 x-amz-version-id: s9gxgS0aQfxzqxLVz8K1SvhPus1K1Min Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 1a45d1e1304c39dfa9b034c2308f4976.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P1 X-Amz-Cf-Id: xvQaaXNBcbtQy22Yb2BUrR_9hdNbiWjMQs5lkuylUPdopXMq8zgKvw== Cache-Control: max-age=1296000
2023-06-06 08:39:14 UTC	5234	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 34 31 20 75 74 34 2e 30 2e 32 30 32 33 30 36 30 32 31 34 34 34 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 33 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 77 69 6e 64 6f 77 2e 6c 70 54 61 67 3d 77 69 6e 64 6f 77 2e 6c 70 54 61 67 7c 7c 7b 7d 3b 6c 70 54 61 67 2e 73 64 65 73 3d 6c 70 54 61 67 2e 73 64 65 73 7c 7c 5b 5d 3b 77 69 6e 64 6f 77 2e 6c 70 54 61 67 2e 61 75 74 6f 53 74 61 72 74 3d 66 61 6c 73 65 3b 66 75 6e 63 74 69 6f 6e 20 74 65 61 6c 69 75 6d 5f 6c 69 76 65 70 65 72 73 6f 6e 5f 6c 69 62 28 5f 73 69 74 65 2c 5f 73 65 63 74 69 6f 6e 29 7b 69 66 28 28 7b 7d 29 2e 74 6f 53 74 72 69 6e Data Ascii: //tealium universal tag - utag.41 ut4.0.202306021444, Copyright 2023 Tealium.com Inc. All Rights Reserved.window.lpTag=window.lpTag\|\|{};lpTag.sdes=lpTag.sdes\|\|[];window.lpTag.autoStart=false;function tealium_liveperson_lib(_site,_section){if(({}).toStrin
2023-06-06 08:39:14 UTC	5242	IN	Data Raw: 73 2d 6c 6f 61 6e 27 3a 27 75 6b 2c 65 6e 67 6c 69 73 68 2c 70 77 73 2c 62 69 62 20 70 72 6f 64 75 63 74 73 2c 53 42 4c 20 4c 6f 61 6e 73 20 50 72 6f 64 75 63 74 73 27 7d 2c 7b 27 2f 65 6e 2d 67 62 2f 65 76 65 72 79 64 61 79 2d 62 61 6e 6b 69 6e 67 2f 77 61 79 73 2d 74 6f 2d 62 61 6e 6b 2f 62 75 73 69 6e 65 73 73 2d 69 6e 74 65 72 6e 65 74 2d 62 61 6e 6b 69 6e 67 27 3a 27 75 6b 2c 65 6e 67 6c 69 73 68 2c 70 77 73 2c 62 69 62 2c 42 75 73 69 6e 65 73 73 20 49 6e 74 65 72 6e 65 74 20 42 61 6e 6b 69 6e 67 27 7d 2c 7b 27 2f 65 6e 2d 67 62 2f 62 69 62 2d 68 65 6c 70 2d 63 65 6e 74 72 65 27 3a 27 75 6b 2c 65 6e 67 6c 69 73 68 2c 70 77 73 2c 62 69 62 2c 42 49 42 20 48 65 6c 70 20 43 65 6e 74 72 65 27 7d 2c 7b 27 2f 65 6e 2d 67 62 2f 62 69 62 2d 68 65 6c 70 2d 63 Data Ascii: s-loan':'uk,english,pws,bib products,SBL Loans Products'},{'/en-gb/everyday-banking/ways-to-bank/business-internet-banking':'uk,english,pws,bib,Business Internet Banking'},{'/en-gb/bib-help-centre':'uk,english,pws,bib,BIB Help Centre'},{'/en-gb/bib-help-c

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
136	192.168.2.4	49970	62.138.155.102	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:14 UTC	5252	OUT	GET /commercial-banking/build/init.js HTTP/1.1 Host: askus.business.hsbc.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: utag_main=v_id:01888fdcaa1f00511f81618bb8280006f002206700918$_sn:1$_ss:1$_st:1686042583393$ses_id:1686040783393%3Bexp-session$_pn:1%3Bexp-session
2023-06-06 08:39:14 UTC	5252	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:44:27 GMT Server: Apache Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT Access-Control-Max-Age: 1000 Access-Control-Allow-Headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token Strict-Transport-Security: max-age=16070400; includeSubdomains; Last-Modified: Tue, 29 Jun 2021 08:53:29 GMT ETag: "a9f-5c5e3bd6adbc8" Accept-Ranges: bytes Content-Length: 2719 Vary: Accept-Encoding Cache-Control: max-age=604800 Expires: Tue, 13 Jun 2023 08:44:27 GMT ServerLoc: 2 Access-Control-Allow-Origin: * Connection: close Content-Type: application/javascript
2023-06-06 08:39:14 UTC	5253	IN	Data Raw: 76 61 72 20 56 41 4d 44 20 3d 20 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 09 76 61 72 20 73 65 6c 66 20 3d 20 7b 7d 3b 0d 0a 09 0d 0a 09 73 65 6c 66 2e 6c 6f 61 64 65 72 43 6f 6e 66 69 67 20 3d 20 7b 0d 0a 09 09 61 70 70 52 6f 6f 74 3a 20 27 2f 2f 61 73 6b 75 73 2e 62 75 73 69 6e 65 73 73 2e 68 73 62 63 2e 75 6b 2f 63 6f 6d 6d 65 72 63 69 61 6c 2d 62 61 6e 6b 69 6e 67 2f 62 75 69 6c 64 27 2c 20 2f 2f 20 73 65 74 20 61 70 70 20 6c 6f 63 61 74 69 6f 6e 0d 0a 09 09 76 65 72 73 69 6f 6e 3a 20 30 2c 0d 0a 09 7d 3b 0d 0a 09 0d 0a 09 73 65 6c 66 2e 69 6e 6a 65 63 74 56 41 20 3d 20 66 75 6e 63 74 69 6f 6e 28 64 61 74 61 29 20 7b 0d 0a 09 09 76 61 72 20 66 69 6c 65 56 65 72 73 69 6f 6e 20 3d 20 64 61 74 61 2e 76 65 72 3b 0d 0a 09 09 76 61 72 20 76 61 73 63 Data Ascii: var VAMD = (function () {var self = {};self.loaderConfig = {appRoot: '//askus.business.hsbc.uk/commercial-banking/build', // set app locationversion: 0,};self.injectVA = function(data) {var fileVersion = data.ver;var vasc

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
137	192.168.2.4	49971	18.66.192.16	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:14 UTC	5256	OUT	GET /utag/tiqapp/utag.v.js?a=hsbc/uk-cmb/202306021443&cb=1686040783784 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:39:14 UTC	5256	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2 Connection: close Last-Modified: Sat, 11 Mar 2023 06:57:46 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 2XUX04X5QEw0.xFya64khU._sHTRl_Pz Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 06 Jun 2023 08:39:01 GMT ETag: "7bc0ee636b3b83484fc3b9348863bd22" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 986e79a1f22b8bf29001818ede5df5c8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P1 X-Amz-Cf-Id: Sft0wHEQkWnftWSBXIi3a-xtd91PMDvfF1gBv-MC4EilPZ5SuJC8sg== Age: 54 Cache-Control: max-age=300
2023-06-06 08:39:14 UTC	5257	IN	Data Raw: 2f 2f Data Ascii: //

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
138	192.168.2.4	49973	35.81.20.183	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:16 UTC	5257	OUT	POST /eumcollector/beacons/browser/v1/AD-AAB-AAF-XXU/adrum HTTP/1.1 Host: col.eum-appdynamics.com Connection: keep-alive Content-Length: 3059 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Content-type: text/plain Accept: / Origin: https://www.hsbc.co.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:39:16 UTC	5257	OUT	Data Raw: 7b 22 76 72 22 3a 22 34 2e 32 2e 37 2e 31 22 2c 22 64 74 22 3a 22 52 22 2c 22 72 67 22 3a 22 30 22 2c 22 65 73 22 3a 5b 7b 22 65 67 22 3a 22 31 22 2c 22 65 74 22 3a 32 2c 22 65 75 22 3a 22 30 3a 2f 2f 31 2f 32 2f 33 22 2c 22 74 73 22 3a 31 36 38 36 30 34 30 37 36 38 38 32 32 2c 22 6d 67 22 3a 22 30 22 2c 22 61 75 22 3a 22 30 3a 2f 2f 34 2f 22 2c 22 61 74 22 3a 30 2c 22 70 70 22 3a 31 2c 22 6d 78 22 3a 7b 22 50 4c 43 22 3a 31 2c 22 46 42 54 22 3a 33 32 31 2c 22 44 44 54 22 3a 30 2c 22 44 50 54 22 3a 30 2c 22 50 4c 54 22 3a 33 32 31 2c 22 41 52 45 22 3a 30 7d 2c 22 6d 64 22 3a 22 47 45 54 22 2c 22 73 69 22 3a 30 7d 2c 7b 22 65 67 22 3a 22 32 22 2c 22 65 74 22 3a 32 2c 22 65 75 22 3a 22 30 3a 2f 2f 34 2f 35 2f 36 2f 37 2f 22 2c 22 74 73 22 3a 31 36 38 36 30 Data Ascii: {"vr":"4.2.7.1","dt":"R","rg":"0","es":[{"eg":"1","et":2,"eu":"0://1/2/3","ts":1686040768822,"mg":"0","au":"0://4/","at":0,"pp":1,"mx":{"PLC":1,"FBT":321,"DDT":0,"DPT":0,"PLT":321,"ARE":0},"md":"GET","si":0},{"eg":"2","et":2,"eu":"0://4/5/6/7/","ts":16860
2023-06-06 08:39:16 UTC	5260	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:39:16 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:23\|g:0fdef93b-47c4-4661-b966-573c2f57f185; Path=/; Expires=Tue, 06-Jun-2023 08:39:46 GMT; Max-Age=30 expires: 0 set-cookie: ADRUM_BTa=R:23\|g:0fdef93b-47c4-4661-b966-573c2f57f185\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Tue, 06-Jun-2023 08:39:46 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Tue, 06-Jun-2023 08:39:46 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:23\|i:559461; Path=/; Expires=Tue, 06-Jun-2023 08:39:46 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:23\|i:559461\|e:17; Path=/; Expires=Tue, 06-Jun-2023 08:39:46 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2023-06-06 08:39:16 UTC	5261	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
139	192.168.2.4	49975	35.81.20.183	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:16 UTC	5261	OUT	POST /eumcollector/beacons/browser/v1/AD-AAB-AAF-XXU/adrum HTTP/1.1 Host: col.eum-appdynamics.com Connection: keep-alive Content-Length: 7350 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Content-type: text/plain Accept: / Origin: https://www.hsbc.co.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:39:16 UTC	5262	OUT	Data Raw: 7b 22 76 72 22 3a 22 34 2e 32 2e 37 2e 31 22 2c 22 64 74 22 3a 22 52 22 2c 22 72 67 22 3a 22 30 22 2c 22 65 73 22 3a 5b 7b 22 65 67 22 3a 22 30 22 2c 22 65 74 22 3a 30 2c 22 65 75 22 3a 22 30 3a 2f 2f 31 2f 22 2c 22 74 73 22 3a 31 36 38 36 30 34 30 37 36 34 39 34 35 2c 22 6d 63 22 3a 7b 22 50 4c 54 22 3a 31 32 34 37 32 2c 22 46 42 54 22 3a 31 36 38 31 2c 22 46 45 54 22 3a 31 30 37 39 31 2c 22 44 52 54 22 3a 31 38 33 34 2c 22 50 52 54 22 3a 38 39 35 37 2c 22 44 4f 4d 22 3a 33 35 31 35 2c 22 74 73 22 3a 31 36 38 36 30 34 30 37 36 34 39 34 35 2c 22 50 4c 43 22 3a 31 7d 2c 22 6d 78 22 3a 7b 22 50 4c 54 22 3a 31 32 34 37 30 2c 22 46 42 54 22 3a 31 32 30 33 2c 22 53 43 54 22 3a 31 31 33 31 2c 22 53 48 54 22 3a 37 39 34 2c 22 44 4c 54 22 3a 35 32 2c 22 54 43 50 Data Ascii: {"vr":"4.2.7.1","dt":"R","rg":"0","es":[{"eg":"0","et":0,"eu":"0://1/","ts":1686040764945,"mc":{"PLT":12472,"FBT":1681,"FET":10791,"DRT":1834,"PRT":8957,"DOM":3515,"ts":1686040764945,"PLC":1},"mx":{"PLT":12470,"FBT":1203,"SCT":1131,"SHT":794,"DLT":52,"TCP
2023-06-06 08:39:17 UTC	5269	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:39:16 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:23\|g:ad631c67-eb70-417f-a86c-9584b800fff3; Path=/; Expires=Tue, 06-Jun-2023 08:39:46 GMT; Max-Age=30 expires: 0 set-cookie: ADRUM_BTa=R:23\|g:ad631c67-eb70-417f-a86c-9584b800fff3\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Tue, 06-Jun-2023 08:39:46 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Tue, 06-Jun-2023 08:39:46 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:23\|i:559461; Path=/; Expires=Tue, 06-Jun-2023 08:39:46 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:23\|i:559461\|e:3; Path=/; Expires=Tue, 06-Jun-2023 08:39:46 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2023-06-06 08:39:17 UTC	5270	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
14	192.168.2.4	49709	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:20 UTC	288	OUT	GET /front_end/front_end_files/masthead-ie7.css HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hs-login.online/front_end/front_end_files/ursula.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:20 UTC	298	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:20 GMT Content-Type: text/css Content-Length: 2163 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:43 GMT ETag: "873-5fd654320f113" Accept-Ranges: bytes Vary: Accept-Encoding
2023-06-06 08:38:20 UTC	298	IN	Data Raw: 23 74 61 62 73 20 6c 69 20 61 2c 0a 23 6c 61 6e 67 4c 69 73 74 20 6c 69 20 61 2c 0a 23 6c 6f 63 61 6c 65 20 61 2e 64 72 6f 70 44 6f 77 6e 4c 69 6e 6b 20 73 70 61 6e 2c 0a 23 6c 6f 67 6f 6e 20 61 2e 72 65 64 42 74 6e 20 73 70 61 6e 2c 0a 23 6c 6f 67 6f 6e 20 61 2e 77 68 69 74 65 42 74 6e 20 73 70 61 6e 2c 0a 23 6c 6f 67 6f 6e 20 61 2e 67 72 65 79 42 74 6e 20 73 70 61 6e 0a 7b 0a 09 68 65 69 67 68 74 3a 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 23 6c 6f 63 61 6c 65 20 2e 72 65 67 69 6f 6e 54 61 62 73 20 6c 69 20 61 0a 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 6c 65 66 74 20 74 6f 70 3b 0a 7d 0a 2e 6e 61 76 20 6c 69 0a 7b 0a 09 70 61 64 64 69 6e 67 3a 37 70 78 20 30 3b 0a 7d 0a 2e 6e 61 76 20 6c 69 2e 6d 75 6c 74 69 54 Data Ascii: #tabs li a,#langList li a,#locale a.dropDownLink span,#logon a.redBtn span,#logon a.whiteBtn span,#logon a.greyBtn span{height:auto!important;}#locale .regionTabs li a{background-position:left top;}.nav li{padding:7px 0;}.nav li.multiT

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
140	192.168.2.4	49999	91.214.5.154	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:17 UTC	5270	OUT	POST /7198/28323834333/XBW09WEA78JG/jsEvent.json HTTP/1.1 Host: www.mcmprod.hsbc.co.uk Connection: keep-alive Content-Length: 226 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.hsbc.co.uk Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373; tms_ref=; servicingTrafficManagement2=SegmentNewJourney; servicingTrafficManagement3=SegmentNewJourney; utag_main=v_id:01888fdc714a00035f72975780d20006f001706700918$_sn:1$_se:1$_ss:1$_st:1686042568844$ses_id:1686040768844%3Bexp-session$_pn:1%3Bexp-session$sskey:undefined%3Bexp-1688632768902; dclid=undefined; csaHSBCCDID=null_3_c7f160f6f0dd4b84a2ade40154d2aeb6; csaHSBCCDuvt=3d5d8181e50046c29c68de5282d08ef7; usy46gabsosd=csaHSBC__2832383536_1686040769823_1686040741384_7198; csaHSBCkey=c7f160f6f0dd4b84a2ade40154d2aeb6; csaHSBCuvt=3d5d8181e50046c29c68de5282d08ef7_1686040741384_2832383536_1686040741384_1; csaHSBCDBID=null_3; MCM-PROD-WDC=3481586442.47873.0000; TS01977c0f=0105ea404a0ae1643d10124947041d2106f5db06bef02c69c8b92131d5833891fae19c2af57d9a07897a601314990bc367f23003cd; LPVID=JkZDY4ZThjNmZkYmZiMTUx; LPSID-8181236=Y0UXDFinQhG9AMSBGzKPtQ; vtz47gabsosd=csaHSBC__2832383536_1686040778676_1686040741384_7198
2023-06-06 08:39:17 UTC	5272	OUT	Data Raw: 7a 3d 6e 75 6c 6c 5f 33 5f 63 37 66 31 36 30 66 36 66 30 64 64 34 62 38 34 61 32 61 64 65 34 30 31 35 34 64 32 61 65 62 36 26 79 3d 38 33 32 33 36 35 31 34 33 38 33 21 32 2b 45 3d 3d 6e 21 35 33 21 61 31 37 4b 72 6b 31 30 76 61 70 77 6f 65 74 2b 62 77 30 2b 35 30 3d 36 2b 31 33 3d 31 62 37 38 34 30 33 3d 31 62 78 36 30 36 38 36 31 36 30 37 37 36 31 79 3d 2b 62 38 39 2b 36 38 3d 30 34 33 30 38 34 62 7a 38 2b 63 32 33 31 34 30 36 30 35 32 37 38 35 30 37 33 31 36 61 3d 30 34 38 36 30 36 38 37 38 2b 32 32 3d 31 61 44 36 2b 74 66 31 63 34 30 33 37 36 31 7a 3d 30 38 34 34 62 37 66 36 36 30 64 64 66 64 32 35 34 62 61 64 61 32 30 31 65 34 74 3a 68 70 73 36 61 65 3d 31 2b 61 74 Data Ascii: z=null_3_c7f160f6f0dd4b84a2ade40154d2aeb6&y=83236514383!2+E==n!53!a17Krk10vapwoet+bw0+50=6+13=1b78403=1bx606861607761y=+b89+68=043084bz8+c23140605278507316a=048606878+22=1aD6+tf1c403761z=0844b7f660ddfd254bada201e4t:hps6ae=1+at
2023-06-06 08:39:17 UTC	5272	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:39:17 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Access-Control-Allow-Origin: https://www.hsbc.co.uk Access-Control-Allow-Credentials: true Content-Type: application/json X-Content-Type-Options: nosniff Pragma: no-cache Cache-Control: no-store Cache-Control: no-cache P3P: CP="NON ADMo DEVo PSAo PSDo IVAo IVDo OUR IND UNI COM NAV INT CNT LOC STA PUR PHY ONL" Content-Length: 50 Set-Cookie: vtz47gabsosd=csaHSBC__2832383536_1686040786137_1686040741384_7198; secure; SameSite=None; path=/; HttpOnly Set-Cookie: csaHSBCCDID=null_3_c7f160f6f0dd4b84a2ade40154d2aeb6; secure; SameSite=None; path=/; HttpOnly Vary: User-Agent S: LWSMCMRP102UK Connection: close Set-Cookie: TS01977c0f=0105ea404af64ea2ac53192bfdc78ee78537906fd37370371b4b6c780bd83eccaa74dc87d9f5031d6f5319b8407a6b18df0deba9b8; Path=/
2023-06-06 08:39:17 UTC	5273	IN	Data Raw: 7b 22 63 6f 6e 74 65 6e 74 52 65 73 70 6f 6e 73 65 22 3a 22 5b 5d 22 2c 22 72 65 73 70 6f 6e 73 65 52 65 63 65 69 76 65 64 22 3a 22 74 72 75 65 22 7d Data Ascii: {"contentResponse":"[]","responseReceived":"true"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
141	192.168.2.4	50011	62.138.155.102	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:20 UTC	5273	OUT	GET /commercial-banking/build/ver.js?callback=cvversion&v=1686040789 HTTP/1.1 Host: askus.business.hsbc.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: utag_main=v_id:01888fdcaa1f00511f81618bb8280006f002206700918$_sn:1$_ss:0$_st:1686042583801$ses_id:1686040783393%3Bexp-session$_pn:1%3Bexp-session$_prevpage:pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage%3Bexp-session
2023-06-06 08:39:20 UTC	5277	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:44:33 GMT Server: Apache Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT Access-Control-Max-Age: 1000 Access-Control-Allow-Headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token Strict-Transport-Security: max-age=16070400; includeSubdomains; Last-Modified: Fri, 05 May 2023 15:23:23 GMT ETag: "23-5faf3deac017b" Accept-Ranges: bytes Content-Length: 35 Cache-Control: max-age=604800 Expires: Tue, 13 Jun 2023 08:44:33 GMT ServerLoc: 2 Access-Control-Allow-Origin: * Connection: close Content-Type: application/javascript
2023-06-06 08:39:20 UTC	5278	IN	Data Raw: 63 76 76 65 72 73 69 6f 6e 28 7b 0d 0a 09 22 76 65 72 22 3a 20 31 36 33 35 38 38 35 33 34 33 0d 0a 7d 29 Data Ascii: cvversion({"ver": 1635885343})

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
142	192.168.2.4	50013	178.249.96.141	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:20 UTC	5274	OUT	GET /api/js/8181236?sid=Y0UXDFinQhG9AMSBGzKPtQ&cb=lpCb56296x84956&t=ip&ts=1686040789168&pid=114028263&tid=4972823587&vid=JkZDY4ZThjNmZkYmZiMTUx HTTP/1.1 Host: lo0.v.liveperson.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:39:20 UTC	5274	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:39:20 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: no-store Server: ws Access-Control-Allow-Methods: GET, POST, PATCH Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token Access-Control-Expose-Headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-06-06 08:39:20 UTC	5276	IN	Data Raw: 34 39 0d 0a 6c 70 43 62 35 36 32 39 36 78 38 34 39 35 36 28 7b 22 73 6d 74 43 6f 6e 66 22 3a 7b 22 6b 65 65 70 41 6c 69 76 65 46 72 65 71 22 3a 31 30 7d 2c 22 6d 65 73 73 61 67 65 73 54 6f 56 69 73 69 74 6f 72 22 3a 5b 5d 7d 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 49lpCb56296x84956({"smtConf":{"keepAliveFreq":10},"messagesToVisitor":[]});0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
143	192.168.2.4	50014	178.249.97.70	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:20 UTC	5276	OUT	GET /api/js/50632853?&cb=lpCb59497x14671&t=sp&ts=1686040789216&pid=1524647234&tid=4578057391&pt=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&u=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&sec=%5B%22uk%22%2C%22english%22%2C%22pws%22%2C%22business%20banking%22%2C%22Default%22%5D&df=0&os=0&sdes=%5B%7B%22type%22%3A%22ctmrinfo%22%2C%22info%22%3A%7B%22cstatus%22%3A%22United%20Kingdom%22%2C%22ctype%22%3A%22en-GB%22%7D%7D%2C%7B%22type%22%3A%22cart%22%2C%22numItems%22%3A0%2C%22products%22%3A%5B%7B%22product%22%3A%7B%22name%22%3A%22site_region-Europe_UK_United_Kingdom_HSBC_Bank_Plc_HSBC%22%2C%22price%22%3Anull%7D%2C%22quantity%22%3Anull%7D%2C%7B%22product%22%3A%7B%22name%22%3A%22en-GB%22%2C%22price%22%3Anull%7D%2C%22quantity%22%3Anull%7D%5D%7D%2C%7B%22type%22%3A%22ctmrinfo%22%2C%22info%22%3A%7B%22cstatus%22%3A%22United%20Kingdom%22%2C%22ctype%22%3A%22en-GB%22%7D%7D%2C%7B%22type%22%3A%22cart%22%2C%22numItems%22%3A0%2C%22products%22%3A%5B%7B%22product%22%3A%7B%22name%22%3A%22site_region-Europe_UK_United_Kingdom_HSBC_Bank_Plc_HSBC%22%2C%22price%22%3Anull%7D%2C%22quantity%22%3Anull%7D%2C%7B%22product%22%3A%7B%22name%22%3A%22en-GB%22%2C%22price%22%3Anull%7D%2C%22quantity%22%3Anull%7D%5D%7D%5D HTTP/1.1 Host: lo.v.liveperson.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:39:20 UTC	5278	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:39:20 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Set-Cookie: LPVisitorID=hjNzhmNDMzZWM2NWVjZGNh; Expires=Wed, 05-Jun-2024 08:39:20 GMT; Path=/; HttpOnly Set-Cookie: LPSessionID=N3roqYv8SBKOLDBc3Ezwkg; Path=/api/js/50632853; HttpOnly Cache-Control: no-store Server: ws Access-Control-Allow-Methods: GET, POST, PATCH Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token Access-Control-Expose-Headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-06-06 08:39:20 UTC	5279	IN	Data Raw: 66 30 0d 0a 6c 70 43 62 35 39 34 39 37 78 31 34 36 37 31 28 7b 22 73 64 6b 43 6f 6e 66 22 3a 7b 22 6c 70 56 69 73 69 74 6f 72 49 64 22 3a 22 68 6a 4e 7a 68 6d 4e 44 4d 7a 5a 57 4d 32 4e 57 56 6a 5a 47 4e 68 22 2c 22 6c 70 53 65 73 73 69 6f 6e 49 64 22 3a 22 4e 33 72 6f 71 59 76 38 53 42 4b 4f 4c 44 42 63 33 45 7a 77 6b 67 22 2c 22 6c 70 4c 61 73 74 56 69 73 69 74 22 3a 22 31 36 38 36 30 34 30 37 36 30 35 38 33 22 2c 22 70 72 6f 74 6f 63 6f 6c 56 65 72 73 69 6f 6e 22 3a 22 38 2e 36 2e 33 2e 30 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 62 75 73 69 6e 65 73 73 2e 68 73 62 63 2e 75 6b 22 2c 22 65 78 70 69 72 61 74 69 6f 6e 22 3a 33 31 35 33 36 30 30 30 7d 2c 22 6d 65 73 73 61 67 65 73 54 6f 56 69 73 69 74 6f 72 22 3a 5b 5d 7d 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: f0lpCb59497x14671({"sdkConf":{"lpVisitorId":"hjNzhmNDMzZWM2NWVjZGNh","lpSessionId":"N3roqYv8SBKOLDBc3Ezwkg","lpLastVisit":"1686040760583","protocolVersion":"8.6.3.0","domain":"business.hsbc.uk","expiration":31536000},"messagesToVisitor":[]});0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
144	192.168.2.4	50016	62.138.155.102	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:20 UTC	5279	OUT	GET /commercial-banking/build/va.min.js?v=1635885343 HTTP/1.1 Host: askus.business.hsbc.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: utag_main=v_id:01888fdcaa1f00511f81618bb8280006f002206700918$_sn:1$_ss:0$_st:1686042583801$ses_id:1686040783393%3Bexp-session$_pn:1%3Bexp-session$_prevpage:pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage%3Bexp-session
2023-06-06 08:39:20 UTC	5282	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:44:33 GMT Server: Apache Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT Access-Control-Max-Age: 1000 Access-Control-Allow-Headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token Strict-Transport-Security: max-age=16070400; includeSubdomains; Last-Modified: Fri, 05 May 2023 15:23:23 GMT ETag: "d88a-5faf3deab5598" Accept-Ranges: bytes Content-Length: 55434 Vary: Accept-Encoding Cache-Control: max-age=604800 Expires: Tue, 13 Jun 2023 08:44:33 GMT ServerLoc: 2 Access-Control-Allow-Origin: * Connection: close Content-Type: application/javascript
2023-06-06 08:39:20 UTC	5283	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 61 73 6b 5f 71 75 65 73 74 69 6f 6e 28 65 2c 74 2c 61 2c 6e 2c 6f 2c 73 29 7b 72 65 74 75 72 6e 20 65 76 65 6e 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 76 61 2e 72 65 71 75 65 73 74 28 7b 65 6e 74 72 79 3a 65 7d 29 2c 21 31 7d 66 75 6e 63 74 69 6f 6e 20 62 6f 74 5f 6e 61 76 28 65 2c 74 2c 61 2c 6e 29 7b 69 66 28 65 76 65 6e 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 30 3d 3d 74 2e 6c 65 6e 67 74 68 29 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 65 2c 22 5f 73 65 6c 66 22 29 3b 65 6c 73 65 7b 76 61 72 20 6f 3d 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 65 2c 22 5f 62 6c 61 6e 6b 22 29 3b 6f 2e 66 6f 63 75 73 28 29 7d 72 65 74 75 72 6e 21 31 7d 76 61 72 20 63 76 6a 71 3b 28 66 Data Ascii: "use strict";function ask_question(e,t,a,n,o,s){return event.preventDefault(),va.request({entry:e}),!1}function bot_nav(e,t,a,n){if(event.preventDefault(),0==t.length)window.open(e,"_self");else{var o=window.open(e,"_blank");o.focus()}return!1}var cvjq;(f
2023-06-06 08:39:20 UTC	5291	IN	Data Raw: 6e 74 43 6f 6e 66 69 67 26 26 28 73 65 6c 66 2e 63 6f 6e 66 2e 63 6c 69 65 6e 74 43 6f 6e 66 69 67 3d 65 76 61 6c 28 73 65 6c 66 2e 63 6f 6e 66 2e 63 6c 69 65 6e 74 43 6f 6e 66 69 67 29 29 2c 6e 75 6c 6c 3d 3d 73 65 6c 66 2e 63 6f 6e 66 2e 63 6c 69 65 6e 74 43 6f 6e 66 69 67 26 26 28 73 65 6c 66 2e 63 6f 6e 66 2e 63 6c 69 65 6e 74 43 6f 6e 66 69 67 3d 7b 65 6e 61 62 6c 65 5f 76 61 3a 21 30 7d 29 2c 73 65 6c 66 2e 63 6f 6e 66 2e 63 6c 69 65 6e 74 43 6f 6e 66 69 67 26 26 31 3d 3d 73 65 6c 66 2e 63 6f 6e 66 2e 63 6c 69 65 6e 74 43 6f 6e 66 69 67 2e 65 6e 61 62 6c 65 5f 6c 69 76 65 63 68 61 74 26 26 28 73 65 6c 66 2e 63 6f 6e 66 2e 73 74 61 74 65 2e 6d 6f 64 65 3d 32 29 2c 6c 6f 61 64 54 65 6d 70 6c 61 74 65 28 63 76 6a 71 2c 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: ntConfig&&(self.conf.clientConfig=eval(self.conf.clientConfig)),null==self.conf.clientConfig&&(self.conf.clientConfig={enable_va:!0}),self.conf.clientConfig&&1==self.conf.clientConfig.enable_livechat&&(self.conf.state.mode=2),loadTemplate(cvjq,function(){
2023-06-06 08:39:20 UTC	5298	IN	Data Raw: 6e 74 28 65 29 3a 73 65 6c 66 2e 6f 6e 6c 70 54 61 67 45 76 65 6e 74 28 7b 73 74 61 74 65 3a 35 7d 29 7d 2c 73 65 6c 66 2e 63 72 65 61 74 65 4e 6f 74 69 66 69 63 61 74 6f 72 57 69 6e 64 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 73 65 6c 66 2e 63 6f 6e 66 2e 63 6f 6d 70 6f 6e 65 6e 74 2e 6c 69 76 65 63 68 61 74 3f 22 4f 75 72 20 43 68 61 74 20 41 73 73 69 73 74 61 6e 74 20 63 61 6e 20 68 65 6c 70 20 77 69 74 68 20 66 72 65 71 75 65 6e 74 6c 79 20 61 73 6b 65 64 20 71 75 65 73 74 69 6f 6e 73 20 6f 72 20 63 6f 6e 6e 65 63 74 20 79 6f 75 20 77 69 74 68 20 61 6e 20 61 67 65 6e 74 2c 20 64 75 72 69 6e 67 20 6f 75 72 20 6f 70 65 6e 69 6e 67 20 68 6f 75 72 73 2e 22 3a 22 4f 75 72 20 56 69 72 74 75 61 6c 20 41 73 73 69 73 74 61 6e 74 20 77 69 Data Ascii: nt(e):self.onlpTagEvent({state:5})},self.createNotificatorWindow=function(e){var t=self.conf.component.livechat?"Our Chat Assistant can help with frequently asked questions or connect you with an agent, during our opening hours.":"Our Virtual Assistant wi
2023-06-06 08:39:20 UTC	5306	IN	Data Raw: 5c 2d 7c 6f 6f 7c 70 5c 2d 29 7c 73 64 6b 5c 2f 7c 73 65 28 63 28 5c 2d 7c 30 7c 31 29 7c 34 37 7c 6d 63 7c 6e 64 7c 72 69 29 7c 73 67 68 5c 2d 7c 73 68 61 72 7c 73 69 65 28 5c 2d 7c 6d 29 7c 73 6b 5c 2d 30 7c 73 6c 28 34 35 7c 69 64 29 7c 73 6d 28 61 6c 7c 61 72 7c 62 33 7c 69 74 7c 74 35 29 7c 73 6f 28 66 74 7c 6e 79 29 7c 73 70 28 30 31 7c 68 5c 2d 7c 76 5c 2d 7c 76 20 29 7c 73 79 28 30 31 7c 6d 62 29 7c 74 32 28 31 38 7c 35 30 29 7c 74 36 28 30 30 7c 31 30 7c 31 38 29 7c 74 61 28 67 74 7c 6c 6b 29 7c 74 63 6c 5c 2d 7c 74 64 67 5c 2d 7c 74 65 6c 28 69 7c 6d 29 7c 74 69 6d 5c 2d 7c 74 5c 2d 6d 6f 7c 74 6f 28 70 6c 7c 73 68 29 7c 74 73 28 37 30 7c 6d 5c 2d 7c 6d 33 7c 6d 35 29 7c 74 78 5c 2d 39 7c 75 70 28 5c 2e 62 7c 67 31 7c 73 69 29 7c 75 74 73 74 7c Data Ascii: \-\|oo\|p\-)\|sdk\/\|se(c(\-\|0\|1)\|47\|mc\|nd\|ri)\|sgh\-\|shar\|sie(\-\|m)\|sk\-0\|sl(45\|id)\|sm(al\|ar\|b3\|it\|t5)\|so(ft\|ny)\|sp(01\|h\-\|v\-\|v )\|sy(01\|mb)\|t2(18\|50)\|t6(00\|10\|18)\|ta(gt\|lk)\|tcl\-\|tdg\-\|tel(i\|m)\|tim\-\|t\-mo\|to(pl\|sh)\|ts(70\|m\-\|m3\|m5)\|tx\-9\|up(\.b\|g1\|si)\|utst\|
2023-06-06 08:39:20 UTC	5314	IN	Data Raw: 6e 28 22 6b 65 79 75 70 22 2c 22 2e 76 61 2d 69 6e 70 75 74 2d 6f 74 68 65 72 2d 72 65 61 73 6f 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 34 30 30 3b 65 28 74 68 69 73 29 2e 76 61 6c 28 29 2e 6c 65 6e 67 74 68 3e 74 3f 65 28 74 68 69 73 29 2e 76 61 6c 28 65 28 74 68 69 73 29 2e 76 61 6c 28 29 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 74 29 29 3a 65 28 22 2e 76 61 2d 6f 74 68 65 72 2d 72 65 61 73 6f 6e 2d 63 6f 75 6e 74 20 73 70 61 6e 22 29 2e 74 65 78 74 28 74 2d 65 28 74 68 69 73 29 2e 76 61 6c 28 29 2e 6c 65 6e 67 74 68 29 7d 29 7d 2c 65 7d 28 29 2c 56 41 4d 44 2e 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 2c 74 3d 7b 41 55 54 4f 5f 43 4f 4d 50 4c 45 54 45 3a 31 2c 46 41 51 3a 30 2c 43 Data Ascii: n("keyup",".va-input-other-reason",function(){var t=400;e(this).val().length>t?e(this).val(e(this).val().substring(0,t)):e(".va-other-reason-count span").text(t-e(this).val().length)})},e}(),VAMD.autocomplete=function(){var e={},t={AUTO_COMPLETE:1,FAQ:0,C
2023-06-06 08:39:20 UTC	5322	IN	Data Raw: 20 62 75 74 74 6f 6e 2c 20 2e 76 61 2d 63 6c 6f 73 65 2c 20 2e 76 61 2d 69 6e 70 2d 74 78 74 2c 20 2e 76 61 2d 69 6e 70 2d 62 74 6e 2c 20 2e 76 61 2d 65 78 74 65 72 6e 61 6c 2d 6c 69 6e 6b 73 2d 74 69 74 6c 65 20 61 2c 20 2e 76 61 2d 65 78 74 65 72 6e 61 6c 2d 6c 69 6e 6b 73 2d 6c 69 73 74 20 61 2c 20 2e 76 61 2d 72 65 6c 61 74 65 64 2d 63 6c 6f 73 65 2c 20 2e 76 61 2d 64 72 6f 70 64 6f 77 6e 20 73 65 6c 65 63 74 2c 20 2e 76 61 2d 66 61 71 73 20 61 2c 20 2e 76 61 2d 62 72 65 61 64 63 72 75 6d 62 73 20 61 22 29 2e 61 74 74 72 28 22 74 61 62 69 6e 64 65 78 22 2c 65 29 3a 28 63 76 6a 71 28 22 2e 76 61 2d 73 69 7a 65 2d 73 65 6c 65 63 74 6f 72 20 62 75 74 74 6f 6e 2c 20 2e 76 61 2d 63 6c 6f 73 65 2c 20 2e 76 61 2d 69 6e 70 2d 74 78 74 2c 20 2e 76 61 2d 69 6e Data Ascii: button, .va-close, .va-inp-txt, .va-inp-btn, .va-external-links-title a, .va-external-links-list a, .va-related-close, .va-dropdown select, .va-faqs a, .va-breadcrumbs a").attr("tabindex",e):(cvjq(".va-size-selector button, .va-close, .va-inp-txt, .va-in
2023-06-06 08:39:20 UTC	5330	IN	Data Raw: 6e 64 61 74 6f 72 79 20 66 69 65 6c 64 22 29 29 7d 65 28 74 68 69 73 29 2e 69 73 28 22 74 65 78 74 61 72 65 61 22 29 26 26 28 6e 2e 73 75 72 76 65 79 2e 71 75 65 73 74 69 6f 6e 2e 70 75 73 68 28 7b 69 64 3a 65 28 74 68 69 73 29 2e 64 61 74 61 28 22 69 64 22 29 2c 61 6e 73 77 65 72 3a 65 28 74 68 69 73 29 2e 76 61 6c 28 29 7d 29 2c 65 28 74 68 69 73 29 2e 64 61 74 61 28 22 6d 61 6e 64 61 74 6f 72 79 22 29 26 26 30 3d 3d 65 28 74 68 69 73 29 2e 76 61 6c 28 29 2e 6c 65 6e 67 74 68 26 26 28 61 3d 21 31 2c 65 28 74 68 69 73 29 2e 73 69 62 6c 69 6e 67 73 28 22 6c 61 62 65 6c 22 29 2e 66 69 6e 64 28 22 73 70 61 6e 22 29 2e 68 74 6d 6c 28 22 20 2a 20 6d 61 6e 64 61 74 6f 72 79 20 66 69 65 6c 64 22 29 29 29 7d 29 2c 61 3f 6e 3a 61 7d 7d 3b 72 65 74 75 72 6e 20 65 Data Ascii: ndatory field"))}e(this).is("textarea")&&(n.survey.question.push({id:e(this).data("id"),answer:e(this).val()}),e(this).data("mandatory")&&0==e(this).val().length&&(a=!1,e(this).siblings("label").find("span").html(" * mandatory field")))}),a?n:a}};return e

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
145	192.168.2.4	50017	178.249.97.70	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:20 UTC	5280	OUT	GET /api/js/50632853?sid=N3roqYv8SBKOLDBc3Ezwkg&cb=lpCb15042x97307&t=pl&ts=1686040789221&pid=1524647234&tid=4578057391&vid=hjNzhmNDMzZWM2NWVjZGNh HTTP/1.1 Host: lo.v.liveperson.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:39:20 UTC	5281	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:39:20 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: no-store Server: ws Access-Control-Allow-Methods: GET, POST, PATCH Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token Access-Control-Expose-Headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-06-06 08:39:20 UTC	5282	IN	Data Raw: 36 66 0d 0a 6c 70 43 62 31 35 30 34 32 78 39 37 33 30 37 28 7b 22 73 6d 74 43 6f 6e 66 22 3a 7b 22 6b 65 65 70 41 6c 69 76 65 46 72 65 71 22 3a 31 30 7d 2c 22 73 64 6b 43 6f 6e 66 22 3a 7b 22 74 68 69 72 64 50 61 72 74 79 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 2c 22 6d 65 73 73 61 67 65 73 54 6f 56 69 73 69 74 6f 72 22 3a 5b 5d 7d 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 6flpCb15042x97307({"smtConf":{"keepAliveFreq":10},"sdkConf":{"thirdPartyEnabled":false},"messagesToVisitor":[]});0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
146	192.168.2.4	50018	62.138.155.102	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:21 UTC	5337	OUT	GET /commercial-banking/build/js/jquery-3.6.0.min.js?v=1635885343 HTTP/1.1 Host: askus.business.hsbc.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: utag_main=v_id:01888fdcaa1f00511f81618bb8280006f002206700918$_sn:1$_ss:0$_st:1686042583801$ses_id:1686040783393%3Bexp-session$_pn:1%3Bexp-session$_prevpage:pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage%3Bexp-session; LPVID=hjNzhmNDMzZWM2NWVjZGNh; LPSID-50632853=N3roqYv8SBKOLDBc3Ezwkg
2023-06-06 08:39:21 UTC	5338	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:44:34 GMT Server: Apache Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT Access-Control-Max-Age: 1000 Access-Control-Allow-Headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token Strict-Transport-Security: max-age=16070400; includeSubdomains; Last-Modified: Wed, 16 Feb 2022 20:39:09 GMT ETag: "15d9d-5d828a43d951f" Accept-Ranges: bytes Content-Length: 89501 Vary: Accept-Encoding Cache-Control: max-age=604800 Expires: Tue, 13 Jun 2023 08:44:34 GMT ServerLoc: 2 Access-Control-Allow-Origin: * Connection: close Content-Type: application/javascript
2023-06-06 08:39:21 UTC	5338	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2023-06-06 08:39:21 UTC	5346	IN	Data Raw: 75 72 6e 22 66 6f 72 6d 22 69 6e 20 65 3f 65 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 21 31 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 3f 22 6c 61 62 65 6c 22 69 6e 20 65 3f 22 6c 61 62 65 6c 22 69 6e 20 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3f 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 74 3a 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 74 3a 65 2e 69 73 44 69 73 61 62 6c 65 64 3d 3d 3d 74 7c 7c 65 2e 69 73 44 69 73 61 62 6c 65 64 21 3d 3d 21 74 26 26 61 65 28 65 29 3d 3d 3d 74 3a 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 74 3a 22 6c 61 62 65 6c 22 69 6e 20 65 26 26 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 76 65 28 61 29 7b 72 65 74 75 72 6e 20 6c 65 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 Data Ascii: urn"form"in e?e.parentNode&&!1===e.disabled?"label"in e?"label"in e.parentNode?e.parentNode.disabled===t:e.disabled===t:e.isDisabled===t\|\|e.isDisabled!==!t&&ae(e)===t:e.disabled===t:"label"in e&&e.disabled===t}}function ve(a){return le(function(o){return
2023-06-06 08:39:21 UTC	5354	IN	Data Raw: 26 21 78 2c 64 3d 21 31 3b 69 66 28 63 29 7b 69 66 28 79 29 7b 77 68 69 6c 65 28 6c 29 7b 61 3d 65 3b 77 68 69 6c 65 28 61 3d 61 5b 6c 5d 29 69 66 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 21 31 3b 75 3d 6c 3d 22 6f 6e 6c 79 22 3d 3d 3d 68 26 26 21 75 26 26 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 7d 72 65 74 75 72 6e 21 30 7d 69 66 28 75 3d 5b 6d 3f 63 2e 66 69 72 73 74 43 68 69 6c 64 3a 63 2e 6c 61 73 74 43 68 69 6c 64 5d 2c 6d 26 26 70 29 7b 64 3d 28 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 63 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 Data Ascii: &!x,d=!1;if(c){if(y){while(l){a=e;while(a=a[l])if(x?a.nodeName.toLowerCase()===f:1===a.nodeType)return!1;u=l="only"===h&&!u&&"nextSibling"}return!0}if(u=[m?c.firstChild:c.lastChild],m&&p){d=(s=(r=(i=(o=(a=c)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))
2023-06-06 08:39:21 UTC	5362	IN	Data Raw: 2e 75 6e 69 71 75 65 3d 64 2e 75 6e 69 71 75 65 53 6f 72 74 2c 53 2e 74 65 78 74 3d 64 2e 67 65 74 54 65 78 74 2c 53 2e 69 73 58 4d 4c 44 6f 63 3d 64 2e 69 73 58 4d 4c 2c 53 2e 63 6f 6e 74 61 69 6e 73 3d 64 2e 63 6f 6e 74 61 69 6e 73 2c 53 2e 65 73 63 61 70 65 53 65 6c 65 63 74 6f 72 3d 64 2e 65 73 63 61 70 65 3b 76 61 72 20 68 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 5b 5d 2c 69 3d 76 6f 69 64 20 30 21 3d 3d 6e 3b 77 68 69 6c 65 28 28 65 3d 65 5b 74 5d 29 26 26 39 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 69 66 28 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 7b 69 66 28 69 26 26 53 28 65 29 2e 69 73 28 6e 29 29 62 72 65 61 6b 3b 72 2e 70 75 73 68 28 65 29 7d 72 65 74 75 72 6e 20 72 7d 2c 54 3d 66 75 6e 63 74 69 6f 6e 28 65 2c Data Ascii: .unique=d.uniqueSort,S.text=d.getText,S.isXMLDoc=d.isXML,S.contains=d.contains,S.escapeSelector=d.escape;var h=function(e,t,n){var r=[],i=void 0!==n;while((e=e[t])&&9!==e.nodeType)if(1===e.nodeType){if(i&&S(e).is(n))break;r.push(e)}return r},T=function(e,
2023-06-06 08:39:21 UTC	5370	IN	Data Raw: 7d 29 2c 74 68 69 73 7d 2c 53 2e 65 78 74 65 6e 64 28 7b 69 73 52 65 61 64 79 3a 21 31 2c 72 65 61 64 79 57 61 69 74 3a 31 2c 72 65 61 64 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 28 21 30 3d 3d 3d 65 3f 2d 2d 53 2e 72 65 61 64 79 57 61 69 74 3a 53 2e 69 73 52 65 61 64 79 29 7c 7c 28 53 2e 69 73 52 65 61 64 79 3d 21 30 29 21 3d 3d 65 26 26 30 3c 2d 2d 53 2e 72 65 61 64 79 57 61 69 74 7c 7c 46 2e 72 65 73 6f 6c 76 65 57 69 74 68 28 45 2c 5b 53 5d 29 7d 7d 29 2c 53 2e 72 65 61 64 79 2e 74 68 65 6e 3d 46 2e 74 68 65 6e 2c 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 45 2e 72 65 61 64 79 53 74 61 74 65 7c 7c 22 6c 6f 61 64 69 6e 67 22 21 3d 3d 45 2e 72 65 61 64 79 53 74 61 74 65 26 26 21 45 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 64 6f 53 63 72 6f 6c 6c Data Ascii: }),this},S.extend({isReady:!1,readyWait:1,ready:function(e){(!0===e?--S.readyWait:S.isReady)\|\|(S.isReady=!0)!==e&&0<--S.readyWait\|\|F.resolveWith(E,[S])}}),S.ready.then=F.then,"complete"===E.readyState\|\|"loading"!==E.readyState&&!E.documentElement.doScroll
2023-06-06 08:39:21 UTC	5378	IN	Data Raw: 3d 76 6f 69 64 20 30 29 3a 28 69 3d 72 2c 72 3d 6e 2c 6e 3d 76 6f 69 64 20 30 29 29 2c 21 31 3d 3d 3d 69 29 69 3d 54 65 3b 65 6c 73 65 20 69 66 28 21 69 29 72 65 74 75 72 6e 20 65 3b 72 65 74 75 72 6e 20 31 3d 3d 3d 6f 26 26 28 61 3d 69 2c 28 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 28 29 2e 6f 66 66 28 65 29 2c 61 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 67 75 69 64 3d 61 2e 67 75 69 64 7c 7c 28 61 2e 67 75 69 64 3d 53 2e 67 75 69 64 2b 2b 29 29 2c 65 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 53 2e 65 76 65 6e 74 2e 61 64 64 28 74 68 69 73 2c 74 2c 69 2c 72 2c 6e 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 69 2c 6f 29 7b 6f 3f 28 59 2e 73 65 74 28 65 2c 69 2c 21 31 29 2c 53 2e Data Ascii: =void 0):(i=r,r=n,n=void 0)),!1===i)i=Te;else if(!i)return e;return 1===o&&(a=i,(i=function(e){return S().off(e),a.apply(this,arguments)}).guid=a.guid\|\|(a.guid=S.guid++)),e.each(function(){S.event.add(this,t,i,r,n)})}function Se(e,i,o){o?(Y.set(e,i,!1),S.
2023-06-06 08:39:21 UTC	5385	IN	Data Raw: 6f 63 75 6d 65 6e 74 2c 21 31 2c 6e 2c 6f 29 29 2e 66 69 72 73 74 43 68 69 6c 64 2c 31 3d 3d 3d 65 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 26 26 28 65 3d 74 29 2c 74 7c 7c 6f 29 29 7b 66 6f 72 28 73 3d 28 61 3d 53 2e 6d 61 70 28 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 2c 44 65 29 29 2e 6c 65 6e 67 74 68 3b 63 3c 66 3b 63 2b 2b 29 75 3d 65 2c 63 21 3d 3d 70 26 26 28 75 3d 53 2e 63 6c 6f 6e 65 28 75 2c 21 30 2c 21 30 29 2c 73 26 26 53 2e 6d 65 72 67 65 28 61 2c 76 65 28 75 2c 22 73 63 72 69 70 74 22 29 29 29 2c 69 2e 63 61 6c 6c 28 6e 5b 63 5d 2c 75 2c 63 29 3b 69 66 28 73 29 66 6f 72 28 6c 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 53 2e 6d 61 70 28 61 2c 71 65 29 2c 63 3d 30 3b 63 3c 73 3b 63 2b Data Ascii: ocument,!1,n,o)).firstChild,1===e.childNodes.length&&(e=t),t\|\|o)){for(s=(a=S.map(ve(e,"script"),De)).length;c<f;c++)u=e,c!==p&&(u=S.clone(u,!0,!0),s&&S.merge(a,ve(u,"script"))),i.call(n[c],u,c);if(s)for(l=a[a.length-1].ownerDocument,S.map(a,qe),c=0;c<s;c+
2023-06-06 08:39:21 UTC	5393	IN	Data Raw: 73 65 74 50 72 6f 70 65 72 74 79 28 74 2c 6e 29 3a 6c 5b 74 5d 3d 6e 29 29 7d 7d 2c 63 73 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 76 61 72 20 69 2c 6f 2c 61 2c 73 3d 58 28 74 29 3b 72 65 74 75 72 6e 20 58 65 2e 74 65 73 74 28 74 29 7c 7c 28 74 3d 7a 65 28 73 29 29 2c 28 61 3d 53 2e 63 73 73 48 6f 6f 6b 73 5b 74 5d 7c 7c 53 2e 63 73 73 48 6f 6f 6b 73 5b 73 5d 29 26 26 22 67 65 74 22 69 6e 20 61 26 26 28 69 3d 61 2e 67 65 74 28 65 2c 21 30 2c 6e 29 29 2c 76 6f 69 64 20 30 3d 3d 3d 69 26 26 28 69 3d 57 65 28 65 2c 74 2c 72 29 29 2c 22 6e 6f 72 6d 61 6c 22 3d 3d 3d 69 26 26 74 20 69 6e 20 47 65 26 26 28 69 3d 47 65 5b 74 5d 29 2c 22 22 3d 3d 3d 6e 7c 7c 6e 3f 28 6f 3d 70 61 72 73 65 46 6c 6f 61 74 28 69 29 2c 21 30 3d 3d 3d 6e 7c 7c 69 73 Data Ascii: setProperty(t,n):l[t]=n))}},css:function(e,t,n,r){var i,o,a,s=X(t);return Xe.test(t)\|\|(t=ze(s)),(a=S.cssHooks[t]\|\|S.cssHooks[s])&&"get"in a&&(i=a.get(e,!0,n)),void 0===i&&(i=We(e,t,r)),"normal"===i&&t in Ge&&(i=Ge[t]),""===n\|\|n?(o=parseFloat(i),!0===n\|\|is
2023-06-06 08:39:21 UTC	5401	IN	Data Raw: 61 2c 5b 5d 29 2c 72 26 26 72 2e 73 74 6f 70 26 26 72 2e 73 74 6f 70 2e 63 61 6c 6c 28 74 68 69 73 2c 21 30 29 2c 65 3d 69 2e 6c 65 6e 67 74 68 3b 65 2d 2d 3b 29 69 5b 65 5d 2e 65 6c 65 6d 3d 3d 3d 74 68 69 73 26 26 69 5b 65 5d 2e 71 75 65 75 65 3d 3d 3d 61 26 26 28 69 5b 65 5d 2e 61 6e 69 6d 2e 73 74 6f 70 28 21 30 29 2c 69 2e 73 70 6c 69 63 65 28 65 2c 31 29 29 3b 66 6f 72 28 65 3d 30 3b 65 3c 6f 3b 65 2b 2b 29 6e 5b 65 5d 26 26 6e 5b 65 5d 2e 66 69 6e 69 73 68 26 26 6e 5b 65 5d 2e 66 69 6e 69 73 68 2e 63 61 6c 6c 28 74 68 69 73 29 3b 64 65 6c 65 74 65 20 74 2e 66 69 6e 69 73 68 7d 29 7d 7d 29 2c 53 2e 65 61 63 68 28 5b 22 74 6f 67 67 6c 65 22 2c 22 73 68 6f 77 22 2c 22 68 69 64 65 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 76 61 72 20 69 3d 53 Data Ascii: a,[]),r&&r.stop&&r.stop.call(this,!0),e=i.length;e--;)i[e].elem===this&&i[e].queue===a&&(i[e].anim.stop(!0),i.splice(e,1));for(e=0;e<o;e++)n[e]&&n[e].finish&&n[e].finish.call(this);delete t.finish})}}),S.each(["toggle","show","hide"],function(e,r){var i=S
2023-06-06 08:39:21 UTC	5409	IN	Data Raw: 5b 75 5d 3d 61 29 29 2c 65 2e 72 65 73 75 6c 74 7d 7d 2c 73 69 6d 75 6c 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 53 2e 65 78 74 65 6e 64 28 6e 65 77 20 53 2e 45 76 65 6e 74 2c 6e 2c 7b 74 79 70 65 3a 65 2c 69 73 53 69 6d 75 6c 61 74 65 64 3a 21 30 7d 29 3b 53 2e 65 76 65 6e 74 2e 74 72 69 67 67 65 72 28 72 2c 6e 75 6c 6c 2c 74 29 7d 7d 29 2c 53 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 74 72 69 67 67 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 53 2e 65 76 65 6e 74 2e 74 72 69 67 67 65 72 28 65 2c 74 2c 74 68 69 73 29 7d 29 7d 2c 74 72 69 67 67 65 72 48 61 6e 64 6c 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 Data Ascii: [u]=a)),e.result}},simulate:function(e,t,n){var r=S.extend(new S.Event,n,{type:e,isSimulated:!0});S.event.trigger(r,null,t)}}),S.fn.extend({trigger:function(e,t){return this.each(function(){S.event.trigger(e,t,this)})},triggerHandler:function(e,t){var n=t
2023-06-06 08:39:21 UTC	5417	IN	Data Raw: 28 79 2c 5b 6f 2c 6c 2c 54 5d 29 3a 78 2e 72 65 6a 65 63 74 57 69 74 68 28 79 2c 5b 54 2c 6c 2c 61 5d 29 2c 54 2e 73 74 61 74 75 73 43 6f 64 65 28 77 29 2c 77 3d 76 6f 69 64 20 30 2c 67 26 26 6d 2e 74 72 69 67 67 65 72 28 69 3f 22 61 6a 61 78 53 75 63 63 65 73 73 22 3a 22 61 6a 61 78 45 72 72 6f 72 22 2c 5b 54 2c 76 2c 69 3f 6f 3a 61 5d 29 2c 62 2e 66 69 72 65 57 69 74 68 28 79 2c 5b 54 2c 6c 5d 29 2c 67 26 26 28 6d 2e 74 72 69 67 67 65 72 28 22 61 6a 61 78 43 6f 6d 70 6c 65 74 65 22 2c 5b 54 2c 76 5d 29 2c 2d 2d 53 2e 61 63 74 69 76 65 7c 7c 53 2e 65 76 65 6e 74 2e 74 72 69 67 67 65 72 28 22 61 6a 61 78 53 74 6f 70 22 29 29 29 7d 72 65 74 75 72 6e 20 54 7d 2c 67 65 74 4a 53 4f 4e 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 53 Data Ascii: (y,[o,l,T]):x.rejectWith(y,[T,l,a]),T.statusCode(w),w=void 0,g&&m.trigger(i?"ajaxSuccess":"ajaxError",[T,v,i?o:a]),b.fireWith(y,[T,l]),g&&(m.trigger("ajaxComplete",[T,v]),--S.active\|\|S.event.trigger("ajaxStop")))}return T},getJSON:function(e,t,n){return S
2023-06-06 08:39:21 UTC	5424	IN	Data Raw: 74 29 7b 53 2e 66 6e 5b 74 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 6e 28 74 2c 65 29 7d 7d 29 2c 53 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 62 69 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 6e 28 65 2c 6e 75 6c 6c 2c 74 2c 6e 29 7d 2c 75 6e 62 69 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 66 66 28 65 2c 6e 75 6c 6c 2c 74 29 7d 2c 64 65 6c 65 67 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 6e 28 74 2c 65 2c 6e 2c 72 29 7d 2c 75 6e 64 65 6c 65 67 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: t){S.fn[t]=function(e){return this.on(t,e)}}),S.fn.extend({bind:function(e,t,n){return this.on(e,null,t,n)},unbind:function(e,t){return this.off(e,null,t)},delegate:function(e,t,n,r){return this.on(t,e,n,r)},undelegate:function(e,t,n){return 1===arguments

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
147	192.168.2.4	50019	62.138.155.102	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:21 UTC	5426	OUT	GET /commercial-banking/build/css/main.min.css?v=1635885343 HTTP/1.1 Host: askus.business.hsbc.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: utag_main=v_id:01888fdcaa1f00511f81618bb8280006f002206700918$_sn:1$_ss:0$_st:1686042583801$ses_id:1686040783393%3Bexp-session$_pn:1%3Bexp-session$_prevpage:pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage%3Bexp-session; LPVID=hjNzhmNDMzZWM2NWVjZGNh; LPSID-50632853=N3roqYv8SBKOLDBc3Ezwkg
2023-06-06 08:39:21 UTC	5428	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:44:34 GMT Server: Apache Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT Access-Control-Max-Age: 1000 Access-Control-Allow-Headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token Strict-Transport-Security: max-age=16070400; includeSubdomains; Last-Modified: Mon, 09 Jan 2023 12:16:05 GMT ETag: "acbe-5f1d3bb3e1271" Accept-Ranges: bytes Content-Length: 44222 Vary: Accept-Encoding Cache-Control: max-age=604800 Expires: Tue, 13 Jun 2023 08:44:34 GMT ServerLoc: 2 Access-Control-Allow-Origin: * Connection: close Content-Type: text/css
2023-06-06 08:39:21 UTC	5429	IN	Data Raw: 23 76 69 72 74 75 61 6c 2d 61 73 73 69 73 74 61 6e 74 20 61 3a 61 63 74 69 76 65 2c 23 76 69 72 74 75 61 6c 2d 61 73 73 69 73 74 61 6e 74 20 61 3a 68 6f 76 65 72 7b 6f 75 74 6c 69 6e 65 3a 30 7d 23 76 69 72 74 75 61 6c 2d 61 73 73 69 73 74 61 6e 74 20 62 2c 23 76 69 72 74 75 61 6c 2d 61 73 73 69 73 74 61 6e 74 20 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 23 76 69 72 74 75 61 6c 2d 61 73 73 69 73 74 61 6e 74 20 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 3b 6d 61 72 67 69 6e 3a 2e 36 37 65 6d 20 30 7d 23 76 69 72 74 75 61 6c 2d 61 73 73 69 73 74 61 6e 74 20 69 6d 67 7b 62 6f 72 64 65 72 3a 30 7d 23 76 69 72 74 75 61 6c 2d 61 73 73 69 73 74 61 6e 74 20 73 76 67 3a 6e 6f 74 28 3a 72 6f 6f 74 29 7b 6f 76 65 72 66 6c 6f 77 3a 68 Data Ascii: #virtual-assistant a:active,#virtual-assistant a:hover{outline:0}#virtual-assistant b,#virtual-assistant strong{font-weight:700}#virtual-assistant h1{font-size:2em;margin:.67em 0}#virtual-assistant img{border:0}#virtual-assistant svg:not(:root){overflow:h
2023-06-06 08:39:21 UTC	5437	IN	Data Raw: 72 2d 77 69 64 74 68 3a 31 33 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 33 70 78 7d 23 76 69 72 74 75 61 6c 2d 61 73 73 69 73 74 61 6e 74 20 2e 76 61 2d 72 65 6c 61 74 65 64 2d 68 65 61 64 69 6e 67 7b 63 6f 6c 6f 72 3a 23 33 33 33 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 6d 61 72 67 69 6e 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 23 76 69 72 74 75 61 6c 2d 61 73 73 69 73 74 61 6e 74 20 2e 76 61 2d 62 72 65 61 64 63 72 75 6d 62 73 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 35 65 6d 3b 63 6f 6c 6f 72 3a 23 36 36 36 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b Data Ascii: r-width:13px;margin-left:-13px}#virtual-assistant .va-related-heading{color:#333;font-size:.875em;font-weight:700;margin:0!important;padding:0!important;border:none!important}#virtual-assistant .va-breadcrumbs{font-size:.75em;color:#666;position:absolute;
2023-06-06 08:39:21 UTC	5458	IN	Data Raw: 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 32 70 78 20 73 6f 6c 69 64 20 23 65 37 65 37 65 36 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 20 30 20 31 35 70 78 20 32 30 70 78 7d 23 76 69 72 74 75 61 6c 2d 61 73 73 69 73 74 61 6e 74 20 2e 76 61 2d 69 63 73 20 6c 69 7b 6d 61 72 67 69 6e 3a 30 20 30 20 31 30 70 78 20 30 7d 23 76 69 72 74 75 61 6c 2d 61 73 73 69 73 74 61 6e 74 20 2e 76 61 2d 69 63 73 20 6c 69 20 6c 61 62 65 6c 3a 62 65 66 6f 72 65 7b 74 6f 70 3a 2d 35 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 23 76 69 72 74 75 61 6c 2d 61 73 73 69 73 74 61 6e 74 20 2e 76 61 2d 69 63 73 20 6c 69 20 6c 61 62 65 6c 3a 61 66 74 65 72 7b 74 6f 70 Data Ascii: ;font-size:1.25em;font-weight:400;border-bottom:2px solid #e7e7e6;margin:0;padding:15px 0 15px 20px}#virtual-assistant .va-ics li{margin:0 0 10px 0}#virtual-assistant .va-ics li label:before{top:-5px!important}#virtual-assistant .va-ics li label:after{top
2023-06-06 08:39:21 UTC	5465	IN	Data Raw: 68 74 3a 34 38 70 78 3b 6d 61 72 67 69 6e 3a 32 30 70 78 20 61 75 74 6f 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 31 32 35 65 6d 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 23 76 69 72 74 75 61 6c 2d 61 73 73 69 73 74 61 6e 74 20 2e 76 61 2d 72 65 6c 61 74 65 64 2d 68 65 61 64 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 63 6f 6c 6f 72 3a 23 31 31 31 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 34 30 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 31 70 78 20 30 20 30 20 23 33 31 34 30 34 61 2c 69 6e 73 65 74 20 30 20 2d 31 70 78 20 30 20 30 20 23 33 31 34 30 34 61 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 65 6d 3b 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: ht:48px;margin:20px auto;font-size:1.125em;display:block;border-radius:0}#virtual-assistant .va-related-head{display:none;color:#111;border:none;width:100%;height:40px;box-shadow:inset 0 1px 0 0 #31404a,inset 0 -1px 0 0 #31404a;font-size:.875em;background
2023-06-06 08:39:21 UTC	5473	IN	Data Raw: 74 28 3a 63 68 65 63 6b 65 64 29 2b 6c 61 62 65 6c 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 34 33 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 30 70 78 20 30 7d 23 76 69 72 74 75 61 6c 2d 61 73 73 69 73 74 61 6e 74 20 5b 74 79 70 65 3d 72 61 64 69 6f 5d 3a 63 68 65 63 6b 65 64 2b 6c 61 62 65 6c 3a 62 65 66 6f 72 65 2c 23 76 69 72 74 75 61 6c 2d 61 73 73 69 73 74 61 6e 74 20 5b 74 79 70 65 3d 72 61 64 69 6f 5d 3a 6e 6f 74 28 3a 63 68 65 63 6b 65 64 29 2b 6c 61 62 65 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 27 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 Data Ascii: t(:checked)+label{position:relative;padding-left:43px!important;line-height:2;cursor:pointer;margin:0 0 10px 0}#virtual-assistant [type=radio]:checked+label:before,#virtual-assistant [type=radio]:not(:checked)+label:before{content:'';position:absolute;lef
2023-06-06 08:39:21 UTC	5481	IN	Data Raw: 76 61 2d 72 65 6c 61 74 65 64 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 30 70 78 3b 62 6f 74 74 6f 6d 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 23 76 69 72 74 75 61 6c 2d 61 73 73 69 73 74 61 6e 74 20 2e 76 61 2d 66 61 71 73 7b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 3b 62 6f 74 74 6f 6d 3a 30 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 20 30 20 30 20 30 7d 23 76 69 72 74 75 61 6c 2d 61 73 73 69 73 74 61 6e 74 20 2e 76 61 2d 69 6e 70 2d 62 74 6e 7b 63 6f 6c 6f 72 3a 23 33 32 33 32 33 33 3b 66 6c 6f 61 74 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 31 30 30 25 7d 23 76 69 72 74 75 61 6c 2d 61 73 73 69 73 74 61 6e 74 20 2e 76 61 2d 72 65 6c 61 74 65 64 20 2e 76 61 2d 72 65 6c 61 74 65 64 2d 62 Data Ascii: va-related{position:absolute;top:50px;bottom:0;width:100%;overflow:hidden}#virtual-assistant .va-faqs{overflow:auto;bottom:0;padding:10px 0 0 0}#virtual-assistant .va-inp-btn{color:#323233;float:none;width:100%}#virtual-assistant .va-related .va-related-b

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
148	192.168.2.4	50020	62.138.155.102	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:21 UTC	5427	OUT	GET /commercial-banking/build/js/main.min.js?v=1635885343 HTTP/1.1 Host: askus.business.hsbc.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: utag_main=v_id:01888fdcaa1f00511f81618bb8280006f002206700918$_sn:1$_ss:0$_st:1686042583801$ses_id:1686040783393%3Bexp-session$_pn:1%3Bexp-session$_prevpage:pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage%3Bexp-session; LPVID=hjNzhmNDMzZWM2NWVjZGNh; LPSID-50632853=N3roqYv8SBKOLDBc3Ezwkg
2023-06-06 08:39:21 UTC	5428	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:44:34 GMT Server: Apache Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT Access-Control-Max-Age: 1000 Access-Control-Allow-Headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token Strict-Transport-Security: max-age=16070400; includeSubdomains; Last-Modified: Wed, 24 Aug 2022 06:32:46 GMT ETag: "3459-5e6f6d959c8cc" Accept-Ranges: bytes Content-Length: 13401 Vary: Accept-Encoding Cache-Control: max-age=604800 Expires: Tue, 13 Jun 2023 08:44:34 GMT ServerLoc: 2 Access-Control-Allow-Origin: * Connection: close Content-Type: application/javascript
2023-06-06 08:39:21 UTC	5445	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 74 68 69 73 2e 74 65 6d 70 6c 61 74 65 3b 76 61 72 20 74 3d 21 30 3b 74 68 69 73 2e 66 69 72 73 74 52 65 71 75 65 73 74 3d 21 30 2c 74 68 69 73 2e 72 6e 3d 30 2c 74 68 69 73 2e 70 72 65 76 65 6e 74 41 6a 61 78 3d 21 31 2c 74 68 61 74 3d 74 68 69 73 2c 74 68 69 73 2e 69 6e 69 74 45 76 65 6e 74 52 61 6e 3d 21 31 2c 74 68 69 73 2e 66 61 71 4c 6f 61 64 54 69 6d 65 3d 56 41 4d 44 2e 63 6f 6e 66 2e 63 61 6e 64 69 64 61 74 65 43 6f 6c 6c 65 63 74 69 6f 6e 43 6f 6d 70 75 74 65 3f 6e 65 77 20 44 61 74 65 3a 30 2c 74 68 69 73 2e 66 61 71 43 6c 69 63 6b 54 69 6d 65 3d 56 41 4d 44 2e 63 6f 6e 66 2e 63 61 6e 64 69 64 61 74 65 43 6f 6c 6c 65 63 74 69 6f 6e 43 6f 6d 70 75 74 65 3f 6e 65 77 20 Data Ascii: (function(e){function t(){this.template;var t=!0;this.firstRequest=!0,this.rn=0,this.preventAjax=!1,that=this,this.initEventRan=!1,this.faqLoadTime=VAMD.conf.candidateCollectionCompute?new Date:0,this.faqClickTime=VAMD.conf.candidateCollectionCompute?new
2023-06-06 08:39:21 UTC	5452	IN	Data Raw: 79 28 65 29 7d 29 2c 76 61 2e 24 77 72 61 70 70 65 72 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 22 2e 76 61 2d 64 65 65 70 2d 66 61 71 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 61 3d 65 28 74 2e 74 61 72 67 65 74 29 3b 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 76 61 2e 72 65 71 75 65 73 74 28 7b 74 79 70 65 3a 22 53 45 4c 45 43 54 22 2c 73 65 6c 65 63 74 53 6f 75 72 63 65 3a 22 44 4d 22 2c 63 6f 6c 6c 65 63 74 3a 22 74 72 75 65 22 2c 52 45 43 4f 47 4e 49 54 49 4f 4e 5f 49 44 3a 61 2e 61 74 74 72 28 22 64 61 74 61 2d 72 65 63 69 64 22 29 2c 65 6e 74 72 79 3a 61 2e 74 65 78 74 28 29 2e 72 65 70 6c 61 63 65 28 22 2e 22 2c 22 20 22 29 2c 6d 61 69 6e 43 61 74 3a 76 61 2e 6d 61 69 6e 43 61 74 7d 29 7d 29 2c 76 61 2e 24 77 72 61 70 70 65 72 Data Ascii: y(e)}),va.$wrapper.on("click",".va-deep-faq",function(t){var a=e(t.target);t.preventDefault(),va.request({type:"SELECT",selectSource:"DM",collect:"true",RECOGNITION_ID:a.attr("data-recid"),entry:a.text().replace("."," "),mainCat:va.mainCat})}),va.$wrapper

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
149	192.168.2.4	50021	62.138.155.102	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:21 UTC	5485	OUT	GET /commercial-banking/build/js/jquery-ui.mod.min.js?v=1635885343 HTTP/1.1 Host: askus.business.hsbc.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: utag_main=v_id:01888fdcaa1f00511f81618bb8280006f002206700918$_sn:1$_ss:0$_st:1686042583801$ses_id:1686040783393%3Bexp-session$_pn:1%3Bexp-session$_prevpage:pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage%3Bexp-session; LPVID=hjNzhmNDMzZWM2NWVjZGNh; LPSID-50632853=N3roqYv8SBKOLDBc3Ezwkg
2023-06-06 08:39:22 UTC	5486	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:44:34 GMT Server: Apache Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT Access-Control-Max-Age: 1000 Access-Control-Allow-Headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token Strict-Transport-Security: max-age=16070400; includeSubdomains; Last-Modified: Mon, 28 Jun 2021 17:01:41 GMT ETag: "e672-5c5d6717fc6b1" Accept-Ranges: bytes Content-Length: 58994 Vary: Accept-Encoding Cache-Control: max-age=604800 Expires: Tue, 13 Jun 2023 08:44:34 GMT ServerLoc: 2 Access-Control-Allow-Origin: * Connection: close Content-Type: application/javascript
2023-06-06 08:39:22 UTC	5487	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 24 29 7b 24 2e 75 69 3d 24 2e 75 69 7c 7c 7b 7d 3b 76 61 72 20 76 65 72 73 69 6f 6e 3d 24 2e 75 69 2e 76 65 72 73 69 6f 6e 3d 22 31 2e 31 32 2e 31 22 2c 77 69 64 67 65 74 55 75 69 64 3d 30 2c 77 69 64 67 65 74 53 6c 69 63 65 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2c 6f 72 69 67 3b 24 2e 63 6c 65 61 6e 44 61 74 61 3d 28 6f 72 69 67 3d 24 2e 63 6c 65 61 6e 44 61 74 61 2c 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 73 29 7b 76 61 72 20 65 76 65 6e 74 73 2c 65 6c 65 6d 2c 69 3b 66 6f 72 28 69 3d 30 3b 6e 75 6c 6c 21 3d 28 65 6c 65 6d 3d 65 6c 65 6d 73 5b 69 5d 29 3b 69 2b 2b 29 74 72 79 7b 28 65 76 65 6e 74 73 3d 24 2e 5f 64 61 74 61 28 65 6c 65 6d 2c 22 65 76 65 6e 74 73 22 29 29 26 26 65 76 65 6e 74 73 2e Data Ascii: !function($){$.ui=$.ui\|\|{};var version=$.ui.version="1.12.1",widgetUuid=0,widgetSlice=Array.prototype.slice,orig;$.cleanData=(orig=$.cleanData,function(elems){var events,elem,i;for(i=0;null!=(elem=elems[i]);i++)try{(events=$._data(elem,"events"))&&events.
2023-06-06 08:39:22 UTC	5495	IN	Data Raw: 65 6d 65 6e 74 2c 6b 65 79 73 2c 65 78 74 72 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 74 6f 67 67 6c 65 43 6c 61 73 73 28 65 6c 65 6d 65 6e 74 2c 6b 65 79 73 2c 65 78 74 72 61 2c 21 30 29 7d 2c 5f 74 6f 67 67 6c 65 43 6c 61 73 73 3a 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 65 6e 74 2c 6b 65 79 73 2c 65 78 74 72 61 2c 61 64 64 29 7b 61 64 64 3d 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 61 64 64 3f 61 64 64 3a 65 78 74 72 61 3b 76 61 72 20 73 68 69 66 74 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 6c 65 6d 65 6e 74 7c 7c 6e 75 6c 6c 3d 3d 3d 65 6c 65 6d 65 6e 74 2c 6f 70 74 69 6f 6e 73 3d 7b 65 78 74 72 61 3a 73 68 69 66 74 3f 6b 65 79 73 3a 65 78 74 72 61 2c 6b 65 79 73 3a 73 68 69 66 74 3f 65 6c 65 6d 65 6e 74 3a 6b 65 79 73 Data Ascii: ement,keys,extra){return this._toggleClass(element,keys,extra,!0)},_toggleClass:function(element,keys,extra,add){add="boolean"==typeof add?add:extra;var shift="string"==typeof element\|\|null===element,options={extra:shift?keys:extra,keys:shift?element:keys
2023-06-06 08:39:22 UTC	5502	IN	Data Raw: 72 6e 20 74 68 69 73 2e 6d 6f 75 73 65 44 65 6c 61 79 4d 65 74 7d 2c 5f 6d 6f 75 73 65 53 74 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 5f 6d 6f 75 73 65 44 72 61 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 5f 6d 6f 75 73 65 53 74 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 5f 6d 6f 75 73 65 43 61 70 74 75 72 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 30 7d 7d 29 2c 70 6c 75 67 69 6e 3d 24 2e 75 69 2e 70 6c 75 67 69 6e 3d 7b 61 64 64 3a 66 75 6e 63 74 69 6f 6e 28 6d 6f 64 75 6c 65 2c 6f 70 74 69 6f 6e 2c 73 65 74 29 7b 76 61 72 20 69 2c 70 72 6f 74 6f 3d 24 2e 75 69 5b 6d 6f 64 75 6c 65 5d 2e 70 72 6f 74 6f 74 79 70 65 3b 66 6f 72 28 69 20 69 6e 20 73 65 74 29 70 72 6f 74 6f 2e 70 6c 75 67 69 6e 73 5b 69 5d 3d 70 72 6f 74 6f Data Ascii: rn this.mouseDelayMet},_mouseStart:function(){},_mouseDrag:function(){},_mouseStop:function(){},_mouseCapture:function(){return!0}}),plugin=$.ui.plugin={add:function(module,option,set){var i,proto=$.ui[module].prototype;for(i in set)proto.plugins[i]=proto
2023-06-06 08:39:22 UTC	5510	IN	Data Raw: 65 66 74 22 29 2c 31 30 29 7c 7c 30 29 2b 28 73 63 72 6f 6c 6c 49 73 52 6f 6f 74 4e 6f 64 65 3f 30 3a 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 2e 73 63 72 6f 6c 6c 4c 65 66 74 28 29 29 7d 7d 2c 5f 63 61 63 68 65 4d 61 72 67 69 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6d 61 72 67 69 6e 73 3d 7b 6c 65 66 74 3a 70 61 72 73 65 49 6e 74 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 63 73 73 28 22 6d 61 72 67 69 6e 4c 65 66 74 22 29 2c 31 30 29 7c 7c 30 2c 74 6f 70 3a 70 61 72 73 65 49 6e 74 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 63 73 73 28 22 6d 61 72 67 69 6e 54 6f 70 22 29 2c 31 30 29 7c 7c 30 2c 72 69 67 68 74 3a 70 61 72 73 65 49 6e 74 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 63 73 73 28 22 6d 61 72 67 69 6e 52 69 67 68 74 22 29 Data Ascii: eft"),10)\|\|0)+(scrollIsRootNode?0:this.scrollParent.scrollLeft())}},_cacheMargins:function(){this.margins={left:parseInt(this.element.css("marginLeft"),10)\|\|0,top:parseInt(this.element.css("marginTop"),10)\|\|0,right:parseInt(this.element.css("marginRight")
2023-06-06 08:39:22 UTC	5518	IN	Data Raw: 6e 73 2e 72 65 76 65 72 74 3d 21 31 2c 73 6f 72 74 61 62 6c 65 2e 5f 74 72 69 67 67 65 72 28 22 6f 75 74 22 2c 65 76 65 6e 74 2c 73 6f 72 74 61 62 6c 65 2e 5f 75 69 48 61 73 68 28 73 6f 72 74 61 62 6c 65 29 29 2c 73 6f 72 74 61 62 6c 65 2e 5f 6d 6f 75 73 65 53 74 6f 70 28 65 76 65 6e 74 2c 21 30 29 2c 73 6f 72 74 61 62 6c 65 2e 6f 70 74 69 6f 6e 73 2e 72 65 76 65 72 74 3d 73 6f 72 74 61 62 6c 65 2e 6f 70 74 69 6f 6e 73 2e 5f 72 65 76 65 72 74 2c 73 6f 72 74 61 62 6c 65 2e 6f 70 74 69 6f 6e 73 2e 68 65 6c 70 65 72 3d 73 6f 72 74 61 62 6c 65 2e 6f 70 74 69 6f 6e 73 2e 5f 68 65 6c 70 65 72 2c 73 6f 72 74 61 62 6c 65 2e 70 6c 61 63 65 68 6f 6c 64 65 72 26 26 73 6f 72 74 61 62 6c 65 2e 70 6c 61 63 65 68 6f 6c 64 65 72 2e 72 65 6d 6f 76 65 28 29 2c 75 69 2e 68 Data Ascii: ns.revert=!1,sortable._trigger("out",event,sortable._uiHash(sortable)),sortable._mouseStop(event,!0),sortable.options.revert=sortable.options._revert,sortable.options.helper=sortable.options._helper,sortable.placeholder&&sortable.placeholder.remove(),ui.h
2023-06-06 08:39:22 UTC	5526	IN	Data Raw: 2e 73 68 6f 77 28 29 29 7d 29 29 2e 6f 6e 28 22 6d 6f 75 73 65 6c 65 61 76 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 2e 64 69 73 61 62 6c 65 64 7c 7c 74 68 61 74 2e 72 65 73 69 7a 69 6e 67 7c 7c 28 74 68 61 74 2e 5f 61 64 64 43 6c 61 73 73 28 22 75 69 2d 72 65 73 69 7a 61 62 6c 65 2d 61 75 74 6f 68 69 64 65 22 29 2c 74 68 61 74 2e 5f 68 61 6e 64 6c 65 73 2e 68 69 64 65 28 29 29 7d 29 29 2c 74 68 69 73 2e 5f 6d 6f 75 73 65 49 6e 69 74 28 29 7d 2c 5f 64 65 73 74 72 6f 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 6d 6f 75 73 65 44 65 73 74 72 6f 79 28 29 3b 76 61 72 20 77 72 61 70 70 65 72 2c 5f 64 65 73 74 72 6f 79 3d 66 75 6e 63 74 69 6f 6e 28 65 78 70 29 7b 24 28 65 78 70 29 2e 72 65 6d 6f 76 65 44 61 74 61 28 22 72 65 73 69 7a 61 62 6c Data Ascii: .show())})).on("mouseleave",(function(){o.disabled\|\|that.resizing\|\|(that._addClass("ui-resizable-autohide"),that._handles.hide())})),this._mouseInit()},_destroy:function(){this._mouseDestroy();var wrapper,_destroy=function(exp){$(exp).removeData("resizabl
2023-06-06 08:39:22 UTC	5534	IN	Data Raw: 2e 5f 69 73 4e 75 6d 62 65 72 28 64 61 74 61 2e 68 65 69 67 68 74 29 26 26 6f 2e 6d 69 6e 48 65 69 67 68 74 26 26 6f 2e 6d 69 6e 48 65 69 67 68 74 3e 64 61 74 61 2e 68 65 69 67 68 74 2c 64 77 3d 74 68 69 73 2e 6f 72 69 67 69 6e 61 6c 50 6f 73 69 74 69 6f 6e 2e 6c 65 66 74 2b 74 68 69 73 2e 6f 72 69 67 69 6e 61 6c 53 69 7a 65 2e 77 69 64 74 68 2c 64 68 3d 74 68 69 73 2e 6f 72 69 67 69 6e 61 6c 50 6f 73 69 74 69 6f 6e 2e 74 6f 70 2b 74 68 69 73 2e 6f 72 69 67 69 6e 61 6c 53 69 7a 65 2e 68 65 69 67 68 74 2c 63 77 3d 2f 73 77 7c 6e 77 7c 77 2f 2e 74 65 73 74 28 61 29 2c 63 68 3d 2f 6e 77 7c 6e 65 7c 6e 2f 2e 74 65 73 74 28 61 29 3b 72 65 74 75 72 6e 20 69 73 6d 69 6e 77 26 26 28 64 61 74 61 2e 77 69 64 74 68 3d 6f 2e 6d 69 6e 57 69 64 74 68 29 2c 69 73 6d 69 Data Ascii: ._isNumber(data.height)&&o.minHeight&&o.minHeight>data.height,dw=this.originalPosition.left+this.originalSize.width,dh=this.originalPosition.top+this.originalSize.height,cw=/sw\|nw\|w/.test(a),ch=/nw\|ne\|n/.test(a);return isminw&&(data.width=o.minWidth),ismi
2023-06-06 08:39:22 UTC	5541	IN	Data Raw: 70 61 72 73 65 46 6c 6f 61 74 28 65 6c 2e 63 73 73 28 22 6c 65 66 74 22 29 29 2c 74 6f 70 3a 70 61 72 73 65 46 6c 6f 61 74 28 65 6c 2e 63 73 73 28 22 74 6f 70 22 29 29 7d 29 7d 29 29 7d 2c 72 65 73 69 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 2c 75 69 29 7b 76 61 72 20 74 68 61 74 3d 24 28 74 68 69 73 29 2e 72 65 73 69 7a 61 62 6c 65 28 22 69 6e 73 74 61 6e 63 65 22 29 2c 6f 3d 74 68 61 74 2e 6f 70 74 69 6f 6e 73 2c 6f 73 3d 74 68 61 74 2e 6f 72 69 67 69 6e 61 6c 53 69 7a 65 2c 6f 70 3d 74 68 61 74 2e 6f 72 69 67 69 6e 61 6c 50 6f 73 69 74 69 6f 6e 2c 64 65 6c 74 61 3d 7b 68 65 69 67 68 74 3a 74 68 61 74 2e 73 69 7a 65 2e 68 65 69 67 68 74 2d 6f 73 2e 68 65 69 67 68 74 7c 7c 30 2c 77 69 64 74 68 3a 74 68 61 74 2e 73 69 7a 65 2e 77 69 64 74 68 2d Data Ascii: parseFloat(el.css("left")),top:parseFloat(el.css("top"))})}))},resize:function(event,ui){var that=$(this).resizable("instance"),o=that.options,os=that.originalSize,op=that.originalPosition,delta={height:that.size.height-os.height\|\|0,width:that.size.width-

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
15	192.168.2.4	49711	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:20 UTC	296	OUT	GET /front_end/front_end_files/masthead-ie8.css HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hs-login.online/front_end/front_end_files/ursula.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:20 UTC	301	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:20 GMT Content-Type: text/css Content-Length: 1004 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:43 GMT ETag: "3ec-5fd6543215e73" Accept-Ranges: bytes Vary: Accept-Encoding
2023-06-06 08:38:20 UTC	301	IN	Data Raw: 23 74 61 62 73 20 6c 69 20 61 2c 0a 23 6c 61 6e 67 4c 69 73 74 20 6c 69 20 61 2c 0a 23 6c 6f 63 61 6c 65 20 61 2e 64 72 6f 70 44 6f 77 6e 4c 69 6e 6b 20 73 70 61 6e 2c 0a 23 6c 6f 67 6f 6e 20 61 2e 72 65 64 42 74 6e 20 73 70 61 6e 2c 0a 23 6c 6f 67 6f 6e 20 61 2e 77 68 69 74 65 42 74 6e 20 73 70 61 6e 2c 0a 23 6c 6f 67 6f 6e 20 61 2e 67 72 65 79 42 74 6e 20 73 70 61 6e 0a 7b 0a 09 68 65 69 67 68 74 3a 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 23 6c 6f 63 61 6c 65 20 2e 72 65 67 69 6f 6e 54 61 62 73 20 6c 69 20 61 0a 7b 0a 09 70 61 64 64 69 6e 67 3a 31 36 70 78 20 31 32 70 78 20 31 32 70 78 20 33 36 70 78 3b 0a 7d 0a 23 73 65 63 74 69 6f 6e 73 20 2e 64 6f 6f 72 6d 61 74 0a 7b 0a 09 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 62 63 62 Data Ascii: #tabs li a,#langList li a,#locale a.dropDownLink span,#logon a.redBtn span,#logon a.whiteBtn span,#logon a.greyBtn span{height:auto!important;}#locale .regionTabs li a{padding:16px 12px 12px 36px;}#sections .doormat{border:1px solid #bcb

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
150	192.168.2.4	50025	35.81.20.183	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:27 UTC	5544	OUT	POST /eumcollector/beacons/browser/v1/AD-AAB-AAF-XXU/adrum HTTP/1.1 Host: col.eum-appdynamics.com Connection: keep-alive Content-Length: 452 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Content-type: text/plain Accept: / Origin: https://www.hsbc.co.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:39:27 UTC	5545	OUT	Data Raw: 7b 22 76 72 22 3a 22 34 2e 32 2e 37 2e 31 22 2c 22 64 74 22 3a 22 52 22 2c 22 72 67 22 3a 22 30 22 2c 22 65 73 22 3a 5b 7b 22 65 67 22 3a 22 31 22 2c 22 65 74 22 3a 32 2c 22 65 75 22 3a 22 30 3a 2f 2f 31 2f 32 2f 33 2f 34 2f 35 22 2c 22 74 73 22 3a 31 36 38 36 30 34 30 37 38 36 31 33 39 2c 22 6d 67 22 3a 22 30 22 2c 22 61 75 22 3a 22 30 3a 2f 2f 36 2f 22 2c 22 61 74 22 3a 30 2c 22 70 70 22 3a 33 2c 22 6d 78 22 3a 7b 22 50 4c 43 22 3a 31 2c 22 46 42 54 22 3a 39 37 32 2c 22 44 44 54 22 3a 30 2c 22 44 50 54 22 3a 30 2c 22 50 4c 54 22 3a 39 37 32 2c 22 41 52 45 22 3a 30 7d 2c 22 6d 64 22 3a 22 50 4f 53 54 22 2c 22 73 69 22 3a 31 33 7d 5d 2c 22 61 69 22 3a 22 61 37 38 61 66 36 61 31 5f 31 61 64 33 5f 61 36 62 31 5f 36 33 33 31 5f 66 37 32 37 30 35 61 36 34 39 Data Ascii: {"vr":"4.2.7.1","dt":"R","rg":"0","es":[{"eg":"1","et":2,"eu":"0://1/2/3/4/5","ts":1686040786139,"mg":"0","au":"0://6/","at":0,"pp":3,"mx":{"PLC":1,"FBT":972,"DDT":0,"DPT":0,"PLT":972,"ARE":0},"md":"POST","si":13}],"ai":"a78af6a1_1ad3_a6b1_6331_f72705a649
2023-06-06 08:39:28 UTC	5545	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:39:27 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:23\|g:63438411-d3d3-45ab-a273-9c77bd413f0d; Path=/; Expires=Tue, 06-Jun-2023 08:39:57 GMT; Max-Age=30 expires: 0 set-cookie: ADRUM_BTa=R:23\|g:63438411-d3d3-45ab-a273-9c77bd413f0d\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Tue, 06-Jun-2023 08:39:57 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Tue, 06-Jun-2023 08:39:57 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:23\|i:559461; Path=/; Expires=Tue, 06-Jun-2023 08:39:57 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:23\|i:559461\|e:17; Path=/; Expires=Tue, 06-Jun-2023 08:39:57 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2023-06-06 08:39:28 UTC	5546	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
151	192.168.2.4	50027	62.138.155.102	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:28 UTC	5546	OUT	GET /commercial-banking/build/js/lpChat.min.js?v=1635885343 HTTP/1.1 Host: askus.business.hsbc.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: utag_main=v_id:01888fdcaa1f00511f81618bb8280006f002206700918$_sn:1$_ss:0$_st:1686042583801$ses_id:1686040783393%3Bexp-session$_pn:1%3Bexp-session$_prevpage:pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage%3Bexp-session; LPVID=hjNzhmNDMzZWM2NWVjZGNh; LPSID-50632853=N3roqYv8SBKOLDBc3Ezwkg
2023-06-06 08:39:28 UTC	5547	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:44:41 GMT Server: Apache Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT Access-Control-Max-Age: 1000 Access-Control-Allow-Headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token Strict-Transport-Security: max-age=16070400; includeSubdomains; Last-Modified: Mon, 28 Jun 2021 17:01:41 GMT ETag: "174f1-5c5d6717fd26a" Accept-Ranges: bytes Content-Length: 95473 Vary: Accept-Encoding Cache-Control: max-age=604800 Expires: Tue, 13 Jun 2023 08:44:41 GMT ServerLoc: 2 Access-Control-Allow-Origin: * Connection: close Content-Type: application/javascript
2023-06-06 08:39:28 UTC	5556	IN	Data Raw: 77 69 6e 64 6f 77 2e 6c 70 54 61 67 3d 77 69 6e 64 6f 77 2e 6c 70 54 61 67 7c 7c 7b 7d 3b 6c 70 54 61 67 2e 63 6f 6f 6b 69 65 4d 65 74 68 6f 64 73 3d 6c 70 54 61 67 2e 63 6f 6f 6b 69 65 4d 65 74 68 6f 64 73 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 76 61 72 20 61 3d 22 6c 70 54 65 73 74 43 6f 6f 6b 69 65 22 2b 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 62 3d 22 74 65 73 74 56 61 6c 75 65 22 3b 66 28 7b 6e 61 6d 65 3a 61 2c 76 61 6c 75 65 3a 62 7d 29 3b 68 3d 62 3d 3d 3d 63 28 61 29 3b 67 28 61 29 3b 69 3d 21 31 3b 72 65 74 75 72 6e 20 68 7d 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 72 65 74 75 72 6e 20 68 7d 66 75 6e 63 74 69 6f 6e 20 63 28 61 29 7b 76 61 72 20 62 Data Ascii: window.lpTag=window.lpTag\|\|{};lpTag.cookieMethods=lpTag.cookieMethods\|\|function(){"use strict";function a(){var a="lpTestCookie"+(new Date).getTime(),b="testValue";f({name:a,value:b});h=b===c(a);g(a);i=!1;return h}function b(){return h}function c(a){var b
2023-06-06 08:39:28 UTC	5564	IN	Data Raw: 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 62 29 26 26 28 6e 5b 62 5d 3d 61 5b 62 5d 29 3b 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 61 2e 75 73 65 4a 53 4f 4e 26 26 28 6a 3d 61 2e 75 73 65 4a 53 4f 4e 29 3b 61 2e 74 72 61 6e 73 70 6f 72 74 4f 72 64 65 72 26 26 28 6f 3d 61 2e 74 72 61 6e 73 70 6f 72 74 4f 72 64 65 72 29 7d 7d 3b 74 68 69 73 2e 61 64 64 52 65 6c 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 2c 65 2c 66 3b 69 66 28 62 29 7b 66 3d 74 68 69 73 2e 65 78 74 72 61 63 74 52 65 6c 73 28 61 29 3b 63 3d 6c 5b 62 2e 74 79 70 65 5d 3d 6c 5b 62 2e 74 79 70 65 5d 7c 7c 7b 7d 3b 62 2e 69 64 26 26 28 63 3d 63 5b 62 2e 69 64 5d 3d 63 5b 62 2e 69 64 5d 7c 7c 7b 7d 29 3b 66 6f 72 28 76 61 72 20 67 20 69 6e 20 66 29 69 Data Ascii: .hasOwnProperty(b)&&(n[b]=a[b]);"boolean"==typeof a.useJSON&&(j=a.useJSON);a.transportOrder&&(o=a.transportOrder)}};this.addRels=function(a,b){var c,d,e,f;if(b){f=this.extractRels(a);c=l[b.type]=l[b.type]\|\|{};b.id&&(c=c[b.id]=c[b.id]\|\|{});for(var g in f)i
2023-06-06 08:39:28 UTC	5572	IN	Data Raw: 61 2e 72 65 74 72 69 65 73 3a 48 2e 72 65 74 72 69 65 73 3b 61 2e 74 69 6d 65 6f 75 74 3d 61 2e 74 69 6d 65 6f 75 74 3f 61 2e 74 69 6d 65 6f 75 74 3a 48 2e 74 69 6d 65 6f 75 74 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 68 28 61 29 7b 76 61 72 20 62 2c 63 3d 39 39 39 39 39 2c 64 3d 22 78 22 3b 62 3d 61 3f 63 2b 64 2b 63 3a 4d 61 74 68 2e 72 6f 75 6e 64 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 63 29 2b 64 2b 4d 61 74 68 2e 72 6f 75 6e 64 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 63 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 69 28 61 2c 62 29 7b 72 65 74 75 72 6e 7b 73 74 61 74 75 73 43 6f 64 65 3a 61 2c 72 65 73 70 6f 6e 73 65 43 6f 64 65 3a 61 2c 65 72 72 6f 72 3a 62 2c 62 6f 64 79 3a 22 45 52 52 4f 52 22 7d 7d 66 75 Data Ascii: a.retries:H.retries;a.timeout=a.timeout?a.timeout:H.timeout;return a}function h(a){var b,c=99999,d="x";b=a?c+d+c:Math.round(Math.random()c)+d+Math.round(Math.random()c);return b}function i(a,b){return{statusCode:a,responseCode:a,error:b,body:"ERROR"}}fu
2023-06-06 08:39:28 UTC	5580	IN	Data Raw: 65 78 2b 31 3c 62 2e 75 72 6c 73 2e 6c 65 6e 67 74 68 29 7b 62 2e 69 6e 64 65 78 2b 2b 3b 74 28 61 2c 62 29 7d 65 6c 73 65 7b 62 2e 6f 72 69 67 69 6e 61 6c 52 65 71 75 65 73 74 2e 73 75 63 63 65 73 73 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 5b 63 5d 29 3b 76 28 62 2e 69 64 29 7d 7d 41 28 29 7d 3b 61 2e 65 72 72 6f 72 3d 61 2e 73 75 63 63 65 73 73 3b 6c 70 54 61 67 2e 74 61 67 6c 65 74 73 2e 6a 73 6f 6e 70 2e 69 73 73 75 65 43 61 6c 6c 28 61 29 3b 7a 28 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 61 29 7b 76 61 72 20 62 3d 72 28 61 2c 61 2e 72 65 74 72 69 65 73 7c 7c 4b 2e 72 65 74 72 69 65 73 29 3b 62 2e 69 64 3d 6a 28 29 3b 62 2e 75 72 6c 3d 6f 28 61 2c 21 30 29 3b 62 2e 73 75 63 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 63 2e 72 65 73 70 6f 6e Data Ascii: ex+1<b.urls.length){b.index++;t(a,b)}else{b.originalRequest.success.apply(null,[c]);v(b.id)}}A()};a.error=a.success;lpTag.taglets.jsonp.issueCall(a);z()}function u(a){var b=r(a,a.retries\|\|K.retries);b.id=j();b.url=o(a,!0);b.success=function(c){if(c.respon
2023-06-06 08:39:28 UTC	5588	IN	Data Raw: 28 72 61 29 3b 62 2e 64 6f 6d 61 69 6e 3d 61 3b 62 2e 75 72 6c 3d 64 61 5b 61 5d 2e 75 72 6c 3b 57 28 64 61 5b 61 5d 2e 65 72 72 6f 72 2c 64 61 5b 61 5d 2e 63 6f 6e 74 65 78 74 2c 62 29 3b 71 28 64 61 5b 61 5d 29 3b 64 61 5b 61 5d 3d 6e 75 6c 6c 3b 64 65 6c 65 74 65 20 64 61 5b 61 5d 7d 7d 66 75 6e 63 74 69 6f 6e 20 48 28 61 2c 62 2c 63 29 7b 5a 28 22 46 72 61 6d 65 20 6e 6f 74 20 66 6f 75 6e 64 20 66 6f 72 20 64 6f 6d 61 69 6e 3a 20 22 2b 61 2c 6d 61 2e 45 52 52 4f 52 2c 22 5f 6e 6f 46 72 61 6d 65 46 6f 75 6e 64 22 29 3b 57 28 62 2c 7b 72 65 73 70 6f 6e 73 65 43 6f 64 65 3a 36 30 30 2c 65 72 72 6f 72 3a 22 54 72 61 6e 73 70 6f 72 74 20 2d 20 70 6f 73 74 6d 65 73 73 61 67 65 20 2d 20 75 6e 61 62 6c 65 20 74 6f 20 72 75 6e 20 72 65 71 75 65 73 74 3a 20 22 Data Ascii: (ra);b.domain=a;b.url=da[a].url;W(da[a].error,da[a].context,b);q(da[a]);da[a]=null;delete da[a]}}function H(a,b,c){Z("Frame not found for domain: "+a,ma.ERROR,"_noFrameFound");W(b,{responseCode:600,error:"Transport - postmessage - unable to run request: "
2023-06-06 08:39:28 UTC	5596	IN	Data Raw: 75 6c 6c 3b 48 2e 6f 6e 63 6c 6f 73 65 3d 6e 75 6c 6c 3b 48 2e 6f 6e 65 72 72 6f 72 3d 6e 75 6c 6c 3b 48 2e 6f 6e 6d 65 73 73 61 67 65 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 28 61 29 7b 51 3d 21 30 3b 56 3d 30 3b 76 28 22 63 62 22 2c 52 2c 75 28 61 29 7c 7c 7b 73 74 61 74 65 3a 22 4f 50 45 4e 22 2c 63 6f 64 65 3a 32 30 30 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 71 28 61 29 7b 76 61 72 20 62 3d 21 31 3b 69 66 28 61 29 74 72 79 7b 76 61 72 20 63 3d 72 28 61 2e 64 61 74 61 29 3b 50 26 26 28 62 3d 44 28 63 29 29 3b 79 28 29 3b 62 7c 7c 76 28 22 63 62 22 2c 53 2c 63 29 7d 63 61 74 63 68 28 64 29 7b 6a 28 22 66 61 69 6c 65 64 20 74 6f 20 70 72 6f 63 65 73 73 20 6d 65 73 73 61 67 65 22 2c 22 5f 73 6f 63 6b 65 74 4d 65 73 73 61 67 65 22 29 7d 7d 66 75 6e Data Ascii: ull;H.onclose=null;H.onerror=null;H.onmessage=null}}function p(a){Q=!0;V=0;v("cb",R,u(a)\|\|{state:"OPEN",code:200})}function q(a){var b=!1;if(a)try{var c=r(a.data);P&&(b=D(c));y();b\|\|v("cb",S,c)}catch(d){j("failed to process message","_socketMessage")}}fun
2023-06-06 08:39:28 UTC	5603	IN	Data Raw: 61 67 6c 65 74 73 2e 6c 70 41 6a 61 78 29 74 72 79 7b 6c 70 54 61 67 2e 74 61 67 6c 65 74 73 2e 6c 70 41 6a 61 78 2e 61 64 64 54 72 61 6e 73 70 6f 72 74 28 4e 2c 59 29 7d 63 61 74 63 68 28 5a 29 7b 7d 72 65 74 75 72 6e 20 59 7d 28 77 69 6e 64 6f 77 29 3b 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 29 62 28 61 2c 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 7b 61 2e 43 68 72 6f 6e 6f 73 3d 61 2e 43 68 72 6f 6e 6f 73 7c 7c 7b 7d 3b 62 28 61 2c 61 2e 43 68 72 6f 6e 6f 73 29 7d 7d 28 76 6f 69 64 20 30 3d 3d 3d 77 69 6e 64 6f 77 2e 6c 70 54 61 67 3f 74 68 69 73 3a 77 69 6e 64 6f 77 2e 6c 70 54 61 67 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 Data Ascii: aglets.lpAjax)try{lpTag.taglets.lpAjax.addTransport(N,Y)}catch(Z){}return Y}(window);!function(a,b){"use strict";if("object"==typeof exports)b(a,exports);else{a.Chronos=a.Chronos\|\|{};b(a,a.Chronos)}}(void 0===window.lpTag?this:window.lpTag,function(a,b,c)
2023-06-06 08:39:28 UTC	5611	IN	Data Raw: 2b 61 2e 65 6e 67 61 67 65 6d 65 6e 74 44 6f 6d 61 69 6e 2b 22 2f 61 70 69 2f 61 63 63 6f 75 6e 74 2f 22 2b 61 2e 6c 70 4e 75 6d 62 65 72 2b 22 2f 61 70 70 2f 65 6e 67 61 67 65 6d 65 6e 74 2f 76 69 73 69 74 6f 72 73 2f 22 2b 65 2b 66 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 76 61 72 20 61 2c 62 3d 7a 61 26 26 7a 61 2e 64 6f 6d 61 69 6e 3b 62 26 26 7a 61 2e 6c 70 4e 75 6d 62 65 72 26 26 28 61 3d 22 68 74 74 70 73 3a 2f 2f 22 2b 62 2b 22 2f 61 70 69 2f 61 63 63 6f 75 6e 74 2f 22 2b 7a 61 2e 6c 70 4e 75 6d 62 65 72 2b 22 2f 63 6f 6e 76 65 72 73 61 74 69 6f 6e 2e 6a 73 6f 6e 3f 76 3d 31 26 4e 43 3d 74 72 75 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 72 65 74 75 72 6e 5b 74 61 2e 63 49 64 2c 74 61 2e 73 49 64 2c 74 61 Data Ascii: +a.engagementDomain+"/api/account/"+a.lpNumber+"/app/engagement/visitors/"+e+f}}function f(){var a,b=za&&za.domain;b&&za.lpNumber&&(a="https://"+b+"/api/account/"+za.lpNumber+"/conversation.json?v=1&NC=true");return a}function g(a){return[ta.cId,ta.sId,ta
2023-06-06 08:39:28 UTC	5619	IN	Data Raw: 72 65 73 73 3d 21 31 3b 4a 61 3d 21 31 3b 65 61 2e 70 75 62 6c 69 73 68 28 7b 65 76 65 6e 74 4e 61 6d 65 3a 76 61 2e 6f 6e 4c 6f 61 64 2c 64 61 74 61 3a 7b 41 50 49 3a 22 43 68 61 74 20 41 50 49 20 53 44 4b 20 4c 6f 61 64 65 64 22 2c 76 65 72 73 69 6f 6e 3a 6a 61 2c 73 74 61 74 65 3a 4a 61 3f 68 61 2e 63 68 61 74 53 74 61 74 65 73 2e 52 45 53 55 4d 49 4e 47 3a 68 61 2e 63 68 61 74 53 74 61 74 65 73 2e 55 4e 49 4e 49 54 49 41 4c 49 53 45 44 7d 7d 29 3b 4b 28 29 7d 66 75 6e 63 74 69 6f 6e 20 45 28 62 29 7b 69 66 28 62 26 26 74 79 70 65 6f 66 20 62 3d 3d 3d 78 61 2e 4f 42 4a 26 26 21 62 2e 65 72 72 6f 72 29 7b 69 66 28 47 28 61 2c 62 29 29 7b 70 28 62 29 3b 4a 61 3d 21 30 3b 64 61 2e 67 65 74 53 65 73 73 69 6f 6e 44 61 74 61 28 78 28 6f 61 2e 63 68 61 74 29 Data Ascii: ress=!1;Ja=!1;ea.publish({eventName:va.onLoad,data:{API:"Chat API SDK Loaded",version:ja,state:Ja?ha.chatStates.RESUMING:ha.chatStates.UNINITIALISED}});K()}function E(b){if(b&&typeof b===xa.OBJ&&!b.error){if(G(a,b)){p(b);Ja=!0;da.getSessionData(x(oa.chat)
2023-06-06 08:39:28 UTC	5627	IN	Data Raw: 2e 65 72 72 6f 72 2e 69 6e 74 65 72 6e 61 6c 43 6f 64 65 3f 61 61 28 24 28 68 61 2e 63 68 61 74 53 74 61 74 65 73 2e 4e 4f 54 46 4f 55 4e 44 29 29 3a 49 28 5b 76 61 2e 6f 6e 4c 69 6e 65 2c 76 61 2e 6f 6e 41 67 65 6e 74 54 79 70 69 6e 67 2c 76 61 2e 6f 6e 49 6e 66 6f 2c 76 61 2e 6f 6e 45 76 65 6e 74 73 5d 2c 63 29 7d 3b 7a 28 72 61 2e 49 4e 46 4f 2c 7b 6f 72 69 67 69 6e 61 6c 52 65 71 75 65 73 74 3a 22 22 2c 73 65 6e 74 52 65 71 75 65 73 74 3a 62 2c 72 65 73 70 6f 6e 73 65 3a 22 53 45 4e 44 49 4e 47 20 52 45 51 55 45 53 54 22 7d 29 3b 72 65 74 75 72 6e 20 6d 61 2e 69 73 73 75 65 43 61 6c 6c 28 62 29 7d 66 75 6e 63 74 69 6f 6e 20 55 28 61 2c 62 29 7b 76 61 72 20 63 3d 61 26 26 61 2e 65 76 65 6e 74 3b 63 3d 63 26 26 63 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d Data Ascii: .error.internalCode?aa($(ha.chatStates.NOTFOUND)):I([va.onLine,va.onAgentTyping,va.onInfo,va.onEvents],c)};z(ra.INFO,{originalRequest:"",sentRequest:b,response:"SENDING REQUEST"});return ma.issueCall(b)}function U(a,b){var c=a&&a.event;c=c&&c.constructor=
2023-06-06 08:39:28 UTC	5635	IN	Data Raw: 67 74 68 29 68 28 61 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 22 54 68 65 72 65 20 77 68 65 72 65 20 6d 69 73 73 69 6e 67 20 70 72 6f 70 65 72 74 69 65 73 20 69 6e 20 74 68 65 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 72 65 71 75 65 73 74 3a 20 22 2b 62 2e 6a 6f 69 6e 28 22 2c 22 29 3b 65 61 2e 70 75 62 6c 69 73 68 28 7b 65 76 65 6e 74 4e 61 6d 65 3a 76 61 2e 6f 6e 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 46 61 69 6c 2c 64 61 74 61 3a 7b 65 72 72 6f 72 3a 63 2c 72 65 73 70 6f 6e 73 65 3a 63 7d 7d 29 7d 7d 3b 68 61 2e 72 65 71 75 65 73 74 43 68 61 74 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 69 66 28 77 61 2e 69 6e 69 74 69 61 6c 69 73 65 64 29 4f 28 62 29 3b 65 6c 73 65 7b 62 3d 62 7c 7c 7b 7d 3b 62 2e 72 65 71 75 65 73 74 43 68 61 74 3d 21 30 3b 62 2e Data Ascii: gth)h(a);else{var c="There where missing properties in the authentication request: "+b.join(",");ea.publish({eventName:va.onAuthenticationFail,data:{error:c,response:c}})}};ha.requestChat=function(b){if(wa.initialised)O(b);else{b=b\|\|{};b.requestChat=!0;b.
2023-06-06 08:39:28 UTC	5642	IN	Data Raw: 3a 22 63 68 61 74 22 2c 6e 65 65 64 41 75 74 68 3a 21 30 2c 72 65 71 75 65 73 74 54 79 70 65 3a 22 50 55 54 22 2c 64 61 74 61 3a 64 7d 29 7d 69 66 28 21 65 29 72 65 74 75 72 6e 20 79 28 7b 65 72 72 6f 72 3a 22 72 65 71 75 65 73 74 54 72 61 6e 73 63 72 69 70 74 20 2d 20 75 6e 61 62 6c 65 20 74 6f 20 66 69 6e 64 20 72 65 6c 20 66 6f 72 20 72 65 71 75 65 73 74 22 7d 2c 22 22 2c 22 22 2c 22 22 29 3b 65 3d 59 28 65 29 3b 65 2e 73 75 63 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 7a 28 72 61 2e 49 4e 46 4f 2c 7b 6f 72 69 67 69 6e 61 6c 52 65 71 75 65 73 74 3a 61 7c 7c 22 22 2c 73 65 6e 74 52 65 71 75 65 73 74 3a 65 2c 72 65 73 70 6f 6e 73 65 3a 62 7d 29 3b 69 66 28 62 29 7b 76 61 72 20 63 3d 7b 65 6d 61 69 6c 3a 61 2e 65 6d 61 69 6c 7d 3b 65 61 2e 70 75 Data Ascii: :"chat",needAuth:!0,requestType:"PUT",data:d})}if(!e)return y({error:"requestTranscript - unable to find rel for request"},"","","");e=Y(e);e.success=function(b){z(ra.INFO,{originalRequest:a\|\|"",sentRequest:e,response:b});if(b){var c={email:a.email};ea.pu

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
152	192.168.2.4	50026	35.81.20.183	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:28 UTC	5548	OUT	POST /eumcollector/beacons/browser/v1/AD-AAB-AAB-WKX/adrum HTTP/1.1 Host: col.eum-appdynamics.com Connection: keep-alive Content-Length: 8028 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Content-type: text/plain Accept: / Origin: https://www.security.hsbc.co.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.security.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:39:28 UTC	5549	OUT	Data Raw: 7b 22 76 72 22 3a 22 34 2e 32 2e 30 2e 32 22 2c 22 64 74 22 3a 22 52 22 2c 22 72 67 22 3a 22 30 22 2c 22 65 73 22 3a 5b 7b 22 65 67 22 3a 22 31 22 2c 22 65 74 22 3a 34 2c 22 65 75 22 3a 22 30 3a 2f 2f 31 2f 32 2f 33 2f 22 2c 22 74 73 22 3a 31 36 38 36 30 34 30 37 39 34 39 31 34 2c 22 6d 67 22 3a 22 30 22 2c 22 61 75 22 3a 22 30 3a 2f 2f 31 2f 32 2f 33 2f 23 34 22 2c 22 61 74 22 3a 30 2c 22 64 6d 22 3a 22 55 6e 63 61 75 67 68 74 20 53 79 6e 74 61 78 45 72 72 6f 72 3a 20 55 6e 65 78 70 65 63 74 65 64 20 74 6f 6b 65 6e 20 27 7d 27 22 2c 22 6c 6e 22 3a 31 33 34 30 2c 22 73 74 61 63 6b 22 3a 22 53 79 6e 74 61 78 45 72 72 6f 72 3a 20 55 6e 65 78 70 65 63 74 65 64 20 74 6f 6b 65 6e 20 27 7d 27 22 2c 22 73 69 22 3a 36 7d 2c 7b 22 65 67 22 3a 22 32 22 2c 22 65 74 Data Ascii: {"vr":"4.2.0.2","dt":"R","rg":"0","es":[{"eg":"1","et":4,"eu":"0://1/2/3/","ts":1686040794914,"mg":"0","au":"0://1/2/3/#4","at":0,"dm":"Uncaught SyntaxError: Unexpected token '}'","ln":1340,"stack":"SyntaxError: Unexpected token '}'","si":6},{"eg":"2","et
2023-06-06 08:39:28 UTC	5651	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:39:28 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:32\|g:4fdfe8a1-6b86-4890-ac98-b10db8b2d289; Path=/; Expires=Tue, 06-Jun-2023 08:39:58 GMT; Max-Age=30 expires: 0 set-cookie: ADRUM_BTa=R:32\|g:4fdfe8a1-6b86-4890-ac98-b10db8b2d289\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Tue, 06-Jun-2023 08:39:58 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Tue, 06-Jun-2023 08:39:58 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:32\|i:559461; Path=/; Expires=Tue, 06-Jun-2023 08:39:58 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:32\|i:559461\|e:10; Path=/; Expires=Tue, 06-Jun-2023 08:39:58 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2023-06-06 08:39:28 UTC	5652	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
153	192.168.2.4	50028	62.138.155.102	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:28 UTC	5650	OUT	GET /commercial-banking/build/js/lp.min.js?v=1635885343 HTTP/1.1 Host: askus.business.hsbc.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: utag_main=v_id:01888fdcaa1f00511f81618bb8280006f002206700918$_sn:1$_ss:0$_st:1686042583801$ses_id:1686040783393%3Bexp-session$_pn:1%3Bexp-session$_prevpage:pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage%3Bexp-session; LPVID=hjNzhmNDMzZWM2NWVjZGNh; LPSID-50632853=N3roqYv8SBKOLDBc3Ezwkg
2023-06-06 08:39:28 UTC	5652	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:44:41 GMT Server: Apache Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT Access-Control-Max-Age: 1000 Access-Control-Allow-Headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token Strict-Transport-Security: max-age=16070400; includeSubdomains; Last-Modified: Tue, 25 Apr 2023 07:03:52 GMT ETag: "49ae-5fa23b9dcd6e1" Accept-Ranges: bytes Content-Length: 18862 Vary: Accept-Encoding Cache-Control: max-age=604800 Expires: Tue, 13 Jun 2023 08:44:41 GMT ServerLoc: 2 Access-Control-Allow-Origin: * Connection: close Content-Type: application/javascript
2023-06-06 08:39:28 UTC	5652	IN	Data Raw: 56 41 4d 44 2e 6c 70 4c 69 76 65 43 68 61 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 61 2c 6e 3d 7b 7d 2c 6f 3d 7b 7d 2c 69 3d 32 35 2c 63 3d 65 28 22 23 76 69 72 74 75 61 6c 2d 61 73 73 69 73 74 61 6e 74 22 29 3b 72 65 74 75 72 6e 20 6e 2e 63 6f 6e 66 3d 7b 61 70 70 4b 65 79 3a 22 37 32 31 63 31 38 30 62 30 39 65 62 34 36 33 64 39 66 33 31 39 31 63 34 31 37 36 32 62 62 36 38 22 2c 73 69 74 65 3a 22 35 30 36 33 32 38 35 33 22 7d 2c 6e 2e 69 6e 69 74 4c 69 76 65 43 68 61 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 65 76 65 6e 74 73 28 65 29 2c 6e 2e 63 72 65 61 74 65 45 78 74 65 72 6e 61 6c 4a 73 4d 65 74 68 6f 64 4e 61 6d 65 28 29 7d 2c 6e 2e 63 72 65 61 74 65 45 78 74 65 72 6e 61 6c 4a 73 4d 65 74 68 6f 64 4e 61 6d 65 3d 66 75 6e 63 74 Data Ascii: VAMD.lpLiveChat=function(e){var t,a,n={},o={},i=25,c=e("#virtual-assistant");return n.conf={appKey:"721c180b09eb463d9f3191c41762bb68",site:"50632853"},n.initLiveChat=function(){n.events(e),n.createExternalJsMethodName()},n.createExternalJsMethodName=funct
2023-06-06 08:39:28 UTC	5660	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 61 3d 65 28 22 3c 64 69 76 2f 3e 22 29 2c 6e 3d 65 28 22 3c 64 69 76 2f 3e 22 2c 7b 63 6c 61 73 73 3a 22 76 61 2d 64 69 61 6c 6f 67 2d 6e 6f 64 65 20 76 61 2d 6c 63 2d 64 69 61 6c 6f 67 22 7d 29 3b 73 77 69 74 63 68 28 76 6f 69 64 20 30 21 3d 3d 74 2e 73 75 62 54 79 70 65 26 26 22 53 54 41 4c 4c 45 52 22 3d 3d 74 2e 73 75 62 54 79 70 65 26 26 28 74 2e 73 6f 75 72 63 65 3d 22 73 79 73 74 65 6d 22 29 2c 74 2e 73 6f 75 72 63 65 29 7b 63 61 73 65 22 76 69 73 69 74 6f 72 22 3a 6e 2e 61 64 64 43 6c 61 73 73 28 22 76 61 2d 71 73 74 2d 6e 6f 64 65 20 20 76 61 2d 6c 63 2d 76 69 73 69 74 6f 72 20 76 61 2d 69 73 2d 61 63 74 69 76 65 22 29 2c 6e 2e 61 70 70 65 6e 64 28 65 28 22 3c 64 69 76 2f 3e 22 2c 7b 63 6c 61 73 Data Ascii: =function(t){var a=e("<div/>"),n=e("<div/>",{class:"va-dialog-node va-lc-dialog"});switch(void 0!==t.subType&&"STALLER"==t.subType&&(t.source="system"),t.source){case"visitor":n.addClass("va-qst-node va-lc-visitor va-is-active"),n.append(e("<div/>",{clas
2023-06-06 08:39:28 UTC	5668	IN	Data Raw: 63 2e 66 69 6e 64 28 22 2e 76 61 2d 69 6e 70 2d 74 78 74 22 29 2e 61 74 74 72 28 22 64 69 73 61 62 6c 65 64 22 2c 21 30 29 29 7d 29 2c 63 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 22 2e 76 61 2d 6c 63 2d 63 6f 6e 66 69 72 6d 2d 79 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 56 41 4d 44 2e 63 6f 6e 66 2e 64 65 62 75 67 26 26 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 25 63 43 48 41 54 20 45 4e 44 45 44 20 62 79 20 55 53 45 52 3a 22 2c 22 63 6f 6c 6f 72 3a 23 38 30 30 30 38 30 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 29 2c 6e 2e 65 6e 64 43 68 61 74 28 29 2c 63 2e 66 69 6e 64 28 22 2e 76 61 2d 6c 63 2d 63 6f 6e 66 69 72 6d 2d 64 69 61 6c 6f 67 22 29 2e 72 65 6d 6f 76 65 28 29 7d 29 2c 63 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 22 2e 76 61 2d 6c 63 2d Data Ascii: c.find(".va-inp-txt").attr("disabled",!0))}),c.on("click",".va-lc-confirm-yes",function(e){VAMD.conf.debug&&console.log("%cCHAT ENDED by USER:","color:#800080;font-weight:bold;"),n.endChat(),c.find(".va-lc-confirm-dialog").remove()}),c.on("click",".va-lc-

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
154	192.168.2.4	50029	62.138.155.102	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:29 UTC	5671	OUT	GET /commercial-banking/build/images/sprite.png HTTP/1.1 Host: askus.business.hsbc.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://askus.business.hsbc.uk/commercial-banking/build/css/main.min.css?v=1635885343 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: utag_main=v_id:01888fdcaa1f00511f81618bb8280006f002206700918$_sn:1$_ss:0$_st:1686042583801$ses_id:1686040783393%3Bexp-session$_pn:1%3Bexp-session$_prevpage:pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage%3Bexp-session; LPVID=hjNzhmNDMzZWM2NWVjZGNh; LPSID-50632853=N3roqYv8SBKOLDBc3Ezwkg
2023-06-06 08:39:29 UTC	5675	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:44:42 GMT Server: Apache Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT Access-Control-Max-Age: 1000 Access-Control-Allow-Headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token Strict-Transport-Security: max-age=16070400; includeSubdomains; Last-Modified: Tue, 29 Jun 2021 18:04:33 GMT ETag: "2999-5c5eb70260ffd" Accept-Ranges: bytes Content-Length: 10649 Cache-Control: max-age=604800 Expires: Tue, 13 Jun 2023 08:44:42 GMT ServerLoc: 2 Access-Control-Allow-Origin: * Connection: close Content-Type: image/png
2023-06-06 08:39:29 UTC	5675	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 c8 08 06 00 00 00 ad 58 ae 9e 00 00 20 00 49 44 41 54 78 9c ed 9d 79 98 14 d5 b9 ff bf a7 ba aa bb a7 f7 e9 d9 19 16 47 45 cc 8d 1a 51 44 d0 b8 a0 89 7a dd 41 e3 2f 41 0d 20 98 48 e2 86 11 22 cb c0 c0 80 ca 32 cc 86 01 01 01 1d 1c ae 7a 73 4d cc 5d 72 73 4d 62 a2 b8 21 46 83 28 eb 8c 80 b3 4f 2f d3 fb 52 55 e7 f7 47 75 0d 3d c3 30 fb 4c f7 d8 e7 f3 3c e7 a1 bb a8 e5 54 4f 7d eb 7d cf 79 df 73 0e 69 6b 6b cb 58 b8 70 61 c5 79 e7 9d 77 e2 17 bf f8 c5 06 9d 4e e7 13 04 21 02 00 b2 2c 83 10 82 fe 40 29 05 c7 71 a0 94 82 52 ca f9 fd 7e db b2 65 cb 4a ac 56 ab af b0 b0 f0 d7 00 22 82 20 88 fd 3a f9 c0 a8 03 60 8e 7d ee df cd 0d 1c 1a fb d7 0b 20 3f fe 3f c8 9a a2 61 af 4c 17 dc 0d 60 05 80 9b Data Ascii: PNGIHDRX IDATxyGEQDzA/A H"2zsM]rsMb!F(O/RUGu=0L<TO}}ysikkXpaywN!,@)qR~eJV" :`} ??aL`
2023-06-06 08:39:29 UTC	5683	IN	Data Raw: 11 51 42 24 aa b8 4c c6 34 2d ec 16 c3 81 eb 27 4d f8 cd 4d 53 be b3 dd e1 f6 89 5a 81 07 47 08 04 41 83 1b af 18 79 2b 4c a5 ba 95 53 2d 48 3a 94 09 dd 3a 8b 63 11 ba 76 ab 7a c2 89 d3 63 dc bb b2 24 4e 0c 7c 4a a1 41 45 75 b7 1a 5a 3d b0 5b 8d b8 f2 a2 82 dd e9 16 c3 ee 50 44 9c 78 f8 44 d3 b5 ad 2e df 54 b7 2f 70 41 24 2a 15 04 c3 51 0d a5 14 16 73 9a ac 13 34 27 cd 46 fd f1 b1 39 f6 f7 f3 b3 ac ef a6 e9 b4 1f 5e 58 90 0b ad c0 a3 ae c5 8d 71 b9 19 d0 f0 29 37 05 f2 b7 07 4a a9 95 52 fa 12 ed 48 15 a5 34 97 52 4a 28 55 02 61 fd 2c 99 94 d2 df 76 3a f7 1a 4a a9 9d 52 2a 0c f0 dc ac 0c 43 49 79 28 a5 bb 3b 3d c0 af 50 4a f3 28 a5 1a 3a 30 81 a8 c7 e6 50 4a df ec 74 8d d5 94 52 53 a2 ff f8 90 03 04 4f 00 00 09 54 49 44 41 54 ac 30 81 f4 04 0f 60 5c dc f7 Data Ascii: QB$L4-'MMSZGAy+LS-H::cvzc$N\|JAEuZ=[PDxD.T/pA$Qs4'F9^Xq)7JRH4RJ(Ua,v:JRCIy(;=PJ(:0PJtRSOTIDAT0`\

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
155	192.168.2.4	50031	62.138.155.102	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:29 UTC	5672	OUT	GET /commercial-banking/build/images/banner-470x60.jpg HTTP/1.1 Host: askus.business.hsbc.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: utag_main=v_id:01888fdcaa1f00511f81618bb8280006f002206700918$_sn:1$_ss:0$_st:1686042583801$ses_id:1686040783393%3Bexp-session$_pn:1%3Bexp-session$_prevpage:pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage%3Bexp-session; LPVID=hjNzhmNDMzZWM2NWVjZGNh; LPSID-50632853=N3roqYv8SBKOLDBc3Ezwkg
2023-06-06 08:39:29 UTC	5686	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:44:42 GMT Server: Apache Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT Access-Control-Max-Age: 1000 Access-Control-Allow-Headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token Strict-Transport-Security: max-age=16070400; includeSubdomains; Last-Modified: Mon, 28 Jun 2021 17:01:41 GMT ETag: "6453-5c5d6717f5950" Accept-Ranges: bytes Content-Length: 25683 Cache-Control: max-age=604800 Expires: Tue, 13 Jun 2023 08:44:42 GMT ServerLoc: 2 Access-Control-Allow-Origin: * Connection: close Content-Type: image/jpeg
2023-06-06 08:39:29 UTC	5686	IN	Data Raw: ff d8 ff db 00 84 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 02 02 02 02 02 02 02 02 02 02 02 03 03 03 03 03 03 03 03 03 03 01 01 01 01 01 01 01 02 01 01 02 02 02 01 02 02 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 ff dd 00 04 00 3a ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff c0 00 11 08 00 3c 01 cc 03 00 11 00 01 11 01 02 11 01 ff c4 00 cd 00 00 01 04 02 03 01 00 00 00 00 00 00 00 00 00 00 04 02 03 05 07 06 08 00 01 09 0a 01 00 01 04 03 01 01 01 00 00 00 00 00 00 00 00 00 02 00 01 03 04 05 06 07 08 09 0a 10 00 00 05 02 04 03 05 06 05 02 03 05 04 0b 00 00 01 Data Ascii: :Adobed<
2023-06-06 08:39:29 UTC	5694	IN	Data Raw: 80 40 0c 66 a1 09 f5 f6 5e d0 a9 55 31 c2 40 62 18 f6 b0 b9 b2 83 c0 03 b0 e2 d8 e2 19 d3 d7 37 80 be 21 41 9c 54 47 3c f0 e6 99 ba 33 c0 8f 0c 63 ce 8f 27 4a 33 34 ef 10 ea 3b b1 5e b3 b0 91 98 ee dc 4e 35 2b 2b 26 2a 10 cf 4a 0e 41 77 2f bf 12 3b cc c8 1f 7a aa f0 c7 2b d7 4e a4 aa 26 e8 ce a1 2a 55 f8 05 42 3f 4d ca c9 3d 4d 60 e0 51 35 14 22 a0 25 31 80 70 14 2f 37 d6 71 48 49 eb 19 96 f7 ee 49 6f 35 fe fe 41 07 b8 bd f1 e8 1d 77 97 64 ff 00 f3 5b 9a d1 c4 91 7d 4b 1e 49 3f 48 20 05 15 63 a7 66 81 a2 db 7b 18 ca a3 42 c9 ca b2 a3 21 dc 01 16 99 d4 c9 f6 19 41 26 9a a4 ae 5f c3 3d cf da e5 b9 95 a4 5d 41 b4 13 53 f0 b4 d5 2f fe 16 9e a1 71 37 12 e9 d2 aa b9 6f 31 51 99 91 2e 40 b9 1d 18 4b c5 b5 ef ea f5 cb c8 fd a9 8c d5 3f d9 b0 f2 aa af 4b 71 20 fb Data Ascii: @f^U1@b7!ATG<3c'J34;^N5++&JAw/;z+N&UB?M=M`Q5"%1p/7qHIIo5Awd[}KI?H cf{B!A&_=]AS/q7o1Q.@K?Kq
2023-06-06 08:39:29 UTC	5702	IN	Data Raw: 8e 6f 30 a2 4d 63 d5 6e b1 d0 28 01 4a a7 10 f1 24 3c 04 4c 71 65 68 a9 22 a7 2b 96 15 86 24 f4 42 48 b8 1f 66 db b8 16 e3 df db d3 18 bc d7 58 ea ad 51 a9 3e b8 f1 0d ea 33 6c f6 b5 f7 49 2d 52 a2 ca 54 d9 04 9b cc 63 73 dd 43 12 78 e3 cf e6 66 be 25 4d 76 8f 3b ea 40 ea c2 2a e1 d2 d9 71 56 c2 52 73 e9 3e 48 fc 43 1d 3c a2 6d e3 17 76 e1 6d 1c 3e 74 1c 49 bb 48 c7 ef 1b 18 48 a1 80 a5 54 b8 ae 99 c7 f4 7b 44 49 30 c8 aa d7 ef 66 e0 73 f3 e4 11 e9 df b1 c5 aa ad 0b b7 32 26 b5 04 69 5f 4d 2c d1 15 ed ba 20 59 82 81 e8 a3 69 46 02 cf 62 05 ca 9b d4 bd bd 68 3c 8b cc 9e ce d9 a5 9a b9 d1 94 91 ae ab 6c a9 cb 79 96 99 65 56 b0 75 27 1f 31 09 33 53 0c 7c 75 30 31 47 59 78 84 e6 1a 37 a9 a4 db 3c 16 ae 7c 53 52 93 8b 80 bc 6b 1c 4f 16 a2 a2 cb b3 0c b2 6a 8a Data Ascii: o0Mcn(J$<Lqeh"+$BHfXQ>3lI-RTcsCxf%Mv;@*qVRs>HC<mvm>tIHHT{DI0fs2&i_M, YiFbh<lyeVu'13S\|u01GYx7<\|SRkOj
2023-06-06 08:39:29 UTC	5710	IN	Data Raw: dc ff 00 c3 12 09 39 54 c2 4b 88 6a 23 b0 72 b5 ed d7 03 73 80 75 50 0f 18 38 8e 56 b7 e6 be c3 71 f5 10 0e 56 c3 82 71 11 86 3f 6f 4c 14 47 4b 00 87 98 3f 35 b6 e5 c2 01 6e 58 20 ed 7c 44 60 8c 8b db 06 95 ca bd 43 5b 72 1e b6 eb 87 0e 71 5c c4 b8 78 8e 55 b0 6a 1a d8 76 db 51 2e 9a de d6 0c 18 76 c0 34 49 ba dc db 0f 95 c2 a2 41 37 10 e8 17 f4 11 e1 31 ae 3f 3f b6 1c 3b 62 3e 9a ee 02 df ab db 1d 95 ca a2 51 11 36 c5 01 ff 00 f5 f9 e8 03 87 dc c7 08 c6 80 db 0f 91 75 47 5e 2e 77 f4 d4 b7 fb 0e 0c 13 6b e2 37 45 04 8f d7 7c 73 bf 50 42 d7 0b 08 00 e9 7e 9b 6f b6 b8 62 e6 f8 6e 9a 8c 70 1c 28 17 fc ba 7a 75 ff 00 f9 c2 dc 70 fb 07 cf 0f 0a ea 05 80 07 72 98 7e 80 3f 6c 15 cf 6f 96 23 0a 09 27 e7 fe cc 76 2b aa 07 e0 03 79 40 78 6d e8 26 28 6a 3b f3 c1 93 Data Ascii: 9TKj#rsuP8VqVq?oLGK?5nX \|D`C[rq\xUjvQ.v4IA71??;b>Q6uG^.wk7E\|sPB~obnp(zupr~?lo#'v+y@xm&(j;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
156	192.168.2.4	50030	178.249.97.70	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:29 UTC	5673	OUT	GET /api/js/50632853?sid=N3roqYv8SBKOLDBc3Ezwkg&cb=lpCb44764x31311&t=uc&ts=1686040797845&pid=1524647234&tid=4578057391&vid=hjNzhmNDMzZWM2NWVjZGNh&sdes=%5B%7B%22type%22%3A%22pagediv%22%2C%22divId%22%3A%22lpButtonDiv-need-help-panel%22%7D%5D HTTP/1.1 Host: lo.v.liveperson.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:39:29 UTC	5673	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:39:29 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: no-store Server: ws Access-Control-Allow-Methods: GET, POST, PATCH Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token Access-Control-Expose-Headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-06-06 08:39:29 UTC	5674	IN	Data Raw: 31 39 35 0d 0a 6c 70 43 62 34 34 37 36 34 78 33 31 33 31 31 28 7b 22 6d 65 73 73 61 67 65 73 54 6f 56 69 73 69 74 6f 72 22 3a 5b 7b 22 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 4c 45 5f 45 4e 47 41 47 45 52 22 2c 22 73 75 62 6a 65 63 74 22 3a 22 53 48 4f 57 22 2c 22 63 6f 6e 74 65 6e 74 22 3a 7b 22 63 6f 6e 74 65 78 74 73 22 3a 5b 7b 22 45 6e 67 61 67 65 6d 65 6e 74 43 6f 6e 74 65 78 74 22 3a 7b 22 69 64 22 3a 22 31 22 7d 7d 2c 7b 22 70 61 67 65 43 6f 6e 74 65 78 74 22 3a 7b 22 69 64 22 3a 22 31 35 32 34 36 34 37 32 33 34 22 7d 7d 5d 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 32 39 30 32 30 36 30 33 35 30 2c 22 65 6e 67 61 67 65 6d 65 6e 74 49 64 22 3a 32 39 30 32 35 32 39 38 35 30 2c 22 65 6e 67 61 67 65 6d 65 6e 74 52 65 76 69 73 69 6f 6e 22 3a 31 37 34 Data Ascii: 195lpCb44764x31311({"messagesToVisitor":[{"destination":"LE_ENGAGER","subject":"SHOW","content":{"contexts":[{"EngagementContext":{"id":"1"}},{"pageContext":{"id":"1524647234"}}],"campaignId":2902060350,"engagementId":2902529850,"engagementRevision":174

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
157	192.168.2.4	50039	62.138.155.102	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:29 UTC	5712	OUT	GET /commercial-banking/build/images/sprite.png HTTP/1.1 Host: askus.business.hsbc.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: utag_main=v_id:01888fdcaa1f00511f81618bb8280006f002206700918$_sn:1$_ss:0$_st:1686042583801$ses_id:1686040783393%3Bexp-session$_pn:1%3Bexp-session$_prevpage:pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage%3Bexp-session; LPVID=hjNzhmNDMzZWM2NWVjZGNh; LPSID-50632853=N3roqYv8SBKOLDBc3Ezwkg
2023-06-06 08:39:29 UTC	5716	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:44:42 GMT Server: Apache Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT Access-Control-Max-Age: 1000 Access-Control-Allow-Headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token Strict-Transport-Security: max-age=16070400; includeSubdomains; Last-Modified: Tue, 29 Jun 2021 18:04:33 GMT ETag: "2999-5c5eb70260ffd" Accept-Ranges: bytes Content-Length: 10649 Cache-Control: max-age=604800 Expires: Tue, 13 Jun 2023 08:44:42 GMT ServerLoc: 2 Access-Control-Allow-Origin: * Connection: close Content-Type: image/png
2023-06-06 08:39:29 UTC	5733	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 c8 08 06 00 00 00 ad 58 ae 9e 00 00 20 00 49 44 41 54 78 9c ed 9d 79 98 14 d5 b9 ff bf a7 ba aa bb a7 f7 e9 d9 19 16 47 45 cc 8d 1a 51 44 d0 b8 a0 89 7a dd 41 e3 2f 41 0d 20 98 48 e2 86 11 22 cb c0 c0 80 ca 32 cc 86 01 01 01 1d 1c ae 7a 73 4d cc 5d 72 73 4d 62 a2 b8 21 46 83 28 eb 8c 80 b3 4f 2f d3 fb 52 55 e7 f7 47 75 0d 3d c3 30 fb 4c f7 d8 e7 f3 3c e7 a1 bb a8 e5 54 4f 7d eb 7d cf 79 df 73 0e 69 6b 6b cb 58 b8 70 61 c5 79 e7 9d 77 e2 17 bf f8 c5 06 9d 4e e7 13 04 21 02 00 b2 2c 83 10 82 fe 40 29 05 c7 71 a0 94 82 52 ca f9 fd 7e db b2 65 cb 4a ac 56 ab af b0 b0 f0 d7 00 22 82 20 88 fd 3a f9 c0 a8 03 60 8e 7d ee df cd 0d 1c 1a fb d7 0b 20 3f fe 3f c8 9a a2 61 af 4c 17 dc 0d 60 05 80 9b Data Ascii: PNGIHDRX IDATxyGEQDzA/A H"2zsM]rsMb!F(O/RUGu=0L<TO}}ysikkXpaywN!,@)qR~eJV" :`} ??aL`
2023-06-06 08:39:29 UTC	5741	IN	Data Raw: 11 51 42 24 aa b8 4c c6 34 2d ec 16 c3 81 eb 27 4d f8 cd 4d 53 be b3 dd e1 f6 89 5a 81 07 47 08 04 41 83 1b af 18 79 2b 4c a5 ba 95 53 2d 48 3a 94 09 dd 3a 8b 63 11 ba 76 ab 7a c2 89 d3 63 dc bb b2 24 4e 0c 7c 4a a1 41 45 75 b7 1a 5a 3d b0 5b 8d b8 f2 a2 82 dd e9 16 c3 ee 50 44 9c 78 f8 44 d3 b5 ad 2e df 54 b7 2f 70 41 24 2a 15 04 c3 51 0d a5 14 16 73 9a ac 13 34 27 cd 46 fd f1 b1 39 f6 f7 f3 b3 ac ef a6 e9 b4 1f 5e 58 90 0b ad c0 a3 ae c5 8d 71 b9 19 d0 f0 29 37 05 f2 b7 07 4a a9 95 52 fa 12 ed 48 15 a5 34 97 52 4a 28 55 02 61 fd 2c 99 94 d2 df 76 3a f7 1a 4a a9 9d 52 2a 0c f0 dc ac 0c 43 49 79 28 a5 bb 3b 3d c0 af 50 4a f3 28 a5 1a 3a 30 81 a8 c7 e6 50 4a df ec 74 8d d5 94 52 53 a2 ff f8 90 03 04 4f 00 00 09 54 49 44 41 54 ac 30 81 f4 04 0f 60 5c dc f7 Data Ascii: QB$L4-'MMSZGAy+LS-H::cvzc$N\|JAEuZ=[PDxD.T/pA$Qs4'F9^Xq)7JRH4RJ(Ua,v:JRCIy(;=PJ(:0PJtRSOTIDAT0`\

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
158	192.168.2.4	50038	62.138.155.102	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:29 UTC	5712	OUT	GET /commercial-banking/build/images/banner-470x60.jpg HTTP/1.1 Host: askus.business.hsbc.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: utag_main=v_id:01888fdcaa1f00511f81618bb8280006f002206700918$_sn:1$_ss:0$_st:1686042583801$ses_id:1686040783393%3Bexp-session$_pn:1%3Bexp-session$_prevpage:pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage%3Bexp-session; LPVID=hjNzhmNDMzZWM2NWVjZGNh; LPSID-50632853=N3roqYv8SBKOLDBc3Ezwkg
2023-06-06 08:39:29 UTC	5715	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:44:42 GMT Server: Apache Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT Access-Control-Max-Age: 1000 Access-Control-Allow-Headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token Strict-Transport-Security: max-age=16070400; includeSubdomains; Last-Modified: Mon, 28 Jun 2021 17:01:41 GMT ETag: "6453-5c5d6717f5950" Accept-Ranges: bytes Content-Length: 25683 Cache-Control: max-age=604800 Expires: Tue, 13 Jun 2023 08:44:42 GMT ServerLoc: 2 Access-Control-Allow-Origin: * Connection: close Content-Type: image/jpeg
2023-06-06 08:39:29 UTC	5717	IN	Data Raw: ff d8 ff db 00 84 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 02 02 02 02 02 02 02 02 02 02 02 03 03 03 03 03 03 03 03 03 03 01 01 01 01 01 01 01 02 01 01 02 02 02 01 02 02 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 ff dd 00 04 00 3a ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff c0 00 11 08 00 3c 01 cc 03 00 11 00 01 11 01 02 11 01 ff c4 00 cd 00 00 01 04 02 03 01 00 00 00 00 00 00 00 00 00 00 04 02 03 05 07 06 08 00 01 09 0a 01 00 01 04 03 01 01 01 00 00 00 00 00 00 00 00 00 02 00 01 03 04 05 06 07 08 09 0a 10 00 00 05 02 04 03 05 06 05 02 03 05 04 0b 00 00 01 Data Ascii: :Adobed<
2023-06-06 08:39:29 UTC	5725	IN	Data Raw: 80 40 0c 66 a1 09 f5 f6 5e d0 a9 55 31 c2 40 62 18 f6 b0 b9 b2 83 c0 03 b0 e2 d8 e2 19 d3 d7 37 80 be 21 41 9c 54 47 3c f0 e6 99 ba 33 c0 8f 0c 63 ce 8f 27 4a 33 34 ef 10 ea 3b b1 5e b3 b0 91 98 ee dc 4e 35 2b 2b 26 2a 10 cf 4a 0e 41 77 2f bf 12 3b cc c8 1f 7a aa f0 c7 2b d7 4e a4 aa 26 e8 ce a1 2a 55 f8 05 42 3f 4d ca c9 3d 4d 60 e0 51 35 14 22 a0 25 31 80 70 14 2f 37 d6 71 48 49 eb 19 96 f7 ee 49 6f 35 fe fe 41 07 b8 bd f1 e8 1d 77 97 64 ff 00 f3 5b 9a d1 c4 91 7d 4b 1e 49 3f 48 20 05 15 63 a7 66 81 a2 db 7b 18 ca a3 42 c9 ca b2 a3 21 dc 01 16 99 d4 c9 f6 19 41 26 9a a4 ae 5f c3 3d cf da e5 b9 95 a4 5d 41 b4 13 53 f0 b4 d5 2f fe 16 9e a1 71 37 12 e9 d2 aa b9 6f 31 51 99 91 2e 40 b9 1d 18 4b c5 b5 ef ea f5 cb c8 fd a9 8c d5 3f d9 b0 f2 aa af 4b 71 20 fb Data Ascii: @f^U1@b7!ATG<3c'J34;^N5++&JAw/;z+N&UB?M=M`Q5"%1p/7qHIIo5Awd[}KI?H cf{B!A&_=]AS/q7o1Q.@K?Kq
2023-06-06 08:39:29 UTC	5743	IN	Data Raw: 8e 6f 30 a2 4d 63 d5 6e b1 d0 28 01 4a a7 10 f1 24 3c 04 4c 71 65 68 a9 22 a7 2b 96 15 86 24 f4 42 48 b8 1f 66 db b8 16 e3 df db d3 18 bc d7 58 ea ad 51 a9 3e b8 f1 0d ea 33 6c f6 b5 f7 49 2d 52 a2 ca 54 d9 04 9b cc 63 73 dd 43 12 78 e3 cf e6 66 be 25 4d 76 8f 3b ea 40 ea c2 2a e1 d2 d9 71 56 c2 52 73 e9 3e 48 fc 43 1d 3c a2 6d e3 17 76 e1 6d 1c 3e 74 1c 49 bb 48 c7 ef 1b 18 48 a1 80 a5 54 b8 ae 99 c7 f4 7b 44 49 30 c8 aa d7 ef 66 e0 73 f3 e4 11 e9 df b1 c5 aa ad 0b b7 32 26 b5 04 69 5f 4d 2c d1 15 ed ba 20 59 82 81 e8 a3 69 46 02 cf 62 05 ca 9b d4 bd bd 68 3c 8b cc 9e ce d9 a5 9a b9 d1 94 91 ae ab 6c a9 cb 79 96 99 65 56 b0 75 27 1f 31 09 33 53 0c 7c 75 30 31 47 59 78 84 e6 1a 37 a9 a4 db 3c 16 ae 7c 53 52 93 8b 80 bc 6b 1c 4f 16 a2 a2 cb b3 0c b2 6a 8a Data Ascii: o0Mcn(J$<Lqeh"+$BHfXQ>3lI-RTcsCxf%Mv;@*qVRs>HC<mvm>tIHHT{DI0fs2&i_M, YiFbh<lyeVu'13S\|u01GYx7<\|SRkOj
2023-06-06 08:39:29 UTC	5751	IN	Data Raw: dc ff 00 c3 12 09 39 54 c2 4b 88 6a 23 b0 72 b5 ed d7 03 73 80 75 50 0f 18 38 8e 56 b7 e6 be c3 71 f5 10 0e 56 c3 82 71 11 86 3f 6f 4c 14 47 4b 00 87 98 3f 35 b6 e5 c2 01 6e 58 20 ed 7c 44 60 8c 8b db 06 95 ca bd 43 5b 72 1e b6 eb 87 0e 71 5c c4 b8 78 8e 55 b0 6a 1a d8 76 db 51 2e 9a de d6 0c 18 76 c0 34 49 ba dc db 0f 95 c2 a2 41 37 10 e8 17 f4 11 e1 31 ae 3f 3f b6 1c 3b 62 3e 9a ee 02 df ab db 1d 95 ca a2 51 11 36 c5 01 ff 00 f5 f9 e8 03 87 dc c7 08 c6 80 db 0f 91 75 47 5e 2e 77 f4 d4 b7 fb 0e 0c 13 6b e2 37 45 04 8f d7 7c 73 bf 50 42 d7 0b 08 00 e9 7e 9b 6f b6 b8 62 e6 f8 6e 9a 8c 70 1c 28 17 fc ba 7a 75 ff 00 f9 c2 dc 70 fb 07 cf 0f 0a ea 05 80 07 72 98 7e 80 3f 6c 15 cf 6f 96 23 0a 09 27 e7 fe cc 76 2b aa 07 e0 03 79 40 78 6d e8 26 28 6a 3b f3 c1 93 Data Ascii: 9TKj#rsuP8VqVq?oLGK?5nX \|D`C[rq\xUjvQ.v4IA71??;b>Q6uG^.wk7E\|sPB~obnp(zupr~?lo#'v+y@xm&(j;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
159	192.168.2.4	50037	178.249.97.70	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:29 UTC	5713	OUT	GET /api/js/50632853?sid=N3roqYv8SBKOLDBc3Ezwkg&cb=lpCb47375x48403&t=sp&ts=1686040798180&pid=8132604285&tid=4578057391&vid=hjNzhmNDMzZWM2NWVjZGNh&rvt=1686040760583&pt=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&u=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&sec=%5B%22uk%22%2C%22english%22%2C%22pws%22%2C%22business%20banking%22%2C%22Default%22%5D&df=0&os=0 HTTP/1.1 Host: lo.v.liveperson.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:39:29 UTC	5714	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:39:29 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: no-store Server: ws Access-Control-Allow-Methods: GET, POST, PATCH Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token Access-Control-Expose-Headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-06-06 08:39:29 UTC	5715	IN	Data Raw: 66 30 0d 0a 6c 70 43 62 34 37 33 37 35 78 34 38 34 30 33 28 7b 22 73 64 6b 43 6f 6e 66 22 3a 7b 22 6c 70 56 69 73 69 74 6f 72 49 64 22 3a 22 68 6a 4e 7a 68 6d 4e 44 4d 7a 5a 57 4d 32 4e 57 56 6a 5a 47 4e 68 22 2c 22 6c 70 53 65 73 73 69 6f 6e 49 64 22 3a 22 4e 33 72 6f 71 59 76 38 53 42 4b 4f 4c 44 42 63 33 45 7a 77 6b 67 22 2c 22 6c 70 4c 61 73 74 56 69 73 69 74 22 3a 22 31 36 38 36 30 34 30 37 36 39 34 39 35 22 2c 22 70 72 6f 74 6f 63 6f 6c 56 65 72 73 69 6f 6e 22 3a 22 38 2e 36 2e 33 2e 30 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 62 75 73 69 6e 65 73 73 2e 68 73 62 63 2e 75 6b 22 2c 22 65 78 70 69 72 61 74 69 6f 6e 22 3a 33 31 35 33 36 30 30 30 7d 2c 22 6d 65 73 73 61 67 65 73 54 6f 56 69 73 69 74 6f 72 22 3a 5b 5d 7d 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: f0lpCb47375x48403({"sdkConf":{"lpVisitorId":"hjNzhmNDMzZWM2NWVjZGNh","lpSessionId":"N3roqYv8SBKOLDBc3Ezwkg","lpLastVisit":"1686040769495","protocolVersion":"8.6.3.0","domain":"business.hsbc.uk","expiration":31536000},"messagesToVisitor":[]});0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
16	192.168.2.4	49712	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:20 UTC	297	OUT	GET /front_end/front_end_files/masthead-ie9.css HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hs-login.online/front_end/front_end_files/ursula.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:20 UTC	303	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:20 GMT Content-Type: text/css Content-Length: 1538 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:43 GMT ETag: "602-5fd6543246bb4" Accept-Ranges: bytes Vary: Accept-Encoding
2023-06-06 08:38:20 UTC	303	IN	Data Raw: 23 74 61 62 73 20 6c 69 20 61 2c 0a 23 6c 61 6e 67 4c 69 73 74 20 6c 69 20 61 2c 0a 23 6c 6f 63 61 6c 65 20 61 2e 64 72 6f 70 44 6f 77 6e 4c 69 6e 6b 20 73 70 61 6e 2c 0a 23 6c 6f 67 6f 6e 20 61 2e 72 65 64 42 74 6e 20 73 70 61 6e 2c 0a 23 6c 6f 67 6f 6e 20 61 2e 77 68 69 74 65 42 74 6e 20 73 70 61 6e 2c 0a 23 6c 6f 67 6f 6e 20 61 2e 67 72 65 79 42 74 6e 20 73 70 61 6e 0a 7b 0a 09 68 65 69 67 68 74 3a 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 23 74 61 62 73 20 6c 69 0a 7b 0a 09 70 61 64 64 69 6e 67 3a 31 31 70 78 20 31 35 70 78 20 30 20 30 3b 0a 7d 0a 23 74 61 62 73 20 6c 69 2e 73 6b 69 70 4c 69 6e 6b 0a 7b 0a 09 70 61 64 64 69 6e 67 3a 31 31 70 78 20 30 20 30 3b 0a 7d 0a 23 74 61 62 73 20 6c 69 2e 63 75 72 72 65 6e 74 42 72 65 61 64 63 72 75 Data Ascii: #tabs li a,#langList li a,#locale a.dropDownLink span,#logon a.redBtn span,#logon a.whiteBtn span,#logon a.greyBtn span{height:auto!important;}#tabs li{padding:11px 15px 0 0;}#tabs li.skipLink{padding:11px 0 0;}#tabs li.currentBreadcru

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
160	192.168.2.4	50041	178.249.97.70	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:29 UTC	5716	OUT	GET /api/js/50632853?sid=N3roqYv8SBKOLDBc3Ezwkg&cb=lpCb46309x14488&t=uc&ts=1686040798083&pid=8132604285&tid=4578057391&vid=hjNzhmNDMzZWM2NWVjZGNh&sdes=%5B%7B%22type%22%3A%22pagediv%22%2C%22divId%22%3A%22lpButtonDiv-need-help-panel%22%7D%5D HTTP/1.1 Host: lo.v.liveperson.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:39:29 UTC	5753	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:39:29 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: no-store Server: ws Access-Control-Allow-Methods: GET, POST, PATCH Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token Access-Control-Expose-Headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-06-06 08:39:29 UTC	5754	IN	Data Raw: 31 39 35 0d 0a 6c 70 43 62 34 36 33 30 39 78 31 34 34 38 38 28 7b 22 6d 65 73 73 61 67 65 73 54 6f 56 69 73 69 74 6f 72 22 3a 5b 7b 22 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 4c 45 5f 45 4e 47 41 47 45 52 22 2c 22 73 75 62 6a 65 63 74 22 3a 22 53 48 4f 57 22 2c 22 63 6f 6e 74 65 6e 74 22 3a 7b 22 63 6f 6e 74 65 78 74 73 22 3a 5b 7b 22 45 6e 67 61 67 65 6d 65 6e 74 43 6f 6e 74 65 78 74 22 3a 7b 22 69 64 22 3a 22 32 22 7d 7d 2c 7b 22 70 61 67 65 43 6f 6e 74 65 78 74 22 3a 7b 22 69 64 22 3a 22 38 31 33 32 36 30 34 32 38 35 22 7d 7d 5d 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 32 39 30 32 30 36 30 33 35 30 2c 22 65 6e 67 61 67 65 6d 65 6e 74 49 64 22 3a 32 39 30 32 35 32 39 38 35 30 2c 22 65 6e 67 61 67 65 6d 65 6e 74 52 65 76 69 73 69 6f 6e 22 3a 31 37 34 Data Ascii: 195lpCb46309x14488({"messagesToVisitor":[{"destination":"LE_ENGAGER","subject":"SHOW","content":{"contexts":[{"EngagementContext":{"id":"2"}},{"pageContext":{"id":"8132604285"}}],"campaignId":2902060350,"engagementId":2902529850,"engagementRevision":174

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
161	192.168.2.4	50042	178.249.97.70	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:29 UTC	5754	OUT	GET /api/js/50632853?sid=N3roqYv8SBKOLDBc3Ezwkg&cb=lpCb5406x43929&t=pl&ts=1686040798182&pid=8132604285&tid=4578057391&vid=hjNzhmNDMzZWM2NWVjZGNh HTTP/1.1 Host: lo.v.liveperson.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:39:29 UTC	5755	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:39:29 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: no-store Server: ws Access-Control-Allow-Methods: GET, POST, PATCH Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token Access-Control-Expose-Headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-06-06 08:39:29 UTC	5756	IN	Data Raw: 36 65 0d 0a 6c 70 43 62 35 34 30 36 78 34 33 39 32 39 28 7b 22 73 6d 74 43 6f 6e 66 22 3a 7b 22 6b 65 65 70 41 6c 69 76 65 46 72 65 71 22 3a 31 30 7d 2c 22 73 64 6b 43 6f 6e 66 22 3a 7b 22 74 68 69 72 64 50 61 72 74 79 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 2c 22 6d 65 73 73 61 67 65 73 54 6f 56 69 73 69 74 6f 72 22 3a 5b 5d 7d 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 6elpCb5406x43929({"smtConf":{"keepAliveFreq":10},"sdkConf":{"thirdPartyEnabled":false},"messagesToVisitor":[]});0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
162	192.168.2.4	50043	178.249.97.70	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:30 UTC	5756	OUT	GET /api/js/50632853?sid=N3roqYv8SBKOLDBc3Ezwkg&cb=lpCb88878x58381&t=uc&ts=1686040798485&pid=8132604285&tid=4578057391&vid=hjNzhmNDMzZWM2NWVjZGNh&sdes=%5B%7B%22type%22%3A%22impDisplay%22%2C%22campaign%22%3A2902060350%2C%22engId%22%3A2902529850%2C%22revision%22%3A1740%2C%22eContext%22%3A%5B%7B%22type%22%3A%22engagementContext%22%2C%22id%22%3A%221%22%7D%5D%7D%5D HTTP/1.1 Host: lo.v.liveperson.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:39:30 UTC	5757	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:39:30 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: no-store Server: ws Access-Control-Allow-Methods: GET, POST, PATCH Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token Access-Control-Expose-Headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-06-06 08:39:30 UTC	5758	IN	Data Raw: 32 61 0d 0a 6c 70 43 62 38 38 38 37 38 78 35 38 33 38 31 28 7b 22 6d 65 73 73 61 67 65 73 54 6f 56 69 73 69 74 6f 72 22 3a 5b 5d 7d 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2alpCb88878x58381({"messagesToVisitor":[]});0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
163	192.168.2.4	50044	178.249.96.141	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:31 UTC	5758	OUT	GET /api/js/8181236?sid=Y0UXDFinQhG9AMSBGzKPtQ&cb=lpCb53347x99511&t=ip&ts=1686040800094&pid=114028263&tid=4972823587&vid=JkZDY4ZThjNmZkYmZiMTUx HTTP/1.1 Host: lo0.v.liveperson.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:39:31 UTC	5759	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:39:31 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: no-store Server: ws Access-Control-Allow-Methods: GET, POST, PATCH Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token Access-Control-Expose-Headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-06-06 08:39:31 UTC	5760	IN	Data Raw: 34 39 0d 0a 6c 70 43 62 35 33 33 34 37 78 39 39 35 31 31 28 7b 22 73 6d 74 43 6f 6e 66 22 3a 7b 22 6b 65 65 70 41 6c 69 76 65 46 72 65 71 22 3a 31 30 7d 2c 22 6d 65 73 73 61 67 65 73 54 6f 56 69 73 69 74 6f 72 22 3a 5b 5d 7d 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 49lpCb53347x99511({"smtConf":{"keepAliveFreq":10},"messagesToVisitor":[]});0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
164	192.168.2.4	50045	178.249.97.70	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:40 UTC	5760	OUT	GET /api/js/50632853?sid=N3roqYv8SBKOLDBc3Ezwkg&cb=lpCb63535x91541&t=ip&ts=1686040808870&pid=8132604285&tid=4578057391&vid=hjNzhmNDMzZWM2NWVjZGNh HTTP/1.1 Host: lo.v.liveperson.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:39:40 UTC	5760	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:39:40 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: no-store Server: ws Access-Control-Allow-Methods: GET, POST, PATCH Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token Access-Control-Expose-Headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-06-06 08:39:40 UTC	5761	IN	Data Raw: 34 39 0d 0a 6c 70 43 62 36 33 35 33 35 78 39 31 35 34 31 28 7b 22 73 6d 74 43 6f 6e 66 22 3a 7b 22 6b 65 65 70 41 6c 69 76 65 46 72 65 71 22 3a 31 30 7d 2c 22 6d 65 73 73 61 67 65 73 54 6f 56 69 73 69 74 6f 72 22 3a 5b 5d 7d 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 49lpCb63535x91541({"smtConf":{"keepAliveFreq":10},"messagesToVisitor":[]});0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
165	192.168.2.4	50046	178.249.96.141	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:44 UTC	5761	OUT	GET /api/js/8181236?sid=Y0UXDFinQhG9AMSBGzKPtQ&cb=lpCb98528x28802&t=ip&ts=1686040813175&pid=114028263&tid=4972823587&vid=JkZDY4ZThjNmZkYmZiMTUx HTTP/1.1 Host: lo0.v.liveperson.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:39:44 UTC	5763	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:39:44 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: no-store Server: ws Access-Control-Allow-Methods: GET, POST, PATCH Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token Access-Control-Expose-Headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-06-06 08:39:44 UTC	5764	IN	Data Raw: 34 39 0d 0a 6c 70 43 62 39 38 35 32 38 78 32 38 38 30 32 28 7b 22 73 6d 74 43 6f 6e 66 22 3a 7b 22 6b 65 65 70 41 6c 69 76 65 46 72 65 71 22 3a 31 30 7d 2c 22 6d 65 73 73 61 67 65 73 54 6f 56 69 73 69 74 6f 72 22 3a 5b 5d 7d 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 49lpCb98528x28802({"smtConf":{"keepAliveFreq":10},"messagesToVisitor":[]});0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
166	192.168.2.4	50047	178.249.97.70	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:44 UTC	5762	OUT	GET /api/js/50632853?sid=N3roqYv8SBKOLDBc3Ezwkg&cb=lpCb4841x58076&t=sp&ts=1686040813210&pid=4544126178&tid=4578057391&vid=hjNzhmNDMzZWM2NWVjZGNh&rvt=1686040769495&pt=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&u=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&sec=%5B%22uk%22%2C%22english%22%2C%22pws%22%2C%22business%20banking%22%2C%22Default%22%5D&df=0&os=0 HTTP/1.1 Host: lo.v.liveperson.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:39:44 UTC	5764	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:39:44 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: no-store Server: ws Access-Control-Allow-Methods: GET, POST, PATCH Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token Access-Control-Expose-Headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-06-06 08:39:44 UTC	5765	IN	Data Raw: 65 66 0d 0a 6c 70 43 62 34 38 34 31 78 35 38 30 37 36 28 7b 22 73 64 6b 43 6f 6e 66 22 3a 7b 22 6c 70 56 69 73 69 74 6f 72 49 64 22 3a 22 68 6a 4e 7a 68 6d 4e 44 4d 7a 5a 57 4d 32 4e 57 56 6a 5a 47 4e 68 22 2c 22 6c 70 53 65 73 73 69 6f 6e 49 64 22 3a 22 4e 33 72 6f 71 59 76 38 53 42 4b 4f 4c 44 42 63 33 45 7a 77 6b 67 22 2c 22 6c 70 4c 61 73 74 56 69 73 69 74 22 3a 22 31 36 38 36 30 34 30 37 38 34 35 33 32 22 2c 22 70 72 6f 74 6f 63 6f 6c 56 65 72 73 69 6f 6e 22 3a 22 38 2e 36 2e 33 2e 30 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 62 75 73 69 6e 65 73 73 2e 68 73 62 63 2e 75 6b 22 2c 22 65 78 70 69 72 61 74 69 6f 6e 22 3a 33 31 35 33 36 30 30 30 7d 2c 22 6d 65 73 73 61 67 65 73 54 6f 56 69 73 69 74 6f 72 22 3a 5b 5d 7d 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: eflpCb4841x58076({"sdkConf":{"lpVisitorId":"hjNzhmNDMzZWM2NWVjZGNh","lpSessionId":"N3roqYv8SBKOLDBc3Ezwkg","lpLastVisit":"1686040784532","protocolVersion":"8.6.3.0","domain":"business.hsbc.uk","expiration":31536000},"messagesToVisitor":[]});0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
167	192.168.2.4	50048	178.249.97.70	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:45 UTC	5765	OUT	GET /api/js/50632853?sid=N3roqYv8SBKOLDBc3Ezwkg&cb=lpCb8171x84640&t=uc&ts=1686040812937&pid=4544126178&tid=4578057391&vid=hjNzhmNDMzZWM2NWVjZGNh&sdes=%5B%7B%22type%22%3A%22pagediv%22%2C%22divId%22%3A%22lpButtonDiv-need-help-panel%22%7D%5D HTTP/1.1 Host: lo.v.liveperson.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:39:45 UTC	5766	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:39:45 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: no-store Server: ws Access-Control-Allow-Methods: GET, POST, PATCH Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token Access-Control-Expose-Headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-06-06 08:39:45 UTC	5767	IN	Data Raw: 31 39 34 0d 0a 6c 70 43 62 38 31 37 31 78 38 34 36 34 30 28 7b 22 6d 65 73 73 61 67 65 73 54 6f 56 69 73 69 74 6f 72 22 3a 5b 7b 22 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 4c 45 5f 45 4e 47 41 47 45 52 22 2c 22 73 75 62 6a 65 63 74 22 3a 22 53 48 4f 57 22 2c 22 63 6f 6e 74 65 6e 74 22 3a 7b 22 63 6f 6e 74 65 78 74 73 22 3a 5b 7b 22 45 6e 67 61 67 65 6d 65 6e 74 43 6f 6e 74 65 78 74 22 3a 7b 22 69 64 22 3a 22 33 22 7d 7d 2c 7b 22 70 61 67 65 43 6f 6e 74 65 78 74 22 3a 7b 22 69 64 22 3a 22 34 35 34 34 31 32 36 31 37 38 22 7d 7d 5d 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 32 39 30 32 30 36 30 33 35 30 2c 22 65 6e 67 61 67 65 6d 65 6e 74 49 64 22 3a 32 39 30 32 35 32 39 38 35 30 2c 22 65 6e 67 61 67 65 6d 65 6e 74 52 65 76 69 73 69 6f 6e 22 3a 31 37 34 30 Data Ascii: 194lpCb8171x84640({"messagesToVisitor":[{"destination":"LE_ENGAGER","subject":"SHOW","content":{"contexts":[{"EngagementContext":{"id":"3"}},{"pageContext":{"id":"4544126178"}}],"campaignId":2902060350,"engagementId":2902529850,"engagementRevision":1740

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
168	192.168.2.4	50049	178.249.97.70	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:46 UTC	5768	OUT	GET /api/js/50632853?sid=N3roqYv8SBKOLDBc3Ezwkg&cb=lpCb63675x48113&t=pl&ts=1686040813213&pid=4544126178&tid=4578057391&vid=hjNzhmNDMzZWM2NWVjZGNh HTTP/1.1 Host: lo.v.liveperson.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:39:46 UTC	5768	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:39:46 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: no-store Server: ws Access-Control-Allow-Methods: GET, POST, PATCH Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token Access-Control-Expose-Headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-06-06 08:39:46 UTC	5769	IN	Data Raw: 36 66 0d 0a 6c 70 43 62 36 33 36 37 35 78 34 38 31 31 33 28 7b 22 73 6d 74 43 6f 6e 66 22 3a 7b 22 6b 65 65 70 41 6c 69 76 65 46 72 65 71 22 3a 31 30 7d 2c 22 73 64 6b 43 6f 6e 66 22 3a 7b 22 74 68 69 72 64 50 61 72 74 79 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 2c 22 6d 65 73 73 61 67 65 73 54 6f 56 69 73 69 74 6f 72 22 3a 5b 5d 7d 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 6flpCb63675x48113({"smtConf":{"keepAliveFreq":10},"sdkConf":{"thirdPartyEnabled":false},"messagesToVisitor":[]});0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
169	192.168.2.4	50051	178.249.97.70	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:46 UTC	5770	OUT	GET /api/js/50632853?sid=N3roqYv8SBKOLDBc3Ezwkg&cb=lpCb43673x57927&t=uc&ts=1686040814942&pid=4544126178&tid=4578057391&vid=hjNzhmNDMzZWM2NWVjZGNh&sdes=%5B%7B%22type%22%3A%22impDisplay%22%2C%22campaign%22%3A2902060350%2C%22engId%22%3A2902529850%2C%22revision%22%3A1740%2C%22eContext%22%3A%5B%7B%22type%22%3A%22engagementContext%22%2C%22id%22%3A%223%22%7D%5D%7D%5D HTTP/1.1 Host: lo.v.liveperson.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:39:46 UTC	5770	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:39:46 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: no-store Server: ws Access-Control-Allow-Methods: GET, POST, PATCH Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token Access-Control-Expose-Headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-06-06 08:39:46 UTC	5771	IN	Data Raw: 32 61 0d 0a 6c 70 43 62 34 33 36 37 33 78 35 37 39 32 37 28 7b 22 6d 65 73 73 61 67 65 73 54 6f 56 69 73 69 74 6f 72 22 3a 5b 5d 7d 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2alpCb43673x57927({"messagesToVisitor":[]});0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
17	192.168.2.4	49713	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:20 UTC	300	OUT	GET /front_end/front_end_files/masthead-webkit.css HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hs-login.online/front_end/front_end_files/ursula.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:20 UTC	305	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:20 GMT Content-Type: text/css Content-Length: 761 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:43 GMT ETag: "2f9-5fd654324e8b4" Accept-Ranges: bytes Vary: Accept-Encoding
2023-06-06 08:38:20 UTC	306	IN	Data Raw: 23 74 61 62 73 20 6c 69 20 61 2c 0a 23 6c 61 6e 67 4c 69 73 74 20 6c 69 20 61 2c 0a 23 6c 6f 63 61 6c 65 20 61 2e 64 72 6f 70 44 6f 77 6e 4c 69 6e 6b 20 73 70 61 6e 2c 0a 23 6c 6f 67 6f 6e 20 61 2e 72 65 64 42 74 6e 20 73 70 61 6e 2c 0a 23 6c 6f 67 6f 6e 20 61 2e 77 68 69 74 65 42 74 6e 20 73 70 61 6e 2c 0a 23 6c 6f 67 6f 6e 20 61 2e 67 72 65 79 42 74 6e 20 73 70 61 6e 0a 7b 0a 09 68 65 69 67 68 74 3a 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 23 6c 6f 63 61 6c 65 20 2e 72 65 67 69 6f 6e 54 61 62 73 20 6c 69 20 61 0a 7b 0a 09 70 61 64 64 69 6e 67 3a 31 36 70 78 20 31 32 70 78 20 31 32 70 78 20 33 36 70 78 3b 0a 7d 0a 23 73 65 63 74 69 6f 6e 73 20 2e 64 6f 6f 72 6d 61 74 20 68 32 0a 7b 0a 09 70 61 64 64 69 6e 67 3a 31 70 78 20 32 35 70 78 20 35 Data Ascii: #tabs li a,#langList li a,#locale a.dropDownLink span,#logon a.redBtn span,#logon a.whiteBtn span,#logon a.greyBtn span{height:auto!important;}#locale .regionTabs li a{padding:16px 12px 12px 36px;}#sections .doormat h2{padding:1px 25px 5

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
170	192.168.2.4	50052	178.249.97.70	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:56 UTC	5772	OUT	GET /api/js/50632853?sid=N3roqYv8SBKOLDBc3Ezwkg&cb=lpCb90992x7930&t=ip&ts=1686040824937&pid=4544126178&tid=4578057391&vid=hjNzhmNDMzZWM2NWVjZGNh HTTP/1.1 Host: lo.v.liveperson.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:39:56 UTC	5772	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:39:56 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: no-store Server: ws Access-Control-Allow-Methods: GET, POST, PATCH Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token Access-Control-Expose-Headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-06-06 08:39:56 UTC	5773	IN	Data Raw: 34 38 0d 0a 6c 70 43 62 39 30 39 39 32 78 37 39 33 30 28 7b 22 73 6d 74 43 6f 6e 66 22 3a 7b 22 6b 65 65 70 41 6c 69 76 65 46 72 65 71 22 3a 31 30 7d 2c 22 6d 65 73 73 61 67 65 73 54 6f 56 69 73 69 74 6f 72 22 3a 5b 5d 7d 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 48lpCb90992x7930({"smtConf":{"keepAliveFreq":10},"messagesToVisitor":[]});0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
171	192.168.2.4	50053	178.249.97.70	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:59 UTC	5773	OUT	GET /api/js/50632853?sid=N3roqYv8SBKOLDBc3Ezwkg&cb=lpCb86741x35594&t=sp&ts=1686040827938&pid=2265170856&tid=4578057391&vid=hjNzhmNDMzZWM2NWVjZGNh&rvt=1686040784532&pt=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&u=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&sec=%5B%22uk%22%2C%22english%22%2C%22pws%22%2C%22business%20banking%22%2C%22Default%22%5D&df=0&os=0 HTTP/1.1 Host: lo.v.liveperson.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:39:59 UTC	5774	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:39:59 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: no-store Server: ws Access-Control-Allow-Methods: GET, POST, PATCH Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token Access-Control-Expose-Headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-06-06 08:39:59 UTC	5775	IN	Data Raw: 66 30 0d 0a 6c 70 43 62 38 36 37 34 31 78 33 35 35 39 34 28 7b 22 73 64 6b 43 6f 6e 66 22 3a 7b 22 6c 70 56 69 73 69 74 6f 72 49 64 22 3a 22 68 6a 4e 7a 68 6d 4e 44 4d 7a 5a 57 4d 32 4e 57 56 6a 5a 47 4e 68 22 2c 22 6c 70 53 65 73 73 69 6f 6e 49 64 22 3a 22 4e 33 72 6f 71 59 76 38 53 42 4b 4f 4c 44 42 63 33 45 7a 77 6b 67 22 2c 22 6c 70 4c 61 73 74 56 69 73 69 74 22 3a 22 31 36 38 36 30 34 30 37 39 39 36 33 37 22 2c 22 70 72 6f 74 6f 63 6f 6c 56 65 72 73 69 6f 6e 22 3a 22 38 2e 36 2e 33 2e 30 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 62 75 73 69 6e 65 73 73 2e 68 73 62 63 2e 75 6b 22 2c 22 65 78 70 69 72 61 74 69 6f 6e 22 3a 33 31 35 33 36 30 30 30 7d 2c 22 6d 65 73 73 61 67 65 73 54 6f 56 69 73 69 74 6f 72 22 3a 5b 5d 7d 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: f0lpCb86741x35594({"sdkConf":{"lpVisitorId":"hjNzhmNDMzZWM2NWVjZGNh","lpSessionId":"N3roqYv8SBKOLDBc3Ezwkg","lpLastVisit":"1686040799637","protocolVersion":"8.6.3.0","domain":"business.hsbc.uk","expiration":31536000},"messagesToVisitor":[]});0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
172	192.168.2.4	50054	178.249.97.70	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:01 UTC	5776	OUT	GET /api/js/50632853?sid=N3roqYv8SBKOLDBc3Ezwkg&cb=lpCb143x47488&t=uc&ts=1686040827931&pid=2265170856&tid=4578057391&vid=hjNzhmNDMzZWM2NWVjZGNh&sdes=%5B%7B%22type%22%3A%22pagediv%22%2C%22divId%22%3A%22lpButtonDiv-need-help-panel%22%7D%5D HTTP/1.1 Host: lo.v.liveperson.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:01 UTC	5776	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:40:01 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: no-store Server: ws Access-Control-Allow-Methods: GET, POST, PATCH Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token Access-Control-Expose-Headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-06-06 08:40:01 UTC	5777	IN	Data Raw: 31 39 33 0d 0a 6c 70 43 62 31 34 33 78 34 37 34 38 38 28 7b 22 6d 65 73 73 61 67 65 73 54 6f 56 69 73 69 74 6f 72 22 3a 5b 7b 22 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 4c 45 5f 45 4e 47 41 47 45 52 22 2c 22 73 75 62 6a 65 63 74 22 3a 22 53 48 4f 57 22 2c 22 63 6f 6e 74 65 6e 74 22 3a 7b 22 63 6f 6e 74 65 78 74 73 22 3a 5b 7b 22 45 6e 67 61 67 65 6d 65 6e 74 43 6f 6e 74 65 78 74 22 3a 7b 22 69 64 22 3a 22 34 22 7d 7d 2c 7b 22 70 61 67 65 43 6f 6e 74 65 78 74 22 3a 7b 22 69 64 22 3a 22 32 32 36 35 31 37 30 38 35 36 22 7d 7d 5d 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 32 39 30 32 30 36 30 33 35 30 2c 22 65 6e 67 61 67 65 6d 65 6e 74 49 64 22 3a 32 39 30 32 35 32 39 38 35 30 2c 22 65 6e 67 61 67 65 6d 65 6e 74 52 65 76 69 73 69 6f 6e 22 3a 31 37 34 30 2c Data Ascii: 193lpCb143x47488({"messagesToVisitor":[{"destination":"LE_ENGAGER","subject":"SHOW","content":{"contexts":[{"EngagementContext":{"id":"4"}},{"pageContext":{"id":"2265170856"}}],"campaignId":2902060350,"engagementId":2902529850,"engagementRevision":1740,

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
173	192.168.2.4	50055	178.249.97.70	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:01 UTC	5778	OUT	GET /api/js/50632853?sid=N3roqYv8SBKOLDBc3Ezwkg&cb=lpCb48804x86707&t=pl&ts=1686040828040&pid=2265170856&tid=4578057391&vid=hjNzhmNDMzZWM2NWVjZGNh HTTP/1.1 Host: lo.v.liveperson.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:01 UTC	5778	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:40:01 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: no-store Server: ws Access-Control-Allow-Methods: GET, POST, PATCH Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token Access-Control-Expose-Headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-06-06 08:40:01 UTC	5779	IN	Data Raw: 36 66 0d 0a 6c 70 43 62 34 38 38 30 34 78 38 36 37 30 37 28 7b 22 73 6d 74 43 6f 6e 66 22 3a 7b 22 6b 65 65 70 41 6c 69 76 65 46 72 65 71 22 3a 31 30 7d 2c 22 73 64 6b 43 6f 6e 66 22 3a 7b 22 74 68 69 72 64 50 61 72 74 79 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 2c 22 6d 65 73 73 61 67 65 73 54 6f 56 69 73 69 74 6f 72 22 3a 5b 5d 7d 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 6flpCb48804x86707({"smtConf":{"keepAliveFreq":10},"sdkConf":{"thirdPartyEnabled":false},"messagesToVisitor":[]});0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
174	192.168.2.4	50058	178.249.97.70	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:03 UTC	5780	OUT	GET /api/js/50632853?sid=N3roqYv8SBKOLDBc3Ezwkg&cb=lpCb61448x70509&t=uc&ts=1686040831944&pid=2265170856&tid=4578057391&vid=hjNzhmNDMzZWM2NWVjZGNh&sdes=%5B%7B%22type%22%3A%22ctmrinfo%22%2C%22info%22%3A%7B%22cstatus%22%3A%22United%20Kingdom%22%7D%7D%2C%7B%22type%22%3A%22cart%22%2C%22numItems%22%3A0%2C%22products%22%3A%5B%7B%22product%22%3A%7B%22name%22%3A%22site_region-Europe_UK_United_Kingdom_HSBC_Bank_Plc_HSBC%22%2C%22price%22%3Anull%7D%2C%22quantity%22%3Anull%7D%2C%7B%22product%22%3A%7B%22name%22%3A%22en-GB%22%2C%22price%22%3Anull%7D%2C%22quantity%22%3Anull%7D%5D%7D%2C%7B%22type%22%3A%22impDisplay%22%2C%22campaign%22%3A2902060350%2C%22engId%22%3A2902529850%2C%22revision%22%3A1740%2C%22eContext%22%3A%5B%7B%22type%22%3A%22engagementContext%22%2C%22id%22%3A%224%22%7D%5D%7D%5D HTTP/1.1 Host: lo.v.liveperson.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:03 UTC	5781	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:40:03 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: no-store Server: ws Access-Control-Allow-Methods: GET, POST, PATCH Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token Access-Control-Expose-Headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-06-06 08:40:03 UTC	5782	IN	Data Raw: 32 61 0d 0a 6c 70 43 62 36 31 34 34 38 78 37 30 35 30 39 28 7b 22 6d 65 73 73 61 67 65 73 54 6f 56 69 73 69 74 6f 72 22 3a 5b 5d 7d 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2alpCb61448x70509({"messagesToVisitor":[]});0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
175	192.168.2.4	50059	178.249.96.141	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:06 UTC	5782	OUT	GET /api/js/8181236?sid=Y0UXDFinQhG9AMSBGzKPtQ&cb=lpCb43567x3469&t=ip&ts=1686040835157&pid=114028263&tid=4972823587&vid=JkZDY4ZThjNmZkYmZiMTUx HTTP/1.1 Host: lo0.v.liveperson.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:06 UTC	5783	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:40:06 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: no-store Server: ws Access-Control-Allow-Methods: GET, POST, PATCH Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token Access-Control-Expose-Headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-06-06 08:40:06 UTC	5784	IN	Data Raw: 34 38 0d 0a 6c 70 43 62 34 33 35 36 37 78 33 34 36 39 28 7b 22 73 6d 74 43 6f 6e 66 22 3a 7b 22 6b 65 65 70 41 6c 69 76 65 46 72 65 71 22 3a 31 30 7d 2c 22 6d 65 73 73 61 67 65 73 54 6f 56 69 73 69 74 6f 72 22 3a 5b 5d 7d 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 48lpCb43567x3469({"smtConf":{"keepAliveFreq":10},"messagesToVisitor":[]});0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
176	192.168.2.4	50061	178.249.97.70	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:13 UTC	5784	OUT	GET /api/js/50632853?sid=N3roqYv8SBKOLDBc3Ezwkg&cb=lpCb26376x80676&t=ip&ts=1686040841875&pid=2265170856&tid=4578057391&vid=hjNzhmNDMzZWM2NWVjZGNh HTTP/1.1 Host: lo.v.liveperson.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:13 UTC	5784	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:40:13 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: no-store Server: ws Access-Control-Allow-Methods: GET, POST, PATCH Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token Access-Control-Expose-Headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-06-06 08:40:13 UTC	5785	IN	Data Raw: 34 39 0d 0a 6c 70 43 62 32 36 33 37 36 78 38 30 36 37 36 28 7b 22 73 6d 74 43 6f 6e 66 22 3a 7b 22 6b 65 65 70 41 6c 69 76 65 46 72 65 71 22 3a 31 30 7d 2c 22 6d 65 73 73 61 67 65 73 54 6f 56 69 73 69 74 6f 72 22 3a 5b 5d 7d 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 49lpCb26376x80676({"smtConf":{"keepAliveFreq":10},"messagesToVisitor":[]});0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
177	192.168.2.4	50062	178.249.97.70	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:14 UTC	5786	OUT	GET /api/js/50632853?sid=N3roqYv8SBKOLDBc3Ezwkg&cb=lpCb13567x64144&t=sp&ts=1686040842877&pid=2519410326&tid=4578057391&vid=hjNzhmNDMzZWM2NWVjZGNh&rvt=1686040799637&pt=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&u=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&sec=%5B%22uk%22%2C%22english%22%2C%22pws%22%2C%22business%20banking%22%2C%22Default%22%5D&df=0&os=0 HTTP/1.1 Host: lo.v.liveperson.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:14 UTC	5786	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:40:14 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: no-store Server: ws Access-Control-Allow-Methods: GET, POST, PATCH Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token Access-Control-Expose-Headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-06-06 08:40:14 UTC	5787	IN	Data Raw: 66 30 0d 0a 6c 70 43 62 31 33 35 36 37 78 36 34 31 34 34 28 7b 22 73 64 6b 43 6f 6e 66 22 3a 7b 22 6c 70 56 69 73 69 74 6f 72 49 64 22 3a 22 68 6a 4e 7a 68 6d 4e 44 4d 7a 5a 57 4d 32 4e 57 56 6a 5a 47 4e 68 22 2c 22 6c 70 53 65 73 73 69 6f 6e 49 64 22 3a 22 4e 33 72 6f 71 59 76 38 53 42 4b 4f 4c 44 42 63 33 45 7a 77 6b 67 22 2c 22 6c 70 4c 61 73 74 56 69 73 69 74 22 3a 22 31 36 38 36 30 34 30 38 31 34 32 30 32 22 2c 22 70 72 6f 74 6f 63 6f 6c 56 65 72 73 69 6f 6e 22 3a 22 38 2e 36 2e 33 2e 30 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 62 75 73 69 6e 65 73 73 2e 68 73 62 63 2e 75 6b 22 2c 22 65 78 70 69 72 61 74 69 6f 6e 22 3a 33 31 35 33 36 30 30 30 7d 2c 22 6d 65 73 73 61 67 65 73 54 6f 56 69 73 69 74 6f 72 22 3a 5b 5d 7d 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: f0lpCb13567x64144({"sdkConf":{"lpVisitorId":"hjNzhmNDMzZWM2NWVjZGNh","lpSessionId":"N3roqYv8SBKOLDBc3Ezwkg","lpLastVisit":"1686040814202","protocolVersion":"8.6.3.0","domain":"business.hsbc.uk","expiration":31536000},"messagesToVisitor":[]});0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
178	192.168.2.4	50063	178.249.97.70	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:14 UTC	5788	OUT	GET /api/js/50632853?sid=N3roqYv8SBKOLDBc3Ezwkg&cb=lpCb62579x73152&t=uc&ts=1686040842856&pid=2519410326&tid=4578057391&vid=hjNzhmNDMzZWM2NWVjZGNh&sdes=%5B%7B%22type%22%3A%22pagediv%22%2C%22divId%22%3A%22lpButtonDiv-need-help-panel%22%7D%5D HTTP/1.1 Host: lo.v.liveperson.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:14 UTC	5788	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:40:14 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: no-store Server: ws Access-Control-Allow-Methods: GET, POST, PATCH Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token Access-Control-Expose-Headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-06-06 08:40:14 UTC	5790	IN	Data Raw: 31 39 35 0d 0a 6c 70 43 62 36 32 35 37 39 78 37 33 31 35 32 28 7b 22 6d 65 73 73 61 67 65 73 54 6f 56 69 73 69 74 6f 72 22 3a 5b 7b 22 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 4c 45 5f 45 4e 47 41 47 45 52 22 2c 22 73 75 62 6a 65 63 74 22 3a 22 53 48 4f 57 22 2c 22 63 6f 6e 74 65 6e 74 22 3a 7b 22 63 6f 6e 74 65 78 74 73 22 3a 5b 7b 22 45 6e 67 61 67 65 6d 65 6e 74 43 6f 6e 74 65 78 74 22 3a 7b 22 69 64 22 3a 22 35 22 7d 7d 2c 7b 22 70 61 67 65 43 6f 6e 74 65 78 74 22 3a 7b 22 69 64 22 3a 22 32 35 31 39 34 31 30 33 32 36 22 7d 7d 5d 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 32 39 30 32 30 36 30 33 35 30 2c 22 65 6e 67 61 67 65 6d 65 6e 74 49 64 22 3a 32 39 30 32 35 32 39 38 35 30 2c 22 65 6e 67 61 67 65 6d 65 6e 74 52 65 76 69 73 69 6f 6e 22 3a 31 37 34 Data Ascii: 195lpCb62579x73152({"messagesToVisitor":[{"destination":"LE_ENGAGER","subject":"SHOW","content":{"contexts":[{"EngagementContext":{"id":"5"}},{"pageContext":{"id":"2519410326"}}],"campaignId":2902060350,"engagementId":2902529850,"engagementRevision":174

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
179	192.168.2.4	50064	178.249.97.70	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:14 UTC	5790	OUT	GET /api/js/50632853?sid=N3roqYv8SBKOLDBc3Ezwkg&cb=lpCb23987x13343&t=pl&ts=1686040842878&pid=2519410326&tid=4578057391&vid=hjNzhmNDMzZWM2NWVjZGNh HTTP/1.1 Host: lo.v.liveperson.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:14 UTC	5791	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:40:14 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: no-store Server: ws Access-Control-Allow-Methods: GET, POST, PATCH Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token Access-Control-Expose-Headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-06-06 08:40:14 UTC	5792	IN	Data Raw: 36 66 0d 0a 6c 70 43 62 32 33 39 38 37 78 31 33 33 34 33 28 7b 22 73 6d 74 43 6f 6e 66 22 3a 7b 22 6b 65 65 70 41 6c 69 76 65 46 72 65 71 22 3a 31 30 7d 2c 22 73 64 6b 43 6f 6e 66 22 3a 7b 22 74 68 69 72 64 50 61 72 74 79 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 2c 22 6d 65 73 73 61 67 65 73 54 6f 56 69 73 69 74 6f 72 22 3a 5b 5d 7d 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 6flpCb23987x13343({"smtConf":{"keepAliveFreq":10},"sdkConf":{"thirdPartyEnabled":false},"messagesToVisitor":[]});0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
18	192.168.2.4	49714	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:20 UTC	301	OUT	GET /front_end/front_end_files/masthead.css HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hs-login.online/front_end/front_end_files/ursula.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:20 UTC	313	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:20 GMT Content-Type: text/css Content-Length: 33114 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:43 GMT ETag: "815a-5fd6543295d55" Accept-Ranges: bytes Vary: Accept-Encoding
2023-06-06 08:38:20 UTC	313	IN	Data Raw: 23 6d 61 69 6e 54 6f 70 57 72 61 70 70 65 72 0a 7b 0a 09 77 69 64 74 68 3a 31 30 30 25 3b 0a 7d 0a 23 6d 61 69 6e 54 6f 70 55 74 69 6c 69 74 79 0a 7b 0a 09 77 69 64 74 68 3a 31 30 30 25 3b 0a 09 6d 69 6e 2d 77 69 64 74 68 3a 39 36 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 31 35 33 35 38 3b 0a 09 6d 69 6e 2d 68 65 69 67 68 74 3a 20 33 33 70 78 3b 0a 7d 0a 0a 23 67 65 6e 65 72 69 63 50 6f 70 75 70 57 69 6e 20 23 6d 61 69 6e 54 6f 70 55 74 69 6c 69 74 79 0a 7b 0a 09 6d 69 6e 2d 77 69 64 74 68 3a 36 32 35 70 78 3b 0a 7d 0a 62 6f 64 79 20 68 31 0a 7b 0a 09 6c 65 66 74 3a 2d 39 39 39 39 70 78 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 0a 7d 0a 23 6d 61 69 6e 54 6f 70 55 74 69 6c 69 74 79 52 6f 77 0a 7b 0a 09 Data Ascii: #mainTopWrapper{width:100%;}#mainTopUtility{width:100%;min-width:960px;background-color:#515358;min-height: 33px;}#genericPopupWin #mainTopUtility{min-width:625px;}body h1{left:-9999px;position:absolute;}#mainTopUtilityRow{
2023-06-06 08:38:20 UTC	329	IN	Data Raw: 73 3a 2f 2f 77 77 77 2e 73 65 63 75 72 69 74 79 2e 68 73 62 63 2e 63 6f 2e 75 6b 2f 67 73 70 2f 73 61 61 73 2f 43 6f 6d 70 6f 6e 65 6e 74 73 2f 64 65 66 61 75 6c 74 2f 72 65 73 6f 75 72 63 65 73 2f 73 63 72 69 70 74 2f 6c 69 62 72 61 72 69 65 73 2f 68 73 62 63 2f 77 69 64 67 65 74 2f 74 68 65 6d 65 73 2f 75 72 73 75 6c 61 2f 69 6d 61 67 65 73 2f 6d 61 73 74 68 65 61 64 2f 6e 7a 2e 67 69 66 22 29 3b 0a 7d 0a 2e 6e 61 76 20 6c 69 20 61 2e 6f 6d 2c 0a 23 6c 6f 63 61 6c 65 20 61 2e 64 72 6f 70 44 6f 77 6e 4c 69 6e 6b 20 73 70 61 6e 20 73 70 61 6e 2e 6f 6d 0a 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 65 63 75 72 69 74 79 2e 68 73 62 63 2e 63 6f 2e 75 6b 2f 67 73 70 2f 73 61 61 73 2f 43 6f Data Ascii: s://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/images/masthead/nz.gif");}.nav li a.om,#locale a.dropDownLink span span.om{background-image:url("https://www.security.hsbc.co.uk/gsp/saas/Co
2023-06-06 08:38:20 UTC	345	IN	Data Raw: 0a 7d 0a 23 6c 6f 67 6f 66 66 20 61 2e 72 65 64 42 74 6e 20 73 70 61 6e 2c 0a 23 6c 6f 67 6f 66 66 20 61 2e 77 68 69 74 65 42 74 6e 20 73 70 61 6e 2c 0a 23 6c 6f 67 6f 66 66 20 61 2e 67 72 65 79 42 74 6e 20 73 70 61 6e 0a 7b 0a 09 70 61 64 64 69 6e 67 3a 30 20 32 30 70 78 20 30 20 30 3b 0a 09 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 37 35 25 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 33 70 78 3b 0a 09 68 65 69 67 68 74 3a 31 33 70 78 3b 0a 7d 0a 23 6c 6f 67 6f 66 66 20 61 2e 67 72 65 79 42 74 6e 0a 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 65 63 75 72 69 74 79 2e 68 73 62 63 2e 63 6f 2e 75 6b 2f 67 73 70 2f 73 61 61 73 2f 43 6f 6d 70 6f 6e 65 Data Ascii: }#logoff a.redBtn span,#logoff a.whiteBtn span,#logoff a.greyBtn span{padding:0 20px 0 0;display:block;font-size:75%;line-height:13px;height:13px;}#logoff a.greyBtn{background-image:url("https://www.security.hsbc.co.uk/gsp/saas/Compone

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
180	192.168.2.4	50066	178.249.97.70	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:14 UTC	5792	OUT	GET /api/js/50632853?sid=N3roqYv8SBKOLDBc3Ezwkg&cb=lpCb71165x50359&t=uc&ts=1686040843514&pid=2519410326&tid=4578057391&vid=hjNzhmNDMzZWM2NWVjZGNh&sdes=%5B%7B%22type%22%3A%22impDisplay%22%2C%22campaign%22%3A2902060350%2C%22engId%22%3A2902529850%2C%22revision%22%3A1740%2C%22eContext%22%3A%5B%7B%22type%22%3A%22engagementContext%22%2C%22id%22%3A%225%22%7D%5D%7D%5D HTTP/1.1 Host: lo.v.liveperson.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:14 UTC	5793	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:40:14 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: no-store Server: ws Access-Control-Allow-Methods: GET, POST, PATCH Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token Access-Control-Expose-Headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-06-06 08:40:14 UTC	5794	IN	Data Raw: 32 61 0d 0a 6c 70 43 62 37 31 31 36 35 78 35 30 33 35 39 28 7b 22 6d 65 73 73 61 67 65 73 54 6f 56 69 73 69 74 6f 72 22 3a 5b 5d 7d 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2alpCb71165x50359({"messagesToVisitor":[]});0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
181	192.168.2.4	50067	178.249.96.141	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:17 UTC	5794	OUT	GET /api/js/8181236?sid=Y0UXDFinQhG9AMSBGzKPtQ&cb=lpCb57289x67427&t=ip&ts=1686040846085&pid=114028263&tid=4972823587&vid=JkZDY4ZThjNmZkYmZiMTUx&sdes=%5B%7B%22type%22%3A%22tabActive%22%2C%22input%22%3A4%7D%5D HTTP/1.1 Host: lo0.v.liveperson.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:17 UTC	5794	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:40:17 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: no-store Server: ws Access-Control-Allow-Methods: GET, POST, PATCH Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token Access-Control-Expose-Headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-06-06 08:40:17 UTC	5796	IN	Data Raw: 31 63 63 0d 0a 6c 70 43 62 35 37 32 38 39 78 36 37 34 32 37 28 7b 22 73 6d 74 43 6f 6e 66 22 3a 7b 22 6b 65 65 70 41 6c 69 76 65 46 72 65 71 22 3a 31 30 7d 2c 22 6d 65 73 73 61 67 65 73 54 6f 56 69 73 69 74 6f 72 22 3a 5b 7b 22 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 4c 45 5f 45 4e 47 41 47 45 52 22 2c 22 73 75 62 6a 65 63 74 22 3a 22 53 48 4f 57 22 2c 22 63 6f 6e 74 65 6e 74 22 3a 7b 22 63 6f 6e 74 65 78 74 73 22 3a 5b 7b 22 45 6e 67 61 67 65 6d 65 6e 74 43 6f 6e 74 65 78 74 22 3a 7b 22 69 64 22 3a 22 32 22 7d 7d 2c 7b 22 70 61 67 65 43 6f 6e 74 65 78 74 22 3a 7b 22 69 64 22 3a 22 31 31 34 30 32 38 32 36 33 22 7d 7d 5d 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 33 37 31 33 35 35 37 39 35 30 2c 22 65 6e 67 61 67 65 6d 65 6e 74 49 64 22 3a 34 33 39 31 31 Data Ascii: 1cclpCb57289x67427({"smtConf":{"keepAliveFreq":10},"messagesToVisitor":[{"destination":"LE_ENGAGER","subject":"SHOW","content":{"contexts":[{"EngagementContext":{"id":"2"}},{"pageContext":{"id":"114028263"}}],"campaignId":3713557950,"engagementId":43911

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
182	192.168.2.4	50070	178.249.96.141	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:17 UTC	5796	OUT	GET /api/js/8181236?sid=Y0UXDFinQhG9AMSBGzKPtQ&cb=lpCb21322x31553&t=uc&ts=1686040846653&pid=114028263&tid=4972823587&vid=JkZDY4ZThjNmZkYmZiMTUx&sdes=%5B%7B%22type%22%3A%22impDisplay%22%2C%22campaign%22%3A3713557950%2C%22engId%22%3A4391166150%2C%22revision%22%3A2132%2C%22eContext%22%3A%5B%7B%22type%22%3A%22engagementContext%22%2C%22id%22%3A%222%22%7D%5D%7D%5D HTTP/1.1 Host: lo0.v.liveperson.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:17 UTC	5797	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:40:17 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: no-store Server: ws Access-Control-Allow-Methods: GET, POST, PATCH Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token Access-Control-Expose-Headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-06-06 08:40:17 UTC	5798	IN	Data Raw: 32 61 0d 0a 6c 70 43 62 32 31 33 32 32 78 33 31 35 35 33 28 7b 22 6d 65 73 73 61 67 65 73 54 6f 56 69 73 69 74 6f 72 22 3a 5b 5d 7d 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2alpCb21322x31553({"messagesToVisitor":[]});0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
183	192.168.2.4	50075	18.66.192.44	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:19 UTC	5798	OUT	GET /utag/hsbc/uk-cmb/prod/utag.521.js?utv=ut4.42.202306021444 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:19 UTC	5903	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 4558 Connection: close Date: Tue, 06 Jun 2023 08:40:20 GMT Last-Modified: Fri, 02 Jun 2023 14:44:33 GMT ETag: "cf2bbe7c837ba65f0bcdcf11d4671db6" x-amz-server-side-encryption: AES256 x-amz-version-id: 0e408ddnEDtdu_V7qV.yElQYHPqEBEaD Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 0f14828b89630f6555c6372e13fc999a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P1 X-Amz-Cf-Id: lGh3fBg1C4wuxPZJxz5YcywUCruc-x992Bw6tgWmIQ8YjlUVWhC1wQ== Cache-Control: max-age=1296000
2023-06-06 08:40:19 UTC	5904	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 35 32 31 20 75 74 34 2e 30 2e 32 30 32 33 30 36 30 32 31 34 34 34 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 33 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 0a 69 66 28 75 74 61 67 2e 75 74 2e 6c 6f 61 64 65 72 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 2e 6c 6f 61 64 65 72 3d 66 75 6e 63 74 69 6f 6e Data Ascii: //tealium universal tag - utag.521 ut4.0.202306021444, Copyright 2023 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}if(utag.ut.loader===undefined){u.loader=function

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
184	192.168.2.4	50073	18.66.192.44	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:19 UTC	5799	OUT	GET /utag/hsbc/uk-cmb/prod/utag.552.js?utv=ut4.42.202306021444 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:19 UTC	5805	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2518 Connection: close Date: Tue, 06 Jun 2023 08:40:20 GMT Last-Modified: Fri, 02 Jun 2023 14:44:35 GMT ETag: "c1c5374802030067a66493914390c9a7" x-amz-server-side-encryption: AES256 x-amz-version-id: oH5yQufyDPS87sMwbHAZ58_mWlx6dZau Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 89efe3a7854e47cf7f1fe47e28e39348.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P1 X-Amz-Cf-Id: UvSXvyv-99NeuQcQ_7hRJGn9Ysq4OL9HL6MqnFOe9LfG15OkH5rzRA== Cache-Control: max-age=1296000
2023-06-06 08:40:19 UTC	5805	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 35 35 32 20 75 74 34 2e 30 2e 32 30 32 33 30 36 30 32 31 34 34 34 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 33 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 76 61 72 20 75 65 74 71 3d 75 65 74 71 7c 7c 5b 5d 3b 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 0a 69 66 28 75 74 61 67 2e 75 74 2e 6c 6f 61 64 65 72 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 Data Ascii: //tealium universal tag - utag.552 ut4.0.202306021444, Copyright 2023 Tealium.com Inc. All Rights Reserved.var uetq=uetq\|\|[];try{(function(id,loader){var u={};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}if(utag.ut.loader===undefined)

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
185	192.168.2.4	50071	52.49.176.241	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:19 UTC	5799	OUT	GET /id?d_visid_ver=5.2.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=8BB4398F57FF7F980A495E57%40AdobeOrg&d_nsid=0&ts=1686040847994 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.business.hsbc.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:19 UTC	5800	IN	HTTP/1.1 302 Found Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.business.hsbc.uk Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private DCS: dcs-prod-irl1-2-v048-032e056ca.edge-irl1.demdex.com 0 ms Expires: Thu, 01 Jan 1970 00:00:00 UTC Location: https://dpm.demdex.net/id/rd?d_visid_ver=5.2.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=8BB4398F57FF7F980A495E57%40AdobeOrg&d_nsid=0&ts=1686040847994 P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Pragma: no-cache set-cookie: demdex=32441017531906322422556814171626086572; Max-Age=15552000; Expires=Sun, 03 Dec 2023 08:40:19 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-TID: /odpNGdJQss= Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
186	192.168.2.4	50076	18.66.192.44	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:19 UTC	5801	OUT	GET /utag/hsbc/uk-cmb/prod/utag.571.js?utv=ut4.42.202306021444 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:19 UTC	5920	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 10553 Connection: close Date: Tue, 06 Jun 2023 08:40:20 GMT Last-Modified: Fri, 02 Jun 2023 14:44:30 GMT ETag: "eba2aa2d8532090b88764dc3a4c2df2e" x-amz-server-side-encryption: AES256 x-amz-version-id: D3v_29nLBY0.aEwTbmpShYfskmEZ0gqD Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 ec12d3de4ccd821a7e749609dcc62010.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P1 X-Amz-Cf-Id: iBDCZUws9ieP0432auTw7GrfaI-9kX_gO4VumrNqfCEWtl-NcnKaUQ== Cache-Control: max-age=1296000
2023-06-06 08:40:19 UTC	5920	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 35 37 31 20 75 74 34 2e 30 2e 32 30 32 33 30 36 30 32 31 34 34 34 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 33 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 0a 76 61 72 20 6d 61 74 63 68 3d 2f 75 74 5c 64 5c 2e 28 5c 64 2a 29 5c 2e 2e 2a 2f 2e 65 78 65 63 28 75 74 61 67 2e 63 66 67 Data Ascii: //tealium universal tag - utag.571 ut4.0.202306021444, Copyright 2023 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}var match=/ut\d\.(\d)\../.exec(utag.cfg

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
187	192.168.2.4	50078	108.138.37.209	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:19 UTC	5801	OUT	GET /aat/amzn.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:19 UTC	5808	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 6674 Connection: close Last-Modified: Thu, 11 Nov 2021 17:52:19 GMT x-amz-version-id: RCjAxJ8CrRqbtKQCS4KIrWhcLcYrBklc Accept-Ranges: bytes Server: AmazonS3 Date: Mon, 05 Jun 2023 09:55:08 GMT ETag: "4e42700e21a922978b72507ad18a7fea" X-Cache: Hit from cloudfront Via: 1.1 7f6fdb9a0ec439bac9ac6cc0db13237e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P2 X-Amz-Cf-Id: Y83TSfdSEJlTSmAz2QHbme3DBbMJFSBN66bISzqg6mafQ3Jy9Mw88w== Age: 81912
2023-06-06 08:40:19 UTC	5808	IN	Data Raw: 2f 2a 20 55 73 65 20 6f 66 20 74 68 69 73 20 70 69 78 65 6c 20 69 73 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 41 6d 61 7a 6f 6e 20 61 64 20 73 70 65 63 73 20 61 6e 64 20 70 6f 6c 69 63 69 65 73 20 61 74 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 6d 61 7a 6f 6e 2e 63 6f 6d 2f 62 2f 3f 26 6e 6f 64 65 3d 37 32 35 33 30 31 35 30 31 31 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 74 3d 22 61 6d 7a 6e 54 6f 6b 65 6e 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 74 68 69 73 2e 65 6e 64 70 6f 69 6e 74 73 3d 74 2c 74 68 69 73 2e 72 65 67 69 6f 6e 3d 22 4e 41 22 2c 74 68 69 73 2e 73 74 61 67 65 3d 22 50 52 4f 44 22 2c 74 68 69 73 2e 74 61 67 73 3d 7b 7d 2c 74 68 69 73 2e 74 63 66 76 32 3d 7b 7d 7d 65 Data Ascii: /* Use of this pixel is subject to the Amazon ad specs and policies at http://www.amazon.com/b/?&node=7253015011 */!function(){"use strict";const t="amznToken";function e(t){this.endpoints=t,this.region="NA",this.stage="PROD",this.tags={},this.tcfv2={}}e

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
188	192.168.2.4	50077	18.66.192.44	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:19 UTC	5802	OUT	GET /utag/hsbc/uk-cmb/prod/utag.722.js?utv=ut4.42.202306021444 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:19 UTC	5933	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3634 Connection: close Date: Tue, 06 Jun 2023 08:40:20 GMT Last-Modified: Fri, 02 Jun 2023 14:44:34 GMT ETag: "41634010403d2701e0b006adaa2fb620" x-amz-server-side-encryption: AES256 x-amz-version-id: N4mw9K5TRt34aR2_OafsA2jLLQ5BGya4 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 0f14828b89630f6555c6372e13fc999a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P1 X-Amz-Cf-Id: t0qdZqCWF_iTFhHI6XjvKL-scMQlobWJLYAGgb3kiP4bqwz-lfivtQ== Cache-Control: max-age=1296000
2023-06-06 08:40:19 UTC	5933	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 37 32 32 20 75 74 34 2e 30 2e 32 30 32 33 30 36 30 32 31 34 34 34 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 33 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 76 61 72 20 5f 6c 69 6e 6b 65 64 69 6e 3d 5f 6c 69 6e 6b 65 64 69 6e 7c 7c 7b 7d 3b 76 61 72 20 5f 6c 69 6e 6b 65 64 69 6e 5f 64 61 74 61 5f 70 61 72 74 6e 65 72 5f 69 64 3d 5f 6c 69 6e 6b 65 64 69 6e 5f 64 61 74 61 5f 70 61 72 74 6e 65 72 5f 69 64 7c 7c 22 22 3b 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e Data Ascii: //tealium universal tag - utag.722 ut4.0.202306021444, Copyright 2023 Tealium.com Inc. All Rights Reserved.var _linkedin=_linkedin\|\|{};var _linkedin_data_partner_id=_linkedin_data_partner_id\|\|"";try{(function(id,loader){var u={"id":id};utag.o[loader].sen

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
189	192.168.2.4	50072	18.66.192.44	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:19 UTC	5802	OUT	GET /utag/hsbc/uk-cmb/prod/utag.723.js?utv=ut4.42.202306021444 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:19 UTC	5931	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1623 Connection: close Date: Tue, 06 Jun 2023 08:40:20 GMT Last-Modified: Fri, 02 Jun 2023 14:44:31 GMT ETag: "eedba35f963461608042b8b2631fa10a" x-amz-server-side-encryption: AES256 x-amz-version-id: JOPn3RNP7mlCf0LAC4tyvVD63.UgDelL Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 29473aa9cc185f2a037ec3a7e2ffd74c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P1 X-Amz-Cf-Id: 7_uVve4ZMo2EZzGlkpiVDaAsYNTeD_wQnjnAt2wfxTOPSMMt-YaLdQ== Cache-Control: max-age=1296000
2023-06-06 08:40:19 UTC	5931	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 37 32 33 20 75 74 34 2e 30 2e 32 30 32 33 30 36 30 32 31 34 34 34 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 33 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 76 61 72 20 5f 65 6c 71 51 3d 5f 65 6c 71 51 7c 7c 5b 5d 3b 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 2c 75 29 7b 74 72 79 7b 75 3d 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 7b 7d 7d 63 61 74 63 68 28 65 29 7b 75 3d 75 74 61 67 2e 73 65 6e 64 65 72 5b 69 64 5d 7d 3b 75 2e 65 76 3d 7b 27 76 69 65 77 27 3a 31 7d 3b 75 2e 71 73 70 5f 64 65 6c 69 6d 3d 27 26 27 3b 75 2e 6b 76 70 Data Ascii: //tealium universal tag - utag.723 ut4.0.202306021444, Copyright 2023 Tealium.com Inc. All Rights Reserved.var _elqQ=_elqQ\|\|[];try{(function(id,loader,u){try{u=utag.o[loader].sender[id]={}}catch(e){u=utag.sender[id]};u.ev={'view':1};u.qsp_delim='&';u.kvp

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
19	192.168.2.4	49715	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:20 UTC	302	OUT	GET /front_end/front_end_files/memorableAnswer.css HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hs-login.online/front_end/front_end_files/ursula.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:20 UTC	307	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:20 GMT Content-Type: text/css Content-Length: 5313 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:44 GMT ETag: "14c1-5fd65433071d6" Accept-Ranges: bytes Vary: Accept-Encoding
2023-06-06 08:38:20 UTC	307	IN	Data Raw: 2e 75 72 73 75 6c 61 20 2e 6d 65 6d 6f 72 61 62 6c 65 41 6e 73 77 65 72 20 2e 68 65 61 64 69 6e 67 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 36 70 78 20 31 39 70 78 20 35 30 70 78 3b 0a 7d 0a 2e 75 72 73 75 6c 61 20 2e 6d 65 6d 6f 72 61 62 6c 65 41 6e 73 77 65 72 20 2e 68 65 61 64 69 6e 67 20 68 33 20 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 2e 34 65 6d 3b 0a 09 63 6f 6c 6f 72 3a 20 23 33 38 33 61 33 39 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 34 32 70 78 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 09 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 7d 0a 2e 75 72 73 75 6c 61 20 2e 6d 65 6d 6f 72 61 62 6c 65 41 6e 73 77 65 72 20 2e 68 65 61 64 69 6e 67 20 69 6d 67 20 7b 0a 09 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 09 6d Data Ascii: .ursula .memorableAnswer .heading { padding: 6px 19px 50px;}.ursula .memorableAnswer .heading h3 {font-size: 2.4em;color: #383a39;line-height: 42px;font-weight: normal;float: left;}.ursula .memorableAnswer .heading img {float: left;m

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
190	192.168.2.4	50074	18.66.192.44	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:19 UTC	5803	OUT	GET /utag/hsbc/uk-cmb/prod/utag.724.js?utv=ut4.42.202306021444 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:19 UTC	5817	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 13991 Connection: close Date: Tue, 06 Jun 2023 08:40:20 GMT Last-Modified: Fri, 02 Jun 2023 14:44:34 GMT ETag: "341bad8d3dddee78fb9995d07fa4701d" x-amz-server-side-encryption: AES256 x-amz-version-id: CDrzKOz8tz9GNl3zlx_dpzZM9p.MzfG9 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 8ebebe66cc8de626ee8e15b2ee72d826.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P1 X-Amz-Cf-Id: -p3aUbRaOXM0i-vQkaoCmrcqWvyxPB1Nj6bJ_13cohcgFEk3UKhOug== Cache-Control: max-age=1296000
2023-06-06 08:40:19 UTC	5818	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 37 32 34 20 75 74 34 2e 30 2e 32 30 32 33 30 36 30 32 31 34 34 34 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 33 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 69 66 28 74 79 70 65 6f 66 20 4a 53 4f 4e 21 3d 3d 27 6f 62 6a 65 63 74 27 29 7b 4a 53 4f 4e 3d 7b 7d 3b 7d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 72 78 5f 6f 6e 65 3d 2f 5e 5b 5c 5d 2c 3a 7b 7d 5c 73 5d 2a 24 2f 2c 72 78 5f 74 77 6f 3d 2f 5c 5c 28 3f 3a 5b 22 5c 5c 5c 2f 62 66 6e 72 74 5d 7c 75 5b 30 2d 39 61 2d 66 41 2d 46 5d 7b 34 7d 29 2f 67 2c 72 78 5f 74 68 72 65 65 3d 2f 22 5b 5e Data Ascii: //tealium universal tag - utag.724 ut4.0.202306021444, Copyright 2023 Tealium.com Inc. All Rights Reserved.if(typeof JSON!=='object'){JSON={};}(function(){'use strict';var rx_one=/^[\],:{}\s]*$/,rx_two=/\\(?:["\\\/bfnrt]\|u[0-9a-fA-F]{4})/g,rx_three=/"[^

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
191	192.168.2.4	50079	18.197.3.151	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:19 UTC	5804	OUT	POST /event HTTP/1.1 Host: collect.tealiumiq.com Connection: keep-alive Content-Length: 690 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.business.hsbc.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:19 UTC	5804	OUT	Data Raw: 7b 22 74 65 61 6c 69 75 6d 5f 61 63 63 6f 75 6e 74 22 3a 22 68 73 62 63 22 2c 22 74 65 61 6c 69 75 6d 5f 70 72 6f 66 69 6c 65 22 3a 22 75 6b 2d 63 6d 62 22 2c 22 70 6f 6c 69 63 79 22 3a 22 67 64 70 72 22 2c 22 74 65 61 6c 69 75 6d 5f 76 69 73 69 74 6f 72 5f 69 64 22 3a 22 30 31 38 38 38 66 64 63 61 61 31 66 30 30 35 31 31 66 38 31 36 31 38 62 62 38 32 38 30 30 30 36 66 30 30 32 32 30 36 37 30 30 39 31 38 22 2c 22 75 74 2e 70 72 6f 66 69 6c 65 22 3a 22 75 6b 2d 63 6d 62 22 2c 22 70 61 67 65 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 75 73 69 6e 65 73 73 2e 68 73 62 63 2e 75 6b 2f 65 6e 2d 67 62 22 2c 22 75 74 2e 64 6f 6d 61 69 6e 22 3a 22 77 77 77 2e 62 75 73 69 6e 65 73 73 2e 68 73 62 63 2e 75 6b 22 2c 22 74 65 61 6c 69 75 6d 5f 65 6e 76 Data Ascii: {"tealium_account":"hsbc","tealium_profile":"uk-cmb","policy":"gdpr","tealium_visitor_id":"01888fdcaa1f00511f81618bb8280006f002206700918","ut.profile":"uk-cmb","page_url":"https://www.business.hsbc.uk/en-gb","ut.domain":"www.business.hsbc.uk","tealium_env
2023-06-06 08:40:19 UTC	5816	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:40:19 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close X-acc: hsbc:uk-cmb:2:event X-Region: eu-central-1 Access-Control-Allow-Origin: https://www.business.hsbc.uk X-ServerID: uconnect_i-024f36b04e2378bed Pragma: no-cache P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR ADM DEV OUR BUS" Access-Control-Expose-Headers: X-Region Cache-Control: no-transform,private,no-cache,no-store,max-age=0,s-maxage=0 X-tid: 01888fdcaa1f00511f81618bb8280006f002206700918 Access-Control-Allow-Credentials: true X-ULVer: 018752aa776d74895d87a1c24d937d42b559f87e-SNAPSHOT Vary: Origin Expires: Tue, 06 Jun 2023 08:40:19 GMT X-UUID: 4caa7545-39a5-4c10-9bea-5eeb94dfe5a8
2023-06-06 08:40:19 UTC	5817	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
192	192.168.2.4	50081	52.49.176.241	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:19 UTC	5815	OUT	GET /id/rd?d_visid_ver=5.2.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=8BB4398F57FF7F980A495E57%40AdobeOrg&d_nsid=0&ts=1686040847994 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.business.hsbc.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: demdex=32441017531906322422556814171626086572
2023-06-06 08:40:19 UTC	5831	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.business.hsbc.uk Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Content-Type: application/json;charset=utf-8 DCS: dcs-prod-irl1-2-v048-03936df63.edge-irl1.demdex.com 2 ms Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Pragma: no-cache set-cookie: demdex=32441017531906322422556814171626086572; Max-Age=15552000; Expires=Sun, 03 Dec 2023 08:40:19 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin X-TID: 5dY0ieUeRVM= Content-Length: 370 Connection: Close
2023-06-06 08:40:19 UTC	5832	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 33 32 39 30 31 33 34 35 33 35 37 38 39 37 33 31 39 33 32 32 35 38 32 32 38 30 33 33 31 33 31 37 39 30 36 33 37 30 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 52 4b 68 70 52 7a 38 6b 72 67 32 74 4c 4f 36 70 67 75 58 57 70 35 6f 6c 6b 41 63 55 6e 69 51 59 50 48 61 4d 57 57 67 64 4a 33 78 7a 50 57 51 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 36 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"32901345357897319322582280331317906370","id_sync_ttl":604800,"d_blob":"RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y","dcs_region":6,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
193	192.168.2.4	50082	18.66.192.44	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:19 UTC	5816	OUT	GET /utag/hsbc/uk-cmb/prod/utag.951.js?utv=ut4.42.202306021444 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:19 UTC	5833	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 70332 Connection: close Date: Tue, 06 Jun 2023 08:40:20 GMT Last-Modified: Fri, 02 Jun 2023 14:44:31 GMT ETag: "c0dc8b9b898d9e2a8ad291f117e7c575" x-amz-server-side-encryption: AES256 x-amz-version-id: Mx7Mw7.f99yJrRj_AIR0sgkUWfoUr6fS Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 c414bd1a4ce7ace94cbfdfa8efcbe5a6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P1 X-Amz-Cf-Id: hg5yDlJAibPeeFQMVQ5JH-RW1R0c4Bre5V9z1g2p6qKGQTCJRpckKw== Cache-Control: max-age=1296000
2023-06-06 08:40:19 UTC	5834	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 39 35 31 20 75 74 34 2e 30 2e 32 30 32 33 30 36 30 32 31 34 34 34 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 33 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 76 61 72 20 73 3d 73 5f 67 69 28 22 68 73 62 63 2d 63 6d 62 2d 75 6b 2c 68 73 62 63 2d 63 6d 62 2d 72 6f 6c 6c 75 70 22 29 0a 73 2e 61 63 63 6f 75 6e 74 3d 22 68 73 62 63 2d 63 6d 62 2d 75 6b 2c 68 73 62 63 2d 63 6d 62 2d 72 6f 6c 6c 75 70 22 3b 73 2e 74 72 61 63 6b 44 6f 77 6e 6c 6f 61 64 4c 69 6e 6b 73 3d 74 72 75 65 3b 73 2e 74 72 61 63 6b 45 78 74 65 72 6e 61 6c 4c 69 6e 6b 73 3d 74 72 75 65 3b 73 2e 74 72 61 63 6b 49 6e 6c 69 6e 65 Data Ascii: //tealium universal tag - utag.951 ut4.0.202306021444, Copyright 2023 Tealium.com Inc. All Rights Reserved.var s=s_gi("hsbc-cmb-uk,hsbc-cmb-rollup")s.account="hsbc-cmb-uk,hsbc-cmb-rollup";s.trackDownloadLinks=true;s.trackExternalLinks=true;s.trackInline
2023-06-06 08:40:19 UTC	5849	IN	Data Raw: 2c 65 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 66 3d 30 2c 22 68 74 74 70 3a 2f 2f 22 3d 3d 65 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 37 29 3f 66 2b 3d 37 3a 22 68 74 74 70 73 3a 2f 2f 22 3d 3d 65 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 38 29 26 26 28 66 2b 3d 38 29 2c 64 3d 65 2e 69 6e 64 65 78 4f 66 28 22 2f 22 2c 66 29 2c 30 3c 64 26 26 28 65 3d 65 2e 73 75 62 73 74 72 69 6e 67 28 66 2c 64 29 2c 67 3d 62 2e 73 75 62 73 74 72 69 6e 67 28 64 29 2c 62 3d 62 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 64 29 2c 30 3c 3d 65 2e 69 6e 64 65 78 4f 66 28 22 67 6f 6f 67 6c 65 22 29 3f 6b 3d 22 2c 71 2c 69 65 2c 73 74 61 72 74 2c 73 65 61 72 63 68 5f 6b 65 79 2c 77 6f 72 64 2c 6b 77 2c 63 64 2c 22 3a 30 3c 3d 65 2e 69 6e 64 65 78 4f 66 28 22 79 61 68 6f 6f 2e Data Ascii: ,e=b.toLowerCase(),f=0,"http://"==e.substring(0,7)?f+=7:"https://"==e.substring(0,8)&&(f+=8),d=e.indexOf("/",f),0<d&&(e=e.substring(f,d),g=b.substring(d),b=b.substring(0,d),0<=e.indexOf("google")?k=",q,ie,start,search_key,word,kw,cd,":0<=e.indexOf("yahoo.
2023-06-06 08:40:19 UTC	5859	IN	Data Raw: 73 65 6e 64 28 66 29 3b 65 6c 73 65 20 69 66 28 62 2e 73 72 63 3d 63 2c 33 3d 3d 3d 64 29 7b 69 66 28 61 2e 53 61 29 74 72 79 7b 66 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 61 2e 53 61 29 7d 63 61 74 63 68 28 65 29 7b 7d 66 2e 66 69 72 73 74 43 68 69 6c 64 3f 66 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 62 2c 66 2e 66 69 72 73 74 43 68 69 6c 64 29 3a 66 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 3b 61 2e 53 61 3d 61 2e 76 7d 62 2e 44 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 44 26 26 28 62 2e 63 6f 6d 70 6c 65 74 65 3f 62 2e 52 28 29 3a 28 61 2e 74 72 61 63 6b 4f 66 66 6c 69 6e 65 26 26 62 2e 61 62 6f 72 74 26 26 62 2e 61 62 6f 72 74 28 29 2c 62 2e 68 61 28 29 29 29 7d 2c 35 45 33 29 3b 61 2e 49 62 3d 63 3b 61 2e 76 3d 68 Data Ascii: send(f);else if(b.src=c,3===d){if(a.Sa)try{f.removeChild(a.Sa)}catch(e){}f.firstChild?f.insertBefore(b,f.firstChild):f.appendChild(b);a.Sa=a.v}b.D=setTimeout(function(){b.D&&(b.complete?b.R():(a.trackOffline&&b.abort&&b.abort(),b.ha()))},5E3);a.Ib=c;a.v=h
2023-06-06 08:40:19 UTC	5872	IN	Data Raw: 22 66 69 72 73 74 5f 70 72 6f 64 75 63 74 22 3a 22 65 56 61 72 35 37 22 2c 22 70 72 6f 64 75 63 74 5f 6f 66 66 65 72 65 64 22 3a 22 65 56 61 72 35 38 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 5f 64 65 63 69 73 69 6f 6e 22 3a 22 65 56 61 72 35 39 22 2c 22 73 74 61 72 74 5f 61 6d 6f 75 6e 74 22 3a 22 56 41 4c 55 45 5f 65 76 65 6e 74 36 38 22 2c 22 61 6d 6f 75 6e 74 22 3a 22 56 41 4c 55 45 5f 65 76 65 6e 74 36 35 22 2c 22 74 65 72 6d 22 3a 22 56 41 4c 55 45 5f 65 76 65 6e 74 36 36 22 2c 22 69 6e 74 65 72 65 73 74 5f 72 61 74 65 22 3a 22 56 41 4c 55 45 5f 65 76 65 6e 74 36 37 22 2c 22 71 70 2e 65 69 64 22 3a 22 65 56 61 72 32 36 22 2c 22 73 69 74 65 5f 73 65 63 74 69 6f 6e 22 3a 22 63 68 61 6e 6e 65 6c 22 2c 22 64 6f 77 6e 73 65 6c 6c 5f 65 76 65 6e 74 3a 6f Data Ascii: "first_product":"eVar57","product_offered":"eVar58","application_decision":"eVar59","start_amount":"VALUE_event68","amount":"VALUE_event65","term":"VALUE_event66","interest_rate":"VALUE_event67","qp.eid":"eVar26","site_section":"channel","downsell_event:o
2023-06-06 08:40:19 UTC	5883	IN	Data Raw: 6d 65 28 74 2e 67 65 74 54 69 6d 65 28 29 2b 31 38 30 30 30 30 30 29 3b 69 66 28 65 6c 29 7b 69 66 28 73 2e 65 76 65 6e 74 73 29 7b 69 3d 73 2e 73 70 6c 69 74 28 65 6c 2c 27 2c 27 29 3b 6a 3d 73 2e 73 70 6c 69 74 28 73 2e 65 76 65 6e 74 73 2c 27 2c 27 29 3b 66 6f 72 28 78 20 69 6e 20 69 29 7b 66 6f 72 28 79 20 69 6e 20 6a 29 7b 69 66 28 69 5b 78 5d 3d 3d 6a 5b 79 5d 29 7b 69 66 28 73 2e 63 5f 72 28 63 29 29 20 72 3d 73 2e 63 5f 72 28 63 29 3b 76 3f 73 2e 63 5f 77 28 63 2c 76 2c 74 29 3a 73 2e 63 5f 77 28 63 2c 27 6e 6f 20 76 61 6c 75 65 27 2c 74 29 3b 72 65 74 75 72 6e 20 72 7d 7d 7d 7d 7d 65 6c 73 65 7b 69 66 28 73 2e 63 5f 72 28 63 29 29 20 72 3d 73 2e 63 5f 72 28 63 29 3b 76 3f 73 2e 63 5f 77 28 63 2c 76 2c 74 29 3a 73 2e 63 5f 77 28 63 2c 27 6e 6f 20 Data Ascii: me(t.getTime()+1800000);if(el){if(s.events){i=s.split(el,',');j=s.split(s.events,',');for(x in i){for(y in j){if(i[x]==j[y]){if(s.c_r(c)) r=s.c_r(c);v?s.c_w(c,v,t):s.c_w(c,'no value',t);return r}}}}}else{if(s.c_r(c)) r=s.c_r(c);v?s.c_w(c,v,t):s.c_w(c,'no
2023-06-06 08:40:19 UTC	5896	IN	Data Raw: 61 74 61 2e 69 64 3d 75 2e 64 61 74 61 2e 69 64 7c 7c 28 74 79 70 65 6f 66 20 62 2e 5f 63 70 72 6f 64 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 62 2e 5f 63 70 72 6f 64 2e 73 6c 69 63 65 28 30 29 3a 5b 5d 29 3b 75 2e 64 61 74 61 2e 63 61 74 65 67 6f 72 79 3d 75 2e 64 61 74 61 2e 63 61 74 65 67 6f 72 79 7c 7c 28 74 79 70 65 6f 66 20 62 2e 5f 63 63 61 74 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 62 2e 5f 63 63 61 74 2e 73 6c 69 63 65 28 30 29 3a 5b 5d 29 3b 75 2e 64 61 74 61 2e 71 75 61 6e 74 69 74 79 3d 75 2e 64 61 74 61 2e 71 75 61 6e 74 69 74 79 7c 7c 28 74 79 70 65 6f 66 20 62 2e 5f 63 71 75 61 6e 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 62 2e 5f 63 71 75 61 6e 2e 73 6c 69 63 65 28 30 29 3a 5b 5d 29 3b 75 2e 64 61 74 61 2e 70 72 69 63 65 3d 75 2e 64 61 Data Ascii: ata.id=u.data.id\|\|(typeof b._cprod!="undefined"?b._cprod.slice(0):[]);u.data.category=u.data.category\|\|(typeof b._ccat!="undefined"?b._ccat.slice(0):[]);u.data.quantity=u.data.quantity\|\|(typeof b._cquan!="undefined"?b._cquan.slice(0):[]);u.data.price=u.da
2023-06-06 08:40:19 UTC	5902	IN	Data Raw: 50 54 43 61 6c 6c 62 61 63 6b 3d 3d 3d 74 72 75 65 7c 7c 75 2e 64 61 74 61 2e 63 6c 65 61 72 56 61 72 73 5f 69 6e 5f 52 50 54 43 61 6c 6c 62 61 63 6b 3d 3d 3d 22 74 72 75 65 22 29 7b 75 2e 6f 2e 72 65 67 69 73 74 65 72 50 6f 73 74 54 72 61 63 6b 43 61 6c 6c 62 61 63 6b 28 75 2e 6f 2e 63 6c 65 61 72 56 61 72 73 29 3b 7d 65 6c 73 65 7b 75 2e 6f 2e 63 6c 65 61 72 56 61 72 73 28 29 3b 7d 7d 7d 0a 75 74 61 67 2e 44 42 28 22 73 65 6e 64 3a 39 35 31 3a 43 4f 4d 50 4c 45 54 45 22 29 3b 7d 29 3b 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 73 54 72 75 65 28 69 6e 70 75 74 29 7b 69 66 28 74 79 70 65 6f 66 20 69 6e 70 75 74 3d 3d 3d 22 62 6f 6f 6c 65 61 6e 22 29 7b 72 65 74 75 72 6e 20 69 6e 70 75 74 3b 7d 65 6c 73 65 20 69 66 28 74 79 70 65 6f 66 20 69 6e 70 75 74 3d 3d Data Ascii: PTCallback===true\|\|u.data.clearVars_in_RPTCallback==="true"){u.o.registerPostTrackCallback(u.o.clearVars);}else{u.o.clearVars();}}}utag.DB("send:951:COMPLETE");});}};function isTrue(input){if(typeof input==="boolean"){return input;}else if(typeof input==

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
194	192.168.2.4	50085	18.66.192.44	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:19 UTC	5832	OUT	GET /utag/hsbc/uk-cmb/prod/utag.1026.js?utv=ut4.42.202306021444 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:20 UTC	5960	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 5456 Connection: close Date: Tue, 06 Jun 2023 08:40:21 GMT Last-Modified: Fri, 02 Jun 2023 14:44:33 GMT ETag: "452d4394d9dcc26a6755ae432d4a5a3c" x-amz-server-side-encryption: AES256 x-amz-version-id: kZO3y_kU.enUHzBx0N7LU_SJOZWAPa1r Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 badff53d2116a4b3d32a2dd1eb918a48.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P1 X-Amz-Cf-Id: fEjLk2kEtAe1BmdRPdQa2hmym21KOz6HmhhpJ4levCBJ1HogprsdCQ== Cache-Control: max-age=1296000
2023-06-06 08:40:20 UTC	5960	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 30 32 36 20 75 74 34 2e 30 2e 32 30 32 33 30 36 30 32 31 34 34 34 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 33 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 0a 76 61 72 20 6d 61 74 63 68 3d 2f 75 74 5c 64 5c 2e 28 5c 64 2a 29 5c 2e 2e 2a 2f 2e 65 78 65 63 28 75 74 61 67 2e 63 66 Data Ascii: //tealium universal tag - utag.1026 ut4.0.202306021444, Copyright 2023 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}var match=/ut\d\.(\d)\../.exec(utag.cf

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
195	192.168.2.4	50084	52.95.122.74	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:19 UTC	5902	OUT	GET /s/iu3?pid=bdcdb716-c805-45ff-a670-17eb30f8fca9&event=Pageview&ts=1686040848401 HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:19 UTC	5908	IN	HTTP/1.1 302 Found Server: Server Date: Tue, 06 Jun 2023 08:40:19 GMT Content-Length: 0 Connection: close x-amz-rid: XJKGKHTKPBAWDE0PNZ7V Set-Cookie: ad-id=A89flO4ujEfNt2WVGlm5Omo\|t; Domain=.amazon-adsystem.com; Expires=Mon, 01-Jan-2024 08:40:19 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://aax-eu.amazon-adsystem.com/s/iu3?pid=bdcdb716-c805-45ff-a670-17eb30f8fca9&event=Pageview&ts=1686040848401&dcc=t Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
196	192.168.2.4	50087	18.66.192.44	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:19 UTC	5909	OUT	GET /utag/hsbc/uk-cmb/prod/utag.1055.js?utv=ut4.42.202306021444 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:20 UTC	5946	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 5118 Connection: close Date: Tue, 06 Jun 2023 08:40:20 GMT Last-Modified: Fri, 02 Jun 2023 14:44:32 GMT ETag: "7232e30be5cf3b280b0a46d83b862bfa" x-amz-server-side-encryption: AES256 x-amz-version-id: F7djYmPWFCBJpHq1nbhnGz0nem6hVl90 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 77aa8087323921dee0b130bc0589bda8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P1 X-Amz-Cf-Id: awrbAGJqndx-vA7Ku8gSPfl0zX_u84rTahPcyrMB8vQvfGClZGv77g== Cache-Control: max-age=1296000
2023-06-06 08:40:20 UTC	5946	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 30 35 35 20 75 74 34 2e 30 2e 32 30 32 33 30 36 30 32 31 34 34 34 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 33 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 75 2e 71 73 70 5f 64 65 6c 69 6d 3d 22 26 22 3b 69 66 28 75 74 61 67 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 3d 7b 7d 3b 7d 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 69 66 Data Ascii: //tealium universal tag - utag.1055 ut4.0.202306021444, Copyright 2023 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={};utag.o[loader].sender[id]=u;u.qsp_delim="&";if(utag===undefined){utag={};}if(utag.ut===undefined){utag.ut={};}if

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
197	192.168.2.4	50088	18.66.192.44	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:19 UTC	5909	OUT	GET /utag/hsbc/uk-cmb/prod/utag.1064.js?utv=ut4.42.202306021444 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:19 UTC	5937	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 6384 Connection: close Date: Tue, 06 Jun 2023 08:40:20 GMT Last-Modified: Fri, 02 Jun 2023 14:44:34 GMT ETag: "bf6617527361ac10c75c205dd0ac80fd" x-amz-server-side-encryption: AES256 x-amz-version-id: RJ0iSb5qCO6gJ4Qxp2UH0.oDgWtBYF7N Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 89efe3a7854e47cf7f1fe47e28e39348.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P1 X-Amz-Cf-Id: QZ5vUqoOUn-9FAHxFOVhiL-U0CIaJoBPDJGwqbfaCUUuniruz6QGiQ== Cache-Control: max-age=1296000
2023-06-06 08:40:19 UTC	5938	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 30 36 34 20 75 74 34 2e 30 2e 32 30 32 33 30 36 30 32 31 34 34 34 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 33 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 74 72 79 7b 66 75 6e 63 74 69 6f 6e 20 67 65 74 47 54 41 47 65 76 65 6e 74 73 28 29 7b 76 61 72 20 65 76 65 6e 74 4e 61 6d 65 2c 67 74 61 67 65 76 65 6e 74 73 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 70 72 6f 70 20 69 6e 20 75 74 61 67 Data Ascii: //tealium universal tag - utag.1064 ut4.0.202306021444, Copyright 2023 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;try{function getGTAGevents(){var eventName,gtagevents={};for(var prop in utag

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
198	192.168.2.4	50091	63.140.62.160	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:19 UTC	5910	OUT	GET /id?d_visid_ver=5.2.0&d_fieldgroup=A&mcorgid=8BB4398F57FF7F980A495E57%40AdobeOrg&mid=32901345357897319322582280331317906370&ts=1686040848577 HTTP/1.1 Host: hsbcglobalcmb.sc.omtrdc.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.business.hsbc.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:19 UTC	5937	IN	HTTP/1.1 200 OK access-control-allow-origin: https://www.business.hsbc.uk access-control-allow-credentials: true date: Tue, 06 Jun 2023 08:40:19 GMT p3p: CP="This is not a P3P policy" server: jag vary: Origin content-type: application/x-javascript;charset=utf-8 content-length: 2 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2023-06-06 08:40:19 UTC	5937	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
199	192.168.2.4	50086	34.251.146.217	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:19 UTC	5911	OUT	POST /hsbc/uk-cmb/2/i.gif HTTP/1.1 Host: collect-eu-west-1.tealiumiq.com Connection: keep-alive Content-Length: 8335 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryd8qqtdO9aQUi86hW Accept: / Origin: https://www.business.hsbc.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:19 UTC	5911	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 64 38 71 71 74 64 4f 39 61 51 55 69 38 36 68 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 64 61 74 61 22 0d 0a 0d 0a 7b 22 6c 6f 61 64 65 72 2e 63 66 67 22 3a 7b 22 34 31 22 3a 7b 22 6c 6f 61 64 22 3a 31 2c 22 74 63 61 74 22 3a 32 2c 22 73 65 6e 64 22 3a 31 2c 22 76 22 3a 32 30 32 33 30 36 30 32 31 34 34 33 2c 22 77 61 69 74 22 3a 31 2c 22 74 69 64 22 3a 31 32 30 33 34 2c 22 65 78 65 63 75 74 65 64 22 3a 31 7d 2c 22 38 35 22 3a 7b 22 6c 6f 61 64 22 3a 30 2c 22 74 63 61 74 22 3a 32 2c 22 73 65 6e 64 22 3a 31 2c 22 76 22 3a 32 30 32 31 30 35 30 36 32 30 31 32 2c 22 77 61 69 74 22 3a 31 2c 22 74 69 64 22 3a 34 Data Ascii: ------WebKitFormBoundaryd8qqtdO9aQUi86hWContent-Disposition: form-data; name="data"{"loader.cfg":{"41":{"load":1,"tcat":2,"send":1,"v":202306021443,"wait":1,"tid":12034,"executed":1},"85":{"load":0,"tcat":2,"send":1,"v":202105062012,"wait":1,"tid":4
2023-06-06 08:40:20 UTC	5951	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:40:20 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-acc: hsbc:uk-cmb:2:datacloud X-did: 01888fdcaa1f00511f81618bb8280006f002206700918 X-Region: eu-west-1 Access-Control-Allow-Origin: https://www.business.hsbc.uk X-ServerID: uconnect_i-03261ba37610cdfb9 Pragma: no-cache P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR ADM DEV OUR BUS" Access-Control-Expose-Headers: X-Region Cache-Control: no-transform,private,no-cache,no-store,max-age=0,s-maxage=0 X-tid: 01888fdcaa1f00511f81618bb8280006f002206700918 Access-Control-Allow-Credentials: true X-ULVer: 018752aa776d74895d87a1c24d937d42b559f87e-SNAPSHOT Vary: Origin Expires: Tue, 06 Jun 2023 08:40:20 GMT X-UUID: 746b8ae6-ab88-4976-b9ee-24c24880ca94 Set-Cookie: TAPID=hsbc/uk-cmb>01888fdcaa1f00511f81618bb8280006f002206700918\|; Path=/; Domain=.tealiumiq.com; Expires=Wed, 05-Jun-2024 08:40:20 GMT; Max-Age=31536000; Secure; HttpOnly; SameSite=None
2023-06-06 08:40:20 UTC	5952	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.4	49696	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:19 UTC	4	OUT	GET /pages HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:38:19 UTC	4	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding
2023-06-06 08:38:19 UTC	5	IN	Data Raw: 31 65 61 65 0d 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 20 73 61 76 65 64 20 66 72 6f 6d 20 75 72 6c 3d 28 30 30 36 37 29 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 65 63 75 72 69 74 79 2e 68 73 62 63 2e 63 6f 2e 75 6b 2f 67 73 61 3f 69 64 76 5f 63 6d 64 3d 69 64 76 2e 53 61 61 53 53 65 63 75 72 69 74 79 43 6f 6d 6d 61 6e 64 20 2d 2d 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 63 6c 61 73 73 3d 22 64 6a 5f 77 65 62 6b 69 74 20 64 6a 5f 63 68 72 6f 6d 65 20 64 6a 5f 63 6f 6e 74 65 6e 74 62 6f 78 22 3e 0a 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 Data Ascii: 1eae<!DOCTYPE html>... saved from url=(0067)https://www.security.hsbc.co.uk/gsa?idv_cmd=idv.SaaSSecurityCommand --><html lang="en" xml:lang="en" xmlns="http://www.w3.org/1999/xhtml" class="dj_webkit dj_chrome dj_contentbox"> <head> <meta ht
2023-06-06 08:38:19 UTC	20	IN	Data Raw: 31 4c 6a 55 30 4e 54 59 34 4d 7a 49 73 4d 54 41 75 4e 54 41 79 4f 54 63 33 4f 53 41 78 4e 53 34 0d 0a 32 30 30 30 0d 0a 34 4d 6a 45 34 4d 6a 55 32 4c 44 45 77 4c 6a 55 77 4d 6a 6b 33 4e 7a 6b 67 51 7a 45 32 4c 6a 41 32 4e 7a 49 34 4e 54 51 73 4d 54 41 75 4e 54 41 79 4f 54 63 33 4f 53 41 78 4e 69 34 79 4e 7a 45 30 4d 7a 4d 35 4c 44 45 77 4c 6a 59 33 4f 54 67 31 4d 7a 45 67 4d 54 59 75 4d 7a 45 7a 4e 7a 59 35 4f 53 77 78 4d 43 34 35 4d 54 4d 78 4d 44 49 7a 49 45 77 78 4e 69 34 7a 4d 6a 45 34 4d 6a 55 32 4c 44 45 78 4c 6a 41 77 4d 6a 6b 33 4e 7a 6b 67 54 44 45 32 4c 6a 4d 79 4d 54 67 79 4e 54 59 73 4d 54 51 75 4d 6a 45 78 4f 54 67 30 4e 53 42 44 4d 54 59 75 4d 7a 49 78 4f 44 49 31 4e 69 77 78 4e 79 34 79 4e 44 6b 31 4e 54 41 32 49 44 45 7a 4c 6a 67 31 4f 54 Data Ascii: 1LjU0NTY4MzIsMTAuNTAyOTc3OSAxNS420004MjE4MjU2LDEwLjUwMjk3NzkgQzE2LjA2NzI4NTQsMTAuNTAyOTc3OSAxNi4yNzE0MzM5LDEwLjY3OTg1MzEgMTYuMzEzNzY5OSwxMC45MTMxMDIzIEwxNi4zMjE4MjU2LDExLjAwMjk3NzkgTDE2LjMyMTgyNTYsMTQuMjExOTg0NSBDMTYuMzIxODI1NiwxNy4yNDk1NTA2IDEzLjg1OT
2023-06-06 08:38:19 UTC	36	IN	Data Raw: 2c 26 23 33 39 3b 57 54 2e 74 69 26 23 33 39 3b 2c 26 23 33 39 3b 44 6f 6f 72 6d 61 74 3a 53 61 76 69 6e 67 73 41 63 63 6f 75 6e 74 73 3a 56 69 0d 0a 31 30 30 30 0d 0a 65 77 41 6c 6c 3a 54 61 62 26 23 33 39 3b 2c 26 23 33 39 3b 57 54 2e 70 6e 5f 73 6b 75 26 23 33 39 3b 2c 26 23 33 39 3b 26 23 33 39 3b 2c 26 23 33 39 3b 57 54 2e 74 78 5f 75 26 23 33 39 3b 2c 26 23 33 39 3b 26 23 33 39 3b 2c 26 23 33 39 3b 57 54 2e 74 78 5f 65 26 23 33 39 3b 2c 26 23 33 39 3b 26 23 33 39 3b 2c 26 23 33 39 3b 48 53 42 43 5f 75 26 23 33 39 3b 2c 26 23 33 39 3b 26 23 33 39 3b 2c 26 23 33 39 3b 48 53 42 43 5f 65 26 23 33 39 3b 2c 26 23 33 39 3b 26 23 33 39 3b 2c 26 23 33 39 3b 57 54 2e 73 69 5f 6e 26 23 33 39 3b 2c 26 23 33 39 3b 26 23 33 39 3b 2c 26 23 33 39 3b 57 54 2e 73 69 Data Ascii: ,'WT.ti','Doormat:SavingsAccounts:Vi1000ewAll:Tab','WT.pn_sku','','WT.tx_u','','WT.tx_e','','HSBC_u','','HSBC_e','','WT.si_n','','WT.si
2023-06-06 08:38:19 UTC	52	IN	Data Raw: 72 72 6f 77 69 6e 67 3a 43 72 65 64 69 74 43 61 72 64 73 3a 54 61 62 26 23 33 39 3b 2c 26 23 33 39 3b 57 54 2e 70 6e 5f 73 6b 75 26 23 33 39 3b 2c 26 23 33 39 3b 26 23 33 39 3b 2c 26 23 33 39 3b 57 54 2e 74 78 5f 75 26 23 33 39 3b 2c 26 23 33 39 3b 26 23 33 39 3b 2c 26 23 33 39 3b 57 54 2e 74 78 5f 65 26 23 33 39 3b 2c 26 23 33 39 3b 26 23 33 39 3b 2c 26 23 33 39 3b 48 53 42 43 5f 75 26 23 33 39 3b 2c 26 23 33 39 3b 26 23 33 39 3b 2c 26 23 33 39 3b 48 53 42 43 5f 65 26 23 33 39 3b 2c 26 23 33 39 3b 26 23 33 39 3b 2c 26 23 33 39 3b 57 54 2e 73 69 5f 6e 26 23 33 39 3b 2c 26 23 33 39 3b 26 23 33 39 3b 2c 26 23 33 39 3b 57 54 2e 73 69 5f 78 26 23 33 39 3b 2c 26 23 33 39 3b 26 23 33 39 3b 29 3b 22 3e 43 72 65 64 69 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: rrowing:CreditCards:Tab','WT.pn_sku','','WT.tx_u','','WT.tx_e','','HSBC_u','','HSBC_e','','WT.si_n','','WT.si_x','');">Credit
2023-06-06 08:38:19 UTC	68	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 75 6c 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 63 74 61 4c 69 6e 6b 22 3e 3c 61 20 68 72 65 66 3d 22 23 22 20 74 69 74 6c 65 3d 22 56 69 65 77 20 61 6c 6c 20 69 6e 76 65 73 74 6d 65 6e 74 73 22 20 63 6c 61 73 73 3d 22 65 78 74 4c 69 6e 6b 22 20 6f 6e 63 6c 69 63 6b 3d 22 64 63 73 4d 75 6c 74 69 54 72 61 63 6b 28 26 23 33 39 3b 44 43 53 2e 64 63 73 75 72 69 26 23 33 39 3b 2c 26 23 33 39 3b 2f 44 6f 6f 72 6d 61 74 2f 48 6f 6d 65 70 61 67 65 2f 49 Data Ascii: </li> </ul> <p class="ctaLink"><a href="#" title="View all investments" class="extLink" onclick="dcsMultiTrack('DCS.dcsuri','/Doormat/Homepage/I
2023-06-06 08:38:19 UTC	85	IN	Data Raw: 75 69 74 65 6d 22 20 68 72 65 66 3d 22 23 22 20 74 69 74 6c 65 3d 22 4d 6f 76 69 6e 67 20 61 62 72 6f 61 64 22 20 63 6c 61 73 73 3d 22 65 78 74 4c 69 6e 6b 22 20 6f 6e 63 6c 69 63 6b 3d 22 64 63 73 4d 75 6c 74 69 54 72 61 63 6b 28 26 23 33 39 3b 44 43 53 2e 64 63 73 75 72 69 26 23 33 39 3b 2c 26 23 33 39 3b 2f 44 6f 6f 72 6d 61 74 2f 48 6f 6d 65 70 61 67 65 2f 50 6c 61 6e 6e 69 6e 67 2f 4d 6f 76 69 6e 67 41 62 72 6f 61 64 2f 54 61 62 26 23 33 39 3b 2c 26 23 33 39 3b 57 54 2e 74 69 26 23 33 39 3b 2c 26 23 33 39 3b 44 6f 6f 72 6d 61 74 3a 48 6f 6d 65 70 61 67 65 3a 50 6c 61 6e 6e 69 6e 67 3a 4d 6f 76 69 6e 67 41 62 72 6f 61 64 3a 54 61 62 26 23 33 39 3b 2c 26 23 33 39 3b 57 54 2e 70 6e 5f 73 6b 75 26 23 33 39 3b 2c 26 23 33 39 3b 26 23 33 39 3b 2c 26 23 33 Data Ascii: uitem" href="#" title="Moving abroad" class="extLink" onclick="dcsMultiTrack('DCS.dcsuri','/Doormat/Homepage/Planning/MovingAbroad/Tab','WT.ti','Doormat:Homepage:Planning:MovingAbroad:Tab','WT.pn_sku','',&#3
2023-06-06 08:38:19 UTC	101	IN	Data Raw: 32 34 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 74 61 52 6f 77 22 20 73 74 79 6c 65 3d 22 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 39 70 78 3b 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 73 74 79 6c 65 3d 22 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 33 35 70 78 3b 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 22 3e 3c 61 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 74 69 74 6c 65 3d 22 46 69 6e 64 20 6f 75 74 20 6d 6f 72 65 20 61 62 6f 75 74 20 4f 6e 6c 69 6e 65 20 42 61 6e 6b 69 6e 67 2e 20 54 68 69 73 20 6c 69 6e 6b 20 77 69 6c 6c 20 6f 70 65 6e 20 69 6e 20 61 20 6e 65 77 20 62 72 6f 77 73 65 72 20 77 69 6e Data Ascii: 24"> <div class="ctaRow" style=" font-size: 9px;"> <p style=" padding-left: 35px; float: left;"><a target="_blank" title="Find out more about Online Banking. This link will open in a new browser win
2023-06-06 08:38:19 UTC	117	IN	Data Raw: 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6c 61 73 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 23 22 20 74 69 74 6c 65 3d 22 4e 65 77 20 5a 65 61 6c 61 6e 64 22 20 63 6c 61 73 73 3d 22 6e 7a 22 20 6c 61 6e 67 3d 22 65 6e 2d 4e 5a 22 3e 4e 65 77 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5a 65 61 6c 61 6e 64 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 75 6c 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 75 6c 20 63 6c 61 73 73 3d 22 6e 61 76 22 3e 0a 20 20 20 20 20 20 20 20 20 Data Ascii: <li class="last"> <a href="#" title="New Zealand" class="nz" lang="en-NZ">New Zealand</a> </li> </ul> <ul class="nav">
2023-06-06 08:38:19 UTC	133	IN	Data Raw: 65 3a 31 36 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 65 6c 65 63 74 54 69 74 6c 65 2c 2e 72 61 64 69 6f 47 72 6f 75 70 2c 2e 72 61 64 69 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 72 61 64 69 6f 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 32 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 33 70 78 7d 2e 62 75 74 74 6f 6e 73 4d 6f 64 61 6c 65 7b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 20 30 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 7d 2e 6d 6f 64 61 6c 65 42 74 6e 4f 75 69 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b Data Ascii: e:16px;text-align:left}.selectTitle,.radioGroup,.radio{display:inline-block}.radio{margin-left:32px;margin-bottom:3px}.buttonsModale{width:100%;padding:10px 0;display:inline-block;border-top:0 !important;margin-top:10px}.modaleBtnOui{display:inline-block;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
20	192.168.2.4	49716	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:20 UTC	305	OUT	GET /front_end/front_end_files/menu.css HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hs-login.online/front_end/front_end_files/ursula.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:20 UTC	346	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:20 GMT Content-Type: text/css Content-Length: 667 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:44 GMT ETag: "29b-5fd6543315c36" Accept-Ranges: bytes Vary: Accept-Encoding
2023-06-06 08:38:20 UTC	346	IN	Data Raw: 64 69 76 2e 74 65 72 74 69 61 72 79 5f 6e 61 76 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 44 30 44 30 44 30 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 36 30 70 78 3b 0a 7d 0a 0a 64 69 76 2e 74 65 72 74 69 61 72 79 5f 6e 61 76 20 75 6c 7b 0a 20 20 20 20 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 20 6f 75 74 73 69 64 65 20 6e 6f 6e 65 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 7d 0a 20 20 20 0a 64 69 76 2e 74 65 72 74 69 61 72 79 5f 6e 61 76 20 75 6c 20 6c 69 7b 20 20 20 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 77 68 Data Ascii: div.tertiary_nav{ background-color: #D0D0D0; margin: 0; padding: 0; width: 160px;}div.tertiary_nav ul{ list-style: none outside none; margin: 0; padding: 0; } div.tertiary_nav ul li{ border-bottom: 1px solid wh

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
200	192.168.2.4	50090	52.31.88.82	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:19 UTC	5944	OUT	GET /dest5.html?d_nsid=0 HTTP/1.1 Host: hsbcbankcmb.demdex.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: demdex=32441017531906322422556814171626086572
2023-06-06 08:40:20 UTC	5952	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Content-Type: text/html;charset=UTF-8 date: Tue, 6 Jun 2023 08:40:20 GMT DCS: dcs-prod-irl1-2-v048-098c759e0.edge-irl1.demdex.com 0 ms Expires: Thu, 01 Jan 1970 00:00:00 UTC last-modified: Sat, 27 May 2023 11:05:50 GMT P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Pragma: no-cache Strict-Transport-Security: max-age=31536000; includeSubDomains X-TID: hctay9YBQCA= Content-Length: 6983 Connection: Close
2023-06-06 08:40:20 UTC	5953	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 74 69 74 6c 65 3e 41 64 6f 62 65 20 41 75 64 69 65 6e 63 65 4d 61 6e 61 67 65 72 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>Adobe AudienceManager</title><script type="text/javas

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
201	192.168.2.4	50092	52.95.122.74	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:20 UTC	5945	OUT	GET /s/iu3?pid=bdcdb716-c805-45ff-a670-17eb30f8fca9&event=Pageview&ts=1686040848401&dcc=t HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: ad-id=A89flO4ujEfNt2WVGlm5Omo\|t
2023-06-06 08:40:20 UTC	5971	IN	HTTP/1.1 200 OK Server: Server Date: Tue, 06 Jun 2023 08:40:20 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: ME0SJFGNP8K9YZ3ZCS86 Set-Cookie: ad-id=A89flO4ujEfNt2WVGlm5Omo; Domain=.amazon-adsystem.com; Expires=Mon, 01-Jan-2024 08:40:20 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sat, 01-Jul-2028 08:40:20 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2023-06-06 08:40:20 UTC	5972	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
202	192.168.2.4	50098	18.66.192.44	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:20 UTC	5966	OUT	GET /utag/hsbc/uk-cmb/prod/utag.1118.js?utv=ut4.42.202306021444 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:20 UTC	6036	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 9015 Connection: close Date: Tue, 06 Jun 2023 08:40:21 GMT Last-Modified: Fri, 02 Jun 2023 14:44:35 GMT ETag: "945bfd129d522a0fd3d99dfc1c1bc62e" x-amz-server-side-encryption: AES256 x-amz-version-id: 9tVlrrrsr9TH5rn8uIR4wOoFGb90uGXJ Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 eec5ede1fdb15ceb2352a4ebfb155362.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P1 X-Amz-Cf-Id: TajXyaRjQ3UrLw4cPwiWXbmKGrXu6OR6vWwOMHdJQZxMLPFWt0Bwfg== Cache-Control: max-age=1296000
2023-06-06 08:40:20 UTC	6037	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 31 31 38 20 75 74 34 2e 30 2e 32 30 32 33 30 36 30 32 31 34 34 34 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 33 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 0a 69 66 28 75 74 61 67 2e 75 74 2e 6c 6f 61 64 65 72 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 2e 6c 6f 61 64 65 72 3d Data Ascii: //tealium universal tag - utag.1118 ut4.0.202306021444, Copyright 2023 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}if(utag.ut.loader===undefined){u.loader=

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
203	192.168.2.4	50096	66.235.152.152	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:20 UTC	5966	OUT	POST /rest/v1/delivery?client=hsbcglobalcmb&sessionId=288007df11fa4e24be900888ed94d5a9&version=2.3.3 HTTP/1.1 Host: hsbcglobalcmb.tt.omtrdc.net Connection: keep-alive Content-Length: 1062 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Content-Type: text/plain Accept: / Origin: https://www.business.hsbc.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:20 UTC	5967	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 63 65 30 61 32 30 31 38 31 65 61 34 34 63 37 64 38 37 36 64 66 30 38 34 35 33 30 62 63 31 63 36 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 30 34 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 74 69 6d 65 4f 66 66 73 65 74 49 6e 4d 69 6e 75 74 65 73 22 3a 31 32 30 2c 22 63 68 61 6e 6e 65 6c 22 3a 22 77 65 62 22 2c 22 73 63 72 65 65 6e 22 3a 7b 22 77 69 64 74 68 22 3a 31 32 38 30 2c 22 68 65 69 67 Data Ascii: {"requestId":"ce0a20181ea44c7d876df084530bc1c6","context":{"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36","timeOffsetInMinutes":120,"channel":"web","screen":{"width":1280,"heig
2023-06-06 08:40:20 UTC	5972	IN	HTTP/1.1 200 OK date: Tue, 06 Jun 2023 08:40:20 GMT content-type: application/json;charset=UTF-8 vary: origin,access-control-request-method,access-control-request-headers,accept-encoding access-control-allow-origin: https://www.business.hsbc.uk access-control-allow-credentials: true x-request-id: d8748e98-0680-44db-8170-227ac59ef5f0 timing-allow-origin: * accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List referrer-policy: strict-origin-when-cross-origin strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff server: jag connection: close transfer-encoding: chunked
2023-06-06 08:40:20 UTC	5973	IN	Data Raw: 31 36 34 0d 0a 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 72 65 71 75 65 73 74 49 64 22 3a 22 63 65 30 61 32 30 31 38 31 65 61 34 34 63 37 64 38 37 36 64 66 30 38 34 35 33 30 62 63 31 63 36 22 2c 22 63 6c 69 65 6e 74 22 3a 22 68 73 62 63 67 6c 6f 62 61 6c 63 6d 62 22 2c 22 69 64 22 3a 7b 22 74 6e 74 49 64 22 3a 22 32 38 38 30 30 37 64 66 31 31 66 61 34 65 32 34 62 65 39 30 30 38 38 38 65 64 39 34 64 35 61 39 2e 33 37 5f 30 22 2c 22 6d 61 72 6b 65 74 69 6e 67 43 6c 6f 75 64 56 69 73 69 74 6f 72 49 64 22 3a 22 33 32 39 30 31 33 34 35 33 35 37 38 39 37 33 31 39 33 32 32 35 38 32 32 38 30 33 33 31 33 31 37 39 30 36 33 37 30 22 7d 2c 22 65 64 67 65 48 6f 73 74 22 3a 22 6d 62 6f 78 65 64 67 65 33 37 2e 74 74 2e 6f 6d 74 72 64 63 2e 6e 65 74 22 2c 22 70 72 65 Data Ascii: 164{"status":200,"requestId":"ce0a20181ea44c7d876df084530bc1c6","client":"hsbcglobalcmb","id":{"tntId":"288007df11fa4e24be900888ed94d5a9.37_0","marketingCloudVisitorId":"32901345357897319322582280331317906370"},"edgeHost":"mboxedge37.tt.omtrdc.net","pre
2023-06-06 08:40:20 UTC	5973	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
204	192.168.2.4	50102	18.66.192.44	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:20 UTC	5968	OUT	GET /utag/hsbc/uk-cmb/prod/utag.1152.js?utv=ut4.42.202306021444 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:20 UTC	6047	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 11357 Connection: close Date: Tue, 06 Jun 2023 08:40:21 GMT Last-Modified: Fri, 02 Jun 2023 14:44:34 GMT ETag: "69cf7a197c6ddb84d8300fe6418997a0" x-amz-server-side-encryption: AES256 x-amz-version-id: wMxGHIrVQsFy1m4X7SvWkEyDF_Mu1alc Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 878a01abbb158ab50d28bd4e882dc33a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P1 X-Amz-Cf-Id: 1ZZDT51EUS1dk45gD-hoK3ur8dKRBbvq1CfuZVqWTmgxyuzmA9faMA== Cache-Control: max-age=1296000
2023-06-06 08:40:20 UTC	6047	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 31 35 32 20 75 74 34 2e 30 2e 32 30 32 33 30 36 30 32 31 34 34 34 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 33 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 0a 76 61 72 20 6d 61 74 63 68 3d 2f 75 74 5c 64 5c 2e 28 5c 64 2a 29 5c 2e 2e 2a 2f 2e 65 78 65 63 28 75 74 61 67 2e 63 66 Data Ascii: //tealium universal tag - utag.1152 ut4.0.202306021444, Copyright 2023 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}var match=/ut\d\.(\d)\../.exec(utag.cf

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
205	192.168.2.4	50095	66.235.152.152	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:20 UTC	5968	OUT	POST /rest/v1/delivery?client=hsbcglobalcmb&sessionId=288007df11fa4e24be900888ed94d5a9&version=2.3.3 HTTP/1.1 Host: hsbcglobalcmb.tt.omtrdc.net Connection: keep-alive Content-Length: 1062 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Content-Type: text/plain Accept: / Origin: https://www.business.hsbc.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:20 UTC	5969	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 36 31 61 32 64 39 38 61 36 62 35 34 34 38 35 30 39 37 62 34 31 62 31 31 62 36 32 62 39 63 61 33 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 30 34 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 74 69 6d 65 4f 66 66 73 65 74 49 6e 4d 69 6e 75 74 65 73 22 3a 31 32 30 2c 22 63 68 61 6e 6e 65 6c 22 3a 22 77 65 62 22 2c 22 73 63 72 65 65 6e 22 3a 7b 22 77 69 64 74 68 22 3a 31 32 38 30 2c 22 68 65 69 67 Data Ascii: {"requestId":"61a2d98a6b54485097b41b11b62b9ca3","context":{"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36","timeOffsetInMinutes":120,"channel":"web","screen":{"width":1280,"heig
2023-06-06 08:40:20 UTC	5973	IN	HTTP/1.1 200 OK date: Tue, 06 Jun 2023 08:40:20 GMT content-type: application/json;charset=UTF-8 vary: origin,access-control-request-method,access-control-request-headers,accept-encoding access-control-allow-origin: https://www.business.hsbc.uk access-control-allow-credentials: true x-request-id: fa9a4f62-9ff3-4166-bddf-b7324cbeab1d timing-allow-origin: * accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List referrer-policy: strict-origin-when-cross-origin strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff server: jag connection: close transfer-encoding: chunked
2023-06-06 08:40:20 UTC	5974	IN	Data Raw: 31 36 34 0d 0a 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 72 65 71 75 65 73 74 49 64 22 3a 22 36 31 61 32 64 39 38 61 36 62 35 34 34 38 35 30 39 37 62 34 31 62 31 31 62 36 32 62 39 63 61 33 22 2c 22 63 6c 69 65 6e 74 22 3a 22 68 73 62 63 67 6c 6f 62 61 6c 63 6d 62 22 2c 22 69 64 22 3a 7b 22 74 6e 74 49 64 22 3a 22 32 38 38 30 30 37 64 66 31 31 66 61 34 65 32 34 62 65 39 30 30 38 38 38 65 64 39 34 64 35 61 39 2e 33 37 5f 30 22 2c 22 6d 61 72 6b 65 74 69 6e 67 43 6c 6f 75 64 56 69 73 69 74 6f 72 49 64 22 3a 22 33 32 39 30 31 33 34 35 33 35 37 38 39 37 33 31 39 33 32 32 35 38 32 32 38 30 33 33 31 33 31 37 39 30 36 33 37 30 22 7d 2c 22 65 64 67 65 48 6f 73 74 22 3a 22 6d 62 6f 78 65 64 67 65 33 37 2e 74 74 2e 6f 6d 74 72 64 63 2e 6e 65 74 22 2c 22 70 72 65 Data Ascii: 164{"status":200,"requestId":"61a2d98a6b54485097b41b11b62b9ca3","client":"hsbcglobalcmb","id":{"tntId":"288007df11fa4e24be900888ed94d5a9.37_0","marketingCloudVisitorId":"32901345357897319322582280331317906370"},"edgeHost":"mboxedge37.tt.omtrdc.net","pre
2023-06-06 08:40:20 UTC	5975	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
206	192.168.2.4	50100	18.66.192.44	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:20 UTC	5970	OUT	GET /utag/hsbc/uk-cmb/prod/utag.1225.js?utv=ut4.42.202306021444 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:20 UTC	6058	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3927 Connection: close Date: Tue, 06 Jun 2023 08:40:21 GMT Last-Modified: Fri, 02 Jun 2023 14:44:32 GMT ETag: "8cb8c0b1768a6c7952e75662550a6cf7" x-amz-server-side-encryption: AES256 x-amz-version-id: eJgH71r2YzR6OgXUp3Hf1UceyQUtXQKQ Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 ec12d3de4ccd821a7e749609dcc62010.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P1 X-Amz-Cf-Id: 24DOTxiwwAWYimACrUFcgLr3tIXRXxEyYrtlpaiWPjR3RIiv-cjd0g== Cache-Control: max-age=1296000
2023-06-06 08:40:20 UTC	6059	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 32 32 35 20 75 74 34 2e 30 2e 32 30 32 33 30 36 30 32 31 34 34 34 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 33 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 76 61 72 20 5f 6c 69 6e 6b 65 64 69 6e 3d 5f 6c 69 6e 6b 65 64 69 6e 7c 7c 7b 7d 3b 76 61 72 20 5f 6c 69 6e 6b 65 64 69 6e 5f 64 61 74 61 5f 70 61 72 74 6e 65 72 5f 69 64 3d 5f 6c 69 6e 6b 65 64 69 6e 5f 64 61 74 61 5f 70 61 72 74 6e 65 72 5f 69 64 7c 7c 22 22 3b 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 Data Ascii: //tealium universal tag - utag.1225 ut4.0.202306021444, Copyright 2023 Tealium.com Inc. All Rights Reserved.var _linkedin=_linkedin\|\|{};var _linkedin_data_partner_id=_linkedin_data_partner_id\|\|"";try{(function(id,loader){var u={"id":id};utag.o[loader].se

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
207	192.168.2.4	50099	18.66.192.44	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:20 UTC	5973	OUT	GET /utag/hsbc/uk-cmb/prod/utag.1232.js?utv=ut4.42.202306021444 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:20 UTC	6063	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 4592 Connection: close Date: Tue, 06 Jun 2023 08:40:21 GMT Last-Modified: Fri, 02 Jun 2023 14:44:34 GMT ETag: "a170bcf2dee83ff0462135d8f203419d" x-amz-server-side-encryption: AES256 x-amz-version-id: DE4v7VWZAZNmGXt9Hs_3T75q2d7LHy2b Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 28e56b9ddced4ed414e75f87cbd0d976.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P1 X-Amz-Cf-Id: EryMqj-yuzc5vTkgnrhSaNn8d3MDUzQRCjsPOleRbNdYrDC_zQDYZw== Cache-Control: max-age=1296000
2023-06-06 08:40:20 UTC	6063	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 32 33 32 20 75 74 34 2e 30 2e 32 30 32 33 30 36 30 32 31 34 34 34 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 33 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 77 69 6e 64 6f 77 2e 74 65 61 6c 69 75 6d 5f 64 6e 62 77 76 69 64 3d 77 69 6e 64 6f 77 2e 74 65 61 6c 69 75 6d 5f 64 6e 62 77 76 69 64 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 Data Ascii: //tealium universal tag - utag.1232 ut4.0.202306021444, Copyright 2023 Tealium.com Inc. All Rights Reserved.window.tealium_dnbwvid=window.tealium_dnbwvid\|\|function(){};try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===unde

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
208	192.168.2.4	50101	18.66.192.44	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:20 UTC	5975	OUT	GET /utag/hsbc/uk-cmb/prod/utag.1238.js?utv=ut4.42.202306021444 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:20 UTC	6071	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3580 Connection: close Date: Tue, 06 Jun 2023 08:40:21 GMT Last-Modified: Fri, 02 Jun 2023 14:44:32 GMT ETag: "226496ae0f05abd4154096c31fb52132" x-amz-server-side-encryption: AES256 x-amz-version-id: Vnb22cQWhetStVwVw1AQtTJZZ3b8pHRp Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 8ebebe66cc8de626ee8e15b2ee72d826.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P1 X-Amz-Cf-Id: -Gg6Psws4N89eIFEjzncKU6qu5q7ao3XjP3KzQSMbfJ77ofLOXOLqA== Cache-Control: max-age=1296000
2023-06-06 08:40:20 UTC	6072	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 32 33 38 20 75 74 34 2e 30 2e 32 30 32 33 30 36 30 32 31 34 34 34 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 33 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 75 2e 65 76 3d 7b 76 69 65 77 3a 31 2c 6c 69 6e 6b 3a 31 7d 3b 75 2e 69 6e 69 74 69 61 6c 69 7a 65 64 3d 66 61 6c 73 65 3b 75 2e 73 63 72 69 70 74 72 65 71 75 65 73 74 65 64 3d 66 61 6c 73 65 3b 75 2e 6d 61 70 3d 7b 22 65 78 74 65 Data Ascii: //tealium universal tag - utag.1238 ut4.0.202306021444, Copyright 2023 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;u.ev={view:1,link:1};u.initialized=false;u.scriptrequested=false;u.map={"exte

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
209	192.168.2.4	50105	151.101.240.157	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:20 UTC	5975	OUT	GET /uwt.js HTTP/1.1 Host: static.ads-twitter.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:20 UTC	5979	IN	HTTP/1.1 200 OK Connection: close Content-Length: 57596 Last-Modified: Thu, 27 Oct 2022 18:55:37 GMT ETag: "32ad004436155ec972bc50e6238b5b67" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Content-Type: application/javascript; charset=utf-8 Accept-Ranges: bytes Date: Tue, 06 Jun 2023 08:40:20 GMT X-Served-By: cache-iad-kjyo7100147-IAD, cache-mxp6951-MXP X-Cache: HIT, HIT Vary: Accept-Encoding,Host P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" x-tw-cdn: FT
2023-06-06 08:40:20 UTC	5979	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 36 31 37 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3b 74 2e 65 78 70 6f 72 74 73 3d 28 72 3d 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 26 26 28 72 3d 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2e 63 72 79 70 74 6f 26 26 28 72 3d 73 65 6c 66 2e 63 72 79 70 74 6f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 26 26 28 72 3d Data Ascii: !function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=
2023-06-06 08:40:20 UTC	5980	IN	Data Raw: 74 2c 65 29 7b 74 3d 74 68 69 73 2e 77 6f 72 64 73 3d 74 7c 7c 5b 5d 2c 74 68 69 73 2e 73 69 67 42 79 74 65 73 3d 6e 75 6c 6c 21 3d 65 3f 65 3a 34 2a 74 2e 6c 65 6e 67 74 68 7d 2c 74 6f 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 7c 7c 66 29 2e 73 74 72 69 6e 67 69 66 79 28 74 68 69 73 29 7d 2c 63 6f 6e 63 61 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 77 6f 72 64 73 2c 6e 3d 74 2e 77 6f 72 64 73 2c 72 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 2c 69 3d 74 2e 73 69 67 42 79 74 65 73 3b 69 66 28 74 68 69 73 2e 63 6c 61 6d 70 28 29 2c 72 25 34 29 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 69 3b 6f 2b 2b 29 7b 76 61 72 20 61 3d 6e 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 Data Ascii: t,e){t=this.words=t\|\|[],this.sigBytes=null!=e?e:4t.length},toString:function(t){return(t\|\|f).stringify(this)},concat:function(t){var e=this.words,n=t.words,r=this.sigBytes,i=t.sigBytes;if(this.clamp(),r%4)for(var o=0;o<i;o++){var a=n[o>>>2]>>>24-o%48&25
2023-06-06 08:40:20 UTC	5982	IN	Data Raw: 7d 7d 2c 70 61 72 73 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 64 2e 70 61 72 73 65 28 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 29 29 7d 7d 2c 70 3d 63 2e 42 75 66 66 65 72 65 64 42 6c 6f 63 6b 41 6c 67 6f 72 69 74 68 6d 3d 75 2e 65 78 74 65 6e 64 28 7b 72 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 64 61 74 61 3d 6e 65 77 20 73 2e 69 6e 69 74 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 3d 30 7d 2c 5f 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 68 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 Data Ascii: }},parse:function(t){return d.parse(unescape(encodeURIComponent(t)))}},p=c.BufferedBlockAlgorithm=u.extend({reset:function(){this._data=new s.init,this._nDataBytes=0},_append:function(t){"string"==typeof t&&(t=h.parse(t)),this._data.concat(t),this._nDataB
2023-06-06 08:40:20 UTC	5983	IN	Data Raw: 39 36 37 32 39 36 2a 28 74 2d 28 30 7c 74 29 29 7c 30 7d 66 6f 72 28 76 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 65 28 72 29 26 26 28 69 3c 38 26 26 28 63 5b 69 5d 3d 6e 28 74 2e 70 6f 77 28 72 2c 2e 35 29 29 29 2c 75 5b 69 5d 3d 6e 28 74 2e 70 6f 77 28 72 2c 31 2f 33 29 29 2c 69 2b 2b 29 2c 72 2b 2b 7d 28 29 3b 76 61 72 20 73 3d 5b 5d 2c 6c 3d 61 2e 53 48 41 32 35 36 3d 6f 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 69 2e 69 6e 69 74 28 63 2e 73 6c 69 63 65 28 30 29 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 74 68 69 73 2e 5f 68 61 73 68 2e 77 6f 72 64 73 2c 72 3d 6e 5b 30 Data Ascii: 967296*(t-(0\|t))\|0}for(var r=2,i=0;i<64;)e(r)&&(i<8&&(c[i]=n(t.pow(r,.5))),u[i]=n(t.pow(r,1/3)),i++),r++}();var s=[],l=a.SHA256=o.extend({_doReset:function(){this._hash=new i.init(c.slice(0))},_doProcessBlock:function(t,e){for(var n=this._hash.words,r=n[0
2023-06-06 08:40:20 UTC	5984	IN	Data Raw: 72 65 74 75 72 6e 20 65 2e 72 65 6a 65 63 74 28 6e 29 7d 29 29 7d 29 29 7d 3b 76 61 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 74 68 69 73 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 74 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 74 79 70 65 6f 66 20 74 2b 22 20 22 2b 74 2b 22 20 69 73 20 6e 6f 74 20 69 74 65 72 61 62 6c 65 28 63 61 6e 6e 6f 74 20 72 65 61 64 20 70 72 6f 70 65 72 74 79 20 53 79 6d 62 6f 6c 28 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 29 29 22 29 29 3b 76 61 72 20 72 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 3b 69 66 28 30 3d 3d 3d 72 2e 6c 65 6e 67 74 Data Ascii: return e.reject(n)}))}))};var i=function(t){return new this((function(e,n){if(!t\|\|void 0===t.length)return n(new TypeError(typeof t+" "+t+" is not iterable(cannot read property Symbol(Symbol.iterator))"));var r=Array.prototype.slice.call(t);if(0===r.lengt
2023-06-06 08:40:20 UTC	5986	IN	Data Raw: 65 6f 66 20 75 29 72 65 74 75 72 6e 20 74 2e 5f 73 74 61 74 65 3d 33 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 76 6f 69 64 20 64 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 70 28 28 72 3d 6e 2c 69 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 61 70 70 6c 79 28 69 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 64 28 74 29 7d 63 61 74 63 68 28 65 29 7b 66 28 74 2c 65 29 7d 76 61 72 20 72 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 2c 65 29 7b 74 2e 5f 73 74 61 74 65 3d 32 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 64 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 29 7b 32 3d 3d 3d 74 2e 5f 73 74 61 74 65 26 26 30 3d 3d 3d Data Ascii: eof u)return t._state=3,t._value=e,void d(t);if("function"==typeof n)return void p((r=n,i=e,function(){r.apply(i,arguments)}),t)}t._state=1,t._value=e,d(t)}catch(e){f(t,e)}var r,i}function f(t,e){t._state=2,t._value=e,d(t)}function d(t){2===t._state&&0===
2023-06-06 08:40:20 UTC	5987	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 29 7b 65 28 74 29 7d 29 29 7d 2c 75 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 75 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 6e 28 74 29 7d 29 29 7d 2c 75 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 75 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 61 28 74 29 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 2e 72 61 63 65 20 61 63 63 65 70 74 73 20 61 6e 20 61 72 72 61 79 22 29 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 2c 69 3d 74 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 75 2e 72 65 73 6f 6c 76 65 28 74 5b 72 5d 29 2e 74 68 65 6e 28 65 2c 6e 29 7d 29 29 7d 2c 75 2e 5f 69 Data Ascii: nction(e){e(t)}))},u.reject=function(t){return new u((function(e,n){n(t)}))},u.race=function(t){return new u((function(e,n){if(!a(t))return n(new TypeError("Promise.race accepts an array"));for(var r=0,i=t.length;r<i;r++)u.resolve(t[r]).then(e,n)}))},u._i
2023-06-06 08:40:20 UTC	5988	IN	Data Raw: 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 72 75 6e 6e 69 6e 67 22 29 3b 69 66 28 22 63 6f 6d 70 6c 65 74 65 64 22 3d 3d 3d 72 29 7b 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 69 29 74 68 72 6f 77 20 6f 3b 72 65 74 75 72 6e 20 43 28 29 7d 66 6f 72 28 6e 2e 6d 65 74 68 6f 64 3d 69 2c 6e 2e 61 72 67 3d 6f 3b 3b 29 7b 76 61 72 20 61 3d 6e 2e 64 65 6c 65 67 61 74 65 3b 69 66 28 61 29 7b 76 61 72 20 63 3d 67 28 61 2c 6e 29 3b 69 66 28 63 29 7b 69 66 28 63 3d 3d 3d 6c 29 63 6f 6e 74 69 6e 75 65 3b 72 65 74 75 72 6e 20 63 7d 7d 69 66 28 22 6e 65 78 74 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 6e 2e 73 65 6e 74 3d 6e 2e 5f 73 65 6e 74 3d 6e 2e 61 72 67 3b 65 6c 73 65 20 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 7b 69 66 28 22 73 75 73 70 65 6e 64 Data Ascii: or is already running");if("completed"===r){if("throw"===i)throw o;return C()}for(n.method=i,n.arg=o;;){var a=n.delegate;if(a){var c=g(a,n);if(c){if(c===l)continue;return c}}if("next"===n.method)n.sent=n._sent=n.arg;else if("throw"===n.method){if("suspend
2023-06-06 08:40:20 UTC	5990	IN	Data Raw: 74 2c 61 28 6c 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 72 28 22 74 68 72 6f 77 22 2c 74 2c 61 2c 63 29 7d 29 29 7d 63 28 75 2e 61 72 67 29 7d 28 69 2c 6f 2c 72 2c 61 29 7d 29 29 7d 72 65 74 75 72 6e 20 72 3d 72 3f 72 2e 74 68 65 6e 28 61 2c 61 29 3a 61 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 2e 69 74 65 72 61 74 6f 72 5b 65 2e 6d 65 74 68 6f 64 5d 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 29 7b 69 66 28 65 2e 64 65 6c 65 67 61 74 65 3d 6e 75 6c 6c 2c 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 6d 65 74 68 6f 64 29 7b 69 66 28 74 2e 69 74 65 72 61 74 6f 72 2e 72 65 74 75 72 6e 26 26 28 65 2e 6d 65 74 68 6f 64 3d 22 72 65 74 75 72 6e 22 2c 65 2e 61 72 67 3d 76 6f 69 64 20 30 2c 67 28 74 2c 65 Data Ascii: t,a(l)}),(function(t){return r("throw",t,a,c)}))}c(u.arg)}(i,o,r,a)}))}return r=r?r.then(a,a):a()}}function g(t,e){var n=t.iterator[e.method];if(void 0===n){if(e.delegate=null,"throw"===e.method){if(t.iterator.return&&(e.method="return",e.arg=void 0,g(t,e
2023-06-06 08:40:20 UTC	5991	IN	Data Raw: 73 74 72 75 63 74 6f 72 22 2c 64 29 2c 64 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 63 28 68 2c 61 2c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 29 2c 74 2e 69 73 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 21 21 65 26 26 28 65 3d 3d 3d 64 7c 7c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 3d 3d 3d 28 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 65 2e 6e 61 6d 65 29 29 7d 2c 74 2e 6d 61 72 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 Data Ascii: structor",d),d.displayName=c(h,a,"GeneratorFunction"),t.isGeneratorFunction=function(t){var e="function"==typeof t&&t.constructor;return!!e&&(e===d\|\|"GeneratorFunction"===(e.displayName\|\|e.name))},t.mark=function(t){return Object.setPrototypeOf?Object.set
2023-06-06 08:40:20 UTC	5992	IN	Data Raw: 66 28 74 68 69 73 2e 64 6f 6e 65 29 74 68 72 6f 77 20 74 3b 76 61 72 20 65 3d 74 68 69 73 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 2c 72 29 7b 72 65 74 75 72 6e 20 61 2e 74 79 70 65 3d 22 74 68 72 6f 77 22 2c 61 2e 61 72 67 3d 74 2c 65 2e 6e 65 78 74 3d 6e 2c 72 26 26 28 65 2e 6d 65 74 68 6f 64 3d 22 6e 65 78 74 22 2c 65 2e 61 72 67 3d 76 6f 69 64 20 30 29 2c 21 21 72 7d 66 6f 72 28 76 61 72 20 69 3d 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 2e 6c 65 6e 67 74 68 2d 31 3b 69 3e 3d 30 3b 2d 2d 69 29 7b 76 61 72 20 6f 3d 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 5b 69 5d 2c 61 3d 6f 2e 63 6f 6d 70 6c 65 74 69 6f 6e 3b 69 66 28 22 72 6f 6f 74 22 3d 3d 3d 6f 2e 74 72 79 4c 6f 63 29 72 65 74 75 72 6e 20 72 28 22 65 6e 64 22 29 3b 69 66 28 6f 2e 74 72 79 4c Data Ascii: f(this.done)throw t;var e=this;function r(n,r){return a.type="throw",a.arg=t,e.next=n,r&&(e.method="next",e.arg=void 0),!!r}for(var i=this.tryEntries.length-1;i>=0;--i){var o=this.tryEntries[i],a=o.completion;if("root"===o.tryLoc)return r("end");if(o.tryL
2023-06-06 08:40:20 UTC	5994	IN	Data Raw: 7d 7d 2c 63 61 74 63 68 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 2e 6c 65 6e 67 74 68 2d 31 3b 65 3e 3d 30 3b 2d 2d 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 5b 65 5d 3b 69 66 28 6e 2e 74 72 79 4c 6f 63 3d 3d 3d 74 29 7b 76 61 72 20 72 3d 6e 2e 63 6f 6d 70 6c 65 74 69 6f 6e 3b 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 72 2e 74 79 70 65 29 7b 76 61 72 20 69 3d 72 2e 61 72 67 3b 50 28 6e 29 7d 72 65 74 75 72 6e 20 69 7d 7d 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 69 6c 6c 65 67 61 6c 20 63 61 74 63 68 20 61 74 74 65 6d 70 74 22 29 7d 2c 64 65 6c 65 67 61 74 65 59 69 65 6c 64 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 Data Ascii: }},catch:function(t){for(var e=this.tryEntries.length-1;e>=0;--e){var n=this.tryEntries[e];if(n.tryLoc===t){var r=n.completion;if("throw"===r.type){var i=r.arg;P(n)}return i}}throw new Error("illegal catch attempt")},delegateYield:function(t,e,n){return t
2023-06-06 08:40:20 UTC	5995	IN	Data Raw: 63 7d 2c 76 65 72 73 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 7d 7d 29 3b 76 61 72 20 69 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 31 36 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 69 66 28 21 72 26 26 21 28 72 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 63 72 79 70 74 6f 26 26 63 72 79 70 74 6f 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 26 26 63 72 79 70 74 6f 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 2e 62 69 6e 64 28 63 72 79 70 74 6f 29 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 73 43 72 79 70 74 6f 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6d 73 43 72 79 70 74 6f 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 26 26 6d 73 43 72 79 70 74 6f Data Ascii: c},version:function(){return L}});var i=new Uint8Array(16);function o(){if(!r&&!(r="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto)\|\|"undefined"!=typeof msCrypto&&"function"==typeof msCrypto.getRandomValues&&msCrypto
2023-06-06 08:40:20 UTC	5996	IN	Data Raw: 30 3d 3d 3d 74 2e 63 6c 6f 63 6b 73 65 71 26 26 28 63 3d 63 2b 31 26 31 36 33 38 33 29 2c 28 79 3c 30 7c 7c 73 3e 68 29 26 26 76 6f 69 64 20 30 3d 3d 3d 74 2e 6e 73 65 63 73 26 26 28 76 3d 30 29 2c 76 3e 3d 31 65 34 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 75 75 69 64 2e 76 31 28 29 3a 20 43 61 6e 27 74 20 63 72 65 61 74 65 20 6d 6f 72 65 20 74 68 61 6e 20 31 30 4d 20 75 75 69 64 73 2f 73 65 63 22 29 3b 68 3d 73 2c 70 3d 76 2c 66 3d 63 3b 76 61 72 20 5f 3d 28 31 65 34 2a 28 32 36 38 34 33 35 34 35 35 26 28 73 2b 3d 31 32 32 31 39 32 39 32 38 65 35 29 29 2b 76 29 25 34 32 39 34 39 36 37 32 39 36 3b 69 5b 72 2b 2b 5d 3d 5f 3e 3e 3e 32 34 26 32 35 35 2c 69 5b 72 2b 2b 5d 3d 5f 3e 3e 3e 31 36 26 32 35 35 2c 69 5b 72 2b 2b 5d 3d 5f 3e 3e 3e 38 26 Data Ascii: 0===t.clockseq&&(c=c+1&16383),(y<0\|\|s>h)&&void 0===t.nsecs&&(v=0),v>=1e4)throw new Error("uuid.v1(): Can't create more than 10M uuids/sec");h=s,p=v,f=c;var _=(1e4*(268435455&(s+=122192928e5))+v)%4294967296;i[r++]=_>>>24&255,i[r++]=_>>>16&255,i[r++]=_>>>8&
2023-06-06 08:40:20 UTC	5997	IN	Data Raw: 5d 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 69 7d 72 65 74 75 72 6e 20 64 28 61 29 7d 74 72 79 7b 72 2e 6e 61 6d 65 3d 74 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 20 72 2e 44 4e 53 3d 22 36 62 61 37 62 38 31 30 2d 39 64 61 64 2d 31 31 64 31 2d 38 30 62 34 2d 30 30 63 30 34 66 64 34 33 30 63 38 22 2c 72 2e 55 52 4c 3d 22 36 62 61 37 62 38 31 31 2d 39 64 61 64 2d 31 31 64 31 2d 38 30 62 34 2d 30 30 63 30 34 66 64 34 33 30 63 38 22 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 74 29 7b 72 65 74 75 72 6e 20 31 34 2b 28 74 2b 36 34 3e 3e 3e 39 3c 3c 34 29 2b 31 7d 66 75 6e 63 74 69 6f 6e 20 77 28 74 2c 65 29 7b 76 61 72 20 6e 3d 28 36 35 35 33 35 26 74 29 2b 28 36 35 35 33 35 26 65 29 3b 72 65 74 75 72 6e 28 74 3e 3e 31 36 29 2b 28 65 3e 3e 31 36 29 2b 28 Data Ascii: ]=a[c];return i}return d(a)}try{r.name=t}catch(t){}return r.DNS="6ba7b810-9dad-11d1-80b4-00c04fd430c8",r.URL="6ba7b811-9dad-11d1-80b4-00c04fd430c8",r}function m(t){return 14+(t+64>>>9<<4)+1}function w(t,e){var n=(65535&t)+(65535&e);return(t>>16)+(e>>16)+(
2023-06-06 08:40:20 UTC	5999	IN	Data Raw: 29 2c 6f 3d 62 28 6f 2c 6e 2c 72 2c 69 2c 74 5b 61 2b 39 5d 2c 31 32 2c 2d 31 39 35 38 34 31 34 34 31 37 29 2c 69 3d 62 28 69 2c 6f 2c 6e 2c 72 2c 74 5b 61 2b 31 30 5d 2c 31 37 2c 2d 34 32 30 36 33 29 2c 72 3d 62 28 72 2c 69 2c 6f 2c 6e 2c 74 5b 61 2b 31 31 5d 2c 32 32 2c 2d 31 39 39 30 34 30 34 31 36 32 29 2c 6e 3d 62 28 6e 2c 72 2c 69 2c 6f 2c 74 5b 61 2b 31 32 5d 2c 37 2c 31 38 30 34 36 30 33 36 38 32 29 2c 6f 3d 62 28 6f 2c 6e 2c 72 2c 69 2c 74 5b 61 2b 31 33 5d 2c 31 32 2c 2d 34 30 33 34 31 31 30 31 29 2c 69 3d 62 28 69 2c 6f 2c 6e 2c 72 2c 74 5b 61 2b 31 34 5d 2c 31 37 2c 2d 31 35 30 32 30 30 32 32 39 30 29 2c 72 3d 62 28 72 2c 69 2c 6f 2c 6e 2c 74 5b 61 2b 31 35 5d 2c 32 32 2c 31 32 33 36 35 33 35 33 32 39 29 2c 6e 3d 50 28 6e 2c 72 2c 69 2c 6f 2c Data Ascii: ),o=b(o,n,r,i,t[a+9],12,-1958414417),i=b(i,o,n,r,t[a+10],17,-42063),r=b(r,i,o,n,t[a+11],22,-1990404162),n=b(n,r,i,o,t[a+12],7,1804603682),o=b(o,n,r,i,t[a+13],12,-40341101),i=b(i,o,n,r,t[a+14],17,-1502002290),r=b(r,i,o,n,t[a+15],22,1236535329),n=P(n,r,i,o,
2023-06-06 08:40:20 UTC	6000	IN	Data Raw: 31 30 2c 31 31 32 36 38 39 31 34 31 35 29 2c 69 3d 4f 28 69 2c 6f 2c 6e 2c 72 2c 74 5b 61 2b 31 34 5d 2c 31 35 2c 2d 31 34 31 36 33 35 34 39 30 35 29 2c 72 3d 4f 28 72 2c 69 2c 6f 2c 6e 2c 74 5b 61 2b 35 5d 2c 32 31 2c 2d 35 37 34 33 34 30 35 35 29 2c 6e 3d 4f 28 6e 2c 72 2c 69 2c 6f 2c 74 5b 61 2b 31 32 5d 2c 36 2c 31 37 30 30 34 38 35 35 37 31 29 2c 6f 3d 4f 28 6f 2c 6e 2c 72 2c 69 2c 74 5b 61 2b 33 5d 2c 31 30 2c 2d 31 38 39 34 39 38 36 36 30 36 29 2c 69 3d 4f 28 69 2c 6f 2c 6e 2c 72 2c 74 5b 61 2b 31 30 5d 2c 31 35 2c 2d 31 30 35 31 35 32 33 29 2c 72 3d 4f 28 72 2c 69 2c 6f 2c 6e 2c 74 5b 61 2b 31 5d 2c 32 31 2c 2d 32 30 35 34 39 32 32 37 39 39 29 2c 6e 3d 4f 28 6e 2c 72 2c 69 2c 6f 2c 74 5b 61 2b 38 5d 2c 36 2c 31 38 37 33 33 31 33 33 35 39 29 2c 6f Data Ascii: 10,1126891415),i=O(i,o,n,r,t[a+14],15,-1416354905),r=O(r,i,o,n,t[a+5],21,-57434055),n=O(n,r,i,o,t[a+12],6,1700485571),o=O(o,n,r,i,t[a+3],10,-1894986606),i=O(i,o,n,r,t[a+10],15,-1051523),r=O(r,i,o,n,t[a+1],21,-2054922799),n=O(n,r,i,o,t[a+8],6,1873313359),o
2023-06-06 08:40:20 UTC	6001	IN	Data Raw: 63 65 69 6c 28 6f 2f 31 36 29 2c 63 3d 6e 65 77 20 41 72 72 61 79 28 61 29 2c 75 3d 30 3b 75 3c 61 3b 2b 2b 75 29 7b 66 6f 72 28 76 61 72 20 73 3d 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 36 29 2c 6c 3d 30 3b 6c 3c 31 36 3b 2b 2b 6c 29 73 5b 6c 5d 3d 74 5b 36 34 2a 75 2b 34 2a 6c 5d 3c 3c 32 34 7c 74 5b 36 34 2a 75 2b 34 2a 6c 2b 31 5d 3c 3c 31 36 7c 74 5b 36 34 2a 75 2b 34 2a 6c 2b 32 5d 3c 3c 38 7c 74 5b 36 34 2a 75 2b 34 2a 6c 2b 33 5d 3b 63 5b 75 5d 3d 73 7d 63 5b 61 2d 31 5d 5b 31 34 5d 3d 38 2a 28 74 2e 6c 65 6e 67 74 68 2d 31 29 2f 4d 61 74 68 2e 70 6f 77 28 32 2c 33 32 29 2c 63 5b 61 2d 31 5d 5b 31 34 5d 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 63 5b 61 2d 31 5d 5b 31 34 5d 29 2c 63 5b 61 2d 31 5d 5b 31 35 5d 3d 38 2a 28 74 2e 6c 65 6e 67 74 Data Ascii: ceil(o/16),c=new Array(a),u=0;u<a;++u){for(var s=new Uint32Array(16),l=0;l<16;++l)s[l]=t[64u+4l]<<24\|t[64u+4l+1]<<16\|t[64u+4l+2]<<8\|t[64u+4l+3];c[u]=s}c[a-1][14]=8(t.length-1)/Math.pow(2,32),c[a-1][14]=Math.floor(c[a-1][14]),c[a-1][15]=8(t.lengt
2023-06-06 08:40:20 UTC	6003	IN	Data Raw: 6c 75 65 3a 65 7d 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 64 65 66 61 75 6c 74 3d 65 7d 29 2c 6f 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 69 6d 70 6f 72 74 53 74 61 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 26 26 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 65 3d 7b 7d 3b 69 66 28 6e 75 6c 6c 21 3d 74 29 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 22 64 65 66 61 75 6c 74 22 21 3d 3d 6e 26 26 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 6e 29 26 26 72 28 65 2c 74 2c 6e 29 3b 72 65 74 75 72 6e 20 69 28 65 2c 74 29 2c 65 7d 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 Data Ascii: lue:e})}:function(t,e){t.default=e}),o=this&&this.__importStar\|\|function(t){if(t&&t.__esModule)return t;var e={};if(null!=t)for(var n in t)"default"!==n&&Object.prototype.hasOwnProperty.call(t,n)&&r(e,t,n);return i(e,t),e};Object.defineProperty(e,"__esMod
2023-06-06 08:40:20 UTC	6004	IN	Data Raw: 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 65 2e 74 72 61 63 6b 5f 44 45 50 52 45 43 41 54 45 44 3d 65 2e 62 75 69 6c 64 53 63 72 69 70 74 5f 44 45 50 52 45 43 41 54 45 44 3d 65 2e 62 75 69 6c 64 50 69 78 65 6c 5f 44 45 50 52 45 43 41 54 45 44 3d 65 2e 62 75 69 6c 64 49 66 72 61 6d 65 5f 44 45 50 52 45 43 41 54 45 44 3d 76 6f 69 64 20 30 3b 76 61 72 20 63 3d 61 28 6e 28 31 39 35 32 29 29 2c 75 3d 61 28 6e 28 38 33 35 32 29 29 2c 73 3d 61 28 6e 28 33 32 35 37 29 29 2c 6c 3d 6e 28 34 36 35 34 29 3b 65 2e 74 72 61 63 6b 5f 44 45 50 52 45 43 41 54 45 44 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 69 66 28 21 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 Data Ascii: ect.defineProperty(e,"__esModule",{value:!0}),e.track_DEPRECATED=e.buildScript_DEPRECATED=e.buildPixel_DEPRECATED=e.buildIframe_DEPRECATED=void 0;var c=a(n(1952)),u=a(n(8352)),s=a(n(3257)),l=n(4654);e.track_DEPRECATED=function(t,e,n){if(!t)throw new Error
2023-06-06 08:40:20 UTC	6005	IN	Data Raw: 29 26 26 28 74 5b 69 5d 3d 65 5b 69 5d 29 3b 72 65 74 75 72 6e 20 74 7d 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 69 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 63 72 65 61 74 65 42 69 6e 64 69 6e 67 7c 7c 28 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 72 29 7b 76 6f 69 64 20 30 3d 3d 3d 72 26 26 28 72 3d 6e 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 72 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 5b 6e 5d 7d 7d 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 72 29 7b 76 6f 69 64 20 30 3d 3d 3d 72 26 26 28 72 3d 6e 29 2c 74 5b 72 5d 3d 65 5b 6e 5d 7d 29 2c 6f 3d 74 68 69 Data Ascii: )&&(t[i]=e[i]);return t}).apply(this,arguments)},i=this&&this.__createBinding\|\|(Object.create?function(t,e,n,r){void 0===r&&(r=n),Object.defineProperty(t,r,{enumerable:!0,get:function(){return e[n]}})}:function(t,e,n,r){void 0===r&&(r=n),t[r]=e[n]}),o=thi
2023-06-06 08:40:20 UTC	6007	IN	Data Raw: 29 7d 3b 65 2e 65 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 7b 7d 29 2c 21 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 73 2e 75 74 69 6c 69 74 69 65 73 2e 4c 6f 67 50 72 65 66 69 78 2b 22 3a 20 45 76 65 6e 74 20 63 61 6e 6e 6f 74 20 73 65 6e 64 20 65 76 65 6e 74 20 77 69 74 68 6f 75 74 20 61 6e 20 45 76 65 6e 74 20 43 6f 64 65 20 49 64 22 29 3b 65 3d 65 26 26 73 2e 75 74 69 6c 69 74 69 65 73 2e 69 73 4f 62 6a 65 63 74 28 65 29 3f 65 3a 7b 7d 3b 76 61 72 20 6e 2c 69 3d 73 2e 75 74 69 6c 69 74 69 65 73 2e 70 61 72 73 65 45 76 65 6e 74 43 6f 64 65 49 64 28 74 29 2c 6f 3d 69 5b 30 5d 3b 69 5b 31 5d 3b 6f 26 26 28 6e 3d 66 5b 6f 5d 7c 7c 6e 65 77 20 63 2e 41 63 63 6f 75 6e 74 50 61 Data Ascii: )};e.event=function(t,e){if(void 0===e&&(e={}),!t)throw new Error(s.utilities.LogPrefix+": Event cannot send event without an Event Code Id");e=e&&s.utilities.isObject(e)?e:{};var n,i=s.utilities.parseEventCodeId(t),o=i[0];i[1];o&&(n=f[o]\|\|new c.AccountPa
2023-06-06 08:40:20 UTC	6008	IN	Data Raw: 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 65 2e 74 72 61 63 6b 50 69 64 3d 76 6f 69 64 20 30 3b 76 61 72 20 63 3d 61 28 6e 28 31 39 35 32 29 29 2c 75 3d 61 28 6e 28 33 32 35 37 29 29 2c 73 3d 6e 28 34 36 35 34 29 3b 65 2e 74 72 61 63 6b 50 69 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 7b 7d 29 2c 21 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 73 2e 75 74 69 6c 69 74 69 65 73 2e 4c 6f 67 50 72 65 66 69 78 2b 22 3a 20 4e 6f 20 50 69 78 65 6c 20 49 44 20 46 6f 75 6e 64 22 29 3b 65 3d 65 7c 7c 7b 7d 3b 76 61 72 20 6e 3d 6e 65 77 20 63 2e 41 63 63 6f 75 6e 74 50 61 72 61 6d 73 28 7b 74 78 6e 5f 69 64 3a 74 7d Data Ascii: defineProperty(e,"__esModule",{value:!0}),e.trackPid=void 0;var c=a(n(1952)),u=a(n(3257)),s=n(4654);e.trackPid=function(t,e){if(void 0===e&&(e={}),!t)throw new Error(s.utilities.LogPrefix+": No Pixel ID Found");e=e\|\|{};var n=new c.AccountParams({txn_id:t}
2023-06-06 08:40:20 UTC	6009	IN	Data Raw: 6e 74 50 61 72 61 6d 73 3d 76 6f 69 64 20 30 3b 76 61 72 20 63 2c 75 3d 61 28 6e 28 31 39 35 32 29 29 2c 73 3d 61 28 6e 28 33 32 35 37 29 29 2c 6c 3d 6e 28 34 36 35 34 29 3b 65 2e 64 65 66 61 75 6c 74 41 63 63 6f 75 6e 74 50 61 72 61 6d 73 3d 63 3b 76 61 72 20 66 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 2e 64 65 66 61 75 6c 74 41 63 63 6f 75 6e 74 50 61 72 61 6d 73 3d 63 3d 6e 65 77 20 75 2e 41 63 63 6f 75 6e 74 50 61 72 61 6d 73 28 7b 74 78 6e 5f 69 64 3a 74 7d 29 2c 73 2e 69 6e 69 74 28 63 29 7d 3b 65 2e 73 65 74 44 65 66 61 75 6c 74 41 63 63 6f 75 6e 74 50 61 72 61 6d 73 3d 66 3b 65 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 7c 7c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 Data Ascii: ntParams=void 0;var c,u=a(n(1952)),s=a(n(3257)),l=n(4654);e.defaultAccountParams=c;var f=function(t){e.defaultAccountParams=c=new u.AccountParams({txn_id:t}),s.init(c)};e.setDefaultAccountParams=f;e.init=function(t){if(!t\|\|"string"!=typeof t)throw new Err
2023-06-06 08:40:20 UTC	6011	IN	Data Raw: 6e 63 74 69 6f 6e 20 6e 28 29 7b 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 74 7d 72 28 74 2c 65 29 2c 74 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 75 6c 6c 3d 3d 3d 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 29 3a 28 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 65 77 20 6e 29 7d 29 2c 6f 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 6f 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 2c 6e 3d 31 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 65 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 29 4f 62 6a 65 63 74 2e Data Ascii: nction n(){this.constructor=t}r(t,e),t.prototype=null===e?Object.create(e):(n.prototype=e.prototype,new n)}),o=this&&this.__assign\|\|function(){return(o=Object.assign\|\|function(t){for(var e,n=1,r=arguments.length;n<r;n++)for(var i in e=arguments[n])Object.
2023-06-06 08:40:20 UTC	6012	IN	Data Raw: 2c 6e 3d 28 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 68 69 73 2e 70 61 72 61 6d 4b 56 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 74 78 6e 5f 69 64 29 7c 7c 28 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 68 69 73 2e 70 61 72 61 6d 4b 56 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 6d 65 72 63 68 5f 69 64 29 3b 69 66 28 21 6e 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 61 2e 75 74 69 6c 69 74 69 65 73 2e 4c 6f 67 50 72 65 66 69 78 2b 22 3a 20 50 69 78 65 6c 20 49 64 20 64 6f 65 73 6e 27 74 20 65 78 69 73 74 2e 22 29 3b 72 65 74 75 72 6e 20 6e 7d 2c 74 7d 28 29 3b 65 2e 50 61 72 61 6d 65 74 65 72 73 3d 6c 3b 76 61 72 20 66 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 65 Data Ascii: ,n=(null===(t=this.paramKVs)\|\|void 0===t?void 0:t.txn_id)\|\|(null===(e=this.paramKVs)\|\|void 0===e?void 0:e.merch_id);if(!n)throw new Error(a.utilities.LogPrefix+": Pixel Id doesn't exist.");return n},t}();e.Parameters=l;var f=function(t){function e(){var e
2023-06-06 08:40:20 UTC	6013	IN	Data Raw: 6f 62 61 6c 50 61 72 61 6d 73 3d 70 2c 65 2e 73 65 74 49 66 72 61 6d 65 3d 76 2c 65 2e 73 65 74 4c 6f 63 61 74 69 6f 6e 3d 79 2c 65 2e 6d 65 72 67 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 61 63 63 6f 75 6e 74 50 61 72 61 6d 73 2c 6e 3d 74 2e 65 76 65 6e 74 50 61 72 61 6d 73 2c 72 3d 61 2e 75 74 69 6c 69 74 69 65 73 2e 6d 65 72 67 65 4f 62 6a 65 63 74 73 28 7b 7d 2c 70 2e 67 65 74 28 29 2c 28 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 67 65 74 28 29 29 7c 7c 7b 7d 2c 6e 2e 67 65 74 28 29 29 2c 69 3d 61 2e 75 74 69 6c 69 74 69 65 73 2e 73 70 6c 69 74 4f 62 6a 65 63 74 42 79 50 72 6f 70 4e 61 6d 65 73 28 72 2c 75 29 2c 6f 3d 69 5b 30 5d 2c 63 3d 69 5b 31 5d 3b 72 65 74 75 72 6e 20 76 28 63 29 2c 79 28 6f 2c 63 29 2c 63 7d 7d Data Ascii: obalParams=p,e.setIframe=v,e.setLocation=y,e.merge=function(t){var e=t.accountParams,n=t.eventParams,r=a.utilities.mergeObjects({},p.get(),(null==e?void 0:e.get())\|\|{},n.get()),i=a.utilities.splitObjectByPropNames(r,u),o=i[0],c=i[1];return v(c),y(o,c),c}}
2023-06-06 08:40:20 UTC	6015	IN	Data Raw: 63 61 73 65 20 31 3a 69 3d 6f 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 20 61 2e 6c 61 62 65 6c 2b 2b 2c 7b 76 61 6c 75 65 3a 6f 5b 31 5d 2c 64 6f 6e 65 3a 21 31 7d 3b 63 61 73 65 20 35 3a 61 2e 6c 61 62 65 6c 2b 2b 2c 72 3d 6f 5b 31 5d 2c 6f 3d 5b 30 5d 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 20 37 3a 6f 3d 61 2e 6f 70 73 2e 70 6f 70 28 29 2c 61 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 3b 64 65 66 61 75 6c 74 3a 69 66 28 21 28 69 3d 61 2e 74 72 79 73 2c 28 69 3d 69 2e 6c 65 6e 67 74 68 3e 30 26 26 69 5b 69 2e 6c 65 6e 67 74 68 2d 31 5d 29 7c 7c 36 21 3d 3d 6f 5b 30 5d 26 26 32 21 3d 3d 6f 5b 30 5d 29 29 7b 61 3d 30 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 33 3d 3d 3d 6f 5b 30 5d 26 26 28 21 69 7c 7c 6f 5b 31 5d 3e 69 Data Ascii: case 1:i=o;break;case 4:return a.label++,{value:o[1],done:!1};case 5:a.label++,r=o[1],o=[0];continue;case 7:o=a.ops.pop(),a.trys.pop();continue;default:if(!(i=a.trys,(i=i.length>0&&i[i.length-1])\|\|6!==o[0]&&2!==o[0])){a=0;continue}if(3===o[0]&&(!i\|\|o[1]>i
2023-06-06 08:40:20 UTC	6016	IN	Data Raw: 6e 74 28 69 5b 74 5d 29 7d 29 29 2e 6a 6f 69 6e 28 22 26 22 29 2c 75 3d 74 2b 22 3f 22 2b 63 2c 5b 34 2c 61 2e 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 56 69 73 69 62 6c 65 28 29 5d 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 6f 2e 73 65 6e 74 28 29 2c 5b 32 2c 6e 2e 6e 65 65 64 52 65 73 70 6f 6e 73 65 3f 61 2e 66 65 74 63 68 28 75 29 3a 6c 28 75 29 5d 7d 7d 29 29 7d 29 29 7d 3b 65 2e 62 75 69 6c 64 53 63 72 69 70 74 50 69 78 65 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 69 28 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 20 6f 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 73 77 69 74 63 68 28 6e 2e 6c 61 62 65 6c 29 Data Ascii: nt(i[t])})).join("&"),u=t+"?"+c,[4,a.environment.documentVisible()];case 1:return o.sent(),[2,n.needResponse?a.fetch(u):l(u)]}}))}))};e.buildScriptPixel=function(t){return i(void 0,void 0,void 0,(function(){var e;return o(this,(function(n){switch(n.label)
2023-06-06 08:40:20 UTC	6017	IN	Data Raw: 65 66 61 75 6c 74 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 65 7d 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 64 65 66 61 75 6c 74 3d 65 7d 29 2c 6f 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 69 6d 70 6f 72 74 53 74 61 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 26 26 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 65 3d 7b 7d 3b 69 66 28 6e 75 6c 6c 21 3d 74 29 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 22 64 65 66 61 75 6c 74 22 21 3d 3d 6e 26 26 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 6e 29 26 26 72 28 65 2c 74 2c 6e 29 3b 72 65 74 75 72 6e 20 69 28 65 2c 74 29 2c 65 7d 2c 61 3d 74 68 69 73 26 Data Ascii: efault",{enumerable:!0,value:e})}:function(t,e){t.default=e}),o=this&&this.__importStar\|\|function(t){if(t&&t.__esModule)return t;var e={};if(null!=t)for(var n in t)"default"!==n&&Object.prototype.hasOwnProperty.call(t,n)&&r(e,t,n);return i(e,t),e},a=this&
2023-06-06 08:40:20 UTC	6019	IN	Data Raw: 6c 61 62 65 6c 3d 6f 5b 31 5d 3b 62 72 65 61 6b 7d 69 66 28 36 3d 3d 3d 6f 5b 30 5d 26 26 61 2e 6c 61 62 65 6c 3c 69 5b 31 5d 29 7b 61 2e 6c 61 62 65 6c 3d 69 5b 31 5d 2c 69 3d 6f 3b 62 72 65 61 6b 7d 69 66 28 69 26 26 61 2e 6c 61 62 65 6c 3c 69 5b 32 5d 29 7b 61 2e 6c 61 62 65 6c 3d 69 5b 32 5d 2c 61 2e 6f 70 73 2e 70 75 73 68 28 6f 29 3b 62 72 65 61 6b 7d 69 5b 32 5d 26 26 61 2e 6f 70 73 2e 70 6f 70 28 29 2c 61 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 7d 6f 3d 65 2e 63 61 6c 6c 28 74 2c 61 29 7d 63 61 74 63 68 28 74 29 7b 6f 3d 5b 36 2c 74 5d 2c 72 3d 30 7d 66 69 6e 61 6c 6c 79 7b 6e 3d 69 3d 30 7d 69 66 28 35 26 6f 5b 30 5d 29 74 68 72 6f 77 20 6f 5b 31 5d 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 6f 5b 30 5d 3f 6f 5b 31 5d 3a 76 6f Data Ascii: label=o[1];break}if(6===o[0]&&a.label<i[1]){a.label=i[1],i=o;break}if(i&&a.label<i[2]){a.label=i[2],a.ops.push(o);break}i[2]&&a.ops.pop(),a.trys.pop();continue}o=e.call(t,a)}catch(t){o=[6,t],r=0}finally{n=i=0}if(5&o[0])throw o[1];return{value:o[0]?o[1]:vo
2023-06-06 08:40:20 UTC	6020	IN	Data Raw: 6c 79 28 74 2c 65 7c 7c 5b 5d 29 29 2e 6e 65 78 74 28 29 29 7d 29 29 7d 2c 69 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 67 65 6e 65 72 61 74 6f 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 2c 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 31 26 69 5b 30 5d 29 74 68 72 6f 77 20 69 5b 31 5d 3b 72 65 74 75 72 6e 20 69 5b 31 5d 7d 2c 74 72 79 73 3a 5b 5d 2c 6f 70 73 3a 5b 5d 7d 3b 72 65 74 75 72 6e 20 6f 3d 7b 6e 65 78 74 3a 63 28 30 29 2c 74 68 72 6f 77 3a 63 28 31 29 2c 72 65 74 75 72 6e 3a 63 28 32 29 7d 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 6f 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: ly(t,e\|\|[])).next())}))},i=this&&this.__generator\|\|function(t,e){var n,r,i,o,a={label:0,sent:function(){if(1&i[0])throw i[1];return i[1]},trys:[],ops:[]};return o={next:c(0),throw:c(1),return:c(2)},"function"==typeof Symbol&&(o[Symbol.iterator]=function()
2023-06-06 08:40:20 UTC	6021	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 69 29 7b 73 77 69 74 63 68 28 69 2e 6c 61 62 65 6c 29 7b 63 61 73 65 20 30 3a 73 77 69 74 63 68 28 65 3d 74 5b 30 5d 2c 6e 3d 74 2e 73 6c 69 63 65 28 31 29 2c 65 29 7b 63 61 73 65 22 69 6e 69 74 22 3a 72 3d 6f 2e 55 57 54 2e 69 6e 69 74 3b 62 72 65 61 6b 3b 63 61 73 65 22 74 72 61 63 6b 22 3a 72 3d 6f 2e 55 57 54 2e 74 72 61 63 6b 3b 62 72 65 61 6b 3b 63 61 73 65 22 63 6f 6e 66 69 67 22 3a 72 3d 6f 2e 4f 6e 65 54 61 67 2e 63 6f 6e 66 69 67 3b 62 72 65 61 6b 3b 63 61 73 65 22 65 76 65 6e 74 22 3a 72 3d 6f 2e 4f 6e 65 54 61 67 2e 65 76 65 6e 74 3b 62 72 65 61 6b 3b 63 61 73 65 22 73 65 74 22 3a 72 3d 6f 2e 4f 6e 65 54 61 67 2e 73 65 74 7d 69 2e 6c 61 62 65 6c 3d 31 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 69 2e 74 72 79 73 2e Data Ascii: function(i){switch(i.label){case 0:switch(e=t[0],n=t.slice(1),e){case"init":r=o.UWT.init;break;case"track":r=o.UWT.track;break;case"config":r=o.OneTag.config;break;case"event":r=o.OneTag.event;break;case"set":r=o.OneTag.set}i.label=1;case 1:return i.trys.
2023-06-06 08:40:20 UTC	6023	IN	Data Raw: 6c 69 74 28 22 3d 22 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 74 72 69 6d 28 29 7d 29 29 2c 72 3d 6e 5b 30 5d 2c 69 3d 6e 5b 31 5d 3b 72 65 74 75 72 6e 20 74 5b 72 5d 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 69 29 2c 74 7d 29 2c 7b 7d 29 3b 72 65 74 75 72 6e 20 72 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 43 69 28 65 2c 74 29 3f 65 5b 74 5d 3a 76 6f 69 64 20 30 7d 2c 74 2e 63 6f 6e 76 65 72 74 43 6f 6f 6b 69 65 4f 70 74 69 6f 6e 73 54 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 72 2e 4c 6f 67 50 72 65 66 69 78 2b 22 3a 20 63 6f 6e 76 65 72 74 43 6f 6f 6b 69 65 4f 70 74 69 6f 6e 73 54 6f 53 74 72 69 6e 67 20 69 Data Ascii: lit("=").map((function(t){return t.trim()})),r=n[0],i=n[1];return t[r]=decodeURIComponent(i),t}),{});return r.hasOwnPropertyCi(e,t)?e[t]:void 0},t.convertCookieOptionsToString=function(t){if(!t)throw new Error(r.LogPrefix+": convertCookieOptionsToString i
2023-06-06 08:40:20 UTC	6024	IN	Data Raw: 76 61 6c 75 65 3a 6f 5b 31 5d 2c 64 6f 6e 65 3a 21 31 7d 3b 63 61 73 65 20 35 3a 61 2e 6c 61 62 65 6c 2b 2b 2c 72 3d 6f 5b 31 5d 2c 6f 3d 5b 30 5d 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 20 37 3a 6f 3d 61 2e 6f 70 73 2e 70 6f 70 28 29 2c 61 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 3b 64 65 66 61 75 6c 74 3a 69 66 28 21 28 69 3d 61 2e 74 72 79 73 2c 28 69 3d 69 2e 6c 65 6e 67 74 68 3e 30 26 26 69 5b 69 2e 6c 65 6e 67 74 68 2d 31 5d 29 7c 7c 36 21 3d 3d 6f 5b 30 5d 26 26 32 21 3d 3d 6f 5b 30 5d 29 29 7b 61 3d 30 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 33 3d 3d 3d 6f 5b 30 5d 26 26 28 21 69 7c 7c 6f 5b 31 5d 3e 69 5b 30 5d 26 26 6f 5b 31 5d 3c 69 5b 33 5d 29 29 7b 61 2e 6c 61 62 65 6c 3d 6f 5b 31 5d 3b 62 72 65 61 6b 7d 69 66 28 36 3d 3d Data Ascii: value:o[1],done:!1};case 5:a.label++,r=o[1],o=[0];continue;case 7:o=a.ops.pop(),a.trys.pop();continue;default:if(!(i=a.trys,(i=i.length>0&&i[i.length-1])\|\|6!==o[0]&&2!==o[0])){a=0;continue}if(3===o[0]&&(!i\|\|o[1]>i[0]&&o[1]<i[3])){a.label=o[1];break}if(6==
2023-06-06 08:40:20 UTC	6025	IN	Data Raw: 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 6a 73 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 74 72 79 7b 74 28 4a 53 4f 4e 2e 70 61 72 73 65 28 65 2e 78 68 72 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 29 29 7d 63 61 74 63 68 28 74 29 7b 6e 28 74 29 7d 7d 29 29 7d 2c 74 68 69 73 2e 78 68 72 3d 74 2c 74 68 69 73 2e 73 74 61 74 75 73 3d 74 2e 73 74 61 74 75 73 2c 74 68 69 73 2e 73 74 61 74 75 73 54 65 78 74 3d 74 2e 73 74 61 74 75 73 54 65 78 74 2c 74 68 69 73 2e 6f 6b 3d 74 2e 73 74 61 74 75 73 3e 3d 32 Data Ascii: operty(e,"__esModule",{value:!0});var n=function(t){var e=this;this.json=function(){return new Promise((function(t,n){try{t(JSON.parse(e.xhr.responseText))}catch(t){n(t)}}))},this.xhr=t,this.status=t.status,this.statusText=t.statusText,this.ok=t.status>=2
2023-06-06 08:40:20 UTC	6027	IN	Data Raw: 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 43 6f 6f 6b 69 65 73 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 2e 43 6f 6f 6b 69 65 73 7d 7d 29 3b 76 61 72 20 75 3d 6f 28 6e 28 36 31 38 29 29 3b 65 2e 65 6e 76 69 72 6f 6e 6d 65 6e 74 3d 75 3b 76 61 72 20 73 3d 61 28 6e 28 37 33 34 34 29 29 3b 65 2e 66 65 74 63 68 3d 73 2e 64 65 66 61 75 6c 74 3b 76 61 72 20 6c 3d 6f 28 6e 28 38 39 37 34 29 29 3b 65 2e 74 77 63 6c 69 64 3d 6c 3b 76 61 72 20 66 3d 6f 28 6e 28 33 35 33 32 29 29 3b 65 2e 75 74 69 6c 69 74 69 65 73 3d 66 7d 2c 38 39 37 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 68 69 73 26 26 74 68 69 Data Ascii: t.defineProperty(e,"Cookies",{enumerable:!0,get:function(){return c.Cookies}});var u=o(n(618));e.environment=u;var s=a(n(7344));e.fetch=s.default;var l=o(n(8974));e.twclid=l;var f=o(n(3532));e.utilities=f},8974:function(t,e,n){"use strict";var r=this&&thi
2023-06-06 08:40:20 UTC	6028	IN	Data Raw: 6c 3d 6f 5b 31 5d 3b 62 72 65 61 6b 7d 69 66 28 36 3d 3d 3d 6f 5b 30 5d 26 26 61 2e 6c 61 62 65 6c 3c 69 5b 31 5d 29 7b 61 2e 6c 61 62 65 6c 3d 69 5b 31 5d 2c 69 3d 6f 3b 62 72 65 61 6b 7d 69 66 28 69 26 26 61 2e 6c 61 62 65 6c 3c 69 5b 32 5d 29 7b 61 2e 6c 61 62 65 6c 3d 69 5b 32 5d 2c 61 2e 6f 70 73 2e 70 75 73 68 28 6f 29 3b 62 72 65 61 6b 7d 69 5b 32 5d 26 26 61 2e 6f 70 73 2e 70 6f 70 28 29 2c 61 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 7d 6f 3d 65 2e 63 61 6c 6c 28 74 2c 61 29 7d 63 61 74 63 68 28 74 29 7b 6f 3d 5b 36 2c 74 5d 2c 72 3d 30 7d 66 69 6e 61 6c 6c 79 7b 6e 3d 69 3d 30 7d 69 66 28 35 26 6f 5b 30 5d 29 74 68 72 6f 77 20 6f 5b 31 5d 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 6f 5b 30 5d 3f 6f 5b 31 5d 3a 76 6f 69 64 20 30 Data Ascii: l=o[1];break}if(6===o[0]&&a.label<i[1]){a.label=i[1],i=o;break}if(i&&a.label<i[2]){a.label=i[2],a.ops.push(o);break}i[2]&&a.ops.pop(),a.trys.pop();continue}o=e.call(t,a)}catch(t){o=[6,t],r=0}finally{n=i=0}if(5&o[0])throw o[1];return{value:o[0]?o[1]:void 0
2023-06-06 08:40:20 UTC	6029	IN	Data Raw: 3a 72 2e 61 6c 6c 6f 77 5f 31 70 5f 63 6f 6f 6b 69 65 29 5d 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 20 6e 3d 69 2e 73 65 6e 74 28 29 2c 73 2e 6c 6f 67 45 72 72 6f 72 28 6e 29 2c 5b 32 2c 21 31 5d 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 5b 32 5d 7d 7d 29 29 7d 29 29 7d 28 6e 29 7d 7d 3b 65 2e 63 61 63 68 65 41 63 63 52 65 71 75 65 73 74 41 6e 64 53 61 76 65 54 77 63 6c 69 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 65 2e 63 61 63 68 65 41 63 63 52 65 71 75 65 73 74 28 74 2c 6e 29 2c 65 2e 73 61 76 65 54 77 63 6c 69 64 49 6e 74 6f 43 6f 6f 6b 69 65 28 74 29 7d 3b 65 2e 67 65 74 54 77 63 6c 69 64 46 72 6f 6d 43 6f 6f 6b 69 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 70 61 72 73 65 28 64 65 63 6f 64 65 55 52 Data Ascii: :r.allow_1p_cookie)];case 3:return n=i.sent(),s.logError(n),[2,!1];case 4:return[2]}}))}))}(n)}};e.cacheAccRequestAndSaveTwclid=function(t,n){e.cacheAccRequest(t,n),e.saveTwclidIntoCookie(t)};e.getTwclidFromCookie=function(){try{return JSON.parse(decodeUR
2023-06-06 08:40:20 UTC	6031	IN	Data Raw: 6e 2e 74 6f 53 74 72 69 6e 67 28 29 29 3b 65 2e 63 61 63 68 65 41 63 63 52 65 71 75 65 73 74 41 6e 64 53 61 76 65 54 77 63 6c 69 64 28 74 2c 72 29 7d 7d 3b 65 2e 73 61 76 65 54 77 63 6c 69 64 49 6e 74 6f 43 6f 6f 6b 69 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 72 28 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 72 2c 6f 2c 75 2c 6c 2c 66 2c 64 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 73 77 69 74 63 68 28 69 2e 6c 61 62 65 6c 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 28 6e 3d 65 2e 67 65 74 54 77 63 6c 69 64 46 72 6f 6d 48 72 65 66 28 29 29 3f 5b 34 2c 65 2e 41 63 63 52 65 71 75 65 73 74 43 61 63 68 65 5b 74 5d 5d 3a 5b Data Ascii: n.toString());e.cacheAccRequestAndSaveTwclid(t,r)}};e.saveTwclidIntoCookie=function(t){return r(void 0,void 0,void 0,(function(){var n,r,o,u,l,f,d;return i(this,(function(i){switch(i.label){case 0:return(n=e.getTwclidFromHref())?[4,e.AccRequestCache[t]]:[
2023-06-06 08:40:20 UTC	6032	IN	Data Raw: 3d 6e 28 35 34 39 34 29 3b 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 76 30 3d 22 69 22 2c 74 2e 76 31 3d 22 31 2f 69 22 7d 28 65 2e 41 64 73 41 70 69 56 65 72 73 69 6f 6e 7c 7c 28 65 2e 41 64 73 41 70 69 56 65 72 73 69 6f 6e 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 5b 74 2e 55 4e 4b 4e 4f 57 4e 3d 30 5d 3d 22 55 4e 4b 4e 4f 57 4e 22 2c 74 5b 74 2e 53 45 54 5f 54 52 41 43 4b 5f 50 49 44 3d 31 5d 3d 22 53 45 54 5f 54 52 41 43 4b 5f 50 49 44 22 2c 74 5b 74 2e 55 57 54 5f 54 52 41 43 4b 3d 32 5d 3d 22 55 57 54 5f 54 52 41 43 4b 22 2c 74 5b 74 2e 4f 4e 45 54 41 47 5f 43 4f 4e 46 49 47 3d 33 5d 3d 22 4f 4e 45 54 41 47 5f 43 4f 4e 46 49 47 22 2c 74 5b 74 2e 4f 4e 45 54 41 47 5f 45 56 45 4e 54 3d 34 5d 3d 22 4f 4e 45 54 41 47 5f 45 56 45 4e 54 Data Ascii: =n(5494);!function(t){t.v0="i",t.v1="1/i"}(e.AdsApiVersion\|\|(e.AdsApiVersion={})),function(t){t[t.UNKNOWN=0]="UNKNOWN",t[t.SET_TRACK_PID=1]="SET_TRACK_PID",t[t.UWT_TRACK=2]="UWT_TRACK",t[t.ONETAG_CONFIG=3]="ONETAG_CONFIG",t[t.ONETAG_EVENT=4]="ONETAG_EVENT
2023-06-06 08:40:20 UTC	6033	IN	Data Raw: 73 22 29 29 26 26 28 65 2e 74 77 5f 70 72 6f 64 75 63 74 5f 69 64 3d 63 28 74 2c 22 63 6f 6e 74 65 6e 74 5f 69 64 73 22 29 5b 30 5d 29 2c 75 28 74 2c 22 70 61 72 74 6e 65 72 5f 69 64 22 29 26 26 28 65 2e 6f 63 74 5f 70 5f 69 64 3d 63 28 74 2c 22 70 61 72 74 6e 65 72 5f 69 64 22 29 29 2c 65 7d 2c 65 2e 67 65 74 50 72 6f 70 65 72 74 79 43 69 3d 63 3b 65 2e 67 65 74 57 69 6c 64 63 61 72 64 44 6f 6d 61 69 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 22 2e 22 29 2c 65 3d 5b 5d 2c 6e 3d 32 3b 6e 3c 3d 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 65 2e 70 75 73 68 28 22 2e 22 2b 74 2e 73 6c 69 63 65 28 2d 31 2a 6e 29 2e 6a 6f 69 6e 28 22 2e 22 29 29 3b 72 65 74 75 72 6e Data Ascii: s"))&&(e.tw_product_id=c(t,"content_ids")[0]),u(t,"partner_id")&&(e.oct_p_id=c(t,"partner_id")),e},e.getPropertyCi=c;e.getWildcardDomains=function(){for(var t=location.hostname.split("."),e=[],n=2;n<=t.length;n++)e.push("."+t.slice(-1*n).join("."));return
2023-06-06 08:40:20 UTC	6035	IN	Data Raw: 72 65 74 75 72 6e 20 74 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 2e 65 78 70 6f 72 74 73 7d 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 65 29 6e 2e 6f 28 65 2c 72 29 26 26 21 6e 2e 6f 28 74 2c 72 29 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 72 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 65 5b 72 5d 7d 29 7d 2c 6e 2e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 29 72 65 74 75 72 6e 20 67 6c 6f 62 61 6c 54 68 69 73 3b 74 72 79 7b 72 65 74 75 72 6e 20 74 68 69 73 7c 7c 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 72 Data Ascii: return t[r].call(o.exports,o,o.exports,n),o.exports}n.d=function(t,e){for(var r in e)n.o(e,r)&&!n.o(t,r)&&Object.defineProperty(t,r,{enumerable:!0,get:e[r]})},n.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("r

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
21	192.168.2.4	49717	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:20 UTC	306	OUT	GET /front_end/front_end_files/notification.css HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hs-login.online/front_end/front_end_files/ursula.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:20 UTC	347	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:20 GMT Content-Type: text/css Content-Length: 525 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:45 GMT ETag: "20d-5fd6543424458" Accept-Ranges: bytes Vary: Accept-Encoding
2023-06-06 08:38:20 UTC	348	IN	Data Raw: 2e 75 72 73 75 6c 61 20 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 42 6f 78 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 61 66 39 64 30 3b 20 0a 09 70 61 64 64 69 6e 67 3a 20 32 34 70 78 20 32 30 70 78 3b 20 09 0a 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 65 38 65 30 31 32 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 0a 09 68 65 69 67 68 74 3a 31 30 30 25 3b 0a 7d 0a 2e 75 72 73 75 6c 61 20 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 42 6f 78 20 73 70 61 6e 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 20 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 30 70 78 3b 0a 7d 0a 2e 75 72 73 75 6c 61 20 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 42 6f 78 20 73 70 61 6e 2e 6e 65 77 4d 73 67 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: .ursula .notificationBox{background: #faf9d0; padding: 24px 20px; border: 1px solid #e8e012;overflow:hidden;height:100%;}.ursula .notificationBox span{font-size: 16px; line-height: 20px;}.ursula .notificationBox span.newMsg{background

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
210	192.168.2.4	50104	63.140.62.160	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:20 UTC	5976	OUT	GET /b/ss/hsbc-cmb-uk,hsbc-cmb-rollup/1/JS-2.22.3/s49908292679322?AQB=1&ndh=1&pf=1&t=6%2F5%2F2023%2010%3A40%3A48%202%20-120&sdid=639B90B940041617-383BD356B65AA4B4&mid=32901345357897319322582280331317906370&aamlh=6&ce=UTF-8&ns=hsbcbankglobal&cdp=2&cl=64454400&pageName=Business%3AHome&g=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&cc=USD&server=www.business.hsbc.uk&events=event5&aamb=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&v1=Business%3AHome&c2=pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage&v2=Business%3AHome&v3=www.business.hsbc.uk%2Fen-gb&v4=pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage&v5=CMB&c6=hsbc-cmb-uk%2Chsbc-cmb-rollup&v6=Business&c7=10%3A40%20AM%7CTuesday&v10=HSBC&v11=Europe&v12=en-GB&c13=Accept%20All&v13=United%20Kingdom&v14=Web&v15=10%3A40%20AM%7CTuesday&v16=hsbc-cmb-uk%2Chsbc-cmb-rollup&c17=uk-cmb&v17=uk-cmb&v98=Full%20Consent&v99=Accept%20All&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=913&mcorgid=8BB4398F57FF7F980A495E57%40AdobeOrg&AQE=1 HTTP/1.1 Host: hsbcglobalcmb.sc.omtrdc.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:20 UTC	5978	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Tue, 06 Jun 2023 08:40:20 GMT expires: Mon, 05 Jun 2023 08:40:20 GMT last-modified: Wed, 07 Jun 2023 08:40:20 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag etag: 3620745092230250496-4619610892381603349 vary: * content-type: image/gif;charset=utf-8 content-length: 43 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2023-06-06 08:40:20 UTC	5978	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
211	192.168.2.4	50107	52.49.176.241	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:20 UTC	5977	OUT	GET /ibs:dpid=411&dpuuid=ZH7w9AAAAGsdtANn HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: demdex=32441017531906322422556814171626086572
2023-06-06 08:40:20 UTC	6045	IN	HTTP/1.1 200 OK Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Content-Type: image/gif DCS: dcs-prod-irl1-1-v048-090422bc6.edge-irl1.demdex.com 5 ms Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Pragma: no-cache set-cookie: dpm=32441017531906322422556814171626086572; Max-Age=15552000; Expires=Sun, 03 Dec 2023 08:40:20 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=32441017531906322422556814171626086572; Max-Age=15552000; Expires=Sun, 03 Dec 2023 08:40:20 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-TID: TiEZ0rDaSVs= Content-Length: 42 Connection: Close
2023-06-06 08:40:20 UTC	6046	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
212	192.168.2.4	50108	54.74.97.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:20 UTC	6035	OUT	GET /hsbc/uk-cmb/01888fdcaa1f00511f81618bb8280006f002206700918?callback=utag.ut%5B%22writevauk-cmb%22%5D&rnd=1686040848993 HTTP/1.1 Host: visitor-service-eu-west-1.tealiumiq.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TAPID=hsbc/uk-cmb>01888fdcaa1f00511f81618bb8280006f002206700918\|
2023-06-06 08:40:20 UTC	6046	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:40:20 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 29 Connection: close X-Region: eu-west-1 X-NodeId: i-09644d7dfff7690dd X-Version: 018752aa776d74895d87a1c24d937d42b559f87e-SNAPSHOT Strict-Transport-Security: max-age=31536000; includeSubdomains
2023-06-06 08:40:20 UTC	6047	IN	Data Raw: 75 74 61 67 2e 75 74 5b 22 77 72 69 74 65 76 61 75 6b 2d 63 6d 62 22 5d 28 7b 7d 29 3b Data Ascii: utag.ut["writevauk-cmb"]({});

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
213	192.168.2.4	50113	172.217.168.38	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:20 UTC	6068	OUT	GET /activityi;src=8071582;type=hsbc_000;cat=hsbc_000;ord=6128550615292;gtm=45fe35v0;auiddc=583344058.1686040849;u2=%2Fen-gb;u20=en-GB;u21=hsbc_000%7Chsbc_000%7Cstandard;uaa=x86;uab=64;uafvl=Chromium%3B104.0.5112.81%7C%2520Not%2520A%253BBrand%3B99.0.0.0%7CGoogle%2520Chrome%3B104.0.5112.81;uam=;uamb=0;uap=Windows;uapv=6.0.0;uaw=0;~oref=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb? HTTP/1.1 Host: 8071582.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:20 UTC	6077	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://8071582.fls.doubleclick.net/activityi;dc_pre=CIvSy8Gfrv8CFY5UwgodtGYOYQ;src=8071582;type=hsbc_000;cat=hsbc_000;ord=6128550615292;gtm=45fe35v0;auiddc=583344058.1686040849;u2=%2Fen-gb;u20=en-GB;u21=hsbc_000%7Chsbc_000%7Cstandard;uaa=x86;uab=64;uafvl=Chromium%3B104.0.5112.81%7C%2520Not%2520A%253BBrand%3B99.0.0.0%7CGoogle%2520Chrome%3B104.0.5112.81;uam=;uamb=0;uap=Windows;uapv=6.0.0;uaw=0;~oref=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
214	192.168.2.4	50114	172.217.168.38	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:20 UTC	6069	OUT	GET /activityi;src=8071582;type=hsbc_000;cat=hsbc_000;ord=7367362538109;gtm=45fe35v0;auiddc=583344058.1686040849;u2=%2Fen-gb;u15=pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage;u16=pws%20home;u20=en-GB;u21=hsbc_000%7Chsbc_000%7Cstandard;uaa=x86;uab=64;uafvl=Chromium%3B104.0.5112.81%7C%2520Not%2520A%253BBrand%3B99.0.0.0%7CGoogle%2520Chrome%3B104.0.5112.81;uam=;uamb=0;uap=Windows;uapv=6.0.0;uaw=0;~oref=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb? HTTP/1.1 Host: 8071582.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:20 UTC	6078	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://8071582.fls.doubleclick.net/activityi;dc_pre=CP7Vy8Gfrv8CFZlEHgIdpSYJ-A;src=8071582;type=hsbc_000;cat=hsbc_000;ord=7367362538109;gtm=45fe35v0;auiddc=583344058.1686040849;u2=%2Fen-gb;u15=pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage;u16=pws%20home;u20=en-GB;u21=hsbc_000%7Chsbc_000%7Cstandard;uaa=x86;uab=64;uafvl=Chromium%3B104.0.5112.81%7C%2520Not%2520A%253BBrand%3B99.0.0.0%7CGoogle%2520Chrome%3B104.0.5112.81;uam=;uamb=0;uap=Windows;uapv=6.0.0;uaw=0;~oref=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
215	192.168.2.4	50111	172.217.168.38	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:20 UTC	6070	OUT	GET /activityi;src=8071582;type=hsbc_000;cat=hsbc_000;ord=4515886411756;gtm=45fe35v0;auiddc=583344058.1686040849;u2=%2Fen-gb;u21=hsbc_000%7Chsbc_000%7Cstandard;uaa=x86;uab=64;uafvl=Chromium%3B104.0.5112.81%7C%2520Not%2520A%253BBrand%3B99.0.0.0%7CGoogle%2520Chrome%3B104.0.5112.81;uam=;uamb=0;uap=Windows;uapv=6.0.0;uaw=0;~oref=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb? HTTP/1.1 Host: 8071582.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:20 UTC	6079	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://8071582.fls.doubleclick.net/activityi;dc_pre=CPqtzMGfrv8CFRVBwgodzgsPDA;src=8071582;type=hsbc_000;cat=hsbc_000;ord=4515886411756;gtm=45fe35v0;auiddc=583344058.1686040849;u2=%2Fen-gb;u21=hsbc_000%7Chsbc_000%7Cstandard;uaa=x86;uab=64;uafvl=Chromium%3B104.0.5112.81%7C%2520Not%2520A%253BBrand%3B99.0.0.0%7CGoogle%2520Chrome%3B104.0.5112.81;uam=;uamb=0;uap=Windows;uapv=6.0.0;uaw=0;~oref=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
216	192.168.2.4	50117	172.217.168.38	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:20 UTC	6075	OUT	GET /activityi;src=8071582;type=hsbc_000;cat=hsbc_000;ord=1397879849022;gtm=45fe35v0;auiddc=583344058.1686040849;u2=%2Fen-gb;u20=en-GB;u21=hsbc_000%7Chsbc_000%7Cstandard;uaa=x86;uab=64;uafvl=Chromium%3B104.0.5112.81%7C%2520Not%2520A%253BBrand%3B99.0.0.0%7CGoogle%2520Chrome%3B104.0.5112.81;uam=;uamb=0;uap=Windows;uapv=6.0.0;uaw=0;~oref=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb? HTTP/1.1 Host: 8071582.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:20 UTC	6080	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://8071582.fls.doubleclick.net/activityi;dc_pre=CNDvzcGfrv8CFWZFHgIdcKAJQg;src=8071582;type=hsbc_000;cat=hsbc_000;ord=1397879849022;gtm=45fe35v0;auiddc=583344058.1686040849;u2=%2Fen-gb;u20=en-GB;u21=hsbc_000%7Chsbc_000%7Cstandard;uaa=x86;uab=64;uafvl=Chromium%3B104.0.5112.81%7C%2520Not%2520A%253BBrand%3B99.0.0.0%7CGoogle%2520Chrome%3B104.0.5112.81;uam=;uamb=0;uap=Windows;uapv=6.0.0;uaw=0;~oref=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
217	192.168.2.4	50118	172.217.168.38	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:20 UTC	6081	OUT	GET /activityi;src=8071582;type=hsbc_000;cat=hsbc_000;ord=807883971953;gtm=45fe35v0;auiddc=583344058.1686040849;u2=%2Fen-gb;u15=pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage;u16=pws%20home;u20=en-GB;u21=hsbc_000%7Chsbc_000%7Cstandard;uaa=x86;uab=64;uafvl=Chromium%3B104.0.5112.81%7C%2520Not%2520A%253BBrand%3B99.0.0.0%7CGoogle%2520Chrome%3B104.0.5112.81;uam=;uamb=0;uap=Windows;uapv=6.0.0;uaw=0;~oref=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb? HTTP/1.1 Host: 8071582.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:21 UTC	6083	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://8071582.fls.doubleclick.net/activityi;dc_pre=CJ7y2cGfrv8CFVRCwgod1KANgA;src=8071582;type=hsbc_000;cat=hsbc_000;ord=807883971953;gtm=45fe35v0;auiddc=583344058.1686040849;u2=%2Fen-gb;u15=pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage;u16=pws%20home;u20=en-GB;u21=hsbc_000%7Chsbc_000%7Cstandard;uaa=x86;uab=64;uafvl=Chromium%3B104.0.5112.81%7C%2520Not%2520A%253BBrand%3B99.0.0.0%7CGoogle%2520Chrome%3B104.0.5112.81;uam=;uamb=0;uap=Windows;uapv=6.0.0;uaw=0;~oref=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
218	192.168.2.4	50080	142.250.203.100	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:21 UTC	6082	OUT	GET /pagead/1p-user-list/951694704/?random=1686040849215&cv=9&fst=1686038400000&num=1&guid=ON&eid=466465926&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=120&u_java=false&u_nplug=0&u_nmime=0&sendb=1&frm=0&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&async=1&fmt=3&is_vtc=1&random=1331164780&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:21 UTC	6085	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-06-06 08:40:21 UTC	6085	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
219	192.168.2.4	50122	172.217.168.38	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:21 UTC	6085	OUT	GET /activityi;dc_pre=CIvSy8Gfrv8CFY5UwgodtGYOYQ;src=8071582;type=hsbc_000;cat=hsbc_000;ord=6128550615292;gtm=45fe35v0;auiddc=583344058.1686040849;u2=%2Fen-gb;u20=en-GB;u21=hsbc_000%7Chsbc_000%7Cstandard;uaa=x86;uab=64;uafvl=Chromium%3B104.0.5112.81%7C%2520Not%2520A%253BBrand%3B99.0.0.0%7CGoogle%2520Chrome%3B104.0.5112.81;uam=;uamb=0;uap=Windows;uapv=6.0.0;uaw=0;~oref=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb? HTTP/1.1 Host: 8071582.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: test_cookie=CheckForPermission
2023-06-06 08:40:21 UTC	6086	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:21 GMT Expires: Tue, 06 Jun 2023 08:40:21 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUns48UTPY6tfykgFpmYKEccwlytDrmadeJtnOrRIMIY3UfBQv7aKfKqAxGaXeg; expires=Thu, 05-Jun-2025 08:40:21 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-06-06 08:40:21 UTC	6087	IN	Data Raw: 32 37 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 49 76 53 79 38 47 66 72 76 38 43 46 59 Data Ascii: 271<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CIvSy8Gfrv8CFY
2023-06-06 08:40:21 UTC	6088	IN	Data Raw: 73 72 63 3d 38 30 37 31 35 38 32 3b 74 79 70 65 3d 68 73 62 63 5f 30 30 30 3b 63 61 74 3d 68 73 62 63 5f 30 30 30 3b 6f 72 64 3d 36 31 32 38 35 35 30 36 31 35 32 39 32 3b 67 74 6d 3d 34 35 66 65 33 35 76 30 3b 61 75 69 64 64 63 3d 2a 3b 75 32 3d 25 32 46 65 6e 2d 67 62 3b 75 32 30 3d 65 6e 2d 47 42 3b 75 32 31 3d 68 73 62 63 5f 30 30 30 25 37 43 68 73 62 63 5f 30 30 30 25 37 43 73 74 61 6e 64 61 72 64 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 43 68 72 6f 6d 69 75 6d 25 33 42 31 30 34 2e 30 2e 35 31 31 32 2e 38 31 25 37 43 25 32 35 32 30 4e 6f 74 25 32 35 32 30 41 25 32 35 33 42 42 72 61 6e 64 25 33 42 39 39 2e 30 2e 30 2e 30 25 37 43 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 30 34 2e 30 2e 35 31 31 32 2e 38 31 Data Ascii: src=8071582;type=hsbc_000;cat=hsbc_000;ord=6128550615292;gtm=45fe35v0;auiddc=*;u2=%2Fen-gb;u20=en-GB;u21=hsbc_000%7Chsbc_000%7Cstandard;uaa=x86;uab=64;uafvl=Chromium%3B104.0.5112.81%7C%2520Not%2520A%253BBrand%3B99.0.0.0%7CGoogle%2520Chrome%3B104.0.5112.81
2023-06-06 08:40:21 UTC	6088	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
22	192.168.2.4	49718	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:20 UTC	345	OUT	GET /front_end/front_end_files/reset.css HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hs-login.online/front_end/front_end_files/ursula.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:20 UTC	348	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:20 GMT Content-Type: text/css Content-Length: 1472 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:47 GMT ETag: "5c0-5fd65435cf07c" Accept-Ranges: bytes Vary: Accept-Encoding
2023-06-06 08:38:20 UTC	348	IN	Data Raw: 68 74 6d 6c 2c 20 62 6f 64 79 2c 20 64 69 76 2c 20 73 70 61 6e 2c 20 6f 62 6a 65 63 74 2c 20 69 66 72 61 6d 65 2c 20 68 31 2c 20 68 32 2c 20 68 33 2c 20 68 34 2c 20 68 35 2c 20 68 36 2c 20 70 2c 20 62 6c 6f 63 6b 71 75 6f 74 65 2c 20 70 72 65 2c 20 61 62 62 72 2c 20 61 64 64 72 65 73 73 2c 20 63 69 74 65 2c 20 63 6f 64 65 2c 20 64 65 6c 2c 20 64 66 6e 2c 20 69 6d 67 2c 20 69 6e 73 2c 20 6b 62 64 2c 20 71 2c 20 73 61 6d 70 2c 20 73 75 62 2c 20 73 75 70 2c 20 76 61 72 2c 20 64 6c 2c 20 64 74 2c 20 64 64 2c 20 6f 6c 2c 20 75 6c 2c 20 6c 69 2c 20 66 69 65 6c 64 73 65 74 2c 20 66 6f 72 6d 2c 20 6c 61 62 65 6c 2c 20 6c 65 67 65 6e 64 2c 20 74 61 62 6c 65 2c 20 63 61 70 74 69 6f 6e 2c 20 74 62 6f 64 79 2c 20 74 66 6f 6f 74 2c 20 74 68 65 61 64 2c 20 74 72 2c 20 Data Ascii: html, body, div, span, object, iframe, h1, h2, h3, h4, h5, h6, p, blockquote, pre, abbr, address, cite, code, del, dfn, img, ins, kbd, q, samp, sub, sup, var, dl, dt, dd, ol, ul, li, fieldset, form, label, legend, table, caption, tbody, tfoot, thead, tr,

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
220	192.168.2.4	50121	172.217.168.38	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:21 UTC	6088	OUT	GET /activityi;dc_pre=CP7Vy8Gfrv8CFZlEHgIdpSYJ-A;src=8071582;type=hsbc_000;cat=hsbc_000;ord=7367362538109;gtm=45fe35v0;auiddc=583344058.1686040849;u2=%2Fen-gb;u15=pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage;u16=pws%20home;u20=en-GB;u21=hsbc_000%7Chsbc_000%7Cstandard;uaa=x86;uab=64;uafvl=Chromium%3B104.0.5112.81%7C%2520Not%2520A%253BBrand%3B99.0.0.0%7CGoogle%2520Chrome%3B104.0.5112.81;uam=;uamb=0;uap=Windows;uapv=6.0.0;uaw=0;~oref=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb? HTTP/1.1 Host: 8071582.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: test_cookie=CheckForPermission
2023-06-06 08:40:21 UTC	6094	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:21 GMT Expires: Tue, 06 Jun 2023 08:40:21 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUlC5yQaPHaeF9A0tSrfN6flL2fTxrRPEETcHVcnw0BLKS3grbW_wan3GgQgOuk; expires=Thu, 05-Jun-2025 08:40:21 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-06-06 08:40:21 UTC	6095	IN	Data Raw: 32 63 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 50 37 56 79 38 47 66 72 76 38 43 46 5a Data Ascii: 2c7<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CP7Vy8Gfrv8CFZ
2023-06-06 08:40:21 UTC	6095	IN	Data Raw: 73 72 63 3d 38 30 37 31 35 38 32 3b 74 79 70 65 3d 68 73 62 63 5f 30 30 30 3b 63 61 74 3d 68 73 62 63 5f 30 30 30 3b 6f 72 64 3d 37 33 36 37 33 36 32 35 33 38 31 30 39 3b 67 74 6d 3d 34 35 66 65 33 35 76 30 3b 61 75 69 64 64 63 3d 2a 3b 75 32 3d 25 32 46 65 6e 2d 67 62 3b 75 31 35 3d 70 77 73 25 32 30 25 33 41 25 32 30 70 77 73 25 32 30 68 6f 6d 65 25 32 30 25 33 41 25 32 30 6e 6f 25 32 30 73 65 67 6d 65 6e 74 25 32 30 25 33 41 25 32 30 70 77 73 25 32 30 68 6f 6d 65 70 61 67 65 3b 75 31 36 3d 70 77 73 25 32 30 68 6f 6d 65 3b 75 32 30 3d 65 6e 2d 47 42 3b 75 32 31 3d 68 73 62 63 5f 30 30 30 25 37 43 68 73 62 63 5f 30 30 30 25 37 43 73 74 61 6e 64 61 72 64 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 43 68 72 6f 6d 69 75 6d 25 33 42 31 Data Ascii: src=8071582;type=hsbc_000;cat=hsbc_000;ord=7367362538109;gtm=45fe35v0;auiddc=*;u2=%2Fen-gb;u15=pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage;u16=pws%20home;u20=en-GB;u21=hsbc_000%7Chsbc_000%7Cstandard;uaa=x86;uab=64;uafvl=Chromium%3B1
2023-06-06 08:40:21 UTC	6096	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
221	192.168.2.4	50134	108.138.36.108	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:21 UTC	6089	OUT	GET /partner/3029025,%202739145/domain/business.hsbc.uk/token HTTP/1.1 Host: cdn.linkedin.oribi.io Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Accept: * sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.business.hsbc.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:21 UTC	6100	IN	HTTP/1.1 200 OK Content-Type: application/json Transfer-Encoding: chunked Connection: close Date: Tue, 06 Jun 2023 08:40:21 GMT Access-Control-Allow-Origin: * Cache-Control: public, max-age=3600 Vary: accept-encoding X-Cache: Miss from cloudfront Via: 1.1 67393fa6b3a865c1a8252acac0aa5cbc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P2 X-Amz-Cf-Id: wxNmCjUKT5znJmLN4OVKNHitplFL8gYZCy1ZTY2nQ8FfE32Bziz_Hw==
2023-06-06 08:40:21 UTC	6100	IN	Data Raw: 32 34 0d 0a 7b 22 61 6c 6c 6f 77 65 64 22 3a 66 61 6c 73 65 2c 22 73 63 72 69 70 74 54 6f 6b 65 6e 22 3a 6e 75 6c 6c 7d 0d 0a Data Ascii: 24{"allowed":false,"scriptToken":null}
2023-06-06 08:40:21 UTC	6100	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
222	192.168.2.4	50123	172.217.168.38	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:21 UTC	6090	OUT	GET /activityi;dc_pre=CPqtzMGfrv8CFRVBwgodzgsPDA;src=8071582;type=hsbc_000;cat=hsbc_000;ord=4515886411756;gtm=45fe35v0;auiddc=583344058.1686040849;u2=%2Fen-gb;u21=hsbc_000%7Chsbc_000%7Cstandard;uaa=x86;uab=64;uafvl=Chromium%3B104.0.5112.81%7C%2520Not%2520A%253BBrand%3B99.0.0.0%7CGoogle%2520Chrome%3B104.0.5112.81;uam=;uamb=0;uap=Windows;uapv=6.0.0;uaw=0;~oref=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb? HTTP/1.1 Host: 8071582.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: test_cookie=CheckForPermission
2023-06-06 08:40:21 UTC	6096	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:21 GMT Expires: Tue, 06 Jun 2023 08:40:21 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUkoqF3L9f7cTfnBAWP2CdtxPD97bVavCIWb8W9K89ZpIAW_gURZbUdzXQfWl0I; expires=Thu, 05-Jun-2025 08:40:21 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-06-06 08:40:21 UTC	6096	IN	Data Raw: 32 36 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 50 71 74 7a 4d 47 66 72 76 38 43 46 52 Data Ascii: 267<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CPqtzMGfrv8CFR
2023-06-06 08:40:21 UTC	6097	IN	Data Raw: 73 72 63 3d 38 30 37 31 35 38 32 3b 74 79 70 65 3d 68 73 62 63 5f 30 30 30 3b 63 61 74 3d 68 73 62 63 5f 30 30 30 3b 6f 72 64 3d 34 35 31 35 38 38 36 34 31 31 37 35 36 3b 67 74 6d 3d 34 35 66 65 33 35 76 30 3b 61 75 69 64 64 63 3d 2a 3b 75 32 3d 25 32 46 65 6e 2d 67 62 3b 75 32 31 3d 68 73 62 63 5f 30 30 30 25 37 43 68 73 62 63 5f 30 30 30 25 37 43 73 74 61 6e 64 61 72 64 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 43 68 72 6f 6d 69 75 6d 25 33 42 31 30 34 2e 30 2e 35 31 31 32 2e 38 31 25 37 43 25 32 35 32 30 4e 6f 74 25 32 35 32 30 41 25 32 35 33 42 42 72 61 6e 64 25 33 42 39 39 2e 30 2e 30 2e 30 25 37 43 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 30 34 2e 30 2e 35 31 31 32 2e 38 31 3b 75 61 6d 3d 3b 75 61 6d 62 Data Ascii: src=8071582;type=hsbc_000;cat=hsbc_000;ord=4515886411756;gtm=45fe35v0;auiddc=*;u2=%2Fen-gb;u21=hsbc_000%7Chsbc_000%7Cstandard;uaa=x86;uab=64;uafvl=Chromium%3B104.0.5112.81%7C%2520Not%2520A%253BBrand%3B99.0.0.0%7CGoogle%2520Chrome%3B104.0.5112.81;uam=;uamb
2023-06-06 08:40:21 UTC	6097	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
223	192.168.2.4	50119	63.140.62.160	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:21 UTC	6091	OUT	GET /b/ss/hsbc-cmb-uk,hsbc-cmb-rollup/1/JS-2.22.3/s49908292679322?AQB=1&ndh=1&pf=1&t=6%2F5%2F2023%2010%3A40%3A48%202%20-120&sdid=639B90B940041617-383BD356B65AA4B4&mid=32901345357897319322582280331317906370&aamlh=6&ce=UTF-8&ns=hsbcbankglobal&cdp=2&cl=64454400&pageName=Business%3AHome&g=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&cc=USD&server=www.business.hsbc.uk&events=event5&aamb=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&v1=Business%3AHome&c2=pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage&v2=Business%3AHome&v3=www.business.hsbc.uk%2Fen-gb&v4=pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage&v5=CMB&c6=hsbc-cmb-uk%2Chsbc-cmb-rollup&v6=Business&c7=10%3A40%20AM%7CTuesday&v10=HSBC&v11=Europe&v12=en-GB&c13=Accept%20All&v13=United%20Kingdom&v14=Web&v15=10%3A40%20AM%7CTuesday&v16=hsbc-cmb-uk%2Chsbc-cmb-rollup&c17=uk-cmb&v17=uk-cmb&v98=Full%20Consent&v99=Accept%20All&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=913&mcorgid=8BB4398F57FF7F980A495E57%40AdobeOrg&AQE=1 HTTP/1.1 Host: hsbcglobalcmb.sc.omtrdc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:21 UTC	6093	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Tue, 06 Jun 2023 08:40:21 GMT expires: Mon, 05 Jun 2023 08:40:21 GMT last-modified: Wed, 07 Jun 2023 08:40:21 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag etag: 3620745093402361856-4619422051787522428 vary: * content-type: image/gif;charset=utf-8 content-length: 43 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2023-06-06 08:40:21 UTC	6094	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
224	192.168.2.4	50126	104.244.42.133	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:21 UTC	6092	OUT	GET /i/adsct?bci=3&eci=2&event_id=e9bd595a-cf13-441f-89c2-2f047b729db9&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=1ee52750-caa9-462d-b6ec-587d004e8ac1&tw_document_href=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=ny1a1&type=javascript&version=2.3.29 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:21 UTC	6100	IN	HTTP/1.1 200 OK date: Tue, 06 Jun 2023 08:40:21 GMT perf: 7626143928 server: tsa_o set-cookie: muc_ads=b5dc3a7d-52d4-41db-920a-66bc28ac6ef5; Max-Age=63072000; Expires=Thu, 05 Jun 2025 08:40:21 GMT; Path=/; Domain=t.co; Secure; SameSite=None content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 693510181415539b strict-transport-security: max-age=0 x-response-time: 102 x-connection-hash: 1d4bbc29b888a66d0d30a25a0f07ec37196cd1735b0757ef750950b46ab755c3 connection: close
2023-06-06 08:40:21 UTC	6101	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
225	192.168.2.4	50125	104.244.42.195	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:21 UTC	6097	OUT	GET /i/adsct?bci=3&eci=2&event_id=e9bd595a-cf13-441f-89c2-2f047b729db9&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=1ee52750-caa9-462d-b6ec-587d004e8ac1&tw_document_href=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=ny1a1&type=javascript&version=2.3.29 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:21 UTC	6104	IN	HTTP/1.1 200 OK date: Tue, 06 Jun 2023 08:40:21 GMT perf: 7626143928 server: tsa_o set-cookie: personalization_id="v1_3DSgJqCNGL3VyphFos6vsQ=="; Max-Age=63072000; Expires=Thu, 05 Jun 2025 08:40:21 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 5db1325fd1a73c46 strict-transport-security: max-age=631138519 x-response-time: 115 x-connection-hash: 2201bd6bd6b26ffe8611344efea988765b3c8bbb6c46154e8797e6deaad2e006 connection: close
2023-06-06 08:40:21 UTC	6105	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
226	192.168.2.4	50128	192.29.203.179	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:21 UTC	6098	OUT	GET /visitor/v200/svrGP?pps=3&siteid=1706134858&ref=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&ref2=elqNone&tzo=-60&ms=658&optin=disabled HTTP/1.1 Host: s1706134858.t.eloqua.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:21 UTC	6099	IN	HTTP/1.1 302 Found Cache-Control: no-store Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Location: https://s1706134858.t.eloqua.com/visitor/v200/svrGP.aspx?pps=3&siteid=1706134858&ref=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&ref2=elqNone&tzo=-60&ms=658&optin=disabled&elqCookie=1 X-Robots-Tag: noindex, nofollow X-Xss-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Set-Cookie: ELOQUA=GUID=5E26E50CA9DC49E18BC385F65984233A; domain=.eloqua.com; expires=Sat, 06-Jul-2024 08:40:21 GMT; path=/;SameSite=None; secure Set-Cookie: ELQSTATUS=OK; domain=.eloqua.com; expires=Sat, 06-Jul-2024 08:40:21 GMT; path=/;SameSite=None; secure P3P: CP="IDC DSP COR DEVa TAIa OUR BUS PHY ONL UNI COM NAV CNT STA", X-Content-Type-Options: nosniff Date: Tue, 06 Jun 2023 08:40:21 GMT Connection: close Content-Length: 327
2023-06-06 08:40:21 UTC	6100	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 31 37 30 36 31 33 34 38 35 38 2e 74 2e 65 6c 6f 71 75 61 2e 63 6f 6d 2f 76 69 73 69 74 6f 72 2f 76 32 30 30 2f 73 76 72 47 50 2e 61 73 70 78 3f 70 70 73 3d 33 26 61 6d 70 3b 73 69 74 65 69 64 3d 31 37 30 36 31 33 34 38 35 38 26 61 6d 70 3b 72 65 66 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 62 75 73 69 6e 65 73 73 2e 68 73 62 63 2e 75 6b 25 32 46 65 6e 2d 67 62 26 61 6d 70 3b 72 65 66 32 3d 65 6c 71 4e 6f 6e 65 26 61 6d 70 3b 74 7a 6f 3d 2d 36 30 26 61 6d 70 3b 6d 73 3d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://s1706134858.t.eloqua.com/visitor/v200/svrGP.aspx?pps=3&siteid=1706134858&ref=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&ref2=elqNone&tzo=-60&ms=

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
227	192.168.2.4	50124	172.217.168.38	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:21 UTC	6101	OUT	GET /activityi;dc_pre=CNDvzcGfrv8CFWZFHgIdcKAJQg;src=8071582;type=hsbc_000;cat=hsbc_000;ord=1397879849022;gtm=45fe35v0;auiddc=583344058.1686040849;u2=%2Fen-gb;u20=en-GB;u21=hsbc_000%7Chsbc_000%7Cstandard;uaa=x86;uab=64;uafvl=Chromium%3B104.0.5112.81%7C%2520Not%2520A%253BBrand%3B99.0.0.0%7CGoogle%2520Chrome%3B104.0.5112.81;uam=;uamb=0;uap=Windows;uapv=6.0.0;uaw=0;~oref=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb? HTTP/1.1 Host: 8071582.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: test_cookie=CheckForPermission
2023-06-06 08:40:21 UTC	6105	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:21 GMT Expires: Tue, 06 Jun 2023 08:40:21 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUmLljnRfWhazMbdRICSZdBr5KwzoG0tjNxWaUYIr81_jeIANs0YSAvOgegYiqw; expires=Thu, 05-Jun-2025 08:40:21 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-06-06 08:40:21 UTC	6106	IN	Data Raw: 32 37 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 4e 44 76 7a 63 47 66 72 76 38 43 46 57 Data Ascii: 271<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CNDvzcGfrv8CFW
2023-06-06 08:40:21 UTC	6106	IN	Data Raw: 73 72 63 3d 38 30 37 31 35 38 32 3b 74 79 70 65 3d 68 73 62 63 5f 30 30 30 3b 63 61 74 3d 68 73 62 63 5f 30 30 30 3b 6f 72 64 3d 31 33 39 37 38 37 39 38 34 39 30 32 32 3b 67 74 6d 3d 34 35 66 65 33 35 76 30 3b 61 75 69 64 64 63 3d 2a 3b 75 32 3d 25 32 46 65 6e 2d 67 62 3b 75 32 30 3d 65 6e 2d 47 42 3b 75 32 31 3d 68 73 62 63 5f 30 30 30 25 37 43 68 73 62 63 5f 30 30 30 25 37 43 73 74 61 6e 64 61 72 64 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 43 68 72 6f 6d 69 75 6d 25 33 42 31 30 34 2e 30 2e 35 31 31 32 2e 38 31 25 37 43 25 32 35 32 30 4e 6f 74 25 32 35 32 30 41 25 32 35 33 42 42 72 61 6e 64 25 33 42 39 39 2e 30 2e 30 2e 30 25 37 43 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 30 34 2e 30 2e 35 31 31 32 2e 38 31 Data Ascii: src=8071582;type=hsbc_000;cat=hsbc_000;ord=1397879849022;gtm=45fe35v0;auiddc=*;u2=%2Fen-gb;u20=en-GB;u21=hsbc_000%7Chsbc_000%7Cstandard;uaa=x86;uab=64;uafvl=Chromium%3B104.0.5112.81%7C%2520Not%2520A%253BBrand%3B99.0.0.0%7CGoogle%2520Chrome%3B104.0.5112.81
2023-06-06 08:40:21 UTC	6106	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
228	192.168.2.4	50129	157.240.17.15	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:21 UTC	6102	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:21 UTC	6106	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"} content-security-policy: default-src facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com data: blob: 'self';script-src .fbcdn.net .facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;connect-src .fbcdn.net .facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0; x-fb-rlafr: 0 document-policy: force-load-at-top permissions-policy: accelerometer=(), ambient-light-sensor=(), bluetooth=(), gyroscope=(), hid=(), idle-detection=(), magnetometer=(), midi=(), payment=(), screen-wake-lock=(), serial=(), usb=() cross-origin-resource-policy: cross-origin cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin-allow-popups Pragma: public Cache-Control: public, max-age=1200 Expires: Sat, 01 Jan 2000 00:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-Frame-Options: DENY Strict-Transport-Security: max-age=31536000; preload; includeSubDomains X-FB-Debug: fAtuvV4lya1kNH6ow6elHc6QmSmbrC9vMy7oW6JSzcAL84XCWQjurMOw5WuaiXxlSaksUZAuirPyUgbaYjOkpQ== X-FB-TRIP-ID: 1679558926 Date: Tue, 06 Jun 2023 08:40:21 GMT Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 108571
2023-06-06 08:40:21 UTC	6108	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2023-06-06 08:40:21 UTC	6109	IN	Data Raw: 22 29 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 3a 20 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 29 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3d 21 30 2c 65 3d 21 31 2c 66 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 67 3d 61 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 Data Ascii: ");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;var g=function(){function a(a,b){var c=[],d=!0,e=!1,f=void 0;try{for(var g=a[typeof Symbol==="function"?Symbol.iter
2023-06-06 08:40:21 UTC	6110	IN	Data Raw: 6c 65 7c 7c 21 31 3b 64 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 3b 22 76 61 6c 75 65 22 69 6e 20 64 26 26 28 64 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 64 2e 6b 65 79 2c 64 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 63 26 26 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 2c 63 29 3b 64 26 26 61 28 62 2c 64 29 3b 72 65 74 75 72 6e 20 62 7d 7d 28 29 2c 69 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d Data Ascii: le\|\|!1;d.configurable=!0;"value"in d&&(d.writable=!0);Object.defineProperty(a,d.key,d)}}return function(b,c,d){c&&a(b.prototype,c);d&&a(b,d);return b}}(),i=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="sym
2023-06-06 08:40:21 UTC	6112	IN	Data Raw: 73 5b 61 5d 7d 2c 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 21 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 28 62 29 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 62 5d 3d 61 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 67 65 6e 65 72 61 74 65 55 55 49 44 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 2c 69 29 7b 76 61 72 20 6a 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b Data Ascii: s[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("generateUUID",function(){return function(f,g,h,i){var j={exports:{}};
2023-06-06 08:40:21 UTC	6113	IN	Data Raw: 47 3a 31 2c 51 41 52 3a 31 2c 52 4f 4e 3a 31 2c 52 55 42 3a 31 2c 53 41 52 3a 31 2c 53 45 4b 3a 31 2c 53 47 44 3a 31 2c 54 48 42 3a 31 2c 54 52 59 3a 31 2c 54 57 44 3a 31 2c 55 53 44 3a 31 2c 55 59 55 3a 31 2c 56 45 46 3a 31 2c 56 4e 44 3a 31 2c 5a 41 52 3a 31 7d 3b 61 3d 7b 76 61 6c 75 65 3a 7b 69 73 52 65 71 75 69 72 65 64 3a 21 30 2c 74 79 70 65 3a 64 7d 2c 63 75 72 72 65 6e 63 79 3a 7b 69 73 52 65 71 75 69 72 65 64 3a 21 30 2c 74 79 70 65 3a 65 7d 7d 3b 76 61 72 20 68 3d 7b 41 64 64 50 61 79 6d 65 6e 74 49 6e 66 6f 3a 7b 7d 2c 41 64 64 54 6f 43 61 72 74 3a 7b 7d 2c 41 64 64 54 6f 57 69 73 68 6c 69 73 74 3a 7b 7d 2c 43 6f 6d 70 6c 65 74 65 52 65 67 69 73 74 72 61 74 69 6f 6e 3a 7b 7d 2c 43 6f 6e 74 61 63 74 3a 7b 7d 2c 43 75 73 74 6f 6d 45 76 65 6e 74 Data Ascii: G:1,QAR:1,RON:1,RUB:1,SAR:1,SEK:1,SGD:1,THB:1,TRY:1,TWD:1,USD:1,UYU:1,VEF:1,VND:1,ZAR:1};a={value:{isRequired:!0,type:d},currency:{isRequired:!0,type:e}};var h={AddPaymentInfo:{},AddToCart:{},AddToWishlist:{},CompleteRegistration:{},Contact:{},CustomEvent
2023-06-06 08:40:21 UTC	6114	IN	Data Raw: 5f 45 56 45 4e 54 5f 50 41 52 41 4d 22 7d 29 3b 6f 3d 6b 3b 62 72 65 61 6b 3b 63 61 73 65 20 65 3a 6f 3d 74 79 70 65 6f 66 20 6c 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 21 21 67 5b 6c 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 3b 62 72 65 61 6b 7d 69 66 28 21 6f 29 72 65 74 75 72 6e 20 6d 28 7b 65 76 65 6e 74 4e 61 6d 65 3a 61 2c 70 61 72 61 6d 3a 69 2c 74 79 70 65 3a 22 49 4e 56 41 4c 49 44 5f 50 41 52 41 4d 22 7d 29 7d 7d 7d 72 65 74 75 72 6e 20 6e 28 68 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 61 2c 63 29 7b 61 3d 70 28 61 2c 63 29 3b 61 2e 65 72 72 6f 72 26 26 62 28 61 2e 65 72 72 6f 72 29 3b 69 66 28 61 2e 77 61 72 6e 69 6e 67 73 29 66 6f 72 28 63 3d 30 3b 63 3c 61 2e 77 61 72 6e 69 6e 67 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 62 28 61 2e 77 61 72 6e Data Ascii: _EVENT_PARAM"});o=k;break;case e:o=typeof l==="string"&&!!g[l.toUpperCase()];break}if(!o)return m({eventName:a,param:i,type:"INVALID_PARAM"})}}}return n(h)}function r(a,c){a=p(a,c);a.error&&b(a.error);if(a.warnings)for(c=0;c<a.warnings.length;c++)b(a.warn
2023-06-06 08:40:21 UTC	6116	IN	Data Raw: 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 43 6f 6e 66 69 67 53 74 6f 72 65 22 29 2c 62 3d 31 65 33 2c 63 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 76 61 72 20 62 3d 61 2e 67 65 74 28 6e 75 6c 6c 2c 22 62 61 74 63 68 69 6e 67 22 29 3b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 3f 62 2e 6d 61 78 42 61 74 63 68 53 69 7a 65 3a 63 7d 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 63 3d 61 2e 67 65 74 28 6e 75 6c 6c 2c 22 62 61 74 63 68 69 6e 67 22 29 3b 72 65 74 75 72 6e 20 63 21 3d 6e 75 6c 6c 3f 63 2e 62 61 74 63 68 57 61 69 74 54 69 6d 65 4d 73 3a 62 7d 76 61 72 20 69 3d 66 75 Data Ascii: ts;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsConfigStore"),b=1e3,c=10;function d(){var b=a.get(null,"batching");return b!=null?b.maxBatchSize:c}function e(){var c=a.get(null,"batching");return c!=null?c.batchWaitTimeMs:b}var i=fu
2023-06-06 08:40:21 UTC	6117	IN	Data Raw: 74 57 69 74 68 46 69 65 6c 64 73 28 7b 64 65 6c 61 79 49 6e 4d 73 3a 62 2e 6e 75 6d 62 65 72 28 29 2c 65 78 70 65 72 69 6d 65 6e 74 4e 61 6d 65 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 73 74 72 69 6e 67 28 29 29 2c 65 6e 61 62 6c 65 4d 75 6c 74 69 45 69 64 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 5b 22 62 6f 6f 6c 65 61 6e 22 5d 28 29 29 7d 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 43 6f 65 72 63 65 41 75 74 6f 6d 61 74 69 63 4d 61 74 63 68 69 6e 67 43 6f 6e 66 69 67 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 Data Ascii: tWithFields({delayInMs:b.number(),experimentName:b.allowNull(b.string()),enableMultiEid:b.allowNull(b["boolean"]())});k.exports=a})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsCoerceAutomaticMatchingConfig",function(){return fu
2023-06-06 08:40:21 UTC	6119	IN	Data Raw: 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 43 6f 65 72 63 65 50 61 72 61 6d 65 74 65 72 45 78 74 72 61 63 74 6f 72 73 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 6a 2c 6b 29 7b 76 61 72 20 6c 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6c 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 2c 62 3d 61 2e 66 69 6c 74 65 72 2c 63 3d 61 2e 6d 61 70 2c 64 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 Data Ascii: ;f.ensureModuleRegistered("signalsFBEventsCoerceParameterExtractors",function(){return function(g,h,j,k){var l={exports:{}};l.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsUtils"),b=a.filter,c=a.map,d=f.getFbeventsModules("si
2023-06-06 08:40:21 UTC	6120	IN	Data Raw: 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 61 2e 70 61 72 61 6d 65 74 65 72 5f 73 65 6c 65 63 74 6f 72 73 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 7b 61 3d 63 28 61 2c 68 29 3b 76 61 72 20 64 3d 62 28 61 2c 42 6f 6f 6c 65 61 6e 29 3b 69 66 28 61 2e 6c 65 6e 67 74 68 3d 3d 3d 64 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 7b 70 61 72 61 6d 65 74 65 72 5f 73 65 6c 65 63 74 6f 72 73 3a 64 7d 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c Data Ascii: ractor_config;if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;a=a.parameter_selectors;if(Array.isArray(a)){a=c(a,h);var d=b(a,Boolean);if(a.length===d.length)return{parameter_selectors:d}}return null}function k(a){if(a==null\|\|
2023-06-06 08:40:21 UTC	6121	IN	Data Raw: 61 21 3d 3d 22 22 3f 61 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 63 21 3d 6e 75 6c 6c 26 26 61 21 3d 6e 75 6c 6c 3f 7b 63 6f 6e 74 65 78 74 3a 62 2c 70 61 72 61 6d 65 74 65 72 5f 74 79 70 65 3a 63 2c 76 61 6c 75 65 3a 61 7d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 61 29 7b 76 61 72 20 62 3d 65 28 61 29 3b 69 66 28 62 3d 3d 6e 75 6c 6c 7c 7c 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 63 3d 62 2e 64 6f 6d 61 69 6e 5f 75 72 69 2c 64 3d 62 2e 65 76 65 6e 74 5f 74 79 70 65 2c 66 3d 62 2e 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3b 62 3d Data Ascii: a!==""?a:null;return b!=null&&c!=null&&a!=null?{context:b,parameter_type:c,value:a}:null}function m(a){var b=e(a);if(b==null\|\|a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;var c=b.domain_uri,d=b.event_type,f=b.extractor_type;b=
2023-06-06 08:40:21 UTC	6122	IN	Data Raw: 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 3b 76 61 72 20 63 3d 61 2e 54 79 70 65 64 2c 64 3d 61 2e 63 6f 65 72 63 65 3b 66 75 6e 63 74 69 6f 6e 20 65 28 61 29 7b 61 3d 64 28 61 2c 63 2e 66 62 69 64 28 29 29 3b 69 66 28 61 3d 3d 6e 75 6c 6c 29 7b 76 61 72 20 65 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 61 29 3b 62 28 7b 70 69 78 65 6c 49 44 3a 65 21 3d 6e 75 6c 6c 3f 65 3a 22 75 6e 64 65 66 69 6e 65 64 22 2c 74 79 70 65 3a 22 49 4e 56 41 4c 49 44 5f 50 49 58 45 4c 5f 49 44 22 7d 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 72 65 74 75 72 6e 20 61 7d 6b 2e 65 78 70 6f 72 74 73 3d 65 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d Data Ascii: dules("SignalsFBEventsTyped");var c=a.Typed,d=a.coerce;function e(a){a=d(a,c.fbid());if(a==null){var e=JSON.stringify(a);b({pixelID:e!=null?e:"undefined",type:"INVALID_PIXEL_ID"});return null}return a}k.exports=e})();return k.exports}(a,b,c,d)});f.ensureM
2023-06-06 08:40:21 UTC	6124	IN	Data Raw: 29 3b 69 66 28 64 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 62 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 63 29 2e 72 65 64 75 63 65 28 66 75 6e 63 74 69 6f 6e 28 62 2c 65 29 7b 69 66 28 62 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 66 3d 63 5b 65 5d 2c 67 3d 64 5b 65 5d 3b 69 66 28 66 2e 6e 75 6c 6c 61 62 6c 65 3d 3d 3d 21 30 26 26 67 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 61 28 7b 7d 2c 62 2c 6c 28 7b 7d 2c 65 2c 6e 75 6c 6c 29 29 3b 66 3d 66 28 67 29 3b 72 65 74 75 72 6e 20 66 3d 3d 6e 75 6c 6c 3f 6e 75 6c 6c 3a 61 28 7b 7d 2c 62 2c 6c 28 7b 7d 2c 65 2c 66 29 29 7d 2c 7b 7d 29 3b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 3f 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 62 29 3a 6e 75 6c 6c 7d 6d 2e 65 78 70 6f 72 74 Data Ascii: );if(d==null)return null;b=Object.keys(c).reduce(function(b,e){if(b==null)return null;var f=c[e],g=d[e];if(f.nullable===!0&&g==null)return a({},b,l({},e,null));f=f(g);return f==null?null:a({},b,l({},e,f))},{});return b!=null?Object.freeze(b):null}m.export
2023-06-06 08:40:21 UTC	6125	IN	Data Raw: 66 69 67 53 74 6f 72 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 69 2c 6a 2c 6b 29 7b 76 61 72 20 6d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6d 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 43 6f 65 72 63 65 41 75 74 6f 6d 61 74 69 63 4d 61 74 63 68 69 6e 67 43 6f 6e 66 69 67 22 29 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 43 6f 65 72 63 65 42 61 74 63 68 69 6e 67 43 6f 6e 66 69 67 22 29 2c 63 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 Data Ascii: figStore",function(){return function(g,i,j,k){var m={exports:{}};m.exports;(function(){"use strict";var a=f.getFbeventsModules("signalsFBEventsCoerceAutomaticMatchingConfig"),b=f.getFbeventsModules("signalsFBEventsCoerceBatchingConfig"),c=f.getFbeventsMod
2023-06-06 08:40:21 UTC	6127	IN	Data Raw: 45 6e 67 69 6e 65 3a 6b 2c 65 76 65 6e 74 56 61 6c 69 64 61 74 69 6f 6e 3a 78 7d 3b 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 76 61 72 20 62 3b 6e 28 74 68 69 73 2c 61 29 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 53 74 6f 72 65 3d 28 62 3d 7b 61 75 74 6f 6d 61 74 69 63 4d 61 74 63 68 69 6e 67 3a 7b 7d 2c 62 61 74 63 68 69 6e 67 3a 7b 7d 2c 69 6e 66 65 72 72 65 64 45 76 65 6e 74 73 3a 7b 7d 2c 6d 69 63 72 6f 64 61 74 61 3a 7b 7d 2c 70 72 6f 68 69 62 69 74 65 64 53 6f 75 72 63 65 73 3a 7b 7d 2c 75 6e 77 61 6e 74 65 64 44 61 74 61 3a 7b 7d 2c 64 61 74 61 50 72 6f 63 65 73 73 69 6e 67 4f 70 74 69 6f 6e 73 3a 7b 7d 2c 6f 70 65 6e 62 72 69 64 67 65 3a 7b 7d 2c 70 61 72 61 6c 6c 65 6c 66 69 72 65 3a 7b 7d 2c 62 75 66 66 65 72 3a Data Ascii: Engine:k,eventValidation:x};a=function(){function a(){var b;n(this,a);this._configStore=(b={automaticMatching:{},batching:{},inferredEvents:{},microdata:{},prohibitedSources:{},unwantedData:{},dataProcessingOptions:{},openbridge:{},parallelfire:{},buffer:
2023-06-06 08:40:21 UTC	6128	IN	Data Raw: 3a 79 5d 7d 7d 2c 7b 6b 65 79 3a 22 67 65 74 57 69 74 68 47 6c 6f 62 61 6c 46 61 6c 6c 62 61 63 6b 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 79 3b 62 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 53 74 6f 72 65 5b 62 5d 3b 61 21 3d 6e 75 6c 6c 26 26 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 62 2c 61 29 26 26 28 63 3d 61 29 3b 72 65 74 75 72 6e 20 62 5b 63 5d 7d 7d 2c 7b 6b 65 79 3a 22 67 65 74 41 75 74 6f 6d 61 74 69 63 4d 61 74 63 68 69 6e 67 43 6f 6e 66 69 67 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 28 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6c 6c 69 6e 67 20 6c 65 67 61 63 79 20 61 70 69 20 67 65 74 41 75 74 6f 6d 61 74 69 63 4d Data Ascii: :y]}},{key:"getWithGlobalFallback",value:function(a,b){var c=y;b=this._configStore[b];a!=null&&Object.prototype.hasOwnProperty.call(b,a)&&(c=a);return b[c]}},{key:"getAutomaticMatchingConfig",value:function(a){g(new Error("Calling legacy api getAutomaticM
2023-06-06 08:40:21 UTC	6129	IN	Data Raw: 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 62 3d 61 2e 54 79 70 65 64 3b 61 2e 63 6f 65 72 63 65 3b 61 3d 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 65 6e 61 62 6c 65 5f 6f 72 64 65 72 5f 69 64 3a 62 5b 22 62 6f 6f 6c 65 61 6e 22 5d 28 29 2c 65 6e 61 62 6c 65 5f 76 61 6c 75 65 3a 62 5b 22 62 6f 6f 6c 65 61 6e 22 5d 28 29 2c 65 6e 61 62 6c 65 5f 63 75 72 72 65 6e 63 79 3a 62 5b 22 62 6f 6f 6c 65 61 6e 22 5d 28 29 2c 65 6e 61 62 6c 65 5f 63 6f 6e 74 65 6e 74 73 3a 62 5b 22 62 6f 6f 6c 65 61 6e 22 5d 28 29 2c 65 6e 61 62 6c 65 5f 63 6f 6e 74 65 6e 74 5f 69 64 73 3a 62 5b 22 62 6f 6f 6c 65 61 6e 22 5d Data Ascii: se strict";var a=f.getFbeventsModules("SignalsFBEventsTyped"),b=a.Typed;a.coerce;a=b.objectWithFields({enable_order_id:b["boolean"](),enable_value:b["boolean"](),enable_currency:b["boolean"](),enable_contents:b["boolean"](),enable_content_ids:b["boolean"]
2023-06-06 08:40:21 UTC	6130	IN	Data Raw: 74 22 29 2c 6e 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 74 49 57 4c 45 78 74 72 61 63 74 6f 72 73 45 76 65 6e 74 22 29 2c 6f 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 74 45 53 54 52 75 6c 65 73 22 29 2c 70 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 56 61 6c 69 64 61 74 65 43 75 73 74 6f 6d 50 61 72 61 6d 65 74 65 72 73 45 76 65 6e 74 22 29 2c 71 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 56 61 6c 69 64 61 74 65 55 72 6c 50 61 72 61 6d 65 74 65 72 73 45 76 65 6e Data Ascii: t"),n=f.getFbeventsModules("SignalsFBEventsSetIWLExtractorsEvent"),o=f.getFbeventsModules("SignalsFBEventsSetESTRules"),p=f.getFbeventsModules("SignalsFBEventsValidateCustomParametersEvent"),q=f.getFbeventsModules("SignalsFBEventsValidateUrlParametersEven
2023-06-06 08:40:21 UTC	6132	IN	Data Raw: 5f 73 75 63 63 65 73 73 22 2c 42 55 46 46 45 52 5f 45 56 45 4e 54 53 5f 45 58 50 45 52 49 4d 45 4e 54 3a 22 62 75 66 66 65 72 5f 65 76 65 6e 74 73 22 2c 4e 4f 5f 4f 50 5f 45 58 50 45 52 49 4d 45 4e 54 3a 22 6e 6f 5f 6f 70 5f 65 78 70 22 2c 4e 4f 5f 43 44 5f 46 49 4c 54 45 52 45 44 5f 50 41 52 41 4d 53 3a 22 6e 6f 5f 63 64 5f 66 69 6c 74 65 72 65 64 5f 70 61 72 61 6d 73 22 7d 7d 29 28 29 3b 72 65 74 75 72 6e 20 6a 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 70 65 72 69 6d 65 6e 74 73 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a Data Ascii: _success",BUFFER_EVENTS_EXPERIMENT:"buffer_events",NO_OP_EXPERIMENT:"no_op_exp",NO_CD_FILTERED_PARAMS:"no_cd_filtered_params"}})();return j.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsExperimentsTypedef",function(){return function(g,h,i,j
2023-06-06 08:40:21 UTC	6133	IN	Data Raw: 6f 61 64 65 64 2c 6b 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 46 69 72 65 4c 6f 63 6b 22 29 2c 6f 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4a 53 4c 6f 61 64 65 72 22 29 3b 64 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4c 6f 67 67 69 6e 67 22 29 3b 76 61 72 20 70 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4f 70 74 49 6e 22 29 2c 71 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 2c 72 3d Data Ascii: oaded,k=f.getFbeventsModules("SignalsFBEventsFireLock"),o=f.getFbeventsModules("SignalsFBEventsJSLoader");d=f.getFbeventsModules("SignalsFBEventsLogging");var p=f.getFbeventsModules("SignalsFBEventsOptIn"),q=f.getFbeventsModules("SignalsFBEventsUtils"),r=
2023-06-06 08:40:21 UTC	6134	IN	Data Raw: 76 65 6e 74 73 3a 21 30 2c 4d 69 63 72 6f 64 61 74 61 3a 21 30 2c 4d 69 63 72 6f 64 61 74 61 4a 73 6f 6e 4c 64 3a 21 30 2c 4f 70 65 6e 42 72 69 64 67 65 3a 21 30 2c 50 61 72 61 6c 6c 65 6c 46 69 72 65 3a 21 30 2c 50 72 6f 68 69 62 69 74 65 64 53 6f 75 72 63 65 73 3a 21 30 2c 54 69 6d 65 73 70 65 6e 74 3a 21 30 2c 55 6e 77 61 6e 74 65 64 44 61 74 61 3a 21 30 2c 4c 6f 63 61 6c 43 6f 6d 70 75 74 61 74 69 6f 6e 3a 21 30 2c 49 41 42 50 43 4d 41 45 42 72 69 64 67 65 3a 21 30 2c 41 45 4d 3a 21 30 2c 42 72 6f 77 73 65 72 50 72 6f 70 65 72 74 69 65 73 3a 21 30 2c 45 53 54 52 75 6c 65 45 6e 67 69 6e 65 3a 21 30 2c 45 76 65 6e 74 56 61 6c 69 64 61 74 69 6f 6e 3a 21 30 7d 2c 49 3d 7b 54 72 61 63 6b 3a 30 2c 54 72 61 63 6b 43 75 73 74 6f 6d 3a 34 2c 54 72 61 63 6b 53 Data Ascii: vents:!0,Microdata:!0,MicrodataJsonLd:!0,OpenBridge:!0,ParallelFire:!0,ProhibitedSources:!0,Timespent:!0,UnwantedData:!0,LocalComputation:!0,IABPCMAEBridge:!0,AEM:!0,BrowserProperties:!0,ESTRuleEngine:!0,EventValidation:!0},I={Track:0,TrackCustom:4,TrackS
2023-06-06 08:40:21 UTC	6136	IN	Data Raw: 6e 63 74 69 6f 6e 20 4e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 6f 2e 6c 6f 61 64 4a 53 46 69 6c 65 28 4d 28 61 2c 62 2c 63 2c 65 2c 64 2c 66 29 29 7d 71 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 61 2c 62 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6e 28 74 68 69 73 2c 64 29 3b 74 68 69 73 2e 56 41 4c 49 44 5f 46 45 41 54 55 52 45 53 3d 48 3b 74 68 69 73 2e 6f 70 74 49 6e 73 3d 6e 65 77 20 70 28 4a 29 3b 74 68 69 73 2e 63 6f 6e 66 69 67 73 4c 6f 61 64 65 64 3d 7b 7d 3b 74 68 69 73 2e 6c 6f 63 6b 73 3d 6b 2e 67 6c 6f 62 61 6c 3b 74 68 69 73 2e 70 6c 75 67 69 6e 43 6f 6e 66 69 67 3d 63 3b 74 68 69 73 2e 64 69 73 61 62 6c 65 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 73 3d 21 31 3b 74 68 69 73 2e 64 69 73 61 62 6c 65 45 72 72 6f Data Ascii: nction N(a,b,c,d,e,f){o.loadJSFile(M(a,b,c,e,d,f))}q=function(){function d(a,b){var e=this;n(this,d);this.VALID_FEATURES=H;this.optIns=new p(J);this.configsLoaded={};this.locks=k.global;this.pluginConfig=c;this.disableFirstPartyCookies=!1;this.disableErro
2023-06-06 08:40:21 UTC	6137	IN	Data Raw: 6b 53 69 6e 67 6c 65 43 75 73 74 6f 6d 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 72 61 63 6b 53 69 6e 67 6c 65 47 65 6e 65 72 69 63 28 61 2c 62 2c 63 2c 49 2e 54 72 61 63 6b 53 69 6e 67 6c 65 43 75 73 74 6f 6d 2c 64 29 7d 7d 2c 7b 6b 65 79 3a 22 74 72 61 63 6b 53 69 6e 67 6c 65 53 79 73 74 65 6d 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 72 61 63 6b 53 69 6e 67 6c 65 47 65 6e 65 72 69 63 28 62 2c 63 2c 64 2c 49 2e 54 72 61 63 6b 53 69 6e 67 6c 65 53 79 73 74 65 6d 2c 6e 75 6c 6c 2c 61 29 7d 7d 2c 7b 6b 65 79 3a 22 74 72 61 63 6b 53 69 6e 67 6c 65 47 65 6e 65 72 69 63 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 Data Ascii: kSingleCustom",value:function(a,b,c,d){return this.trackSingleGeneric(a,b,c,I.TrackSingleCustom,d)}},{key:"trackSingleSystem",value:function(a,b,c,d){return this.trackSingleGeneric(b,c,d,I.TrackSingleSystem,null,a)}},{key:"trackSingleGeneric",value:functi
2023-06-06 08:40:21 UTC	6139	IN	Data Raw: 63 6b 65 64 28 29 29 7b 67 2e 66 62 71 28 22 66 69 72 65 22 2c 61 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 76 61 72 20 63 3d 61 2e 63 75 73 74 6f 6d 50 61 72 61 6d 65 74 65 72 73 2c 64 3d 22 22 3b 63 26 26 63 2e 65 73 26 26 74 79 70 65 6f 66 20 63 2e 65 73 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 28 64 3d 63 2e 65 73 29 3b 61 2e 63 75 73 74 6f 6d 44 61 74 61 3d 61 2e 63 75 73 74 6f 6d 44 61 74 61 7c 7c 7b 7d 3b 76 61 72 20 65 3d 74 68 69 73 2e 66 62 71 2e 67 65 74 45 76 65 6e 74 43 75 73 74 6f 6d 50 61 72 61 6d 65 74 65 72 73 28 74 68 69 73 2e 67 65 74 50 69 78 65 6c 28 61 2e 70 69 78 65 6c 49 64 29 2c 61 2e 65 76 65 6e 74 4e 61 6d 65 2c 61 2e 63 75 73 74 6f 6d 44 61 74 61 2c 64 29 2c 66 3d 61 2e 65 76 65 6e 74 44 61 74 61 2e 65 76 65 6e 74 49 44 3b 65 2e Data Ascii: cked()){g.fbq("fire",a);return this}var c=a.customParameters,d="";c&&c.es&&typeof c.es==="string"&&(d=c.es);a.customData=a.customData\|\|{};var e=this.fbq.getEventCustomParameters(this.getPixel(a.pixelId),a.eventName,a.customData,d),f=a.eventData.eventID;e.
2023-06-06 08:40:21 UTC	6140	IN	Data Raw: 79 6c 6f 61 64 3b 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 22 22 3b 61 3d 61 2e 73 70 6c 69 74 28 22 5f 61 65 6d 5f 22 29 3b 72 65 74 75 72 6e 20 61 2e 6c 65 6e 67 74 68 21 3d 3d 32 3f 22 22 3a 61 5b 31 5d 7d 7d 2c 7b 6b 65 79 3a 22 6c 6f 61 64 43 6f 6e 66 69 67 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 68 69 73 2e 66 62 71 2e 64 69 73 61 62 6c 65 43 6f 6e 66 69 67 4c 6f 61 64 69 6e 67 3d 3d 3d 21 30 7c 7c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 68 69 73 2e 63 6f 6e 66 69 67 73 4c 6f 61 64 65 64 2c 61 29 29 72 65 74 75 72 6e 3b 74 68 69 73 2e 6c 6f 63 6b 73 2e 6c 6f 63 6b 43 6f 6e 66 69 67 28 61 29 3b 69 66 28 21 74 68 69 73 2e 66 62 71 2e 70 Data Ascii: yload;if(a==null)return"";a=a.split("_aem_");return a.length!==2?"":a[1]}},{key:"loadConfig",value:function(a){if(this.fbq.disableConfigLoading===!0\|\|Object.prototype.hasOwnProperty.call(this.configsLoaded,a))return;this.locks.lockConfig(a);if(!this.fbq.p
2023-06-06 08:40:21 UTC	6141	IN	Data Raw: 7d 7d 7d 2c 7b 6b 65 79 3a 22 63 6f 6e 66 69 67 4c 6f 61 64 65 64 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 63 6f 6e 66 69 67 73 4c 6f 61 64 65 64 5b 61 5d 3d 21 30 2c 65 2e 74 72 69 67 67 65 72 28 61 29 2c 74 68 69 73 2e 6c 6f 63 6b 73 2e 72 65 6c 65 61 73 65 43 6f 6e 66 69 67 28 61 29 7d 7d 5d 29 3b 72 65 74 75 72 6e 20 64 7d 28 29 3b 6c 2e 65 78 70 6f 72 74 73 3d 71 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 46 69 72 65 64 45 76 65 6e 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 6a 2c Data Ascii: }}},{key:"configLoaded",value:function(a){this.configsLoaded[a]=!0,e.trigger(a),this.locks.releaseConfig(a)}}]);return d}();l.exports=q})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsFiredEvent",function(){return function(g,h,j,
2023-06-06 08:40:21 UTC	6142	IN	Data Raw: 75 67 69 6e 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6c 6f 63 6b 28 22 70 6c 75 67 69 6e 3a 22 2b 61 29 7d 7d 2c 7b 6b 65 79 3a 22 72 65 6c 65 61 73 65 50 6c 75 67 69 6e 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 72 65 6c 65 61 73 65 28 22 70 6c 75 67 69 6e 3a 22 2b 61 29 7d 7d 2c 7b 6b 65 79 3a 22 6c 6f 63 6b 43 6f 6e 66 69 67 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6c 6f 63 6b 28 22 63 6f 6e 66 69 67 3a 22 2b 61 29 7d 7d 2c 7b 6b 65 79 3a 22 72 65 6c 65 61 73 65 43 6f 6e 66 69 67 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 72 65 6c 65 61 73 65 28 22 63 6f 6e 66 69 67 3a 22 2b 61 29 7d 7d 2c 7b 6b 65 79 3a 22 6c 6f 63 6b 43 Data Ascii: ugin",value:function(a){this.lock("plugin:"+a)}},{key:"releasePlugin",value:function(a){this.release("plugin:"+a)}},{key:"lockConfig",value:function(a){this.lock("config:"+a)}},{key:"releaseConfig",value:function(a){this.release("config:"+a)}},{key:"lockC
2023-06-06 08:40:21 UTC	6144	IN	Data Raw: 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 65 74 49 73 43 68 72 6f 6d 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 2c 69 29 7b 76 61 72 20 6a 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6a 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 76 61 72 20 61 3d 66 2e 63 68 72 6f 6d 65 2c 62 3d 66 2e 6e 61 76 69 67 61 74 6f 72 2c 63 3d 62 2e 76 65 6e 64 6f 72 2c 64 3d 66 2e 6f 70 72 21 3d 3d 76 6f 69 64 20 30 2c 65 3d 62 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 22 45 64 67 65 22 29 3e 2d 31 3b 62 3d 62 2e 75 73 65 Data Ascii: ;f.ensureModuleRegistered("signalsFBEventsGetIsChrome",function(){return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";function a(){var a=f.chrome,b=f.navigator,c=b.vendor,d=f.opr!==void 0,e=b.userAgent.indexOf("Edge")>-1;b=b.use
2023-06-06 08:40:21 UTC	6145	IN	Data Raw: 6e 20 6a 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 65 74 49 57 4c 50 61 72 61 6d 65 74 65 72 73 45 76 65 6e 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 6a 2c 6b 29 7b 76 61 72 20 6c 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6c 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 42 61 73 65 45 76 65 6e 74 22 29 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 Data Ascii: n j.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsGetIWLParametersEvent",function(){return function(g,h,j,k){var l={exports:{}};l.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsBaseEvent"),b=f.getFbeventsModules
2023-06-06 08:40:21 UTC	6147	IN	Data Raw: 64 5d 3b 76 61 72 20 65 3d 63 5b 30 5d 3b 69 66 28 65 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 65 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 65 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 66 3d 65 2e 67 72 61 70 68 54 6f 6b 65 6e 2c 67 3d 65 2e 70 69 78 65 6c 49 44 2c 68 3d 62 28 67 29 3b 72 65 74 75 72 6e 20 66 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 66 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 68 21 3d 6e 75 6c 6c 3f 5b 7b 67 72 61 70 68 54 6f 6b 65 6e 3a 66 2c 70 69 78 65 6c 49 44 3a 68 7d 5d 3a 6e 75 6c 6c 7d 61 3d 6e 65 77 20 61 28 63 29 3b 6c 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c Data Ascii: d];var e=c[0];if(e==null\|\|(typeof e==="undefined"?"undefined":i(e))!=="object")return null;var f=e.graphToken,g=e.pixelID,h=b(g);return f!=null&&typeof f==="string"&&h!=null?[{graphToken:f,pixelID:h}]:null}a=new a(c);l.exports=a})();return l.exports}(a,b,
2023-06-06 08:40:21 UTC	6148	IN	Data Raw: 76 65 6e 74 73 4c 65 67 61 63 79 45 78 70 65 72 69 6d 65 6e 74 47 72 6f 75 70 73 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 6a 2c 6b 29 7b 76 61 72 20 6c 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6c 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 62 3d 61 2e 54 79 70 65 64 3b 61 2e 63 6f 65 72 63 65 3b 76 61 72 20 63 3d 61 2e 65 6e 66 6f 72 63 65 3b 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 Data Ascii: ventsLegacyExperimentGroupsTypedef",function(){return function(g,h,j,k){var l={exports:{}};l.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsTyped"),b=a.Typed;a.coerce;var c=a.enforce;a=f.getFbeventsModules("SignalsFBEventsType
2023-06-06 08:40:21 UTC	6149	IN	Data Raw: 4e 4f 5f 4d 45 54 48 4f 44 5f 4e 41 4d 45 22 3a 72 65 74 75 72 6e 22 59 6f 75 20 6d 75 73 74 20 70 72 6f 76 69 64 65 20 61 6e 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 66 62 71 28 29 2e 22 3b 63 61 73 65 22 49 4e 56 41 4c 49 44 5f 46 42 51 5f 4d 45 54 48 4f 44 22 3a 76 61 72 20 62 3d 61 2e 6d 65 74 68 6f 64 3b 72 65 74 75 72 6e 22 5c 22 66 62 71 28 27 22 2b 62 2b 22 27 2c 20 2e 2e 2e 29 3b 5c 22 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 66 62 71 20 63 6f 6d 6d 61 6e 64 2e 22 3b 63 61 73 65 22 49 4e 56 41 4c 49 44 5f 46 42 51 5f 4d 45 54 48 4f 44 5f 50 41 52 41 4d 45 54 45 52 22 3a 62 3d 61 2e 69 6e 76 61 6c 69 64 50 61 72 61 6d 4e 61 6d 65 3b 76 61 72 20 63 3d 61 2e 69 6e 76 61 6c 69 64 50 61 72 61 6d 56 61 6c 75 65 2c 64 3d 61 2e 6d 65 74 68 6f 64 2c Data Ascii: NO_METHOD_NAME":return"You must provide an argument to fbq().";case"INVALID_FBQ_METHOD":var b=a.method;return"\"fbq('"+b+"', ...);\" is not a valid fbq command.";case"INVALID_FBQ_METHOD_PARAMETER":b=a.invalidParamName;var c=a.invalidParamValue,d=a.method,
2023-06-06 08:40:21 UTC	6150	IN	Data Raw: 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 22 3b 63 61 73 65 22 4e 45 47 41 54 49 56 45 5f 45 56 45 4e 54 5f 50 41 52 41 4d 22 3a 62 3d 61 2e 70 61 72 61 6d 3b 63 3d 61 2e 65 76 65 6e 74 4e 61 6d 65 3b 72 65 74 75 72 6e 22 50 61 72 61 6d 65 74 65 72 20 27 22 2b 62 2b 22 27 20 69 73 20 6e 65 67 61 74 69 76 65 20 66 6f 72 20 65 76 65 6e 74 20 27 22 2b 63 2b 22 27 2e 22 3b 63 61 73 65 22 50 49 49 5f 49 4e 56 41 4c 49 44 5f 54 59 50 45 22 3a 64 3d 61 2e 6b 65 79 5f 74 79 70 65 3b 65 3d 61 2e 6b 65 79 5f 76 61 6c 3b 72 65 74 75 72 6e 22 41 6e 20 69 6e 76 61 6c 69 64 20 22 2b 64 2b 22 20 77 61 73 20 73 70 65 63 69 66 69 65 64 20 66 6f 72 20 27 22 2b 65 2b 22 27 2e 20 54 68 69 73 20 64 61 74 61 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 73 65 6e 74 20 77 69 Data Ascii: more information.";case"NEGATIVE_EVENT_PARAM":b=a.param;c=a.eventName;return"Parameter '"+b+"' is negative for event '"+c+"'.";case"PII_INVALID_TYPE":d=a.key_type;e=a.key_val;return"An invalid "+d+" was specified for '"+e+"'. This data will not be sent wi
2023-06-06 08:40:21 UTC	6152	IN	Data Raw: 20 69 66 28 21 62 28 61 29 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 21 3d 6e 75 6c 6c 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 21 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 3b 74 72 79 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 61 29 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 7d 63 61 74 63 68 28 61 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 7d 7d 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 64 28 61 2c 42 29 2e 6a 6f 69 6e 28 22 2c 20 22 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 44 28 61 2c 62 29 7b 74 72 79 7b 76 61 72 20 64 3d 67 2e 66 62 71 2e 69 6e 73 74 61 6e 63 65 2e 70 6c 75 67 69 6e 43 6f 6e 66 69 67 2e 67 65 74 28 6e 75 6c Data Ascii: if(!b(a)&&a.constructor!=null&&a.constructor.name!=null)return a.constructor.name;try{return JSON.stringify(a)\|\|"undefined"}catch(a){return"undefined"}},C=function(a){return d(a,B).join(", ")};function D(a,b){try{var d=g.fbq.instance.pluginConfig.get(nul
2023-06-06 08:40:21 UTC	6153	IN	Data Raw: 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 64 3d 41 72 72 61 79 28 63 29 2c 65 3d 30 3b 65 3c 63 3b 65 2b 2b 29 64 5b 65 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 61 2e 61 70 70 6c 79 28 74 68 69 73 2c 64 29 7d 63 61 74 63 68 28 61 29 7b 62 28 61 29 7d 72 65 74 75 72 6e 7d 7d 6b 2e 65 78 70 6f 72 74 73 3d 63 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4d 69 63 72 6f 64 61 74 61 43 6f 6e 66 69 67 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 Data Ascii: =arguments.length,d=Array(c),e=0;e<c;e++)d[e]=arguments[e];a.apply(this,d)}catch(a){b(a)}return}}k.exports=c})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsMicrodataConfigTypedef",function(){return function(g,h,i,j){var k={expor
2023-06-06 08:40:21 UTC	6155	IN	Data Raw: 6c 2e 63 61 6c 6c 26 26 62 2e 67 65 74 50 72 6f 74 6f 63 6f 6c 28 29 3d 3d 3d 64 3f 62 3a 6e 75 6c 6c 3b 62 21 3d 3d 6e 75 6c 6c 26 26 28 6a 5b 61 5b 30 5d 5d 3d 6a 5b 61 5b 30 5d 5d 7c 7c 7b 7d 2c 6a 5b 61 5b 30 5d 5d 5b 61 5b 31 5d 5d 3d 62 29 3b 72 65 74 75 72 6e 20 62 21 3d 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 3b 61 3d 6a 5b 61 2e 69 64 5d 7c 7c 7b 7d 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 63 29 26 26 62 2e 70 75 73 68 28 61 5b 63 5d 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 61 29 7b 72 65 74 75 72 6e 20 6e 28 61 29 2e 6c 65 6e 67 74 68 3e 30 7d 66 75 6e 63 Data Ascii: l.call&&b.getProtocol()===d?b:null;b!==null&&(j[a[0]]=j[a[0]]\|\|{},j[a[0]][a[1]]=b);return b!==null}function n(a){var b=[];a=j[a.id]\|\|{};for(var c in a)Object.prototype.hasOwnProperty.call(a,c)&&b.push(a[c]);return b}function o(a){return n(a).length>0}func
2023-06-06 08:40:21 UTC	6156	IN	Data Raw: 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 62 3d 61 2e 54 79 70 65 64 3b 61 2e 63 6f 65 72 63 65 3b 61 3d 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 65 6e 64 70 6f 69 6e 74 73 3a 62 2e 61 72 72 61 79 4f 66 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 74 61 72 67 65 74 44 6f 6d 61 69 6e 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 73 74 72 69 6e 67 28 29 29 2c 65 6e 64 70 Data Ascii: (){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsTyped"),b=a.Typed;a.coerce;a=b.objectWithFields({endpoints:b.arrayOf(b.objectWithFields({targetDomain:b.allowNull(b.string()),endp
2023-06-06 08:40:21 UTC	6158	IN	Data Raw: 75 6d 65 6e 74 73 5b 32 5d 3a 21 31 3b 62 28 74 68 69 73 2e 5f 67 65 74 4f 70 74 73 28 63 29 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 66 3d 65 3d 3d 21 30 26 26 64 2e 69 73 4f 70 74 65 64 4f 75 74 28 61 2c 63 29 3b 66 7c 7c 64 2e 5f 73 65 74 4f 70 74 28 61 2c 62 2c 21 30 29 7d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 7d 2c 7b 6b 65 79 3a 22 6f 70 74 4f 75 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 76 61 72 20 64 3d 74 68 69 73 3b 62 28 74 68 69 73 2e 5f 67 65 74 4f 70 74 73 28 63 29 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 64 2e 5f 73 65 74 4f 70 74 28 61 2c 62 2c 21 31 29 7d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 7d 2c 7b 6b 65 79 3a 22 69 73 4f 70 74 65 64 49 6e 22 2c 76 61 6c 75 65 3a 66 75 6e Data Ascii: uments[2]:!1;b(this._getOpts(c),function(b){var f=e==!0&&d.isOptedOut(a,c);f\|\|d._setOpt(a,b,!0)});return this}},{key:"optOut",value:function(a,c){var d=this;b(this._getOpts(c),function(b){return d._setOpt(a,b,!1)});return this}},{key:"isOptedIn",value:fun
2023-06-06 08:40:21 UTC	6159	IN	Data Raw: 45 76 65 6e 74 73 42 61 73 65 45 76 65 6e 74 22 29 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 69 78 65 6c 54 79 70 65 64 65 66 22 29 2c 63 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 64 3d 63 2e 63 6f 65 72 63 65 3b 66 75 6e 63 74 69 6f 6e 20 65 28 61 29 7b 61 3d 64 28 61 2c 62 29 3b 72 65 74 75 72 6e 20 61 21 3d 6e 75 6c 6c 3f 5b 61 5d 3a 6e 75 6c 6c 7d 63 3d 6e 65 77 20 61 28 65 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 63 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 Data Ascii: EventsBaseEvent"),b=f.getFbeventsModules("SignalsFBEventsPixelTypedef"),c=f.getFbeventsModules("SignalsFBEventsTyped"),d=c.coerce;function e(a){a=d(a,b);return a!=null?[a]:null}c=new a(e);k.exports=c})();return k.exports}(a,b,c,d)});f.ensureModuleRegister
2023-06-06 08:40:21 UTC	6161	IN	Data Raw: 6f 6e 20 6e 75 6d 62 65 72 20 27 22 2b 65 5b 30 5d 2b 22 27 22 29 3b 68 3d 70 61 72 73 65 49 6e 74 28 69 2c 31 30 29 3b 69 66 28 69 73 4e 61 4e 28 68 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 49 6c 6c 65 67 61 6c 20 73 75 62 64 6f 6d 61 69 6e 20 69 6e 64 65 78 20 27 22 2b 65 5b 31 5d 2b 22 27 22 29 3b 69 3d 70 61 72 73 65 49 6e 74 28 6a 2c 31 30 29 3b 69 66 28 69 73 4e 61 4e 28 69 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 49 6c 6c 65 67 61 6c 20 63 72 65 61 74 69 6f 6e 20 74 69 6d 65 20 27 22 2b 65 5b 32 5d 2b 22 27 22 29 3b 69 66 28 66 3d 3d 6e 75 6c 6c 7c 7c 66 3d 3d 3d 22 22 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 45 6d 70 74 79 20 63 6f 6f 6b 69 65 20 70 61 79 6c 6f 61 64 22 29 3b 72 65 74 75 72 6e 20 6e 65 Data Ascii: on number '"+e[0]+"'");h=parseInt(i,10);if(isNaN(h))throw new Error("Illegal subdomain index '"+e[1]+"'");i=parseInt(j,10);if(isNaN(i))throw new Error("Illegal creation time '"+e[2]+"'");if(f==null\|\|f==="")throw new Error("Empty cookie payload");return ne
2023-06-06 08:40:21 UTC	6161	IN	Data Raw: 73 75 62 64 6f 6d 61 69 6e 49 6e 64 65 78 3a 68 7d 29 7d 63 61 74 63 68 28 61 29 7b 62 28 61 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 7d 5d 29 3b 72 65 74 75 72 6e 20 61 7d 28 29 3b 6d 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6d 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 69 78 65 6c 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 Data Ascii: subdomainIndex:h})}catch(a){b(a);return null}}}]);return a}();m.exports=a})();return m.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsPixelTypedef",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var
2023-06-06 08:40:21 UTC	6162	IN	Data Raw: 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 6c 75 67 69 6e 22 29 3b 66 75 6e 63 74 69 6f 6e 20 6a 28 61 29 7b 72 65 74 75 72 6e 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 22 2b 61 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 22 66 62 65 76 65 6e 74 73 22 29 72 65 74 75 72 6e 20 6e 65 77 20 67 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 67 29 72 65 74 75 72 6e 20 62 3b 69 66 28 62 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 62 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 62 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 7b 65 28 6e 65 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 70 6c 75 67 69 6e 20 72 65 67 69 73 Data Ascii: ("SignalsFBEventsPlugin");function j(a){return"fbevents.plugins."+a}function k(a,b){if(a==="fbevents")return new g(function(){});if(b instanceof g)return b;if(b==null\|\|(typeof b==="undefined"?"undefined":i(b))!=="object"){e(new Error("Invalid plugin regis
2023-06-06 08:40:21 UTC	6164	IN	Data Raw: 3a 62 2e 61 72 72 61 79 4f 66 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 64 6f 6d 61 69 6e 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 73 74 72 69 6e 67 28 29 29 7d 29 29 7d 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 51 45 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6b 2c 6c 29 7b 76 61 72 20 6d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6d 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e Data Ascii: :b.arrayOf(b.objectWithFields({domain:b.allowNull(b.string())}))});k.exports=a})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsQE",function(){return function(i,j,k,l){var m={exports:{}};m.exports;(function(){"use strict";var a=f.
2023-06-06 08:40:21 UTC	6165	IN	Data Raw: 6e 75 6c 6c 7d 7d 2c 7b 6b 65 79 3a 22 67 65 74 43 6f 64 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 67 65 74 28 29 3b 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 22 22 3b 76 61 72 20 62 3d 30 3b 61 2e 69 73 49 6e 45 78 70 65 72 69 6d 65 6e 74 47 72 6f 75 70 26 26 28 62 7c 3d 31 29 3b 74 68 69 73 2e 5f 69 73 45 78 70 6f 73 65 64 26 26 28 62 7c 3d 32 29 3b 72 65 74 75 72 6e 20 61 2e 63 6f 64 65 2b 62 2e 74 6f 53 74 72 69 6e 67 28 29 7d 7d 2c 7b 6b 65 79 3a 22 67 65 74 41 73 73 69 67 6e 6d 65 6e 74 46 6f 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 67 65 74 28 29 3b 69 66 28 62 21 3d 6e 75 6c 6c 26 26 62 2e 6e 61 6d 65 3d 3d 3d 61 29 7b 74 68 69 73 2e Data Ascii: null}},{key:"getCode",value:function(){var a=this.get();if(a==null)return"";var b=0;a.isInExperimentGroup&&(b\|=1);this._isExposed&&(b\|=2);return a.code+b.toString()}},{key:"getAssignmentFor",value:function(a){var b=this.get();if(b!=null&&b.name===a){this.
2023-06-06 08:40:21 UTC	6167	IN	Data Raw: 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4c 6f 67 67 69 6e 67 22 29 2c 63 3d 62 2e 6c 6f 67 45 72 72 6f 72 3b 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 3b 76 61 72 20 64 3d 62 2e 6d 61 70 2c 65 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 50 61 72 61 6d 4c 69 73 74 22 29 2c 68 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 42 65 61 63 6f 6e 22 29 2c 69 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 Data Ascii: getFbeventsModules("SignalsFBEventsLogging"),c=b.logError;b=f.getFbeventsModules("SignalsFBEventsUtils");var d=b.map,e=f.getFbeventsModules("SignalsParamList"),h=f.getFbeventsModules("signalsFBEventsSendBeacon"),i=f.getFbeventsModules("signalsFBEventsSend
2023-06-06 08:40:21 UTC	6168	IN	Data Raw: 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 64 3d 63 2e 54 79 70 65 64 3b 63 2e 63 6f 65 72 63 65 3b 63 3d 64 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 63 75 73 74 6f 6d 44 61 74 61 3a 64 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 64 2e 6f 62 6a 65 63 74 28 29 29 2c 63 75 73 74 6f 6d 50 61 72 61 6d 73 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 3f 61 3a 76 6f 69 64 20 30 7d 2c 65 76 65 6e 74 4e 61 6d 65 3a 64 2e 73 74 72 69 6e 67 28 29 2c 69 64 3a 64 2e 73 74 72 69 6e 67 28 29 2c 70 69 69 54 72 61 6e 73 6c 61 74 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 61 3a 76 6f 69 64 20 30 7d 2c 64 6f 63 75 6d 65 6e Data Ascii: BEventsTyped"),d=c.Typed;c.coerce;c=d.objectWithFields({customData:d.allowNull(d.object()),customParams:function(a){return a instanceof b?a:void 0},eventName:d.string(),id:d.string(),piiTranslator:function(a){return typeof a==="function"?a:void 0},documen
2023-06-06 08:40:21 UTC	6170	IN	Data Raw: 6c 73 46 42 45 76 65 6e 74 73 45 78 70 65 72 69 6d 65 6e 74 4e 61 6d 65 73 22 29 3b 61 2e 42 41 54 43 48 49 4e 47 5f 45 58 50 45 52 49 4d 45 4e 54 3b 61 2e 53 45 4e 44 5f 58 48 52 5f 45 58 50 45 52 49 4d 45 4e 54 3b 76 61 72 20 73 3d 67 2e 74 6f 70 21 3d 3d 67 2c 74 3d 22 53 75 62 73 63 72 69 62 65 64 42 75 74 74 6f 6e 43 6c 69 63 6b 22 3b 66 75 6e 63 74 69 6f 6e 20 75 28 61 29 7b 76 61 72 20 62 3d 61 2e 63 75 73 74 6f 6d 44 61 74 61 2c 63 3d 61 2e 63 75 73 74 6f 6d 50 61 72 61 6d 73 2c 65 3d 61 2e 65 76 65 6e 74 4e 61 6d 65 2c 66 3d 61 2e 69 64 2c 6b 3d 61 2e 70 69 69 54 72 61 6e 73 6c 61 74 6f 72 2c 6c 3d 61 2e 64 6f 63 75 6d 65 6e 74 4c 69 6e 6b 2c 6d 3d 61 2e 72 65 66 65 72 72 65 72 4c 69 6e 6b 2c 6e 3d 69 2e 68 72 65 66 3b 4f 62 6a 65 63 74 2e 70 72 Data Ascii: lsFBEventsExperimentNames");a.BATCHING_EXPERIMENT;a.SEND_XHR_EXPERIMENT;var s=g.top!==g,t="SubscribedButtonClick";function u(a){var b=a.customData,c=a.customParams,e=a.eventName,f=a.id,k=a.piiTranslator,l=a.documentLink,m=a.referrerLink,n=i.href;Object.pr
2023-06-06 08:40:21 UTC	6171	IN	Data Raw: 29 3b 76 61 72 20 63 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 64 3d 63 2e 54 79 70 65 64 3b 63 2e 63 6f 65 72 63 65 3b 63 3d 64 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 63 75 73 74 6f 6d 44 61 74 61 3a 64 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 64 2e 6f 62 6a 65 63 74 28 29 29 2c 63 75 73 74 6f 6d 50 61 72 61 6d 73 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 3f 61 3a 76 6f 69 64 20 30 7d 2c 65 76 65 6e 74 4e 61 6d 65 3a 64 2e 73 74 72 69 6e 67 28 29 2c 69 64 3a 64 2e 73 74 72 69 6e 67 28 29 2c 70 69 69 54 72 61 6e 73 6c 61 74 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 Data Ascii: );var c=f.getFbeventsModules("SignalsFBEventsTyped"),d=c.Typed;c.coerce;c=d.objectWithFields({customData:d.allowNull(d.object()),customParams:function(a){return a instanceof b?a:void 0},eventName:d.string(),id:d.string(),piiTranslator:function(a){return t
2023-06-06 08:40:21 UTC	6173	IN	Data Raw: 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4e 65 74 77 6f 72 6b 43 6f 6e 66 69 67 22 29 2c 62 3d 32 30 34 38 3b 66 75 6e 63 74 69 6f 6e 20 63 28 63 2c 64 29 7b 76 61 72 20 65 3d 64 7c 7c 7b 7d 2c 66 3d 65 2e 69 67 6e 6f 72 65 52 65 71 75 65 73 74 4c 65 6e 67 74 68 43 68 65 63 6b 3b 66 3d 66 3d 3d 3d 76 6f 69 64 20 30 3f 21 31 3a 66 3b 65 3d 65 2e 75 72 6c 3b 65 3d 65 3d 3d 3d 76 6f 69 64 20 30 3f 61 2e 45 4e 44 50 4f 49 4e 54 3a 65 3b 63 2e 72 65 70 6c 61 63 65 45 6e 74 72 79 28 22 72 71 6d 22 2c 66 3f 22 46 47 45 54 22 3a 22 47 45 54 22 29 3b 63 3d 63 2e 74 6f 51 75 65 72 79 53 74 72 69 6e 67 28 29 3b 65 3d 65 2b 22 3f 22 2b 63 3b 69 66 28 66 7c 7c Data Ascii: trict";var a=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),b=2048;function c(c,d){var e=d\|\|{},f=e.ignoreRequestLengthCheck;f=f===void 0?!1:f;e=e.url;e=e===void 0?a.ENDPOINT:e;c.replaceEntry("rqm",f?"FGET":"GET");c=c.toQueryString();e=e+"?"+c;if(f\|\|
2023-06-06 08:40:21 UTC	6174	IN	Data Raw: 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 42 61 73 65 45 76 65 6e 74 22 29 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 3b 62 2e 66 69 6c 74 65 72 3b 62 2e 6d 61 70 3b 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 3b 76 61 72 20 63 3d 62 2e 63 6f 65 72 63 65 3b 62 3d 62 2e 54 79 70 65 64 3b 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 43 6f 65 72 63 65 50 61 72 61 6d 65 74 65 72 45 78 74 72 61 63 Data Ascii: strict";var a=f.getFbeventsModules("SignalsFBEventsBaseEvent"),b=f.getFbeventsModules("SignalsFBEventsUtils");b.filter;b.map;b=f.getFbeventsModules("SignalsFBEventsTyped");var c=b.coerce;b=b.Typed;f.getFbeventsModules("signalsFBEventsCoerceParameterExtrac
2023-06-06 08:40:21 UTC	6174	IN	Data Raw: 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 43 6f 65 72 63 65 50 69 78 65 6c 49 44 22 29 2c 65 3d 62 2e 61 72 72 61 79 4f 66 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 63 6f 6e 64 69 74 69 6f 6e 3a 62 2e 73 74 72 69 6e 67 28 29 2c 64 65 72 69 76 65 64 5f 65 76 65 6e 74 5f 6e 61 6d 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 72 75 6c 65 5f 73 74 61 74 75 73 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 73 74 72 69 6e 67 28 29 29 2c 74 72 61 6e 73 66 6f 72 6d 61 74 69 6f 6e 73 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 61 72 72 61 79 28 29 29 2c 72 75 6c 65 5f 69 64 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 73 74 72 69 6e 67 28 29 29 7d 29 29 3b 66 75 6e 63 74 69 6f 6e 20 67 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 61 72 67 75 6d 65 6e 74 Data Ascii: signalsFBEventsCoercePixelID"),e=b.arrayOf(b.objectWithFields({condition:b.string(),derived_event_name:b.string(),rule_status:b.allowNull(b.string()),transformations:b.allowNull(b.array()),rule_id:b.allowNull(b.string())}));function g(){for(var a=argument
2023-06-06 08:40:21 UTC	6176	IN	Data Raw: 66 2b 2b 29 62 5b 66 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 66 5d 3b 76 61 72 20 68 3d 62 5b 30 5d 3b 69 66 28 68 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 68 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 68 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 6a 3d 68 2e 70 69 78 65 6c 49 44 2c 6b 3d 68 2e 65 78 74 72 61 63 74 6f 72 73 2c 6c 3d 67 28 6a 29 2c 6d 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6b 29 3f 64 28 6b 2c 65 29 3a 6e 75 6c 6c 2c 6e 3d 6d 21 3d 6e 75 6c 6c 3f 63 28 6d 2c 42 6f 6f 6c 65 61 6e 29 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 6e 21 3d 6e 75 6c 6c 26 26 6d 21 3d 6e 75 6c 6c 26 26 6e 2e 6c 65 6e 67 74 68 3d 3d 3d 6d 2e 6c 65 6e 67 74 68 26 26 6c 21 Data Ascii: f++)b[f]=arguments[f];var h=b[0];if(h==null\|\|(typeof h==="undefined"?"undefined":i(h))!=="object")return null;var j=h.pixelID,k=h.extractors,l=g(j),m=Array.isArray(k)?d(k,e):null,n=m!=null?c(m,Boolean):null;return n!=null&&m!=null&&n.length===m.length&&l!
2023-06-06 08:40:21 UTC	6177	IN	Data Raw: 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 31 3b 62 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 7b 76 61 72 20 63 3d 61 72 67 75 6d 65 6e 74 73 5b 62 5d 3b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 63 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 2c 64 29 26 26 28 61 5b 64 5d 3d 63 5b 64 5d 29 7d 72 65 74 75 72 6e 20 61 7d 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c Data Ascii: orts:{}};e.exports;(function(){"use strict";var a=Object.assign\|\|function(a){for(var b=1;b<arguments.length;b++){var c=arguments[b];for(var d in c)Object.prototype.hasOwnProperty.call(c,d)&&(a[d]=c[d])}return a},b=f.getFbeventsModules("SignalsFBEventsUtil
2023-06-06 08:40:21 UTC	6179	IN	Data Raw: 6f 6e 28 63 2c 65 29 7b 69 66 28 63 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 66 3d 62 5b 65 5d 2c 67 3d 64 5b 65 5d 3b 66 3d 66 28 67 29 3b 72 65 74 75 72 6e 20 61 28 7b 7d 2c 63 2c 6c 28 7b 7d 2c 65 2c 66 29 29 7d 2c 7b 7d 29 3b 72 65 74 75 72 6e 20 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 78 28 61 2c 62 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 62 28 61 29 7d 63 61 74 63 68 28 61 29 7b 69 66 28 61 2e 6e 61 6d 65 3d 3d 3d 22 46 42 45 76 65 6e 74 73 43 6f 65 72 63 69 6f 6e 45 72 72 6f 72 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 74 68 72 6f 77 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 79 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b Data Ascii: on(c,e){if(c==null)return null;var f=b[e],g=d[e];f=f(g);return a({},c,l({},e,f))},{});return e}}function x(a,b){try{return b(a)}catch(a){if(a.name==="FBEventsCoercionError")return null;throw a}}function y(a,b){return b(a)}function z(a){return function(b){
2023-06-06 08:40:21 UTC	6180	IN	Data Raw: 61 29 29 7d 7d 61 3d 7b 77 61 74 65 72 66 61 6c 6c 3a 64 2c 75 70 67 72 61 64 65 3a 65 7d 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 6e 77 61 6e 74 65 64 44 61 74 61 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 Data Ascii: a))}}a={waterfall:d,upgrade:e};k.exports=a})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsUnwantedDataTypedef",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules(
2023-06-06 08:40:21 UTC	6181	IN	Data Raw: 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 6a 2c 6b 29 7b 76 61 72 20 6c 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6c 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2c 62 3d 21 28 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 69 6e 20 67 29 3b 66 75 6e 63 74 69 6f 6e 20 63 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 7d 66 75 6e 63 74 69 6f 6e 20 64 28 62 29 7b 72 65 74 75 72 6e 20 41 Data Ascii: leRegistered("SignalsFBEventsUtils",function(){return function(f,g,j,k){var l={exports:{}};l.exports;(function(){"use strict";var a=Object.prototype.toString,b=!("addEventListener"in g);function c(a,b){return b!=null&&a instanceof b}function d(b){return A
2023-06-06 08:40:21 UTC	6183	IN	Data Raw: 2e 63 61 6c 6c 28 61 2c 63 29 26 26 62 2e 70 75 73 68 28 63 29 3b 69 66 28 72 29 66 6f 72 28 63 3d 30 3b 63 3c 74 3b 63 2b 2b 29 71 2e 63 61 6c 6c 28 61 2c 73 5b 63 5d 29 26 26 62 2e 70 75 73 68 28 73 5b 63 5d 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 76 28 61 2c 62 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 20 61 72 72 61 79 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 61 3d 4f 62 6a 65 63 74 28 61 29 3b 76 61 72 20 63 3d 61 2e 6c 65 6e 67 74 68 3e 3e 3e 30 3b 69 66 28 74 79 70 65 6f 66 20 62 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 62 2b 22 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 Data Ascii: .call(a,c)&&b.push(c);if(r)for(c=0;c<t;c++)q.call(a,s[c])&&b.push(s[c]);return b}function v(a,b){if(a==null)throw new TypeError(" array is null or not defined");a=Object(a);var c=a.length>>>0;if(typeof b!=="function")throw new TypeError(b+" is not a funct
2023-06-06 08:40:21 UTC	6184	IN	Data Raw: 62 29 7b 6e 28 74 68 69 73 2c 61 29 2c 74 68 69 73 2e 69 74 65 6d 73 3d 62 7c 7c 5b 5d 7d 68 28 61 2c 5b 7b 6b 65 79 3a 22 68 61 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 78 2e 63 61 6c 6c 28 74 68 69 73 2e 69 74 65 6d 73 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3d 3d 3d 61 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 61 64 64 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 69 74 65 6d 73 2e 70 75 73 68 28 61 29 7d 7d 5d 29 3b 72 65 74 75 72 6e 20 61 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 45 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 46 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3d 3d 6e 75 6c 6c 7c 7c 62 3d 3d 6e 75 6c 6c 3f 21 31 3a 61 2e 69 6e 64 65 78 Data Ascii: b){n(this,a),this.items=b\|\|[]}h(a,[{key:"has",value:function(a){return x.call(this.items,function(b){return b===a})}},{key:"add",value:function(a){this.items.push(a)}}]);return a}();function E(a){return a}function F(a,b){return a==null\|\|b==null?!1:a.index
2023-06-06 08:40:21 UTC	6186	IN	Data Raw: 74 73 42 61 73 65 45 76 65 6e 74 22 29 3b 66 75 6e 63 74 69 6f 6e 20 62 28 61 29 7b 72 65 74 75 72 6e 20 61 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 61 21 3d 3d 22 22 3f 61 3a 6e 75 6c 6c 7d 61 3d 6e 65 77 20 61 28 62 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 56 61 6c 69 64 61 74 65 55 72 6c 50 61 72 61 6d 65 74 65 72 73 45 76 65 6e 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a Data Ascii: tsBaseEvent");function b(a){return a!=null&&typeof a==="string"&&a!==""?a:null}a=new a(b);k.exports=a})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsValidateUrlParametersEvent",function(){return function(g,h,i,j){var k={exports:
2023-06-06 08:40:21 UTC	6187	IN	Data Raw: 69 73 2e 5f 70 61 72 61 6d 73 2e 65 6e 74 72 69 65 73 28 29 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 5d 28 29 2c 66 3b 21 28 62 3d 28 66 3d 65 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 3b 62 3d 21 30 29 7b 66 3d 66 2e 76 61 6c 75 65 3b 66 3d 67 28 66 2c 32 29 3b 76 61 72 20 68 3d 66 5b 30 5d 3b 66 3d 66 5b 31 5d 3b 76 61 72 20 69 3d 21 30 2c 6a 3d 21 31 2c 6b 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 6c 3d 66 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 5d 28 29 2c 66 3b 21 28 69 3d 28 66 3d Data Ascii: is._params.entries()[typeof Symbol==="function"?Symbol.iterator:"@@iterator"](),f;!(b=(f=e.next()).done);b=!0){f=f.value;f=g(f,2);var h=f[0];f=f[1];var i=!0,j=!1,k=void 0;try{for(var l=f[typeof Symbol==="function"?Symbol.iterator:"@@iterator"](),f;!(i=(f=
2023-06-06 08:40:21 UTC	6189	IN	Data Raw: 70 70 65 6e 64 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 66 2c 67 29 7b 76 61 72 20 68 3d 62 2e 6e 61 6d 65 3b 62 3d 62 2e 76 61 6c 75 65 3b 69 66 28 62 21 3d 6e 75 6c 6c 29 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 63 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 6a 3d 63 5b 69 5d 3b 6a 3d 3d 3d 68 26 26 74 68 69 73 2e 5f 72 65 6d 6f 76 65 4b 65 79 28 68 29 7d 65 28 62 29 3f 74 68 69 73 2e 5f 61 70 70 65 6e 64 50 72 69 6d 69 74 69 76 65 28 68 2c 62 2c 67 29 3a 66 3d 3d 3d 61 3f 74 68 69 73 2e 5f 61 70 70 65 6e 64 4f 62 6a 65 63 74 28 68 2c 62 2c 67 29 3a 74 68 69 73 2e 5f 61 70 70 65 6e 64 50 72 69 6d 69 74 69 76 65 28 68 2c 64 28 62 29 2c 67 29 7d 7d 2c 7b 6b 65 79 3a 22 5f 74 72 61 6e 73 6c 61 74 65 56 61 6c 75 65 22 2c 76 61 6c 75 Data Ascii: ppend",value:function(b,f,g){var h=b.name;b=b.value;if(b!=null)for(var i=0;i<c.length;i++){var j=c[i];j===h&&this._removeKey(h)}e(b)?this._appendPrimitive(h,b,g):f===a?this._appendObject(h,b,g):this._appendPrimitive(h,d(b),g)}},{key:"_translateValue",valu
2023-06-06 08:40:21 UTC	6190	IN	Data Raw: 20 61 2e 6a 6f 69 6e 28 22 26 22 29 7d 7d 2c 7b 6b 65 79 3a 22 74 6f 46 6f 72 6d 44 61 74 61 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 6e 65 77 20 46 6f 72 6d 44 61 74 61 28 29 3b 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 2e 61 70 70 65 6e 64 28 62 2c 63 29 7d 29 3b 72 65 74 75 72 6e 20 61 7d 7d 5d 2c 5b 7b 6b 65 79 3a 22 66 72 6f 6d 48 61 73 68 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 66 28 62 29 2e 61 70 70 65 6e 64 48 61 73 68 28 61 29 7d 7d 5d 29 3b 72 65 74 75 72 6e 20 66 7d 28 29 3b 6d 2e 65 78 70 6f 72 74 73 3d 66 7d 29 28 29 3b 72 65 74 75 72 6e 20 6d 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e Data Ascii: a.join("&")}},{key:"toFormData",value:function(){var a=new FormData();this.each(function(b,c){a.append(b,c)});return a}}],[{key:"fromHash",value:function(a,b){return new f(b).appendHash(a)}}]);return f}();m.exports=f})();return m.exports}(a,b,c,d)});f.en
2023-06-06 08:40:21 UTC	6191	IN	Data Raw: 75 72 6e 20 63 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 6b 2e 65 78 70 6f 72 74 73 3d 7b 72 65 61 64 50 61 63 6b 65 64 43 6f 6f 6b 69 65 3a 6f 2c 77 72 69 74 65 4e 65 77 43 6f 6f 6b 69 65 3a 73 2c 77 72 69 74 65 45 78 69 73 74 69 6e 67 43 6f 6f 6b 69 65 3a 72 2c 43 4c 49 43 4b 5f 49 44 5f 50 41 52 41 4d 45 54 45 52 3a 6c 2c 43 4c 49 43 4b 54 48 52 4f 55 47 48 5f 43 4f 4f 4b 49 45 5f 4e 41 4d 45 3a 63 2c 43 4c 49 43 4b 54 48 52 4f 55 47 48 5f 43 4f 4f 4b 49 45 5f 50 41 52 41 4d 3a 65 2c 44 4f 4d 41 49 4e 5f 53 43 4f 50 45 44 5f 42 52 4f 57 53 45 52 5f 49 44 5f 43 4f 4f 4b 49 45 5f 4e 41 4d 45 3a 69 2c 44 4f 4d 41 49 4e 5f 53 43 4f 50 45 44 5f 42 52 4f 57 53 45 52 5f 49 44 5f 43 4f 4f 4b 49 45 5f 50 41 52 41 4d 3a 6a 7d 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b Data Ascii: urn c}return null}k.exports={readPackedCookie:o,writeNewCookie:s,writeExistingCookie:r,CLICK_ID_PARAMETER:l,CLICKTHROUGH_COOKIE_NAME:c,CLICKTHROUGH_COOKIE_PARAM:e,DOMAIN_SCOPED_BROWSER_ID_COOKIE_NAME:i,DOMAIN_SCOPED_BROWSER_ID_COOKIE_PARAM:j}})();return k
2023-06-06 08:40:21 UTC	6193	IN	Data Raw: 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 21 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 28 62 29 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 62 5d 3d 61 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 65 74 49 77 6c 55 72 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 Data Ascii: tsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(
2023-06-06 08:40:21 UTC	6196	IN	Data Raw: 22 46 41 43 45 42 4f 4f 4b 5f 49 57 4c 5f 43 4f 4e 46 49 47 5f 53 54 4f 52 41 47 45 5f 4b 45 59 22 2c 6e 3d 61 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 3f 61 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 3a 7b 67 65 74 49 74 65 6d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 72 65 6d 6f 76 65 49 74 65 6d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 7d 2c 73 65 74 49 74 65 6d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3d 6e 65 77 20 68 28 66 75 6e 63 74 69 6f 6e 28 64 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 63 2c 64 29 7b 76 61 72 20 65 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 65 2e 61 73 79 6e 63 3d 21 30 3b 65 2e 6f 6e 6c 6f 61 64 3d 66 75 6e Data Ascii: "FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}};e.exports=new h(function(d,e){function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=fun
2023-06-06 08:40:21 UTC	6196	IN	Data Raw: 46 61 63 65 62 6f 6f 6b 49 57 4c 2e 69 6e 69 74 29 72 65 74 75 72 6e 3b 76 61 72 20 62 3d 6a 28 67 2e 45 4e 44 50 4f 49 4e 54 29 3b 62 21 3d 6e 75 6c 6c 26 26 61 2e 46 61 63 65 62 6f 6f 6b 49 57 4c 2e 73 65 74 26 26 61 2e 46 61 63 65 62 6f 6f 6b 49 57 4c 2e 73 65 74 28 22 74 69 65 72 22 2c 62 29 3b 64 28 29 7d 3b 61 2e 46 61 63 65 62 6f 6f 6b 49 57 4c 53 65 73 73 69 6f 6e 45 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 72 65 6d 6f 76 65 49 74 65 6d 28 6d 29 2c 61 2e 63 6c 6f 73 65 28 29 7d 3b 65 2e 73 72 63 3d 69 28 63 2c 67 2e 45 4e 44 50 4f 49 4e 54 29 3b 62 2e 62 6f 64 79 26 26 62 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 7d 76 61 72 20 6f 3d 21 31 2c 70 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 21 28 65 26 26 65 Data Ascii: FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=function(){n.removeItem(m),a.close()};e.src=i(c,g.ENDPOINT);b.body&&b.body.appendChild(e)}var o=!1,p=function(a){return!!(e&&e
2023-06-06 08:40:21 UTC	6197	IN	Data Raw: 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 69 77 6c 62 6f 6f 74 73 74 72 61 70 70 65 72 22 29 3b 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 26 26 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 69 77 6c 62 6f 6f 74 73 74 72 61 70 70 65 72 22 2c 65 2e 65 78 70 6f 72 74 73 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 69 77 6c 62 6f 6f 74 73 74 72 61 70 70 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 29 7d 29 28 29 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 6c 6f 63 61 74 69 6f 6e 2c 68 69 73 74 Data Ascii: dules("SignalsFBEvents.plugins.iwlbootstrapper");f.registerPlugin&&f.registerPlugin("fbevents.plugins.iwlbootstrapper",e.exports);f.ensureModuleRegistered("fbevents.plugins.iwlbootstrapper",function(){return e.exports})})()})(window,document,location,hist
2023-06-06 08:40:21 UTC	6199	IN	Data Raw: 78 70 6f 72 74 73 3d 7b 41 55 54 4f 5f 43 4f 4e 46 49 47 5f 4f 50 54 5f 4f 55 54 3a 31 3c 3c 30 2c 41 55 54 4f 5f 43 4f 4e 46 49 47 3a 31 3c 3c 31 2c 43 4f 4e 46 49 47 5f 4c 4f 41 44 49 4e 47 3a 31 3c 3c 32 2c 53 55 50 50 4f 52 54 53 5f 44 45 46 49 4e 45 5f 50 52 4f 50 45 52 54 59 3a 31 3c 3c 33 2c 53 55 50 50 4f 52 54 53 5f 53 45 4e 44 5f 42 45 41 43 4f 4e 3a 31 3c 3c 34 2c 48 41 53 5f 49 4e 56 41 4c 49 44 41 54 45 44 5f 50 49 49 3a 31 3c 3c 35 2c 53 48 4f 55 4c 44 5f 50 52 4f 58 59 3a 31 3c 3c 36 2c 49 53 5f 48 45 41 44 4c 45 53 53 3a 31 3c 3c 37 2c 49 53 5f 53 45 4c 45 4e 49 55 4d 3a 31 3c 3c 38 2c 48 41 53 5f 44 45 54 45 43 54 49 4f 4e 5f 46 41 49 4c 45 44 3a 31 3c 3c 39 2c 48 41 53 5f 43 4f 4e 46 4c 49 43 54 49 4e 47 5f 50 49 49 3a 31 3c 3c 31 30 2c Data Ascii: xports={AUTO_CONFIG_OPT_OUT:1<<0,AUTO_CONFIG:1<<1,CONFIG_LOADING:1<<2,SUPPORTS_DEFINE_PROPERTY:1<<3,SUPPORTS_SEND_BEACON:1<<4,HAS_INVALIDATED_PII:1<<5,SHOULD_PROXY:1<<6,IS_HEADLESS:1<<7,IS_SELENIUM:1<<8,HAS_DETECTION_FAILED:1<<9,HAS_CONFLICTING_PII:1<<10,
2023-06-06 08:40:21 UTC	6200	IN	Data Raw: 65 72 5f 75 6e 77 72 61 70 70 65 64 22 2c 22 5f 5f 64 72 69 76 65 72 5f 65 76 61 6c 75 61 74 65 22 2c 22 5f 5f 73 65 6c 65 6e 69 75 6d 5f 75 6e 77 72 61 70 70 65 64 22 2c 22 5f 5f 66 78 64 72 69 76 65 72 5f 75 6e 77 72 61 70 70 65 64 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 69 66 28 75 28 71 29 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 62 3d 6c 28 72 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 61 2e 64 6f 63 75 6d 65 6e 74 5b 62 5d 3f 21 30 3a 21 31 7d 29 3b 69 66 28 62 29 72 65 74 75 72 6e 21 30 3b 62 3d 61 2e 64 6f 63 75 6d 65 6e 74 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 2e 6d 61 74 63 68 28 2f 5c 24 5b 61 2d 7a 5d 64 63 5f 2f 29 26 26 62 5b 63 5d 2e 63 61 63 68 65 5f 29 72 65 74 75 72 6e 21 30 3b 69 66 28 61 Data Ascii: er_unwrapped","__driver_evaluate","__selenium_unwrapped","__fxdriver_unwrapped"];function s(){if(u(q))return!0;var b=l(r,function(b){return a.document[b]?!0:!1});if(b)return!0;b=a.document;for(var c in b)if(c.match(/\$[a-z]dc_/)&&b[c].cache_)return!0;if(a
2023-06-06 08:40:21 UTC	6202	IN	Data Raw: 5d 2c 69 2e 48 41 53 5f 49 4e 56 41 4c 49 44 41 54 45 44 5f 50 49 49 29 3b 63 3d 70 28 63 21 3d 6e 75 6c 6c 26 26 6c 5b 63 2e 69 64 5d 2c 69 2e 48 41 53 5f 41 55 54 4f 4d 41 54 43 48 45 44 5f 50 49 49 29 3b 76 61 72 20 73 3d 70 28 6a 2e 67 65 74 53 68 6f 75 6c 64 50 72 6f 78 79 28 29 2c 69 2e 53 48 4f 55 4c 44 5f 50 52 4f 58 59 29 2c 74 3d 76 28 29 3b 66 3d 66 7c 64 7c 67 7c 68 7c 6d 7c 72 7c 73 7c 74 2e 69 73 48 65 61 64 6c 65 73 73 7c 74 2e 69 73 53 65 6c 65 6e 69 75 6d 7c 74 2e 68 61 73 44 65 74 65 63 74 69 6f 6e 46 61 69 6c 65 64 7c 71 7c 63 3b 72 65 74 75 72 6e 7b 6f 3a 66 7d 7d 29 3b 6d 3d 21 30 7d 29 3b 6b 2e 4f 50 54 49 4f 4e 53 3d 69 3b 65 2e 65 78 70 6f 72 74 73 3d 6b 7d 29 28 29 3b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 Data Ascii: ],i.HAS_INVALIDATED_PII);c=p(c!=null&&l[c.id],i.HAS_AUTOMATCHED_PII);var s=p(j.getShouldProxy(),i.SHOULD_PROXY),t=v();f=f\|d\|g\|h\|m\|r\|s\|t.isHeadless\|t.isSelenium\|t.hasDetectionFailed\|q\|c;return{o:f}});m=!0});k.OPTIONS=i;e.exports=k})();return e.exports}(a,b
2023-06-06 08:40:21 UTC	6203	IN	Data Raw: 20 69 6e 73 74 61 6e 63 65 22 29 7d 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 68 28 61 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 3f 61 3a 41 72 72 61 79 2e 66 72 6f 6d 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 61 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 7b 66 6f 72 28 76 61 72 20 62 3d 30 2c 63 3d 41 72 72 61 79 28 61 2e 6c 65 6e 67 74 68 29 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 63 5b 62 5d 3d 61 5b 62 5d 3b 72 65 74 75 72 6e 20 63 7d 65 6c 73 65 20 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 61 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 Data Ascii: instance")}}();function h(a){return Array.isArray(a)?a:Array.from(a)}function i(a){if(Array.isArray(a)){for(var b=0,c=Array(a.length);b<a.length;b++)c[b]=a[b];return c}else return Array.from(a)}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsRes
2023-06-06 08:40:21 UTC	6205	IN	Data Raw: 6e 61 6c 73 46 42 45 76 65 6e 74 73 4d 6f 62 69 6c 65 41 70 70 42 72 69 64 67 65 22 29 2c 76 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 49 6e 6a 65 63 74 4d 65 74 68 6f 64 22 29 2c 77 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4d 61 6b 65 53 61 66 65 22 29 2c 78 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 52 65 73 6f 6c 76 65 4c 65 67 61 63 79 41 72 67 75 6d 65 6e 74 73 22 29 2c 79 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 6c 75 67 69 6e 4d 61 6e 61 67 65 72 22 29 2c 7a 3d Data Ascii: nalsFBEventsMobileAppBridge"),v=f.getFbeventsModules("signalsFBEventsInjectMethod"),w=f.getFbeventsModules("signalsFBEventsMakeSafe"),x=f.getFbeventsModules("signalsFBEventsResolveLegacyArguments"),y=f.getFbeventsModules("SignalsFBEventsPluginManager"),z=
2023-06-06 08:40:21 UTC	6206	IN	Data Raw: 2c 63 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 73 65 6e 64 22 3a 72 61 2e 61 70 70 6c 79 28 74 68 69 73 2c 63 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 6f 6e 22 3a 76 61 72 20 6a 3d 68 28 63 29 2c 6b 3d 6a 5b 30 5d 2c 6c 3d 6a 2e 73 6c 69 63 65 28 31 29 2c 6d 3d 41 5b 6b 5d 3b 6d 26 26 6d 2e 74 72 69 67 67 65 72 57 65 61 6b 6c 79 28 6c 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 6c 6f 61 64 50 6c 75 67 69 6e 22 3a 58 2e 6c 6f 61 64 50 6c 75 67 69 6e 28 63 5b 30 5d 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 64 61 74 61 50 72 6f 63 65 73 73 69 6e 67 4f 70 74 69 6f 6e 73 22 3a 73 77 69 74 63 68 28 63 2e 6c 65 6e 67 74 68 29 7b 63 61 73 65 20 31 3a 76 61 72 20 6e 3d 67 28 63 2c 31 29 2c 6f 3d 6e 5b 30 5d 3b 57 2e 70 6c 75 67 69 6e 43 6f 6e 66 69 67 2e 73 65 74 28 6e 75 6c Data Ascii: ,c);break;case"send":ra.apply(this,c);break;case"on":var j=h(c),k=j[0],l=j.slice(1),m=A[k];m&&m.triggerWeakly(l);break;case"loadPlugin":X.loadPlugin(c[0]);break;case"dataProcessingOptions":switch(c.length){case 1:var n=g(c,1),o=n[0];W.pluginConfig.set(nul
2023-06-06 08:40:21 UTC	6208	IN	Data Raw: 73 3a 65 2c 74 79 70 65 3a 22 49 4e 56 41 4c 49 44 5f 46 42 51 5f 4d 45 54 48 4f 44 5f 50 41 52 41 4d 45 54 45 52 22 7d 29 3b 62 72 65 61 6b 7d 57 2e 63 61 6c 6c 4d 65 74 68 6f 64 28 5b 6e 2c 6d 2c 22 41 75 74 6f 6d 61 74 69 63 53 65 74 75 70 22 5d 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 66 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 73 22 3a 76 61 72 20 6f 3d 63 5b 30 5d 2c 70 3d 63 5b 31 5d 2c 72 3d 6f 3d 3d 3d 21 30 7c 7c 6f 3d 3d 3d 22 74 72 75 65 22 3f 22 6f 70 74 49 6e 22 3a 22 6f 70 74 4f 75 74 22 3b 74 79 70 65 6f 66 20 70 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 57 2e 63 61 6c 6c 4d 65 74 68 6f 64 28 5b 72 2c 70 2c 22 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 73 22 5d 29 3a 70 3d 3d 3d 76 6f 69 64 20 30 3f 57 2e 64 69 73 61 62 6c 65 46 69 72 73 Data Ascii: s:e,type:"INVALID_FBQ_METHOD_PARAMETER"});break}W.callMethod([n,m,"AutomaticSetup"]);break;case"firstPartyCookies":var o=c[0],p=c[1],r=o===!0\|\|o==="true"?"optIn":"optOut";typeof p==="string"?W.callMethod([r,p,"FirstPartyCookies"]):p===void 0?W.disableFirs
2023-06-06 08:40:21 UTC	6209	IN	Data Raw: 72 61 6d 73 3a 65 2c 74 79 70 65 3a 22 49 4e 56 41 4c 49 44 5f 46 42 51 5f 4d 45 54 48 4f 44 5f 50 41 52 41 4d 45 54 45 52 22 7d 29 3b 62 72 65 61 6b 7d 69 66 28 49 3d 3d 6e 75 6c 6c 29 7b 4e 28 7b 69 6e 76 61 6c 69 64 50 61 72 61 6d 4e 61 6d 65 3a 22 6f 6e 5f 6f 72 5f 6f 66 66 22 2c 69 6e 76 61 6c 69 64 50 61 72 61 6d 56 61 6c 75 65 3a 47 2c 6d 65 74 68 6f 64 3a 22 73 65 74 22 2c 70 61 72 61 6d 73 3a 65 2c 74 79 70 65 3a 22 49 4e 56 41 4c 49 44 5f 46 42 51 5f 4d 45 54 48 4f 44 5f 50 41 52 41 4d 45 54 45 52 22 7d 29 3b 62 72 65 61 6b 7d 76 61 72 20 4b 3d 71 2e 76 61 6c 69 64 61 74 65 4d 65 74 61 64 61 74 61 28 61 29 3b 4b 2e 65 72 72 6f 72 26 26 4e 28 4b 2e 65 72 72 6f 72 29 3b 4b 2e 77 61 72 6e 69 6e 67 73 26 26 4b 2e 77 61 72 6e 69 6e 67 73 2e 66 6f 72 Data Ascii: rams:e,type:"INVALID_FBQ_METHOD_PARAMETER"});break}if(I==null){N({invalidParamName:"on_or_off",invalidParamValue:G,method:"set",params:e,type:"INVALID_FBQ_METHOD_PARAMETER"});break}var K=q.validateMetadata(a);K.error&&N(K.error);K.warnings&&K.warnings.for
2023-06-06 08:40:21 UTC	6210	IN	Data Raw: 5b 30 5d 2c 50 3d 63 5b 31 5d 3b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 54 68 65 20 6d 65 74 61 64 61 74 61 20 73 65 74 74 69 6e 67 20 70 72 6f 76 69 64 65 64 20 69 6e 20 74 68 65 20 27 73 65 74 27 20 63 61 6c 6c 20 69 73 20 69 6e 76 61 6c 69 64 2e 22 29 3b 69 66 28 74 79 70 65 6f 66 20 4f 21 3d 3d 22 73 74 72 69 6e 67 22 29 7b 69 66 28 4d 29 62 72 65 61 6b 3b 4e 28 7b 69 6e 76 61 6c 69 64 50 61 72 61 6d 4e 61 6d 65 3a 22 76 61 6c 75 65 22 2c 69 6e 76 61 6c 69 64 50 61 72 61 6d 56 61 6c 75 65 3a 4f 2c 6d 65 74 68 6f 64 3a 22 73 65 74 22 2c 70 61 72 61 6d 73 3a 65 2c 74 79 70 65 3a 22 49 4e 56 41 4c 49 44 5f 46 42 51 5f 4d 45 54 48 4f 44 5f 50 41 52 41 4d 45 54 45 52 22 7d 29 Data Ascii: [0],P=c[1];if(typeof a!=="string")throw new Error("The metadata setting provided in the 'set' call is invalid.");if(typeof O!=="string"){if(M)break;N({invalidParamName:"value",invalidParamValue:O,method:"set",params:e,type:"INVALID_FBQ_METHOD_PARAMETER"})
2023-06-06 08:40:21 UTC	6211	IN	Data Raw: 54 41 5f 4f 4e 5f 55 4e 49 4e 49 54 49 41 4c 49 5a 45 44 5f 50 49 58 45 4c 5f 49 44 22 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 2c 62 2c 63 29 7b 62 3d 62 7c 7c 7b 7d 2c 71 2e 76 61 6c 69 64 61 74 65 45 76 65 6e 74 41 6e 64 4c 6f 67 28 61 2c 62 29 2c 61 3d 3d 3d 22 43 75 73 74 6f 6d 45 76 65 6e 74 22 26 26 74 79 70 65 6f 66 20 62 2e 65 76 65 6e 74 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 28 61 3d 62 2e 65 76 65 6e 74 29 2c 70 61 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2c 62 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 2c 62 2c 63 29 7b 66 6f 72 28 76 61 72 20 64 3d 30 2c 65 3d 54 2e 6c 65 6e 67 74 68 3b 64 3c 65 3b 64 2b 2b 29 7b 76 61 72 20 66 3d 54 5b 64 5d 3b 69 66 28 21 28 61 3d 3d 3d 22 50 61 67 65 56 69 65 77 22 26 26 74 68 69 73 2e 61 6c 6c Data Ascii: TA_ON_UNINITIALIZED_PIXEL_ID"})}function oa(a,b,c){b=b\|\|{},q.validateEventAndLog(a,b),a==="CustomEvent"&&typeof b.event==="string"&&(a=b.event),pa.call(this,a,b,c)}function pa(a,b,c){for(var d=0,e=T.length;d<e;d++){var f=T[d];if(!(a==="PageView"&&this.all
2023-06-06 08:40:21 UTC	6213	IN	Data Raw: 6c 73 65 22 3b 65 2e 61 70 70 65 6e 64 28 22 63 6f 6f 22 2c 6c 29 3b 67 3d 57 2e 70 6c 75 67 69 6e 43 6f 6e 66 69 67 2e 67 65 74 57 69 74 68 47 6c 6f 62 61 6c 46 61 6c 6c 62 61 63 6b 28 61 3f 61 2e 69 64 3a 6e 75 6c 6c 2c 22 64 61 74 61 50 72 6f 63 65 73 73 69 6e 67 4f 70 74 69 6f 6e 73 22 29 3b 69 66 28 67 21 3d 6e 75 6c 6c 29 7b 69 3d 67 2e 64 61 74 61 50 72 6f 63 65 73 73 69 6e 67 43 6f 75 6e 74 72 79 3b 68 3d 67 2e 64 61 74 61 50 72 6f 63 65 73 73 69 6e 67 4f 70 74 69 6f 6e 73 3b 6b 3d 67 2e 64 61 74 61 50 72 6f 63 65 73 73 69 6e 67 53 74 61 74 65 3b 65 2e 61 70 70 65 6e 64 28 22 64 70 6f 22 2c 68 2e 6a 6f 69 6e 28 22 2c 22 29 29 3b 65 2e 61 70 70 65 6e 64 28 22 64 70 6f 63 6f 22 2c 69 29 3b 65 2e 61 70 70 65 6e 64 28 22 64 70 6f 73 74 22 2c 6b 29 7d Data Ascii: lse";e.append("coo",l);g=W.pluginConfig.getWithGlobalFallback(a?a.id:null,"dataProcessingOptions");if(g!=null){i=g.dataProcessingCountry;h=g.dataProcessingOptions;k=g.dataProcessingState;e.append("dpo",h.join(","));e.append("dpoco",i);e.append("dpost",k)}
2023-06-06 08:40:21 UTC	6214	IN	Data Raw: 2e 70 69 78 65 6c 49 64 29 29 3b 28 53 26 26 68 61 7c 7c 61 2e 66 62 71 21 3d 3d 61 2e 5f 66 62 71 29 26 26 4e 28 7b 74 79 70 65 3a 22 43 4f 4e 46 4c 49 43 54 49 4e 47 5f 56 45 52 53 49 4f 4e 53 22 7d 29 3b 54 2e 6c 65 6e 67 74 68 3e 31 26 26 4e 28 7b 74 79 70 65 3a 22 4d 55 4c 54 49 50 4c 45 5f 50 49 58 45 4c 53 22 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 76 61 28 29 7b 69 66 28 66 2e 64 69 73 61 62 6c 65 50 75 73 68 53 74 61 74 65 3d 3d 3d 21 30 29 72 65 74 75 72 6e 3b 69 66 28 21 64 2e 70 75 73 68 53 74 61 74 65 7c 7c 21 64 2e 72 65 70 6c 61 63 65 53 74 61 74 65 29 72 65 74 75 72 6e 3b 76 61 72 20 62 3d 77 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 61 3d 52 3b 52 3d 63 2e 68 72 65 66 3b 69 66 28 52 3d 3d 3d 69 61 29 72 65 74 75 72 6e 3b 76 61 72 20 61 3d 6e 65 Data Ascii: .pixelId));(S&&ha\|\|a.fbq!==a._fbq)&&N({type:"CONFLICTING_VERSIONS"});T.length>1&&N({type:"MULTIPLE_PIXELS"});function va(){if(f.disablePushState===!0)return;if(!d.pushState\|\|!d.replaceState)return;var b=w(function(){ia=R;R=c.href;if(R===ia)return;var a=ne
2023-06-06 08:40:21 UTC	6215	IN	Data Raw: 6d 65 22 3a 22 6e 6f 5f 63 64 5f 66 69 6c 74 65 72 65 64 5f 70 61 72 61 6d 73 22 2c 22 70 61 73 73 52 61 74 65 22 3a 30 2e 35 7d 2c 7b 22 61 6c 6c 6f 63 61 74 69 6f 6e 22 3a 30 2e 30 32 2c 22 63 6f 64 65 22 3a 22 63 22 2c 22 6e 61 6d 65 22 3a 22 6e 6f 5f 6f 70 5f 65 78 70 22 2c 22 70 61 73 73 52 61 74 65 22 3a 30 2e 35 7d 5d 29 3b 0a 63 6f 6e 66 69 67 2e 73 65 74 28 6e 75 6c 6c 2c 20 22 62 61 74 63 68 69 6e 67 22 2c 20 7b 22 62 61 74 63 68 57 61 69 74 54 69 6d 65 4d 73 22 3a 35 30 31 2c 22 6d 61 78 42 61 74 63 68 53 69 7a 65 22 3a 31 30 7d 29 3b 0a 63 6f 6e 66 69 67 2e 73 65 74 28 6e 75 6c 6c 2c 20 22 6d 69 63 72 6f 64 61 74 61 22 2c 20 7b 22 77 61 69 74 54 69 6d 65 4d 73 22 3a 35 30 30 7d 29 3b 69 6e 73 74 61 6e 63 65 2e 63 6f 6e 66 69 67 4c 6f 61 64 65 Data Ascii: me":"no_cd_filtered_params","passRate":0.5},{"allocation":0.02,"code":"c","name":"no_op_exp","passRate":0.5}]);config.set(null, "batching", {"batchWaitTimeMs":501,"maxBatchSize":10});config.set(null, "microdata", {"waitTimeMs":500});instance.configLoade

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
229	192.168.2.4	50136	172.217.168.38	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:21 UTC	6103	OUT	GET /activityi;dc_pre=CJ7y2cGfrv8CFVRCwgod1KANgA;src=8071582;type=hsbc_000;cat=hsbc_000;ord=807883971953;gtm=45fe35v0;auiddc=583344058.1686040849;u2=%2Fen-gb;u15=pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage;u16=pws%20home;u20=en-GB;u21=hsbc_000%7Chsbc_000%7Cstandard;uaa=x86;uab=64;uafvl=Chromium%3B104.0.5112.81%7C%2520Not%2520A%253BBrand%3B99.0.0.0%7CGoogle%2520Chrome%3B104.0.5112.81;uam=;uamb=0;uap=Windows;uapv=6.0.0;uaw=0;~oref=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb? HTTP/1.1 Host: 8071582.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: test_cookie=CheckForPermission
2023-06-06 08:40:21 UTC	6194	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:21 GMT Expires: Tue, 06 Jun 2023 08:40:21 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUlohWzlYCm1iwBwDONkA6PF9Sh03moKAC018uccgyCDeCWw-uTCBE2_3lq_e9o; expires=Thu, 05-Jun-2025 08:40:21 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-06-06 08:40:21 UTC	6195	IN	Data Raw: 32 63 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 4a 37 79 32 63 47 66 72 76 38 43 46 56 Data Ascii: 2c6<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CJ7y2cGfrv8CFV
2023-06-06 08:40:21 UTC	6199	IN	Data Raw: 73 72 63 3d 38 30 37 31 35 38 32 3b 74 79 70 65 3d 68 73 62 63 5f 30 30 30 3b 63 61 74 3d 68 73 62 63 5f 30 30 30 3b 6f 72 64 3d 38 30 37 38 38 33 39 37 31 39 35 33 3b 67 74 6d 3d 34 35 66 65 33 35 76 30 3b 61 75 69 64 64 63 3d 2a 3b 75 32 3d 25 32 46 65 6e 2d 67 62 3b 75 31 35 3d 70 77 73 25 32 30 25 33 41 25 32 30 70 77 73 25 32 30 68 6f 6d 65 25 32 30 25 33 41 25 32 30 6e 6f 25 32 30 73 65 67 6d 65 6e 74 25 32 30 25 33 41 25 32 30 70 77 73 25 32 30 68 6f 6d 65 70 61 67 65 3b 75 31 36 3d 70 77 73 25 32 30 68 6f 6d 65 3b 75 32 30 3d 65 6e 2d 47 42 3b 75 32 31 3d 68 73 62 63 5f 30 30 30 25 37 43 68 73 62 63 5f 30 30 30 25 37 43 73 74 61 6e 64 61 72 64 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 43 68 72 6f 6d 69 75 6d 25 33 42 31 30 Data Ascii: src=8071582;type=hsbc_000;cat=hsbc_000;ord=807883971953;gtm=45fe35v0;auiddc=*;u2=%2Fen-gb;u15=pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage;u16=pws%20home;u20=en-GB;u21=hsbc_000%7Chsbc_000%7Cstandard;uaa=x86;uab=64;uafvl=Chromium%3B10
2023-06-06 08:40:21 UTC	6203	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
23	192.168.2.4	49719	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:20 UTC	347	OUT	GET /front_end/front_end_files/security-details.css HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hs-login.online/front_end/front_end_files/ursula.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:20 UTC	350	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:20 GMT Content-Type: text/css Content-Length: 6010 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:47 GMT ETag: "177a-5fd65435f22fc" Accept-Ranges: bytes Vary: Accept-Encoding
2023-06-06 08:38:20 UTC	350	IN	Data Raw: 2e 75 72 73 75 6c 61 20 2e 73 65 63 75 72 69 74 79 44 65 74 61 69 6c 73 20 7b 0a 09 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 32 70 78 3b 0a 09 2f 2a 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 2a 2f 0a 7d 0a 2e 75 72 73 75 6c 61 20 2e 71 75 65 73 74 69 6f 6e 55 70 64 61 74 65 7b 0a 09 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 30 70 78 3b 0a 09 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 7d 0a 2e 75 72 73 75 6c 61 20 2e 73 65 63 75 72 69 74 79 44 65 74 61 69 6c 73 20 2e 77 65 6c 63 6f 6d 65 20 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 38 65 6d 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 09 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 32 70 78 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 Data Ascii: .ursula .securityDetails {padding-top: 2px;/padding-bottom: 20px;/}.ursula .questionUpdate{padding-top: 0px;padding-bottom: 20px;}.ursula .securityDetails .welcome {font-size: 1.8em;font-weight: normal;padding-bottom: 12px;line-heigh

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
230	192.168.2.4	50135	142.250.203.100	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:21 UTC	6216	OUT	GET /pagead/1p-user-list/951694704/?random=1686040849215&cv=9&fst=1686038400000&num=1&guid=ON&eid=466465926&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=120&u_java=false&u_nplug=0&u_nmime=0&sendb=1&frm=0&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&async=1&fmt=3&is_vtc=1&random=1331164780&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:21 UTC	6216	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-06-06 08:40:21 UTC	6217	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
231	192.168.2.4	50139	52.49.176.241	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:21 UTC	6217	OUT	GET /ibs:dpid=411&dpuuid=ZH7w9AAAAGsdtANn HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: demdex=32441017531906322422556814171626086572; dpm=32441017531906322422556814171626086572
2023-06-06 08:40:21 UTC	6217	IN	HTTP/1.1 200 OK Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Content-Type: image/gif DCS: dcs-prod-irl1-1-v048-0a325e179.edge-irl1.demdex.com 2 ms Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Pragma: no-cache set-cookie: dpm=32441017531906322422556814171626086572; Max-Age=15552000; Expires=Sun, 03 Dec 2023 08:40:21 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=32441017531906322422556814171626086572; Max-Age=15552000; Expires=Sun, 03 Dec 2023 08:40:21 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-TID: uStK0eAYS3E= Content-Length: 42 Connection: Close
2023-06-06 08:40:21 UTC	6218	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
232	192.168.2.4	50148	108.138.36.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:21 UTC	6218	OUT	GET /tags/dnb_coretag_v4.min.js HTTP/1.1 Host: cdn-0.d41.co Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:21 UTC	6221	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 76079 Connection: close Last-Modified: Thu, 18 Nov 2021 14:57:32 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 06 Jun 2023 08:23:46 GMT ETag: "c5b0d60b7c887bcae6d8897835a15d14" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 210c8ad3e752d602af05a2de06eb2ff8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P2 X-Amz-Cf-Id: bMmrbF6eIpKFE0kYoWNm4gKh4pUJfW4xg-YhEUHCTRXoCboN--3TGQ== Age: 996
2023-06-06 08:40:21 UTC	6221	IN	Data Raw: 2f 2f 20 56 65 72 73 69 6f 6e 20 35 2e 31 2e 30 0a 2f 2f 20 46 6f 72 20 6f 70 74 2d 6f 75 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 70 6c 65 61 73 65 20 76 69 73 69 74 3a 20 68 74 74 70 73 3a 2f 2f 64 34 31 2e 63 6f 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 39 36 36 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 76 61 72 20 6e 3d 65 28 36 31 34 29 2c 6f 3d 65 28 36 33 33 30 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6e 28 74 29 29 72 65 74 75 72 6e 20 74 3b 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 6f 28 74 29 2b 22 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 7d 2c 39 34 38 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 76 61 72 20 6e 3d 65 28 34 34 31 31 Data Ascii: // Version 5.1.0// For opt-out information, please visit: https://d41.co/!function(){var t={9662:function(t,r,e){var n=e(614),o=e(6330);t.exports=function(t){if(n(t))return t;throw TypeError(o(t)+" is not a function")}},9483:function(t,r,e){var n=e(4411
2023-06-06 08:40:21 UTC	6237	IN	Data Raw: 20 74 2c 72 3d 21 31 2c 65 3d 7b 7d 3b 74 72 79 7b 28 74 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 5f 5f 70 72 6f 74 6f 5f 5f 22 29 2e 73 65 74 29 2e 63 61 6c 6c 28 65 2c 5b 5d 29 2c 72 3d 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 72 65 74 75 72 6e 20 6e 28 65 29 2c 6f 28 69 29 2c 72 3f 74 2e 63 61 6c 6c 28 65 2c 69 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 69 2c 65 7d 7d 28 29 3a 76 6f 69 64 20 30 29 7d 2c 32 38 38 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 65 28 31 36 39 34 Data Ascii: t,r=!1,e={};try{(t=Object.getOwnPropertyDescriptor(Object.prototype,"__proto__").set).call(e,[]),r=e instanceof Array}catch(t){}return function(e,i){return n(e),o(i),r?t.call(e,i):e.__proto__=i,e}}():void 0)},288:function(t,r,e){"use strict";var n=e(1694
2023-06-06 08:40:21 UTC	6253	IN	Data Raw: 29 2c 66 28 51 2c 6e 29 3f 28 65 2e 65 6e 75 6d 65 72 61 62 6c 65 3f 28 66 28 74 2c 4d 29 26 26 74 5b 4d 5d 5b 6e 5d 26 26 28 74 5b 4d 5d 5b 6e 5d 3d 21 31 29 2c 65 3d 77 28 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 6d 28 30 2c 21 31 29 7d 29 29 3a 28 66 28 74 2c 4d 29 7c 7c 59 28 74 2c 4d 2c 6d 28 31 2c 7b 7d 29 29 2c 74 5b 4d 5d 5b 6e 5d 3d 21 30 29 2c 69 74 28 74 2c 6e 2c 65 29 29 3a 59 28 74 2c 6e 2c 65 29 7d 2c 61 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 79 28 74 29 3b 76 61 72 20 65 3d 62 28 72 29 2c 6e 3d 6a 28 65 29 2e 63 6f 6e 63 61 74 28 70 74 28 65 29 29 3b 72 65 74 75 72 6e 20 55 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 75 26 26 21 73 74 2e 63 61 6c 6c 28 65 2c 72 29 7c 7c 75 74 28 74 2c 72 2c 65 5b 72 5d 29 7d 29 29 2c 74 7d 2c Data Ascii: ),f(Q,n)?(e.enumerable?(f(t,M)&&t[M][n]&&(t[M][n]=!1),e=w(e,{enumerable:m(0,!1)})):(f(t,M)\|\|Y(t,M,m(1,{})),t[M][n]=!0),it(t,n,e)):Y(t,n,e)},at=function(t,r){y(t);var e=b(r),n=j(e).concat(pt(e));return U(n,(function(r){u&&!st.call(e,r)\|\|ut(t,r,e[r])})),t},
2023-06-06 08:40:21 UTC	6254	IN	Data Raw: 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 76 61 72 20 65 3d 62 28 74 29 2c 6e 3d 67 28 72 29 3b 69 66 28 65 21 3d 3d 56 7c 7c 21 66 28 51 2c 6e 29 7c 7c 66 28 5a 2c 6e 29 29 7b 76 61 72 20 6f 3d 4a 28 65 2c 6e 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 21 66 28 51 2c 6e 29 7c 7c 66 28 65 2c 4d 29 26 26 65 5b 4d 5d 5b 6e 5d 7c 7c 28 6f 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 21 30 29 2c 6f 7d 7d 2c 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 4b 28 62 28 74 29 29 2c 65 3d 5b 5d 3b 72 65 74 75 72 6e 20 55 28 72 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 28 51 2c 74 29 7c 7c 66 28 52 2c 74 29 7c 7c 65 2e 70 75 73 68 28 74 29 7d 29 29 2c 65 7d 2c 70 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 74 3d 3d 3d 56 2c 65 3d 4b 28 72 3f 5a 3a 62 28 Data Ascii: nction(t,r){var e=b(t),n=g(r);if(e!==V\|\|!f(Q,n)\|\|f(Z,n)){var o=J(e,n);return!o\|\|!f(Q,n)\|\|f(e,M)&&e[M][n]\|\|(o.enumerable=!0),o}},lt=function(t){var r=K(b(t)),e=[];return U(r,(function(t){f(Q,t)\|\|f(R,t)\|\|e.push(t)})),e},pt=function(t){var r=t===V,e=K(r?Z:b(
2023-06-06 08:40:21 UTC	6270	IN	Data Raw: 28 74 29 7b 76 61 72 20 72 3d 74 79 70 65 6f 66 20 74 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 72 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 72 7c 7c 22 73 79 6d 62 6f 6c 22 3d 3d 72 7c 7c 22 62 6f 6f 6c 65 61 6e 22 3d 3d 72 3f 22 5f 5f 70 72 6f 74 6f 5f 5f 22 21 3d 3d 74 3a 6e 75 6c 6c 3d 3d 3d 74 7d 7d 2c 35 33 34 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 76 61 72 20 6e 2c 6f 3d 65 28 34 34 32 39 29 2c 69 3d 28 6e 3d 2f 5b 5e 2e 5d 2b 24 2f 2e 65 78 65 63 28 6f 26 26 6f 2e 6b 65 79 73 26 26 6f 2e 6b 65 79 73 2e 49 45 5f 50 52 4f 54 4f 7c 7c 22 22 29 29 3f 22 53 79 6d 62 6f 6c 28 73 72 63 29 5f 31 2e 22 2b 6e 3a 22 22 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 21 69 26 26 69 20 69 6e 20 74 7d Data Ascii: (t){var r=typeof t;return"string"==r\|\|"number"==r\|\|"symbol"==r\|\|"boolean"==r?"__proto__"!==t:null===t}},5346:function(t,r,e){var n,o=e(4429),i=(n=/[^.]+$/.exec(o&&o.keys&&o.keys.IE_PROTO\|\|""))?"Symbol(src)_1."+n:"";t.exports=function(t){return!!i&&i in t}
2023-06-06 08:40:21 UTC	6286	IN	Data Raw: 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 74 5b 72 5d 3d 65 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 61 28 74 2c 72 2c 65 2c 6e 2c 6f 2c 69 2c 63 29 7b 74 72 79 7b 76 61 72 20 75 3d 74 5b 69 5d 28 63 29 2c 61 3d 75 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 65 28 74 29 7d 75 2e 64 6f 6e 65 3f 72 28 61 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 61 29 2e 74 68 65 6e 28 6e 2c 6f 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 65 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 Data Ascii: ,enumerable:!0,configurable:!0,writable:!0}):t[r]=e,t}function a(t,r,e,n,o,i,c){try{var u=t[i](c),a=u.value}catch(t){return void e(t)}u.done?r(a):Promise.resolve(a).then(n,o)}function s(t){return function(){var r=this,e=arguments;return new Promise((funct

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
233	192.168.2.4	50138	63.140.62.160	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:21 UTC	6219	OUT	GET /b/ss/hsbc-cmb-uk,hsbc-cmb-rollup/1/JS-2.22.3/s41061724382589?AQB=1&ndh=1&pf=1&t=6%2F5%2F2023%2010%3A40%3A48%202%20-120&sdid=0067F0708B951120-2759B85EE3002AB0&mid=32901345357897319322582280331317906370&aamlh=6&ce=UTF-8&ns=hsbcbankglobal&cdp=2&cl=64454400&pageName=pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage&g=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&cc=USD&ch=pws%20home&server=www.business.hsbc.uk&events=event5&aamb=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&v1=pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage&c2=pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage&v2=pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage&c3=pws%20home&v3=www.business.hsbc.uk%2Fen-gb&v4=pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage&c5=pws%20home&v5=CMB&c6=hsbc-cmb-uk%2Chsbc-cmb-rollup&v6=Business&c7=10%3A40%20AM%7CTuesday&v7=pws%20home&v8=pws%20home&v9=na%20%3A%20unsegmented%20%3A%20no%20segment%20%3A%20na&v10=HSBC&v11=Europe&v12=en-GB&c13=Accept%20All&v13=United%20Kingdom&v14=Web&v15=10%3A40%20AM%7CTuesday&v16=hsbc-cmb-uk%2Chsbc-cmb-rollup&c17=uk-cmb&v17=uk-cmb&v98=Full%20Consent&v99=Accept%20All&v100=430785c2-f631-4694-8789-21d518ee92f7&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=913&mcorgid=8BB4398F57FF7F980A495E57%40AdobeOrg&AQE=1 HTTP/1.1 Host: hsbcglobalcmb.sc.omtrdc.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:21 UTC	6253	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Tue, 06 Jun 2023 08:40:21 GMT expires: Mon, 05 Jun 2023 08:40:21 GMT last-modified: Wed, 07 Jun 2023 08:40:21 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag etag: 3620745094202195968-4619567726882473032 vary: * content-type: image/gif;charset=utf-8 content-length: 43 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2023-06-06 08:40:21 UTC	6254	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
234	192.168.2.4	50142	18.159.165.110	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:21 UTC	6296	OUT	GET /vdata/i.gif?tealium_cookie_sync=true&tealium_vid=01888fdcaa1f00511f81618bb8280006f002206700918hsbcuk-cmb&tealium_account=hsbc&tealium_profile=uk-cmb&tealium_datasource=qvl078&google_gid=CAESEKCZEbzwFPkcrhvt-Q-TlKk&google_cver=1 HTTP/1.1 Host: datacloud.tealiumiq.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TAPID=hsbc/uk-cmb>01888fdcaa1f00511f81618bb8280006f002206700918\|
2023-06-06 08:40:21 UTC	6298	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:40:21 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-acc: hsbc:uk-cmb:2:vdata X-did: 01888fdcaa1f00511f81618bb8280006f002206700918hsbcuk-cmb X-Region: eu-central-1 X-ServerID: uconnect_i-07282ea3bd5729a6c Pragma: no-cache P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR ADM DEV OUR BUS" Cache-Control: no-transform,private,no-cache,no-store,max-age=0,s-maxage=0 X-tid: 01888fdcaa1f00511f81618bb8280006f002206700918 X-ULVer: 018752aa776d74895d87a1c24d937d42b559f87e-SNAPSHOT Vary: Origin Expires: Tue, 06 Jun 2023 08:40:21 GMT X-UUID: 3d31bf4d-9206-4fef-974b-a5655f2867a8 Set-Cookie: TAPID=hsbc/uk-cmb>01888fdcaa1f00511f81618bb8280006f002206700918\|; Path=/; Domain=.tealiumiq.com; Expires=Wed, 05-Jun-2024 08:40:21 GMT; Max-Age=31536000; Secure; HttpOnly; SameSite=None Set-Cookie: tcs.google_gid=eyJoc2JjL3VrLWNtYiI6IkNBRVNFS0NaRWJ6d0ZQa2NyaHZ0LVEtVGxLa3wxNjg2MDQwODIxODI5In0=; Path=/; Domain=.tealiumiq.com; Expires=Tue, 05-Dec-2023 08:40:21 GMT; Max-Age=15724800; Secure; HttpOnly; SameSite=None Set-Cookie: tcs.google_cver=eyJoc2JjL3VrLWNtYiI6IjF8MTY4NjA0MDgyMTgyOSJ9; Path=/; Domain=.tealiumiq.com; Expires=Tue, 05-Dec-2023 08:40:21 GMT; Max-Age=15724800; Secure; HttpOnly; SameSite=None
2023-06-06 08:40:21 UTC	6299	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
235	192.168.2.4	50145	192.29.203.179	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:21 UTC	6297	OUT	GET /visitor/v200/svrGP.aspx?pps=3&siteid=1706134858&ref=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&ref2=elqNone&tzo=-60&ms=658&optin=disabled&elqCookie=1 HTTP/1.1 Host: s1706134858.t.eloqua.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: ELOQUA=GUID=5E26E50CA9DC49E18BC385F65984233A; ELQSTATUS=OK
2023-06-06 08:40:21 UTC	6301	IN	HTTP/1.1 200 OK Cache-Control: no-store Pragma: no-cache Content-Type: image/gif Expires: -1 X-Robots-Tag: noindex, nofollow X-Xss-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains; preload P3P: CP="IDC DSP COR DEVa TAIa OUR BUS PHY ONL UNI COM NAV CNT STA", X-Content-Type-Options: nosniff Date: Tue, 06 Jun 2023 08:40:21 GMT Connection: close Content-Length: 49
2023-06-06 08:40:21 UTC	6302	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
236	192.168.2.4	50146	142.250.203.100	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:21 UTC	6299	OUT	GET /pagead/1p-user-list/951694704/?random=1686040849230&cv=9&fst=1686038400000&num=1&guid=ON&eid=466465926%2C512247839&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=120&u_java=false&u_nplug=0&u_nmime=0&sendb=1&frm=0&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&async=1&fmt=3&is_vtc=1&random=208862709&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:21 UTC	6302	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-06-06 08:40:21 UTC	6302	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
237	192.168.2.4	50147	142.250.203.100	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:21 UTC	6300	OUT	GET /pagead/1p-user-list/951694704/?random=1686040849683&cv=11&fst=1686038400000&bg=ffffff&guid=ON&async=1&gtm=45be35v0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&frm=0&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=1061625469&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:21 UTC	6302	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-06-06 08:40:21 UTC	6303	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
238	192.168.2.4	50153	52.95.122.74	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:22 UTC	6303	OUT	GET /s/dcm?pid=76a94f42-342e-4e49-8d00-c8c2eddefafe&id=2100526a57c4d947f739b437aeb10732abf660c73cf56e50d1ba58d5e3e0ba6a HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: ad-id=A89flO4ujEfNt2WVGlm5Omo; ad-privacy=0
2023-06-06 08:40:22 UTC	6304	IN	HTTP/1.1 200 OK Server: Server Date: Tue, 06 Jun 2023 08:40:22 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: FBDSHJ0WTY9E5MNVP1NY Set-Cookie: ad-id=A89flO4ujEfNt2WVGlm5Omo; Domain=.amazon-adsystem.com; Expires=Mon, 01-Jan-2024 08:40:22 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sat, 01-Jul-2028 08:40:22 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2023-06-06 08:40:22 UTC	6304	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
239	192.168.2.4	50152	54.81.54.200	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:22 UTC	6304	OUT	GET /api?req=hw0ebfaguc&form=json HTTP/1.1 Host: hw0ebfaguc.d41.co Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.business.hsbc.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.business.hsbc.uk/en-gb Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:22 UTC	6311	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-origin: https://www.business.hsbc.uk Cache-control: no-store Content-Type: application/json; charset=utf-8 Date: Tue, 06 Jun 2023 08:40:22 GMT Expect-CT: max-age=30, report-uri="https://a54b4ab95d40a8b116fae47033b75682.report-uri.com/r/d/ct/reportOnly" Pragma: no-cache Referrer-Policy: no-referrer-when-downgrade Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Content-Length: 44 Connection: Close
2023-06-06 08:40:22 UTC	6312	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 34 30 30 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 49 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 22 7d Data Ascii: {"status":"400","message":"Invalid request"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
24	192.168.2.4	49721	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:20 UTC	356	OUT	GET /front_end/front_end_files/side-box.css HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hs-login.online/front_end/front_end_files/ursula.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:20 UTC	359	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:20 GMT Content-Type: text/css Content-Length: 2215 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:47 GMT ETag: "8a7-5fd65436174bd" Accept-Ranges: bytes Vary: Accept-Encoding
2023-06-06 08:38:20 UTC	359	IN	Data Raw: 2e 75 72 73 75 6c 61 20 2e 73 69 64 65 42 6f 78 20 7b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 7d 0a 2e 75 72 73 75 6c 61 20 2e 73 69 64 65 42 6f 78 20 68 33 20 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 2e 34 65 6d 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 33 32 70 78 3b 0a 7d 0a 2e 75 72 73 75 6c 61 20 2e 73 69 64 65 42 6f 78 20 68 34 20 7b 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 70 78 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 34 70 78 3b 0a 7d 0a 2e 75 72 73 75 6c 61 20 2e 73 69 64 65 42 6f 78 20 70 20 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 34 65 6d 3b 0a 09 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 31 70 78 3b 0a 7d 0a 2e 75 72 73 75 6c 61 20 2e 73 69 64 65 42 6f 78 20 70 2e 69 6e 74 72 6f 20 7b 0a Data Ascii: .ursula .sideBox {width: 100%;}.ursula .sideBox h3 {font-size: 2.4em;line-height: 32px;}.ursula .sideBox h4 {margin-bottom: 0px;line-height: 24px;}.ursula .sideBox p {font-size: 1.4em;padding-bottom: 11px;}.ursula .sideBox p.intro {

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
240	192.168.2.4	50156	172.217.168.67	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:22 UTC	6305	OUT	GET /pagead/1p-user-list/951694704/?random=1686040849215&cv=9&fst=1686038400000&num=1&guid=ON&eid=466465926&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=120&u_java=false&u_nplug=0&u_nmime=0&sendb=1&frm=0&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&async=1&fmt=3&is_vtc=1&random=1331164780&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1 Host: www.google.ch Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:22 UTC	6306	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-06-06 08:40:22 UTC	6307	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
241	192.168.2.4	50155	172.217.168.67	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:22 UTC	6307	OUT	GET /pagead/1p-user-list/951694704/?random=1686040849215&cv=9&fst=1686038400000&num=1&guid=ON&eid=466465926&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=120&u_java=false&u_nplug=0&u_nmime=0&sendb=1&frm=0&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&async=1&fmt=3&is_vtc=1&random=1331164780&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1 Host: www.google.ch Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:22 UTC	6310	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-06-06 08:40:22 UTC	6310	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
242	192.168.2.4	50160	104.244.42.195	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:22 UTC	6308	OUT	GET /i/adsct?bci=3&eci=2&event_id=e9bd595a-cf13-441f-89c2-2f047b729db9&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=1ee52750-caa9-462d-b6ec-587d004e8ac1&tw_document_href=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=ny1a1&type=javascript&version=2.3.29 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: personalization_id="v1_3DSgJqCNGL3VyphFos6vsQ=="
2023-06-06 08:40:22 UTC	6313	IN	HTTP/1.1 200 OK date: Tue, 06 Jun 2023 08:40:21 GMT perf: 7626143928 server: tsa_o content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 6d916e31d3f628c1 strict-transport-security: max-age=631138519 x-response-time: 103 x-connection-hash: 78ea8882bf8e7ba6736f643be497366566e8999462f318baa7b466fea0953dee connection: close
2023-06-06 08:40:22 UTC	6313	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
243	192.168.2.4	50172	192.29.203.179	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:22 UTC	6308	OUT	GET /visitor/v200/svrGP.aspx?pps=3&siteid=1706134858&ref=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&ref2=elqNone&tzo=-60&ms=658&optin=disabled&elqCookie=1 HTTP/1.1 Host: s1706134858.t.eloqua.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: ELOQUA=GUID=5E26E50CA9DC49E18BC385F65984233A; ELQSTATUS=OK
2023-06-06 08:40:22 UTC	6312	IN	HTTP/1.1 200 OK Cache-Control: no-store Pragma: no-cache Content-Type: image/gif Expires: -1 X-Robots-Tag: noindex, nofollow X-Xss-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains; preload P3P: CP="IDC DSP COR DEVa TAIa OUR BUS PHY ONL UNI COM NAV CNT STA", X-Content-Type-Options: nosniff Date: Tue, 06 Jun 2023 08:40:22 GMT Connection: close Content-Length: 49
2023-06-06 08:40:22 UTC	6312	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
244	192.168.2.4	50170	142.250.203.100	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:22 UTC	6309	OUT	GET /pagead/1p-user-list/951694704/?random=1686040849230&cv=9&fst=1686038400000&num=1&guid=ON&eid=466465926%2C512247839&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=120&u_java=false&u_nplug=0&u_nmime=0&sendb=1&frm=0&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&async=1&fmt=3&is_vtc=1&random=208862709&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:22 UTC	6310	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-06-06 08:40:22 UTC	6311	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
245	192.168.2.4	50161	142.250.203.100	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:22 UTC	6312	OUT	GET /pagead/1p-user-list/951694704/?random=1686040849683&cv=11&fst=1686038400000&bg=ffffff&guid=ON&async=1&gtm=45be35v0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&frm=0&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=1061625469&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:22 UTC	6314	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-06-06 08:40:22 UTC	6315	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
246	192.168.2.4	50159	104.244.42.133	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:22 UTC	6313	OUT	GET /i/adsct?bci=3&eci=2&event_id=e9bd595a-cf13-441f-89c2-2f047b729db9&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=1ee52750-caa9-462d-b6ec-587d004e8ac1&tw_document_href=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=ny1a1&type=javascript&version=2.3.29 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: muc_ads=b5dc3a7d-52d4-41db-920a-66bc28ac6ef5
2023-06-06 08:40:22 UTC	6318	IN	HTTP/1.1 200 OK date: Tue, 06 Jun 2023 08:40:22 GMT perf: 7626143928 server: tsa_o content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 40ec38a4afed4c98 strict-transport-security: max-age=0 x-response-time: 109 x-connection-hash: 0c58e4254a0b3c59c75d8e6f66934f8e1f1fc2b0d90ac352d478a2ba68a43d9c connection: close
2023-06-06 08:40:22 UTC	6319	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
247	192.168.2.4	50154	54.81.54.200	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:22 UTC	6315	OUT	GET /api?req=hw0ebfaguc&form=json HTTP/1.1 Host: hw0ebfaguc.d41.co Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.business.hsbc.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.business.hsbc.uk/en-gb Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:22 UTC	6628	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-origin: https://www.business.hsbc.uk Cache-control: no-store Content-Type: application/json; charset=utf-8 Date: Tue, 06 Jun 2023 08:40:22 GMT Expect-CT: max-age=30, report-uri="https://a54b4ab95d40a8b116fae47033b75682.report-uri.com/r/d/ct/reportOnly" Pragma: no-cache Referrer-Policy: no-referrer-when-downgrade Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Content-Length: 44 Connection: Close
2023-06-06 08:40:22 UTC	6628	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 34 30 30 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 49 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 22 7d Data Ascii: {"status":"400","message":"Invalid request"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
248	192.168.2.4	50157	172.217.168.67	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:22 UTC	6315	OUT	GET /pagead/1p-user-list/951694704/?random=1686040849230&cv=9&fst=1686038400000&num=1&guid=ON&eid=466465926%2C512247839&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=120&u_java=false&u_nplug=0&u_nmime=0&sendb=1&frm=0&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&async=1&fmt=3&is_vtc=1&random=208862709&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1 Host: www.google.ch Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:22 UTC	6317	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-06-06 08:40:22 UTC	6318	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
249	192.168.2.4	50178	172.217.168.67	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:22 UTC	6316	OUT	GET /pagead/1p-user-list/951694704/?random=1686040849683&cv=11&fst=1686038400000&bg=ffffff&guid=ON&async=1&gtm=45be35v0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&frm=0&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=1061625469&rmt_tld=1&ipr=y HTTP/1.1 Host: www.google.ch Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:22 UTC	6318	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-06-06 08:40:22 UTC	6318	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
25	192.168.2.4	49720	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:20 UTC	357	OUT	GET /front_end/front_end_files/stepTracker.css HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hs-login.online/front_end/front_end_files/ursula.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:20 UTC	362	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:20 GMT Content-Type: text/css Content-Length: 3700 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:47 GMT ETag: "e74-5fd654364531d" Accept-Ranges: bytes Vary: Accept-Encoding
2023-06-06 08:38:20 UTC	362	IN	Data Raw: 62 6f 64 79 20 2e 72 6f 77 2e 73 74 65 70 52 6f 77 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 30 20 36 70 78 3b 0a 7d 0a 75 6c 2e 73 74 65 70 54 72 61 63 6b 65 72 20 7b 0a 09 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 34 70 78 3b 0a 7d 0a 75 6c 2e 73 74 65 70 54 72 61 63 6b 65 72 20 6c 69 20 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 32 65 6d 3b 0a 09 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 32 35 70 78 3b 0a 09 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 09 77 69 64 74 68 3a 20 31 37 2e 34 31 36 36 65 6d 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 22 69 6d 61 67 65 73 2f 53 74 65 70 54 72 61 63 6b 65 72 2f 62 67 2d 73 74 65 70 54 72 61 63 6b 65 72 32 2d 73 70 72 69 74 65 2e 67 69 66 22 29 Data Ascii: body .row.stepRow { padding: 0 0 6px;}ul.stepTracker {float: left;margin-top: 24px;}ul.stepTracker li {font-size: 1.2em;padding-right: 25px;float: left;width: 17.4166em;background: url("images/StepTracker/bg-stepTracker2-sprite.gif")

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
250	192.168.2.4	50179	157.240.17.15	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:22 UTC	6319	OUT	GET /signals/config/1531021340402099?v=2.9.106&r=stable HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:22 UTC	6323	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"} content-security-policy: default-src facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com data: blob: 'self';script-src .fbcdn.net .facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;connect-src .fbcdn.net .facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0; x-fb-rlafr: 0 document-policy: force-load-at-top permissions-policy: accelerometer=(), ambient-light-sensor=(), bluetooth=(), gyroscope=(), hid=(), idle-detection=(), magnetometer=(), midi=(), screen-wake-lock=(), serial=(), usb=() cross-origin-resource-policy: cross-origin cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin-allow-popups Pragma: public Cache-Control: public, max-age=1200 Expires: Sat, 01 Jan 2000 00:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-Frame-Options: DENY Strict-Transport-Security: max-age=31536000; preload; includeSubDomains X-FB-Debug: xb1M4F5irRCqhx9RE+YcrQ+tIZVQez3NnCAZexjjVcR+JyfS1aAWeh3rkyM6wpMysV5OuikgJz2ltNT1Irv7yw== X-FB-TRIP-ID: 1679558926 Date: Tue, 06 Jun 2023 08:40:22 GMT Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 307408
2023-06-06 08:40:22 UTC	6325	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2023-06-06 08:40:22 UTC	6326	IN	Data Raw: 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 Data Ascii: urn!0}())return;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="func
2023-06-06 08:40:22 UTC	6328	IN	Data Raw: 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d Data Ascii: Object.setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=
2023-06-06 08:40:22 UTC	6329	IN	Data Raw: 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 2c 66 3d 6e 75 6c 6c 2c 67 3d 65 2e 63 61 73 65 49 6e 73 65 6e 73 69 74 69 76 65 2c 68 3d 65 2e 6c 6f 77 65 72 63 61 73 65 2c 69 3d 65 2e 6f 70 74 69 6f 6e 73 2c 6a 3d 65 2e 74 72 75 6e 63 61 74 65 2c 6b 3d 65 2e 75 70 70 65 72 63 61 73 65 3b 69 66 28 61 21 3d 6e 75 6c 6c 26 26 69 21 3d 6e 75 6c 6c 26 26 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 69 29 26 26 69 2e 6c 65 6e 67 74 68 29 69 66 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 63 28 61 29 29 66 3d 61 3b 65 6c 73 65 7b 76 61 72 20 6c 3d 64 28 53 74 72 69 6e 67 28 61 29 29 3b 68 3d 3d 3d 21 30 26 26 28 6c 3d 6c 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 6b 3d 3d 3d 21 30 26 26 28 6c 3d 6c 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 29 Data Ascii: rguments[1]:{},f=null,g=e.caseInsensitive,h=e.lowercase,i=e.options,j=e.truncate,k=e.uppercase;if(a!=null&&i!=null&&Array.isArray(i)&&i.length)if(typeof a==="string"&&c(a))f=a;else{var l=d(String(a));h===!0&&(l=l.toLowerCase());k===!0&&(l=l.toUpperCase())
2023-06-06 08:40:22 UTC	6331	IN	Data Raw: 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 6e 6f 72 6d 61 6c 69 7a 65 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 74 72 69 6e 67 54 79 70 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 68 61 72 65 64 22 29 2c 62 3d 61 2e 75 6e 69 63 6f 64 65 53 61 66 65 54 72 75 6e 63 61 74 65 3b 61 3d 66 Data Ascii: n k.exports}(a,b,c,d)});f.ensureModuleRegistered("normalizeSignalsFBEventsStringType",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsShared"),b=a.unicodeSafeTruncate;a=f
2023-06-06 08:40:22 UTC	6332	IN	Data Raw: 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 2c 61 29 26 26 62 5b 61 5d 21 3d 3d 63 5b 61 5d 7d 29 3b 72 65 74 75 72 6e 20 64 3f 6e 75 6c 6c 3a 61 28 7b 7d 2c 62 2c 63 29 7d 6a 2e 65 78 70 6f 72 74 73 3d 62 7d 29 28 29 3b 72 65 74 75 72 6e 20 6a 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 6c 65 6d 65 6e 74 44 6f 65 73 4d 61 74 63 68 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 2c 69 29 7b 76 61 72 20 6a 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6a 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 Data Ascii: otype.hasOwnProperty.call(c,a)&&b[a]!==c[a]});return d?null:a({},b,c)}j.exports=b})();return j.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsElementDoesMatch",function(){return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use
2023-06-06 08:40:22 UTC	6334	IN	Data Raw: 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 74 72 61 63 74 45 76 65 6e 74 50 61 79 6c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 76 65 6e 74 73 22 29 2c 62 3d 61 2e 67 65 74 49 57 4c 50 61 72 61 6d 65 74 65 72 73 2c 63 3d 66 2e 67 65 74 Data Ascii: k.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsExtractEventPayload",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsEvents"),b=a.getIWLParameters,c=f.get
2023-06-06 08:40:22 UTC	6335	IN	Data Raw: 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 50 69 78 65 6c 50 49 49 55 74 69 6c 73 22 29 2c 62 3d 61 2e 65 78 74 72 61 63 74 50 49 49 46 69 65 6c 64 73 3b 66 75 6e 63 74 69 6f 6e 20 63 28 61 2c 63 29 7b 76 61 72 20 64 3d 7b 69 64 3a 61 2e 69 64 2c 6e 61 6d 65 3a 61 2e 6e 61 6d 65 2c 74 61 67 3a 61 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 65 3d 7b 7d 3b 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 7c 7c 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 54 65 78 74 41 72 65 61 45 6c 65 6d 65 6e 74 29 26 26 61 2e 70 6c 61 63 65 68 6f 6c 64 65 72 21 3d 3d 22 22 26 26 28 64 2e 70 6c 61 63 65 68 6f 6c 64 Data Ascii: trict";var a=f.getFbeventsModules("SignalsPixelPIIUtils"),b=a.extractPIIFields;function c(a,c){var d={id:a.id,name:a.name,tag:a.tagName.toLowerCase()},e={};(a instanceof HTMLInputElement\|\|a instanceof HTMLTextAreaElement)&&a.placeholder!==""&&(d.placehold
2023-06-06 08:40:22 UTC	6337	IN	Data Raw: 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 74 72 61 63 74 50 61 67 65 46 65 61 74 75 72 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 68 61 72 65 64 22 29 2c 62 3d 61 2e 75 6e 69 63 6f 64 65 53 61 66 65 54 72 75 6e 63 61 74 65 2c 63 3d 35 30 Data Ascii: l.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsExtractPageFeatures",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsShared"),b=a.unicodeSafeTruncate,c=50
2023-06-06 08:40:22 UTC	6338	IN	Data Raw: 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 68 61 72 65 64 22 29 2c 62 3d 61 2e 73 69 67 6e 61 6c 73 47 65 74 54 65 78 74 4f 72 56 61 6c 75 65 46 72 6f 6d 45 6c 65 6d 65 6e 74 2c 63 3d 32 30 30 3b 66 75 6e 63 74 69 6f 6e 20 64 28 61 29 7b 61 3d 62 28 61 29 3b 72 65 74 75 72 6e 20 61 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 63 29 7d 6b 2e 65 78 70 6f 72 74 73 3d 64 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 65 74 57 72 61 70 70 69 6e 67 42 75 74 74 6f 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 Data Ascii: ules("SignalsFBEventsShared"),b=a.signalsGetTextOrValueFromElement,c=200;function d(a){a=b(a);return a.substring(0,c)}k.exports=d})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetWrappingButton",function(){return function(g,h,i
2023-06-06 08:40:22 UTC	6340	IN	Data Raw: 5b 62 5d 3b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 63 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 2c 64 29 26 26 28 61 5b 64 5d 3d 63 5b 64 5d 29 7d 72 65 74 75 72 6e 20 61 7d 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 2c 63 3d 62 2e 65 61 63 68 2c 64 3d 2f 5b 5e 5c 73 5c 22 5d 2f 2c 65 3d 2f 5b 5e 5c 73 3a 2b 5c 22 5d 2f 3b 66 75 6e 63 74 69 6f 6e 20 67 28 62 2c 63 2c 66 29 7b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 64 2e 74 65 73 74 28 63 29 3f 63 3d 3d 3d 22 40 22 3f 6e 75 6c 6c 3a 7b 73 74 61 72 74 3a 62 2c 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3a 22 75 73 65 72 22 7d 3a Data Ascii: [b];for(var d in c)Object.prototype.hasOwnProperty.call(c,d)&&(a[d]=c[d])}return a},b=f.getFbeventsModules("SignalsFBEventsUtils"),c=b.each,d=/[^\s\"]/,e=/[^\s:+\"]/;function g(b,c,f){if(f==null)return d.test(c)?c==="@"?null:{start:b,userOrDomain:"user"}:
2023-06-06 08:40:22 UTC	6341	IN	Data Raw: 2c 22 65 6e 75 6d 22 3a 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 6e 6f 72 6d 61 6c 69 7a 65 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 6e 75 6d 54 79 70 65 22 29 2c 70 6f 73 74 61 6c 5f 63 6f 64 65 3a 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 6e 6f 72 6d 61 6c 69 7a 65 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 6f 73 74 61 6c 43 6f 64 65 54 79 70 65 22 29 2c 70 68 6f 6e 65 5f 6e 75 6d 62 65 72 3a 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 6e 6f 72 6d 61 6c 69 7a 65 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 68 6f 6e 65 4e 75 6d 62 65 72 54 79 70 65 22 29 2c 73 74 72 69 6e 67 3a 61 7d 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c Data Ascii: ,"enum":f.getFbeventsModules("normalizeSignalsFBEventsEnumType"),postal_code:f.getFbeventsModules("normalizeSignalsFBEventsPostalCodeType"),phone_number:f.getFbeventsModules("normalizeSignalsFBEventsPhoneNumberType"),string:a}})();return k.exports}(a,b,c,
2023-06-06 08:40:22 UTC	6343	IN	Data Raw: 69 3a 64 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 61 5b 64 5d 2e 63 61 6c 6c 28 65 2e 65 78 70 6f 72 74 73 2c 65 2c 65 2e 65 78 70 6f 72 74 73 2c 63 29 2c 65 2e 6c 3d 21 30 2c 65 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 63 2e 6d 3d 61 2c 63 2e 63 3d 62 2c 63 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 64 29 7b 63 2e 6f 28 61 2c 62 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 62 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 64 7d 29 7d 2c 63 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 Data Ascii: i:d,l:!1,exports:{}};return a[d].call(e.exports,e,e.exports,c),e.l=!0,e.exports}return c.m=a,c.c=b,c.d=function(a,b,d){c.o(a,b)\|\|Object.defineProperty(a,b,{enumerable:!0,get:d})},c.r=function(a){"undefined"!=typeof Symbol&&(typeof Symbol==="function"?Symb
2023-06-06 08:40:22 UTC	6344	IN	Data Raw: 65 64 22 3a 67 28 73 65 6c 66 29 29 26 26 73 65 6c 66 26 26 73 65 6c 66 2e 4d 61 74 68 3d 3d 4d 61 74 68 3f 73 65 6c 66 3a 46 75 6e 63 74 69 6f 6e 28 22 72 65 74 75 72 6e 20 74 68 69 73 22 29 28 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 64 3d 63 28 36 29 2c 65 3d 63 28 36 35 29 2e 66 2c 66 3d 63 28 36 37 29 2c 68 3d 63 28 33 38 29 2c 69 3d 63 28 33 31 29 2c 6a 3d 63 28 31 33 29 2c 6b 3d 63 28 31 34 29 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 62 2c 63 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 61 29 7b 73 77 69 74 63 68 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 Data Ascii: ed":g(self))&&self&&self.Math==Math?self:Function("return this")()},function(a,b,c){"use strict";var d=c(6),e=c(65).f,f=c(67),h=c(38),i=c(31),j=c(13),k=c(14),l=function(a){var b=function(d,b,c){if(this instanceof a){switch(arguments.length){case 0:return
2023-06-06 08:40:22 UTC	6345	IN	Data Raw: 6e 3d 71 2b 22 50 72 6f 74 6f 74 79 70 65 22 29 7c 7c 6a 28 68 2c 6e 2c 7b 7d 29 2c 68 5b 6e 5d 5b 6d 5d 3d 70 2c 61 2e 72 65 61 6c 26 26 77 26 26 21 77 5b 6d 5d 26 26 6a 28 77 2c 6d 2c 70 29 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 2e 64 28 62 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 29 2c 63 2e 64 28 62 2c 22 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 29 3b 76 61 72 20 64 3d 63 28 31 37 29 2c 65 3d 35 30 30 3b 66 75 6e 63 74 69 6f 6e 20 66 28 61 29 7b 76 61 72 20 62 3d 76 6f 69 64 20 30 3b 73 77 69 74 63 68 28 61 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7b 63 61 73 65 22 6d 65 74 61 22 3a 62 3d 61 2e 67 Data Ascii: n=q+"Prototype")\|\|j(h,n,{}),h[n][m]=p,a.real&&w&&!w[m]&&j(w,m,p)))}},function(a,b,c){"use strict";c.d(b,"a",function(){return e}),c.d(b,"b",function(){return f});var d=c(17),e=500;function f(a){var b=void 0;switch(a.tagName.toLowerCase()){case"meta":b=a.g
2023-06-06 08:40:22 UTC	6347	IN	Data Raw: 69 6e 6e 65 72 54 65 78 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 61 2e 69 6e 6e 65 72 54 65 78 74 3b 76 61 72 20 62 3d 61 2e 74 65 78 74 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 62 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 30 21 3d 3d 62 2e 6c 65 6e 67 74 68 3f 62 3a 6e 75 6c 6c 21 3d 61 2e 74 65 78 74 43 6f 6e 74 65 6e 74 26 26 61 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2e 6c 65 6e 67 74 68 3e 30 3f 61 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3a 6e 75 6c 6c 7d 63 2e 64 28 62 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 28 33 33 29 2c 65 3d 4d 61 74 68 2e 6d 69 6e 3b 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 Data Ascii: innerText.length)return a.innerText;var b=a.text;return null!=b&&"string"==typeof b&&0!==b.length?b:null!=a.textContent&&a.textContent.length>0?a.textContent:null}c.d(b,"a",function(){return d})},function(a,b,c){var d=c(33),e=Math.min;a.exports=function(a
2023-06-06 08:40:22 UTC	6348	IN	Data Raw: 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 61 28 62 2c 63 29 7b 66 6f 72 28 76 61 72 20 64 3d 62 2e 6c 65 6e 67 74 68 2c 65 3d 30 3b 64 2d 2d 3b 29 7b 76 61 72 20 66 3d 62 5b 65 2b 2b 5d 3b 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 66 29 3f 61 28 66 2c 63 29 3a 63 2e 70 75 73 68 28 66 29 7d 7d 28 61 2c 62 29 2c 62 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 28 33 31 29 2c 65 3d 63 28 33 32 29 2c 66 3d 63 28 32 33 29 2c 67 3d 63 28 31 38 29 2c 68 3d 63 28 36 31 29 3b 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 31 3d 3d 61 2c 69 3d 32 3d 3d 61 2c 6a 3d 33 3d 3d 61 2c 6b 3d 34 3d 3d 61 2c 6c 3d 36 3d 3d Data Ascii: ts=function(a){var b=[];return function a(b,c){for(var d=b.length,e=0;d--;){var f=b[e++];Array.isArray(f)?a(f,c):c.push(f)}}(a,b),b}},function(a,b,c){var d=c(31),e=c(32),f=c(23),g=c(18),h=c(61);a.exports=function(a,b){var c=1==a,i=2==a,j=3==a,k=4==a,l=6==
2023-06-06 08:40:22 UTC	6350	IN	Data Raw: 7b 69 66 28 21 64 28 61 29 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 63 2c 65 3b 69 66 28 62 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 28 63 3d 61 2e 74 6f 53 74 72 69 6e 67 29 26 26 21 64 28 65 3d 63 2e 63 61 6c 6c 28 61 29 29 29 72 65 74 75 72 6e 20 65 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 28 63 3d 61 2e 76 61 6c 75 65 4f 66 29 26 26 21 64 28 65 3d 63 2e 63 61 6c 6c 28 61 29 29 29 72 65 74 75 72 6e 20 65 3b 69 66 28 21 62 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 28 63 3d 61 2e 74 6f 53 74 72 69 6e 67 29 26 26 21 64 28 65 3d 63 2e 63 61 6c 6c 28 61 29 29 29 72 65 74 75 72 6e 20 65 3b 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 27 74 20 63 6f 6e 76 65 72 74 20 6f 62 Data Ascii: {if(!d(a))return a;var c,e;if(b&&"function"==typeof (c=a.toString)&&!d(e=c.call(a)))return e;if("function"==typeof (c=a.valueOf)&&!d(e=c.call(a)))return e;if(!b&&"function"==typeof (c=a.toString)&&!d(e=c.call(a)))return e;throw TypeError("Can't convert ob
2023-06-06 08:40:22 UTC	6351	IN	Data Raw: 61 72 20 6e 3d 5b 22 6f 67 22 2c 22 70 72 6f 64 75 63 74 22 2c 22 6d 75 73 69 63 22 2c 22 76 69 64 65 6f 22 2c 22 61 72 74 69 63 6c 65 22 2c 22 62 6f 6f 6b 22 2c 22 70 72 6f 66 69 6c 65 22 2c 22 77 65 62 73 69 74 65 22 2c 22 74 77 69 74 74 65 72 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 6c 28 29 28 65 2e 61 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 27 5b 69 74 65 6d 74 79 70 65 24 3d 22 27 2e 63 6f 6e 63 61 74 28 22 73 63 68 65 6d 61 2e 6f 72 67 2f 22 29 2e 63 6f 6e 63 61 74 28 61 2c 27 22 5d 27 29 7d 29 2e 6a 6f 69 6e 28 22 2c 20 22 29 2c 63 3d 5b 5d 2c 62 3d 6a 28 29 28 68 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 62 29 29 2c 73 3d 5b 5d 3b 62 2e 6c 65 6e 67 74 68 3e 30 3b 29 7b 76 61 72 Data Ascii: ar n=["og","product","music","video","article","book","profile","website","twitter"];function o(a){for(var b=l()(e.a,function(a){return'[itemtype$="'.concat("schema.org/").concat(a,'"]')}).join(", "),c=[],b=j()(h.querySelectorAll(b)),s=[];b.length>0;){var
2023-06-06 08:40:22 UTC	6352	IN	Data Raw: 70 28 29 7b 72 65 74 75 72 6e 20 69 28 29 28 6c 28 29 28 6a 28 29 28 68 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 6d 65 74 61 5b 70 72 6f 70 65 72 74 79 5d 22 29 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 70 72 6f 70 65 72 74 79 22 29 3b 61 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6f 6e 74 65 6e 74 22 29 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 2d 31 21 3d 3d 62 2e 69 6e 64 65 78 4f 66 28 22 3a 22 29 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 6b 28 29 28 6e 2c 62 2e 73 70 6c 69 74 28 22 3a 22 29 5b 30 5d 29 3f 7b 6b 65 79 3a 62 2c 76 61 6c 75 65 3a 61 2e 73 75 62 73 74 72 28 30 2c 64 2e 61 29 7d 3a 6e Data Ascii: p(){return i()(l()(j()(h.querySelectorAll("meta[property]")),function(a){var b=a.getAttribute("property");a=a.getAttribute("content");return"string"==typeof b&&-1!==b.indexOf(":")&&"string"==typeof a&&k()(n,b.split(":")[0])?{key:b,value:a.substr(0,d.a)}:n
2023-06-06 08:40:22 UTC	6353	IN	Data Raw: 3b 76 61 72 20 69 3d 21 31 3b 5b 5d 2e 6b 65 79 73 26 26 28 22 6e 65 78 74 22 69 6e 28 65 3d 5b 5d 2e 6b 65 79 73 28 29 29 3f 28 62 3d 62 28 62 28 65 29 29 29 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 26 26 28 64 3d 62 29 3a 69 3d 21 30 29 2c 6e 75 6c 6c 3d 3d 64 26 26 28 64 3d 7b 7d 29 2c 68 7c 7c 67 28 64 2c 63 29 7c 7c 66 28 64 2c 63 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 29 2c 61 2e 65 78 70 6f 72 74 73 3d 7b 49 74 65 72 61 74 6f 72 50 72 6f 74 6f 74 79 70 65 3a 64 2c 42 55 47 47 59 5f 53 41 46 41 52 49 5f 49 54 45 52 41 54 4f 52 53 3a 69 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 28 31 34 29 2c 65 3d 63 28 32 33 29 2c 66 3d 63 28 33 39 29 28 22 49 45 5f 50 52 4f 54 4f Data Ascii: ;var i=!1;[].keys&&("next"in(e=[].keys())?(b=b(b(e)))!==Object.prototype&&(d=b):i=!0),null==d&&(d={}),h\|\|g(d,c)\|\|f(d,c,function(){return this}),a.exports={IteratorPrototype:d,BUGGY_SAFARI_ITERATORS:i}},function(a,b,c){var d=c(14),e=c(23),f=c(39)("IE_PROTO
2023-06-06 08:40:22 UTC	6355	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 28 61 3f 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 3a 68 29 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 66 3b 72 65 74 75 72 6e 21 28 21 61 7c 7c 21 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 62 2e 4e 6f 64 65 3f 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 2e 4e 6f 64 65 3a 22 6f 62 6a 65 63 74 22 3d 3d 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 67 28 61 29 29 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 61 2e 6e 6f 64 65 54 79 70 65 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 61 2e 6e 6f 64 65 4e 61 6d 65 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 63 28 36 30 29 2c 61 Data Ascii: function(a){var b=(a?a.ownerDocument\|\|a:h).defaultView\|\|f;return!(!a\|\|!("function"==typeof b.Node?a instanceof b.Node:"object"==(typeof a==="undefined"?"undefined":g(a))&&"number"==typeof a.nodeType&&"string"==typeof a.nodeName))}},function(a,b,c){c(60),a
2023-06-06 08:40:22 UTC	6356	IN	Data Raw: 53 74 72 69 6e 67 28 61 29 2e 72 65 70 6c 61 63 65 28 65 2c 22 2e 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 67 3d 62 2e 64 61 74 61 3d 7b 7d 2c 68 3d 62 2e 4e 41 54 49 56 45 3d 22 4e 22 2c 69 3d 62 2e 50 4f 4c 59 46 49 4c 4c 3d 22 50 22 3b 61 2e 65 78 70 6f 72 74 73 3d 62 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 28 33 38 29 2c 65 3d 63 28 36 29 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 3f 61 3a 76 6f 69 64 20 30 7d 3b 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3c 32 3f 66 28 64 5b 61 5d 29 7c 7c 66 28 65 5b 61 5d 29 3a 64 5b 61 5d 26 Data Ascii: String(a).replace(e,".").toLowerCase()},g=b.data={},h=b.NATIVE="N",i=b.POLYFILL="P";a.exports=b},function(a,b,c){var d=c(38),e=c(6),f=function(a){return"function"==typeof a?a:void 0};a.exports=function(a,b){return arguments.length<2?f(d[a])\|\|f(e[a]):d[a]&
2023-06-06 08:40:22 UTC	6358	IN	Data Raw: 6f 6d 70 61 74 69 62 6c 65 20 72 65 63 65 69 76 65 72 2c 20 22 2b 61 2b 22 20 72 65 71 75 69 72 65 64 22 29 3b 72 65 74 75 72 6e 20 63 7d 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 62 3d 63 28 37 34 29 3b 63 3d 63 28 36 29 2e 57 65 61 6b 4d 61 70 3b 61 2e 65 78 70 6f 72 74 73 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 2f 6e 61 74 69 76 65 20 63 6f 64 65 2f 2e 74 65 73 74 28 62 2e 63 61 6c 6c 28 63 29 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 2e 65 78 70 6f 72 74 73 3d 63 28 33 34 29 28 22 6e 61 74 69 76 65 2d 66 75 6e 63 74 69 6f 6e 2d 74 6f 2d 73 74 72 69 6e 67 22 2c 46 75 6e 63 74 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 22 75 73 65 20 73 74 Data Ascii: ompatible receiver, "+a+" required");return c}}}},function(a,b,c){b=c(74);c=c(6).WeakMap;a.exports="function"==typeof c&&/native code/.test(b.call(c))},function(a,b,c){a.exports=c(34)("native-function-to-string",Function.toString)},function(a,b,c){"use st
2023-06-06 08:40:22 UTC	6359	IN	Data Raw: 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 6e 75 6c 6c 2c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 6e 65 77 20 61 28 29 29 21 3d 3d 61 2e 70 72 6f 74 6f 74 79 70 65 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 28 32 30 29 2c 65 3d 63 28 37 39 29 2c 66 3d 63 28 35 31 29 2c 67 3d 63 28 38 33 29 2c 68 3d 63 28 34 36 29 2c 69 3d 63 28 33 39 29 28 22 49 45 5f 50 52 4f 54 4f 22 29 2c 6a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 68 28 22 69 66 72 61 6d 65 22 29 2c 62 3d 66 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 61 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 2c 67 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 2c 61 2e 73 72 Data Ascii: type.constructor=null,Object.getPrototypeOf(new a())!==a.prototype})},function(a,b,c){var d=c(20),e=c(79),f=c(51),g=c(83),h=c(46),i=c(39)("IE_PROTO"),j=function(){},k=function(){var a=h("iframe"),b=f.length;for(a.style.display="none",g.appendChild(a),a.sr
2023-06-06 08:40:22 UTC	6361	IN	Data Raw: 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 5f 5f 70 72 6f 74 6f 5f 5f 22 29 2e 73 65 74 29 2e 63 61 6c 6c 28 63 2c 5b 5d 29 2c 62 3d 63 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 2c 65 29 7b 72 65 74 75 72 6e 20 64 28 63 2c 65 29 2c 62 3f 61 2e 63 61 6c 6c 28 63 2c 65 29 3a 63 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 65 2c 63 7d 7d 28 29 3a 76 6f 69 64 20 30 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 28 31 32 29 2c 65 3d 63 28 32 30 29 3b 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 65 28 61 29 2c 21 64 28 62 29 26 26 6e 75 Data Ascii: tOwnPropertyDescriptor(Object.prototype,"__proto__").set).call(c,[]),b=c instanceof Array}catch(a){}return function(c,e){return d(c,e),b?a.call(c,e):c.__proto__=e,c}}():void 0)},function(a,b,c){var d=c(12),e=c(20);a.exports=function(a,b){if(e(a),!d(b)&&nu
2023-06-06 08:40:22 UTC	6362	IN	Data Raw: 7b 76 61 72 20 64 3d 63 28 32 37 29 2c 65 3d 63 28 34 29 28 22 69 74 65 72 61 74 6f 72 22 29 2c 66 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 3b 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 61 26 26 28 64 2e 41 72 72 61 79 3d 3d 3d 61 7c 7c 66 5b 65 5d 3d 3d 3d 61 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 64 3d 63 28 33 35 29 2c 65 3d 63 28 32 35 29 2c 66 3d 63 28 32 36 29 3b 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 62 3d 64 28 62 29 3b 62 20 69 6e 20 61 3f 65 2e 66 28 61 2c 62 2c 66 28 30 2c 63 29 29 3a 61 5b 62 5d 3d 63 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b Data Ascii: {var d=c(27),e=c(4)("iterator"),f=Array.prototype;a.exports=function(a){return void 0!==a&&(d.Array===a\|\|f[e]===a)}},function(a,b,c){"use strict";var d=c(35),e=c(25),f=c(26);a.exports=function(a,b,c){b=d(b);b in a?e.f(a,b,f(0,c)):a[b]=c}},function(a,b,c){
2023-06-06 08:40:22 UTC	6364	IN	Data Raw: 28 29 7b 61 3d 21 31 7d 29 2c 63 28 37 29 28 7b 74 61 72 67 65 74 3a 22 41 72 72 61 79 22 2c 70 72 6f 74 6f 3a 21 30 2c 66 6f 72 63 65 64 3a 61 7d 2c 7b 66 69 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 64 28 74 68 69 73 2c 61 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 29 7d 7d 29 2c 63 28 35 34 29 28 22 66 69 6e 64 22 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 63 28 31 30 35 29 2c 61 2e 65 78 70 6f 72 74 73 3d 63 28 31 35 29 28 22 41 72 72 61 79 22 2c 22 69 6e 64 65 78 4f 66 22 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 64 3d 63 28 34 31 29 28 21 31 29 2c 65 3d 5b 5d 2e 69 6e 64 65 Data Ascii: (){a=!1}),c(7)({target:"Array",proto:!0,forced:a},{find:function(a){return d(this,a,arguments.length>1?arguments[1]:void 0)}}),c(54)("find")},function(a,b,c){c(105),a.exports=c(15)("Array","indexOf")},function(a,b,c){"use strict";var d=c(41)(!1),e=[].inde
2023-06-06 08:40:22 UTC	6365	IN	Data Raw: 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 61 7d 29 2c 63 2e 64 28 64 2c 22 45 58 50 4c 49 43 49 54 5f 42 55 54 54 4f 4e 5f 53 45 4c 45 43 54 4f 52 53 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 71 61 7d 29 3b 76 61 72 20 65 3d 63 28 38 29 2c 69 3d 63 28 32 38 29 2c 6a 3d 63 28 39 29 2c 6b 3d 63 2e 6e 28 6a 29 3b 6a 3d 63 28 31 29 3b 76 61 72 20 6c 3d 63 2e 6e 28 6a 29 3b 6a 3d 63 28 32 29 3b 76 61 72 20 6d 3d 63 2e 6e 28 6a 29 3b 6a 3d 63 28 33 29 3b 76 61 72 20 6e 3d 63 2e 6e 28 6a 29 3b 6a 3d 63 28 31 30 29 3b 76 61 72 20 6f 3d 63 2e 6e 28 6a 29 3b 6a 3d 63 28 30 29 3b 76 61 72 20 70 3d 63 2e 6e 28 6a 29 2c 71 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 70 28 29 28 69 2e 61 2c 66 75 6e 63 74 69 Data Ascii: ,function(){return pa}),c.d(d,"EXPLICIT_BUTTON_SELECTORS",function(){return qa});var e=c(8),i=c(28),j=c(9),k=c.n(j);j=c(1);var l=c.n(j);j=c(2);var m=c.n(j);j=c(3);var n=c.n(j);j=c(10);var o=c.n(j);j=c(0);var p=c.n(j),q=function(a){for(var b=p()(i.a,functi
2023-06-06 08:40:22 UTC	6365	IN	Data Raw: 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 22 2c 27 22 5d 5b 74 79 70 65 6f 66 24 3d 22 27 29 2e 63 6f 6e 63 61 74 28 61 2c 27 22 5d 27 29 7d 29 2e 6a 6f 69 6e 28 22 2c 20 22 29 2c 63 3d 5b 5d 2c 62 3d 6e 28 29 28 68 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 62 29 29 2c 64 3d 5b 5d 3b 62 2e 6c 65 6e 67 74 68 3e 30 3b 29 7b 76 61 72 20 71 3d 62 2e 70 6f 70 28 29 3b 69 66 28 21 6f 28 29 28 63 2c 71 29 29 7b 76 61 72 20 73 3d 7b 22 40 63 6f 6e 74 65 78 74 22 3a 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 22 7d 3b 64 2e 70 75 73 68 28 7b 68 74 6d 6c 45 6c 65 6d 65 6e 74 3a 71 2c 6a 73 6f 6e 4c 44 3a 73 7d 29 3b 66 6f 72 28 71 3d 5b 7b 65 6c 65 6d 65 6e 74 3a 71 2c 77 6f 72 6b 69 6e 67 4e 6f 64 65 3a 73 7d 5d 3b 71 2e 6c 65 6e 67 74 68 Data Ascii: p://schema.org/",'"][typeof$="').concat(a,'"]')}).join(", "),c=[],b=n()(h.querySelectorAll(b)),d=[];b.length>0;){var q=b.pop();if(!o()(c,q)){var s={"@context":"http://schema.org"};d.push({htmlElement:q,jsonLD:s});for(q=[{element:q,workingNode:s}];q.length
2023-06-06 08:40:22 UTC	6367	IN	Data Raw: 65 50 72 6f 70 65 72 74 79 28 61 2c 62 2c 7b 76 61 6c 75 65 3a 63 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 61 5b 62 5d 3d 63 2c 61 7d 76 61 72 20 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 62 29 7b 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 28 74 68 69 73 2c 61 29 2c 76 28 74 68 69 73 2c 22 5f 61 6e 63 68 6f 72 45 6c 65 6d 65 6e 74 22 2c 76 6f 69 64 20 30 29 2c 76 28 74 68 69 73 2c 22 5f 70 61 72 73 65 Data Ascii: eProperty(a,b,{value:c,enumerable:!0,configurable:!0,writable:!0}):a[b]=c,a}var w=function(){function a(b){!function(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}(this,a),v(this,"_anchorElement",void 0),v(this,"_parse
2023-06-06 08:40:22 UTC	6368	IN	Data Raw: 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 29 2c 64 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 28 61 2c 62 2c 63 5b 62 5d 29 7d 29 7d 72 65 74 75 72 6e 20 61 7d 28 7b 7d 2c 61 2c 76 28 7b 7d 2c 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 62 5b 30 5d 29 2c 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 62 5b 31 5d 29 29 29 7d 2c 7b 7d 29 2c 61 2e 5f 70 61 72 73 65 64 51 75 65 72 79 5b 62 5d 7c 7c 6e 75 6c 6c 7d 7d 7d 7d 5d 29 26 26 75 28 62 2e 70 72 6f 74 6f 74 79 70 65 2c 63 29 2c 64 26 26 75 28 62 2c 64 29 2c 61 7d 28 29 2c 78 3d 2f 5e 5c 73 2a 3a 73 63 6f 70 65 2f 67 69 3b 6a 3d 66 75 6e 63 74 69 6f 6e 20 61 28 62 2c 63 29 7b 69 66 28 22 3e 22 3d 3d 3d 63 5b 63 2e 6c 65 6e 67 74 68 2d 31 5d 29 72 65 74 75 Data Ascii: ).enumerable}))),d.forEach(function(b){v(a,b,c[b])})}return a}({},a,v({},decodeURIComponent(b[0]),decodeURIComponent(b[1])))},{}),a._parsedQuery[b]\|\|null}}}}])&&u(b.prototype,c),d&&u(b,d),a}(),x=/^\s*:scope/gi;j=function a(b,c){if(">"===c[c.length-1])retu
2023-06-06 08:40:22 UTC	6370	IN	Data Raw: 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 22 29 7d 28 29 7d 76 61 72 20 46 3d 22 63 68 69 6c 64 72 65 6e 28 22 2c 47 3d 22 63 6c 6f 73 65 73 74 28 22 3b 66 75 6e 63 74 69 6f 6e 20 48 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 49 28 61 2c 6d 28 29 28 70 28 29 28 62 2e 73 70 6c 69 74 28 2f 28 28 3f 3a 63 6c 6f 73 65 73 74 7c 63 68 69 6c 64 72 65 6e 29 5c 28 5b 5e 29 5d 2b 5c 29 29 2f 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 74 72 69 6d 28 29 7d 29 2c 42 6f 6f 6c 65 61 6e 29 29 7d 66 75 6e 63 74 69 6f 6e 20 49 28 61 2c 62 29 7b 76 61 72 20 63 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 2e 73 75 62 73 74 72 69 6e 67 28 61 2e 6c 65 6e 67 74 68 2c 62 2e 6c 65 6e 67 74 68 2d 31 29 2e Data Ascii: re non-iterable instance")}()}var F="children(",G="closest(";function H(a,b){return I(a,m()(p()(b.split(/((?:closest\|children)$[^)]+$)/),function(a){return a.trim()}),Boolean))}function I(a,b){var c=function(a,b){return b.substring(a.length,b.length-1).
2023-06-06 08:40:22 UTC	6371	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 28 29 28 4f 62 6a 65 63 74 28 4c 2e 65 78 74 72 61 63 74 4f 70 65 6e 47 72 61 70 68 29 28 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 31 3b 62 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 7b 76 61 72 20 63 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 62 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 62 5d 3a 7b 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 63 29 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 26 26 28 64 3d 64 2e 63 6f 6e 63 61 74 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 Data Ascii: nction(){var a=t()(Object(L.extractOpenGraph)(),function(a,b){return function(a){for(var b=1;b<arguments.length;b++){var c=null!=arguments[b]?arguments[b]:{},d=Object.keys(c);"function"==typeof Object.getOwnPropertySymbols&&(d=d.concat(Object.getOwnProper
2023-06-06 08:40:22 UTC	6373	IN	Data Raw: 62 2e 74 61 67 4e 61 6d 65 29 72 65 74 75 72 6e 20 51 2e 44 4f 5f 4e 4f 54 5f 4d 41 54 43 48 3b 69 66 28 61 2e 63 6c 61 73 73 4e 61 6d 65 3d 3d 3d 62 2e 63 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 51 2e 43 4c 41 53 53 5f 4e 41 4d 45 5f 4d 41 54 43 48 45 53 7d 72 65 74 75 72 6e 20 51 2e 4e 45 45 44 5f 4d 4f 52 45 5f 43 48 45 43 4b 49 4e 47 7d 66 75 6e 63 74 69 6f 6e 20 53 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 52 28 61 2c 64 2e 6e 6f 64 65 29 3b 72 65 74 75 72 6e 20 65 3d 3d 3d 51 2e 44 4f 5f 4e 4f 54 5f 4d 41 54 43 48 3f 65 3a 63 3e 30 26 26 62 21 3d 3d 64 2e 69 6e 64 65 78 3f 51 2e 44 4f 5f 4e 4f 54 5f 4d 41 54 43 48 3a 31 3d 3d 3d 65 3f 51 2e 43 4c 41 53 53 5f 4e 41 4d 45 5f 4d 41 54 43 48 45 53 3a 30 3d 3d 3d 64 2e 72 65 6c 61 74 69 76 Data Ascii: b.tagName)return Q.DO_NOT_MATCH;if(a.className===b.className)return Q.CLASS_NAME_MATCHES}return Q.NEED_MORE_CHECKING}function S(a,b,c,d){var e=R(a,d.node);return e===Q.DO_NOT_MATCH?e:c>0&&b!==d.index?Q.DO_NOT_MATCH:1===e?Q.CLASS_NAME_MATCHES:0===d.relativ
2023-06-06 08:40:22 UTC	6374	IN	Data Raw: 26 63 2e 70 75 73 68 2e 61 70 70 6c 79 28 63 2c 4f 28 61 29 29 7d 7d 63 61 74 63 68 28 61 29 7b 65 3d 21 30 2c 66 3d 61 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 64 7c 7c 6e 75 6c 6c 3d 3d 67 5b 22 72 65 74 75 72 6e 22 5d 7c 7c 67 5b 22 72 65 74 75 72 6e 22 5d 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 65 29 74 68 72 6f 77 20 66 7d 7d 72 65 74 75 72 6e 20 63 7d 28 62 2c 61 2e 6e 6f 64 65 31 54 72 65 65 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 55 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 72 65 74 75 72 6e 20 61 7d 28 61 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3d 21 30 2c 65 3d 21 31 2c 66 3d 76 6f 69 64 20 30 3b 74 72 79 Data Ascii: &c.push.apply(c,O(a))}}catch(a){e=!0,f=a}finally{try{d\|\|null==g["return"]\|\|g["return"]()}finally{if(e)throw f}}return c}(b,a.node1Tree):null}function U(a,b){return function(a){if(Array.isArray(a))return a}(a)\|\|function(a,b){var c=[],d=!0,e=!1,f=void 0;try
2023-06-06 08:40:22 UTC	6376	IN	Data Raw: 74 69 6f 6e 61 6c 54 79 70 65 3a 6e 75 6c 6c 21 3d 61 2e 61 64 64 69 74 69 6f 6e 61 6c 54 79 70 65 3f 61 2e 61 64 64 69 74 69 6f 6e 61 6c 54 79 70 65 3a 22 63 6f 6e 74 65 6e 74 5f 74 79 70 65 22 3d 3d 3d 62 3f 63 3a 76 6f 69 64 20 30 2c 6f 66 66 65 72 73 3a 7b 70 72 69 63 65 3a 6e 75 6c 6c 21 3d 64 2e 70 72 69 63 65 3f 64 2e 70 72 69 63 65 3a 22 76 61 6c 75 65 22 3d 3d 3d 62 3f 63 3a 76 6f 69 64 20 30 2c 70 72 69 63 65 43 75 72 72 65 6e 63 79 3a 6e 75 6c 6c 21 3d 64 2e 70 72 69 63 65 43 75 72 72 65 6e 63 79 3f 64 2e 70 72 69 63 65 43 75 72 72 65 6e 63 79 3a 22 63 75 72 72 65 6e 63 79 22 3d 3d 3d 62 3f 63 3a 76 6f 69 64 20 30 7d 2c 70 72 6f 64 75 63 74 49 44 3a 6e 75 6c 6c 21 3d 61 2e 70 72 6f 64 75 63 74 49 44 3f 61 2e 70 72 6f 64 75 63 74 49 44 3a 22 63 Data Ascii: tionalType:null!=a.additionalType?a.additionalType:"content_type"===b?c:void 0,offers:{price:null!=d.price?d.price:"value"===b?c:void 0,priceCurrency:null!=d.priceCurrency?d.priceCurrency:"currency"===b?c:void 0},productID:null!=a.productID?a.productID:"c
2023-06-06 08:40:22 UTC	6377	IN	Data Raw: 44 3a 62 2e 69 64 2c 6a 73 6f 6e 4c 44 3a 61 7d 7d 29 3b 63 61 73 65 22 43 4f 4e 53 54 41 4e 54 5f 56 41 4c 55 45 22 3a 65 3d 62 2e 65 78 74 72 61 63 74 6f 72 43 6f 6e 66 69 67 3b 63 3d 65 2e 70 61 72 61 6d 65 74 65 72 54 79 70 65 3b 64 3d 65 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 7b 65 78 74 72 61 63 74 6f 72 49 44 3a 62 2e 69 64 2c 6a 73 6f 6e 4c 44 3a 58 28 57 2c 63 2c 64 29 7d 3b 63 61 73 65 22 55 52 49 22 3a 65 3d 62 2e 65 78 74 72 61 63 74 6f 72 43 6f 6e 66 69 67 2e 70 61 72 61 6d 65 74 65 72 54 79 70 65 3b 63 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 3d 6e 65 77 20 77 28 61 29 3b 73 77 69 74 63 68 28 62 29 7b 63 61 73 65 20 4e 2e 50 41 54 48 3a 62 3d 6d 28 29 28 70 28 29 28 61 2e 70 61 74 68 6e 61 6d 65 2e 73 70 6c 69 74 28 22 2f 22 29 Data Ascii: D:b.id,jsonLD:a}});case"CONSTANT_VALUE":e=b.extractorConfig;c=e.parameterType;d=e.value;return{extractorID:b.id,jsonLD:X(W,c,d)};case"URI":e=b.extractorConfig.parameterType;c=function(a,b,c){a=new w(a);switch(b){case N.PATH:b=m()(p()(a.pathname.split("/")
2023-06-06 08:40:22 UTC	6379	IN	Data Raw: 65 6e 74 5f 72 75 6c 65 29 3f 62 2e 69 64 3a 62 7d 3b 63 61 73 65 22 55 52 49 22 3a 69 66 28 6e 75 6c 6c 3d 3d 61 2e 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 20 6d 75 73 74 20 62 65 20 73 65 74 22 29 3b 62 3d 61 2e 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 62 2e 70 61 72 61 6d 65 74 65 72 5f 73 65 6c 65 63 74 6f 72 73 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 20 6d 75 73 74 20 62 65 20 73 65 74 22 29 3b 72 65 74 75 72 6e 7b 64 6f 6d 61 69 6e 55 52 49 3a 6e 65 77 20 77 28 61 2e 64 6f 6d 61 69 6e 5f 75 72 69 29 2c 65 76 65 6e 74 54 79 70 65 3a 61 2e 65 76 65 6e 74 5f 74 79 Data Ascii: ent_rule)?b.id:b};case"URI":if(null==a.extractor_config)throw new Error("extractor_config must be set");b=a.extractor_config;if(b.parameter_selectors)throw new Error("extractor_config must be set");return{domainURI:new w(a.domain_uri),eventType:a.event_ty
2023-06-06 08:40:22 UTC	6379	IN	Data Raw: 63 74 6f 72 54 79 70 65 3a 22 55 52 49 22 2c 69 64 3a 6c 28 29 28 61 2e 69 64 29 2c 72 75 6c 65 49 64 3a 6e 75 6c 6c 21 3d 28 62 3d 61 2e 65 76 65 6e 74 5f 72 75 6c 65 29 3f 62 2e 69 64 3a 62 7d 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 7b 64 6f 6d 61 69 6e 55 52 49 3a 6e 65 77 20 77 28 61 2e 64 6f 6d 61 69 6e 5f 75 72 69 29 2c 65 76 65 6e 74 54 79 70 65 3a 61 2e 65 76 65 6e 74 5f 74 79 70 65 2c 65 78 74 72 61 63 74 6f 72 54 79 70 65 3a 61 2e 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 2c 69 64 3a 6c 28 29 28 61 2e 69 64 29 2c 72 75 6c 65 49 64 3a 6e 75 6c 6c 21 3d 28 62 3d 61 2e 65 76 65 6e 74 5f 72 75 6c 65 29 3f 62 2e 69 64 3a 62 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 68 61 28 61 29 7b 72 65 74 75 72 6e 7b 70 61 72 61 6d 65 74 65 72 54 79 70 65 3a 61 2e Data Ascii: ctorType:"URI",id:l()(a.id),ruleId:null!=(b=a.event_rule)?b.id:b};default:return{domainURI:new w(a.domain_uri),eventType:a.event_type,extractorType:a.extractor_type,id:l()(a.id),ruleId:null!=(b=a.event_rule)?b.id:b}}}function ha(a){return{parameterType:a.
2023-06-06 08:40:22 UTC	6380	IN	Data Raw: 26 63 2e 6c 65 6e 67 74 68 3e 30 29 72 65 74 75 72 6e 20 63 7d 69 66 28 22 49 4e 50 55 54 22 3d 3d 3d 61 2e 74 61 67 4e 61 6d 65 26 26 22 69 6d 61 67 65 22 3d 3d 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 29 29 7b 63 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 29 3b 69 66 28 6e 75 6c 6c 21 3d 63 29 72 65 74 75 72 6e 20 63 7d 63 3d 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 69 6d 67 22 29 3b 69 66 28 30 21 3d 3d 63 2e 6c 65 6e 67 74 68 29 7b 61 3d 63 2e 69 74 65 6d 28 30 29 3b 62 3d 28 61 3f 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 29 3a 6e 75 6c 6c 29 7c 7c 22 22 7d 72 65 74 75 72 6e 20 62 7d 76 61 72 20 73 61 3d 5b 22 73 6d 73 3a 22 2c 22 6d 61 69 6c 74 6f 3a 22 2c Data Ascii: &c.length>0)return c}if("INPUT"===a.tagName&&"image"===a.getAttribute("type")){c=a.getAttribute("src");if(null!=c)return c}c=a.getElementsByTagName("img");if(0!==c.length){a=c.item(0);b=(a?a.getAttribute("src"):null)\|\|""}return b}var sa=["sms:","mailto:",
2023-06-06 08:40:22 UTC	6382	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 41 61 7d 29 2c 63 2e 64 28 62 2c 22 73 69 67 6e 61 6c 73 43 6f 6e 76 65 72 74 4e 6f 64 65 54 6f 48 54 4d 4c 45 6c 65 6d 65 6e 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 29 3b 76 61 72 20 42 61 3d 64 7d 5d 29 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 68 72 6f 74 74 6c 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 Data Ascii: ){return Aa}),c.d(b,"signalsConvertNodeToHTMLElement",function(){return s});var Ba=d}])})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsThrottler",function(){return function(f,g,i,j){var k={exports:{}};k.exports;(function(){"use
2023-06-06 08:40:22 UTC	6383	IN	Data Raw: 2e 6c 65 6e 67 74 68 3e 31 26 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 21 3d 3d 76 6f 69 64 20 30 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 22 77 68 69 74 65 73 70 61 63 65 5f 6f 6e 6c 79 22 2c 63 3d 22 22 3b 69 66 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 29 73 77 69 74 63 68 28 62 29 7b 63 61 73 65 22 77 68 69 74 65 73 70 61 63 65 5f 6f 6e 6c 79 22 3a 63 3d 61 2e 72 65 70 6c 61 63 65 28 65 2c 22 22 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 77 68 69 74 65 73 70 61 63 65 5f 61 6e 64 5f 70 75 6e 63 74 75 61 74 69 6f 6e 22 3a 63 3d 61 2e 72 65 70 6c 61 63 65 28 67 2c 22 22 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 61 6c 6c 5f 6e 6f 6e 5f 6c 61 74 69 6e 5f 61 6c 70 68 61 5f 6e 75 6d 65 72 69 63 22 3a 63 3d 61 2e 72 65 70 6c 61 63 65 28 68 2c 22 22 Data Ascii: .length>1&&arguments[1]!==void 0?arguments[1]:"whitespace_only",c="";if(typeof a==="string")switch(b){case"whitespace_only":c=a.replace(e,"");break;case"whitespace_and_punctuation":c=a.replace(g,"");break;case"all_non_latin_alpha_numeric":c=a.replace(h,""
2023-06-06 08:40:22 UTC	6385	IN	Data Raw: 63 63 22 2c 22 63 61 72 64 22 2c 22 63 76 76 22 2c 22 63 76 63 22 2c 22 63 76 6e 22 2c 22 63 72 65 64 69 74 63 61 72 64 22 2c 22 62 69 6c 6c 69 6e 67 22 2c 22 73 65 63 75 72 69 74 79 22 2c 22 73 6f 63 69 61 6c 22 2c 22 70 61 73 73 22 5d 2c 53 54 41 54 45 3a 5b 22 73 74 61 74 65 22 2c 22 70 72 6f 76 69 6e 63 65 22 5d 2c 55 53 45 52 4e 41 4d 45 3a 5b 22 75 73 65 72 6e 61 6d 65 22 5d 2c 59 45 41 52 3a 5b 22 79 65 61 72 22 2c 22 79 72 22 2c 22 64 6f 62 79 22 5d 2c 5a 49 50 5f 43 4f 44 45 3a 5b 22 7a 69 70 22 2c 22 7a 63 6f 64 65 22 2c 22 70 69 6e 63 6f 64 65 22 2c 22 70 63 6f 64 65 22 2c 22 70 6f 73 74 61 6c 63 6f 64 65 22 2c 22 70 6f 73 74 63 6f 64 65 22 5d 7d 2c 65 3d 2f 5e 5b 5c 77 21 23 5c 24 25 26 5c 27 5c 2a 5c 2b 5c 2f 5c 3d 5c 3f 5c 5e 60 5c 7b 5c 7c Data Ascii: cc","card","cvv","cvc","cvn","creditcard","billing","security","social","pass"],STATE:["state","province"],USERNAME:["username"],YEAR:["year","yr","doby"],ZIP_CODE:["zip","zcode","pincode","pcode","postalcode","postcode"]},e=/^[\w!#\$%&\'\*\+\/\=\?\^`\{\\|
2023-06-06 08:40:22 UTC	6387	IN	Data Raw: 5b 64 5d 3d 63 5b 64 5d 29 7d 72 65 74 75 72 6e 20 61 7d 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4e 6f 72 6d 61 6c 69 7a 65 72 73 22 29 2c 63 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 69 78 65 6c 50 49 49 53 63 68 65 6d 61 22 29 2c 64 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 2c 65 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 6e 6f 72 6d 61 6c 69 7a 65 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 6d 61 69 6c 54 79 70 65 22 29 2c 67 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 Data Ascii: [d]=c[d])}return a},b=f.getFbeventsModules("SignalsFBEventsNormalizers"),c=f.getFbeventsModules("SignalsFBEventsPixelPIISchema"),d=f.getFbeventsModules("SignalsFBEventsUtils"),e=f.getFbeventsModules("normalizeSignalsFBEventsEmailType"),g=f.getFbeventsModu
2023-06-06 08:40:22 UTC	6388	IN	Data Raw: 6c 64 65 72 3a 61 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 28 61 29 7b 76 61 72 20 62 3d 61 2e 6e 61 6d 65 2c 63 3d 61 2e 69 64 3b 61 3d 61 2e 70 6c 61 63 65 68 6f 6c 64 65 72 3b 72 65 74 75 72 6e 20 75 28 7b 69 64 3a 63 2c 6b 65 79 77 6f 72 64 73 3a 6f 2e 46 49 52 53 54 5f 4e 41 4d 45 2c 6e 61 6d 65 3a 62 2c 70 6c 61 63 65 68 6f 6c 64 65 72 3a 61 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 61 29 7b 76 61 72 20 62 3d 61 2e 6e 61 6d 65 2c 63 3d 61 2e 69 64 3b 61 3d 61 2e 70 6c 61 63 65 68 6f 6c 64 65 72 3b 72 65 74 75 72 6e 20 75 28 7b 69 64 3a 63 2c 6b 65 79 77 6f 72 64 73 3a 6f 2e 4c 41 53 54 5f 4e 41 4d 45 2c 6e 61 6d 65 3a 62 2c 70 6c 61 63 65 68 6f 6c 64 65 72 3a 61 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 41 28 61 29 7b 76 61 72 20 62 3d 61 2e 6e 61 6d 65 2c Data Ascii: lder:a})}function y(a){var b=a.name,c=a.id;a=a.placeholder;return u({id:c,keywords:o.FIRST_NAME,name:b,placeholder:a})}function z(a){var b=a.name,c=a.id;a=a.placeholder;return u({id:c,keywords:o.LAST_NAME,name:b,placeholder:a})}function A(a){var b=a.name,
2023-06-06 08:40:22 UTC	6390	IN	Data Raw: 73 29 3b 72 65 74 75 72 6e 20 65 21 3d 6e 75 6c 6c 26 26 65 21 3d 3d 22 22 3f 65 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 4c 28 62 2c 63 29 7b 76 61 72 20 64 3d 63 2e 76 61 6c 75 65 2c 66 3d 63 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 26 26 63 2e 63 68 65 63 6b 65 64 3d 3d 3d 21 30 2c 69 3d 62 2e 6e 61 6d 65 2c 6b 3d 62 2e 69 64 2c 6e 3d 62 2e 69 6e 70 75 74 54 79 70 65 3b 62 3d 62 2e 70 6c 61 63 65 68 6f 6c 64 65 72 3b 69 3d 7b 69 64 3a 47 28 69 29 2c 6e 61 6d 65 3a 47 28 6b 29 2c 70 6c 61 63 65 68 6f 6c 64 65 72 3a 62 21 3d 6e 75 6c 6c 26 26 47 28 62 29 7c 7c 22 22 2c 76 61 6c 75 65 3a 48 28 64 29 7d 3b 69 66 28 46 28 69 29 7c 7c 6e 3d 3d 3d 22 70 61 73 73 77 6f 72 64 22 7c 7c 64 3d 3d 3d 22 22 7c 7c 64 3d Data Ascii: s);return e!=null&&e!==""?e:null}function L(b,c){var d=c.value,f=c instanceof HTMLInputElement&&c.checked===!0,i=b.name,k=b.id,n=b.inputType;b=b.placeholder;i={id:G(i),name:G(k),placeholder:b!=null&&G(b)\|\|"",value:H(d)};if(F(i)\|\|n==="password"\|\|d===""\|\|d=
2023-06-06 08:40:22 UTC	6391	IN	Data Raw: 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 49 73 49 57 4c 45 6c 65 6d 65 6e 74 22 29 3b 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 51 45 22 29 3b 76 61 72 20 75 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 74 72 61 63 74 42 75 74 74 6f 6e 46 65 61 74 75 72 65 73 22 29 2c 76 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 65 74 54 72 75 6e 63 61 74 65 64 42 75 74 74 6f 6e 54 65 78 74 22 29 2c 77 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4d 61 6b 65 53 61 66 65 Data Ascii: les("signalsFBEventsIsIWLElement");f.getFbeventsModules("SignalsFBEventsQE");var u=f.getFbeventsModules("signalsFBEventsExtractButtonFeatures"),v=f.getFbeventsModules("signalsFBEventsGetTruncatedButtonText"),w=f.getFbeventsModules("signalsFBEventsMakeSafe
2023-06-06 08:40:22 UTC	6393	IN	Data Raw: 3b 66 3d 3d 6e 75 6c 6c 3f 6d 2e 74 72 69 67 67 65 72 28 62 29 3a 45 28 61 2c 62 2c 66 2c 65 29 7d 70 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6b 28 62 2c 61 29 3b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 76 61 72 20 61 2c 63 2c 64 3b 6c 28 74 68 69 73 2c 62 29 3b 76 61 72 20 65 3b 66 6f 72 28 76 61 72 20 66 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 67 3d 41 72 72 61 79 28 66 29 2c 68 3d 30 3b 68 3c 66 3b 68 2b 2b 29 67 5b 68 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 68 5d 3b 72 65 74 75 72 6e 20 64 3d 28 65 3d 28 63 3d 6a 28 74 68 69 73 2c 28 61 3d 62 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 62 29 29 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 61 2c 5b 74 68 69 73 5d 2e 63 6f 6e 63 61 74 28 67 29 29 Data Ascii: ;f==null?m.trigger(b):E(a,b,f,e)}p=function(a){k(b,a);function b(){var a,c,d;l(this,b);var e;for(var f=arguments.length,g=Array(f),h=0;h<f;h++)g[h]=arguments[h];return d=(e=(c=j(this,(a=b.__proto__\|\|Object.getPrototypeOf(b)).call.apply(a,[this].concat(g))
2023-06-06 08:40:22 UTC	6393	IN	Data Raw: 6e 20 62 7d 28 62 29 3b 65 2e 65 78 70 6f 72 74 73 3d 6e 65 77 20 70 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 63 2e 6c 69 73 74 65 6e 4f 6e 63 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 77 28 46 28 62 29 29 3b 68 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 68 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 61 2c 7b 63 61 70 74 75 72 65 3a 21 30 2c 6f 6e 63 65 3a 21 31 2c 70 61 73 73 69 76 65 3a 21 30 7d 29 3a 67 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 63 6c 69 63 6b 22 2c 61 29 7d 29 2c 6e 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 47 28 62 2c 61 2c 63 2c 64 29 7d 29 7d 29 7d 29 28 29 3b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 28 Data Ascii: n b}(b);e.exports=new p(function(a,b){c.listenOnce(function(){var a=w(F(b));h.addEventListener?h.addEventListener("click",a,{capture:!0,once:!1,passive:!0}):g.attachEvent("onclick",a)}),n.listen(function(a,c,d){return G(b,a,c,d)})})})();return e.exports}(
2023-06-06 08:40:22 UTC	6394	IN	Data Raw: 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 22 29 7d 7d 28 29 2c 68 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c Data Ascii: non-iterable instance")}}(),h=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol
2023-06-06 08:40:22 UTC	6396	IN	Data Raw: 2c 62 3d 61 2e 6c 6f 6f 6b 73 4c 69 6b 65 48 61 73 68 65 64 2c 63 3d 61 2e 74 72 69 6d 2c 64 3d 2f 5e 5b 5c 77 21 23 5c 24 25 26 5c 27 5c 2a 5c 2b 5c 2f 5c 3d 5c 3f 5c 5e 60 5c 7b 5c 7c 5c 7d 7e 5c 2d 5d 2b 28 3a 3f 5c 2e 5b 5c 77 21 23 5c 24 25 26 5c 27 5c 2a 5c 2b 5c 2f 5c 3d 5c 3f 5c 5e 60 5c 7b 5c 7c 5c 7d 7e 5c 2d 5d 2b 29 2a 40 28 3f 3a 5b 61 2d 7a 30 2d 39 5d 28 3f 3a 5b 61 2d 7a 30 2d 39 5c 2d 5d 2a 5b 61 2d 7a 30 2d 39 5d 29 3f 5c 2e 29 2b 5b 61 2d 7a 30 2d 39 5d 28 3f 3a 5b 61 2d 7a 30 2d 39 5c 2d 5d 2a 5b 61 2d 7a 30 2d 39 5d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 65 28 61 29 7b 72 65 74 75 72 6e 20 64 2e 74 65 73 74 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 76 61 72 20 64 3d 6e 75 6c 6c 3b 69 66 28 61 21 3d 6e 75 6c 6c 29 69 Data Ascii: ,b=a.looksLikeHashed,c=a.trim,d=/^[\w!#\$%&\'\\+\/\=\?\^`\{\\|\}~\-]+(:?\.[\w!#\$%&\'\\+\/\=\?\^`\{\\|\}~\-]+)@(?:[a-z0-9](?:[a-z0-9\-][a-z0-9])?\.)+[a-z0-9](?:[a-z0-9\-]*[a-z0-9])?$/i;function e(a){return d.test(a)}function g(a){var d=null;if(a!=null)i
2023-06-06 08:40:22 UTC	6397	IN	Data Raw: 73 4c 69 6b 65 48 61 73 68 65 64 3b 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 51 45 22 29 3b 76 61 72 20 64 3d 2f 5e 30 2a 2f 2c 65 3d 2f 5b 5c 2d 40 23 3c 3e 5c 27 5c 22 2c 3b 20 5d 7c 5c 28 7c 5c 29 7c 5c 2b 7c 5b 61 2d 7a 5d 2f 67 69 3b 62 3d 2f 5e 31 5c 28 3f 5c 64 7b 33 7d 5c 29 3f 5c 64 7b 37 7d 24 2f 3b 61 3d 2f 5e 34 37 5c 64 7b 38 7d 24 2f 3b 62 3d 2f 5e 5c 64 7b 31 2c 34 7d 5c 28 3f 5c 64 7b 32 2c 33 7d 5c 29 3f 5c 64 7b 34 2c 7d 24 2f 3b 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 76 61 72 20 62 3d 6e 75 6c 6c 3b 69 66 28 61 21 3d 6e 75 6c 6c 29 69 66 28 63 28 61 29 29 62 3d 61 3b 65 6c 73 65 7b 61 3d 53 74 72 69 6e 67 28 61 29 3b 62 3d 61 2e 72 65 70 6c 61 63 65 28 65 2c 22 22 Data Ascii: sLikeHashed;f.getFbeventsModules("SignalsFBEventsQE");var d=/^0*/,e=/[\-@#<>\'\",; ]\|$\|$\|\+\|[a-z]/gi;b=/^1$?\d{3}$?\d{7}$/;a=/^47\d{8}$/;b=/^\d{1,4}$?\d{2,3}$?\d{4,}$/;function g(a){var b=null;if(a!=null)if(c(a))b=a;else{a=String(a);b=a.replace(e,""
2023-06-06 08:40:22 UTC	6399	IN	Data Raw: 61 29 7b 72 65 74 75 72 6e 20 65 28 61 2c 7b 73 74 72 69 70 3a 22 77 68 69 74 65 73 70 61 63 65 5f 61 6e 64 5f 70 75 6e 63 74 75 61 74 69 6f 6e 22 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 61 29 7b 72 65 74 75 72 6e 20 65 28 61 2c 7b 74 72 75 6e 63 61 74 65 3a 32 2c 73 74 72 69 70 3a 22 61 6c 6c 5f 6e 6f 6e 5f 6c 61 74 69 6e 5f 61 6c 70 68 61 5f 6e 75 6d 65 72 69 63 22 2c 74 65 73 74 3a 22 5e 5b 61 2d 7a 5d 2b 22 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 61 29 7b 72 65 74 75 72 6e 20 65 28 61 2c 7b 73 74 72 69 70 3a 22 61 6c 6c 5f 6e 6f 6e 5f 6c 61 74 69 6e 5f 61 6c 70 68 61 5f 6e 75 6d 65 72 69 63 22 2c 74 65 73 74 3a 22 5e 5b 61 2d 7a 5d 2b 22 7d 29 7d 6b 2e 65 78 70 6f 72 74 73 3d 7b 6e 6f 72 6d 61 6c 69 7a 65 3a 65 2c 6e 6f 72 6d 61 6c 69 7a 65 4e 61 Data Ascii: a){return e(a,{strip:"whitespace_and_punctuation"})}function h(a){return e(a,{truncate:2,strip:"all_non_latin_alpha_numeric",test:"^[a-z]+"})}function i(a){return e(a,{strip:"all_non_latin_alpha_numeric",test:"^[a-z]+"})}k.exports={normalize:e,normalizeNa
2023-06-06 08:40:22 UTC	6400	IN	Data Raw: 33 2c 31 32 38 7c 63 26 36 33 29 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 62 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 3e 3e 3e 61 7c 62 3c 3c 33 32 2d 61 7d 66 75 6e 63 74 69 6f 6e 20 63 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 26 62 5e 7e 61 26 63 7d 66 75 6e 63 74 69 6f 6e 20 64 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 26 62 5e 61 26 63 5e 62 26 63 7d 66 75 6e 63 74 69 6f 6e 20 65 28 61 29 7b 72 65 74 75 72 6e 20 62 28 32 2c 61 29 5e 62 28 31 33 2c 61 29 5e 62 28 32 32 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 61 29 7b 72 65 74 75 72 6e 20 62 28 36 2c 61 29 5e 62 28 31 31 2c 61 29 5e 62 28 32 35 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 72 65 74 75 72 6e 20 62 28 37 2c 61 29 5e 62 28 31 38 2c 61 29 5e 61 Data Ascii: 3,128\|c&63));return b}function b(a,b){return b>>>a\|b<<32-a}function c(a,b,c){return a&b^~a&c}function d(a,b,c){return a&b^a&c^b&c}function e(a){return b(2,a)^b(13,a)^b(22,a)}function f(a){return b(6,a)^b(11,a)^b(25,a)}function g(a){return b(7,a)^b(18,a)^a
2023-06-06 08:40:22 UTC	6401	IN	Data Raw: 67 3d 6c 5b 30 5d 3b 68 3d 6c 5b 31 5d 3b 6a 3d 6c 5b 32 5d 3b 6d 3d 6c 5b 33 5d 3b 70 3d 6c 5b 34 5d 3b 72 3d 6c 5b 35 5d 3b 73 3d 6c 5b 36 5d 3b 74 3d 6c 5b 37 5d 3b 66 6f 72 28 76 61 72 20 75 3d 30 3b 75 3c 31 36 3b 75 2b 2b 29 6f 5b 75 5d 3d 6e 5b 28 75 3c 3c 32 29 2b 33 5d 7c 6e 5b 28 75 3c 3c 32 29 2b 32 5d 3c 3c 38 7c 6e 5b 28 75 3c 3c 32 29 2b 31 5d 3c 3c 31 36 7c 6e 5b 75 3c 3c 32 5d 3c 3c 32 34 3b 66 6f 72 28 75 3d 30 3b 75 3c 36 34 3b 75 2b 2b 29 61 3d 74 2b 66 28 70 29 2b 63 28 70 2c 72 2c 73 29 2b 6b 5b 75 5d 2c 75 3c 31 36 3f 61 2b 3d 6f 5b 75 5d 3a 61 2b 3d 69 28 6f 2c 75 29 2c 62 3d 65 28 67 29 2b 64 28 67 2c 68 2c 6a 29 2c 74 3d 73 2c 73 3d 72 2c 72 3d 70 2c 70 3d 71 28 6d 2c 61 29 2c 6d 3d 6a 2c 6a 3d 68 2c 68 3d 67 2c 67 3d 71 28 61 2c Data Ascii: g=l[0];h=l[1];j=l[2];m=l[3];p=l[4];r=l[5];s=l[6];t=l[7];for(var u=0;u<16;u++)o[u]=n[(u<<2)+3]\|n[(u<<2)+2]<<8\|n[(u<<2)+1]<<16\|n[u<<2]<<24;for(u=0;u<64;u++)a=t+f(p)+c(p,r,s)+k[u],u<16?a+=o[u]:a+=i(o,u),b=e(g)+d(g,h,j),t=s,s=r,r=p,p=q(m,a),m=j,j=h,h=g,g=q(a,
2023-06-06 08:40:22 UTC	6403	IN	Data Raw: 2e 6e 6f 72 6d 61 6c 69 7a 65 3b 6b 2e 65 78 70 6f 72 74 73 3d 7b 65 6d 61 69 6c 3a 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 6e 6f 72 6d 61 6c 69 7a 65 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 6d 61 69 6c 54 79 70 65 22 29 2c 22 65 6e 75 6d 22 3a 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 6e 6f 72 6d 61 6c 69 7a 65 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 6e 75 6d 54 79 70 65 22 29 2c 70 6f 73 74 61 6c 5f 63 6f 64 65 3a 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 6e 6f 72 6d 61 6c 69 7a 65 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 6f 73 74 61 6c 43 6f 64 65 54 79 70 65 22 29 2c 70 68 6f 6e 65 5f 6e 75 6d 62 65 72 3a 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 Data Ascii: .normalize;k.exports={email:f.getFbeventsModules("normalizeSignalsFBEventsEmailType"),"enum":f.getFbeventsModules("normalizeSignalsFBEventsEnumType"),postal_code:f.getFbeventsModules("normalizeSignalsFBEventsPostalCodeType"),phone_number:f.getFbeventsModu
2023-06-06 08:40:22 UTC	6404	IN	Data Raw: 22 5d 7d 7d 2c 64 6f 62 6d 3a 7b 74 79 70 65 3a 22 73 74 72 69 6e 67 22 2c 74 79 70 65 50 61 72 61 6d 73 3a 7b 74 65 73 74 3a 22 5e 28 30 3f 5b 31 2d 39 5d 7c 31 5b 30 31 32 5d 29 24 7c 5e 6a 61 6e 7c 5e 66 65 62 7c 5e 6d 61 72 7c 5e 61 70 72 7c 5e 6d 61 79 7c 5e 6a 75 6e 7c 5e 6a 75 6c 7c 5e 61 75 67 7c 5e 73 65 70 7c 5e 6f 63 74 7c 5e 6e 6f 76 7c 5e 64 65 63 22 7d 7d 2c 64 6f 62 64 3a 7b 74 79 70 65 3a 22 73 74 72 69 6e 67 22 2c 74 79 70 65 50 61 72 61 6d 73 3a 7b 74 65 73 74 3a 22 5e 28 28 5b 30 5d 3f 5b 31 2d 39 5d 29 7c 28 5b 31 2d 32 5d 5b 30 2d 39 5d 29 7c 28 33 5b 30 31 5d 29 29 24 22 7d 7d 7d 7d 29 28 29 3b 72 65 74 75 72 6e 20 6a 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 Data Ascii: "]}},dobm:{type:"string",typeParams:{test:"^(0?[1-9]\|1[012])$\|^jan\|^feb\|^mar\|^apr\|^may\|^jun\|^jul\|^aug\|^sep\|^oct\|^nov\|^dec"}},dobd:{type:"string",typeParams:{test:"^(([0]?[1-9])\|([1-2][0-9])\|(3[01]))$"}}}})();return j.exports}(a,b,c,d)});f.ensureModuleRegi
2023-06-06 08:40:22 UTC	6405	IN	Data Raw: 75 6c 6c 21 3d 61 29 72 65 74 75 72 6e 20 61 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 47 6f 74 20 75 6e 65 78 70 65 63 74 65 64 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 2e 65 78 70 6f 72 74 73 3d 63 28 35 39 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 2e 65 78 70 6f 72 74 73 3d 63 28 36 39 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 28 33 34 29 28 22 77 6b 73 22 29 2c 65 3d 63 28 34 37 29 2c 66 3d 63 28 36 29 2e 53 79 6d 62 6f 6c 2c 67 3d 63 28 36 34 29 3b 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 64 5b 61 5d 7c 7c 28 64 5b 61 5d 3d 67 26 26 66 5b 61 5d 7c 7c 28 67 3f 66 Data Ascii: ull!=a)return a;throw new Error("Got unexpected null or undefined")}},function(a,b,c){a.exports=c(59)},function(a,b,c){a.exports=c(69)},function(a,b,c){var d=c(34)("wks"),e=c(47),f=c(6).Symbol,g=c(64);a.exports=function(a){return d[a]\|\|(d[a]=g&&f[a]\|\|(g?f
2023-06-06 08:40:22 UTC	6407	IN	Data Raw: 72 65 74 75 72 6e 20 66 7d 29 3b 76 61 72 20 64 3d 63 28 31 37 29 2c 65 3d 35 30 30 3b 66 75 6e 63 74 69 6f 6e 20 66 28 61 29 7b 76 61 72 20 62 3d 76 6f 69 64 20 30 3b 73 77 69 74 63 68 28 61 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7b 63 61 73 65 22 6d 65 74 61 22 3a 62 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6f 6e 74 65 6e 74 22 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 61 75 64 69 6f 22 3a 63 61 73 65 22 65 6d 62 65 64 22 3a 63 61 73 65 22 69 66 72 61 6d 65 22 3a 63 61 73 65 22 69 6d 67 22 3a 63 61 73 65 22 73 6f 75 72 63 65 22 3a 63 61 73 65 22 74 72 61 63 6b 22 3a 63 61 73 65 22 76 69 64 65 6f 22 3a 62 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 61 22 3a Data Ascii: return f});var d=c(17),e=500;function f(a){var b=void 0;switch(a.tagName.toLowerCase()){case"meta":b=a.getAttribute("content");break;case"audio":case"embed":case"iframe":case"img":case"source":case"track":case"video":b=a.getAttribute("src");break;case"a":
2023-06-06 08:40:22 UTC	6408	IN	Data Raw: 6f 6e 74 65 6e 74 3a 6e 75 6c 6c 7d 63 2e 64 28 62 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 28 33 33 29 2c 65 3d 4d 61 74 68 2e 6d 69 6e 3b 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3e 30 3f 65 28 64 28 61 29 2c 39 30 30 37 31 39 39 32 35 34 37 34 30 39 39 31 29 3a 30 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 2e 65 78 70 6f 72 74 73 3d 21 63 28 31 31 29 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 21 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 7b 7d 2c 22 61 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 7d 7d Data Ascii: ontent:null}c.d(b,"a",function(){return d})},function(a,b,c){var d=c(33),e=Math.min;a.exports=function(a){return a>0?e(d(a),9007199254740991):0}},function(a,b,c){a.exports=!c(11)(function(){return 7!=Object.defineProperty({},"a",{get:function(){return 7}}
2023-06-06 08:40:22 UTC	6410	IN	Data Raw: 61 72 20 64 3d 63 28 33 31 29 2c 65 3d 63 28 33 32 29 2c 66 3d 63 28 32 33 29 2c 67 3d 63 28 31 38 29 2c 68 3d 63 28 36 31 29 3b 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 31 3d 3d 61 2c 69 3d 32 3d 3d 61 2c 6a 3d 33 3d 3d 61 2c 6b 3d 34 3d 3d 61 2c 6c 3d 36 3d 3d 61 2c 6d 3d 35 3d 3d 61 7c 7c 6c 2c 6e 3d 62 7c 7c 68 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 2c 68 2c 6f 29 7b 66 6f 72 28 76 61 72 20 70 2c 71 2c 72 3d 66 28 62 29 2c 73 3d 65 28 72 29 2c 68 3d 64 28 68 2c 6f 2c 33 29 2c 6f 3d 67 28 73 2e 6c 65 6e 67 74 68 29 2c 74 3d 30 2c 62 3d 63 3f 6e 28 62 2c 6f 29 3a 69 3f 6e 28 62 2c 30 29 3a 76 6f 69 64 20 30 3b 6f 3e 74 3b 74 2b 2b 29 69 66 28 28 6d 7c 7c 74 20 69 6e 20 73 29 26 26 28 71 3d Data Ascii: ar d=c(31),e=c(32),f=c(23),g=c(18),h=c(61);a.exports=function(a,b){var c=1==a,i=2==a,j=3==a,k=4==a,l=6==a,m=5==a\|\|l,n=b\|\|h;return function(b,h,o){for(var p,q,r=f(b),s=e(r),h=d(h,o,3),o=g(s.length),t=0,b=c?n(b,o):i?n(b,0):void 0;o>t;t++)if((m\|\|t in s)&&(q=
2023-06-06 08:40:22 UTC	6411	IN	Data Raw: 6e 20 65 3b 69 66 28 21 62 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 28 63 3d 61 2e 74 6f 53 74 72 69 6e 67 29 26 26 21 64 28 65 3d 63 2e 63 61 6c 6c 28 61 29 29 29 72 65 74 75 72 6e 20 65 3b 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 27 74 20 63 6f 6e 76 65 72 74 20 6f 62 6a 65 63 74 20 74 6f 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 22 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 65 78 70 6f 72 74 73 3d 21 30 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 28 33 32 29 2c 65 3d 63 28 32 34 29 3b 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 64 28 65 28 61 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 65 78 70 6f Data Ascii: n e;if(!b&&"function"==typeof (c=a.toString)&&!d(e=c.call(a)))return e;throw TypeError("Can't convert object to primitive value")}},function(a,b){a.exports=!0},function(a,b,c){var d=c(32),e=c(24);a.exports=function(a){return d(e(a))}},function(a,b){a.expo
2023-06-06 08:40:22 UTC	6412	IN	Data Raw: 6f 6e 63 61 74 28 22 73 63 68 65 6d 61 2e 6f 72 67 2f 22 29 2e 63 6f 6e 63 61 74 28 61 2c 27 22 5d 27 29 7d 29 2e 6a 6f 69 6e 28 22 2c 20 22 29 2c 63 3d 5b 5d 2c 62 3d 6a 28 29 28 67 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 62 29 29 2c 73 3d 5b 5d 3b 62 2e 6c 65 6e 67 74 68 3e 30 3b 29 7b 76 61 72 20 74 3d 62 2e 70 6f 70 28 29 3b 69 66 28 21 6b 28 29 28 63 2c 74 29 29 7b 76 61 72 20 75 3d 7b 22 40 63 6f 6e 74 65 78 74 22 3a 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 22 7d 3b 73 2e 70 75 73 68 28 7b 68 74 6d 6c 45 6c 65 6d 65 6e 74 3a 74 2c 6a 73 6f 6e 4c 44 3a 75 7d 29 3b 66 6f 72 28 74 3d 5b 7b 65 6c 65 6d 65 6e 74 3a 74 2c 77 6f 72 6b 69 6e 67 4e 6f 64 65 3a 75 7d 5d 3b 74 2e 6c 65 6e 67 74 68 3b 29 7b 75 3d 74 2e 70 6f 70 28 29 Data Ascii: oncat("schema.org/").concat(a,'"]')}).join(", "),c=[],b=j()(g.querySelectorAll(b)),s=[];b.length>0;){var t=b.pop();if(!k()(c,t)){var u={"@context":"http://schema.org"};s.push({htmlElement:t,jsonLD:u});for(t=[{element:t,workingNode:u}];t.length;){u=t.pop()
2023-06-06 08:40:22 UTC	6413	IN	Data Raw: 61 6b 7d 75 5b 72 5d 3d 4f 62 6a 65 63 74 28 64 2e 62 29 28 71 29 7d 7d 7d 7d 7d 72 65 74 75 72 6e 20 69 28 29 28 73 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 66 28 29 28 62 2e 68 74 6d 6c 45 6c 65 6d 65 6e 74 2c 61 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 29 7b 72 65 74 75 72 6e 20 69 28 29 28 6c 28 29 28 6a 28 29 28 67 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 6d 65 74 61 5b 70 72 6f 70 65 72 74 79 5d 22 29 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 70 72 6f 70 65 72 74 79 22 29 3b 61 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6f 6e 74 65 6e 74 22 29 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 2d 31 21 3d Data Ascii: ak}u[r]=Object(d.b)(q)}}}}}return i()(s,function(b){return f()(b.htmlElement,a)})}function p(){return i()(l()(j()(g.querySelectorAll("meta[property]")),function(a){var b=a.getAttribute("property");a=a.getAttribute("content");return"string"==typeof b&&-1!=
2023-06-06 08:40:22 UTC	6415	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 64 2c 65 3b 62 3d 63 28 35 30 29 3b 76 61 72 20 66 3d 63 28 31 33 29 2c 67 3d 63 28 31 34 29 2c 68 3d 63 28 33 36 29 3b 63 3d 63 28 34 29 28 22 69 74 65 72 61 74 6f 72 22 29 3b 76 61 72 20 69 3d 21 31 3b 5b 5d 2e 6b 65 79 73 26 26 28 22 6e 65 78 74 22 69 6e 28 65 3d 5b 5d 2e 6b 65 79 73 28 29 29 3f 28 62 3d 62 28 62 28 65 29 29 29 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 26 26 28 64 3d 62 29 3a 69 3d 21 30 29 2c 6e 75 6c 6c 3d 3d 64 26 26 28 64 3d 7b 7d 29 2c 68 7c 7c 67 28 64 2c 63 29 7c 7c 66 28 64 2c 63 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 29 2c 61 2e 65 78 70 6f 72 74 73 3d 7b 49 74 65 72 61 74 6f 72 50 Data Ascii: function(a,b,c){"use strict";var d,e;b=c(50);var f=c(13),g=c(14),h=c(36);c=c(4)("iterator");var i=!1;[].keys&&("next"in(e=[].keys())?(b=b(b(e)))!==Object.prototype&&(d=b):i=!0),null==d&&(d={}),h\|\|g(d,c)\|\|f(d,c,function(){return this}),a.exports={IteratorP
2023-06-06 08:40:22 UTC	6416	IN	Data Raw: 3b 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 64 28 61 29 26 26 33 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 28 61 3f 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 3a 67 29 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 66 3b 72 65 74 75 72 6e 21 28 21 61 7c 7c 21 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 62 2e 4e 6f 64 65 3f 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 2e 4e 6f 64 65 3a 22 6f 62 6a 65 63 74 22 3d 3d 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a Data Ascii: ;a.exports=function(a){return d(a)&&3==a.nodeType}},function(a,b,c){"use strict";a.exports=function(a){var b=(a?a.ownerDocument\|\|a:g).defaultView\|\|f;return!(!a\|\|!("function"==typeof b.Node?a instanceof b.Node:"object"==(typeof a==="undefined"?"undefined":
2023-06-06 08:40:22 UTC	6418	IN	Data Raw: 5d 3b 72 65 74 75 72 6e 20 61 3d 3d 69 7c 7c 61 21 3d 68 26 26 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 62 3f 64 28 62 29 3a 21 21 62 29 7d 3b 76 61 72 20 66 3d 62 2e 6e 6f 72 6d 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 61 29 2e 72 65 70 6c 61 63 65 28 65 2c 22 2e 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 67 3d 62 2e 64 61 74 61 3d 7b 7d 2c 68 3d 62 2e 4e 41 54 49 56 45 3d 22 4e 22 2c 69 3d 62 2e 50 4f 4c 59 46 49 4c 4c 3d 22 50 22 3b 61 2e 65 78 70 6f 72 74 73 3d 62 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 28 33 38 29 2c 65 3d 63 28 36 29 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d Data Ascii: ];return a==i\|\|a!=h&&("function"==typeof b?d(b):!!b)};var f=b.normalize=function(a){return String(a).replace(e,".").toLowerCase()},g=b.data={},h=b.NATIVE="N",i=b.POLYFILL="P";a.exports=b},function(a,b,c){var d=c(38),e=c(6),f=function(a){return"function"==
2023-06-06 08:40:22 UTC	6419	IN	Data Raw: 65 72 46 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3b 69 66 28 21 67 28 62 29 7c 7c 28 63 3d 65 28 62 29 29 2e 74 79 70 65 21 3d 3d 61 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 63 6f 6d 70 61 74 69 62 6c 65 20 72 65 63 65 69 76 65 72 2c 20 22 2b 61 2b 22 20 72 65 71 75 69 72 65 64 22 29 3b 72 65 74 75 72 6e 20 63 7d 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 62 3d 63 28 37 34 29 3b 63 3d 63 28 36 29 2e 57 65 61 6b 4d 61 70 3b 61 2e 65 78 70 6f 72 74 73 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 2f 6e 61 74 69 76 65 20 63 6f 64 65 2f 2e 74 65 73 74 28 62 2e 63 61 6c 6c 28 63 29 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 Data Ascii: erFor:function(a){return function(b){var c;if(!g(b)\|\|(c=e(b)).type!==a)throw TypeError("Incompatible receiver, "+a+" required");return c}}}},function(a,b,c){b=c(74);c=c(6).WeakMap;a.exports="function"==typeof c&&/native code/.test(b.call(c))},function(a,b
2023-06-06 08:40:22 UTC	6420	IN	Data Raw: 2c 21 31 2c 21 30 29 2c 68 5b 62 5d 3d 69 2c 61 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 2e 65 78 70 6f 72 74 73 3d 21 63 28 31 31 29 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 7d 72 65 74 75 72 6e 20 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 6e 75 6c 6c 2c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 6e 65 77 20 61 28 29 29 21 3d 3d 61 2e 70 72 6f 74 6f 74 79 70 65 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 28 32 30 29 2c 65 3d 63 28 37 39 29 2c 66 3d 63 28 35 31 29 2c 67 3d 63 28 38 33 29 2c 68 3d 63 28 34 36 29 2c 69 3d 63 28 33 39 29 28 22 49 45 5f 50 52 4f 54 4f 22 29 2c 6a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d Data Ascii: ,!1,!0),h[b]=i,a}},function(a,b,c){a.exports=!c(11)(function(){function a(){}return a.prototype.constructor=null,Object.getPrototypeOf(new a())!==a.prototype})},function(a,b,c){var d=c(20),e=c(79),f=c(51),g=c(83),h=c(46),i=c(39)("IE_PROTO"),j=function(){}
2023-06-06 08:40:22 UTC	6422	IN	Data Raw: 65 78 70 6f 72 74 73 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 28 22 5f 5f 70 72 6f 74 6f 5f 5f 22 69 6e 7b 7d 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 3d 21 31 2c 63 3d 7b 7d 3b 74 72 79 7b 28 61 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 5f 5f 70 72 6f 74 6f 5f 5f 22 29 2e 73 65 74 29 2e 63 61 6c 6c 28 63 2c 5b 5d 29 2c 62 3d 63 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 2c 65 29 7b 72 65 74 75 72 6e 20 64 28 63 2c 65 29 2c 62 3f 61 2e 63 61 6c 6c 28 63 2c 65 29 3a 63 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 65 2c 63 Data Ascii: exports=Object.setPrototypeOf\|\|("__proto__"in{}?function(){var a,b=!1,c={};try{(a=Object.getOwnPropertyDescriptor(Object.prototype,"__proto__").set).call(c,[]),b=c instanceof Array}catch(a){}return function(c,e){return d(c,e),b?a.call(c,e):c.__proto__=e,c
2023-06-06 08:40:22 UTC	6423	IN	Data Raw: 63 29 5b 30 5d 2c 63 5b 31 5d 29 3a 62 28 63 29 7d 63 61 74 63 68 28 62 29 7b 65 3d 61 5b 22 72 65 74 75 72 6e 22 5d 3b 74 68 72 6f 77 20 76 6f 69 64 20 30 21 3d 3d 65 26 26 64 28 65 2e 63 61 6c 6c 28 61 29 29 2c 62 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 28 32 37 29 2c 65 3d 63 28 34 29 28 22 69 74 65 72 61 74 6f 72 22 29 2c 66 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 3b 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 61 26 26 28 64 2e 41 72 72 61 79 3d 3d 3d 61 7c 7c 66 5b 65 5d 3d 3d 3d 61 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 64 3d 63 28 33 35 29 2c 65 3d 63 28 32 35 Data Ascii: c)[0],c[1]):b(c)}catch(b){e=a["return"];throw void 0!==e&&d(e.call(a)),b}}},function(a,b,c){var d=c(27),e=c(4)("iterator"),f=Array.prototype;a.exports=function(a){return void 0!==a&&(d.Array===a\|\|f[e]===a)}},function(a,b,c){"use strict";var d=c(35),e=c(25
2023-06-06 08:40:22 UTC	6424	IN	Data Raw: 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 64 3d 63 28 34 31 29 28 21 30 29 3b 63 28 37 29 28 7b 74 61 72 67 65 74 3a 22 41 72 72 61 79 22 2c 70 72 6f 74 6f 3a 21 30 7d 2c 7b 69 6e 63 6c 75 64 65 73 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 64 28 74 68 69 73 2c 61 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 29 7d 7d 29 2c 63 28 35 34 29 28 22 69 6e 63 6c 75 64 65 73 22 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 63 28 39 38 29 2c 61 2e 65 78 70 6f 72 74 73 3d 63 28 31 35 29 28 22 41 72 72 61 79 22 2c 22 6d 61 70 22 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 64 3d 63 28 33 30 29 Data Ascii: {"use strict";var d=c(41)(!0);c(7)({target:"Array",proto:!0},{includes:function(a){return d(this,a,arguments.length>1?arguments[1]:void 0)}}),c(54)("includes")},function(a,b,c){c(98),a.exports=c(15)("Array","map")},function(a,b,c){"use strict";var d=c(30)
2023-06-06 08:40:22 UTC	6425	IN	Data Raw: 6e 28 61 2c 62 2c 63 29 7b 63 28 31 30 37 29 2c 61 2e 65 78 70 6f 72 74 73 3d 63 28 31 35 29 28 22 53 74 72 69 6e 67 22 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 64 3d 63 28 31 38 29 2c 65 3d 63 28 31 30 38 29 3b 61 3d 63 28 31 31 30 29 28 22 73 74 61 72 74 73 57 69 74 68 22 29 3b 76 61 72 20 66 3d 22 22 2e 73 74 61 72 74 73 57 69 74 68 3b 63 28 37 29 28 7b 74 61 72 67 65 74 3a 22 53 74 72 69 6e 67 22 2c 70 72 6f 74 6f 3a 21 30 2c 66 6f 72 63 65 64 3a 21 61 7d 2c 7b 73 74 61 72 74 73 57 69 74 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 65 28 74 68 69 73 2c 61 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 2c 63 3d 64 28 4d 61 74 68 2e 6d 69 Data Ascii: n(a,b,c){c(107),a.exports=c(15)("String","startsWith")},function(a,b,c){"use strict";var d=c(18),e=c(108);a=c(110)("startsWith");var f="".startsWith;c(7)({target:"String",proto:!0,forced:!a},{startsWith:function(a){var b=e(this,a,"startsWith"),c=d(Math.mi
2023-06-06 08:40:22 UTC	6427	IN	Data Raw: 63 28 30 29 3b 76 61 72 20 70 3d 63 2e 6e 28 6a 29 2c 71 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 70 28 29 28 69 2e 61 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 27 5b 76 6f 63 61 62 24 3d 22 27 2e 63 6f 6e 63 61 74 28 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 22 2c 27 22 5d 5b 74 79 70 65 6f 66 24 3d 22 27 29 2e 63 6f 6e 63 61 74 28 61 2c 27 22 5d 27 29 7d 29 2e 6a 6f 69 6e 28 22 2c 20 22 29 2c 63 3d 5b 5d 2c 62 3d 6e 28 29 28 67 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 62 29 29 2c 64 3d 5b 5d 3b 62 2e 6c 65 6e 67 74 68 3e 30 3b 29 7b 76 61 72 20 71 3d 62 2e 70 6f 70 28 29 3b 69 66 28 21 6f 28 29 28 63 2c 71 29 29 7b 76 61 72 20 73 3d 7b 22 40 63 6f 6e 74 65 78 74 22 3a 22 68 74 74 70 Data Ascii: c(0);var p=c.n(j),q=function(a){for(var b=p()(i.a,function(a){return'[vocab$="'.concat("http://schema.org/",'"][typeof$="').concat(a,'"]')}).join(", "),c=[],b=n()(g.querySelectorAll(b)),d=[];b.length>0;){var q=b.pop();if(!o()(c,q)){var s={"@context":"http
2023-06-06 08:40:22 UTC	6428	IN	Data Raw: 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 64 2e 6b 65 79 2c 64 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 76 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 62 20 69 6e 20 61 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 62 2c 7b 76 61 6c 75 65 3a 63 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 61 5b 62 5d 3d 63 2c 61 7d 76 61 72 20 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 62 29 7b 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 Data Ascii: writable=!0),Object.defineProperty(a,d.key,d)}}function v(a,b,c){return b in a?Object.defineProperty(a,b,{value:c,enumerable:!0,configurable:!0,writable:!0}):a[b]=c,a}var w=function(){function a(b){!function(a,b){if(!(a instanceof b))throw new TypeError("
2023-06-06 08:40:22 UTC	6430	IN	Data Raw: 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 63 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 63 2c 61 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 29 2c 64 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 28 61 2c 62 2c 63 5b 62 5d 29 7d 29 7d 72 65 74 75 72 6e 20 61 7d 28 7b 7d 2c 61 2c 76 28 7b 7d 2c 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 62 5b 30 5d 29 2c 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 62 5b 31 5d 29 29 29 7d 2c 7b 7d 29 2c 61 2e 5f 70 61 72 73 65 64 51 75 65 72 79 5b 62 5d 7c 7c 6e 75 6c 6c 7d 7d 7d 7d 5d 29 26 26 75 28 62 Data Ascii: ject.getOwnPropertySymbols(c).filter(function(a){return Object.getOwnPropertyDescriptor(c,a).enumerable}))),d.forEach(function(b){v(a,b,c[b])})}return a}({},a,v({},decodeURIComponent(b[0]),decodeURIComponent(b[1])))},{}),a._parsedQuery[b]\|\|null}}}}])&&u(b
2023-06-06 08:40:22 UTC	6431	IN	Data Raw: 7b 69 66 28 65 29 74 68 72 6f 77 20 66 7d 7d 72 65 74 75 72 6e 20 63 7d 28 61 2c 62 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 22 29 7d 28 29 7d 76 61 72 20 46 3d 22 63 68 69 6c 64 72 65 6e 28 22 2c 47 3d 22 63 6c 6f 73 65 73 74 28 22 3b 66 75 6e 63 74 69 6f 6e 20 48 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 49 28 61 2c 6d 28 29 28 70 28 29 28 62 2e 73 70 6c 69 74 28 2f 28 28 3f 3a 63 6c 6f 73 65 73 74 7c 63 68 69 6c 64 72 65 6e 29 5c 28 5b 5e 29 5d 2b 5c 29 29 2f 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 74 72 69 6d Data Ascii: {if(e)throw f}}return c}(a,b)\|\|function(){throw new TypeError("Invalid attempt to destructure non-iterable instance")}()}var F="children(",G="closest(";function H(a,b){return I(a,m()(p()(b.split(/((?:closest\|children)$[^)]+$)/),function(a){return a.trim
2023-06-06 08:40:22 UTC	6432	IN	Data Raw: 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 62 2c 7b 76 61 6c 75 65 3a 63 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 61 5b 62 5d 3d 63 2c 61 7d 76 61 72 20 61 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 28 29 28 4f 62 6a 65 63 74 28 4c 2e 65 78 74 72 61 63 74 4f 70 65 6e 47 72 61 70 68 29 28 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 31 3b 62 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 7b 76 61 72 20 63 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 62 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 62 5d 3a 7b 7d 2c 64 3d 4f 62 6a 65 Data Ascii: .defineProperty(a,b,{value:c,enumerable:!0,configurable:!0,writable:!0}):a[b]=c,a}var aa=function(){var a=t()(Object(L.extractOpenGraph)(),function(a,b){return function(a){for(var b=1;b<arguments.length;b++){var c=null!=arguments[b]?arguments[b]:{},d=Obje
2023-06-06 08:40:22 UTC	6433	IN	Data Raw: 5d 3b 72 65 74 75 72 6e 20 63 7d 7d 28 61 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 69 6e 20 4f 62 6a 65 63 74 28 61 29 7c 7c 22 5b 6f 62 6a 65 63 74 20 41 72 67 75 6d 65 6e 74 73 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 61 29 29 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 61 29 7d 28 61 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 73 70 72 65 61 64 20 6e 6f 6e 2d 69 74 65 72 61 62 6c Data Ascii: ];return c}}(a)\|\|function(a){if((typeof Symbol==="function"?Symbol.iterator:"@@iterator")in Object(a)\|\|"[object Arguments]"===Object.prototype.toString.call(a))return Array.from(a)}(a)\|\|function(){throw new TypeError("Invalid attempt to spread non-iterabl
2023-06-06 08:40:22 UTC	6435	IN	Data Raw: 43 48 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 67 3d 22 22 3b 69 66 28 66 3d 3d 3d 51 2e 4e 45 45 44 5f 4d 4f 52 45 5f 43 48 45 43 4b 49 4e 47 26 26 30 3d 3d 3d 28 67 3d 50 28 61 2c 62 29 29 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 69 66 28 64 2e 70 75 73 68 28 7b 6e 6f 64 65 3a 61 2c 72 65 6c 61 74 69 76 65 43 6c 61 73 73 3a 67 2c 69 6e 64 65 78 3a 63 28 61 29 7d 29 2c 65 2e 70 75 73 68 28 62 29 2c 61 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 62 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 21 61 7c 7c 21 62 29 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 72 65 74 75 72 6e 20 61 26 26 62 26 26 61 2e 69 73 53 61 6d 65 4e 6f 64 65 28 62 29 26 26 64 2e 6c 65 6e 67 74 68 3e 30 3f 7b 70 61 72 65 6e 74 4e 6f 64 65 3a 61 2c 6e 6f 64 65 31 54 72 Data Ascii: CH)return null;var g="";if(f===Q.NEED_MORE_CHECKING&&0===(g=P(a,b)).length)return null;if(d.push({node:a,relativeClass:g,index:c(a)}),e.push(b),a=a.parentNode,b=b.parentNode,!a\|\|!b)return null}return a&&b&&a.isSameNode(b)&&d.length>0?{parentNode:a,node1Tr
2023-06-06 08:40:22 UTC	6436	IN	Data Raw: 4f 54 5f 4f 52 47 22 2c 22 4a 53 4f 4e 5f 4c 44 22 2c 22 52 44 46 41 22 2c 22 4f 50 45 4e 5f 47 52 41 50 48 22 2c 22 47 54 4d 22 2c 22 4d 45 54 41 5f 54 41 47 22 2c 22 47 4c 4f 42 41 4c 5f 56 41 52 49 41 42 4c 45 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 31 3b 62 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 7b 76 61 72 20 63 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 62 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 62 5d 3a 7b 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 63 29 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 26 26 28 64 3d Data Ascii: OT_ORG","JSON_LD","RDFA","OPEN_GRAPH","GTM","META_TAG","GLOBAL_VARIABLE"],function(a,b,c){return function(a){for(var b=1;b<arguments.length;b++){var c=null!=arguments[b]?arguments[b]:{},d=Object.keys(c);"function"==typeof Object.getOwnPropertySymbols&&(d=
2023-06-06 08:40:22 UTC	6438	IN	Data Raw: 65 6e 67 74 68 3d 3d 3d 65 61 29 7b 76 61 72 20 64 3d 63 5b 30 5d 2c 65 3d 63 5b 31 5d 3b 69 66 28 6e 75 6c 6c 21 3d 64 26 26 6e 75 6c 6c 21 3d 65 29 7b 64 3d 62 61 28 64 2c 65 29 3b 64 26 26 63 2e 70 75 73 68 2e 61 70 70 6c 79 28 63 2c 64 29 7d 7d 76 61 72 20 67 3d 62 2e 65 78 74 72 61 63 74 6f 72 43 6f 6e 66 69 67 2e 70 61 72 61 6d 65 74 65 72 53 65 6c 65 63 74 6f 72 73 5b 30 5d 2e 70 61 72 61 6d 65 74 65 72 54 79 70 65 3b 65 3d 70 28 29 28 63 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 61 3d 28 6e 75 6c 6c 21 3d 28 62 3d 61 29 3f 62 2e 69 6e 6e 65 72 54 65 78 74 3a 62 29 7c 7c 28 6e 75 6c 6c 21 3d 28 62 3d 61 29 3f 62 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3a 62 29 3b 72 65 74 75 72 6e 5b 67 2c 61 5d 7d 29 3b 64 3d 70 28 29 28 6d 28 29 28 65 Data Ascii: ength===ea){var d=c[0],e=c[1];if(null!=d&&null!=e){d=ba(d,e);d&&c.push.apply(c,d)}}var g=b.extractorConfig.parameterSelectors[0].parameterType;e=p()(c,function(a){var b;a=(null!=(b=a)?b.innerText:b)\|\|(null!=(b=a)?b.textContent:b);return[g,a]});d=p()(m()(e
2023-06-06 08:40:22 UTC	6439	IN	Data Raw: 2e 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 62 2e 70 61 72 61 6d 65 74 65 72 5f 74 79 70 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 20 6d 75 73 74 20 62 65 20 73 65 74 22 29 3b 72 65 74 75 72 6e 7b 64 6f 6d 61 69 6e 55 52 49 3a 6e 65 77 20 77 28 61 2e 64 6f 6d 61 69 6e 5f 75 72 69 29 2c 65 76 65 6e 74 54 79 70 65 3a 61 2e 65 76 65 6e 74 5f 74 79 70 65 2c 65 78 74 72 61 63 74 6f 72 43 6f 6e 66 69 67 3a 28 62 3d 62 2c 7b 70 61 72 61 6d 65 74 65 72 53 65 6c 65 63 74 6f 72 73 3a 70 28 29 28 62 2e 70 61 72 61 6d 65 74 65 72 5f 73 65 6c 65 63 74 6f 72 73 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 7b 70 61 72 61 6d 65 74 65 72 54 79 70 65 3a 61 2e 70 61 72 61 6d 65 74 Data Ascii: .extractor_config;if(b.parameter_type)throw new Error("extractor_config must be set");return{domainURI:new w(a.domain_uri),eventType:a.event_type,extractorConfig:(b=b,{parameterSelectors:p()(b.parameter_selectors,function(a){return{parameterType:a.paramet
2023-06-06 08:40:22 UTC	6440	IN	Data Raw: 74 22 29 3b 72 65 74 75 72 6e 7b 64 6f 6d 61 69 6e 55 52 49 3a 6e 65 77 20 77 28 61 2e 64 6f 6d 61 69 6e 5f 75 72 69 29 2c 65 76 65 6e 74 54 79 70 65 3a 61 2e 65 76 65 6e 74 5f 74 79 70 65 2c 65 78 74 72 61 63 74 6f 72 43 6f 6e 66 69 67 3a 69 61 28 62 29 2c 65 78 74 72 61 63 74 6f 72 54 79 70 65 3a 22 55 52 49 22 2c 69 64 3a 6c 28 29 28 61 2e 69 64 29 2c 72 75 6c 65 49 64 3a 6e 75 6c 6c 21 3d 28 62 3d 61 2e 65 76 65 6e 74 5f 72 75 6c 65 29 3f 62 2e 69 64 3a 62 7d 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 7b 64 6f 6d 61 69 6e 55 52 49 3a 6e 65 77 20 77 28 61 2e 64 6f 6d 61 69 6e 5f 75 72 69 29 2c 65 76 65 6e 74 54 79 70 65 3a 61 2e 65 76 65 6e 74 5f 74 79 70 65 2c 65 78 74 72 61 63 74 6f 72 54 79 70 65 3a 61 2e 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 Data Ascii: t");return{domainURI:new w(a.domain_uri),eventType:a.event_type,extractorConfig:ia(b),extractorType:"URI",id:l()(a.id),ruleId:null!=(b=a.event_rule)?b.id:b};default:return{domainURI:new w(a.domain_uri),eventType:a.event_type,extractorType:a.extractor_type
2023-06-06 08:40:22 UTC	6442	IN	Data Raw: 65 29 7b 76 61 72 20 63 3d 66 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 61 29 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 22 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 22 29 3b 69 66 28 6e 75 6c 6c 21 3d 63 26 26 22 6e 6f 6e 65 22 21 3d 3d 63 26 26 63 2e 6c 65 6e 67 74 68 3e 30 29 72 65 74 75 72 6e 20 63 7d 69 66 28 22 49 4e 50 55 54 22 3d 3d 3d 61 2e 74 61 67 4e 61 6d 65 26 26 22 69 6d 61 67 65 22 3d 3d 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 29 29 7b 63 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 29 3b 69 66 28 6e 75 6c 6c 21 3d 63 29 72 65 74 75 72 6e 20 63 7d 63 3d 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 69 6d 67 22 29 3b 69 66 28 30 21 3d 3d 63 2e Data Ascii: e){var c=f.getComputedStyle(a).getPropertyValue("background-image");if(null!=c&&"none"!==c&&c.length>0)return c}if("INPUT"===a.tagName&&"image"===a.getAttribute("type")){c=a.getAttribute("src");if(null!=c)return c}c=a.getElementsByTagName("img");if(0!==c.
2023-06-06 08:40:22 UTC	6443	IN	Data Raw: 64 28 62 2c 22 73 69 67 6e 61 6c 73 47 65 74 42 75 74 74 6f 6e 49 6d 61 67 65 55 72 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 61 7d 29 2c 63 2e 64 28 62 2c 22 73 69 67 6e 61 6c 73 49 73 53 61 6e 65 42 75 74 74 6f 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 41 61 7d 29 2c 63 2e 64 28 62 2c 22 73 69 67 6e 61 6c 73 43 6f 6e 76 65 72 74 4e 6f 64 65 54 6f 48 54 4d 4c 45 6c 65 6d 65 6e 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 29 3b 76 61 72 20 42 61 3d 64 7d 5d 29 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 56 61 Data Ascii: d(b,"signalsGetButtonImageUrl",function(){return ra}),c.d(b,"signalsIsSaneButton",function(){return Aa}),c.d(b,"signalsConvertNodeToHTMLElement",function(){return s});var Ba=d}])})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsVa
2023-06-06 08:40:22 UTC	6444	IN	Data Raw: 3b 61 3d 61 2e 6d 61 70 3b 76 61 72 20 63 3d 7b 63 74 3a 22 63 74 22 2c 63 69 74 79 3a 22 63 74 22 2c 64 6f 62 3a 22 64 62 22 2c 64 6f 62 64 3a 22 64 6f 62 64 22 2c 64 6f 62 6d 3a 22 64 6f 62 6d 22 2c 64 6f 62 79 3a 22 64 6f 62 79 22 2c 65 6d 61 69 6c 3a 22 65 6d 22 2c 66 6e 3a 22 66 6e 22 2c 66 5f 6e 61 6d 65 3a 22 66 6e 22 2c 67 65 6e 3a 22 67 65 22 2c 6c 6e 3a 22 6c 6e 22 2c 6c 5f 6e 61 6d 65 3a 22 6c 6e 22 2c 70 68 6f 6e 65 3a 22 70 68 22 2c 73 74 3a 22 73 74 22 2c 73 74 61 74 65 3a 22 73 74 22 2c 7a 69 70 3a 22 7a 70 22 2c 7a 69 70 5f 63 6f 64 65 3a 22 7a 70 22 7d 2c 64 3d 7b 43 49 54 59 3a 5b 22 63 69 74 79 22 5d 2c 44 41 54 45 3a 5b 22 64 61 74 65 22 2c 22 64 74 22 2c 22 64 61 79 22 2c 22 64 6f 62 64 22 5d 2c 44 4f 42 3a 5b 22 62 69 72 74 68 22 2c Data Ascii: ;a=a.map;var c={ct:"ct",city:"ct",dob:"db",dobd:"dobd",dobm:"dobm",doby:"doby",email:"em",fn:"fn",f_name:"fn",gen:"ge",ln:"ln",l_name:"ln",phone:"ph",st:"st",state:"st",zip:"zp",zip_code:"zp"},d={CITY:["city"],DATE:["date","dt","day","dobd"],DOB:["birth",
2023-06-06 08:40:22 UTC	6446	IN	Data Raw: 7b 31 2c 32 7d 2f 5c 5c 64 7b 31 2c 32 7d 24 22 5d 3d 5b 22 59 59 2f 4d 4d 2f 44 44 22 5d 3b 62 5b 22 5e 5c 5c 64 7b 32 7d 2d 5c 5c 64 7b 31 2c 32 7d 2d 5c 5c 64 7b 31 2c 32 7d 24 22 5d 3d 5b 22 59 59 2d 4d 4d 2d 44 44 22 5d 3b 76 61 72 20 68 3d 5b 22 4d 4d 2d 44 44 2d 59 59 59 59 22 2c 22 4d 4d 2f 44 44 2f 59 59 59 59 22 2c 22 44 44 2d 4d 4d 2d 59 59 59 59 22 2c 22 44 44 2f 4d 4d 2f 59 59 59 59 22 2c 22 59 59 59 59 2d 4d 4d 2d 44 44 22 2c 22 59 59 59 59 2f 4d 4d 2f 44 44 22 2c 22 4d 4d 2d 44 44 2d 59 59 22 2c 22 4d 4d 2f 44 44 2f 59 59 22 2c 22 44 44 2d 4d 4d 2d 59 59 22 2c 22 44 44 2f 4d 4d 2f 59 59 22 2c 22 59 59 2d 4d 4d 2d 44 44 22 2c 22 59 59 2f 4d 4d 2f 44 44 22 5d 3b 6b 2e 65 78 70 6f 72 74 73 3d 7b 45 4d 41 49 4c 5f 52 45 47 45 58 3a 65 2c 50 4f Data Ascii: {1,2}/\\d{1,2}$"]=["YY/MM/DD"];b["^\\d{2}-\\d{1,2}-\\d{1,2}$"]=["YY-MM-DD"];var h=["MM-DD-YYYY","MM/DD/YYYY","DD-MM-YYYY","DD/MM/YYYY","YYYY-MM-DD","YYYY/MM/DD","MM-DD-YY","MM/DD/YY","DD-MM-YY","DD/MM/YY","YY-MM-DD","YY/MM/DD"];k.exports={EMAIL_REGEX:e,PO
2023-06-06 08:40:22 UTC	6447	IN	Data Raw: 3d 3d 63 7c 7c 65 3d 3d 3d 63 7c 7c 61 3d 3d 3d 63 7d 66 75 6e 63 74 69 6f 6e 20 75 28 61 29 7b 76 61 72 20 62 3d 61 2e 69 64 2c 63 3d 61 2e 6b 65 79 77 6f 72 64 73 2c 64 3d 61 2e 6e 61 6d 65 2c 65 3d 61 2e 70 6c 61 63 65 68 6f 6c 64 65 72 2c 66 3d 61 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 72 28 63 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 28 7b 69 64 3a 62 2c 6b 65 79 77 6f 72 64 3a 61 2c 6e 61 6d 65 3a 64 2c 70 6c 61 63 65 68 6f 6c 64 65 72 3a 65 2c 76 61 6c 75 65 3a 66 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 76 28 61 29 7b 72 65 74 75 72 6e 20 61 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 6e 2e 74 65 73 74 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 76 61 72 20 62 3d 61 2e Data Ascii: ==c\|\|e===c\|\|a===c}function u(a){var b=a.id,c=a.keywords,d=a.name,e=a.placeholder,f=a.value;return r(c,function(a){return t({id:b,keyword:a,name:d,placeholder:e,value:f})})}function v(a){return a!=null&&typeof a==="string"&&n.test(a)}function w(a){var b=a.
2023-06-06 08:40:22 UTC	6449	IN	Data Raw: 72 6e 20 75 28 7b 69 64 3a 65 2c 6b 65 79 77 6f 72 64 73 3a 6f 2e 47 45 4e 44 45 52 5f 46 49 45 4c 44 53 2c 6e 61 6d 65 3a 64 2c 70 6c 61 63 65 68 6f 6c 64 65 72 3a 66 7d 29 3b 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 45 28 61 2c 62 29 7b 76 61 72 20 63 3d 61 2e 6e 61 6d 65 3b 61 3d 61 2e 69 64 3b 72 65 74 75 72 6e 20 62 21 3d 3d 22 22 26 26 72 28 71 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 62 2e 6d 61 74 63 68 28 53 74 72 69 6e 67 28 61 29 29 3b 72 65 74 75 72 6e 20 61 21 3d 6e 75 6c 6c 26 26 61 5b 30 5d 3d 3d 3d 62 7d 29 7c 7c 75 28 7b 69 64 3a 61 2c 6b 65 79 77 6f 72 64 73 3a 6f 2e 5a 49 50 5f 43 4f 44 45 2c 6e 61 6d 65 3a 63 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 61 29 7b 76 61 72 20 62 3d 61 2e 6e 61 6d 65 3b 61 3d 61 2e 69 64 3b Data Ascii: rn u({id:e,keywords:o.GENDER_FIELDS,name:d,placeholder:f});return!1}function E(a,b){var c=a.name;a=a.id;return b!==""&&r(q,function(a){a=b.match(String(a));return a!=null&&a[0]===b})\|\|u({id:a,keywords:o.ZIP_CODE,name:c})}function F(a){var b=a.name;a=a.id;
2023-06-06 08:40:22 UTC	6450	IN	Data Raw: 56 61 6c 75 65 3a 4b 7d 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 69 64 65 6e 74 69 74 79 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 68 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4c 6f 67 67 69 6e 67 22 29 2c 62 3d 61 2e 6c 6f 67 55 73 65 Data Ascii: Value:K}})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.identity",function(){return function(h,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsLogging"),b=a.logUse
2023-06-06 08:40:22 UTC	6452	IN	Data Raw: 29 28 29 3b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 69 64 65 6e 74 69 74 79 22 29 3b 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 26 26 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 69 64 65 6e 74 69 74 79 22 2c 65 2e 65 78 70 6f 72 74 73 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 69 64 65 6e 74 69 74 79 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d Data Ascii: )();return e.exports}(a,b,c,d)});e.exports=f.getFbeventsModules("SignalsFBEvents.plugins.identity");f.registerPlugin&&f.registerPlugin("fbevents.plugins.identity",e.exports);f.ensureModuleRegistered("fbevents.plugins.identity",function(){return e.exports}
2023-06-06 08:40:22 UTC	6453	IN	Data Raw: 65 72 50 6c 75 67 69 6e 26 26 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 6a 73 6f 6e 6c 64 5f 6d 69 63 72 6f 64 61 74 61 22 2c 65 2e 65 78 70 6f 72 74 73 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 6a 73 6f 6e 6c 64 5f 6d 69 63 72 6f 64 61 74 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 29 7d 29 28 29 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 6c 6f 63 61 74 69 6f 6e 2c 68 69 73 74 6f 72 79 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 Data Ascii: erPlugin&&f.registerPlugin("fbevents.plugins.jsonld_microdata",e.exports);f.ensureModuleRegistered("fbevents.plugins.jsonld_microdata",function(){return e.exports})})()})(window,document,location,history);(function(a,b,c,d){var e={exports:{}};e.exports;(
2023-06-06 08:40:22 UTC	6454	IN	Data Raw: 72 20 66 3d 61 2e 66 62 71 3b 66 2e 65 78 65 63 53 74 61 72 74 3d 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 26 26 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 69 66 28 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 61 2e 70 6f 73 74 4d 65 73 73 61 67 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 69 66 28 21 66 29 7b 62 28 7b 61 63 74 69 6f 6e 3a 22 46 42 5f 4c 4f 47 22 2c 6c 6f 67 54 79 70 65 3a 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 22 2c 6c 6f 67 4d 65 73 73 61 67 65 3a 22 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 7d 2c 22 2a 22 29 3b 22 65 72 Data Ascii: r f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"*");"er
2023-06-06 08:40:22 UTC	6455	IN	Data Raw: 20 6e 65 77 20 45 72 72 6f 72 28 22 4d 61 6c 66 6f 72 6d 65 64 20 74 69 65 72 3a 20 22 2b 63 29 3b 72 65 74 75 72 6e 20 64 5b 31 5d 7d 7d 29 28 29 3b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 69 77 6c 62 6f 6f 74 73 74 72 61 70 70 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 63 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 Data Ascii: new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbevents
2023-06-06 08:40:22 UTC	6456	IN	Data Raw: 2c 62 2c 63 29 7b 6e 2e 73 65 74 49 74 65 6d 28 6d 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 67 72 61 70 68 54 6f 6b 65 6e 3a 61 2c 70 69 78 65 6c 49 44 3a 62 2c 73 65 73 73 69 6f 6e 53 74 61 72 74 54 69 6d 65 3a 63 7d 29 29 2c 71 28 29 7d 63 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 67 72 61 70 68 54 6f 6b 65 6e 3b 62 3d 62 2e 70 69 78 65 6c 49 44 3b 73 28 63 2c 62 29 3b 61 2e 46 61 63 65 62 6f 6f 6b 49 57 4c 53 65 73 73 69 6f 6e 45 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 72 65 6d 6f 76 65 49 74 65 6d 28 6d 29 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 64 28 61 29 7b 76 61 72 20 62 3d 61 2e 64 61 74 61 2c 63 3d 62 2e 67 72 61 70 68 54 6f 6b 65 6e 2c 64 3d 62 2e 6d 73 67 5f 74 79 Data Ascii: ,b,c){n.setItem(m,JSON.stringify({graphToken:a,pixelID:b,sessionStartTime:c})),q()}c.listen(function(b){var c=b.graphToken;b=b.pixelID;s(c,b);a.FacebookIWLSessionEnd=function(){return n.removeItem(m)}});function d(a){var b=a.data,c=b.graphToken,d=b.msg_ty
2023-06-06 08:40:22 UTC	6458	IN	Data Raw: 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 3a 20 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 29 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 Data Ascii: acebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){re
2023-06-06 08:40:22 UTC	6459	IN	Data Raw: 6f 62 6a 65 63 74 22 3d 3d 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 67 28 61 29 29 26 26 61 26 26 61 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 69 66 28 63 2e 72 28 64 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 64 2c 22 64 65 66 61 75 6c 74 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 61 7d 29 2c 32 26 62 26 26 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 61 29 66 6f 72 28 62 20 69 6e 20 61 29 63 2e 64 28 64 2c 62 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 61 5b 62 5d 7d 2e 62 69 6e 64 28 6e 75 6c 6c 2c 62 29 29 3b 72 Data Ascii: object"==(typeof a==="undefined"?"undefined":g(a))&&a&&a.__esModule)return a;var d=Object.create(null);if(c.r(d),Object.defineProperty(d,"default",{enumerable:!0,value:a}),2&b&&"string"!=typeof a)for(b in a)c.d(d,b,function(b){return a[b]}.bind(null,b));r
2023-06-06 08:40:22 UTC	6461	IN	Data Raw: 2e 70 72 6f 74 6f 74 79 70 65 2c 76 3d 72 3f 68 3a 68 5b 71 5d 7c 7c 28 68 5b 71 5d 3d 7b 7d 29 2c 77 3d 76 2e 70 72 6f 74 6f 74 79 70 65 3b 66 6f 72 28 6d 20 69 6e 20 62 29 63 3d 21 66 28 72 3f 6d 3a 71 2b 28 73 3f 22 2e 22 3a 22 23 22 29 2b 6d 2c 61 2e 66 6f 72 63 65 64 29 26 26 75 26 26 6b 28 75 2c 6d 29 2c 6e 3d 76 5b 6d 5d 2c 63 26 26 28 6f 3d 61 2e 6e 6f 54 61 72 67 65 74 47 65 74 3f 28 70 3d 65 28 75 2c 6d 29 29 26 26 70 2e 76 61 6c 75 65 3a 75 5b 6d 5d 29 2c 70 3d 63 26 26 6f 3f 6f 3a 62 5b 6d 5d 2c 63 26 26 28 74 79 70 65 6f 66 20 6e 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 67 28 6e 29 29 3d 3d 28 74 79 70 65 6f 66 20 70 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 67 28 Data Ascii: .prototype,v=r?h:h[q]\|\|(h[q]={}),w=v.prototype;for(m in b)c=!f(r?m:q+(s?".":"#")+m,a.forced)&&u&&k(u,m),n=v[m],c&&(o=a.noTargetGet?(p=e(u,m))&&p.value:u[m]),p=c&&o?o:b[m],c&&(typeof n==="undefined"?"undefined":g(n))==(typeof p==="undefined"?"undefined":g(
2023-06-06 08:40:22 UTC	6462	IN	Data Raw: 6e 75 6c 6c 21 3d 3d 61 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 28 32 35 29 2c 65 3d 63 28 32 36 29 3b 61 2e 65 78 70 6f 72 74 73 3d 63 28 31 39 29 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 64 2e 66 28 61 2c 62 2c 65 28 31 2c 63 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 5b 62 5d 3d 63 2c 61 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3b 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 63 2e 63 61 6c 6c 28 61 2c 62 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 Data Ascii: null!==a:"function"==typeof a}},function(a,b,c){var d=c(25),e=c(26);a.exports=c(19)?function(a,b,c){return d.f(a,b,e(1,c))}:function(a,b,c){return a[b]=c,a}},function(a,b){var c={}.hasOwnProperty;a.exports=function(a,b){return c.call(a,b)}},function(a,b,c
2023-06-06 08:40:22 UTC	6464	IN	Data Raw: 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 28 31 26 61 29 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 28 32 26 61 29 2c 77 72 69 74 61 62 6c 65 3a 21 28 34 26 61 29 2c 76 61 6c 75 65 3a 62 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 65 78 70 6f 72 74 73 3d 7b 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 2e 64 28 62 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 29 3b 76 61 72 20 64 3d 5b 22 4f 72 64 65 72 22 2c 22 41 67 67 72 65 67 61 74 65 4f 66 66 65 72 22 2c 22 43 72 65 61 74 69 76 65 57 6f 72 6b 22 2c 22 45 76 65 6e 74 22 2c 22 4d 65 6e 75 49 74 65 6d 22 2c 22 50 72 6f 64 75 Data Ascii: exports=function(a,b){return{enumerable:!(1&a),configurable:!(2&a),writable:!(4&a),value:b}}},function(a,b){a.exports={}},function(a,b,c){"use strict";c.d(b,"a",function(){return d});var d=["Order","AggregateOffer","CreativeWork","Event","MenuItem","Produ
2023-06-06 08:40:22 UTC	6465	IN	Data Raw: 61 74 68 2e 63 65 69 6c 2c 64 3d 4d 61 74 68 2e 66 6c 6f 6f 72 3b 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 61 3d 2b 61 29 3f 30 3a 28 61 3e 30 3f 64 3a 63 29 28 61 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 62 3d 63 28 36 29 3b 76 61 72 20 64 3d 63 28 36 33 29 2c 65 3d 62 5b 22 5f 5f 63 6f 72 65 2d 6a 73 5f 73 68 61 72 65 64 5f 5f 22 5d 7c 7c 64 28 22 5f 5f 63 6f 72 65 2d 6a 73 5f 73 68 61 72 65 64 5f 5f 22 2c 7b 7d 29 3b 28 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 65 5b 61 5d 7c 7c 28 65 5b 61 5d 3d 76 6f 69 64 20 30 21 3d 3d 62 3f 62 3a 7b 7d 29 7d 29 28 22 76 65 72 73 69 6f 6e 73 22 2c 5b 5d 29 2e 70 75 73 68 28 7b 76 65 Data Ascii: ath.ceil,d=Math.floor;a.exports=function(a){return isNaN(a=+a)?0:(a>0?d:c)(a)}},function(a,b,c){b=c(6);var d=c(63),e=b["__core-js_shared__"]\|\|d("__core-js_shared__",{});(a.exports=function(a,b){return e[a]\|\|(e[a]=void 0!==b?b:{})})("versions",[]).push({ve
2023-06-06 08:40:22 UTC	6467	IN	Data Raw: 3d 64 28 30 29 3b 76 61 72 20 6c 3d 64 2e 6e 28 63 29 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 7b 66 6f 72 28 76 61 72 20 62 3d 30 2c 63 3d 6e 65 77 20 41 72 72 61 79 28 61 2e 6c 65 6e 67 74 68 29 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 63 5b 62 5d 3d 61 5b 62 5d 3b 72 65 74 75 72 6e 20 63 7d 7d 28 61 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 69 6e 20 4f 62 6a 65 63 74 28 61 29 7c 7c 22 5b 6f 62 6a 65 63 74 20 41 72 67 75 6d 65 6e 74 73 5d 22 3d 3d Data Ascii: =d(0);var l=d.n(c);function m(a){return function(a){if(Array.isArray(a)){for(var b=0,c=new Array(a.length);b<a.length;b++)c[b]=a[b];return c}}(a)\|\|function(a){if((typeof Symbol==="function"?Symbol.iterator:"@@iterator")in Object(a)\|\|"[object Arguments]"==
2023-06-06 08:40:22 UTC	6467	IN	Data Raw: 63 61 6c 6c 28 61 29 29 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 61 29 7d 28 61 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 73 70 72 65 61 64 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 22 29 7d 28 29 7d 76 61 72 20 6e 3d 5b 22 6f 67 22 2c 22 70 72 6f 64 75 63 74 22 2c 22 6d 75 73 69 63 22 2c 22 76 69 64 65 6f 22 2c 22 61 72 74 69 63 6c 65 22 2c 22 62 6f 6f 6b 22 2c 22 70 72 6f 66 69 6c 65 22 2c 22 77 65 62 73 69 74 65 22 2c 22 74 77 69 74 74 65 72 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 61 29 7b 66 6f 72 28 76 61 72 20 63 3d 6c 28 29 28 66 2e 61 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e Data Ascii: call(a))return Array.from(a)}(a)\|\|function(){throw new TypeError("Invalid attempt to spread non-iterable instance")}()}var n=["og","product","music","video","article","book","profile","website","twitter"];function o(a){for(var c=l()(f.a,function(a){return
2023-06-06 08:40:22 UTC	6468	IN	Data Raw: 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 6d 65 74 61 5b 6e 61 6d 65 5d 22 29 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 29 3b 61 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6f 6e 74 65 6e 74 22 29 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 71 5b 62 5d 3f 7b 6b 65 79 3a 22 6d 65 74 61 3a 22 2b 62 2c 76 61 6c 75 65 3a 61 2e 73 75 62 73 74 72 28 30 2c 65 2e 61 29 7d 3a 6e 75 6c 6c 7d 29 29 29 2c 42 6f 6f 6c 65 61 6e 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 2e 65 78 70 6f 72 74 73 3d 63 28 31 30 34 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 Data Ascii: ySelectorAll("meta[name]")),function(a){var b=a.getAttribute("name");a=a.getAttribute("content");return"string"==typeof b&&"string"==typeof a&&q[b]?{key:"meta:"+b,value:a.substr(0,e.a)}:null}))),Boolean)}},function(a,b,c){a.exports=c(104)},function(a,b){a
2023-06-06 08:40:22 UTC	6470	IN	Data Raw: 2c 62 29 7b 61 2e 65 78 70 6f 72 74 73 3d 5b 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 2c 22 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 22 2c 22 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 22 2c 22 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 22 2c 22 74 6f 4c 6f 63 61 6c 65 53 74 72 69 6e 67 22 2c 22 74 6f 53 74 72 69 6e 67 22 2c 22 76 61 6c 75 65 4f 66 22 5d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 28 32 35 29 2e 66 2c 65 3d 63 28 31 33 29 2c 66 3d 63 28 31 34 29 2c 67 3d 63 28 34 29 28 22 74 6f 53 74 72 69 6e 67 54 61 67 22 29 2c 68 3d 63 28 38 34 29 2c 69 3d 68 21 3d 3d 7b 7d 2e 74 6f 53 74 72 69 6e 67 3b 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 6a 29 7b 69 66 28 61 29 7b 63 3d Data Ascii: ,b){a.exports=["constructor","hasOwnProperty","isPrototypeOf","propertyIsEnumerable","toLocaleString","toString","valueOf"]},function(a,b,c){var d=c(25).f,e=c(13),f=c(14),g=c(4)("toStringTag"),h=c(84),i=h!=={}.toString;a.exports=function(a,b,c,j){if(a){c=
2023-06-06 08:40:22 UTC	6471	IN	Data Raw: 28 34 29 28 22 73 70 65 63 69 65 73 22 29 3b 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3b 72 65 74 75 72 6e 20 65 28 61 29 26 26 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 28 63 3d 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 7c 7c 63 21 3d 3d 41 72 72 61 79 26 26 21 65 28 63 2e 70 72 6f 74 6f 74 79 70 65 29 3f 64 28 63 29 26 26 6e 75 6c 6c 3d 3d 3d 28 63 3d 63 5b 66 5d 29 26 26 28 63 3d 76 6f 69 64 20 30 29 3a 63 3d 76 6f 69 64 20 30 29 2c 6e 65 77 28 76 6f 69 64 20 30 3d 3d 3d 63 3f 41 72 72 61 79 3a 63 29 28 30 3d 3d 3d 62 3f 30 3a 62 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 28 32 32 29 3b 61 2e 65 78 70 6f 72 74 73 3d 41 72 72 61 79 2e 69 73 41 72 72 61 Data Ascii: (4)("species");a.exports=function(a,b){var c;return e(a)&&("function"!=typeof (c=a.constructor)\|\|c!==Array&&!e(c.prototype)?d(c)&&null===(c=c[f])&&(c=void 0):c=void 0),new(void 0===c?Array:c)(0===b?0:b)}},function(a,b,c){var d=c(22);a.exports=Array.isArra
2023-06-06 08:40:22 UTC	6473	IN	Data Raw: 72 69 6e 67 20 49 74 65 72 61 74 6f 72 22 2c 73 74 72 69 6e 67 3a 53 74 72 69 6e 67 28 61 29 2c 69 6e 64 65 78 3a 30 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 66 28 74 68 69 73 29 2c 62 3d 61 2e 73 74 72 69 6e 67 2c 63 3d 61 2e 69 6e 64 65 78 3b 72 65 74 75 72 6e 20 63 3e 3d 62 2e 6c 65 6e 67 74 68 3f 7b 76 61 6c 75 65 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 3a 28 62 3d 64 28 62 2c 63 2c 21 30 29 2c 61 2e 69 6e 64 65 78 2b 3d 62 2e 6c 65 6e 67 74 68 2c 7b 76 61 6c 75 65 3a 62 2c 64 6f 6e 65 3a 21 31 7d 29 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 28 33 33 29 2c 65 3d 63 28 32 34 29 3b 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 66 2c 67 3b 61 Data Ascii: ring Iterator",string:String(a),index:0})},function(){var a=f(this),b=a.string,c=a.index;return c>=b.length?{value:void 0,done:!0}:(b=d(b,c,!0),a.index+=b.length,{value:b,done:!1})})},function(a,b,c){var d=c(33),e=c(24);a.exports=function(a,b,c){var f,g;a
2023-06-06 08:40:22 UTC	6474	IN	Data Raw: 76 61 72 20 75 3b 71 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 3d 3d 3d 72 26 26 7a 29 72 65 74 75 72 6e 20 7a 3b 69 66 28 21 6f 26 26 61 20 69 6e 20 78 29 72 65 74 75 72 6e 20 78 5b 61 5d 3b 73 77 69 74 63 68 28 61 29 7b 63 61 73 65 22 6b 65 79 73 22 3a 63 61 73 65 22 76 61 6c 75 65 73 22 3a 63 61 73 65 22 65 6e 74 72 69 65 73 22 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 63 28 74 68 69 73 2c 61 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 63 28 74 68 69 73 29 7d 7d 3b 76 61 72 20 76 3d 62 2b 22 20 49 74 65 72 61 74 6f 72 22 2c 77 3d 21 31 2c 78 3d 61 2e 70 72 6f 74 6f 74 79 70 65 2c 79 3d 78 5b 6c 5d 7c 7c 78 5b 22 40 40 69 74 65 72 61 74 6f 72 22 Data Ascii: var u;q=function(a){if(a===r&&z)return z;if(!o&&a in x)return x[a];switch(a){case"keys":case"values":case"entries":return function(){return new c(this,a)}}return function(){return new c(this)}};var v=b+" Iterator",w=!1,x=a.prototype,y=x[l]\|\|x["@@iterator"
2023-06-06 08:40:22 UTC	6476	IN	Data Raw: 6f 74 6f 74 79 70 65 3d 64 28 61 29 2c 63 3d 6e 65 77 20 6a 28 29 2c 6a 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 75 6c 6c 2c 63 5b 69 5d 3d 61 29 3a 63 3d 6b 28 29 2c 76 6f 69 64 20 30 3d 3d 3d 62 3f 63 3a 65 28 63 2c 62 29 7d 2c 63 28 34 30 29 5b 69 5d 3d 21 30 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 62 3d 63 28 31 39 29 3b 76 61 72 20 64 3d 63 28 32 35 29 2c 65 3d 63 28 32 30 29 2c 66 3d 63 28 38 30 29 3b 61 2e 65 78 70 6f 72 74 73 3d 62 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 65 28 61 29 3b 66 6f 72 28 76 61 72 20 63 2c 67 3d 66 28 62 29 2c 68 3d 67 2e 6c 65 6e 67 74 68 2c 69 3d 30 3b 68 3e 69 3b 29 64 2e 66 28 61 2c 63 3d 67 5b 69 2b 2b 5d 2c 62 5b 63 5d 29 3b 72 65 Data Ascii: ototype=d(a),c=new j(),j.prototype=null,c[i]=a):c=k(),void 0===b?c:e(c,b)},c(40)[i]=!0},function(a,b,c){b=c(19);var d=c(25),e=c(20),f=c(80);a.exports=b?Object.defineProperties:function(a,b){e(a);for(var c,g=f(b),h=g.length,i=0;h>i;)d.f(a,c=g[i++],b[c]);re
2023-06-06 08:40:22 UTC	6477	IN	Data Raw: 2c 73 74 61 74 3a 21 30 2c 66 6f 72 63 65 64 3a 61 7d 2c 7b 66 72 6f 6d 3a 63 28 39 30 29 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 28 34 29 28 22 69 74 65 72 61 74 6f 72 22 29 2c 65 3d 21 31 3b 74 72 79 7b 76 61 72 20 66 3d 30 3b 62 3d 7b 6e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 21 21 66 2b 2b 7d 7d 2c 22 72 65 74 75 72 6e 22 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 65 3d 21 30 7d 7d 3b 62 5b 64 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 41 72 72 61 79 2e 66 72 6f 6d 28 62 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 32 7d 29 7d 63 61 74 63 68 28 61 29 7b 7d 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 Data Ascii: ,stat:!0,forced:a},{from:c(90)})},function(a,b,c){var d=c(4)("iterator"),e=!1;try{var f=0;b={next:function(){return{done:!!f++}},"return":function(){e=!0}};b[d]=function(){return this},Array.from(b,function(){throw 2})}catch(a){}a.exports=function(a,b){if
2023-06-06 08:40:22 UTC	6479	IN	Data Raw: 41 72 72 61 79 22 2c 70 72 6f 74 6f 3a 21 30 7d 2c 7b 69 6e 63 6c 75 64 65 73 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 64 28 74 68 69 73 2c 61 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 29 7d 7d 29 2c 63 28 35 34 29 28 22 69 6e 63 6c 75 64 65 73 22 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 63 28 39 38 29 2c 61 2e 65 78 70 6f 72 74 73 3d 63 28 31 35 29 28 22 41 72 72 61 79 22 2c 22 6d 61 70 22 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 64 3d 63 28 33 30 29 28 31 29 3b 61 3d 63 28 34 38 29 28 22 6d 61 70 22 29 3b 63 28 37 29 28 7b 74 61 72 67 65 74 3a 22 41 72 72 61 79 22 2c 70 72 6f 74 Data Ascii: Array",proto:!0},{includes:function(a){return d(this,a,arguments.length>1?arguments[1]:void 0)}}),c(54)("includes")},function(a,b,c){c(98),a.exports=c(15)("Array","map")},function(a,b,c){"use strict";var d=c(30)(1);a=c(48)("map");c(7)({target:"Array",prot
2023-06-06 08:40:22 UTC	6480	IN	Data Raw: 61 72 74 73 57 69 74 68 22 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 64 3d 63 28 31 38 29 2c 65 3d 63 28 31 30 38 29 3b 61 3d 63 28 31 31 30 29 28 22 73 74 61 72 74 73 57 69 74 68 22 29 3b 76 61 72 20 66 3d 22 22 2e 73 74 61 72 74 73 57 69 74 68 3b 63 28 37 29 28 7b 74 61 72 67 65 74 3a 22 53 74 72 69 6e 67 22 2c 70 72 6f 74 6f 3a 21 30 2c 66 6f 72 63 65 64 3a 21 61 7d 2c 7b 73 74 61 72 74 73 57 69 74 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 65 28 74 68 69 73 2c 61 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 2c 63 3d 64 28 4d 61 74 68 2e 6d 69 6e 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 2c 62 2e 6c Data Ascii: artsWith")},function(a,b,c){"use strict";var d=c(18),e=c(108);a=c(110)("startsWith");var f="".startsWith;c(7)({target:"String",proto:!0,forced:!a},{startsWith:function(a){var b=e(this,a,"startsWith"),c=d(Math.min(arguments.length>1?arguments[1]:void 0,b.l
2023-06-06 08:40:22 UTC	6480	IN	Data Raw: 66 3f 66 2e 63 61 6c 6c 28 62 2c 67 2c 63 29 3a 62 2e 73 6c 69 63 65 28 63 2c 63 2b 67 2e 6c 65 6e 67 74 68 29 3d 3d 3d 67 7d 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 28 31 30 39 29 2c 65 3d 63 28 32 34 29 3b 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 64 28 62 29 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 64 6f 65 73 6e 27 74 20 61 63 63 65 70 74 20 72 65 67 65 78 22 29 3b 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 65 28 61 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 28 31 32 29 2c 65 3d 63 28 32 32 29 2c 66 3d 63 28 34 29 28 22 6d 61 74 63 68 22 29 3b 61 Data Ascii: f?f.call(b,g,c):b.slice(c,c+g.length)===g}})},function(a,b,c){var d=c(109),e=c(24);a.exports=function(a,b,c){if(d(b))throw TypeError("String.prototype."+c+" doesn't accept regex");return String(e(a))}},function(a,b,c){var d=c(12),e=c(22),f=c(4)("match");a
2023-06-06 08:40:22 UTC	6482	IN	Data Raw: 70 72 6f 70 65 72 74 79 22 29 29 3b 69 66 28 78 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 6f 66 22 29 29 7b 76 61 72 20 71 3d 7b 7d 3b 76 5b 67 5d 3d 71 2c 73 2e 70 75 73 68 28 7b 65 6c 65 6d 65 6e 74 3a 77 2c 77 6f 72 6b 69 6e 67 4e 6f 64 65 3a 76 7d 29 2c 73 2e 70 75 73 68 28 7b 65 6c 65 6d 65 6e 74 3a 78 2c 77 6f 72 6b 69 6e 67 4e 6f 64 65 3a 71 7d 29 3b 62 72 65 61 6b 7d 76 5b 67 5d 3d 4f 62 6a 65 63 74 28 68 2e 62 29 28 78 29 7d 7d 7d 7d 7d 72 65 74 75 72 6e 20 6d 28 29 28 65 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 6b 28 29 28 62 2e 68 74 6d 6c 45 6c 65 6d 65 6e 74 2c 61 29 7d 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 61 29 7b 72 65 74 75 72 6e 28 72 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 Data Ascii: property"));if(x.hasAttribute("typeof")){var q={};v[g]=q,s.push({element:w,workingNode:v}),s.push({element:x,workingNode:q});break}v[g]=Object(h.b)(x)}}}}}return m()(e,function(b){return k()(b.htmlElement,a)})};function r(a){return(r="function"==typeof Sy
2023-06-06 08:40:22 UTC	6483	IN	Data Raw: 68 6f 72 45 6c 65 6d 65 6e 74 2e 68 72 65 66 7d 7d 2c 7b 6b 65 79 3a 22 68 61 73 68 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 61 6e 63 68 6f 72 45 6c 65 6d 65 6e 74 2e 68 61 73 68 7d 7d 2c 7b 6b 65 79 3a 22 68 6f 73 74 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 61 6e 63 68 6f 72 45 6c 65 6d 65 6e 74 2e 68 6f 73 74 7d 7d 2c 7b 6b 65 79 3a 22 68 6f 73 74 6e 61 6d 65 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 61 6e 63 68 6f 72 45 6c 65 6d 65 6e 74 2e 68 6f 73 74 6e 61 6d 65 7d 7d 2c 7b 6b 65 79 3a 22 70 61 74 68 6e 61 6d 65 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 61 6e Data Ascii: horElement.href}},{key:"hash",get:function(){return this._anchorElement.hash}},{key:"host",get:function(){return this._anchorElement.host}},{key:"hostname",get:function(){return this._anchorElement.hostname}},{key:"pathname",get:function(){return this._an
2023-06-06 08:40:22 UTC	6485	IN	Data Raw: 22 2b 62 2e 69 64 29 29 3b 72 65 74 75 72 6e 20 64 26 26 28 62 2e 69 64 3d 22 22 29 2c 63 7d 3b 6a 2e 43 41 4e 5f 55 53 45 5f 53 43 4f 50 45 3d 21 30 3b 76 61 72 20 79 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 74 72 79 7b 79 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 73 63 6f 70 65 20 2a 22 29 7d 63 61 74 63 68 28 61 29 7b 6a 2e 43 41 4e 5f 55 53 45 5f 53 43 4f 50 45 3d 21 31 7d 76 61 72 20 7a 3d 6a 3b 79 3d 64 28 32 39 29 3b 76 61 72 20 41 3d 64 2e 6e 28 79 29 3b 6a 3d 64 28 31 36 29 3b 76 61 72 20 42 3d 64 2e 6e 28 6a 29 3b 79 3d 28 64 28 34 33 29 2c 64 28 32 31 29 29 3b 76 61 72 20 43 3d 64 2e 6e 28 79 29 3b 66 75 6e 63 74 69 6f 6e 20 44 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b Data Ascii: "+b.id));return d&&(b.id=""),c};j.CAN_USE_SCOPE=!0;var y=b.createElement("div");try{y.querySelectorAll(":scope *")}catch(a){j.CAN_USE_SCOPE=!1}var z=j;y=d(29);var A=d.n(y);j=d(16);var B=d.n(j);y=(d(43),d(21));var C=d.n(y);function D(a){return function(a){
2023-06-06 08:40:22 UTC	6486	IN	Data Raw: 29 3b 76 61 72 20 63 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 72 65 74 75 72 6e 20 63 26 26 22 73 74 61 6e 64 61 72 64 22 3d 3d 3d 63 2e 74 79 70 65 3f 28 63 2e 73 65 6c 65 63 74 6f 72 2b 3d 22 20 22 2b 62 2e 73 65 6c 65 63 74 6f 72 2c 61 29 3a 5b 5d 2e 63 6f 6e 63 61 74 28 44 28 61 29 2c 5b 62 5d 29 7d 2c 5b 5d 29 3b 72 65 74 75 72 6e 20 74 28 29 28 62 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 6d 28 29 28 41 28 29 28 70 28 29 28 61 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 63 61 28 61 2c 62 29 7d 29 29 2c 42 6f 6f 6c 65 61 6e 29 7d 2c 5b 61 5d 29 7d 76 61 72 20 63 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 62 2e 73 65 6c 65 63 74 6f 72 3b 73 77 69 74 63 68 28 62 2e 74 79 70 65 29 7b 63 Data Ascii: );var c=a[a.length-1];return c&&"standard"===c.type?(c.selector+=" "+b.selector,a):[].concat(D(a),[b])},[]);return t()(b,function(a,b){return m()(A()(p()(a,function(a){return ca(a,b)})),Boolean)},[a])}var ca=function(a,b){var c=b.selector;switch(b.type){c
2023-06-06 08:40:22 UTC	6488	IN	Data Raw: 6e 75 6c 6c 3a 7b 22 40 63 6f 6e 74 65 78 74 22 3a 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 22 2c 22 40 74 79 70 65 22 3a 22 50 72 6f 64 75 63 74 22 2c 6f 66 66 65 72 73 3a 7b 70 72 69 63 65 3a 61 5b 22 70 72 6f 64 75 63 74 3a 70 72 69 63 65 3a 61 6d 6f 75 6e 74 22 5d 2c 70 72 69 63 65 43 75 72 72 65 6e 63 79 3a 61 5b 22 70 72 6f 64 75 63 74 3a 70 72 69 63 65 3a 63 75 72 72 65 6e 63 79 22 5d 7d 2c 70 72 6f 64 75 63 74 49 44 3a 61 5b 22 70 72 6f 64 75 63 74 3a 72 65 74 61 69 6c 65 72 5f 69 74 65 6d 5f 69 64 22 5d 7d 7d 2c 49 3d 7b 50 41 54 48 3a 22 50 41 54 48 22 2c 51 55 45 52 59 5f 53 54 52 49 4e 47 3a 22 51 55 45 52 59 5f 53 54 52 49 4e 47 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 4a 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 Data Ascii: null:{"@context":"http://schema.org","@type":"Product",offers:{price:a["product:price:amount"],priceCurrency:a["product:price:currency"]},productID:a["product:retailer_item_id"]}},I={PATH:"PATH",QUERY_STRING:"QUERY_STRING"};function J(a){return function(a
2023-06-06 08:40:22 UTC	6489	IN	Data Raw: 3d 5b 5d 2c 62 3d 61 2e 66 69 72 73 74 43 68 69 6c 64 2c 61 3d 30 3b 62 3b 29 7b 76 61 72 20 66 3d 4f 28 62 2c 61 2c 63 2c 64 2b 31 29 3b 66 26 26 65 2e 70 75 73 68 2e 61 70 70 6c 79 28 65 2c 4a 28 66 29 29 2c 62 3d 62 2e 6e 65 78 74 53 69 62 6c 69 6e 67 2c 61 2b 3d 31 7d 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 67 61 28 61 2c 62 29 7b 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 69 66 28 21 62 29 72 65 74 75 72 6e 2d 31 3b 66 6f 72 28 76 61 72 20 62 3d 62 2e 66 69 72 73 74 43 68 69 6c 64 2c 63 3d 30 3b 62 26 26 62 21 3d 3d 61 3b 29 62 3d 62 2e 6e 65 78 74 53 69 62 6c 69 6e 67 2c 63 2b 3d 31 3b 72 65 74 75 72 6e 20 62 Data Ascii: =[],b=a.firstChild,a=0;b;){var f=O(b,a,c,d+1);f&&e.push.apply(e,J(f)),b=b.nextSibling,a+=1}return e}function ga(a,b){a=function(a,b){for(var c=function(a){var b=a.parentNode;if(!b)return-1;for(var b=b.firstChild,c=0;b&&b!==a;)b=b.nextSibling,c+=1;return b
2023-06-06 08:40:22 UTC	6491	IN	Data Raw: 69 66 28 65 29 74 68 72 6f 77 20 66 7d 7d 72 65 74 75 72 6e 20 63 7d 28 61 2c 62 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 22 29 7d 28 29 7d 66 75 6e 63 74 69 6f 6e 20 51 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 62 20 69 6e 20 61 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 62 2c 7b 76 61 6c 75 65 3a 63 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 61 5b 62 5d 3d 63 2c 61 7d 76 61 72 20 68 61 3d 64 28 34 32 29 2e 67 65 Data Ascii: if(e)throw f}}return c}(a,b)\|\|function(){throw new TypeError("Invalid attempt to destructure non-iterable instance")}()}function Q(a,b,c){return b in a?Object.defineProperty(a,b,{value:c,enumerable:!0,configurable:!0,writable:!0}):a[b]=c,a}var ha=d(42).ge
2023-06-06 08:40:22 UTC	6492	IN	Data Raw: 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 7b 65 78 74 72 61 63 74 6f 72 49 44 3a 62 2e 69 64 2c 6a 73 6f 6e 4c 44 3a 61 2e 6a 73 6f 6e 4c 44 7d 7d 29 3b 63 61 73 65 22 52 44 46 41 22 3a 72 65 74 75 72 6e 20 70 28 29 28 71 28 61 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 7b 65 78 74 72 61 63 74 6f 72 49 44 3a 62 2e 69 64 2c 6a 73 6f 6e 4c 44 3a 61 2e 6a 73 6f 6e 4c 44 7d 7d 29 3b 63 61 73 65 22 4f 50 45 4e 5f 47 52 41 50 48 22 3a 72 65 74 75 72 6e 7b 65 78 74 72 61 63 74 6f 72 49 44 3a 62 2e 69 64 2c 6a 73 6f 6e 4c 44 3a 66 61 28 29 7d 3b 63 61 73 65 22 43 53 53 22 3a 76 61 72 20 63 3d 70 28 29 28 62 2e 65 78 74 72 61 63 74 6f 72 43 6f 6e 66 69 67 2e 70 61 72 61 6d 65 74 65 72 53 65 6c 65 63 74 6f 72 73 2c 66 75 6e 63 74 69 Data Ascii: ,function(a){return{extractorID:b.id,jsonLD:a.jsonLD}});case"RDFA":return p()(q(a),function(a){return{extractorID:b.id,jsonLD:a.jsonLD}});case"OPEN_GRAPH":return{extractorID:b.id,jsonLD:fa()};case"CSS":var c=p()(b.extractorConfig.parameterSelectors,functi
2023-06-06 08:40:22 UTC	6494	IN	Data Raw: 29 3b 72 65 74 75 72 6e 7b 65 78 74 72 61 63 74 6f 72 49 44 3a 62 2e 69 64 2c 6a 73 6f 6e 4c 44 3a 54 28 53 2c 65 2c 63 29 7d 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 45 78 74 72 61 63 74 6f 72 20 22 2e 63 6f 6e 63 61 74 28 62 2e 65 78 74 72 61 63 74 6f 72 54 79 70 65 2c 22 20 6e 6f 74 20 6d 61 70 70 65 64 22 29 29 7d 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 2e 6a 73 6f 6e 4c 44 3b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 61 29 7d 29 7d 61 2e 45 58 54 52 41 43 54 4f 52 5f 50 52 45 43 45 44 45 4e 43 45 3d 52 3b 76 61 72 20 6a 61 3d 61 3b 66 75 6e 63 74 69 6f 6e 20 6b 61 28 61 29 7b 73 77 69 74 63 68 28 61 2e 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 29 7b 63 61 73 65 22 43 53 53 22 3a 69 66 28 6e 75 Data Ascii: );return{extractorID:b.id,jsonLD:T(S,e,c)};default:throw new Error("Extractor ".concat(b.extractorType," not mapped"))}})),function(a){a=a.jsonLD;return Boolean(a)})}a.EXTRACTOR_PRECEDENCE=R;var ja=a;function ka(a){switch(a.extractor_type){case"CSS":if(nu
2023-06-06 08:40:22 UTC	6494	IN	Data Raw: 77 20 6e 65 77 20 45 72 72 6f 72 28 22 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 20 6d 75 73 74 20 62 65 20 73 65 74 22 29 3b 76 61 72 20 62 3d 61 2e 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 62 2e 70 61 72 61 6d 65 74 65 72 5f 74 79 70 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 20 6d 75 73 74 20 62 65 20 73 65 74 22 29 3b 72 65 74 75 72 6e 7b 64 6f 6d 61 69 6e 55 52 49 3a 6e 65 77 20 77 28 61 2e 64 6f 6d 61 69 6e 5f 75 72 69 29 2c 65 76 65 6e 74 54 79 70 65 3a 61 2e 65 76 65 6e 74 5f 74 79 70 65 2c 65 78 74 72 61 63 74 6f 72 43 6f 6e 66 69 67 3a 28 62 3d 62 2c 7b 70 61 72 61 6d 65 74 65 72 53 65 6c 65 63 74 6f 72 73 3a 70 28 29 28 62 2e 70 61 72 61 6d 65 74 65 72 5f 73 Data Ascii: w new Error("extractor_config must be set");var b=a.extractor_config;if(b.parameter_type)throw new Error("extractor_config must be set");return{domainURI:new w(a.domain_uri),eventType:a.event_type,extractorConfig:(b=b,{parameterSelectors:p()(b.parameter_s
2023-06-06 08:40:22 UTC	6495	IN	Data Raw: 5d 2e 63 6f 6e 63 61 74 28 6e 28 29 28 61 29 29 2e 73 6c 69 63 65 28 62 2c 62 2b 63 29 2e 6a 6f 69 6e 28 22 22 29 7d 2c 55 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 6e 61 28 61 2c 30 2c 62 29 7d 2c 56 3d 64 28 31 37 29 2c 57 3d 31 32 30 2c 6f 61 3d 5b 22 62 75 74 74 6f 6e 22 2c 22 73 75 62 6d 69 74 22 2c 22 69 6e 70 75 74 22 2c 22 6c 69 22 2c 22 6f 70 74 69 6f 6e 22 2c 22 70 72 6f 67 72 65 73 73 22 2c 22 70 61 72 61 6d 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 58 28 61 29 7b 76 61 72 20 62 3d 4f 62 6a 65 63 74 28 56 2e 61 29 28 61 29 3b 69 66 28 6e 75 6c 6c 21 3d 62 26 26 22 22 21 3d 3d 62 29 72 65 74 75 72 6e 20 55 28 62 2c 57 29 3b 62 3d 61 2e 74 79 70 65 3b 61 3d 61 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 62 26 26 Data Ascii: ].concat(n()(a)).slice(b,b+c).join("")},U=function(a,b){return na(a,0,b)},V=d(17),W=120,oa=["button","submit","input","li","option","progress","param"];function X(a){var b=Object(V.a)(a);if(null!=b&&""!==b)return U(b,W);b=a.type;a=a.value;return null!=b&&
2023-06-06 08:40:22 UTC	6497	IN	Data Raw: 6f 6e 20 78 61 28 61 29 7b 72 65 74 75 72 6e 21 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 73 61 3b 69 66 28 21 61 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 29 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 63 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 63 26 26 21 21 42 28 29 28 62 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 43 28 29 28 63 2c 61 29 7d 29 7d 28 61 29 7c 7c 21 21 58 28 61 29 2e 72 65 70 6c 61 63 65 28 74 61 2c 22 20 22 29 2e 72 65 70 6c 61 63 65 28 75 61 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2b 22 20 22 7d 29 2e 72 65 70 6c 61 63 65 28 76 61 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 55 28 Data Ascii: on xa(a){return!!function(a){var b=sa;if(!a.hasAttribute("href"))return!1;var c=a.getAttribute("href");return null!=c&&!!B()(b,function(a){return C()(c,a)})}(a)\|\|!!X(a).replace(ta," ").replace(ua,function(a){return a+" "}).replace(va,function(a){return U(
2023-06-06 08:40:22 UTC	6498	IN	Data Raw: 45 76 65 6e 74 73 53 68 61 72 65 64 22 29 2c 69 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 2c 6a 3d 69 2e 6d 61 70 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 76 61 72 20 62 3d 61 2e 65 78 74 72 61 63 74 6f 72 73 42 79 50 69 78 65 6c 73 2c 63 3d 61 2e 66 62 71 49 6e 73 74 61 6e 63 65 2c 64 3d 61 2e 70 69 78 65 6c 3b 61 3d 61 2e 74 61 72 67 65 74 3b 63 3d 63 2e 67 65 74 4f 70 74 65 64 49 6e 50 69 78 65 6c 73 28 22 49 57 4c 50 61 72 61 6d 65 74 65 72 73 22 29 3b 62 3d 62 5b 64 2e 69 64 5d 3b 72 65 74 75 72 6e 21 62 7c 7c 63 2e 69 6e 64 65 78 4f 66 28 64 29 3c 30 3f 6e 75 6c 6c 3a 68 2e 67 65 74 4a 73 6f 6e 4c 44 46 6f 72 45 78 74 72 61 63 74 6f 72 73 28 61 2c 62 29 Data Ascii: EventsShared"),i=f.getFbeventsModules("SignalsFBEventsUtils"),j=i.map;function k(a){var b=a.extractorsByPixels,c=a.fbqInstance,d=a.pixel;a=a.target;c=c.getOptedInPixels("IWLParameters");b=b[d.id];return!b\|\|c.indexOf(d)<0?null:h.getJsonLDForExtractors(a,b)
2023-06-06 08:40:22 UTC	6500	IN	Data Raw: 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 61 2c 62 29 7b 69 66 28 21 61 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 62 26 26 28 74 79 70 65 6f 66 20 62 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 62 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 62 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 69 28 61 2c 62 29 7b 69 66 28 74 79 70 65 6f 66 20 Data Ascii: f b))throw new TypeError("Cannot call a class as a function")}function h(a,b){if(!a)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return b&&(typeof b==="object"\|\|typeof b==="function")?b:a}function i(a,b){if(typeof
2023-06-06 08:40:22 UTC	6501	IN	Data Raw: 61 63 65 62 6f 6f 6b 22 29 2c 62 3d 22 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 73 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 72 65 74 75 72 6e 20 67 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 22 68 74 74 70 22 2e 6c 65 6e 67 74 68 29 21 3d 3d 22 68 74 74 70 22 7c 7c 61 28 67 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 29 7c 7c 64 2e 64 69 73 61 62 6c 65 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 73 7c 7c 64 2e 67 65 74 4f 70 74 65 64 49 6e 50 69 78 65 6c 73 28 62 29 2e 69 6e 64 65 78 4f 66 28 63 29 3d 3d 3d 2d 31 7d 7d 29 28 29 3b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 Data Ascii: acebook"),b="FirstPartyCookies";e.exports=function(c,d){return g.location.protocol.substring(0,"http".length)!=="http"\|\|a(g.location.hostname)\|\|d.disableFirstPartyCookies\|\|d.getOptedInPixels(b).indexOf(c)===-1}})();return e.exports}(a,b,c,d)});f.ensureMod
2023-06-06 08:40:22 UTC	6503	IN	Data Raw: 72 6e 20 6f 28 74 2c 61 29 7d 6b 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 28 62 2c 61 29 3b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 76 61 72 20 61 2c 63 2c 64 3b 67 28 74 68 69 73 2c 62 29 3b 76 61 72 20 65 3b 66 6f 72 28 76 61 72 20 66 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 69 3d 41 72 72 61 79 28 66 29 2c 6a 3d 30 3b 6a 3c 66 3b 6a 2b 2b 29 69 5b 6a 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6a 5d 3b 72 65 74 75 72 6e 20 64 3d 28 65 3d 28 63 3d 68 28 74 68 69 73 2c 28 61 3d 62 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 62 29 29 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 61 2c 5b 74 68 69 73 5d 2e 63 6f 6e 63 61 74 28 69 29 29 29 2c 63 29 2c 63 2e 64 72 6f 70 4f 72 52 65 66 72 65 73 68 43 6c 69 Data Ascii: rn o(t,a)}k=function(a){i(b,a);function b(){var a,c,d;g(this,b);var e;for(var f=arguments.length,i=Array(f),j=0;j<f;j++)i[j]=arguments[j];return d=(e=(c=h(this,(a=b.__proto__\|\|Object.getPrototypeOf(b)).call.apply(a,[this].concat(i))),c),c.dropOrRefreshCli
2023-06-06 08:40:22 UTC	6504	IN	Data Raw: 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3a 22 40 40 70 72 6f 74 6f 74 79 70 65 22 29 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 61 7d 3b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 Data Ascii: mbol&&a!==(typeof Symbol==="function"?Symbol.prototype:"@@prototype")?"symbol":typeof a};f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModu
2023-06-06 08:40:22 UTC	6506	IN	Data Raw: 6e 28 29 7b 72 65 74 75 72 6e 20 61 5b 22 64 65 66 61 75 6c 74 22 5d 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 3b 72 65 74 75 72 6e 20 63 2e 64 28 62 2c 22 61 22 2c 62 29 2c 62 7d 2c 63 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 2c 63 2e 70 3d 22 22 2c 63 28 63 2e 73 3d 35 36 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 2e 65 78 70 6f 72 74 73 3d 63 28 39 37 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 6e 75 6c 6c 21 3d 61 29 72 65 74 75 Data Ascii: n(){return a["default"]}:function(){return a};return c.d(b,"a",b),b},c.o=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)},c.p="",c(c.s=56)}([function(a,b,c){a.exports=c(97)},function(a,b,c){"use strict";a.exports=function(a){if(null!=a)retu
2023-06-06 08:40:22 UTC	6507	IN	Data Raw: 3d 74 79 70 65 6f 66 20 70 3f 69 28 46 75 6e 63 74 69 6f 6e 2e 63 61 6c 6c 2c 70 29 3a 70 2c 28 61 2e 73 68 61 6d 7c 7c 70 26 26 70 2e 73 68 61 6d 7c 7c 6e 26 26 6e 2e 73 68 61 6d 29 26 26 6a 28 63 2c 22 73 68 61 6d 22 2c 21 30 29 2c 76 5b 6d 5d 3d 63 2c 74 26 26 28 6b 28 68 2c 6e 3d 71 2b 22 50 72 6f 74 6f 74 79 70 65 22 29 7c 7c 6a 28 68 2c 6e 2c 7b 7d 29 2c 68 5b 6e 5d 5b 6d 5d 3d 70 2c 61 2e 72 65 61 6c 26 26 77 26 26 21 77 5b 6d 5d 26 26 6a 28 77 2c 6d 2c 70 29 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 2e 64 28 62 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 29 2c 63 2e 64 28 62 2c 22 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 29 3b Data Ascii: =typeof p?i(Function.call,p):p,(a.sham\|\|p&&p.sham\|\|n&&n.sham)&&j(c,"sham",!0),v[m]=c,t&&(k(h,n=q+"Prototype")\|\|j(h,n,{}),h[n][m]=p,a.real&&w&&!w[m]&&j(w,m,p)))}},function(a,b,c){"use strict";c.d(b,"a",function(){return e}),c.d(b,"b",function(){return f});
2023-06-06 08:40:22 UTC	6507	IN	Data Raw: 74 69 6f 6e 20 66 28 61 29 7b 76 61 72 20 62 3d 76 6f 69 64 20 30 3b 73 77 69 74 63 68 28 61 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7b 63 61 73 65 22 6d 65 74 61 22 3a 62 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6f 6e 74 65 6e 74 22 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 61 75 64 69 6f 22 3a 63 61 73 65 22 65 6d 62 65 64 22 3a 63 61 73 65 22 69 66 72 61 6d 65 22 3a 63 61 73 65 22 69 6d 67 22 3a 63 61 73 65 22 73 6f 75 72 63 65 22 3a 63 61 73 65 22 74 72 61 63 6b 22 3a 63 61 73 65 22 76 69 64 65 6f 22 3a 62 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 61 22 3a 63 61 73 65 22 61 72 65 61 22 3a 63 61 73 65 22 6c 69 6e 6b 22 3a 62 3d 61 2e 67 65 74 41 74 74 72 Data Ascii: tion f(a){var b=void 0;switch(a.tagName.toLowerCase()){case"meta":b=a.getAttribute("content");break;case"audio":case"embed":case"iframe":case"img":case"source":case"track":case"video":b=a.getAttribute("src");break;case"a":case"area":case"link":b=a.getAttr
2023-06-06 08:40:22 UTC	6509	IN	Data Raw: 72 65 74 75 72 6e 20 64 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 28 33 33 29 2c 65 3d 4d 61 74 68 2e 6d 69 6e 3b 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3e 30 3f 65 28 64 28 61 29 2c 39 30 30 37 31 39 39 32 35 34 37 34 30 39 39 31 29 3a 30 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 2e 65 78 70 6f 72 74 73 3d 21 63 28 31 31 29 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 21 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 7b 7d 2c 22 61 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 7d 7d 29 2e 61 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 28 31 32 Data Ascii: return d})},function(a,b,c){var d=c(33),e=Math.min;a.exports=function(a){return a>0?e(d(a),9007199254740991):0}},function(a,b,c){a.exports=!c(11)(function(){return 7!=Object.defineProperty({},"a",{get:function(){return 7}}).a})},function(a,b,c){var d=c(12
2023-06-06 08:40:22 UTC	6510	IN	Data Raw: 29 2c 68 3d 63 28 36 31 29 3b 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 31 3d 3d 61 2c 69 3d 32 3d 3d 61 2c 6a 3d 33 3d 3d 61 2c 6b 3d 34 3d 3d 61 2c 6c 3d 36 3d 3d 61 2c 6d 3d 35 3d 3d 61 7c 7c 6c 2c 6e 3d 62 7c 7c 68 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 2c 68 2c 6f 29 7b 66 6f 72 28 76 61 72 20 70 2c 71 2c 72 3d 66 28 62 29 2c 73 3d 65 28 72 29 2c 68 3d 64 28 68 2c 6f 2c 33 29 2c 6f 3d 67 28 73 2e 6c 65 6e 67 74 68 29 2c 74 3d 30 2c 62 3d 63 3f 6e 28 62 2c 6f 29 3a 69 3f 6e 28 62 2c 30 29 3a 76 6f 69 64 20 30 3b 6f 3e 74 3b 74 2b 2b 29 69 66 28 28 6d 7c 7c 74 20 69 6e 20 73 29 26 26 28 71 3d 68 28 70 3d 73 5b 74 5d 2c 74 2c 72 29 2c 61 29 29 69 66 28 63 29 62 5b 74 5d 3d 71 3b 65 6c 73 65 Data Ascii: ),h=c(61);a.exports=function(a,b){var c=1==a,i=2==a,j=3==a,k=4==a,l=6==a,m=5==a\|\|l,n=b\|\|h;return function(b,h,o){for(var p,q,r=f(b),s=e(r),h=d(h,o,3),o=g(s.length),t=0,b=c?n(b,o):i?n(b,0):void 0;o>t;t++)if((m\|\|t in s)&&(q=h(p=s[t],t,r),a))if(c)b[t]=q;else
2023-06-06 08:40:22 UTC	6512	IN	Data Raw: 61 2e 74 6f 53 74 72 69 6e 67 29 26 26 21 64 28 65 3d 63 2e 63 61 6c 6c 28 61 29 29 29 72 65 74 75 72 6e 20 65 3b 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 27 74 20 63 6f 6e 76 65 72 74 20 6f 62 6a 65 63 74 20 74 6f 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 22 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 65 78 70 6f 72 74 73 3d 21 30 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 28 33 32 29 2c 65 3d 63 28 32 34 29 3b 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 64 28 65 28 61 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 65 78 70 6f 72 74 73 3d 7b 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 28 33 Data Ascii: a.toString)&&!d(e=c.call(a)))return e;throw TypeError("Can't convert object to primitive value")}},function(a,b){a.exports=!0},function(a,b,c){var d=c(32),e=c(24);a.exports=function(a){return d(e(a))}},function(a,b){a.exports={}},function(a,b,c){var d=c(3
2023-06-06 08:40:22 UTC	6513	IN	Data Raw: 27 29 7d 29 2e 6a 6f 69 6e 28 22 2c 20 22 29 2c 64 3d 5b 5d 2c 63 3d 6a 28 29 28 62 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 73 3d 5b 5d 3b 63 2e 6c 65 6e 67 74 68 3e 30 3b 29 7b 76 61 72 20 74 3d 63 2e 70 6f 70 28 29 3b 69 66 28 21 6b 28 29 28 64 2c 74 29 29 7b 76 61 72 20 75 3d 7b 22 40 63 6f 6e 74 65 78 74 22 3a 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 22 7d 3b 73 2e 70 75 73 68 28 7b 68 74 6d 6c 45 6c 65 6d 65 6e 74 3a 74 2c 6a 73 6f 6e 4c 44 3a 75 7d 29 3b 66 6f 72 28 74 3d 5b 7b 65 6c 65 6d 65 6e 74 3a 74 2c 77 6f 72 6b 69 6e 67 4e 6f 64 65 3a 75 7d 5d 3b 74 2e 6c 65 6e 67 74 68 3b 29 7b 75 3d 74 2e 70 6f 70 28 29 3b 76 61 72 20 6e 3d 75 2e 65 6c 65 6d 65 6e 74 3b 75 3d 75 2e 77 6f 72 6b 69 6e 67 4e 6f 64 65 3b Data Ascii: ')}).join(", "),d=[],c=j()(b.querySelectorAll(c)),s=[];c.length>0;){var t=c.pop();if(!k()(d,t)){var u={"@context":"http://schema.org"};s.push({htmlElement:t,jsonLD:u});for(t=[{element:t,workingNode:u}];t.length;){u=t.pop();var n=u.element;u=u.workingNode;
2023-06-06 08:40:22 UTC	6515	IN	Data Raw: 77 20 54 79 70 65 45 72 72 6f 72 28 53 74 72 69 6e 67 28 61 29 2b 22 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 2e 65 78 70 6f 72 74 73 3d 21 63 28 31 39 29 26 26 21 63 28 31 31 29 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 21 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 63 28 34 36 29 28 22 64 69 76 22 29 2c 22 61 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 7d 7d 29 2e 61 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 62 3d 63 28 31 32 29 3b 76 61 72 20 64 3d 63 28 36 29 2e 64 6f 63 75 6d 65 6e 74 2c 65 3d 62 28 64 29 26 26 62 28 64 2e 63 72 65 61 74 65 45 6c 65 6d Data Ascii: w TypeError(String(a)+" is not a function");return a}},function(a,b,c){a.exports=!c(19)&&!c(11)(function(){return 7!=Object.defineProperty(c(46)("div"),"a",{get:function(){return 7}}).a})},function(a,b,c){b=c(12);var d=c(6).document,e=b(d)&&b(d.createElem
2023-06-06 08:40:22 UTC	6516	IN	Data Raw: 6c 75 65 3a 62 7d 29 2c 6a 26 26 69 26 26 65 28 63 2c 22 74 6f 53 74 72 69 6e 67 22 2c 68 29 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 28 32 32 29 2c 65 3d 63 28 34 29 28 22 74 6f 53 74 72 69 6e 67 54 61 67 22 29 2c 66 3d 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 7d 28 29 29 3b 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 61 3f 22 55 6e 64 65 66 69 6e 65 64 22 3a 6e 75 6c 6c 3d 3d 3d 61 3f 22 4e 75 6c 6c 22 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 28 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 61 5b Data Ascii: lue:b}),j&&i&&e(c,"toString",h)}}},function(a,b,c){var d=c(22),e=c(4)("toStringTag"),f="Arguments"==d(function(){return arguments}());a.exports=function(a){var b;return void 0===a?"Undefined":null===a?"Null":"string"==typeof (b=function(a,b){try{return a[
2023-06-06 08:40:22 UTC	6518	IN	Data Raw: 2c 63 29 7b 76 61 72 20 64 3d 63 28 36 29 2c 65 3d 63 28 31 33 29 3b 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 72 79 7b 65 28 64 2c 61 2c 62 29 7d 63 61 74 63 68 28 63 29 7b 64 5b 61 5d 3d 62 7d 72 65 74 75 72 6e 20 62 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 2e 65 78 70 6f 72 74 73 3d 21 63 28 31 31 29 28 66 75 6e 63 74 69 6f 6e 28 29 7b 53 74 72 69 6e 67 28 53 79 6d 62 6f 6c 28 29 29 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 3d 63 28 31 39 29 3b 76 61 72 20 64 3d 63 28 36 36 29 2c 65 3d 63 28 32 36 29 2c 66 3d 63 28 33 37 29 2c 67 3d 63 28 33 35 29 2c 68 3d 63 28 31 34 29 2c 69 3d 63 28 34 35 29 2c 6a 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 Data Ascii: ,c){var d=c(6),e=c(13);a.exports=function(a,b){try{e(d,a,b)}catch(c){d[a]=b}return b}},function(a,b,c){a.exports=!c(11)(function(){String(Symbol())})},function(a,b,c){a=c(19);var d=c(66),e=c(26),f=c(37),g=c(35),h=c(14),i=c(45),j=Object.getOwnPropertyDescr
2023-06-06 08:40:22 UTC	6519	IN	Data Raw: 3e 3d 68 3f 63 3f 22 22 3a 76 6f 69 64 20 30 3a 28 66 3d 61 2e 63 68 61 72 43 6f 64 65 41 74 28 62 29 29 3c 35 35 32 39 36 7c 7c 66 3e 35 36 33 31 39 7c 7c 62 2b 31 3d 3d 3d 68 7c 7c 28 67 3d 61 2e 63 68 61 72 43 6f 64 65 41 74 28 62 2b 31 29 29 3c 35 36 33 32 30 7c 7c 67 3e 35 37 33 34 33 3f 63 3f 61 2e 63 68 61 72 41 74 28 62 29 3a 66 3a 63 3f 61 2e 73 6c 69 63 65 28 62 2c 62 2b 32 29 3a 67 2d 35 36 33 32 30 2b 28 66 2d 35 35 32 39 36 3c 3c 31 30 29 2b 36 35 35 33 36 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 2c 66 3b 62 3d 63 28 37 33 29 3b 76 61 72 20 67 3d 63 28 31 32 29 2c 68 3d 63 28 31 33 29 2c 69 3d 63 28 31 34 29 2c 6a 3d 63 28 33 39 29 2c 6b 3d 63 28 34 30 29 3b 63 3d 63 28 36 29 2e 57 65 61 6b 4d 61 70 3b 69 Data Ascii: >=h?c?"":void 0:(f=a.charCodeAt(b))<55296\|\|f>56319\|\|b+1===h\|\|(g=a.charCodeAt(b+1))<56320\|\|g>57343?c?a.charAt(b):f:c?a.slice(b,b+2):g-56320+(f-55296<<10)+65536}},function(a,b,c){var d,e,f;b=c(73);var g=c(12),h=c(13),i=c(14),j=c(39),k=c(40);c=c(6).WeakMap;i
2023-06-06 08:40:22 UTC	6521	IN	Data Raw: 7c 79 3b 69 66 28 41 26 26 28 41 3d 66 28 41 2e 63 61 6c 6c 28 6e 65 77 20 61 28 29 29 29 2c 6e 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 26 26 41 2e 6e 65 78 74 26 26 28 6b 7c 7c 66 28 41 29 3d 3d 3d 6e 7c 7c 28 67 3f 67 28 41 2c 6e 29 3a 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 41 5b 6c 5d 26 26 69 28 41 2c 6c 2c 70 29 29 2c 68 28 41 2c 76 2c 21 30 2c 21 30 29 2c 6b 26 26 28 6d 5b 76 5d 3d 70 29 29 29 2c 22 76 61 6c 75 65 73 22 3d 3d 72 26 26 79 26 26 22 76 61 6c 75 65 73 22 21 3d 3d 79 2e 6e 61 6d 65 26 26 28 77 3d 21 30 2c 7a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 79 2e 63 61 6c 6c 28 74 68 69 73 29 7d 29 2c 6b 26 26 21 74 7c 7c 78 5b 6c 5d 3d 3d 3d 7a 7c 7c 69 28 78 2c 6c 2c 7a 29 2c 6d 5b 62 5d 3d 7a Data Ascii: \|y;if(A&&(A=f(A.call(new a())),n!==Object.prototype&&A.next&&(k\|\|f(A)===n\|\|(g?g(A,n):"function"!=typeof A[l]&&i(A,l,p)),h(A,v,!0,!0),k&&(m[v]=p))),"values"==r&&y&&"values"!==y.name&&(w=!0,z=function(){return y.call(this)}),k&&!t\|\|x[l]===z\|\|i(x,l,z),m[b]=z
2023-06-06 08:40:22 UTC	6521	IN	Data Raw: 2c 6b 65 79 73 3a 73 3f 7a 3a 71 28 22 6b 65 79 73 22 29 2c 65 6e 74 72 69 65 73 3a 71 28 22 65 6e 74 72 69 65 73 22 29 7d 2c 74 29 66 6f 72 28 61 20 69 6e 20 75 29 21 6f 26 26 21 77 26 26 61 20 69 6e 20 78 7c 7c 6a 28 78 2c 61 2c 75 5b 61 5d 29 3b 65 6c 73 65 20 64 28 7b 74 61 72 67 65 74 3a 62 2c 70 72 6f 74 6f 3a 21 30 2c 66 6f 72 63 65 64 3a 6f 7c 7c 77 7d 2c 75 29 3b 72 65 74 75 72 6e 20 75 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 64 3d 63 28 34 39 29 2e 49 74 65 72 61 74 6f 72 50 72 6f 74 6f 74 79 70 65 2c 65 3d 63 28 37 38 29 2c 66 3d 63 28 32 36 29 2c 67 3d 63 28 35 32 29 2c 68 3d 63 28 32 37 29 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 61 2e Data Ascii: ,keys:s?z:q("keys"),entries:q("entries")},t)for(a in u)!o&&!w&&a in x\|\|j(x,a,u[a]);else d({target:b,proto:!0,forced:o\|\|w},u);return u}},function(a,b,c){"use strict";var d=c(49).IteratorPrototype,e=c(78),f=c(26),g=c(52),h=c(27),i=function(){return this};a.
2023-06-06 08:40:22 UTC	6522	IN	Data Raw: 2c 65 3d 4d 61 74 68 2e 6d 61 78 2c 66 3d 4d 61 74 68 2e 6d 69 6e 3b 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 3d 64 28 61 29 3b 72 65 74 75 72 6e 20 61 3c 30 3f 65 28 61 2b 62 2c 30 29 3a 66 28 61 2c 62 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 62 3d 63 28 36 29 2e 64 6f 63 75 6d 65 6e 74 3b 61 2e 65 78 70 6f 72 74 73 3d 62 26 26 62 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 64 3d 63 28 35 33 29 3b 62 3d 7b 7d 3b 62 5b 63 28 34 29 28 22 74 6f 53 74 72 69 6e 67 54 61 67 22 29 5d 3d 22 7a 22 2c 61 2e 65 78 70 6f 72 74 73 3d 22 5b 6f 62 6a 65 63 74 20 7a 5d 22 21 3d 3d 53 74 72 69 6e 67 28 62 29 3f Data Ascii: ,e=Math.max,f=Math.min;a.exports=function(a,b){a=d(a);return a<0?e(a+b,0):f(a,b)}},function(a,b,c){b=c(6).document;a.exports=b&&b.documentElement},function(a,b,c){"use strict";var d=c(53);b={};b[c(4)("toStringTag")]="z",a.exports="[object z]"!==String(b)?
2023-06-06 08:40:22 UTC	6524	IN	Data Raw: 30 2c 71 3d 76 6f 69 64 20 30 21 3d 3d 70 2c 72 3d 30 2c 73 3d 6a 28 6d 29 3b 69 66 28 71 26 26 28 70 3d 64 28 70 2c 6f 3e 32 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 76 6f 69 64 20 30 2c 32 29 29 2c 6e 75 6c 6c 3d 3d 73 7c 7c 6e 3d 3d 41 72 72 61 79 26 26 67 28 73 29 29 66 6f 72 28 63 3d 6e 65 77 20 6e 28 62 3d 68 28 6d 2e 6c 65 6e 67 74 68 29 29 3b 62 3e 72 3b 72 2b 2b 29 69 28 63 2c 72 2c 71 3f 70 28 6d 5b 72 5d 2c 72 29 3a 6d 5b 72 5d 29 3b 65 6c 73 65 20 66 6f 72 28 6c 3d 73 2e 63 61 6c 6c 28 6d 29 2c 63 3d 6e 65 77 20 6e 28 29 3b 21 28 6b 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 72 2b 2b 29 69 28 63 2c 72 2c 71 3f 66 28 6c 2c 70 2c 5b 6b 2e 76 61 6c 75 65 2c 72 5d 2c 21 30 29 3a 6b 2e 76 61 6c 75 65 29 3b 72 65 74 75 72 6e 20 63 2e 6c 65 6e Data Ascii: 0,q=void 0!==p,r=0,s=j(m);if(q&&(p=d(p,o>2?arguments[2]:void 0,2)),null==s\|\|n==Array&&g(s))for(c=new n(b=h(m.length));b>r;r++)i(c,r,q?p(m[r],r):m[r]);else for(l=s.call(m),c=new n();!(k=l.next()).done;r++)i(c,r,q?f(l,p,[k.value,r],!0):k.value);return c.len
2023-06-06 08:40:22 UTC	6525	IN	Data Raw: 32 33 29 2c 66 3d 63 28 33 32 29 2c 67 3d 63 28 31 38 29 3b 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 68 2c 69 29 7b 64 28 62 29 3b 61 3d 65 28 61 29 3b 76 61 72 20 6a 3d 66 28 61 29 2c 6b 3d 67 28 61 2e 6c 65 6e 67 74 68 29 2c 6c 3d 69 3f 6b 2d 31 3a 30 2c 6d 3d 69 3f 2d 31 3a 31 3b 69 66 28 63 3c 32 29 66 6f 72 28 3b 3b 29 7b 69 66 28 6c 20 69 6e 20 6a 29 7b 68 3d 6a 5b 6c 5d 2c 6c 2b 3d 6d 3b 62 72 65 61 6b 7d 69 66 28 6c 2b 3d 6d 2c 69 3f 6c 3c 30 3a 6b 3c 3d 6c 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 52 65 64 75 63 65 20 6f 66 20 65 6d 70 74 79 20 61 72 72 61 79 20 77 69 74 68 20 6e 6f 20 69 6e 69 74 69 61 6c 20 76 61 6c 75 65 22 29 7d 66 6f 72 28 3b 69 3f 6c 3e 3d 30 3a 6b 3e 6c 3b 6c 2b 3d 6d 29 6c 20 Data Ascii: 23),f=c(32),g=c(18);a.exports=function(a,b,c,h,i){d(b);a=e(a);var j=f(a),k=g(a.length),l=i?k-1:0,m=i?-1:1;if(c<2)for(;;){if(l in j){h=j[l],l+=m;break}if(l+=m,i?l<0:k<=l)throw TypeError("Reduce of empty array with no initial value")}for(;i?l>=0:k>l;l+=m)l
2023-06-06 08:40:22 UTC	6527	IN	Data Raw: 3d 28 62 3d 61 5b 66 5d 29 3f 21 21 62 3a 22 52 65 67 45 78 70 22 3d 3d 65 28 61 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 28 34 29 28 22 6d 61 74 63 68 22 29 3b 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 2f 2e 2f 3b 74 72 79 7b 22 2f 2e 2f 22 5b 61 5d 28 62 29 7d 63 61 74 63 68 28 63 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 62 5b 64 5d 3d 21 31 2c 22 2f 2e 2f 22 5b 61 5d 28 62 29 7d 63 61 74 63 68 28 61 29 7b 7d 7d 72 65 74 75 72 6e 21 31 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 64 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 64 2e 72 28 63 29 3b 76 61 72 20 65 3d 7b 7d 3b 64 2e 72 28 65 29 2c 64 2e 64 28 65 2c 22 42 55 54 54 4f 4e 5f 53 45 4c 45 43 54 4f 52 5f 53 45 Data Ascii: =(b=a[f])?!!b:"RegExp"==e(a))}},function(a,b,c){var d=c(4)("match");a.exports=function(a){var b=/./;try{"/./"[a](b)}catch(c){try{return b[d]=!1,"/./"[a](b)}catch(a){}}return!1}},function(a,c,d){"use strict";d.r(c);var e={};d.r(e),d.d(e,"BUTTON_SELECTOR_SE
2023-06-06 08:40:22 UTC	6528	IN	Data Raw: 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 67 28 61 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3a 22 40 40 70 72 6f 74 6f 74 79 70 65 22 29 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f Data Ascii: ol.iterator:"@@iterator")?function(a){return typeof a==="undefined"?"undefined":g(a)}:function(a){return a&&"function"==typeof Symbol&&a.constructor===Symbol&&a!==(typeof Symbol==="function"?Symbol.prototype:"@@prototype")?"symbol":typeof a==="undefined"?
2023-06-06 08:40:22 UTC	6530	IN	Data Raw: 3a 22 70 6f 72 74 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 61 6e 63 68 6f 72 45 6c 65 6d 65 6e 74 2e 70 6f 72 74 7d 7d 2c 7b 6b 65 79 3a 22 70 72 6f 74 6f 63 6f 6c 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 61 6e 63 68 6f 72 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 63 6f 6c 7d 7d 2c 7b 6b 65 79 3a 22 73 65 61 72 63 68 50 61 72 61 6d 73 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 3b 72 65 74 75 72 6e 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 69 66 28 6e 75 6c 6c 21 3d 61 2e 5f 70 61 72 73 65 64 51 75 65 72 79 29 72 65 74 75 72 6e 20 61 2e 5f 70 61 72 73 65 64 51 75 65 72 79 5b 62 5d 7c 7c 6e 75 6c 6c 3b 76 61 72 20 63 Data Ascii: :"port",get:function(){return this._anchorElement.port}},{key:"protocol",get:function(){return this._anchorElement.protocol}},{key:"searchParams",get:function(){var a=this;return{get:function(b){if(null!=a._parsedQuery)return a._parsedQuery[b]\|\|null;var c
2023-06-06 08:40:22 UTC	6531	IN	Data Raw: 6e 67 74 68 29 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 63 5b 62 5d 3d 61 5b 62 5d 3b 72 65 74 75 72 6e 20 63 7d 7d 28 61 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 69 6e 20 4f 62 6a 65 63 74 28 61 29 7c 7c 22 5b 6f 62 6a 65 63 74 20 41 72 67 75 6d 65 6e 74 73 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 61 29 29 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 61 29 7d 28 61 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 Data Ascii: ngth);b<a.length;b++)c[b]=a[b];return c}}(a)\|\|function(a){if((typeof Symbol==="function"?Symbol.iterator:"@@iterator")in Object(a)\|\|"[object Arguments]"===Object.prototype.toString.call(a))return Array.from(a)}(a)\|\|function(){throw new TypeError("Invalid
2023-06-06 08:40:22 UTC	6533	IN	Data Raw: 29 2c 32 29 3b 76 61 72 20 64 3d 62 5b 30 5d 2c 65 3d 62 5b 31 5d 3b 72 65 74 75 72 6e 5b 6e 28 29 28 6d 28 29 28 6e 28 29 28 61 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 73 28 61 29 26 26 61 2e 6d 61 74 63 68 65 73 28 65 29 7d 29 29 5b 70 61 72 73 65 49 6e 74 28 64 2c 30 29 5d 5d 3b 63 61 73 65 22 63 6c 6f 73 65 73 74 22 3a 72 65 74 75 72 6e 20 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3f 5b 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 63 6c 6f 73 65 73 74 28 63 29 5d 3a 5b 5d 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 6e 28 29 28 7a 28 61 2c 63 29 29 7d 7d 3b 69 66 28 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 74 63 68 65 73 7c 7c 28 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f Data Ascii: ),2);var d=b[0],e=b[1];return[n()(m()(n()(a.childNodes),function(a){return null!=s(a)&&a.matches(e)}))[parseInt(d,0)]];case"closest":return a.parentNode?[a.parentNode.closest(c)]:[];default:return n()(z(a,c))}};if(Element.prototype.matches\|\|(Element.proto
2023-06-06 08:40:22 UTC	6534	IN	Data Raw: 6c 65 6e 67 74 68 29 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 63 5b 62 5d 3d 61 5b 62 5d 3b 72 65 74 75 72 6e 20 63 7d 7d 28 61 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 69 6e 20 4f 62 6a 65 63 74 28 61 29 7c 7c 22 5b 6f 62 6a 65 63 74 20 41 72 67 75 6d 65 6e 74 73 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 61 29 29 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 61 29 7d 28 61 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 Data Ascii: length);b<a.length;b++)c[b]=a[b];return c}}(a)\|\|function(a){if((typeof Symbol==="function"?Symbol.iterator:"@@iterator")in Object(a)\|\|"[object Arguments]"===Object.prototype.toString.call(a))return Array.from(a)}(a)\|\|function(){throw new TypeError("Invali
2023-06-06 08:40:22 UTC	6535	IN	Data Raw: 61 72 20 66 3d 4d 28 61 2c 62 29 3b 69 66 28 66 3d 3d 3d 4c 2e 44 4f 5f 4e 4f 54 5f 4d 41 54 43 48 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 67 3d 22 22 3b 69 66 28 66 3d 3d 3d 4c 2e 4e 45 45 44 5f 4d 4f 52 45 5f 43 48 45 43 4b 49 4e 47 26 26 30 3d 3d 3d 28 67 3d 4b 28 61 2c 62 29 29 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 69 66 28 64 2e 70 75 73 68 28 7b 6e 6f 64 65 3a 61 2c 72 65 6c 61 74 69 76 65 43 6c 61 73 73 3a 67 2c 69 6e 64 65 78 3a 63 28 61 29 7d 29 2c 65 2e 70 75 73 68 28 62 29 2c 61 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 62 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 21 61 7c 7c 21 62 29 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 72 65 74 75 72 6e 20 61 26 26 62 26 26 61 2e 69 73 53 61 6d 65 4e 6f 64 65 28 62 29 26 26 64 Data Ascii: ar f=M(a,b);if(f===L.DO_NOT_MATCH)return null;var g="";if(f===L.NEED_MORE_CHECKING&&0===(g=K(a,b)).length)return null;if(d.push({node:a,relativeClass:g,index:c(a)}),e.push(b),a=a.parentNode,b=b.parentNode,!a\|\|!b)return null}return a&&b&&a.isSameNode(b)&&d
2023-06-06 08:40:22 UTC	6537	IN	Data Raw: 54 5f 56 41 4c 55 45 22 2c 22 43 53 53 22 2c 22 55 52 49 22 2c 22 53 43 48 45 4d 41 5f 44 4f 54 5f 4f 52 47 22 2c 22 4a 53 4f 4e 5f 4c 44 22 2c 22 52 44 46 41 22 2c 22 4f 50 45 4e 5f 47 52 41 50 48 22 2c 22 47 54 4d 22 2c 22 4d 45 54 41 5f 54 41 47 22 2c 22 47 4c 4f 42 41 4c 5f 56 41 52 49 41 42 4c 45 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 31 3b 62 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 7b 76 61 72 20 63 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 62 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 62 5d 3a 7b 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 63 29 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a Data Ascii: T_VALUE","CSS","URI","SCHEMA_DOT_ORG","JSON_LD","RDFA","OPEN_GRAPH","GTM","META_TAG","GLOBAL_VARIABLE"],function(a,b,c){return function(a){for(var b=1;b<arguments.length;b++){var c=null!=arguments[b]?arguments[b]:{},d=Object.keys(c);"function"==typeof Obj
2023-06-06 08:40:22 UTC	6538	IN	Data Raw: 69 66 28 6e 75 6c 6c 3d 3d 63 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 69 66 28 63 2e 6c 65 6e 67 74 68 3d 3d 3d 69 61 29 7b 76 61 72 20 64 3d 63 5b 30 5d 2c 65 3d 63 5b 31 5d 3b 69 66 28 6e 75 6c 6c 21 3d 64 26 26 6e 75 6c 6c 21 3d 65 29 7b 64 3d 67 61 28 64 2c 65 29 3b 64 26 26 63 2e 70 75 73 68 2e 61 70 70 6c 79 28 63 2c 64 29 7d 7d 76 61 72 20 67 3d 62 2e 65 78 74 72 61 63 74 6f 72 43 6f 6e 66 69 67 2e 70 61 72 61 6d 65 74 65 72 53 65 6c 65 63 74 6f 72 73 5b 30 5d 2e 70 61 72 61 6d 65 74 65 72 54 79 70 65 3b 65 3d 70 28 29 28 63 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 61 3d 28 6e 75 6c 6c 21 3d 28 62 3d 61 29 3f 62 2e 69 6e 6e 65 72 54 65 78 74 3a 62 29 7c 7c 28 6e 75 6c 6c 21 3d 28 62 3d 61 29 3f 62 2e 74 65 78 74 43 6f 6e 74 65 6e 74 Data Ascii: if(null==c)return null;if(c.length===ia){var d=c[0],e=c[1];if(null!=d&&null!=e){d=ga(d,e);d&&c.push.apply(c,d)}}var g=b.extractorConfig.parameterSelectors[0].parameterType;e=p()(c,function(a){var b;a=(null!=(b=a)?b.innerText:b)\|\|(null!=(b=a)?b.textContent
2023-06-06 08:40:22 UTC	6540	IN	Data Raw: 5f 63 6f 6e 66 69 67 20 6d 75 73 74 20 62 65 20 73 65 74 22 29 3b 76 61 72 20 62 3d 61 2e 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 62 2e 70 61 72 61 6d 65 74 65 72 5f 74 79 70 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 20 6d 75 73 74 20 62 65 20 73 65 74 22 29 3b 72 65 74 75 72 6e 7b 64 6f 6d 61 69 6e 55 52 49 3a 6e 65 77 20 77 28 61 2e 64 6f 6d 61 69 6e 5f 75 72 69 29 2c 65 76 65 6e 74 54 79 70 65 3a 61 2e 65 76 65 6e 74 5f 74 79 70 65 2c 65 78 74 72 61 63 74 6f 72 43 6f 6e 66 69 67 3a 28 62 3d 62 2c 7b 70 61 72 61 6d 65 74 65 72 53 65 6c 65 63 74 6f 72 73 3a 70 28 29 28 62 2e 70 61 72 61 6d 65 74 65 72 5f 73 65 6c 65 63 74 6f 72 73 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 Data Ascii: _config must be set");var b=a.extractor_config;if(b.parameter_type)throw new Error("extractor_config must be set");return{domainURI:new w(a.domain_uri),eventType:a.event_type,extractorConfig:(b=b,{parameterSelectors:p()(b.parameter_selectors,function(a){r
2023-06-06 08:40:22 UTC	6541	IN	Data Raw: 3a 6c 28 29 28 61 2e 69 64 29 2c 72 75 6c 65 49 64 3a 6e 75 6c 6c 21 3d 28 62 3d 61 2e 65 76 65 6e 74 5f 72 75 6c 65 29 3f 62 2e 69 64 3a 62 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 61 28 61 29 7b 72 65 74 75 72 6e 7b 70 61 72 61 6d 65 74 65 72 54 79 70 65 3a 61 2e 70 61 72 61 6d 65 74 65 72 5f 74 79 70 65 2c 76 61 6c 75 65 3a 61 2e 76 61 6c 75 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 6d 61 28 61 29 7b 72 65 74 75 72 6e 7b 63 6f 6e 74 65 78 74 3a 61 2e 63 6f 6e 74 65 78 74 2c 70 61 72 61 6d 65 74 65 72 54 79 70 65 3a 61 2e 70 61 72 61 6d 65 74 65 72 5f 74 79 70 65 2c 76 61 6c 75 65 3a 61 2e 76 61 6c 75 65 7d 7d 61 2e 45 58 54 52 41 43 54 4f 52 5f 50 52 45 43 45 44 45 4e 43 45 3d 52 3b 76 61 72 20 6e 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 Data Ascii: :l()(a.id),ruleId:null!=(b=a.event_rule)?b.id:b}}}function la(a){return{parameterType:a.parameter_type,value:a.value}}function ma(a){return{context:a.context,parameterType:a.parameter_type,value:a.value}}a.EXTRACTOR_PRECEDENCE=R;var na=function(a,b,c){ret
2023-06-06 08:40:22 UTC	6542	IN	Data Raw: 3d 63 2e 69 74 65 6d 28 30 29 3b 62 3d 28 61 3f 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 29 3a 6e 75 6c 6c 29 7c 7c 22 22 7d 72 65 74 75 72 6e 20 62 7d 76 61 72 20 73 61 3d 5b 22 73 6d 73 3a 22 2c 22 6d 61 69 6c 74 6f 3a 22 2c 22 74 65 6c 3a 22 2c 22 77 68 61 74 73 61 70 70 3a 22 2c 22 68 74 74 70 73 3a 2f 2f 77 61 2e 6d 65 2f 22 2c 22 73 6b 79 70 65 3a 22 2c 22 63 61 6c 6c 74 6f 3a 22 5d 2c 74 61 3d 2f 5b 5c 2d 21 24 3e 3c 2d 3d 3d 26 5f 5c 2f 5c 3f 5c 2e 2c 30 2d 39 3a 3b 20 5c 5d 5c 5b 25 7e 5c 22 5c 7b 5c 7d 5c 29 5c 28 5c 2b 5c 40 5c 5e 5c 60 5d 2f 67 2c 75 61 3d 2f 28 28 28 5b 61 2d 7a 5d 29 28 3f 3d 5b 41 2d 5a 5d 29 29 7c 28 28 5b 41 2d 5a 5d 29 28 3f 3d 5b 41 2d 5a 5d 5b 61 2d 7a 5d 29 29 29 2f 67 2c 76 61 3d 2f 28 5e 5c 53 7b Data Ascii: =c.item(0);b=(a?a.getAttribute("src"):null)\|\|""}return b}var sa=["sms:","mailto:","tel:","whatsapp:","https://wa.me/","skype:","callto:"],ta=/[\-!$><-==&_\/\?\.,0-9:; \]\[%~\"\{\}\)\(\+\@\^\`]/g,ua=/((([a-z])(?=[A-Z]))\|(([A-Z])(?=[A-Z][a-z])))/g,va=/(^\S{
2023-06-06 08:40:22 UTC	6544	IN	Data Raw: 74 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 31 3b 62 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 7b 76 61 72 20 63 3d 61 72 67 75 6d 65 6e 74 73 5b 62 5d 3b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 63 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 2c 64 29 26 26 28 61 5b 64 5d 3d 63 5b 64 5d 29 7d 72 65 74 Data Ascii: ta",function(){return function(g,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=Object.assign\|\|function(a){for(var b=1;b<arguments.length;b++){var c=arguments[b];for(var d in c)Object.prototype.hasOwnProperty.call(c,d)&&(a[d]=c[d])}ret
2023-06-06 08:40:22 UTC	6545	IN	Data Raw: 6f 70 65 73 3a 5b 5d 2c 74 79 70 65 3a 67 7d 2c 73 63 6f 70 65 3a 66 7d 29 7d 6e 3d 5b 5d 3b 6d 3d 5b 5d 3b 66 6f 72 28 6c 3d 30 3b 6c 3c 63 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 7b 6b 3d 63 5b 6c 5d 3b 69 3d 6b 2e 73 63 6f 70 65 3b 68 3d 6b 2e 73 63 68 65 6d 61 3b 66 6f 72 28 67 3d 6d 2e 6c 65 6e 67 74 68 2d 31 3b 67 3e 3d 30 3b 67 2d 2d 29 69 66 28 6d 5b 67 5d 2e 73 63 6f 70 65 2e 63 6f 6e 74 61 69 6e 73 28 69 29 29 7b 6d 5b 67 5d 2e 73 63 68 65 6d 61 2e 73 75 62 73 63 6f 70 65 73 2e 70 75 73 68 28 68 29 3b 62 72 65 61 6b 7d 65 6c 73 65 20 6d 2e 70 6f 70 28 29 3b 6d 2e 6c 65 6e 67 74 68 3d 3d 3d 30 26 26 6e 2e 70 75 73 68 28 68 29 3b 6d 2e 70 75 73 68 28 7b 73 63 68 65 6d 61 3a 68 2c 73 63 6f 70 65 3a 69 7d 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 Data Ascii: opes:[],type:g},scope:f})}n=[];m=[];for(l=0;l<c.length;l++){k=c[l];i=k.scope;h=k.schema;for(g=m.length-1;g>=0;g--)if(m[g].scope.contains(i)){m[g].schema.subscopes.push(h);break}else m.pop();m.length===0&&n.push(h);m.push({schema:h,scope:i})}return n}funct
2023-06-06 08:40:22 UTC	6547	IN	Data Raw: 69 73 49 6e 45 78 70 65 72 69 6d 65 6e 74 47 72 6f 75 70 3b 6c 3d 6c 3d 3d 3d 21 30 3f 67 2e 64 61 74 61 4c 61 79 65 72 7c 7c 5b 5d 3a 5b 5d 3b 69 66 28 6a 2e 6c 65 6e 67 74 68 3d 3d 3d 30 26 26 6b 2e 6c 65 6e 67 74 68 3d 3d 3d 30 26 26 6e 28 62 29 2e 6c 65 6e 67 74 68 3d 3d 3d 30 26 26 69 3e 30 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 28 7b 69 64 3a 63 2c 69 6e 63 6c 75 64 65 4a 73 6f 6e 4c 64 3a 65 2c 69 6e 73 74 61 6e 63 65 3a 66 2c 72 65 74 72 69 65 73 3a 69 2d 31 7d 29 7d 2c 72 29 3b 72 65 74 75 72 6e 7d 65 6c 73 65 20 69 66 28 6a 2e 6c 65 6e 67 74 68 3e 30 7c 7c 6b 2e 6c 65 6e 67 74 68 3e 30 7c 7c 6e 28 62 29 2e 6c 65 6e 67 74 68 3e 30 7c 7c 6e 28 64 29 2e 6c 65 6e 67 74 68 3e 30 7c 7c 6c 2e 6c Data Ascii: isInExperimentGroup;l=l===!0?g.dataLayer\|\|[]:[];if(j.length===0&&k.length===0&&n(b).length===0&&i>0){setTimeout(function(){return C({id:c,includeJsonLd:e,instance:f,retries:i-1})},r);return}else if(j.length>0\|\|k.length>0\|\|n(b).length>0\|\|n(d).length>0\|\|l.l
2023-06-06 08:40:22 UTC	6548	IN	Data Raw: 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 22 2c 6c 6f 67 4d 65 73 73 61 67 65 3a 22 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 7d 2c 22 2a 22 29 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 3a 20 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 29 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e Data Ascii: ook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"*");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;var g=typeof Symbol==="function
2023-06-06 08:40:22 UTC	6550	IN	Data Raw: 69 73 74 65 72 65 64 28 22 6e 6f 72 6d 61 6c 69 7a 65 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 6e 75 6d 54 79 70 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 68 61 72 65 64 22 29 2c 62 3d 61 2e 75 6e 69 63 6f 64 65 53 61 66 65 54 72 75 6e 63 61 74 65 3b 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 56 61 6c 69 64 61 74 Data Ascii: istered("normalizeSignalsFBEventsEnumType",function(){return function(g,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsShared"),b=a.unicodeSafeTruncate;a=f.getFbeventsModules("SignalsFBEventsValidat
2023-06-06 08:40:22 UTC	6551	IN	Data Raw: 73 74 61 6c 43 6f 64 65 54 79 70 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 56 61 6c 69 64 61 74 69 6f 6e 55 74 69 6c 73 22 29 2c 62 3d 61 2e 6c 6f 6f 6b 73 4c 69 6b 65 48 61 73 68 65 64 2c 63 3d 61 2e 74 72 69 6d 3b 66 75 6e 63 74 69 6f 6e 20 64 28 61 29 7b 76 61 72 20 64 3d 6e 75 6c 6c 3b 69 66 28 61 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 29 69 66 28 62 Data Ascii: stalCodeType",function(){return function(g,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsValidationUtils"),b=a.looksLikeHashed,c=a.trim;function d(a){var d=null;if(a!=null&&typeof a==="string")if(b
2023-06-06 08:40:22 UTC	6553	IN	Data Raw: 72 73 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 6e 6f 72 6d 61 6c 69 7a 65 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 74 72 69 6e 67 54 79 70 65 22 29 3b 61 3d 61 2e 6e 6f 72 6d 61 6c 69 7a 65 3b 65 2e 65 78 70 6f 72 74 73 3d 7b 65 6d 61 69 6c 3a 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 6e 6f 72 6d 61 6c 69 7a 65 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 6d 61 69 6c 54 79 70 65 22 29 2c 22 65 6e 75 6d 22 3a Data Ascii: rs",function(){return function(g,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=f.getFbeventsModules("normalizeSignalsFBEventsStringType");a=a.normalize;e.exports={email:f.getFbeventsModules("normalizeSignalsFBEventsEmailType"),"enum":
2023-06-06 08:40:22 UTC	6554	IN	Data Raw: 7d 7d 7d 29 28 29 3b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 68 61 72 65 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 66 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 64 29 7b 69 66 28 62 5b 64 5d 29 72 65 74 75 72 6e 20 62 5b 64 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 65 3d 62 5b 64 5d 3d 7b 69 3a 64 2c 6c 3a 21 31 Data Ascii: }}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsShared",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){e.exports=function(a){var b={};function c(d){if(b[d])return b[d].exports;var e=b[d]={i:d,l:!1
2023-06-06 08:40:22 UTC	6554	IN	Data Raw: 6c 6c 28 65 2e 65 78 70 6f 72 74 73 2c 65 2c 65 2e 65 78 70 6f 72 74 73 2c 63 29 2c 65 2e 6c 3d 21 30 2c 65 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 63 2e 6d 3d 61 2c 63 2e 63 3d 62 2c 63 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 64 29 7b 63 2e 6f 28 61 2c 62 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 62 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 64 7d 29 7d 2c 63 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 3a 22 40 40 74 6f 53 74 72 69 6e 67 54 61 67 22 29 26 26 4f 62 Data Ascii: ll(e.exports,e,e.exports,c),e.l=!0,e.exports}return c.m=a,c.c=b,c.d=function(a,b,d){c.o(a,b)\|\|Object.defineProperty(a,b,{enumerable:!0,get:d})},c.r=function(a){"undefined"!=typeof Symbol&&(typeof Symbol==="function"?Symbol.toStringTag:"@@toStringTag")&&Ob
2023-06-06 08:40:22 UTC	6556	IN	Data Raw: 3f 73 65 6c 66 3a 46 75 6e 63 74 69 6f 6e 28 22 72 65 74 75 72 6e 20 74 68 69 73 22 29 28 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 64 3d 63 28 36 29 2c 65 3d 63 28 36 35 29 2e 66 2c 66 3d 63 28 36 37 29 2c 68 3d 63 28 33 38 29 2c 69 3d 63 28 33 31 29 2c 6a 3d 63 28 31 33 29 2c 6b 3d 63 28 31 34 29 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 62 2c 63 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 61 29 7b 73 77 69 74 63 68 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 6e 65 77 20 61 28 29 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 6e 65 77 20 61 28 64 29 3b 63 61 73 65 Data Ascii: ?self:Function("return this")()},function(a,b,c){"use strict";var d=c(6),e=c(65).f,f=c(67),h=c(38),i=c(31),j=c(13),k=c(14),l=function(a){var b=function(d,b,c){if(this instanceof a){switch(arguments.length){case 0:return new a();case 1:return new a(d);case
2023-06-06 08:40:22 UTC	6557	IN	Data Raw: 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 3f 62 2e 73 75 62 73 74 72 28 30 2c 65 29 3a 22 22 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 64 3d 63 28 35 37 29 3b 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 20 61 28 62 2c 63 29 7b 72 65 74 75 72 6e 21 28 21 62 7c 7c 21 63 29 26 26 28 62 3d 3d 3d 63 7c 7c 21 64 28 62 29 26 26 28 64 28 63 29 3f 61 28 62 2c 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 3a 22 63 6f 6e 74 61 69 6e 73 22 69 6e 20 62 3f 62 2e 63 6f 6e 74 61 69 6e 73 28 63 29 3a 21 21 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 26 26 21 21 28 31 36 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e Data Ascii: eturn"string"==typeof b?b.substr(0,e):""}},function(a,b,c){"use strict";var d=c(57);a.exports=function a(b,c){return!(!b\|\|!c)&&(b===c\|\|!d(b)&&(d(c)?a(b,c.parentNode):"contains"in b?b.contains(c):!!b.compareDocumentPosition&&!!(16&b.compareDocumentPosition
2023-06-06 08:40:22 UTC	6559	IN	Data Raw: 2e 73 6c 69 63 65 28 38 2c 2d 31 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 28 32 34 29 3b 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 64 28 61 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 6e 75 6c 6c 3d 3d 61 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 27 74 20 63 61 6c 6c 20 6d 65 74 68 6f 64 20 6f 6e 20 22 2b 61 29 3b 72 65 74 75 72 6e 20 61 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 3d 63 28 31 39 29 3b 76 61 72 20 64 3d 63 28 34 35 29 2c 65 3d 63 28 32 30 29 2c 66 3d 63 28 33 35 29 2c 67 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 Data Ascii: .slice(8,-1)}},function(a,b,c){var d=c(24);a.exports=function(a){return Object(d(a))}},function(a,b){a.exports=function(a){if(null==a)throw TypeError("Can't call method on "+a);return a}},function(a,b,c){a=c(19);var d=c(45),e=c(20),f=c(35),g=Object.define
2023-06-06 08:40:22 UTC	6560	IN	Data Raw: 62 29 72 65 74 75 72 6e 20 61 3b 73 77 69 74 63 68 28 63 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 62 29 7d 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 62 2c 63 29 7d 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 62 2c 63 2c 64 29 7d 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 65 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 62 2c 63 2c 64 2c 65 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 6c 79 28 62 2c 61 72 67 75 6d 65 Data Ascii: b)return a;switch(c){case 0:return function(){return a.call(b)};case 1:return function(c){return a.call(b,c)};case 2:return function(c,d){return a.call(b,c,d)};case 3:return function(c,d,e){return a.call(b,c,d,e)}}return function(){return a.apply(b,argume
2023-06-06 08:40:22 UTC	6562	IN	Data Raw: 62 29 3b 76 61 72 20 69 3d 65 28 62 2e 6c 65 6e 67 74 68 29 3b 67 3d 66 28 67 2c 69 29 3b 69 66 28 61 26 26 63 21 3d 63 29 7b 66 6f 72 28 3b 69 3e 67 3b 29 69 66 28 28 68 3d 62 5b 67 2b 2b 5d 29 21 3d 68 29 72 65 74 75 72 6e 21 30 7d 65 6c 73 65 20 66 6f 72 28 3b 69 3e 67 3b 67 2b 2b 29 69 66 28 28 61 7c 7c 67 20 69 6e 20 62 29 26 26 62 5b 67 5d 3d 3d 3d 63 29 72 65 74 75 72 6e 20 61 7c 7c 67 7c 7c 30 3b 72 65 74 75 72 6e 21 61 26 26 2d 31 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 64 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 64 2e 72 28 63 29 2c 64 2e 64 28 63 2c 22 67 65 74 53 63 68 65 6d 61 44 6f 74 4f 72 67 50 72 6f 64 75 63 74 4e 6f 64 65 73 41 73 4a 73 6f 6e 4c 44 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 29 2c 64 Data Ascii: b);var i=e(b.length);g=f(g,i);if(a&&c!=c){for(;i>g;)if((h=b[g++])!=h)return!0}else for(;i>g;g++)if((a\|\|g in b)&&b[g]===c)return a\|\|g\|\|0;return!a&&-1}}},function(a,c,d){"use strict";d.r(c),d.d(c,"getSchemaDotOrgProductNodesAsJsonLD",function(){return o}),d
2023-06-06 08:40:22 UTC	6563	IN	Data Raw: 29 29 7b 64 2e 70 75 73 68 28 71 29 3b 76 61 72 20 72 3d 68 28 29 28 71 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 74 65 6d 70 72 6f 70 22 29 29 3b 69 66 28 71 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 69 74 65 6d 73 63 6f 70 65 22 29 29 7b 76 61 72 20 76 3d 7b 7d 3b 75 5b 72 5d 3d 76 2c 74 2e 70 75 73 68 28 7b 65 6c 65 6d 65 6e 74 3a 6e 2c 77 6f 72 6b 69 6e 67 4e 6f 64 65 3a 75 7d 29 2c 74 2e 70 75 73 68 28 7b 65 6c 65 6d 65 6e 74 3a 71 2c 77 6f 72 6b 69 6e 67 4e 6f 64 65 3a 76 7d 29 3b 62 72 65 61 6b 7d 75 5b 72 5d 3d 4f 62 6a 65 63 74 28 65 2e 62 29 28 71 29 7d 7d 7d 7d 7d 72 65 74 75 72 6e 20 69 28 29 28 73 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 67 28 29 28 62 2e 68 74 6d 6c 45 6c 65 6d 65 6e 74 2c 61 29 7d 29 7d 66 75 6e Data Ascii: )){d.push(q);var r=h()(q.getAttribute("itemprop"));if(q.hasAttribute("itemscope")){var v={};u[r]=v,t.push({element:n,workingNode:u}),t.push({element:q,workingNode:v});break}u[r]=Object(e.b)(q)}}}}}return i()(s,function(b){return g()(b.htmlElement,a)})}fun
2023-06-06 08:40:22 UTC	6565	IN	Data Raw: 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 28 31 31 29 2c 65 3d 63 28 34 29 28 22 73 70 65 63 69 65 73 22 29 3b 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 5b 5d 3b 72 65 74 75 72 6e 28 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 7b 7d 29 5b 65 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 66 6f 6f 3a 31 7d 7d 2c 31 21 3d 3d 62 5b 61 5d 28 42 6f 6f 6c 65 61 6e 29 2e 66 6f 6f 7d 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 64 2c 65 3b 62 3d 63 28 35 30 29 3b 76 61 72 20 66 3d 63 28 31 33 29 2c 67 3d 63 28 31 34 29 2c 68 3d 63 28 33 36 29 3b 63 3d 63 28 34 29 28 22 69 74 65 72 Data Ascii: n(a,b,c){var d=c(11),e=c(4)("species");a.exports=function(a){return!d(function(){var b=[];return(b.constructor={})[e]=function(){return{foo:1}},1!==b[a](Boolean).foo})}},function(a,b,c){"use strict";var d,e;b=c(50);var f=c(13),g=c(14),h=c(36);c=c(4)("iter
2023-06-06 08:40:22 UTC	6566	IN	Data Raw: 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 5b 5d 5b 61 5d 3b 72 65 74 75 72 6e 21 63 7c 7c 21 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 62 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 45 72 72 6f 72 28 29 7d 2c 31 29 7d 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 2e 65 78 70 6f 72 74 73 3d 63 28 31 31 31 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 64 3d 63 28 35 38 29 3b 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 64 28 61 29 26 26 33 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 64 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 2e 65 78 Data Ascii: nction(a,b){var c=[][a];return!c\|\|!d(function(){c.call(null,b\|\|function(){throw Error()},1)})}},function(a,b,c){a.exports=c(111)},function(a,b,c){"use strict";var d=c(58);a.exports=function(a){return d(a)&&3==a.nodeType}},function(a,c,d){"use strict";a.ex
2023-06-06 08:40:22 UTC	6568	IN	Data Raw: 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3b 63 3d 64 26 26 21 61 2e 63 61 6c 6c 28 7b 31 3a 32 7d 2c 31 29 3b 62 2e 66 3d 63 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 64 28 74 68 69 73 2c 61 29 3b 72 65 74 75 72 6e 21 21 61 26 26 61 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 3a 61 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 28 31 31 29 2c 65 3d 2f 23 7c 5c 2e 70 72 6f 74 6f 74 79 70 65 5c 2e 2f 3b 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 3d 67 5b 66 28 61 29 5d 3b 72 65 74 75 72 6e 20 61 3d 3d 69 7c 7c 61 21 3d 68 26 26 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 62 3f 64 28 62 29 3a 21 21 62 29 7d 3b 76 61 72 20 66 3d 62 2e 6e 6f 72 6d 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 Data Ascii: ropertyDescriptor;c=d&&!a.call({1:2},1);b.f=c?function(a){a=d(this,a);return!!a&&a.enumerable}:a},function(a,b,c){var d=c(11),e=/#\|\.prototype\./;b=function(a,b){a=g[f(a)];return a==i\|\|a!=h&&("function"==typeof b?d(b):!!b)};var f=b.normalize=function(a){r
2023-06-06 08:40:22 UTC	6569	IN	Data Raw: 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 67 3d 62 2e 64 61 74 61 3d 7b 7d 2c 68 3d 62 2e 4e 41 54 49 56 45 3d 22 4e 22 2c 69 3d 62 2e 50 4f 4c 59 46 49 4c 4c 3d 22 50 22 3b 61 2e 65 78 70 6f 72 74 73 3d 62 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 28 33 38 29 2c 65 3d 63 28 36 29 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 3f 61 3a 76 6f 69 64 20 30 7d 3b 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3c 32 3f 66 28 64 5b 61 5d 29 7c 7c 66 28 65 5b 61 5d 29 3a 64 5b 61 5d 26 26 64 5b 61 5d 5b 62 5d 7c 7c 65 5b 61 5d 26 26 65 5b 61 5d 5b 62 5d 7d Data Ascii: .toLowerCase()},g=b.data={},h=b.NATIVE="N",i=b.POLYFILL="P";a.exports=b},function(a,b,c){var d=c(38),e=c(6),f=function(a){return"function"==typeof a?a:void 0};a.exports=function(a,b){return arguments.length<2?f(d[a])\|\|f(e[a]):d[a]&&d[a][b]\|\|e[a]&&e[a][b]}
2023-06-06 08:40:22 UTC	6570	IN	Data Raw: 22 20 72 65 71 75 69 72 65 64 22 29 3b 72 65 74 75 72 6e 20 63 7d 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 62 3d 63 28 37 34 29 3b 63 3d 63 28 36 29 2e 57 65 61 6b 4d 61 70 3b 61 2e 65 78 70 6f 72 74 73 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 2f 6e 61 74 69 76 65 20 63 6f 64 65 2f 2e 74 65 73 74 28 62 2e 63 61 6c 6c 28 63 29 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 2e 65 78 70 6f 72 74 73 3d 63 28 33 34 29 28 22 6e 61 74 69 76 65 2d 66 75 6e 63 74 69 6f 6e 2d 74 6f 2d 73 74 72 69 6e 67 22 2c 46 75 6e 63 74 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 64 3d 63 28 37 29 2c 65 3d 63 28 37 36 29 Data Ascii: " required");return c}}}},function(a,b,c){b=c(74);c=c(6).WeakMap;a.exports="function"==typeof c&&/native code/.test(b.call(c))},function(a,b,c){a.exports=c(34)("native-function-to-string",Function.toString)},function(a,b,c){"use strict";var d=c(7),e=c(76)
2023-06-06 08:40:22 UTC	6571	IN	Data Raw: 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 6e 65 77 20 61 28 29 29 21 3d 3d 61 2e 70 72 6f 74 6f 74 79 70 65 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 28 32 30 29 2c 65 3d 63 28 37 39 29 2c 66 3d 63 28 35 31 29 2c 67 3d 63 28 38 33 29 2c 68 3d 63 28 34 36 29 2c 69 3d 63 28 33 39 29 28 22 49 45 5f 50 52 4f 54 4f 22 29 2c 6a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 68 28 22 69 66 72 61 6d 65 22 29 2c 62 3d 66 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 61 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 2c 67 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 2c 61 2e 73 72 63 3d 53 74 72 69 6e 67 28 22 6a 61 76 61 73 63 72 69 70 74 3a 22 29 2c Data Ascii: ject.getPrototypeOf(new a())!==a.prototype})},function(a,b,c){var d=c(20),e=c(79),f=c(51),g=c(83),h=c(46),i=c(39)("IE_PROTO"),j=function(){},k=function(){var a=h("iframe"),b=f.length;for(a.style.display="none",g.appendChild(a),a.src=String("javascript:"),
2023-06-06 08:40:22 UTC	6573	IN	Data Raw: 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 5f 5f 70 72 6f 74 6f 5f 5f 22 29 2e 73 65 74 29 2e 63 61 6c 6c 28 63 2c 5b 5d 29 2c 62 3d 63 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 2c 65 29 7b 72 65 74 75 72 6e 20 64 28 63 2c 65 29 2c 62 3f 61 2e 63 61 6c 6c 28 63 2c 65 29 3a 63 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 65 2c 63 7d 7d 28 29 3a 76 6f 69 64 20 30 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 28 31 32 29 2c 65 3d 63 28 32 30 29 3b 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 65 28 61 29 2c 21 64 28 62 29 26 26 6e 75 6c 6c 21 3d 3d 62 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 Data Ascii: bject.prototype,"__proto__").set).call(c,[]),b=c instanceof Array}catch(a){}return function(c,e){return d(c,e),b?a.call(c,e):c.__proto__=e,c}}():void 0)},function(a,b,c){var d=c(12),e=c(20);a.exports=function(a,b){if(e(a),!d(b)&&null!==b)throw TypeError("
2023-06-06 08:40:22 UTC	6574	IN	Data Raw: 72 61 74 6f 72 22 29 2c 66 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 3b 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 61 26 26 28 64 2e 41 72 72 61 79 3d 3d 3d 61 7c 7c 66 5b 65 5d 3d 3d 3d 61 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 64 3d 63 28 33 35 29 2c 65 3d 63 28 32 35 29 2c 66 3d 63 28 32 36 29 3b 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 62 3d 64 28 62 29 3b 62 20 69 6e 20 61 3f 65 2e 66 28 61 2c 62 2c 66 28 30 2c 63 29 29 3a 61 5b 62 5d 3d 63 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 28 35 33 29 2c 65 3d 63 28 34 29 28 22 69 74 65 72 Data Ascii: rator"),f=Array.prototype;a.exports=function(a){return void 0!==a&&(d.Array===a\|\|f[e]===a)}},function(a,b,c){"use strict";var d=c(35),e=c(25),f=c(26);a.exports=function(a,b,c){b=d(b);b in a?e.f(a,b,f(0,c)):a[b]=c}},function(a,b,c){var d=c(53),e=c(4)("iter
2023-06-06 08:40:22 UTC	6576	IN	Data Raw: 41 72 72 61 79 22 2c 70 72 6f 74 6f 3a 21 30 2c 66 6f 72 63 65 64 3a 61 7d 2c 7b 66 69 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 64 28 74 68 69 73 2c 61 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 29 7d 7d 29 2c 63 28 35 34 29 28 22 66 69 6e 64 22 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 63 28 31 30 35 29 2c 61 2e 65 78 70 6f 72 74 73 3d 63 28 31 35 29 28 22 41 72 72 61 79 22 2c 22 69 6e 64 65 78 4f 66 22 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 64 3d 63 28 34 31 29 28 21 31 29 2c 65 3d 5b 5d 2e 69 6e 64 65 78 4f 66 2c 66 3d 21 21 65 26 26 31 2f 5b 31 5d 2e 69 6e 64 65 78 4f 66 Data Ascii: Array",proto:!0,forced:a},{find:function(a){return d(this,a,arguments.length>1?arguments[1]:void 0)}}),c(54)("find")},function(a,b,c){c(105),a.exports=c(15)("Array","indexOf")},function(a,b,c){"use strict";var d=c(41)(!1),e=[].indexOf,f=!!e&&1/[1].indexOf
2023-06-06 08:40:22 UTC	6577	IN	Data Raw: 64 2e 64 28 65 2c 22 45 58 50 4c 49 43 49 54 5f 42 55 54 54 4f 4e 5f 53 45 4c 45 43 54 4f 52 53 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 71 61 7d 29 3b 76 61 72 20 68 3d 64 28 38 29 2c 69 3d 64 28 32 38 29 2c 6a 3d 64 28 39 29 2c 6b 3d 64 2e 6e 28 6a 29 3b 6a 3d 64 28 31 29 3b 76 61 72 20 6c 3d 64 2e 6e 28 6a 29 3b 6a 3d 64 28 32 29 3b 76 61 72 20 6d 3d 64 2e 6e 28 6a 29 3b 6a 3d 64 28 33 29 3b 76 61 72 20 6e 3d 64 2e 6e 28 6a 29 3b 6a 3d 64 28 31 30 29 3b 76 61 72 20 6f 3d 64 2e 6e 28 6a 29 3b 6a 3d 64 28 30 29 3b 76 61 72 20 70 3d 64 2e 6e 28 6a 29 2c 71 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 63 3d 70 28 29 28 69 2e 61 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 27 5b 76 6f 63 61 62 24 3d 22 27 2e Data Ascii: d.d(e,"EXPLICIT_BUTTON_SELECTORS",function(){return qa});var h=d(8),i=d(28),j=d(9),k=d.n(j);j=d(1);var l=d.n(j);j=d(2);var m=d.n(j);j=d(3);var n=d.n(j);j=d(10);var o=d.n(j);j=d(0);var p=d.n(j),q=function(a){for(var c=p()(i.a,function(a){return'[vocab$="'.
2023-06-06 08:40:22 UTC	6579	IN	Data Raw: 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 61 2e 6e 6f 64 65 4e 61 6d 65 29 3f 61 3a 6e 75 6c 6c 7d 3b 6a 3d 64 28 35 29 3b 76 61 72 20 74 3d 64 2e 6e 28 6a 29 3b 66 75 6e 63 74 69 6f 6e 20 75 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 62 5b 63 5d 3b 64 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 64 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 64 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 64 26 26 28 64 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 64 2e 6b 65 79 2c 64 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 76 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 62 20 69 6e 20 61 3f 4f Data Ascii: string"==typeof a.nodeName)?a:null};j=d(5);var t=d.n(j);function u(a,b){for(var c=0;c<b.length;c++){var d=b[c];d.enumerable=d.enumerable\|\|!1,d.configurable=!0,"value"in d&&(d.writable=!0),Object.defineProperty(a,d.key,d)}}function v(a,b,c){return b in a?O
2023-06-06 08:40:22 UTC	6580	IN	Data Raw: 67 74 68 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 31 3b 62 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 7b 76 61 72 20 63 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 62 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 62 5d 3a 7b 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 63 29 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 26 26 28 64 3d 64 2e 63 6f 6e 63 61 74 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 63 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 Data Ascii: gth?a:function(a){for(var b=1;b<arguments.length;b++){var c=null!=arguments[b]?arguments[b]:{},d=Object.keys(c);"function"==typeof Object.getOwnPropertySymbols&&(d=d.concat(Object.getOwnPropertySymbols(c).filter(function(a){return Object.getOwnPropertyDes
2023-06-06 08:40:22 UTC	6582	IN	Data Raw: 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 5d 28 29 3b 21 28 64 3d 28 61 3d 67 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 63 2e 70 75 73 68 28 61 2e 76 61 6c 75 65 29 2c 21 62 7c 7c 63 2e 6c 65 6e 67 74 68 21 3d 3d 62 29 3b 64 3d 21 30 29 3b 7d 63 61 74 63 68 28 61 29 7b 65 3d 21 30 2c 66 3d 61 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 64 7c 7c 6e 75 6c 6c 3d 3d 67 5b 22 72 65 74 75 72 6e 22 5d 7c 7c 67 5b 22 72 65 74 75 72 6e 22 5d 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 65 29 74 68 72 6f 77 20 66 7d 7d 72 65 74 75 72 6e 20 63 7d 28 61 2c 62 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 Data Ascii: on"?Symbol.iterator:"@@iterator"]();!(d=(a=g.next()).done)&&(c.push(a.value),!b\|\|c.length!==b);d=!0);}catch(a){e=!0,f=a}finally{try{d\|\|null==g["return"]\|\|g["return"]()}finally{if(e)throw f}}return c}(a,b)\|\|function(){throw new TypeError("Invalid attempt t
2023-06-06 08:40:22 UTC	6583	IN	Data Raw: 61 69 6e 73 28 62 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 64 6f 7b 69 66 28 62 2e 6d 61 74 63 68 65 73 28 61 29 29 72 65 74 75 72 6e 20 62 3b 62 3d 62 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 7c 7c 62 2e 70 61 72 65 6e 74 4e 6f 64 65 7d 77 68 69 6c 65 28 6e 75 6c 6c 21 3d 3d 62 26 26 31 3d 3d 3d 62 2e 6e 6f 64 65 54 79 70 65 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 76 61 72 20 4c 3d 64 28 34 32 29 3b 66 75 6e 63 74 69 6f 6e 20 4d 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 62 20 69 6e 20 61 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 62 2c 7b 76 61 6c 75 65 3a 63 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 61 5b 62 5d 3d 63 2c Data Ascii: ains(b))return null;do{if(b.matches(a))return b;b=b.parentElement\|\|b.parentNode}while(null!==b&&1===b.nodeType);return null}}var L=d(42);function M(a,b,c){return b in a?Object.defineProperty(a,b,{value:c,enumerable:!0,configurable:!0,writable:!0}):a[b]=c,
2023-06-06 08:40:22 UTC	6585	IN	Data Raw: 20 51 3d 7b 44 4f 5f 4e 4f 54 5f 4d 41 54 43 48 3a 30 2c 43 4c 41 53 53 5f 4e 41 4d 45 5f 4d 41 54 43 48 45 53 3a 31 2c 4e 45 45 44 5f 4d 4f 52 45 5f 43 48 45 43 4b 49 4e 47 3a 32 7d 3b 66 75 6e 63 74 69 6f 6e 20 52 28 61 2c 62 29 7b 69 66 28 61 26 26 21 62 7c 7c 21 61 26 26 62 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 7c 7c 76 6f 69 64 20 30 3d 3d 3d 62 7c 7c 61 2e 6e 6f 64 65 54 79 70 65 21 3d 3d 62 2e 6e 6f 64 65 54 79 70 65 7c 7c 61 2e 6e 6f 64 65 4e 61 6d 65 21 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 29 72 65 74 75 72 6e 20 51 2e 44 4f 5f 4e 4f 54 5f 4d 41 54 43 48 3b 61 3d 73 28 61 29 3b 62 3d 73 28 62 29 3b 69 66 28 61 26 26 21 62 7c 7c 21 61 26 26 62 29 72 65 74 75 72 6e 20 51 2e 44 4f 5f 4e 4f 54 5f 4d 41 54 43 48 3b 69 66 28 61 26 26 62 29 7b 69 66 28 61 Data Ascii: Q={DO_NOT_MATCH:0,CLASS_NAME_MATCHES:1,NEED_MORE_CHECKING:2};function R(a,b){if(a&&!b\|\|!a&&b\|\|void 0===a\|\|void 0===b\|\|a.nodeType!==b.nodeType\|\|a.nodeName!==b.nodeName)return Q.DO_NOT_MATCH;a=s(a);b=s(b);if(a&&!b\|\|!a&&b)return Q.DO_NOT_MATCH;if(a&&b){if(a
2023-06-06 08:40:22 UTC	6586	IN	Data Raw: 28 61 29 2c 61 3d 61 2e 6e 65 78 74 53 69 62 6c 69 6e 67 3b 72 65 74 75 72 6e 20 64 7d 28 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 61 2e 6e 6f 64 65 31 54 72 65 65 5b 30 5d 2c 61 2e 6e 6f 64 65 32 54 72 65 65 5b 30 5d 29 3b 72 65 74 75 72 6e 20 62 26 26 30 21 3d 3d 62 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3d 21 30 2c 65 3d 21 31 2c 66 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 61 2c 67 3d 61 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 5d 28 29 3b 21 28 64 3d 28 61 3d 67 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 3b 64 3d 21 30 29 7b 61 3d 54 28 61 2e 76 61 6c 75 Data Ascii: (a),a=a.nextSibling;return d}(a.parentNode,a.node1Tree[0],a.node2Tree[0]);return b&&0!==b.length?function(a,b){var c=[],d=!0,e=!1,f=void 0;try{for(var a,g=a[typeof Symbol==="function"?Symbol.iterator:"@@iterator"]();!(d=(a=g.next()).done);d=!0){a=T(a.valu
2023-06-06 08:40:22 UTC	6588	IN	Data Raw: 7d 2c 62 2c 63 29 29 7d 2c 7b 7d 29 2c 57 3d 7b 22 40 63 6f 6e 74 65 78 74 22 3a 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 22 2c 22 40 74 79 70 65 22 3a 22 50 72 6f 64 75 63 74 22 2c 61 64 64 69 74 69 6f 6e 61 6c 54 79 70 65 3a 76 6f 69 64 20 30 2c 6f 66 66 65 72 73 3a 7b 70 72 69 63 65 3a 76 6f 69 64 20 30 2c 70 72 69 63 65 43 75 72 72 65 6e 63 79 3a 76 6f 69 64 20 30 7d 2c 70 72 6f 64 75 63 74 49 44 3a 76 6f 69 64 20 30 7d 2c 58 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 6e 75 6c 6c 3d 3d 63 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 64 3d 6c 28 29 28 61 2e 6f 66 66 65 72 73 29 3b 72 65 74 75 72 6e 7b 22 40 63 6f 6e 74 65 78 74 22 3a 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 22 2c 22 40 74 79 70 65 22 3a 22 50 72 Data Ascii: },b,c))},{}),W={"@context":"http://schema.org","@type":"Product",additionalType:void 0,offers:{price:void 0,priceCurrency:void 0},productID:void 0},X=function(a,b,c){if(null==c)return a;var d=l()(a.offers);return{"@context":"http://schema.org","@type":"Pr
2023-06-06 08:40:22 UTC	6589	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 74 6f 74 61 6c 50 72 69 63 65 22 3d 3d 3d 55 28 61 2c 31 29 5b 30 5d 7d 29 3b 63 26 26 28 64 3d 5b 7b 22 40 63 6f 6e 74 65 78 74 22 3a 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 22 2c 22 40 74 79 70 65 22 3a 22 49 74 65 6d 4c 69 73 74 22 2c 69 74 65 6d 4c 69 73 74 45 6c 65 6d 65 6e 74 3a 70 28 29 28 64 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 7b 22 40 74 79 70 65 22 3a 22 4c 69 73 74 49 74 65 6d 22 2c 69 74 65 6d 3a 61 2c 70 6f 73 69 74 69 6f 6e 3a 62 2b 31 7d 7d 29 2c 74 6f 74 61 6c 50 72 69 63 65 3a 6e 75 6c 6c 21 3d 63 5b 31 5d 3f 63 5b 31 5d 3a 76 6f 69 64 20 30 7d 5d 29 7d 72 65 74 75 72 6e 20 70 28 29 28 64 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e Data Ascii: unction(a){return"totalPrice"===U(a,1)[0]});c&&(d=[{"@context":"http://schema.org","@type":"ItemList",itemListElement:p()(d,function(a,b){return{"@type":"ListItem",item:a,position:b+1}}),totalPrice:null!=c[1]?c[1]:void 0}])}return p()(d,function(a){return
2023-06-06 08:40:22 UTC	6591	IN	Data Raw: 63 74 6f 72 5f 63 6f 6e 66 69 67 20 6d 75 73 74 20 62 65 20 73 65 74 22 29 3b 62 3d 61 2e 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 62 2e 70 61 72 61 6d 65 74 65 72 5f 73 65 6c 65 63 74 6f 72 73 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 20 6d 75 73 74 20 62 65 20 73 65 74 22 29 3b 72 65 74 75 72 6e 7b 64 6f 6d 61 69 6e 55 52 49 3a 6e 65 77 20 77 28 61 2e 64 6f 6d 61 69 6e 5f 75 72 69 29 2c 65 76 65 6e 74 54 79 70 65 3a 61 2e 65 76 65 6e 74 5f 74 79 70 65 2c 65 78 74 72 61 63 74 6f 72 43 6f 6e 66 69 67 3a 68 61 28 62 29 2c 65 78 74 72 61 63 74 6f 72 54 79 70 65 3a 22 43 4f 4e 53 54 41 4e 54 5f 56 41 4c 55 45 22 2c 69 64 3a 6c 28 29 28 61 2e 69 64 29 2c 72 75 6c 65 49 64 3a 6e 75 Data Ascii: ctor_config must be set");b=a.extractor_config;if(b.parameter_selectors)throw new Error("extractor_config must be set");return{domainURI:new w(a.domain_uri),eventType:a.event_type,extractorConfig:ha(b),extractorType:"CONSTANT_VALUE",id:l()(a.id),ruleId:nu
2023-06-06 08:40:22 UTC	6592	IN	Data Raw: 5e 3d 27 74 65 6c 3a 27 5d 22 2c 22 5b 68 72 65 66 5e 3d 27 63 61 6c 6c 74 6f 3a 27 5d 22 2c 22 5b 68 72 65 66 5e 3d 27 6d 61 69 6c 74 6f 3a 27 5d 22 2c 22 5b 68 72 65 66 5e 3d 27 73 6d 73 3a 27 5d 22 2c 22 5b 68 72 65 66 5e 3d 27 73 6b 79 70 65 3a 27 5d 22 2c 22 5b 68 72 65 66 5e 3d 27 77 68 61 74 73 61 70 70 3a 27 5d 22 2c 22 5b 69 64 2a 3d 62 74 6e 5d 22 2c 22 5b 69 64 2a 3d 42 74 6e 5d 22 2c 22 5b 69 64 2a 3d 62 75 74 74 6f 6e 5d 22 2c 22 5b 69 64 2a 3d 42 75 74 74 6f 6e 5d 22 2c 22 61 22 5d 2e 6a 6f 69 6e 28 24 29 2c 6f 61 3d 5b 22 5b 68 72 65 66 5e 3d 27 74 65 6c 3a 27 5d 22 2c 22 5b 68 72 65 66 5e 3d 27 63 61 6c 6c 74 6f 3a 27 5d 22 2c 22 5b 68 72 65 66 5e 3d 27 73 6d 73 3a 27 5d 22 2c 22 5b 68 72 65 66 5e 3d 27 73 6b 79 70 65 3a 27 5d 22 2c 22 5b Data Ascii: ^='tel:']","[href^='callto:']","[href^='mailto:']","[href^='sms:']","[href^='skype:']","[href^='whatsapp:']","[id=btn]","[id=Btn]","[id=button]","[id=Button]","a"].join($),oa=["[href^='tel:']","[href^='callto:']","[href^='sms:']","[href^='skype:']","[
2023-06-06 08:40:22 UTC	6593	IN	Data Raw: 2e 6f 66 66 73 65 74 48 65 69 67 68 74 3b 72 65 74 75 72 6e 21 69 73 4e 61 4e 28 61 29 26 26 61 3c 79 61 26 26 61 3e 7a 61 7d 64 2e 64 28 63 2c 22 69 6e 66 65 72 72 65 64 45 76 65 6e 74 73 53 68 61 72 65 64 55 74 69 6c 73 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 61 7d 29 2c 64 2e 64 28 63 2c 22 67 65 74 4a 73 6f 6e 4c 44 46 6f 72 45 78 74 72 61 63 74 6f 72 73 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 61 7d 29 2c 64 2e 64 28 63 2c 22 67 65 74 50 61 72 61 6d 65 74 65 72 45 78 74 72 61 63 74 6f 72 46 72 6f 6d 47 72 61 70 68 50 61 79 6c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 61 7d 29 2c 64 2e 64 28 63 2c 22 75 6e 69 63 6f 64 65 53 61 66 65 54 72 75 6e 63 61 74 65 22 2c 66 75 6e 63 74 Data Ascii: .offsetHeight;return!isNaN(a)&&a<ya&&a>za}d.d(c,"inferredEventsSharedUtils",function(){return Ba}),d.d(c,"getJsonLDForExtractors",function(){return fa}),d.d(c,"getParameterExtractorFromGraphPayload",function(){return ga}),d.d(c,"unicodeSafeTruncate",funct
2023-06-06 08:40:22 UTC	6595	IN	Data Raw: 70 28 61 29 7b 61 3d 53 74 72 69 6e 67 28 61 29 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 2d 5c 73 5d 2b 2f 67 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 2b 3f 30 7b 30 2c 32 7d 2f 2c 22 22 29 3b 69 66 28 62 28 61 2c 22 30 22 29 29 72 65 74 75 72 6e 21 31 3b 69 66 28 62 28 61 2c 22 31 22 29 29 72 65 74 75 72 6e 20 6a 2e 74 65 73 74 28 61 29 3b 72 65 74 75 72 6e 20 62 28 61 2c 22 34 37 22 29 3f 6b 2e 74 65 73 74 28 61 29 3a 6c 2e 74 65 73 74 28 61 29 7d 65 2e 65 78 70 6f 72 74 73 3d 7b 69 73 49 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 50 68 6f 6e 65 4e 75 6d 62 65 72 3a 70 2c 6c 6f 6f 6b 73 4c 69 6b 65 48 61 73 68 65 64 3a 6f 2c 73 74 72 69 70 3a 6e 2c 74 72 69 6d 3a 6d 7d 7d 29 28 29 3b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 Data Ascii: p(a){a=String(a).replace(/[\-\s]+/g,"").replace(/^\+?0{0,2}/,"");if(b(a,"0"))return!1;if(b(a,"1"))return j.test(a);return b(a,"47")?k.test(a):l.test(a)}e.exports={isInternationalPhoneNumber:p,looksLikeHashed:o,strip:n,trim:m}})();return e.exports}(a,b,c,d
2023-06-06 08:40:22 UTC	6595	IN	Data Raw: 6e 3a 22 67 65 22 2c 6c 6e 3a 22 6c 6e 22 2c 6c 5f 6e 61 6d 65 3a 22 6c 6e 22 2c 70 68 6f 6e 65 3a 22 70 68 22 2c 73 74 3a 22 73 74 22 2c 73 74 61 74 65 3a 22 73 74 22 2c 7a 69 70 3a 22 7a 70 22 2c 7a 69 70 5f 63 6f 64 65 3a 22 7a 70 22 7d 2c 64 3d 7b 43 49 54 59 3a 5b 22 63 69 74 79 22 5d 2c 44 41 54 45 3a 5b 22 64 61 74 65 22 2c 22 64 74 22 2c 22 64 61 79 22 2c 22 64 6f 62 64 22 5d 2c 44 4f 42 3a 5b 22 62 69 72 74 68 22 2c 22 62 64 61 79 22 2c 22 62 64 61 74 65 22 2c 22 62 6d 6f 6e 74 68 22 2c 22 62 79 65 61 72 22 2c 22 64 6f 62 22 5d 2c 46 45 4d 41 4c 45 3a 5b 22 66 65 6d 61 6c 65 22 2c 22 67 69 72 6c 22 2c 22 77 6f 6d 61 6e 22 5d 2c 46 49 52 53 54 5f 4e 41 4d 45 3a 5b 22 66 69 72 73 74 6e 61 6d 65 22 2c 22 66 6e 22 2c 22 66 6e 61 6d 65 22 2c 22 67 69 Data Ascii: n:"ge",ln:"ln",l_name:"ln",phone:"ph",st:"st",state:"st",zip:"zp",zip_code:"zp"},d={CITY:["city"],DATE:["date","dt","day","dobd"],DOB:["birth","bday","bdate","bmonth","byear","dob"],FEMALE:["female","girl","woman"],FIRST_NAME:["firstname","fn","fname","gi
2023-06-06 08:40:22 UTC	6597	IN	Data Raw: 2d 4d 4d 2d 59 59 59 59 22 2c 22 44 44 2f 4d 4d 2f 59 59 59 59 22 2c 22 59 59 59 59 2d 4d 4d 2d 44 44 22 2c 22 59 59 59 59 2f 4d 4d 2f 44 44 22 2c 22 4d 4d 2d 44 44 2d 59 59 22 2c 22 4d 4d 2f 44 44 2f 59 59 22 2c 22 44 44 2d 4d 4d 2d 59 59 22 2c 22 44 44 2f 4d 4d 2f 59 59 22 2c 22 59 59 2d 4d 4d 2d 44 44 22 2c 22 59 59 2f 4d 4d 2f 44 44 22 5d 3b 65 2e 65 78 70 6f 72 74 73 3d 7b 45 4d 41 49 4c 5f 52 45 47 45 58 3a 67 2c 50 4f 53 53 49 42 4c 45 5f 46 45 41 54 55 52 45 5f 46 49 45 4c 44 53 3a 64 2c 50 49 49 5f 4b 45 59 5f 41 4c 49 41 53 5f 54 4f 5f 53 48 4f 52 54 5f 43 4f 44 45 3a 63 2c 53 49 47 4e 41 4c 53 5f 46 42 45 56 45 4e 54 53 5f 44 41 54 45 5f 46 4f 52 4d 41 54 53 3a 69 2c 56 41 4c 49 44 5f 44 41 54 45 5f 52 45 47 45 58 5f 46 4f 52 4d 41 54 53 3a 62 Data Ascii: -MM-YYYY","DD/MM/YYYY","YYYY-MM-DD","YYYY/MM/DD","MM-DD-YY","MM/DD/YY","DD-MM-YY","DD/MM/YY","YY-MM-DD","YY/MM/DD"];e.exports={EMAIL_REGEX:g,POSSIBLE_FEATURE_FIELDS:d,PII_KEY_ALIAS_TO_SHORT_CODE:c,SIGNALS_FBEVENTS_DATE_FORMATS:i,VALID_DATE_REGEX_FORMATS:b
2023-06-06 08:40:22 UTC	6598	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 74 28 7b 69 64 3a 62 2c 6b 65 79 77 6f 72 64 3a 61 2c 6e 61 6d 65 3a 64 2c 70 6c 61 63 65 68 6f 6c 64 65 72 3a 65 2c 76 61 6c 75 65 3a 66 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 76 28 61 29 7b 72 65 74 75 72 6e 20 61 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 6e 2e 74 65 73 74 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 76 61 72 20 62 3d 61 2e 76 61 6c 75 65 2c 63 3d 61 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 3b 61 3d 61 2e 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 3b 76 61 72 20 64 3d 6e 75 6c 6c 3b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 3f 64 3d 61 2e 76 61 6c 75 65 3a 61 20 69 6e 73 74 61 6e 63 65 Data Ascii: ){return t({id:b,keyword:a,name:d,placeholder:e,value:f})})}function v(a){return a!=null&&typeof a==="string"&&n.test(a)}function w(a){var b=a.value,c=a.parentElement;a=a.previousElementSibling;var d=null;a instanceof HTMLInputElement?d=a.value:a instance
2023-06-06 08:40:22 UTC	6600	IN	Data Raw: 21 3d 3d 22 22 26 26 72 28 71 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 62 2e 6d 61 74 63 68 28 53 74 72 69 6e 67 28 61 29 29 3b 72 65 74 75 72 6e 20 61 21 3d 6e 75 6c 6c 26 26 61 5b 30 5d 3d 3d 3d 62 7d 29 7c 7c 75 28 7b 69 64 3a 61 2c 6b 65 79 77 6f 72 64 73 3a 6f 2e 5a 49 50 5f 43 4f 44 45 2c 6e 61 6d 65 3a 63 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 61 29 7b 76 61 72 20 62 3d 61 2e 6e 61 6d 65 3b 61 3d 61 2e 69 64 3b 72 65 74 75 72 6e 20 75 28 7b 69 64 3a 61 2c 6b 65 79 77 6f 72 64 73 3a 6f 2e 52 45 53 54 52 49 43 54 45 44 2c 6e 61 6d 65 3a 62 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 47 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 74 72 69 6d 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 72 65 70 6c 61 63 65 28 2f 5b 5f 2d 5d 2f 67 2c 22 22 29 7d 66 75 Data Ascii: !==""&&r(q,function(a){a=b.match(String(a));return a!=null&&a[0]===b})\|\|u({id:a,keywords:o.ZIP_CODE,name:c})}function F(a){var b=a.name;a=a.id;return u({id:a,keywords:o.RESTRICTED,name:b})}function G(a){return a.trim().toLowerCase().replace(/[_-]/g,"")}fu
2023-06-06 08:40:22 UTC	6601	IN	Data Raw: 70 61 72 74 6e 65 72 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 31 3b 62 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 7b 76 61 72 20 63 3d 61 72 67 75 6d 65 6e 74 73 5b 62 5d 3b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 63 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 2c 64 29 Data Ascii: partnerintegrations",function(){return function(g,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=Object.assign\|\|function(a){for(var b=1;b<arguments.length;b++){var c=arguments[b];for(var d in c)Object.prototype.hasOwnProperty.call(c,d)
2023-06-06 08:40:22 UTC	6603	IN	Data Raw: 29 7b 64 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 63 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 76 61 72 20 64 3d 65 2e 6f 70 74 49 6e 73 2e 69 73 4f 70 74 65 64 49 6e 28 63 2c 22 41 75 74 6f 6d 61 74 69 63 4d 61 74 63 68 69 6e 67 22 29 2c 66 3d 65 2e 6f 70 74 49 6e 73 2e 69 73 4f 70 74 65 64 49 6e 28 63 2c 22 41 75 74 6f 6d 61 74 69 63 4d 61 74 63 68 69 6e 67 46 6f 72 50 61 72 74 6e 65 72 49 6e 74 65 67 72 61 74 69 6f 6e 73 22 29 3b 64 3d 64 26 26 66 3b 69 66 28 21 64 29 72 65 74 75 72 6e 3b 66 3d 65 2e 67 65 74 50 69 78 65 6c 28 63 29 3b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 64 3d 62 2e 67 65 74 28 66 2e 69 64 2c 22 61 75 74 6f 6d 61 74 69 63 4d 61 74 63 68 69 6e 67 22 29 3b 69 66 28 64 3d 3d 6e 75 6c 6c 29 72 Data Ascii: ){d.listen(function(c){if(c==null)return;var d=e.optIns.isOptedIn(c,"AutomaticMatching"),f=e.optIns.isOptedIn(c,"AutomaticMatchingForPartnerIntegrations");d=d&&f;if(!d)return;f=e.getPixel(c);if(f==null)return;d=b.get(f.id,"automaticMatching");if(d==null)r
2023-06-06 08:40:22 UTC	6604	IN	Data Raw: 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 28 62 29 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 62 5d 3d 61 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 73 68 61 32 35 36 5f 77 69 74 68 5f 64 65 70 65 6e 64 65 6e 63 69 65 73 5f 6e 65 77 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 66 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 Data Ascii: fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("sha256_with_dependencies_new",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict
2023-06-06 08:40:22 UTC	6606	IN	Data Raw: 32 38 32 30 33 30 32 34 31 31 2c 33 32 35 39 37 33 30 38 30 30 2c 33 33 34 35 37 36 34 37 37 31 2c 33 35 31 36 30 36 35 38 31 37 2c 33 36 30 30 33 35 32 38 30 34 2c 34 30 39 34 35 37 31 39 30 39 2c 32 37 35 34 32 33 33 34 34 2c 34 33 30 32 32 37 37 33 34 2c 35 30 36 39 34 38 36 31 36 2c 36 35 39 30 36 30 35 35 36 2c 38 38 33 39 39 37 38 37 37 2c 39 35 38 31 33 39 35 37 31 2c 31 33 32 32 38 32 32 32 31 38 2c 31 35 33 37 30 30 32 30 36 33 2c 31 37 34 37 38 37 33 37 37 39 2c 31 39 35 35 35 36 32 32 32 32 2c 32 30 32 34 31 30 34 38 31 35 2c 32 32 32 37 37 33 30 34 35 32 2c 32 33 36 31 38 35 32 34 32 34 2c 32 34 32 38 34 33 36 34 37 34 2c 32 37 35 36 37 33 34 31 38 37 2c 33 32 30 34 30 33 31 34 37 39 2c 33 33 32 39 33 32 35 32 39 38 5d 2c 6c 3d 6e 65 77 20 41 Data Ascii: 2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298],l=new A
2023-06-06 08:40:22 UTC	6607	IN	Data Raw: 6e 63 74 69 6f 6e 20 76 28 29 7b 76 61 72 20 61 3d 22 22 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 38 3b 62 2b 2b 29 66 6f 72 28 76 61 72 20 63 3d 32 38 3b 63 3e 3d 30 3b 63 2d 3d 34 29 61 2b 3d 70 2e 63 68 61 72 41 74 28 6c 5b 62 5d 3e 3e 3e 63 26 31 35 29 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 76 61 72 20 62 3d 30 3b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 38 3b 63 2b 2b 29 66 6f 72 28 76 61 72 20 64 3d 32 38 3b 64 3e 3d 30 3b 64 2d 3d 34 29 61 5b 62 2b 2b 5d 3d 70 2e 63 68 61 72 43 6f 64 65 41 74 28 6c 5b 63 5d 3e 3e 3e 64 26 31 35 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 61 2c 62 29 7b 72 28 29 3b 74 28 61 2c 61 2e 6c 65 6e 67 74 68 29 3b 75 28 29 3b 69 66 28 62 29 77 28 62 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 Data Ascii: nction v(){var a="";for(var b=0;b<8;b++)for(var c=28;c>=0;c-=4)a+=p.charAt(l[b]>>>c&15);return a}function w(a){var b=0;for(var c=0;c<8;c++)for(var d=28;d>=0;d-=4)a[b++]=p.charCodeAt(l[c]>>>d&15)}function x(a,b){r();t(a,a.length);u();if(b)w(b);else return
2023-06-06 08:40:22 UTC	6609	IN	Data Raw: 64 73 6f 75 72 63 65 73 22 29 3b 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 26 26 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 70 72 6f 68 69 62 69 74 65 64 73 6f 75 72 63 65 73 22 2c 65 2e 65 78 70 6f 72 74 73 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 70 72 6f 68 69 62 69 74 65 64 73 6f 75 72 63 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 29 7d 29 28 29 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 6c 6f 63 61 74 69 6f 6e 2c 68 69 73 74 6f 72 79 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 Data Ascii: dsources");f.registerPlugin&&f.registerPlugin("fbevents.plugins.prohibitedsources",e.exports);f.ensureModuleRegistered("fbevents.plugins.prohibitedsources",function(){return e.exports})})()})(window,document,location,history);(function(a,b,c,d){var e={ex
2023-06-06 08:40:22 UTC	6610	IN	Data Raw: 35 33 35 3f 62 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 32 32 34 7c 63 3e 3e 3e 31 32 26 31 35 2c 31 32 38 7c 63 3e 3e 3e 36 26 36 33 2c 31 32 38 7c 63 26 36 33 29 3a 63 3c 3d 32 30 39 37 31 35 31 26 26 28 62 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 32 34 30 7c 63 3e 3e 3e 31 38 26 37 2c 31 32 38 7c 63 3e 3e 3e 31 32 26 36 33 2c 31 32 38 7c 63 3e 3e 3e 36 26 36 33 2c 31 32 38 7c 63 26 36 33 29 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 62 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 3e 3e 3e 61 7c 62 3c 3c 33 32 2d 61 7d 66 75 6e 63 74 69 6f 6e 20 63 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 26 62 5e 7e 61 26 63 7d 66 75 6e 63 74 69 6f 6e 20 64 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e Data Ascii: 535?b+=String.fromCharCode(224\|c>>>12&15,128\|c>>>6&63,128\|c&63):c<=2097151&&(b+=String.fromCharCode(240\|c>>>18&7,128\|c>>>12&63,128\|c>>>6&63,128\|c&63));return b}function b(a,b){return b>>>a\|b<<32-a}function c(a,b,c){return a&b^~a&c}function d(a,b,c){return
2023-06-06 08:40:22 UTC	6612	IN	Data Raw: 6c 5b 36 5d 3d 35 32 38 37 33 34 36 33 35 2c 6c 5b 37 5d 3d 31 35 34 31 34 35 39 32 32 35 7d 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 76 61 72 20 61 3d 76 6f 69 64 20 30 2c 62 3d 76 6f 69 64 20 30 2c 65 3d 76 6f 69 64 20 30 2c 68 3d 76 6f 69 64 20 30 2c 69 3d 76 6f 69 64 20 30 2c 6d 3d 76 6f 69 64 20 30 2c 70 3d 76 6f 69 64 20 30 2c 72 3d 76 6f 69 64 20 30 2c 73 3d 76 6f 69 64 20 30 2c 74 3d 76 6f 69 64 20 30 3b 65 3d 6c 5b 30 5d 3b 68 3d 6c 5b 31 5d 3b 69 3d 6c 5b 32 5d 3b 6d 3d 6c 5b 33 5d 3b 70 3d 6c 5b 34 5d 3b 72 3d 6c 5b 35 5d 3b 73 3d 6c 5b 36 5d 3b 74 3d 6c 5b 37 5d 3b 66 6f 72 28 76 61 72 20 75 3d 30 3b 75 3c 31 36 3b 75 2b 2b 29 6f 5b 75 5d 3d 6e 5b 28 75 3c 3c 32 29 2b 33 5d 7c 6e 5b 28 75 3c 3c 32 29 2b 32 5d 3c 3c 38 7c 6e 5b 28 75 3c 3c 32 29 Data Ascii: l[6]=528734635,l[7]=1541459225}function s(){var a=void 0,b=void 0,e=void 0,h=void 0,i=void 0,m=void 0,p=void 0,r=void 0,s=void 0,t=void 0;e=l[0];h=l[1];i=l[2];m=l[3];p=l[4];r=l[5];s=l[6];t=l[7];for(var u=0;u<16;u++)o[u]=n[(u<<2)+3]\|n[(u<<2)+2]<<8\|n[(u<<2)
2023-06-06 08:40:22 UTC	6613	IN	Data Raw: 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 76 65 6e 74 73 22 29 3b 61 2e 63 6f 6e 66 69 67 4c 6f 61 64 65 64 3b 76 61 72 20 62 3d 61 2e 76 61 6c 69 64 61 74 65 43 75 73 74 6f 6d 50 61 72 61 6d 65 74 65 72 73 2c 63 3d 61 2e 76 61 6c 69 64 61 74 65 55 72 6c 50 61 72 61 6d 65 74 65 72 73 2c 64 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 43 6f 6e 66 69 67 53 74 6f 72 Data Ascii: {return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsEvents");a.configLoaded;var b=a.validateCustomParameters,c=a.validateUrlParameters,d=f.getFbeventsModules("SignalsFBEventsConfigStor
2023-06-06 08:40:22 UTC	6615	IN	Data Raw: 7b 64 2e 68 61 73 28 61 29 26 26 28 6b 3d 21 30 2c 65 2e 70 75 73 68 28 61 29 2c 64 2e 73 65 74 28 61 2c 22 5f 72 65 6d 6f 76 65 64 5f 22 29 29 7d 29 7d 7d 69 66 28 62 2e 73 65 6e 73 69 74 69 76 65 5f 6b 65 79 73 21 3d 6e 75 6c 6c 29 7b 67 3d 62 2e 73 65 6e 73 69 74 69 76 65 5f 6b 65 79 73 5b 63 5d 3b 69 66 28 67 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 68 3d 67 2e 75 72 6c 3b 64 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6a 28 68 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 28 62 29 3d 3d 3d 61 26 26 28 6b 3d 21 30 2c 66 2e 70 75 73 68 28 61 29 2c 64 2e 73 65 74 28 62 2c 22 5f 72 65 6d 6f 76 65 64 5f 22 29 29 7d 29 7d 29 7d 7d 61 2e 75 6e 77 61 6e 74 65 64 50 61 72 61 6d 73 3d 65 3b 61 2e 72 65 73 74 72 69 63 74 65 64 50 61 72 61 6d 73 Data Ascii: {d.has(a)&&(k=!0,e.push(a),d.set(a,"_removed_"))})}}if(b.sensitive_keys!=null){g=b.sensitive_keys[c];if(g!=null){var h=g.url;d.forEach(function(a,b){j(h,function(a){i(b)===a&&(k=!0,f.push(a),d.set(b,"_removed_"))})})}}a.unwantedParams=e;a.restrictedParams
2023-06-06 08:40:22 UTC	6616	IN	Data Raw: 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 29 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 3d 66 2e 5f 5f 66 62 65 76 Data Ascii: ode is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbev
2023-06-06 08:40:22 UTC	6617	IN	Data Raw: 29 26 26 28 66 2e 63 6f 6f 3d 6d 29 3b 6e 21 3d 3d 6e 75 6c 6c 26 26 28 66 2e 65 73 3d 6e 29 3b 62 21 3d 3d 6e 75 6c 6c 26 26 62 2e 72 65 66 65 72 72 65 72 21 3d 3d 6e 75 6c 6c 26 26 28 66 2e 72 65 66 65 72 72 65 72 5f 6c 69 6e 6b 3d 62 2e 72 65 66 65 72 72 65 72 29 3b 69 66 28 68 28 6a 29 29 69 66 28 6b 3d 3d 3d 22 31 22 26 26 6c 3d 3d 3d 22 31 30 30 30 22 29 72 65 74 75 72 6e 3b 65 6c 73 65 20 6b 3d 3d 3d 22 30 22 26 26 6c 3d 3d 3d 22 30 22 26 26 28 70 3d 21 30 29 3b 64 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 29 7b 61 3d 61 2e 6d 61 74 63 68 28 2f 5e 63 64 5c 5b 28 2e 2b 29 5c 5d 24 2f 29 3b 61 26 26 28 66 5b 61 5b 31 5d 5d 3d 62 29 7d 7d 29 3b 6d 3d 7b 70 63 6d 50 69 78 65 6c 50 6f 73 74 4d 65 73 73 61 67 65 45 76 65 6e Data Ascii: )&&(f.coo=m);n!==null&&(f.es=n);b!==null&&b.referrer!==null&&(f.referrer_link=b.referrer);if(h(j))if(k==="1"&&l==="1000")return;else k==="0"&&l==="0"&&(p=!0);d.each(function(a,b){if(a){a=a.match(/^cd\[(.+)\]$/);a&&(f[a[1]]=b)}});m={pcmPixelPostMessageEven
2023-06-06 08:40:22 UTC	6619	IN	Data Raw: 65 6f 66 20 62 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 62 26 26 62 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 61 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 3b 62 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 Data Ascii: eof b);a.prototype=Object.create(b&&b.prototype,{constructor:{value:a,enumerable:!1,writable:!0,configurable:!0}});b&&(Object.setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules
2023-06-06 08:40:22 UTC	6620	IN	Data Raw: 72 65 66 2c 64 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 21 3d 3d 76 6f 69 64 20 30 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 6e 75 6c 6c 2c 65 3d 6c 28 63 2c 71 29 3b 65 3d 3d 3d 6e 75 6c 6c 26 26 28 65 3d 6c 28 62 2e 72 65 66 65 72 72 65 72 2c 71 29 29 3b 65 3d 3d 3d 6e 75 6c 6c 26 26 28 65 3d 64 29 3b 69 66 28 65 21 3d 6e 75 6c 6c 26 26 65 2e 6c 65 6e 67 74 68 3e 35 30 30 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 66 3d 6e 28 72 29 3b 69 66 28 65 21 3d 6e 75 6c 6c 29 7b 69 66 28 21 66 29 72 65 74 75 72 6e 20 6f 28 72 2c 65 29 3b 66 2e 6d 61 79 62 65 55 70 64 61 74 65 50 61 79 6c 6f 61 64 28 65 29 3b 72 65 74 75 72 6e 20 70 28 72 2c 66 29 7d 65 6c 73 65 20 69 66 28 66 29 72 65 74 75 72 6e Data Ascii: ref,d=arguments.length>1&&arguments[1]!==void 0?arguments[1]:null,e=l(c,q);e===null&&(e=l(b.referrer,q));e===null&&(e=d);if(e!=null&&e.length>500)return null;var f=n(r);if(e!=null){if(!f)return o(r,e);f.maybeUpdatePayload(e);return p(r,f)}else if(f)return
2023-06-06 08:40:22 UTC	6622	IN	Data Raw: 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 2c 69 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 29 72 65 74 75 72 6e 21 31 3b 61 3d 61 2e 6d 61 74 63 68 28 2f 5e 28 2e 2a 5c 2e 29 2a 28 66 61 63 65 62 6f 6f 6b 5c 2e 63 6f 6d 7c 69 6e 74 65 72 6e 61 6c 66 62 5c 2e 63 6f 6d 7c 77 6f 72 6b 70 6c 61 63 65 5c 2e 63 6f 6d 7c 69 6e 73 74 61 67 72 61 6d 5c 2e 63 6f 6d 7c 6f 63 75 6c 75 73 5c 2e 63 6f 6d 7c 6e 6f 76 69 5c 2e 63 6f 6d 29 5c 2e 3f 24 2f 69 29 3b 72 65 74 75 72 6e 20 61 21 3d 3d 6e 75 6c 6c Data Ascii: urn function(f,g,h,i){var e={exports:{}};e.exports;(function(){"use strict";e.exports=function(a){if(typeof a!=="string")return!1;a=a.match(/^(.\.)(facebook\.com\|internalfb\.com\|workplace\.com\|instagram\.com\|oculus\.com\|novi\.com)\.?$/i);return a!==null
2023-06-06 08:40:22 UTC	6622	IN	Data Raw: 6f 6c 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 22 68 74 74 70 22 2e 6c 65 6e 67 74 68 29 21 3d 3d 22 68 74 74 70 22 7c 7c 61 28 67 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 29 7c 7c 64 2e 64 69 73 61 62 6c 65 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 73 7c 7c 64 2e 67 65 74 4f 70 74 65 64 49 6e 50 69 78 65 6c 73 28 62 29 2e 69 6e 64 65 78 4f 66 28 63 29 3d 3d 3d 2d 31 7d 7d 29 28 29 3b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 62 72 6f 77 73 65 72 70 72 6f 70 65 72 74 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 Data Ascii: ol.substring(0,"http".length)!=="http"\|\|a(g.location.hostname)\|\|d.disableFirstPartyCookies\|\|d.getOptedInPixels(b).indexOf(c)===-1}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.browserproperties",function(){return func
2023-06-06 08:40:22 UTC	6624	IN	Data Raw: 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 69 66 28 74 79 70 65 6f 66 20 50 72 6f 6d 69 73 65 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 7c 7c 50 72 6f 6d 69 73 65 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 22 5b 6e 61 74 69 76 65 20 63 6f 64 65 5d 22 29 3d 3d 3d 2d 31 29 72 65 74 75 72 6e 3b 62 3d 67 2e 77 65 62 6b 69 74 21 3d 6e 75 6c 6c 26 26 67 2e 77 65 62 6b 69 74 2e 6d 65 73 73 61 67 65 48 61 6e 64 6c 65 72 73 21 3d 6e 75 6c 6c 26 26 67 2e 77 65 62 6b 69 74 2e 6d 65 73 73 61 67 65 48 61 6e 64 6c 65 72 73 2e 62 72 6f 77 73 65 72 50 72 6f 70 65 72 74 69 65 73 21 3d 6e 75 6c 6c 3b 76 61 72 20 6b 3d 69 28 33 39 37 2c 32 36 34 29 26 26 74 79 70 65 6f 66 20 67 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 Data Ascii: null)return;if(typeof Promise==="undefined"\|\|Promise.toString().indexOf("[native code]")===-1)return;b=g.webkit!=null&&g.webkit.messageHandlers!=null&&g.webkit.messageHandlers.browserProperties!=null;var k=i(397,264)&&typeof g.XMLHttpRequest!=="undefined"
2023-06-06 08:40:22 UTC	6625	IN	Data Raw: 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 62 72 6f 77 73 65 72 70 72 6f 70 65 72 74 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 29 7d 29 28 29 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 6c 6f 63 61 74 69 6f 6e 2c 68 69 73 74 6f 72 79 29 3b 0a 66 62 71 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 28 22 31 35 33 31 30 32 31 33 34 30 34 30 32 30 39 39 22 2c 20 7b 5f 5f 66 62 45 76 65 6e 74 73 50 6c 75 67 69 6e 3a 20 31 2c 20 70 6c 75 67 69 6e 3a 20 66 75 6e 63 74 69 6f 6e 28 66 62 71 2c 20 69 6e 73 74 61 6e 63 65 2c 20 63 6f 6e 66 69 67 29 20 7b 20 66 62 71 2e 6c 6f 61 64 50 6c 75 67 69 6e 28 22 69 6e 66 65 72 72 Data Ascii: nsureModuleRegistered("fbevents.plugins.browserproperties",function(){return e.exports})})()})(window,document,location,history);fbq.registerPlugin("1531021340402099", {__fbEventsPlugin: 1, plugin: function(fbq, instance, config) { fbq.loadPlugin("inferr
2023-06-06 08:40:22 UTC	6627	IN	Data Raw: 3a 7b 7d 7d 29 3b 0a 66 62 71 2e 6c 6f 61 64 50 6c 75 67 69 6e 28 22 75 6e 77 61 6e 74 65 64 64 61 74 61 22 29 3b 0a 69 6e 73 74 61 6e 63 65 2e 6f 70 74 49 6e 28 22 31 35 33 31 30 32 31 33 34 30 34 30 32 30 39 39 22 2c 20 22 55 6e 77 61 6e 74 65 64 44 61 74 61 22 2c 20 74 72 75 65 29 3b 0a 66 62 71 2e 6c 6f 61 64 50 6c 75 67 69 6e 28 22 69 61 62 70 63 6d 61 65 62 72 69 64 67 65 22 29 3b 0a 69 6e 73 74 61 6e 63 65 2e 6f 70 74 49 6e 28 22 31 35 33 31 30 32 31 33 34 30 34 30 32 30 39 39 22 2c 20 22 49 41 42 50 43 4d 41 45 42 72 69 64 67 65 22 2c 20 74 72 75 65 29 3b 0a 63 6f 6e 66 69 67 2e 73 65 74 28 22 31 35 33 31 30 32 31 33 34 30 34 30 32 30 39 39 22 2c 20 22 62 72 6f 77 73 65 72 50 72 6f 70 65 72 74 69 65 73 22 2c 20 7b 22 64 65 6c 61 79 49 6e 4d 73 22 Data Ascii: :{}});fbq.loadPlugin("unwanteddata");instance.optIn("1531021340402099", "UnwantedData", true);fbq.loadPlugin("iabpcmaebridge");instance.optIn("1531021340402099", "IABPCMAEBridge", true);config.set("1531021340402099", "browserProperties", {"delayInMs"

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
251	192.168.2.4	50171	18.159.165.110	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:22 UTC	6319	OUT	GET /vdata/i.gif?tealium_cookie_sync=true&tealium_vid=01888fdcaa1f00511f81618bb8280006f002206700918hsbcuk-cmb&tealium_account=hsbc&tealium_profile=uk-cmb&tealium_datasource=qvl078&google_gid=CAESEKCZEbzwFPkcrhvt-Q-TlKk&google_cver=1 HTTP/1.1 Host: datacloud.tealiumiq.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TAPID=hsbc/uk-cmb>01888fdcaa1f00511f81618bb8280006f002206700918\|; tcs.google_gid=eyJoc2JjL3VrLWNtYiI6IkNBRVNFS0NaRWJ6d0ZQa2NyaHZ0LVEtVGxLa3wxNjg2MDQwODIxODI5In0=; tcs.google_cver=eyJoc2JjL3VrLWNtYiI6IjF8MTY4NjA0MDgyMTgyOSJ9
2023-06-06 08:40:22 UTC	6322	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:40:22 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-acc: hsbc:uk-cmb:2:vdata X-did: 01888fdcaa1f00511f81618bb8280006f002206700918hsbcuk-cmb X-Region: eu-central-1 X-ServerID: uconnect_i-062b2c09dcd69f6ed Pragma: no-cache P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR ADM DEV OUR BUS" Cache-Control: no-transform,private,no-cache,no-store,max-age=0,s-maxage=0 X-tid: 01888fdcaa1f00511f81618bb8280006f002206700918 X-ULVer: 018752aa776d74895d87a1c24d937d42b559f87e-SNAPSHOT Vary: Origin Expires: Tue, 06 Jun 2023 08:40:22 GMT X-UUID: 83b58bff-689a-4bea-bf3d-035ef86cacc7 Set-Cookie: tcs.google_gid=eyJoc2JjL3VrLWNtYiI6IkNBRVNFS0NaRWJ6d0ZQa2NyaHZ0LVEtVGxLa3wxNjg2MDQwODIyNjkyIn0=; Path=/; Domain=.tealiumiq.com; Expires=Tue, 05-Dec-2023 08:40:22 GMT; Max-Age=15724800; Secure; HttpOnly; SameSite=None Set-Cookie: tcs.google_cver=eyJoc2JjL3VrLWNtYiI6IjF8MTY4NjA0MDgyMjY5MiJ9; Path=/; Domain=.tealiumiq.com; Expires=Tue, 05-Dec-2023 08:40:22 GMT; Max-Age=15724800; Secure; HttpOnly; SameSite=None Set-Cookie: TAPID=hsbc/uk-cmb>01888fdcaa1f00511f81618bb8280006f002206700918\|; Path=/; Domain=.tealiumiq.com; Expires=Wed, 05-Jun-2024 08:40:22 GMT; Max-Age=31536000; Secure; HttpOnly; SameSite=None
2023-06-06 08:40:22 UTC	6323	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
252	192.168.2.4	50164	63.140.62.160	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:22 UTC	6320	OUT	GET /b/ss/hsbc-cmb-uk,hsbc-cmb-rollup/1/JS-2.22.3/s41061724382589?AQB=1&ndh=1&pf=1&t=6%2F5%2F2023%2010%3A40%3A48%202%20-120&sdid=0067F0708B951120-2759B85EE3002AB0&mid=32901345357897319322582280331317906370&aamlh=6&ce=UTF-8&ns=hsbcbankglobal&cdp=2&cl=64454400&pageName=pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage&g=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&cc=USD&ch=pws%20home&server=www.business.hsbc.uk&events=event5&aamb=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&v1=pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage&c2=pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage&v2=pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage&c3=pws%20home&v3=www.business.hsbc.uk%2Fen-gb&v4=pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage&c5=pws%20home&v5=CMB&c6=hsbc-cmb-uk%2Chsbc-cmb-rollup&v6=Business&c7=10%3A40%20AM%7CTuesday&v7=pws%20home&v8=pws%20home&v9=na%20%3A%20unsegmented%20%3A%20no%20segment%20%3A%20na&v10=HSBC&v11=Europe&v12=en-GB&c13=Accept%20All&v13=United%20Kingdom&v14=Web&v15=10%3A40%20AM%7CTuesday&v16=hsbc-cmb-uk%2Chsbc-cmb-rollup&c17=uk-cmb&v17=uk-cmb&v98=Full%20Consent&v99=Accept%20All&v100=430785c2-f631-4694-8789-21d518ee92f7&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=913&mcorgid=8BB4398F57FF7F980A495E57%40AdobeOrg&AQE=1 HTTP/1.1 Host: hsbcglobalcmb.sc.omtrdc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:22 UTC	6386	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Tue, 06 Jun 2023 08:40:22 GMT expires: Mon, 05 Jun 2023 08:40:22 GMT last-modified: Wed, 07 Jun 2023 08:40:22 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag etag: 3620745095576190976-4619337467250342681 vary: * content-type: image/gif;charset=utf-8 content-length: 43 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2023-06-06 08:40:22 UTC	6387	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
253	192.168.2.4	50175	142.250.203.100	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:22 UTC	6339	OUT	GET /pagead/1p-user-list/951694704/?random=1686040849721&cv=11&fst=1686038400000&bg=ffffff&guid=ON&async=1&gtm=45be35v0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&frm=0&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=1919935567&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:22 UTC	6568	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-06-06 08:40:22 UTC	6568	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
254	192.168.2.4	50180	54.81.54.200	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:22 UTC	6627	OUT	GET /sync/ HTTP/1.1 Host: hw0ebfaguc.d41.co Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:23 UTC	6641	IN	HTTP/1.1 500 Internal Server Error Content-Type: text/plain; charset=utf-8 Date: Tue, 06 Jun 2023 08:40:23 GMT Content-Length: 21 Connection: Close
2023-06-06 08:40:23 UTC	6641	IN	Data Raw: 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 Data Ascii: Internal Server Error

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
255	192.168.2.4	50188	172.217.168.67	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:22 UTC	6628	OUT	GET /pagead/1p-user-list/951694704/?random=1686040849230&cv=9&fst=1686038400000&num=1&guid=ON&eid=466465926%2C512247839&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=120&u_java=false&u_nplug=0&u_nmime=0&sendb=1&frm=0&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&async=1&fmt=3&is_vtc=1&random=208862709&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1 Host: www.google.ch Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:22 UTC	6630	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-06-06 08:40:22 UTC	6631	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
256	192.168.2.4	50187	172.217.168.67	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:22 UTC	6629	OUT	GET /pagead/1p-user-list/951694704/?random=1686040849683&cv=11&fst=1686038400000&bg=ffffff&guid=ON&async=1&gtm=45be35v0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&frm=0&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=1061625469&rmt_tld=1&ipr=y HTTP/1.1 Host: www.google.ch Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:22 UTC	6632	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-06-06 08:40:22 UTC	6632	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
257	192.168.2.4	50181	172.217.168.67	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:22 UTC	6631	OUT	GET /pagead/1p-user-list/951694704/?random=1686040849721&cv=11&fst=1686038400000&bg=ffffff&guid=ON&async=1&gtm=45be35v0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&frm=0&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=1919935567&rmt_tld=1&ipr=y HTTP/1.1 Host: www.google.ch Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:22 UTC	6633	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-06-06 08:40:22 UTC	6634	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
258	192.168.2.4	50176	142.250.203.100	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:22 UTC	6632	OUT	GET /pagead/1p-user-list/951694704/?random=1686040849738&cv=11&fst=1686038400000&bg=ffffff&guid=ON&async=1&gtm=45be35v0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&frm=0&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=1140720310&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:22 UTC	6635	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-06-06 08:40:22 UTC	6635	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
259	192.168.2.4	50184	172.217.168.67	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:22 UTC	6634	OUT	GET /pagead/1p-user-list/951694704/?random=1686040849721&cv=11&fst=1686038400000&bg=ffffff&guid=ON&async=1&gtm=45be35v0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&frm=0&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=1919935567&rmt_tld=1&ipr=y HTTP/1.1 Host: www.google.ch Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:23 UTC	6636	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-06-06 08:40:23 UTC	6637	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
26	192.168.2.4	49723	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:20 UTC	357	OUT	GET /front_end/front_end_files/terms.css HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hs-login.online/front_end/front_end_files/ursula.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:20 UTC	368	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:20 GMT Content-Type: text/css Content-Length: 1389 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:48 GMT ETag: "56d-5fd65436febdf" Accept-Ranges: bytes Vary: Accept-Encoding
2023-06-06 08:38:20 UTC	369	IN	Data Raw: 2e 75 72 73 75 6c 61 20 2e 74 65 72 6d 73 43 6f 6e 74 61 69 6e 65 72 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 30 66 30 66 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 33 36 70 78 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 7d 0a 0a 2e 75 72 73 75 6c 61 20 2e 74 65 72 6d 73 43 6f 6e 74 61 69 6e 65 72 20 68 33 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 36 65 6d 3b 20 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 34 70 78 3b 0a 7d 0a 0a 2e 75 72 73 75 6c 61 20 2e 74 65 72 6d 73 43 6f 6e 74 65 6e 74 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 66 66 66 3b 0a 09 70 61 64 64 69 6e 67 3a 20 31 38 70 78 20 32 34 70 Data Ascii: .ursula .termsContainer{background: #f0f0f0;padding: 36px;overflow:hidden;margin-bottom:20px;height: 100%;}.ursula .termsContainer h3{font-size:1.6em; margin-bottom: 14px;}.ursula .termsContent{background: #ffffff;padding: 18px 24p

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
260	192.168.2.4	50186	172.217.168.67	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:23 UTC	6635	OUT	GET /pagead/1p-user-list/951694704/?random=1686040849738&cv=11&fst=1686038400000&bg=ffffff&guid=ON&async=1&gtm=45be35v0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&frm=0&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=1140720310&rmt_tld=1&ipr=y HTTP/1.1 Host: www.google.ch Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:23 UTC	6638	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-06-06 08:40:23 UTC	6638	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
261	192.168.2.4	50189	142.250.203.100	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:23 UTC	6637	OUT	GET /pagead/1p-user-list/951694704/?random=1686040849721&cv=11&fst=1686038400000&bg=ffffff&guid=ON&async=1&gtm=45be35v0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&frm=0&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=1919935567&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:23 UTC	6638	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-06-06 08:40:23 UTC	6639	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
262	192.168.2.4	50191	172.217.168.67	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:23 UTC	6639	OUT	GET /pagead/1p-user-list/951694704/?random=1686040849738&cv=11&fst=1686038400000&bg=ffffff&guid=ON&async=1&gtm=45be35v0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&frm=0&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=1140720310&rmt_tld=1&ipr=y HTTP/1.1 Host: www.google.ch Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:23 UTC	6640	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-06-06 08:40:23 UTC	6640	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
263	192.168.2.4	50197	172.217.168.67	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:23 UTC	6640	OUT	GET /pagead/1p-user-list/1052819166/?random=1686040850364&cv=11&fst=1686038400000&bg=ffffff&guid=ON&async=1&gtm=45be35v0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&frm=0&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&userId=2100526a57c4d947f739b437aeb10732abf660c73cf56e50d1ba58d5e3e0ba6a&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=416094534&rmt_tld=1&ipr=y HTTP/1.1 Host: www.google.ch Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:23 UTC	6644	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-06-06 08:40:23 UTC	6645	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
264	192.168.2.4	50195	142.250.203.100	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:23 UTC	6641	OUT	GET /pagead/1p-user-list/951694704/?random=1686040849738&cv=11&fst=1686038400000&bg=ffffff&guid=ON&async=1&gtm=45be35v0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&frm=0&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=1140720310&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:23 UTC	6646	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-06-06 08:40:23 UTC	6646	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
265	192.168.2.4	50193	142.250.203.100	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:23 UTC	6642	OUT	GET /pagead/1p-user-list/1052819166/?random=1686040850364&cv=11&fst=1686038400000&bg=ffffff&guid=ON&async=1&gtm=45be35v0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&frm=0&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&userId=2100526a57c4d947f739b437aeb10732abf660c73cf56e50d1ba58d5e3e0ba6a&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=416094534&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:23 UTC	6648	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-06-06 08:40:23 UTC	6648	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
266	192.168.2.4	50196	142.250.203.100	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:23 UTC	6643	OUT	GET /pagead/1p-user-list/1052819166/?random=1686040850390&cv=11&fst=1686038400000&bg=ffffff&guid=ON&async=1&gtm=45be35v0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&frm=0&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&userId=2100526a57c4d947f739b437aeb10732abf660c73cf56e50d1ba58d5e3e0ba6a&data=event%3Dpage_view&fmt=3&is_vtc=1&random=2701768850&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:23 UTC	6648	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-06-06 08:40:23 UTC	6649	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
267	192.168.2.4	50185	172.217.168.67	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:23 UTC	6645	OUT	GET /pagead/1p-user-list/1052819166/?random=1686040850364&cv=11&fst=1686038400000&bg=ffffff&guid=ON&async=1&gtm=45be35v0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&frm=0&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&userId=2100526a57c4d947f739b437aeb10732abf660c73cf56e50d1ba58d5e3e0ba6a&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=416094534&rmt_tld=1&ipr=y HTTP/1.1 Host: www.google.ch Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:23 UTC	6650	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-06-06 08:40:23 UTC	6650	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
268	192.168.2.4	50192	172.217.168.67	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:23 UTC	6646	OUT	GET /pagead/1p-user-list/1052819166/?random=1686040850390&cv=11&fst=1686038400000&bg=ffffff&guid=ON&async=1&gtm=45be35v0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&frm=0&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&userId=2100526a57c4d947f739b437aeb10732abf660c73cf56e50d1ba58d5e3e0ba6a&data=event%3Dpage_view&fmt=3&is_vtc=1&random=2701768850&rmt_tld=1&ipr=y HTTP/1.1 Host: www.google.ch Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:23 UTC	6650	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-06-06 08:40:23 UTC	6651	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
269	192.168.2.4	50202	142.250.203.100	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:23 UTC	6649	OUT	GET /pagead/1p-user-list/1052819166/?random=1686040850364&cv=11&fst=1686038400000&bg=ffffff&guid=ON&async=1&gtm=45be35v0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&frm=0&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&userId=2100526a57c4d947f739b437aeb10732abf660c73cf56e50d1ba58d5e3e0ba6a&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=416094534&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:23 UTC	6651	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-06-06 08:40:23 UTC	6651	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
27	192.168.2.4	49722	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:20 UTC	358	OUT	GET /front_end/front_end_files/tooltip.css HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hs-login.online/front_end/front_end_files/ursula.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:20 UTC	366	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:20 GMT Content-Type: text/css Content-Length: 1947 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:48 GMT ETag: "79b-5fd6543722dff" Accept-Ranges: bytes Vary: Accept-Encoding
2023-06-06 08:38:20 UTC	366	IN	Data Raw: 2e 75 72 73 75 6c 61 20 2e 74 6f 6f 6c 74 69 70 54 72 69 67 67 65 72 20 7b 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 20 20 66 6c 6f 61 74 3a 6c 65 66 74 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 37 70 78 3b 0a 7d 0a 2e 75 72 73 75 6c 61 20 2e 64 69 6a 69 74 54 6f 6f 6c 74 69 70 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 32 30 30 30 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 74 6f 70 3a 20 2d 31 30 30 30 30 70 78 3b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 76 69 73 69 62 6c 65 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 3b 0a 20 20 20 20 Data Ascii: .ursula .tooltipTrigger { cursor: pointer; float:left; padding-top: 7px;}.ursula .dijitTooltip { position: absolute; z-index: 2000; display: block; left: 0; top: -10000px; overflow: visible; background: #fff;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
270	192.168.2.4	50183	63.140.62.160	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:23 UTC	6651	OUT	GET /b/ss/hsbc-cmb-uk,hsbc-cmb-rollup/1/JS-2.22.3/s46119624449390?AQB=1&ndh=1&pf=1&t=6%2F5%2F2023%2010%3A40%3A48%202%20-120&sdid=72189A4EF18BC021-4570D7A70FF096F5&mid=32901345357897319322582280331317906370&aamlh=6&ce=UTF-8&ns=hsbcbankglobal&cdp=2&cl=64454400&g=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&cc=USD&server=www.business.hsbc.uk&events=event27&v3=www.business.hsbc.uk%2Fen-gb&v5=CMB&c6=hsbc-cmb-uk%2Chsbc-cmb-rollup&v6=Business&c7=10%3A40%20AM%7CTuesday&v10=HSBC&v11=Europe&c13=pws%3A%20virtual%20assistant%3A%20need%20help%20popup%20displayed&v13=United%20Kingdom&v14=Web&v15=10%3A40%20AM%7CTuesday&v16=hsbc-cmb-uk%2Chsbc-cmb-rollup&c17=uk-cmb&v17=uk-cmb&v96=content&v98=popup&v99=pws%3A%20virtual%20assistant%3A%20need%20help%20popup%20displayed&pe=lnk_o&pev2=content%7Cpopup%7Cpws%3A%20virtual%20assistant%3A%20need%20help%20popup%20displayed&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=913&mcorgid=8BB4398F57FF7F980A495E57%40AdobeOrg&AQE=1 HTTP/1.1 Host: hsbcglobalcmb.sc.omtrdc.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:23 UTC	6657	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Tue, 06 Jun 2023 08:40:23 GMT expires: Mon, 05 Jun 2023 08:40:23 GMT last-modified: Wed, 07 Jun 2023 08:40:23 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag etag: 3620745098626629632-4619797714591206746 vary: * content-type: image/gif;charset=utf-8 content-length: 43 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2023-06-06 08:40:23 UTC	6658	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
271	192.168.2.4	50190	142.250.203.100	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:23 UTC	6653	OUT	GET /pagead/1p-user-list/1052819166/?random=1686040850390&cv=11&fst=1686038400000&bg=ffffff&guid=ON&async=1&gtm=45be35v0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&frm=0&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&userId=2100526a57c4d947f739b437aeb10732abf660c73cf56e50d1ba58d5e3e0ba6a&data=event%3Dpage_view&fmt=3&is_vtc=1&random=2701768850&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:23 UTC	6656	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-06-06 08:40:23 UTC	6656	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
272	192.168.2.4	50194	157.240.9.35	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:23 UTC	6654	OUT	GET /tr/?id=1531021340402099&ev=PageView&dl=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&rl=&if=false&ts=1686040851636&sw=1280&sh=1024&v=2.9.106&r=stable&a=tmtealium&ec=0&o=30&fbp=fb.1.1686040851634.1079581730&it=1686040850524&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:23 UTC	6659	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains Cross-Origin-Resource-Policy: cross-origin Server: proxygen-bolt Alt-Svc: h3=":443"; ma=86400 Date: Tue, 06 Jun 2023 08:40:23 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
273	192.168.2.4	50208	142.250.203.100	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:23 UTC	6655	OUT	GET /pagead/1p-user-list/1052819166/?random=1686040850406&cv=11&fst=1686038400000&bg=ffffff&guid=ON&async=1&gtm=45be35v0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&frm=0&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&userId=2100526a57c4d947f739b437aeb10732abf660c73cf56e50d1ba58d5e3e0ba6a&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=4185613357&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:23 UTC	6660	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-06-06 08:40:23 UTC	6660	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
274	192.168.2.4	50201	172.217.168.67	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:23 UTC	6656	OUT	GET /pagead/1p-user-list/1052819166/?random=1686040850390&cv=11&fst=1686038400000&bg=ffffff&guid=ON&async=1&gtm=45be35v0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&frm=0&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&userId=2100526a57c4d947f739b437aeb10732abf660c73cf56e50d1ba58d5e3e0ba6a&data=event%3Dpage_view&fmt=3&is_vtc=1&random=2701768850&rmt_tld=1&ipr=y HTTP/1.1 Host: www.google.ch Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:23 UTC	6659	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-06-06 08:40:23 UTC	6660	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
275	192.168.2.4	50204	172.217.168.67	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:23 UTC	6658	OUT	GET /pagead/1p-user-list/1052819166/?random=1686040850406&cv=11&fst=1686038400000&bg=ffffff&guid=ON&async=1&gtm=45be35v0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&frm=0&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&userId=2100526a57c4d947f739b437aeb10732abf660c73cf56e50d1ba58d5e3e0ba6a&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=4185613357&rmt_tld=1&ipr=y HTTP/1.1 Host: www.google.ch Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:23 UTC	6660	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-06-06 08:40:23 UTC	6661	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
276	192.168.2.4	50199	142.250.203.100	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:23 UTC	6661	OUT	GET /pagead/1p-user-list/1052819166/?random=1686040850406&cv=11&fst=1686038400000&bg=ffffff&guid=ON&async=1&gtm=45be35v0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&frm=0&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&userId=2100526a57c4d947f739b437aeb10732abf660c73cf56e50d1ba58d5e3e0ba6a&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=4185613357&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:23 UTC	6662	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-06-06 08:40:23 UTC	6662	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
277	192.168.2.4	50200	172.217.168.67	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:23 UTC	6662	OUT	GET /pagead/1p-user-list/1052819166/?random=1686040850406&cv=11&fst=1686038400000&bg=ffffff&guid=ON&async=1&gtm=45be35v0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&frm=0&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&userId=2100526a57c4d947f739b437aeb10732abf660c73cf56e50d1ba58d5e3e0ba6a&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=4185613357&rmt_tld=1&ipr=y HTTP/1.1 Host: www.google.ch Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:23 UTC	6666	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-06-06 08:40:23 UTC	6667	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
278	192.168.2.4	50205	172.217.168.67	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:23 UTC	6663	OUT	GET /pagead/1p-user-list/1052819166/?random=1686040850417&cv=11&fst=1686038400000&bg=ffffff&guid=ON&async=1&gtm=45be35v0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&frm=0&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&userId=2100526a57c4d947f739b437aeb10732abf660c73cf56e50d1ba58d5e3e0ba6a&data=event%3Dpage_view&fmt=3&is_vtc=1&random=2665574217&rmt_tld=1&ipr=y HTTP/1.1 Host: www.google.ch Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:23 UTC	6668	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-06-06 08:40:23 UTC	6668	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
279	192.168.2.4	50207	142.250.203.100	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:23 UTC	6664	OUT	GET /pagead/1p-user-list/1052819166/?random=1686040850417&cv=11&fst=1686038400000&bg=ffffff&guid=ON&async=1&gtm=45be35v0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&frm=0&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&userId=2100526a57c4d947f739b437aeb10732abf660c73cf56e50d1ba58d5e3e0ba6a&data=event%3Dpage_view&fmt=3&is_vtc=1&random=2665574217&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:23 UTC	6668	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-06-06 08:40:23 UTC	6669	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
28	192.168.2.4	49724	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:20 UTC	359	OUT	GET /front_end/front_end_files/common.css HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hs-login.online/front_end/front_end_files/ursula.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:21 UTC	370	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:20 GMT Content-Type: text/css Content-Length: 12928 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:38 GMT ETag: "3280-5fd6542ddfc69" Accept-Ranges: bytes Vary: Accept-Encoding
2023-06-06 08:38:21 UTC	370	IN	Data Raw: 2e 75 72 73 75 6c 61 20 2e 71 75 65 73 74 69 6f 6e 20 2e 63 72 65 64 45 78 70 32 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 39 70 78 3b 0a 7d 0a 2e 75 72 73 75 6c 61 20 2e 71 75 65 73 74 69 6f 6e 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 38 70 78 3b 0a 7d 0a 0a 2e 75 72 73 75 6c 61 2e 63 72 65 64 45 78 70 32 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 39 70 78 3b 0a 7d 0a 2e 75 72 73 75 6c 61 20 2e 71 75 65 73 74 69 6f 6e 31 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 38 70 78 3b 0a 7d 0a 2e 75 72 73 75 6c 61 20 2e 71 75 65 73 74 69 6f 6e 47 72 6f 75 70 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 32 30 70 78 3b 0a 20 20 20 20 70 61 64 64 69 Data Ascii: .ursula .question .credExp2{ padding-bottom: 19px;}.ursula .question { padding-bottom: 8px;}.ursula.credExp2{ padding-bottom: 19px;}.ursula .question1 { padding-bottom: 8px;}.ursula .questionGroup{ padding-top: 20px; paddi

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
280	192.168.2.4	50206	142.250.203.100	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:23 UTC	6665	OUT	GET /pagead/1p-user-list/1052819166/?random=1686040850433&cv=11&fst=1686038400000&bg=ffffff&guid=ON&async=1&gtm=45be35v0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&frm=0&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&userId=2100526a57c4d947f739b437aeb10732abf660c73cf56e50d1ba58d5e3e0ba6a&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2720731033&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:23 UTC	6671	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-06-06 08:40:23 UTC	6671	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
281	192.168.2.4	50211	157.240.9.35	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:23 UTC	6667	OUT	GET /tr/?id=1531021340402099&ev=PageView&dl=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&rl=&if=false&ts=1686040851636&sw=1280&sh=1024&v=2.9.106&r=stable&a=tmtealium&ec=0&o=30&fbp=fb.1.1686040851634.1079581730&it=1686040850524&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:23 UTC	6671	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains Cross-Origin-Resource-Policy: cross-origin Server: proxygen-bolt Alt-Svc: h3=":443"; ma=86400 Date: Tue, 06 Jun 2023 08:40:23 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
282	192.168.2.4	50210	157.240.9.35	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:23 UTC	6669	OUT	GET /tr/?id=1531021340402099&ev=Microdata&dl=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&rl=&if=false&ts=1686040852157&cd[DataLayer]=%5B%5D&cd[Meta]=%7B%22title%22%3A%22Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC%22%2C%22meta%3Adescription%22%3A%22Welcome%20to%20HSBC%20Business%20Banking%3A%20Switch%20to%20us%20for%20our%20award-winning%20service%2C%20local%20business%20banking%20support%20and%20international%20expertise.%22%7D&cd[OpenGraph]=%7B%22og%3Atitle%22%3A%22Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC%22%2C%22og%3Aurl%22%3A%22%2Fen-gb%2F%22%2C%22og%3Aimage%22%3A%22%2F-%2Fmedia%2Fmedia%2Fuk%2Fimages%2Fhomepage%2F3-ways-your-business-can-go-green-in-2021-banner.jpg%3Fh%3D693%26iar%3D0%26w%3D1440%26hash%3D49034828B0825FF3B949307B8D3BCEA1%22%2C%22og%3Adescription%22%3A%22Welcome%20to%20HSBC%20Business%20Banking%3A%20Switch%20to%20us%20for%20our%20award-winning%20service%2C%20local%20business%20banking%20support%20and%20international%20expertise.%22%7D&cd[Schema.org]=%5B%5D&cd[JSON-LD]=%5B%5D&sw=1280&sh=1024&v=2.9.106&r=stable&a=tmtealium&ec=1&o=30&fbp=fb.1.1686040851634.1079581730&it=1686040850524&coo=false&es=automatic&tm=3&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:23 UTC	6674	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains Cross-Origin-Resource-Policy: cross-origin Server: proxygen-bolt Alt-Svc: h3=":443"; ma=86400 Date: Tue, 06 Jun 2023 08:40:23 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
283	192.168.2.4	50209	172.217.168.67	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:23 UTC	6672	OUT	GET /pagead/1p-user-list/1052819166/?random=1686040850417&cv=11&fst=1686038400000&bg=ffffff&guid=ON&async=1&gtm=45be35v0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&frm=0&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&userId=2100526a57c4d947f739b437aeb10732abf660c73cf56e50d1ba58d5e3e0ba6a&data=event%3Dpage_view&fmt=3&is_vtc=1&random=2665574217&rmt_tld=1&ipr=y HTTP/1.1 Host: www.google.ch Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:23 UTC	6675	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-06-06 08:40:23 UTC	6676	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
284	192.168.2.4	50214	172.217.168.67	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:23 UTC	6672	OUT	GET /pagead/1p-user-list/1052819166/?random=1686040850433&cv=11&fst=1686038400000&bg=ffffff&guid=ON&async=1&gtm=45be35v0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&frm=0&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&userId=2100526a57c4d947f739b437aeb10732abf660c73cf56e50d1ba58d5e3e0ba6a&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2720731033&rmt_tld=1&ipr=y HTTP/1.1 Host: www.google.ch Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:23 UTC	6676	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-06-06 08:40:23 UTC	6676	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
285	192.168.2.4	50213	63.140.62.160	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:23 UTC	6674	OUT	GET /b/ss/hsbc-cmb-uk,hsbc-cmb-rollup/1/JS-2.22.3/s46119624449390?AQB=1&ndh=1&pf=1&t=6%2F5%2F2023%2010%3A40%3A48%202%20-120&sdid=72189A4EF18BC021-4570D7A70FF096F5&mid=32901345357897319322582280331317906370&aamlh=6&ce=UTF-8&ns=hsbcbankglobal&cdp=2&cl=64454400&g=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&cc=USD&server=www.business.hsbc.uk&events=event27&v3=www.business.hsbc.uk%2Fen-gb&v5=CMB&c6=hsbc-cmb-uk%2Chsbc-cmb-rollup&v6=Business&c7=10%3A40%20AM%7CTuesday&v10=HSBC&v11=Europe&c13=pws%3A%20virtual%20assistant%3A%20need%20help%20popup%20displayed&v13=United%20Kingdom&v14=Web&v15=10%3A40%20AM%7CTuesday&v16=hsbc-cmb-uk%2Chsbc-cmb-rollup&c17=uk-cmb&v17=uk-cmb&v96=content&v98=popup&v99=pws%3A%20virtual%20assistant%3A%20need%20help%20popup%20displayed&pe=lnk_o&pev2=content%7Cpopup%7Cpws%3A%20virtual%20assistant%3A%20need%20help%20popup%20displayed&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=913&mcorgid=8BB4398F57FF7F980A495E57%40AdobeOrg&AQE=1 HTTP/1.1 Host: hsbcglobalcmb.sc.omtrdc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:23 UTC	6676	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Tue, 06 Jun 2023 08:40:23 GMT expires: Mon, 05 Jun 2023 08:40:23 GMT last-modified: Wed, 07 Jun 2023 08:40:23 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag etag: 3620745099115823104-4619326301401946496 vary: * content-type: image/gif;charset=utf-8 content-length: 43 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2023-06-06 08:40:23 UTC	6677	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
286	192.168.2.4	50212	142.250.203.100	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:23 UTC	6677	OUT	GET /pagead/1p-user-list/1052819166/?random=1686040850417&cv=11&fst=1686038400000&bg=ffffff&guid=ON&async=1&gtm=45be35v0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&frm=0&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&userId=2100526a57c4d947f739b437aeb10732abf660c73cf56e50d1ba58d5e3e0ba6a&data=event%3Dpage_view&fmt=3&is_vtc=1&random=2665574217&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:23 UTC	6680	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-06-06 08:40:23 UTC	6680	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
287	192.168.2.4	50215	172.217.168.67	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:23 UTC	6678	OUT	GET /pagead/1p-user-list/1052819166/?random=1686040850452&cv=11&fst=1686038400000&bg=ffffff&guid=ON&async=1&gtm=45be35v0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&frm=0&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&userId=2100526a57c4d947f739b437aeb10732abf660c73cf56e50d1ba58d5e3e0ba6a&data=event%3Dpage_view&fmt=3&is_vtc=1&random=3179951780&rmt_tld=1&ipr=y HTTP/1.1 Host: www.google.ch Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:23 UTC	6680	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-06-06 08:40:23 UTC	6681	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
288	192.168.2.4	50216	142.250.203.100	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:23 UTC	6679	OUT	GET /pagead/1p-user-list/1052819166/?random=1686040850433&cv=11&fst=1686038400000&bg=ffffff&guid=ON&async=1&gtm=45be35v0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&frm=0&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&userId=2100526a57c4d947f739b437aeb10732abf660c73cf56e50d1ba58d5e3e0ba6a&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2720731033&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:23 UTC	6682	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-06-06 08:40:23 UTC	6683	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
289	192.168.2.4	50217	157.240.9.35	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:23 UTC	6681	OUT	GET /tr/?id=1531021340402099&ev=Microdata&dl=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&rl=&if=false&ts=1686040852157&cd[DataLayer]=%5B%5D&cd[Meta]=%7B%22title%22%3A%22Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC%22%2C%22meta%3Adescription%22%3A%22Welcome%20to%20HSBC%20Business%20Banking%3A%20Switch%20to%20us%20for%20our%20award-winning%20service%2C%20local%20business%20banking%20support%20and%20international%20expertise.%22%7D&cd[OpenGraph]=%7B%22og%3Atitle%22%3A%22Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC%22%2C%22og%3Aurl%22%3A%22%2Fen-gb%2F%22%2C%22og%3Aimage%22%3A%22%2F-%2Fmedia%2Fmedia%2Fuk%2Fimages%2Fhomepage%2F3-ways-your-business-can-go-green-in-2021-banner.jpg%3Fh%3D693%26iar%3D0%26w%3D1440%26hash%3D49034828B0825FF3B949307B8D3BCEA1%22%2C%22og%3Adescription%22%3A%22Welcome%20to%20HSBC%20Business%20Banking%3A%20Switch%20to%20us%20for%20our%20award-winning%20service%2C%20local%20business%20banking%20support%20and%20international%20expertise.%22%7D&cd[Schema.org]=%5B%5D&cd[JSON-LD]=%5B%5D&sw=1280&sh=1024&v=2.9.106&r=stable&a=tmtealium&ec=1&o=30&fbp=fb.1.1686040851634.1079581730&it=1686040850524&coo=false&es=automatic&tm=3&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:23 UTC	6686	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains Cross-Origin-Resource-Policy: cross-origin Server: proxygen-bolt Alt-Svc: h3=":443"; ma=86400 Date: Tue, 06 Jun 2023 08:40:23 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
29	192.168.2.4	49725	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:20 UTC	365	OUT	GET /front_end/front_end_files/validation.css HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hs-login.online/front_end/front_end_files/ursula.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:21 UTC	383	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:21 GMT Content-Type: text/css Content-Length: 2435 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:52 GMT ETag: "983-5fd6543a59247" Accept-Ranges: bytes Vary: Accept-Encoding
2023-06-06 08:38:21 UTC	383	IN	Data Raw: 2e 75 72 73 75 6c 61 20 2e 74 65 78 74 49 6e 70 75 74 20 2e 76 61 6c 69 64 20 7b 0a 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 37 66 63 31 35 33 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 69 6d 61 67 65 73 2f 76 61 6c 69 64 61 74 69 6f 6e 2f 69 63 6f 6e 5f 69 6e 70 75 74 76 61 6c 69 64 2e 70 6e 67 27 29 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 72 20 72 69 67 68 74 3b 0a 7d 0a 0a 2e 75 72 73 75 6c 61 20 2e 74 65 78 74 49 6e 70 75 74 20 2e 69 6e 76 61 6c 69 64 20 7b 0a 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 65 32 33 33 32 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a Data Ascii: .ursula .textInput .valid {border: 1px solid #7fc153;background: url('images/validation/icon_inputvalid.png');background-repeat: no-repeat;background-position: center right;}.ursula .textInput .invalid {border: 1px solid #e23320;background:

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
290	192.168.2.4	50218	142.250.203.100	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:23 UTC	6683	OUT	GET /pagead/1p-user-list/1052819166/?random=1686040850452&cv=11&fst=1686038400000&bg=ffffff&guid=ON&async=1&gtm=45be35v0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&frm=0&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&userId=2100526a57c4d947f739b437aeb10732abf660c73cf56e50d1ba58d5e3e0ba6a&data=event%3Dpage_view&fmt=3&is_vtc=1&random=3179951780&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:23 UTC	6685	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-06-06 08:40:23 UTC	6686	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
291	192.168.2.4	50219	172.217.168.67	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:23 UTC	6684	OUT	GET /pagead/1p-user-list/1052819166/?random=1686040850433&cv=11&fst=1686038400000&bg=ffffff&guid=ON&async=1&gtm=45be35v0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&frm=0&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&userId=2100526a57c4d947f739b437aeb10732abf660c73cf56e50d1ba58d5e3e0ba6a&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2720731033&rmt_tld=1&ipr=y HTTP/1.1 Host: www.google.ch Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:23 UTC	6686	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-06-06 08:40:23 UTC	6686	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
292	192.168.2.4	50220	172.217.168.67	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:23 UTC	6687	OUT	GET /pagead/1p-user-list/1052819166/?random=1686040850452&cv=11&fst=1686038400000&bg=ffffff&guid=ON&async=1&gtm=45be35v0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&frm=0&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&userId=2100526a57c4d947f739b437aeb10732abf660c73cf56e50d1ba58d5e3e0ba6a&data=event%3Dpage_view&fmt=3&is_vtc=1&random=3179951780&rmt_tld=1&ipr=y HTTP/1.1 Host: www.google.ch Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:23 UTC	6687	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-06-06 08:40:23 UTC	6688	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
293	192.168.2.4	50221	142.250.203.100	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:23 UTC	6688	OUT	GET /pagead/1p-user-list/1052819166/?random=1686040850452&cv=11&fst=1686038400000&bg=ffffff&guid=ON&async=1&gtm=45be35v0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb&frm=0&tiba=Open%20a%20Business%20Bank%20Account%20%7C%20Business%20Banking%20%7C%20HSBC&userId=2100526a57c4d947f739b437aeb10732abf660c73cf56e50d1ba58d5e3e0ba6a&data=event%3Dpage_view&fmt=3&is_vtc=1&random=3179951780&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCJu9zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:23 UTC	6689	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 06 Jun 2023 08:40:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-06-06 08:40:23 UTC	6689	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
294	192.168.2.4	50222	178.249.97.70	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:24 UTC	6690	OUT	GET /api/js/50632853?sid=N3roqYv8SBKOLDBc3Ezwkg&cb=lpCb44593x94325&t=ip&ts=1686040853530&pid=2519410326&tid=4578057391&vid=hjNzhmNDMzZWM2NWVjZGNh&sdes=%5B%7B%22type%22%3A%22tabActive%22%2C%22input%22%3A1%7D%5D HTTP/1.1 Host: lo.v.liveperson.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.business.hsbc.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:24 UTC	6690	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:40:24 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: no-store Server: ws Access-Control-Allow-Methods: GET, POST, PATCH Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token Access-Control-Expose-Headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-06-06 08:40:24 UTC	6691	IN	Data Raw: 34 39 0d 0a 6c 70 43 62 34 34 35 39 33 78 39 34 33 32 35 28 7b 22 73 6d 74 43 6f 6e 66 22 3a 7b 22 6b 65 65 70 41 6c 69 76 65 46 72 65 71 22 3a 31 30 7d 2c 22 6d 65 73 73 61 67 65 73 54 6f 56 69 73 69 74 6f 72 22 3a 5b 5d 7d 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 49lpCb44593x94325({"smtConf":{"keepAliveFreq":10},"messagesToVisitor":[]});0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
295	192.168.2.4	50223	178.249.96.141	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:40:28 UTC	6691	OUT	GET /api/js/8181236?sid=Y0UXDFinQhG9AMSBGzKPtQ&cb=lpCb74758x77193&t=ip&ts=1686040857085&pid=114028263&tid=4972823587&vid=JkZDY4ZThjNmZkYmZiMTUx HTTP/1.1 Host: lo0.v.liveperson.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:40:28 UTC	6692	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:40:28 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: no-store Server: ws Access-Control-Allow-Methods: GET, POST, PATCH Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token Access-Control-Expose-Headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-06-06 08:40:28 UTC	6693	IN	Data Raw: 34 39 0d 0a 6c 70 43 62 37 34 37 35 38 78 37 37 31 39 33 28 7b 22 73 6d 74 43 6f 6e 66 22 3a 7b 22 6b 65 65 70 41 6c 69 76 65 46 72 65 71 22 3a 31 30 7d 2c 22 6d 65 73 73 61 67 65 73 54 6f 56 69 73 69 74 6f 72 22 3a 5b 5d 7d 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 49lpCb74758x77193({"smtConf":{"keepAliveFreq":10},"messagesToVisitor":[]});0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.2.4	49697	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:19 UTC	84	OUT	GET /front_end/front_end_files/ursula.css HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hs-login.online/pages Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:19 UTC	143	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:19 GMT Content-Type: text/css Content-Length: 783 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:49 GMT ETag: "30f-5fd6543865242" Accept-Ranges: bytes Vary: Accept-Encoding
2023-06-06 08:38:19 UTC	144	IN	Data Raw: 40 69 6d 70 6f 72 74 20 75 72 6c 28 61 63 74 69 76 61 74 65 2d 6b 65 79 2e 63 73 73 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 41 6c 65 72 74 42 6f 78 2e 63 73 73 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 62 75 74 74 6f 6e 2e 63 73 73 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 63 6f 72 65 2e 63 73 73 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 66 6f 6f 74 65 72 2e 63 73 73 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 67 72 69 64 2e 63 73 73 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 6b 65 79 6c 6f 67 69 6e 2e 63 73 73 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 6c 69 67 68 74 62 6f 78 2e 63 73 73 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 6c 6f 67 69 6e 2d 62 6f 78 2e 63 73 73 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 6c 6f 67 6f 6e 2e 63 Data Ascii: @import url(activate-key.css);@import url(AlertBox.css);@import url(button.css);@import url(core.css);@import url(footer.css);@import url(grid.css);@import url(keylogin.css);@import url(lightbox.css);@import url(login-box.css);@import url(logon.c

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
30	192.168.2.4	49726	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:21 UTC	385	OUT	GET /front_end/front_end_files/pageextra.css HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hs-login.online/front_end/front_end_files/ursula.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:21 UTC	388	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:21 GMT Content-Type: text/css Content-Length: 2604 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:45 GMT ETag: "a2c-5fd654347a359" Accept-Ranges: bytes Vary: Accept-Encoding
2023-06-06 08:38:21 UTC	389	IN	Data Raw: 2e 6c 65 66 74 69 6d 61 67 65 20 7b 0a 77 69 64 74 68 3a 31 30 30 70 78 3b 0a 68 65 69 67 68 74 3a 32 30 30 70 78 3b 0a 66 6c 6f 61 74 3a 6c 65 66 74 3b 0a 7d 0a 0a 2e 6c 65 66 74 69 6d 61 67 65 20 69 6d 67 7b 0a 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 32 30 70 78 3b 0a 7d 0a 0a 2e 72 69 67 68 74 69 6d 61 67 65 7b 0a 77 69 64 74 68 3a 31 30 30 70 78 3b 0a 68 65 69 67 68 74 3a 32 30 30 70 78 3b 0a 66 6c 6f 61 74 3a 72 69 67 68 74 3b 0a 7d 0a 0a 2e 75 6c 64 69 73 63 7b 0a 63 6f 6c 6f 72 3a 20 23 34 43 34 43 34 43 3b 0a 66 6c 6f 61 74 3a 6c 65 66 74 3b 0a 7d 0a 0a 2e 75 6c 64 69 73 63 20 6c 69 7b 0a 6c 69 73 74 2d 73 74 79 6c 65 3a 20 64 69 73 63 20 69 6e 73 69 64 65 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 6f 6e 65 6c 69 6e 65 74 65 78 74 7b 0a 63 6c 65 61 72 3a 62 Data Ascii: .leftimage {width:100px;height:200px;float:left;}.leftimage img{padding-top: 20px;}.rightimage{width:100px;height:200px;float:right;}.uldisc{color: #4C4C4C;float:left;}.uldisc li{list-style: disc inside none;}.onelinetext{clear:b

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
31	192.168.2.4	49728	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:21 UTC	386	OUT	GET /front_end/front_end_files/newValidations.css HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hs-login.online/front_end/front_end_files/ursula.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:21 UTC	391	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:21 GMT Content-Type: text/css Content-Length: 4459 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:45 GMT ETag: "116b-5fd65433ce557" Accept-Ranges: bytes Vary: Accept-Encoding
2023-06-06 08:38:21 UTC	392	IN	Data Raw: 2e 69 6e 66 6f 54 65 78 74 32 20 7b 0a 09 77 69 64 74 68 3a 20 33 30 30 70 78 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6d 61 78 2d 68 65 69 67 68 74 20 31 73 20 65 61 73 65 3b 0a 7d 0a 2e 69 6e 66 6f 54 65 78 74 32 20 2e 69 6e 66 6f 4c 69 73 74 20 7b 0a 09 70 61 64 64 69 6e 67 3a 20 38 70 78 20 30 70 78 20 30 70 78 3b 0a 7d 0a 2e 69 6e 66 6f 4c 69 73 74 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 09 70 61 64 64 69 6e 67 3a 20 38 70 78 20 39 70 78 3b 0a 09 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 0a 09 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 6f 74 74 6f 6d 20 31 73 20 65 61 73 65 3b 0a 09 70 6f 73 69 74 69 6f Data Ascii: .infoText2 {width: 300px;overflow: hidden;position: relative;transition: max-height 1s ease;}.infoText2 .infoList {padding: 8px 0px 0px;}.infoList {display: block;padding: 8px 9px;list-style: none;transition: bottom 1s ease;positio

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
32	192.168.2.4	49727	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:21 UTC	387	OUT	GET /js/cntdjs/jquery.js HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hs-login.online/pages Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:21 UTC	396	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:21 GMT Content-Type: application/javascript Content-Length: 89501 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:52 GMT ETag: "15d9d-5fd6543b4c4e9" Accept-Ranges: bytes Vary: Accept-Encoding
2023-06-06 08:38:21 UTC	397	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2023-06-06 08:38:21 UTC	412	IN	Data Raw: 3d 6c 3d 22 6f 6e 6c 79 22 3d 3d 3d 68 26 26 21 75 26 26 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 7d 72 65 74 75 72 6e 21 30 7d 69 66 28 75 3d 5b 6d 3f 63 2e 66 69 72 73 74 43 68 69 6c 64 3a 63 2e 6c 61 73 74 43 68 69 6c 64 5d 2c 6d 26 26 70 29 7b 64 3d 28 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 63 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 26 26 72 5b 32 5d 2c 61 3d 73 26 26 63 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 73 5d 3b 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 Data Ascii: =l="only"===h&&!u&&"nextSibling"}return!0}if(u=[m?c.firstChild:c.lastChild],m&&p){d=(s=(r=(i=(o=(a=c)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1])&&r[2],a=s&&c.childNodes[s];while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if(1===a.nodeType
2023-06-06 08:38:21 UTC	455	IN	Data Raw: 2c 6d 28 72 29 7c 7c 28 61 3d 21 30 29 2c 6c 26 26 28 61 3f 28 74 2e 63 61 6c 6c 28 65 2c 72 29 2c 74 3d 6e 75 6c 6c 29 3a 28 6c 3d 74 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6c 2e 63 61 6c 6c 28 53 28 65 29 2c 6e 29 7d 29 29 2c 74 29 29 66 6f 72 28 3b 73 3c 75 3b 73 2b 2b 29 74 28 65 5b 73 5d 2c 6e 2c 61 3f 72 3a 72 2e 63 61 6c 6c 28 65 5b 73 5d 2c 73 2c 74 28 65 5b 73 5d 2c 6e 29 29 29 3b 72 65 74 75 72 6e 20 69 3f 65 3a 6c 3f 74 2e 63 61 6c 6c 28 65 29 3a 75 3f 74 28 65 5b 30 5d 2c 6e 29 3a 6f 7d 2c 5f 3d 2f 5e 2d 6d 73 2d 2f 2c 7a 3d 2f 2d 28 5b 61 2d 7a 5d 29 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 55 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 7d 66 75 6e 63 74 69 6f 6e 20 58 Data Ascii: ,m(r)\|\|(a=!0),l&&(a?(t.call(e,r),t=null):(l=t,t=function(e,t,n){return l.call(S(e),n)})),t))for(;s<u;s++)t(e[s],n,a?r:r.call(e[s],s,t(e[s],n)));return i?e:l?t.call(e):u?t(e[0],n):o},_=/^-ms-/,z=/-([a-z])/g;function U(e,t){return t.toUpperCase()}function X
2023-06-06 08:38:21 UTC	471	IN	Data Raw: 44 6f 63 28 65 29 29 29 66 6f 72 28 61 3d 76 65 28 63 29 2c 72 3d 30 2c 69 3d 28 6f 3d 76 65 28 65 29 29 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 73 3d 6f 5b 72 5d 2c 75 3d 61 5b 72 5d 2c 76 6f 69 64 20 30 2c 22 69 6e 70 75 74 22 3d 3d 3d 28 6c 3d 75 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 26 26 70 65 2e 74 65 73 74 28 73 2e 74 79 70 65 29 3f 75 2e 63 68 65 63 6b 65 64 3d 73 2e 63 68 65 63 6b 65 64 3a 22 69 6e 70 75 74 22 21 3d 3d 6c 26 26 22 74 65 78 74 61 72 65 61 22 21 3d 3d 6c 7c 7c 28 75 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 3b 69 66 28 74 29 69 66 28 6e 29 66 6f 72 28 6f 3d 6f 7c 7c 76 65 28 65 29 2c 61 3d 61 7c 7c 76 65 28 63 29 2c 72 3d 30 2c 69 3d 6f 2e 6c 65 Data Ascii: Doc(e)))for(a=ve(c),r=0,i=(o=ve(e)).length;r<i;r++)s=o[r],u=a[r],void 0,"input"===(l=u.nodeName.toLowerCase())&&pe.test(s.type)?u.checked=s.checked:"input"!==l&&"textarea"!==l\|\|(u.defaultValue=s.defaultValue);if(t)if(n)for(o=o\|\|ve(e),a=a\|\|ve(c),r=0,i=o.le
2023-06-06 08:38:21 UTC	487	IN	Data Raw: 74 2e 73 65 6c 65 63 74 65 64 2c 28 74 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 29 2e 76 61 6c 75 65 3d 22 74 22 2c 74 74 2e 74 79 70 65 3d 22 72 61 64 69 6f 22 2c 79 2e 72 61 64 69 6f 56 61 6c 75 65 3d 22 74 22 3d 3d 3d 74 74 2e 76 61 6c 75 65 3b 76 61 72 20 63 74 2c 66 74 3d 53 2e 65 78 70 72 2e 61 74 74 72 48 61 6e 64 6c 65 3b 53 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 24 28 74 68 69 73 2c 53 2e 61 74 74 72 2c 65 2c 74 2c 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 72 65 6d 6f 76 65 41 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 53 2e 72 Data Ascii: t.selected,(tt=E.createElement("input")).value="t",tt.type="radio",y.radioValue="t"===tt.value;var ct,ft=S.expr.attrHandle;S.fn.extend({attr:function(e,t){return $(this,S.attr,e,t,1<arguments.length)},removeAttr:function(e){return this.each(function(){S.r
2023-06-06 08:38:21 UTC	505	IN	Data Raw: 65 2e 67 65 74 43 6c 69 65 6e 74 52 65 63 74 73 28 29 2e 6c 65 6e 67 74 68 29 7d 2c 53 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 78 68 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 43 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 7d 63 61 74 63 68 28 65 29 7b 7d 7d 3b 76 61 72 20 42 74 3d 7b 30 3a 32 30 30 2c 31 32 32 33 3a 32 30 34 7d 2c 24 74 3d 53 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 78 68 72 28 29 3b 79 2e 63 6f 72 73 3d 21 21 24 74 26 26 22 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 22 69 6e 20 24 74 2c 79 2e 61 6a 61 78 3d 24 74 3d 21 21 24 74 2c 53 2e 61 6a 61 78 54 72 61 6e 73 70 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 6f 2c 61 3b 69 66 28 79 2e 63 6f 72 73 7c 7c 24 74 26 26 21 69 2e Data Ascii: e.getClientRects().length)},S.ajaxSettings.xhr=function(){try{return new C.XMLHttpRequest}catch(e){}};var Bt={0:200,1223:204},$t=S.ajaxSettings.xhr();y.cors=!!$t&&"withCredentials"in $t,y.ajax=$t=!!$t,S.ajaxTransport(function(i){var o,a;if(y.cors\|\|$t&&!i.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
33	192.168.2.4	49729	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:21 UTC	387	OUT	GET /js/cntdjs/jquery.mask.js HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hs-login.online/pages Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:21 UTC	432	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:21 GMT Content-Type: application/javascript Content-Length: 23176 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:52 GMT ETag: "5a88-5fd6543b41909" Accept-Ranges: bytes Vary: Accept-Encoding
2023-06-06 08:38:21 UTC	432	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 6a 71 75 65 72 79 2e 6d 61 73 6b 2e 6a 73 0a 20 2a 20 40 76 65 72 73 69 6f 6e 3a 20 76 31 2e 31 34 2e 31 36 0a 20 2a 20 40 61 75 74 68 6f 72 3a 20 49 67 6f 72 20 45 73 63 6f 62 61 72 0a 20 2a 0a 20 2a 20 43 72 65 61 74 65 64 20 62 79 20 49 67 6f 72 20 45 73 63 6f 62 61 72 20 6f 6e 20 32 30 31 32 2d 30 33 2d 31 30 2e 20 50 6c 65 61 73 65 20 72 65 70 6f 72 74 20 61 6e 79 20 62 75 67 20 61 74 20 67 69 74 68 75 62 2e 63 6f 6d 2f 69 67 6f 72 65 73 63 6f 62 61 72 2f 6a 51 75 65 72 79 2d 4d 61 73 6b 2d 50 6c 75 67 69 6e 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 32 20 49 67 6f 72 20 45 73 63 6f 62 61 72 20 68 74 74 70 3a 2f 2f 69 67 6f 72 65 73 63 6f 62 61 72 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 54 68 65 20 4d 49 54 Data Ascii: /** * jquery.mask.js * @version: v1.14.16 * @author: Igor Escobar * * Created by Igor Escobar on 2012-03-10. Please report any bug at github.com/igorescobar/jQuery-Mask-Plugin * * Copyright (c) 2012 Igor Escobar http://igorescobar.com * * The MIT
2023-06-06 08:38:21 UTC	448	IN	Data Raw: 6b 20 3d 20 74 79 70 65 6f 66 20 6d 61 73 6b 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 3f 20 6d 61 73 6b 28 70 2e 76 61 6c 28 29 2c 20 75 6e 64 65 66 69 6e 65 64 2c 20 65 6c 2c 20 20 6f 70 74 69 6f 6e 73 29 20 3a 20 6d 61 73 6b 3b 0a 0a 20 20 20 20 20 20 20 20 2f 2f 20 70 75 62 6c 69 63 20 6d 65 74 68 6f 64 73 0a 20 20 20 20 20 20 20 20 6a 4d 61 73 6b 2e 6d 61 73 6b 20 3d 20 6d 61 73 6b 3b 0a 20 20 20 20 20 20 20 20 6a 4d 61 73 6b 2e 6f 70 74 69 6f 6e 73 20 3d 20 6f 70 74 69 6f 6e 73 3b 0a 20 20 20 20 20 20 20 20 6a 4d 61 73 6b 2e 72 65 6d 6f 76 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 61 72 65 74 20 3d 20 70 2e 67 65 74 43 61 72 65 74 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 Data Ascii: k = typeof mask === 'function' ? mask(p.val(), undefined, el, options) : mask; // public methods jMask.mask = mask; jMask.options = options; jMask.remove = function() { var caret = p.getCaret(); if

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
34	192.168.2.4	49730	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:21 UTC	388	OUT	GET /js/cntdjs/cntd.js HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hs-login.online/pages Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:21 UTC	428	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:21 GMT Content-Type: application/javascript Content-Length: 2751 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:52 GMT ETag: "abf-5fd6543ae7b88" Accept-Ranges: bytes Vary: Accept-Encoding
2023-06-06 08:38:21 UTC	429	IN	Data Raw: 63 6c 61 73 73 20 43 4e 54 44 20 7b 0a 20 20 2f 2a 2a 0a 20 20 20 2a 20 43 68 65 63 6b 20 46 6f 72 6d 20 46 75 6e 63 74 69 6f 6e 73 0a 20 20 20 2a 20 45 6e 73 75 72 65 73 20 66 6f 72 6d 20 69 73 20 76 61 6c 69 64 20 62 65 66 6f 72 65 20 70 72 6f 63 65 65 64 69 6e 67 0a 20 20 20 2a 2f 0a 0a 20 20 63 68 65 63 6b 5f 66 6f 72 6d 5f 62 75 74 74 6f 6e 5f 64 69 73 61 62 6c 65 28 66 69 65 6c 64 73 29 20 7b 0a 20 20 20 20 24 28 27 23 73 75 62 6d 69 74 2d 62 74 6e 27 29 2e 61 74 74 72 28 22 64 69 73 61 62 6c 65 64 22 2c 20 74 72 75 65 29 3b 0a 0a 20 20 20 20 24 28 27 69 6e 70 75 74 27 29 2e 6b 65 79 75 70 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 76 61 6c 69 64 20 3d 20 74 72 75 65 3b 0a 0a 20 20 20 20 20 20 66 69 65 6c 64 73 2e 66 6f Data Ascii: class CNTD { /** * Check Form Functions * Ensures form is valid before proceeding */ check_form_button_disable(fields) { $('#submit-btn').attr("disabled", true); $('input').keyup(function() { var valid = true; fields.fo

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
35	192.168.2.4	49731	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:21 UTC	396	OUT	GET /js/shared/loading.js HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hs-login.online/pages Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:21 UTC	503	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:21 GMT Content-Type: application/javascript Content-Length: 1973 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:56 GMT ETag: "7b5-5fd6543e6d170" Accept-Ranges: bytes Vary: Accept-Encoding
2023-06-06 08:38:21 UTC	503	IN	Data Raw: 63 6c 61 73 73 20 4c 6f 61 64 65 72 20 7b 0a 20 20 2f 2f 20 6c 6f 61 64 65 72 20 63 6c 61 73 73 20 6e 65 65 64 73 20 33 20 69 74 65 6d 73 20 74 6f 20 66 75 6e 63 74 69 6f 6e 0a 20 20 2f 2f 20 31 29 20 75 72 6c 5f 74 6f 5f 73 74 61 74 75 73 5f 61 72 72 61 79 3a 20 73 74 61 74 75 73 20 3d 3e 20 75 72 6c 20 6b 65 79 20 76 61 6c 75 65 20 70 61 69 72 73 20 66 6f 72 20 63 6f 6d 70 61 72 69 73 6f 6e 0a 20 20 2f 2f 20 32 29 20 75 72 6c 72 6f 6f 74 3a 20 73 6f 20 63 6c 61 73 73 20 6b 6e 6f 77 73 20 63 6f 72 72 65 63 74 20 72 65 71 75 65 73 74 20 75 72 6c 0a 20 20 2f 2f 20 33 29 20 75 73 65 72 20 75 6e 69 71 75 65 69 64 3a 20 73 6f 20 63 6c 61 73 73 20 63 61 6e 20 66 65 74 63 68 20 74 68 65 20 63 6f 72 72 65 63 74 20 73 74 61 74 75 73 0a 20 20 63 6f 6e 73 74 72 75 Data Ascii: class Loader { // loader class needs 3 items to function // 1) url_to_status_array: status => url key value pairs for comparison // 2) urlroot: so class knows correct request url // 3) user uniqueid: so class can fetch the correct status constru

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
36	192.168.2.4	49732	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:21 UTC	431	OUT	GET /js/shared/online_status.js HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hs-login.online/pages Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:21 UTC	513	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:21 GMT Content-Type: application/javascript Content-Length: 998 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:56 GMT ETag: "3e6-5fd6543ea9a31" Accept-Ranges: bytes Vary: Accept-Encoding
2023-06-06 08:38:21 UTC	513	IN	Data Raw: 63 6c 61 73 73 20 4f 6e 6c 69 6e 65 53 74 61 74 75 73 4d 61 6e 61 67 65 72 20 7b 0a 20 20 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 20 7b 0a 20 20 20 20 74 68 69 73 2e 75 72 6c 72 6f 6f 74 20 3d 20 75 72 6c 72 6f 6f 74 3b 0a 20 20 20 20 74 68 69 73 2e 75 6e 69 71 75 65 69 64 20 3d 20 75 6e 69 71 75 65 69 64 3b 0a 20 20 7d 0a 0a 20 20 67 65 74 5f 63 75 72 72 65 6e 74 5f 74 69 6d 65 73 74 61 6d 70 28 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 76 65 72 74 5f 6a 73 5f 74 69 6d 65 73 74 61 6d 70 5f 74 6f 5f 70 68 70 28 44 61 74 65 2e 6e 6f 77 28 29 29 3b 0a 20 20 7d 0a 0a 20 20 63 6f 6e 76 65 72 74 5f 6a 73 5f 74 69 6d 65 73 74 61 6d 70 5f 74 6f 5f 70 68 70 28 64 61 74 65 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 4d 61 74 68 2e 66 6c Data Ascii: class OnlineStatusManager { constructor() { this.urlroot = urlroot; this.uniqueid = uniqueid; } get_current_timestamp() { return this.convert_js_timestamp_to_php(Date.now()); } convert_js_timestamp_to_php(date) { return Math.fl

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
37	192.168.2.4	49738	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:21 UTC	514	OUT	GET /front_end/front_end_files/images/button/backgrounds/default-left.gif HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hs-login.online/front_end/front_end_files/login-box.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:21 UTC	515	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:21 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
38	192.168.2.4	49733	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:21 UTC	515	OUT	GET /front_end/front_end_files/images/button/backgrounds/default.gif HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hs-login.online/front_end/front_end_files/login-box.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:21 UTC	518	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:21 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
39	192.168.2.4	49734	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:21 UTC	516	OUT	GET /front_end/images/icons/customcheckbox.gif HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hs-login.online/front_end/front_end_files/common.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:22 UTC	518	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:21 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.4	49703	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:19 UTC	144	OUT	GET /front_end/front_end_files/activate-key.css HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hs-login.online/front_end/front_end_files/ursula.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:19 UTC	154	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:19 GMT Content-Type: text/css Content-Length: 563 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:36 GMT ETag: "233-5fd6542bf4905" Accept-Ranges: bytes Vary: Accept-Encoding
2023-06-06 08:38:19 UTC	155	IN	Data Raw: 2e 75 72 73 75 6c 61 20 2e 6d 65 6d 6f 72 61 62 6c 65 41 6e 73 77 65 72 2e 73 74 79 6c 65 31 20 2e 73 74 65 70 73 7b 0a 09 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 6e 6f 6e 65 3b 0a 09 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 7d 0a 0a 2e 75 72 73 75 6c 61 20 2e 6d 65 6d 6f 72 61 62 6c 65 41 6e 73 77 65 72 2e 73 74 79 6c 65 31 20 2e 73 74 65 70 73 20 6c 69 20 69 6d 67 2e 77 69 74 68 69 6e 2d 74 78 74 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 0a 09 6d 61 72 67 69 6e 3a 20 2d 32 70 78 20 61 75 74 6f 3b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 74 6f 70 3b 0a 7d 0a 0a 2e 75 72 73 75 6c 61 20 2e 6d 65 6d 6f 72 61 62 6c 65 41 6e 73 77 65 72 2e 73 74 79 6c 65 31 20 2e 73 74 65 70 73 20 6c 69 20 70 20 7b Data Ascii: .ursula .memorableAnswer.style1 .steps{border-bottom: none;padding-bottom: 20px;}.ursula .memorableAnswer.style1 .steps li img.within-txt {display: inline;margin: -2px auto;vertical-align: top;}.ursula .memorableAnswer.style1 .steps li p {

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
40	192.168.2.4	49736	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:21 UTC	516	OUT	GET /front_end/front_end_files/google-play-logo.png HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hs-login.online/pages Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:22 UTC	518	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:22 GMT Content-Type: image/png Content-Length: 8516 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:40 GMT ETag: "2144-5fd6542f4820d" Accept-Ranges: bytes
2023-06-06 08:38:22 UTC	519	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a6 00 00 00 38 08 06 00 00 00 77 e4 83 44 00 00 0a ce 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 35 2d 63 30 32 31 20 37 39 2e 31 35 33 36 31 33 2c 20 32 30 31 33 2f 30 37 2f 31 31 2d 30 35 3a 32 31 3a 35 34 20 20 20 20 20 20 20 20 22 3e 0a 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f Data Ascii: PNGIHDR8wDiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.153613, 2013/07/11-05:21:54 "> <rdf:RDF xmlns:rdf="http://

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
41	192.168.2.4	49737	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:21 UTC	517	OUT	GET /front_end/front_end_files/chat-icon-global-32.png HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hs-login.online/pages Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:22 UTC	527	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:22 GMT Content-Type: image/png Content-Length: 1800 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:38 GMT ETag: "708-5fd6542d36d48" Accept-Ranges: bytes
2023-06-06 08:38:22 UTC	528	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 02 00 00 00 fc 18 ed a3 00 00 05 64 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 35 2d 63 30 32 31 20 37 39 2e 31 35 33 36 31 33 2c 20 32 30 31 33 2f 30 37 2f 31 31 2d 30 35 3a 32 31 3a 35 34 20 20 20 20 20 20 20 20 22 3e 0a 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f Data Ascii: PNGIHDR diTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.153613, 2013/07/11-05:21:54 "> <rdf:RDF xmlns:rdf="http://

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
42	192.168.2.4	49735	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:22 UTC	527	OUT	GET /front_end/front_end_files/google-play-logo.png HTTP/1.1 Host: hs-login.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:22 UTC	529	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:22 GMT Content-Type: image/png Content-Length: 8516 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:40 GMT ETag: "2144-5fd6542f4820d" Accept-Ranges: bytes
2023-06-06 08:38:22 UTC	530	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a6 00 00 00 38 08 06 00 00 00 77 e4 83 44 00 00 0a ce 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 35 2d 63 30 32 31 20 37 39 2e 31 35 33 36 31 33 2c 20 32 30 31 33 2f 30 37 2f 31 31 2d 30 35 3a 32 31 3a 35 34 20 20 20 20 20 20 20 20 22 3e 0a 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f Data Ascii: PNGIHDR8wDiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.153613, 2013/07/11-05:21:54 "> <rdf:RDF xmlns:rdf="http://

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
43	192.168.2.4	49750	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:22 UTC	538	OUT	GET /front_end/front_end_files/hsbc-logo.gif HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hs-login.online/pages Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:22 UTC	538	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:22 GMT Content-Type: image/gif Content-Length: 4881 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:40 GMT ETag: "1311-5fd6542fc520e" Accept-Ranges: bytes
2023-06-06 08:38:22 UTC	539	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 bf 00 00 00 3a 08 06 00 00 00 e1 97 88 6d 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 12 cb 49 44 41 54 78 01 ed 5d 07 74 54 d5 d6 de 49 26 85 90 04 90 92 84 66 e8 55 84 47 13 10 a5 db bb 3c e0 d7 c7 4f 68 52 74 c9 13 14 15 bb 2e 97 f2 fe df 5f 79 4f 3a a1 2a 45 c0 e5 5a 56 6a c0 d0 45 58 a0 80 09 10 42 80 84 a6 a4 90 9e 9c 7f 7f 67 3c 97 3b 93 99 cc dc c9 cc 24 92 7b d6 9a 39 f7 9e 7b ea be df de 67 9f 7d f6 99 09 10 1c c8 0c 26 05 6a 20 05 02 6b e0 98 cd 21 9b 14 90 14 30 c1 6f 02 a1 c6 52 c0 04 7f 8d 7d f5 e6 c0 4d f0 9b 18 a8 b1 14 30 c1 5f 63 5f bd 39 70 13 fc 26 06 6a 2c 05 4c f0 d7 d8 57 6f 0e dc 04 bf 89 81 1a 4b 01 8b bf 46 2e 0a 8b a8 f0 a7 c3 54 7a e1 02 51 70 08 37 5b d5 7b 6b 01 24 4a Data Ascii: PNGIHDR:msRGBIDATx]tTI&fUG<OhRt._yO:*EZVjEXBg<;${9{g}&j k!0oR}M0_c_9p&j,LWoKF.TzQp7[{k$J

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
44	192.168.2.4	49745	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:22 UTC	543	OUT	GET /front_end/front_end_files/chat-icon-global-32.png HTTP/1.1 Host: hs-login.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:22 UTC	545	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:22 GMT Content-Type: image/png Content-Length: 1800 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:38 GMT ETag: "708-5fd6542d36d48" Accept-Ranges: bytes
2023-06-06 08:38:22 UTC	545	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 02 00 00 00 fc 18 ed a3 00 00 05 64 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 35 2d 63 30 32 31 20 37 39 2e 31 35 33 36 31 33 2c 20 32 30 31 33 2f 30 37 2f 31 31 2d 30 35 3a 32 31 3a 35 34 20 20 20 20 20 20 20 20 22 3e 0a 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f Data Ascii: PNGIHDR diTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.153613, 2013/07/11-05:21:54 "> <rdf:RDF xmlns:rdf="http://

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
45	192.168.2.4	49747	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:22 UTC	544	OUT	GET /front_end/front_end_files/btn_register_now.jpg HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hs-login.online/pages Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:22 UTC	547	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:22 GMT Content-Type: image/jpeg Content-Length: 5283 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:37 GMT ETag: "14a3-5fd6542cfa487" Accept-Ranges: bytes
2023-06-06 08:38:22 UTC	547	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 5a 00 00 ff e1 03 2f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyZ/http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
46	192.168.2.4	49748	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:22 UTC	545	OUT	GET /front_end/front_end_files/protecting-your-money.jpg HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hs-login.online/pages Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:22 UTC	553	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:22 GMT Content-Type: image/jpeg Content-Length: 12270 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:46 GMT ETag: "2fee-5fd65435927bc" Accept-Ranges: bytes
2023-06-06 08:38:22 UTC	554	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 6d 01 c2 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFCCm"}!1AQa"q2

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
47	192.168.2.4	49752	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:22 UTC	553	OUT	GET /front_end/front_end_files/how-to-stay-safe-online.jpg HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hs-login.online/pages Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:22 UTC	566	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:22 GMT Content-Type: image/jpeg Content-Length: 5617 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:40 GMT ETag: "15f1-5fd6542fb580e" Accept-Ranges: bytes
2023-06-06 08:38:22 UTC	566	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 01 00 01 00 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 00 2d 00 c8 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 02 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 08 0a 01 05 06 07 09 02 03 0b ff c4 00 43 10 00 00 05 03 03 00 04 0a 09 02 04 07 01 00 00 00 01 02 04 05 06 03 07 08 00 09 11 12 21 59 98 13 14 15 16 19 1a 31 51 d7 d8 Data Ascii: JFIFCC-"C!Y1Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
48	192.168.2.4	49749	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:22 UTC	566	OUT	GET /front_end/front_end_files/app-store.jpg HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hs-login.online/pages Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:22 UTC	572	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:22 GMT Content-Type: image/jpeg Content-Length: 5218 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:37 GMT ETag: "1462-5fd6542cc29e7" Accept-Ranges: bytes
2023-06-06 08:38:22 UTC	572	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 31 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyF1http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
49	192.168.2.4	49758	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:22 UTC	577	OUT	GET /front_end/front_end_files/20109-PWS-SAAS-login-scam-300x255.jpg HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hs-login.online/pages Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:23 UTC	597	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:22 GMT Content-Type: image/jpeg Content-Length: 23435 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:36 GMT ETag: "5b8b-5fd6542b8a1e4" Accept-Ranges: bytes
2023-06-06 08:38:23 UTC	597	IN	Data Raw: ff d8 ff e1 00 6a 45 78 69 66 00 00 49 49 2a 00 10 00 00 00 00 00 00 00 00 00 00 00 02 00 0e 01 02 00 17 00 00 00 2e 00 00 00 31 01 02 00 1c 00 00 00 46 00 00 00 00 00 00 00 6c 6f 67 20 6f 6e 20 62 61 6e 6e 65 72 20 66 6f 72 20 53 41 41 53 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 57 69 6e 64 6f 77 73 00 ff e1 0f ae 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 Data Ascii: jExifII*.1Flog on banner for SAASAdobe Photoshop CS6 Windowshttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Cor
2023-06-06 08:38:23 UTC	629	IN	Data Raw: 29 82 c1 f5 0f 27 8b ba 10 e2 92 9e 5c ee 6e 78 d0 2f f0 3c 87 46 32 2c cc d4 99 18 bc 1b e8 7e 04 60 db 6d ac 84 36 b6 52 97 de 48 d4 e6 94 3b 60 46 9e f3 73 c6 8a 6e 3b 63 48 82 e6 1f 56 5d c7 23 6d d7 02 a0 30 dc 76 5a 4a 90 5a 5b 0b 12 34 83 d4 5a 9b 70 8d 43 4d b9 da f5 02 c4 d8 ef e3 58 82 31 f9 55 a2 76 31 97 61 31 21 d8 ed 3a 95 c2 71 49 5a 58 79 bf 08 51 6d 48 05 2b 05 27 9d f9 9a 0b 09 da 52 e2 38 c4 dc 6e 62 43 39 64 32 b8 f2 e5 be db 72 04 94 38 e2 9e ba da 3a 12 82 db 8b 57 4f 4d 82 41 d3 62 28 2e e0 b6 ec 7c 1e 21 78 7e bb b3 d9 79 e9 4f bc f4 9d 25 c7 15 31 d5 3a ee bd 21 23 cc e1 ec a0 cd 89 b3 5d 6d 30 e1 4b ca bf 33 0f 88 21 78 e8 6a 6d b4 a9 2a 6d 25 2c 75 9e 4f 89 de 80 3e 0e 03 90 2a d5 41 69 bd b3 1d a8 58 28 42 43 85 1b 75 c6 dc 65 Data Ascii: )'\nx/<F2,~`m6RH;`Fsn;cHV]#m0vZJZ[4ZpCMX1Uv1a1!:qIZXyQmH+'R8nbC9d2r8:WOMAb(.\|!x~yO%1:!#]m0K3!xjmm%,uO>AiX(BCue

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
5	192.168.2.4	49699	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:19 UTC	145	OUT	GET /front_end/front_end_files/AlertBox.css HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hs-login.online/front_end/front_end_files/ursula.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:19 UTC	148	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:19 GMT Content-Type: text/css Content-Length: 6119 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:37 GMT ETag: "17e7-5fd6542c92c46" Accept-Ranges: bytes Vary: Accept-Encoding
2023-06-06 08:38:19 UTC	149	IN	Data Raw: 2e 75 72 73 75 6c 61 20 2e 61 6c 65 72 74 42 6f 78 57 72 61 70 70 65 72 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 75 72 73 75 6c 61 20 2e 63 6f 6e 66 69 72 6d 41 6c 65 72 74 53 65 63 6f 6e 64 61 72 79 20 7b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 32 30 70 78 3b 0a 7d 0a 2e 75 72 73 75 6c 61 20 2e 61 6c 65 72 74 42 6f 78 20 7b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 2e 75 72 73 75 6c 61 20 2e 61 6c 65 72 74 42 6f 78 20 2e 61 6c 65 72 74 42 6f 78 49 6e 6e 65 72 20 7b 0a 09 62 6f 72 64 65 72 3a 20 33 70 78 20 73 6f 6c 69 64 20 23 46 46 43 42 43 39 3b 0a Data Ascii: .ursula .alertBoxWrapper {display: none;}.ursula .confirmAlertSecondary {width: 100%;position: relative;padding-top: 20px;}.ursula .alertBox {width: 100%;position: relative;}.ursula .alertBox .alertBoxInner {border: 3px solid #FFCBC9;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
50	192.168.2.4	49761	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:22 UTC	578	OUT	GET /front_end/front_end_files/D650-login-seckey-300x255.jpg HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hs-login.online/pages Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:23 UTC	613	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:22 GMT Content-Type: image/jpeg Content-Length: 23947 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:39 GMT ETag: "5d8b-5fd6542e687eb" Accept-Ranges: bytes
2023-06-06 08:38:23 UTC	613	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 ff 01 2c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC,"}!1AQa"q2
2023-06-06 08:38:23 UTC	641	IN	Data Raw: ec 19 d5 94 9b 7b 77 90 c7 1f ca cc ab b5 46 c5 72 a9 b5 49 5a d2 f1 cf 83 f4 df 1c 68 6f a5 ea 89 70 6d 8c b1 5c 2b da dc 49 6f 34 52 c5 22 c9 1b a4 91 90 ca ca ca a4 10 7d 8f 19 15 d4 bf dd f4 aa 97 0b b9 0d 54 77 08 ab e9 dc f3 cd 57 e0 df 86 35 eb e7 9e ed 35 21 f6 94 8a 1b e8 e0 d5 ae a1 8e fd 51 42 8f b4 a2 48 04 c7 6a 85 25 c1 2c bf 2b 6e 1c 57 65 2c 88 8f 14 22 20 b6 d6 ea 23 48 23 f9 54 28 18 c0 c7 4e 94 ea 7d cd 9b 49 21 91 5d 55 5b 0d c9 03 a8 cf 4a ea 38 af 66 70 1e 0f f8 5d 67 e1 1d 27 c4 b6 37 d6 5a 7c cd e2 3d 52 f7 54 d4 2d ed 63 26 de 41 73 23 10 84 30 1b b1 0e c5 62 47 cc db 9b 03 76 2b 43 c3 df 0a f4 2f 08 eb 5f da 36 83 50 ba bb 48 4d bd bb ea 7a 9d c5 ef d9 a2 62 09 48 44 ce e1 01 c2 e4 8c 16 08 a0 92 14 63 ab 4b 64 56 cc 92 e7 1d 02 Data Ascii: {wFrIZhopm\+Io4R"}TwW55!QBHj%,+nWe," #H#T(N}I!]U[J8fp]g'7Z\|=RT-c&As#0bGv+C/_6PHMzbHDcKdV

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
51	192.168.2.4	49762	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:22 UTC	579	OUT	GET /front_end/front_end_files/D650-login-cc-300x255.jpg HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hs-login.online/pages Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:23 UTC	579	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:23 GMT Content-Type: image/jpeg Content-Length: 17295 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:39 GMT ETag: "438f-5fd6542e59d8b" Accept-Ranges: bytes
2023-06-06 08:38:23 UTC	580	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 ff 01 2c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC,"}!1AQa"q2
2023-06-06 08:38:23 UTC	595	IN	Data Raw: fe 14 9f c4 7f fa 27 5e 30 ff 00 c2 7e f3 ff 00 8d 57 ec c3 50 b4 7f 63 d2 fe 76 1f f1 17 33 1f fa 05 a7 ff 00 93 7f 99 f8 d1 ff 00 0a 47 e2 3f fd 13 af 18 7f e1 3d 79 ff 00 c6 a8 ff 00 85 23 f1 23 fe 89 d7 8c 7f f0 9e bc ff 00 e3 55 fb 34 b4 b4 7f 63 d2 fe 76 1f f1 17 33 2f fa 05 a7 ff 00 93 7f 99 f2 1f fc 13 e7 e1 17 8a be 1c e9 1e 31 d5 bc 4d a4 dc e8 69 ac b5 9c 56 b6 97 d1 98 e7 22 1f 3c b3 b4 67 94 04 cc 00 0c 01 f9 4f 18 c6 7e b8 dd 4e 65 a2 bd aa 14 a3 87 a6 a9 c7 64 7e 41 9c 66 95 b3 ac 7d 5c c2 ba 4a 53 77 b2 d9 59 24 bf 04 8f c8 3b 7b a7 6f fe b5 5a 8e 66 df 4f b6 d3 cf 52 3a d5 fb 7d 2c f5 c5 76 dc f9 e2 86 e6 dc 69 e1 5b 15 a8 ba 69 56 1c 72 6a c0 d3 b0 3e ed 3b 81 ef b6 d6 fb 98 7a 57 a4 f8 1b e2 56 ab e0 9d 2a 4b 1b 1b 7b 49 20 92 66 9d 8d Data Ascii: '^0~WPcv3G?=y##U4cv3/1MiV"<gO~Ned~Af}\JSwY$;{oZfOR:},vi[iVrj>;zWV*K{I f

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
52	192.168.2.4	49768	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:23 UTC	596	OUT	GET /front_end/front_end_files/hsbc-logo.gif HTTP/1.1 Host: hs-login.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:23 UTC	636	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:23 GMT Content-Type: image/gif Content-Length: 4881 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:40 GMT ETag: "1311-5fd6542fc520e" Accept-Ranges: bytes
2023-06-06 08:38:23 UTC	636	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 bf 00 00 00 3a 08 06 00 00 00 e1 97 88 6d 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 12 cb 49 44 41 54 78 01 ed 5d 07 74 54 d5 d6 de 49 26 85 90 04 90 92 84 66 e8 55 84 47 13 10 a5 db bb 3c e0 d7 c7 4f 68 52 74 c9 13 14 15 bb 2e 97 f2 fe df 5f 79 4f 3a a1 2a 45 c0 e5 5a 56 6a c0 d0 45 58 a0 80 09 10 42 80 84 a6 a4 90 9e 9c 7f 7f 67 3c 97 3b 93 99 cc dc c9 cc 24 92 7b d6 9a 39 f7 9e 7b ea be df de 67 9f 7d f6 99 09 10 1c c8 0c 26 05 6a 20 05 02 6b e0 98 cd 21 9b 14 90 14 30 c1 6f 02 a1 c6 52 c0 04 7f 8d 7d f5 e6 c0 4d f0 9b 18 a8 b1 14 30 c1 5f 63 5f bd 39 70 13 fc 26 06 6a 2c 05 4c f0 d7 d8 57 6f 0e dc 04 bf 89 81 1a 4b 01 8b bf 46 2e 0a 8b a8 f0 a7 c3 54 7a e1 02 51 70 08 37 5b d5 7b 6b 01 24 4a Data Ascii: PNGIHDR:msRGBIDATx]tTI&fUG<OhRt._yO:*EZVjEXBg<;${9{g}&j k!0oR}M0_c_9p&j,LWoKF.TzQp7[{k$J

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
53	192.168.2.4	49769	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:24 UTC	649	OUT	GET /favicon.ico HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hs-login.online/pages Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:24 UTC	649	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:24 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
54	192.168.2.4	49772	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:25 UTC	649	OUT	GET /front_end/front_end_files/btn_register_now.jpg HTTP/1.1 Host: hs-login.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:25 UTC	652	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:25 GMT Content-Type: image/jpeg Content-Length: 5283 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:37 GMT ETag: "14a3-5fd6542cfa487" Accept-Ranges: bytes
2023-06-06 08:38:25 UTC	652	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 5a 00 00 ff e1 03 2f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyZ/http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
55	192.168.2.4	49778	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:25 UTC	650	OUT	GET /front_end/front_end_files/protecting-your-money.jpg HTTP/1.1 Host: hs-login.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:25 UTC	657	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:25 GMT Content-Type: image/jpeg Content-Length: 12270 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:46 GMT ETag: "2fee-5fd65435927bc" Accept-Ranges: bytes
2023-06-06 08:38:25 UTC	657	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 6d 01 c2 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFCCm"}!1AQa"q2

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
56	192.168.2.4	49770	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:25 UTC	650	OUT	GET /front_end/front_end_files/how-to-stay-safe-online.jpg HTTP/1.1 Host: hs-login.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:25 UTC	669	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:25 GMT Content-Type: image/jpeg Content-Length: 5617 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:40 GMT ETag: "15f1-5fd6542fb580e" Accept-Ranges: bytes
2023-06-06 08:38:25 UTC	670	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 01 00 01 00 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 00 2d 00 c8 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 02 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 08 0a 01 05 06 07 09 02 03 0b ff c4 00 43 10 00 00 05 03 03 00 04 0a 09 02 04 07 01 00 00 00 01 02 04 05 06 03 07 08 00 09 11 12 21 59 98 13 14 15 16 19 1a 31 51 d7 d8 Data Ascii: JFIFCC-"C!Y1Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
57	192.168.2.4	49776	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:25 UTC	651	OUT	GET /front_end/front_end_files/app-store.jpg HTTP/1.1 Host: hs-login.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:25 UTC	675	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:25 GMT Content-Type: image/jpeg Content-Length: 5218 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:37 GMT ETag: "1462-5fd6542cc29e7" Accept-Ranges: bytes
2023-06-06 08:38:25 UTC	675	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 31 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyF1http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
58	192.168.2.4	49771	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:25 UTC	651	OUT	GET /front_end/front_end_files/D650-login-cc-300x255.jpg HTTP/1.1 Host: hs-login.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:26 UTC	680	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:25 GMT Content-Type: image/jpeg Content-Length: 17295 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:39 GMT ETag: "438f-5fd6542e59d8b" Accept-Ranges: bytes
2023-06-06 08:38:26 UTC	681	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 ff 01 2c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC,"}!1AQa"q2
2023-06-06 08:38:26 UTC	696	IN	Data Raw: fe 14 9f c4 7f fa 27 5e 30 ff 00 c2 7e f3 ff 00 8d 57 ec c3 50 b4 7f 63 d2 fe 76 1f f1 17 33 1f fa 05 a7 ff 00 93 7f 99 f8 d1 ff 00 0a 47 e2 3f fd 13 af 18 7f e1 3d 79 ff 00 c6 a8 ff 00 85 23 f1 23 fe 89 d7 8c 7f f0 9e bc ff 00 e3 55 fb 34 b4 b4 7f 63 d2 fe 76 1f f1 17 33 2f fa 05 a7 ff 00 93 7f 99 f2 1f fc 13 e7 e1 17 8a be 1c e9 1e 31 d5 bc 4d a4 dc e8 69 ac b5 9c 56 b6 97 d1 98 e7 22 1f 3c b3 b4 67 94 04 cc 00 0c 01 f9 4f 18 c6 7e b8 dd 4e 65 a2 bd aa 14 a3 87 a6 a9 c7 64 7e 41 9c 66 95 b3 ac 7d 5c c2 ba 4a 53 77 b2 d9 59 24 bf 04 8f c8 3b 7b a7 6f fe b5 5a 8e 66 df 4f b6 d3 cf 52 3a d5 fb 7d 2c f5 c5 76 dc f9 e2 86 e6 dc 69 e1 5b 15 a8 ba 69 56 1c 72 6a c0 d3 b0 3e ed 3b 81 ef b6 d6 fb 98 7a 57 a4 f8 1b e2 56 ab e0 9d 2a 4b 1b 1b 7b 49 20 92 66 9d 8d Data Ascii: '^0~WPcv3G?=y##U4cv3/1MiV"<gO~Ned~Af}\JSwY$;{oZfOR:},vi[iVrj>;zWV*K{I f

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
59	192.168.2.4	49780	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:26 UTC	697	OUT	GET /front_end/front_end_files/20109-PWS-SAAS-login-scam-300x255.jpg HTTP/1.1 Host: hs-login.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:26 UTC	698	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:26 GMT Content-Type: image/jpeg Content-Length: 23435 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:36 GMT ETag: "5b8b-5fd6542b8a1e4" Accept-Ranges: bytes
2023-06-06 08:38:26 UTC	699	IN	Data Raw: ff d8 ff e1 00 6a 45 78 69 66 00 00 49 49 2a 00 10 00 00 00 00 00 00 00 00 00 00 00 02 00 0e 01 02 00 17 00 00 00 2e 00 00 00 31 01 02 00 1c 00 00 00 46 00 00 00 00 00 00 00 6c 6f 67 20 6f 6e 20 62 61 6e 6e 65 72 20 66 6f 72 20 53 41 41 53 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 57 69 6e 64 6f 77 73 00 ff e1 0f ae 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 Data Ascii: jExifII*.1Flog on banner for SAASAdobe Photoshop CS6 Windowshttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Cor
2023-06-06 08:38:26 UTC	714	IN	Data Raw: 29 82 c1 f5 0f 27 8b ba 10 e2 92 9e 5c ee 6e 78 d0 2f f0 3c 87 46 32 2c cc d4 99 18 bc 1b e8 7e 04 60 db 6d ac 84 36 b6 52 97 de 48 d4 e6 94 3b 60 46 9e f3 73 c6 8a 6e 3b 63 48 82 e6 1f 56 5d c7 23 6d d7 02 a0 30 dc 76 5a 4a 90 5a 5b 0b 12 34 83 d4 5a 9b 70 8d 43 4d b9 da f5 02 c4 d8 ef e3 58 82 31 f9 55 a2 76 31 97 61 31 21 d8 ed 3a 95 c2 71 49 5a 58 79 bf 08 51 6d 48 05 2b 05 27 9d f9 9a 0b 09 da 52 e2 38 c4 dc 6e 62 43 39 64 32 b8 f2 e5 be db 72 04 94 38 e2 9e ba da 3a 12 82 db 8b 57 4f 4d 82 41 d3 62 28 2e e0 b6 ec 7c 1e 21 78 7e bb b3 d9 79 e9 4f bc f4 9d 25 c7 15 31 d5 3a ee bd 21 23 cc e1 ec a0 cd 89 b3 5d 6d 30 e1 4b ca bf 33 0f 88 21 78 e8 6a 6d b4 a9 2a 6d 25 2c 75 9e 4f 89 de 80 3e 0e 03 90 2a d5 41 69 bd b3 1d a8 58 28 42 43 85 1b 75 c6 dc 65 Data Ascii: )'\nx/<F2,~`m6RH;`Fsn;cHV]#m0vZJZ[4ZpCMX1Uv1a1!:qIZXyQmH+'R8nbC9d2r8:WOMAb(.\|!x~yO%1:!#]m0K3!xjmm%,uO>AiX(BCue

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
6	192.168.2.4	49700	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:19 UTC	146	OUT	GET /front_end/front_end_files/button.css HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hs-login.online/front_end/front_end_files/ursula.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:19 UTC	155	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:19 GMT Content-Type: text/css Content-Length: 18055 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:38 GMT ETag: "4687-5fd6542d3daa8" Accept-Ranges: bytes Vary: Accept-Encoding
2023-06-06 08:38:19 UTC	156	IN	Data Raw: 2f 2a 20 50 72 69 6d 61 72 79 20 42 75 74 74 6f 6e 20 2a 2f 0a 2e 75 72 73 75 6c 61 20 61 2e 62 75 74 74 6f 6e 2c 0a 2e 75 72 73 75 6c 61 20 64 69 76 2e 62 75 74 74 6f 6e 20 7b 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 31 30 70 78 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 69 6e 68 65 72 69 74 3b 0a 7d 0a 0a 2e 75 72 73 75 6c 61 20 2e 72 69 67 68 74 20 61 2e 62 75 74 74 6f 6e 2c 0a 2e 75 72 73 75 6c 61 20 2e 72 69 67 68 74 20 64 69 76 2e 62 75 74 74 6f 6e 20 7b 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 30 3b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 30 70 78 3b 0a 7d 0a 0a 2e 75 72 73 75 6c 61 20 2e 72 69 67 68 74 20 61 2e 62 74 6e 52 65 66 72 65 73 68 20 7b 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 32 30 70 78 3b 0a 7d 0a 0a 2e 75 72 Data Ascii: /* Primary Button */.ursula a.button,.ursula div.button {margin-right: 10px;position: inherit;}.ursula .right a.button,.ursula .right div.button {margin-right: 0;margin-left: 10px;}.ursula .right a.btnRefresh {margin-right: 20px;}.ur
2023-06-06 08:38:19 UTC	171	IN	Data Raw: 2f 68 73 62 63 2f 77 69 64 67 65 74 2f 74 68 65 6d 65 73 2f 75 72 73 75 6c 61 2f 69 6d 61 67 65 73 2f 62 75 74 74 6f 6e 2f 64 6f 75 62 6c 65 2d 61 72 72 6f 77 2d 75 70 2e 67 69 66 22 29 3b 0a 7d 0a 2e 64 6a 5f 69 65 37 20 2e 75 72 73 75 6c 61 20 61 2e 62 75 74 74 6f 6e 41 72 72 6f 77 20 2e 69 63 6f 6e 20 7b 0a 09 68 65 69 67 68 74 3a 20 31 35 70 78 3b 0a 7d 0a 0a 2f 2a 2a 2a 66 6f 72 20 62 75 74 74 6f 6e 20 20 73 65 63 6f 6e 64 61 72 79 2a 2a 2a 2f 0a 2e 75 72 73 75 6c 61 20 64 69 76 2e 73 65 63 6f 6e 64 61 72 79 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 65 63 75 72 69 74 79 2e 68 73 62 63 2e 63 6f 2e 75 6b 2f 67 73 70 2f 73 61 61 73 2f 43 6f 6d 70 6f 6e 65 6e 74 73 2f 64 65 66 61 75 6c Data Ascii: /hsbc/widget/themes/ursula/images/button/double-arrow-up.gif");}.dj_ie7 .ursula a.buttonArrow .icon {height: 15px;}/*for button secondary*/.ursula div.secondary { background: url("https://www.security.hsbc.co.uk/gsp/saas/Components/defaul

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
60	192.168.2.4	49781	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:26 UTC	698	OUT	GET /front_end/front_end_files/D650-login-seckey-300x255.jpg HTTP/1.1 Host: hs-login.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:26 UTC	721	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:26 GMT Content-Type: image/jpeg Content-Length: 23947 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:39 GMT ETag: "5d8b-5fd6542e687eb" Accept-Ranges: bytes
2023-06-06 08:38:26 UTC	722	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 ff 01 2c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC,"}!1AQa"q2
2023-06-06 08:38:26 UTC	737	IN	Data Raw: ec 19 d5 94 9b 7b 77 90 c7 1f ca cc ab b5 46 c5 72 a9 b5 49 5a d2 f1 cf 83 f4 df 1c 68 6f a5 ea 89 70 6d 8c b1 5c 2b da dc 49 6f 34 52 c5 22 c9 1b a4 91 90 ca ca ca a4 10 7d 8f 19 15 d4 bf dd f4 aa 97 0b b9 0d 54 77 08 ab e9 dc f3 cd 57 e0 df 86 35 eb e7 9e ed 35 21 f6 94 8a 1b e8 e0 d5 ae a1 8e fd 51 42 8f b4 a2 48 04 c7 6a 85 25 c1 2c bf 2b 6e 1c 57 65 2c 88 8f 14 22 20 b6 d6 ea 23 48 23 f9 54 28 18 c0 c7 4e 94 ea 7d cd 9b 49 21 91 5d 55 5b 0d c9 03 a8 cf 4a ea 38 af 66 70 1e 0f f8 5d 67 e1 1d 27 c4 b6 37 d6 5a 7c cd e2 3d 52 f7 54 d4 2d ed 63 26 de 41 73 23 10 84 30 1b b1 0e c5 62 47 cc db 9b 03 76 2b 43 c3 df 0a f4 2f 08 eb 5f da 36 83 50 ba bb 48 4d bd bb ea 7a 9d c5 ef d9 a2 62 09 48 44 ce e1 01 c2 e4 8c 16 08 a0 92 14 63 ab 4b 64 56 cc 92 e7 1d 02 Data Ascii: {wFrIZhopm\+Io4R"}TwW55!QBHj%,+nWe," #H#T(N}I!]U[J8fp]g'7Z\|=RT-c&As#0bGv+C/_6PHMzbHDcKdV

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
61	192.168.2.4	49785	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:40 UTC	745	OUT	GET /recover-username.php HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:40 UTC	746	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:40 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
62	192.168.2.4	49794	18.66.192.16	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:42 UTC	746	OUT	GET /utag/hsbc//utag.sync.js HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.security.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:38:43 UTC	747	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3 Connection: close Last-Modified: Thu, 02 Mar 2023 22:20:41 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: nLbQyMlglyGoXodCndLd0t6DmRceuaJH Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 06 Jun 2023 07:46:32 GMT ETag: "b519d08ef66fd54910edbedba6181ec2" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 f8d34d99bd5a267bad6857ae101ea8e2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P1 X-Amz-Cf-Id: ZrHhkuCC1AO60sKecgMwllIwMR5_cJyRyeM5kaHsLGCzFhk5e7Fssw== Age: 3379
2023-06-06 08:38:43 UTC	747	IN	Data Raw: 2f 2f 0a Data Ascii: //

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
63	192.168.2.4	49832	18.66.192.16	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:44 UTC	747	OUT	GET /utag/hsbc//utag.js HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.security.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:38:45 UTC	748	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3 Connection: close Last-Modified: Thu, 02 Mar 2023 22:20:41 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: nLbQyMlglyGoXodCndLd0t6DmRceuaJH Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 06 Jun 2023 07:46:32 GMT ETag: "b519d08ef66fd54910edbedba6181ec2" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 551f2461af0b3bf4faaad831ee6e5b1e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P1 X-Amz-Cf-Id: BNwn3hyek5A-wUsGceTb1RVhlKj9SILAv4Sna_bz7sc5NjGC3gkNDQ== Age: 3381
2023-06-06 08:38:45 UTC	748	IN	Data Raw: 2f 2f 0a Data Ascii: //

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
64	192.168.2.4	49845	35.81.20.183	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:47 UTC	748	OUT	POST /eumcollector/beacons/browser/v1/AD-AAB-AAB-WKX/adrum HTTP/1.1 Host: col.eum-appdynamics.com Connection: keep-alive Content-Length: 8304 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Content-type: text/plain Accept: / Origin: https://www.security.hsbc.co.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.security.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:38:47 UTC	749	OUT	Data Raw: 7b 22 76 72 22 3a 22 34 2e 32 2e 30 2e 32 22 2c 22 64 74 22 3a 22 52 22 2c 22 72 67 22 3a 22 30 22 2c 22 65 73 22 3a 5b 7b 22 65 67 22 3a 22 31 22 2c 22 65 74 22 3a 34 2c 22 65 75 22 3a 22 30 3a 2f 2f 31 2f 32 2f 33 2f 22 2c 22 74 73 22 3a 31 36 38 36 30 34 30 37 35 33 35 36 31 2c 22 6d 67 22 3a 22 30 22 2c 22 61 75 22 3a 22 30 3a 2f 2f 31 2f 32 2f 33 2f 22 2c 22 61 74 22 3a 30 2c 22 64 6d 22 3a 22 55 6e 63 61 75 67 68 74 20 53 79 6e 74 61 78 45 72 72 6f 72 3a 20 55 6e 65 78 70 65 63 74 65 64 20 74 6f 6b 65 6e 20 27 7d 27 22 2c 22 6c 6e 22 3a 31 33 34 30 2c 22 73 74 61 63 6b 22 3a 22 53 79 6e 74 61 78 45 72 72 6f 72 3a 20 55 6e 65 78 70 65 63 74 65 64 20 74 6f 6b 65 6e 20 27 7d 27 22 2c 22 73 69 22 3a 30 7d 2c 7b 22 65 67 22 3a 22 32 22 2c 22 65 74 22 3a Data Ascii: {"vr":"4.2.0.2","dt":"R","rg":"0","es":[{"eg":"1","et":4,"eu":"0://1/2/3/","ts":1686040753561,"mg":"0","au":"0://1/2/3/","at":0,"dm":"Uncaught SyntaxError: Unexpected token '}'","ln":1340,"stack":"SyntaxError: Unexpected token '}'","si":0},{"eg":"2","et":
2023-06-06 08:38:47 UTC	757	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:38:47 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:32\|g:f4100747-7256-46e7-b21d-d5c7217d7bc8; Path=/; Expires=Tue, 06-Jun-2023 08:39:17 GMT; Max-Age=30 expires: 0 set-cookie: ADRUM_BTa=R:32\|g:f4100747-7256-46e7-b21d-d5c7217d7bc8\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Tue, 06-Jun-2023 08:39:17 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Tue, 06-Jun-2023 08:39:17 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:32\|i:559461; Path=/; Expires=Tue, 06-Jun-2023 08:39:17 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:32\|i:559461\|e:6; Path=/; Expires=Tue, 06-Jun-2023 08:39:17 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2023-06-06 08:38:47 UTC	758	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
65	192.168.2.4	49852	35.81.20.183	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:56 UTC	758	OUT	POST /eumcollector/beacons/browser/v1/AD-AAB-AAB-WKX/adrum HTTP/1.1 Host: col.eum-appdynamics.com Connection: keep-alive Content-Length: 7832 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Content-type: text/plain Accept: / Origin: https://www.security.hsbc.co.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.security.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:38:56 UTC	759	OUT	Data Raw: 7b 22 76 72 22 3a 22 34 2e 32 2e 30 2e 32 22 2c 22 64 74 22 3a 22 52 22 2c 22 72 67 22 3a 22 30 22 2c 22 65 73 22 3a 5b 7b 22 65 67 22 3a 22 31 22 2c 22 65 74 22 3a 34 2c 22 65 75 22 3a 22 30 3a 2f 2f 31 2f 32 2f 33 2f 22 2c 22 74 73 22 3a 31 36 38 36 30 34 30 37 36 33 34 39 37 2c 22 6d 67 22 3a 22 30 22 2c 22 61 75 22 3a 22 30 3a 2f 2f 31 2f 32 2f 33 2f 23 34 22 2c 22 61 74 22 3a 30 2c 22 64 6d 22 3a 22 55 6e 63 61 75 67 68 74 20 53 79 6e 74 61 78 45 72 72 6f 72 3a 20 55 6e 65 78 70 65 63 74 65 64 20 74 6f 6b 65 6e 20 27 7d 27 22 2c 22 6c 6e 22 3a 31 33 34 30 2c 22 73 74 61 63 6b 22 3a 22 53 79 6e 74 61 78 45 72 72 6f 72 3a 20 55 6e 65 78 70 65 63 74 65 64 20 74 6f 6b 65 6e 20 27 7d 27 22 2c 22 73 69 22 3a 33 7d 2c 7b 22 65 67 22 3a 22 32 22 2c 22 65 74 Data Ascii: {"vr":"4.2.0.2","dt":"R","rg":"0","es":[{"eg":"1","et":4,"eu":"0://1/2/3/","ts":1686040763497,"mg":"0","au":"0://1/2/3/#4","at":0,"dm":"Uncaught SyntaxError: Unexpected token '}'","ln":1340,"stack":"SyntaxError: Unexpected token '}'","si":3},{"eg":"2","et
2023-06-06 08:38:56 UTC	766	IN	HTTP/1.1 200 OK Date: Tue, 06 Jun 2023 08:38:56 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:32\|g:d91ea32a-6828-400c-9c6a-1889d8f39c05; Path=/; Expires=Tue, 06-Jun-2023 08:39:26 GMT; Max-Age=30 expires: 0 set-cookie: ADRUM_BTa=R:32\|g:d91ea32a-6828-400c-9c6a-1889d8f39c05\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Tue, 06-Jun-2023 08:39:26 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Tue, 06-Jun-2023 08:39:26 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:32\|i:559461; Path=/; Expires=Tue, 06-Jun-2023 08:39:26 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:32\|i:559461\|e:6; Path=/; Expires=Tue, 06-Jun-2023 08:39:26 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2023-06-06 08:38:56 UTC	767	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
66	192.168.2.4	49853	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:57 UTC	767	OUT	GET / HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373
2023-06-06 08:38:57 UTC	768	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 209311 Connection: close Date: Tue, 06 Jun 2023 08:38:57 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains Content-Security-Policy: default-src 'self' .hsbc.com.hk; script-src 'self' 'unsafe-eval' 'unsafe-inline' .tiqcdn.com .tealiumiq.com .liveperson.net .googletagmanager.com .hsbc.co.uk .hsbc.com.hk .doubleclick.net .googleadservices.com .lpsnmedia.net .optimizely.com .facebook.net .google.com .gstatic.com .appdynamics.com .googleapis.com .awswaf.com bat.bing.com .amazon-adsystem.com players.brightcove.net vjs.zencdn.net s.amazon-adsystem.com .v.liveperson.net googleads.g.doubleclick.net connect.facebook.net static.ads-twitter.com tags.tiqcdn.com lptag.liveperson.net lpcdn.lpsnmedia.net cdn.optimizely.com accdn.lpsnmedia.net www.googletagmanager.com cdn.appdynamics.com www.google-analytics.com ssl.google-analytics.com www.googleadservices.com cdn-assets-prod.s3.amazonaws.com app.contentsquare.com; img-src data: blob:; connect-src 'self' .tiqcdn.com .tealiumiq.com .hsbc.com.hk .eum-appdynamics.com .optimizely.com wss://.liveperson.net .cloud.hsbc .awswaf.com .contentsquare.net bat.bing.com manifest.prod.boltdns.net .brightcovecdn.com adservice.google.com .api.brightcove.com brightcove.hs.llnwd.net www.facebook.com maps.googleapis.com www.google.com www.googletagmanager.com .siteintercept.qualtrics.com ad.doubleclick.net http://127.0.0.1:5000 http://127.0.0.1:5000/* stats.g.doubleclick.net www.google-analytics.com t.co analytics.twitter.com analytics.google.com logx.optimizely.com www.google.co.uk hsbc.co.uk www.hsbc.co.uk .demdex.net .lo.cobrowse.liveperson.net .tt.omtrdc.net .sc.omtrdc.net .mcmprod.hsbc.co.uk rbwm-api.us.hsbc.com rbwm-api.hsbc.co.uk rbwm-api.hsbc.com.hk www.askus.hsbc.co.uk www.security.hsbc.co.uk translate.googleapis.com .brightcove.com cdn-assets-prod.s3.amazonaws.com; frame-src 'self' blob: .lpsnmedia.net .optimizely.com .liveperson.net .google.com .doubleclick.net www.facebook.com connect.facebook.net www.youtube.com m.youtube.com .demdex.net www.googletagmanager.com td.doubleclick.net .ep-mimecast.facebook.com 8068700.fls.doubleclick.net gateway.zscalertwo.net google.com; frame-ancestors 'self' www.hsbc.co.uk .liveperson.net; font-src 'self' data: .hsbc.com.hk fonts.gstatic.com .cloudfront.net at.alicdn.com cdn.jsdelivr.net; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' .hsbc.com.hk .googleapis.com .askus.hsbc.co.uk www.googletagmanager.com .lo.cobrowse.liveperson.net; object-src 'self' players.brightcove.net; media-src 'self' blob: lpcdn.lpsnmedia.net *.brightcovecdn.com manifest.prod.boltdns.net ssl.gstatic.com brightcove.hs.llnwd.net; manifest-src 'self' www.hsbc.co.uk; upgrade-insecure-requests ; report-uri /csp/report; Last-Modified: Tue, 06 Jun 2023 08:11:01 GMT Accept-Ranges: bytes S: dispatcher2euwest2 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=60, s-maxage=60 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 14930ca61b5acb472c19a8d7b170ad10.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: QJIZxtYREwt8ohIX1c0zDkXJc5eZyNiZX52ulMzQtY8WufliwHwhbw==
2023-06-06 08:38:57 UTC	771	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 67 62 22 20 64 69 72 3d 22 6c 74 72 22 20 69 74 65 6d 73 63 6f 70 65 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 50 61 67 65 22 3e 0a 3c 21 2d 2d 20 64 70 77 73 20 61 70 70 20 76 65 72 73 69 6f 6e 3a 20 32 2e 31 30 32 2e 30 2e 32 30 32 33 30 35 31 38 31 32 30 31 30 30 20 2d 2d 3e 0a 3c 21 2d 2d 20 64 70 77 73 2d 63 73 20 61 70 70 20 76 65 72 73 69 6f 6e 3a 20 32 2e 34 30 2e 30 2e 32 30 32 33 30 35 31 38 31 32 35 33 34 30 20 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 0a 0a 09 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 48 53 42 43 20 55 4b 20 2d 20 50 65 72 73 6f 6e 61 6c 20 26 61 6d 70 3b 20 4f 6e 6c 69 6e 65 20 42 Data Ascii: <!doctype html><html lang="en-gb" dir="ltr" itemscope itemtype="http://schema.org/WebPage">... dpws app version: 2.102.0.20230518120100 -->... dpws-cs app version: 2.40.0.20230518125340 --><head> <title>HSBC UK - Personal & Online B
2023-06-06 08:38:57 UTC	784	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 68 65 61 64 65 72 2d 64 72 6f 70 64 6f 77 6e 20 68 65 61 64 65 72 2d 75 73 65 72 2d 77 72 61 70 70 65 72 20 72 65 67 69 73 74 65 72 2d 62 75 74 74 6f 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 68 70 5f 6c 69 6e 6b 5f 31 22 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 Data Ascii: </li> <li class="header-dropdown header-user-wrapper register-button"> <div id="hp_link_1" class="link-container">
2023-06-06 08:38:57 UTC	787	IN	Data Raw: 6f 6f 72 6d 61 74 2d 30 20 68 65 61 64 65 72 2d 64 6f 6f 72 6d 61 74 2d 6d 6f 62 69 6c 65 2d 74 69 74 6c 65 20 73 69 64 65 62 61 72 2d 73 75 62 6d 65 6e 75 2d 74 72 69 67 67 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 69 63 6f 6e 20 69 63 6f 6e 2d 62 61 6e 6b 69 6e 67 20 68 69 64 65 2d 6f 6e 2d 64 65 73 6b 74 6f 70 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 65 61 64 65 72 2d 6d 61 69 6e 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 74 69 74 6c 65 22 3e 42 61 6e 6b 69 6e 67 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 69 63 6f 6e 20 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 72 69 67 68 Data Ascii: oormat-0 header-doormat-mobile-title sidebar-submenu-trigger"> <span class="icon icon-banking hide-on-desktop" aria-hidden="true"></span> <span class="header-main-navigation-title">Banking</span> <span class="icon icon-chevron-righ
2023-06-06 08:38:57 UTC	787	IN	Data Raw: 76 3e 0a 20 20 20 20 3c 64 69 76 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 63 6c 61 73 73 3d 22 64 6f 6f 72 6d 61 74 2d 6d 65 6e 75 22 20 64 61 74 61 2d 73 6f 75 72 63 65 3d 22 68 65 61 64 65 72 2d 64 6f 6f 72 6d 61 74 2d 30 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 6f 6f 72 6d 61 74 2d 63 6f 6e 74 61 69 6e 65 72 20 72 6f 77 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 6f 6f 72 6d 61 74 2d 6d 61 69 6e 20 73 6d 2d 31 32 20 6c 67 2d 39 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 6f 6f 72 6d 61 74 2d 6d 61 69 Data Ascii: v> <div aria-hidden="true" class="doormat-menu" data-source="header-doormat-0"> <div class="doormat-container row"> <div class="doormat-main sm-12 lg-9"> <div class="row"> <div class="doormat-mai
2023-06-06 08:38:57 UTC	803	IN	Data Raw: 2d 68 65 61 64 69 6e 67 22 3e 4c 6f 61 6e 73 3c 2f 68 32 3e 0a 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 3c 75 6c 20 63 6c 61 73 73 3d 22 64 6f 6f 72 6d 61 74 2d 6c 69 6e 6b 73 22 3e 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 68 73 62 63 2e 63 6f 2e 75 6b 2f 6c 6f 61 6e 73 2f 70 72 6f 64 75 63 74 73 2f 70 65 72 73 6f 6e 61 6c 2f 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 50 65 72 73 6f 6e 61 6c 20 4c 6f 61 6e 22 20 64 61 74 61 2d 65 76 65 6e 74 2d 63 6f 6d 70 6f 6e 65 6e 74 3d 22 74 6f 70 6e 61 76 22 20 64 61 74 61 2d 65 76 65 6e 74 2d 6e 61 6d 65 3d 22 42 6f 72 72 6f 77 69 6e 67 3a 20 4c 6f 61 6e 73 3a 20 50 65 Data Ascii: -heading">Loans</h2> </a> <ul class="doormat-links"> <li> <a href="https://www.hsbc.co.uk/loans/products/personal/" aria-label="Personal Loan" data-event-component="topnav" data-event-name="Borrowing: Loans: Pe
2023-06-06 08:38:57 UTC	819	IN	Data Raw: 20 3c 75 6c 20 63 6c 61 73 73 3d 22 64 6f 6f 72 6d 61 74 2d 6c 69 6e 6b 73 22 3e 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 68 73 62 63 2e 63 6f 2e 75 6b 2f 69 6e 76 65 73 74 6d 65 6e 74 73 2f 65 78 69 73 74 69 6e 67 2d 63 75 73 74 6f 6d 65 72 73 2f 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 45 78 69 73 74 69 6e 67 20 63 75 73 74 6f 6d 65 72 73 22 20 64 61 74 61 2d 65 76 65 6e 74 2d 63 6f 6d 70 6f 6e 65 6e 74 3d 22 74 6f 70 6e 61 76 22 20 64 61 74 61 2d 65 76 65 6e 74 2d 6e 61 6d 65 3d 22 49 6e 76 65 73 74 69 6e 67 3a 20 41 6c 72 65 61 64 79 20 69 6e 76 65 73 74 69 6e 67 20 77 69 74 68 20 75 73 3f 3a 20 45 78 Data Ascii: <ul class="doormat-links"> <li> <a href="https://www.hsbc.co.uk/investments/existing-customers/" aria-label="Existing customers" data-event-component="topnav" data-event-name="Investing: Already investing with us?: Ex
2023-06-06 08:38:57 UTC	825	IN	Data Raw: 77 2e 68 73 62 63 2e 63 6f 2e 75 6b 2f 69 6e 73 75 72 61 6e 63 65 2f 68 6f 6d 65 2f 63 6c 61 69 6d 73 2f 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 48 6f 6d 65 20 49 6e 73 75 72 61 6e 63 65 20 63 6c 61 69 6d 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 48 6f 6d 65 20 49 6e 73 75 72 61 6e 63 65 20 63 6c 61 69 6d 73 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 68 73 62 63 2e 63 6f 2e 75 6b 2f 69 6e 73 75 72 61 6e 63 65 2f 6c 69 66 65 2f 63 6c 61 69 6d 73 2f 22 20 61 72 69 Data Ascii: w.hsbc.co.uk/insurance/home/claims/" aria-label="Home Insurance claims"> Home Insurance claims </a> </li> <li> <a href="https://www.hsbc.co.uk/insurance/life/claims/" ari
2023-06-06 08:38:57 UTC	841	IN	Data Raw: 6f 6e 2d 72 69 67 68 74 20 68 69 64 65 2d 6f 6e 2d 64 65 73 6b 74 6f 70 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 65 61 64 65 72 2d 6d 61 69 6e 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 73 75 62 74 69 74 6c 65 22 3e 53 65 72 76 69 63 65 20 26 61 6d 70 3b 20 73 65 63 75 72 69 74 79 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 63 6c 61 73 73 3d 22 64 6f 6f 72 6d 61 74 2d 6d 65 6e 75 22 20 64 61 74 61 2d 73 6f 75 72 63 65 3d 22 68 65 61 64 65 72 2d 64 6f 6f 72 6d 61 74 2d 35 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 6f 6f 72 6d 61 Data Ascii: on-right hide-on-desktop" aria-hidden="true"></span> <span class="header-main-navigation-subtitle">Service & security</span> </div> <div aria-hidden="true" class="doormat-menu" data-source="header-doormat-5"> <div class="doorma
2023-06-06 08:38:57 UTC	856	IN	Data Raw: 67 73 3a 20 4c 6f 79 61 6c 74 79 20 43 61 73 68 20 49 53 41 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4c 6f 79 61 6c 74 79 20 43 61 73 68 20 49 53 41 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 68 73 62 63 2e 63 6f 2e 75 6b 2f 73 61 76 69 6e 67 73 2f 70 72 6f 64 75 63 74 73 2f 6f 6e 6c 69 6e 65 2d 62 6f 6e 75 73 2d 73 61 76 65 72 2f 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 20 4f 6e 6c 69 6e 65 20 42 6f 6e 75 73 20 53 61 76 65 72 22 20 64 61 74 61 2d 65 76 65 6e 74 2d Data Ascii: gs: Loyalty Cash ISA"> Loyalty Cash ISA </a> </li> <li> <a href="https://www.hsbc.co.uk/savings/products/online-bonus-saver/" aria-label=" Online Bonus Saver" data-event-
2023-06-06 08:38:57 UTC	872	IN	Data Raw: 61 74 65 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4d 6f 72 74 67 61 67 65 20 72 61 74 65 73 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 68 73 62 63 2e 63 6f 2e 75 6b 2f 6d 6f 72 74 67 61 67 65 73 2f 63 61 6c 63 75 6c 61 74 6f 72 73 2f 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 4d 6f 72 74 67 61 67 65 20 63 61 6c 63 75 6c 61 74 6f 72 73 22 20 64 61 74 61 2d 65 76 65 6e 74 2d 63 6f 6d 70 6f 6e 65 6e 74 3d 22 74 6f 70 6e 61 76 22 20 64 61 74 61 2d 65 76 65 6e 74 2d 6e Data Ascii: ates"> Mortgage rates </a> </li> <li> <a href="https://www.hsbc.co.uk/mortgages/calculators/" aria-label="Mortgage calculators" data-event-component="topnav" data-event-n
2023-06-06 08:38:57 UTC	888	IN	Data Raw: 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 68 73 62 63 2e 63 6f 2e 75 6b 2f 69 6e 73 75 72 61 6e 63 65 2f 74 72 61 76 65 6c 2f 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 54 72 61 76 65 6c 20 49 6e 73 75 72 61 6e 63 65 22 20 64 61 74 61 2d 65 76 65 6e 74 2d 63 6f 6d 70 6f 6e 65 6e 74 3d 22 74 6f 70 6e 61 76 22 20 64 61 74 61 2d 65 76 65 6e 74 2d 6e 61 6d 65 3d 22 42 61 6e 6b 69 6e 67 3a 20 49 6e 73 75 72 61 6e 63 65 3a 20 54 72 61 76 65 6c 20 49 6e 73 75 72 61 6e 63 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 54 72 61 76 65 6c 20 49 6e 73 75 72 61 6e 63 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 Data Ascii: <a href="https://www.hsbc.co.uk/insurance/travel/" aria-label="Travel Insurance" data-event-component="topnav" data-event-name="Banking: Insurance: Travel Insurance"> Travel Insurance </a> </li>
2023-06-06 08:38:57 UTC	904	IN	Data Raw: 69 6e 67 3a 20 4d 6f 6e 65 79 20 77 6f 72 72 69 65 73 3a 20 46 69 6e 61 6e 63 69 61 6c 20 61 6e 64 20 64 6f 6d 65 73 74 69 63 20 61 62 75 73 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 46 69 6e 61 6e 63 69 61 6c 20 61 6e 64 20 64 6f 6d 65 73 74 69 63 20 61 62 75 73 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 68 65 6c 70 2f 6d 6f 6e 65 79 2d 77 6f 72 72 69 65 73 2f 6d 61 6e 61 67 69 6e 67 2d 79 6f 75 72 2d 66 69 6e 61 6e 63 65 73 2f 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 4d 61 6e 61 67 69 6e 67 Data Ascii: ing: Money worries: Financial and domestic abuse"> Financial and domestic abuse </a> </li> <li> <a href="/help/money-worries/managing-your-finances/" aria-label="Managing
2023-06-06 08:38:57 UTC	918	IN	Data Raw: 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 63 70 69 2d 6d 61 73 74 68 65 61 64 2d 6c 6f 67 6f 66 66 5f 5f 62 75 74 74 6f 6e 2d 64 70 77 73 20 6c 6f 67 6f 75 74 2d 62 75 74 74 6f 6e 20 68 69 64 64 65 6e 22 20 68 72 65 66 3d 22 23 63 70 69 22 20 74 61 62 69 6e 64 65 78 3d 22 30 22 20 72 6f 6c 65 3d 22 62 75 74 74 6f 6e 22 20 64 61 74 61 2d 65 76 65 6e 74 2d 63 6f 6d 70 6f 6e 65 6e 74 3d 22 74 6f 70 6e 61 76 22 20 64 61 74 61 2d 65 76 65 6e 74 2d 6e 61 6d 65 3d 22 4c 6f 67 20 6f 66 66 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4c 6f 67 20 6f 66 66 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 Data Ascii: <a class="cpi-masthead-logoff__button-dpws logout-button hidden" href="#cpi" tabindex="0" role="button" data-event-component="topnav" data-event-name="Log off"> Log off </a> </div> </div></div
2023-06-06 08:38:57 UTC	934	IN	Data Raw: 6c 64 69 6e 67 2d 63 68 69 6c 64 2d 73 6d 69 6c 69 6e 67 2d 74 6f 67 65 74 68 65 72 2d 38 30 30 78 34 35 30 2e 6a 70 67 2f 6a 63 72 3a 63 6f 6e 74 65 6e 74 2f 72 65 6e 64 69 74 69 6f 6e 73 2f 63 71 35 64 61 6d 2e 77 65 62 2e 32 33 30 2e 31 30 30 30 2e 6a 70 65 67 20 31 78 2c 20 2f 63 6f 6e 74 65 6e 74 2f 64 61 6d 2f 68 73 62 63 2f 63 69 69 6f 6d 2f 69 6d 61 67 65 73 2f 62 61 6e 6b 2d 61 63 63 6f 75 6e 74 73 2f 31 36 2d 39 2f 31 35 36 38 2d 68 6f 6c 64 69 6e 67 2d 63 68 69 6c 64 2d 73 6d 69 6c 69 6e 67 2d 74 6f 67 65 74 68 65 72 2d 38 30 30 78 34 35 30 2e 6a 70 67 2f 6a 63 72 3a 63 6f 6e 74 65 6e 74 2f 72 65 6e 64 69 74 69 6f 6e 73 2f 63 71 35 64 61 6d 2e 77 65 62 2e 34 39 30 2e 31 30 30 30 2e 6a 70 65 67 20 32 78 22 2f 3e 0a 20 20 20 20 20 20 20 20 0a 20 Data Ascii: lding-child-smiling-together-800x450.jpg/jcr:content/renditions/cq5dam.web.230.1000.jpeg 1x, /content/dam/hsbc/ciiom/images/bank-accounts/16-9/1568-holding-child-smiling-together-800x450.jpg/jcr:content/renditions/cq5dam.web.490.1000.jpeg 2x"/>
2023-06-06 08:38:57 UTC	950	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 73 74 65 72 54 69 6c 65 49 74 65 6d 43 68 65 76 72 6f 6e 4c 69 6e 6b 20 6c 69 6e 6b 22 3e 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 68 70 5f 6d 61 69 6e 5f 6c 69 6e 6b 5f 33 30 22 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 41 2d 4c 4e 4b 43 31 36 52 2d 52 57 2d 41 4c 4c 22 20 68 72 65 66 3d 22 2f 73 75 73 74 61 69 6e 61 62 69 6c 69 74 79 2f 22 20 74 61 72 67 65 74 3d 22 5f 73 65 6c 66 22 20 64 Data Ascii: <div class="masterTileItemChevronLink link"> <div id="hp_main_link_30" class="link-container"> <a class="A-LNKC16R-RW-ALL" href="/sustainability/" target="_self" d
2023-06-06 08:38:57 UTC	966	IN	Data Raw: 6c 6f 67 6f 73 2f 66 73 63 73 2e 6a 70 67 20 31 78 22 20 6d 65 64 69 61 3d 22 28 6d 69 6e 2d 77 69 64 74 68 3a 20 39 36 30 70 78 29 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 73 6f 75 72 63 65 20 73 72 63 73 65 74 3d 22 2f 63 6f 6e 74 65 6e 74 2f 64 61 6d 2f 68 73 62 63 2f 67 62 2f 69 6d 61 67 65 73 2f 6c 6f 67 6f 73 2f 66 73 63 73 2e 6a 70 67 20 31 78 22 20 6d 65 64 69 61 3d 22 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 38 30 70 78 29 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 73 6f 75 72 63 65 20 73 72 63 73 65 74 3d 22 2f 63 6f 6e 74 65 6e 74 2f 64 61 6d 2f 68 73 62 63 2f 67 62 2f 69 6d 61 67 65 73 2f 6c 6f 67 6f 73 2f 66 73 63 73 2e 6a 70 67 20 31 78 22 2f 3e 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 3c 69 6d 67 20 69 64 3d 22 68 70 5f 72 65 6c 5f 69 6d 61 67 65 Data Ascii: logos/fscs.jpg 1x" media="(min-width: 960px)"/> <source srcset="/content/dam/hsbc/gb/images/logos/fscs.jpg 1x" media="(min-width: 480px)"/> <source srcset="/content/dam/hsbc/gb/images/logos/fscs.jpg 1x"/> <img id="hp_rel_image

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
67	192.168.2.4	49854	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:57 UTC	976	OUT	GET /etc.clientlibs/dpws/clientlibs-public/clientlib-default.min.7675554f68ae226cdde18af7ac43f392.css HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373
2023-06-06 08:38:57 UTC	977	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 996157 Connection: close Date: Tue, 06 Jun 2023 08:38:57 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains Last-Modified: Sat, 03 Jun 2023 04:23:40 GMT Accept-Ranges: bytes S: dispatcher2euwest2 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=31536000, s-maxage=31536000 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 e96f95ae91ddaf74bf5c3845501fcac8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: fXhQojIvvtRlITd1pNGQ5EQvAHU5FMj17PjlNZfSwXqUONpGgQfH3A==
2023-06-06 08:38:57 UTC	977	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 30 2e 34 20 2d 20 32 30 31 34 2d 30 31 2d 31 37 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 34 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 3b 20 4c 69 63 65 6e 73 65 64 20 4d 49 54 20 2a 2f 2e 75 69 2d 73 6c 69 64 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 0a 2e 75 69 2d 73 6c 69 64 65 72 20 2e 75 69 2d 73 6c 69 64 65 72 2d 68 61 6e 64 6c 65 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7a 2d 69 6e 64 65 78 3a 32 3b 77 69 Data Ascii: @charset "UTF-8";/! jQuery UI - v1.10.4 - 2014-01-17 http://jqueryui.com* Copyright 2014 jQuery Foundation and other contributors; Licensed MIT */.ui-slider{position:relative;text-align:left}.ui-slider .ui-slider-handle{position:absolute;z-index:2;wi
2023-06-06 08:38:57 UTC	993	IN	Data Raw: 65 6e 74 3a 22 5c 65 30 31 32 22 7d 0a 2e 69 63 6f 6e 2d 63 6f 6c 75 6d 6e 2d 76 69 65 77 3a 6e 6f 74 28 2e 6c 69 6e 6b 2d 69 63 6f 6e 29 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 32 22 7d 0a 5b 64 61 74 61 2d 76 61 6c 75 65 5e 3d 69 63 6f 6e 2d 63 6f 6d 70 6c 61 69 6e 74 73 5d 2e 69 63 6f 2d 72 65 76 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 33 22 7d 0a 5b 64 61 74 61 2d 76 61 6c 75 65 5e 3d 69 63 6f 6e 2d 63 6f 6d 70 6c 61 69 6e 74 73 5d 3a 6e 6f 74 28 2e 69 63 6f 2d 72 65 76 29 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 33 22 7d 0a 2e 69 63 6f 6e 2d 63 6f 6d 70 6c 61 69 6e 74 73 2e 6c 69 6e 6b 2d 69 63 6f 6e 2e 69 63 6f 2d 72 65 76 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 Data Ascii: ent:"\e012"}.icon-column-view:not(.link-icon)::after{content:"\e012"}[data-value^=icon-complaints].ico-rev::after{content:"\e013"}[data-value^=icon-complaints]:not(.ico-rev)::after{content:"\e013"}.icon-complaints.link-icon.ico-rev::after{content:"\e0
2023-06-06 08:38:57 UTC	1009	IN	Data Raw: 74 3a 22 5c 66 30 37 30 22 7d 0a 2e 69 63 6f 6e 2d 6d 6f 72 65 2e 6c 69 6e 6b 2d 69 63 6f 6e 2e 69 63 6f 2d 72 65 76 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 30 22 7d 0a 2e 69 63 6f 6e 2d 6d 6f 72 65 2e 6c 69 6e 6b 2d 69 63 6f 6e 3a 6e 6f 74 28 2e 69 63 6f 2d 72 65 76 29 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 30 22 7d 0a 2e 69 63 6f 6e 2d 6d 6f 72 65 3a 6e 6f 74 28 2e 6c 69 6e 6b 2d 69 63 6f 6e 29 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 30 22 7d 0a 5b 64 61 74 61 2d 76 61 6c 75 65 5e 3d 69 63 6f 6e 2d 6d 75 6c 74 69 70 6c 65 2d 61 63 63 6f 75 6e 74 73 5d 2e 69 63 6f 2d 72 65 76 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 33 38 22 7d 0a 5b 64 61 74 61 2d 76 61 6c 75 65 Data Ascii: t:"\f070"}.icon-more.link-icon.ico-rev::after{content:"\f070"}.icon-more.link-icon:not(.ico-rev)::before{content:"\f070"}.icon-more:not(.link-icon)::after{content:"\f070"}[data-value^=icon-multiple-accounts].ico-rev::after{content:"\e038"}[data-value
2023-06-06 08:38:57 UTC	1025	IN	Data Raw: 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 35 35 22 7d 0a 2e 69 63 6f 6e 2d 76 69 6d 65 6f 2e 6c 69 6e 6b 2d 69 63 6f 6e 3a 6e 6f 74 28 2e 69 63 6f 2d 72 65 76 29 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 35 35 22 7d 0a 2e 69 63 6f 6e 2d 76 69 6d 65 6f 3a 6e 6f 74 28 2e 6c 69 6e 6b 2d 69 63 6f 6e 29 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 35 35 22 7d 0a 5b 64 61 74 61 2d 76 61 6c 75 65 5e 3d 69 63 6f 6e 2d 77 65 69 62 6f 2d 73 6f 6c 69 64 5d 2e 69 63 6f 2d 72 65 76 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 35 36 22 7d 0a 5b 64 61 74 61 2d 76 61 6c 75 65 5e 3d 69 63 6f 6e 2d 77 65 69 62 6f 2d 73 6f 6c 69 64 5d 3a 6e 6f 74 28 2e 69 63 6f 2d 72 65 76 29 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e Data Ascii: ter{content:"\e055"}.icon-vimeo.link-icon:not(.ico-rev)::before{content:"\e055"}.icon-vimeo:not(.link-icon)::after{content:"\e055"}[data-value^=icon-weibo-solid].ico-rev::after{content:"\e056"}[data-value^=icon-weibo-solid]:not(.ico-rev)::after{conten
2023-06-06 08:38:57 UTC	1041	IN	Data Raw: 22 7d 0a 2e 69 63 6f 6e 2d 6e 65 77 2d 63 6f 6e 74 61 63 74 5f 70 68 6f 6e 65 2e 6c 69 6e 6b 2d 69 63 6f 6e 2e 69 63 6f 2d 72 65 76 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 32 62 22 7d 0a 2e 69 63 6f 6e 2d 6e 65 77 2d 63 6f 6e 74 61 63 74 5f 70 68 6f 6e 65 2e 6c 69 6e 6b 2d 69 63 6f 6e 3a 6e 6f 74 28 2e 69 63 6f 2d 72 65 76 29 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 32 62 22 7d 0a 2e 69 63 6f 6e 2d 6e 65 77 2d 63 6f 6e 74 61 63 74 5f 70 68 6f 6e 65 3a 6e 6f 74 28 2e 6c 69 6e 6b 2d 69 63 6f 6e 29 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 32 62 22 7d 0a 5b 64 61 74 61 2d 76 61 6c 75 65 5e 3d 69 63 6f 6e 2d 6e 65 77 2d 63 6f 6e 74 61 63 74 5f 73 63 72 65 65 6e 5f 73 68 61 72 65 5d 2e 69 63 6f 2d 72 Data Ascii: "}.icon-new-contact_phone.link-icon.ico-rev::after{content:"\e92b"}.icon-new-contact_phone.link-icon:not(.ico-rev)::before{content:"\e92b"}.icon-new-contact_phone:not(.link-icon)::after{content:"\e92b"}[data-value^=icon-new-contact_screen_share].ico-r
2023-06-06 08:38:57 UTC	1057	IN	Data Raw: 61 2d 76 61 6c 75 65 5e 3d 69 63 6f 6e 2d 6e 65 77 2d 69 6e 73 69 67 68 74 5d 3a 6e 6f 74 28 2e 69 63 6f 2d 72 65 76 29 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 35 63 22 7d 0a 2e 69 63 6f 6e 2d 6e 65 77 2d 69 6e 73 69 67 68 74 2e 6c 69 6e 6b 2d 69 63 6f 6e 2e 69 63 6f 2d 72 65 76 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 35 63 22 7d 0a 2e 69 63 6f 6e 2d 6e 65 77 2d 69 6e 73 69 67 68 74 2e 6c 69 6e 6b 2d 69 63 6f 6e 3a 6e 6f 74 28 2e 69 63 6f 2d 72 65 76 29 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 35 63 22 7d 0a 2e 69 63 6f 6e 2d 6e 65 77 2d 69 6e 73 69 67 68 74 3a 6e 6f 74 28 2e 6c 69 6e 6b 2d 69 63 6f 6e 29 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 35 63 22 7d 0a 5b 64 61 74 61 Data Ascii: a-value^=icon-new-insight]:not(.ico-rev)::after{content:"\e95c"}.icon-new-insight.link-icon.ico-rev::after{content:"\e95c"}.icon-new-insight.link-icon:not(.ico-rev)::before{content:"\e95c"}.icon-new-insight:not(.link-icon)::after{content:"\e95c"}[data
2023-06-06 08:38:57 UTC	1066	IN	Data Raw: 6f 6e 74 65 6e 74 3a 22 5c 65 39 37 35 22 7d 0a 5b 64 61 74 61 2d 76 61 6c 75 65 5e 3d 69 63 6f 6e 2d 6e 65 77 2d 70 6f 73 69 74 69 6f 6e 5f 64 6f 77 6e 5d 2e 69 63 6f 2d 72 65 76 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 37 36 22 7d 0a 5b 64 61 74 61 2d 76 61 6c 75 65 5e 3d 69 63 6f 6e 2d 6e 65 77 2d 70 6f 73 69 74 69 6f 6e 5f 64 6f 77 6e 5d 3a 6e 6f 74 28 2e 69 63 6f 2d 72 65 76 29 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 37 36 22 7d 0a 2e 69 63 6f 6e 2d 6e 65 77 2d 70 6f 73 69 74 69 6f 6e 5f 64 6f 77 6e 2e 6c 69 6e 6b 2d 69 63 6f 6e 2e 69 63 6f 2d 72 65 76 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 37 36 22 7d 0a 2e 69 63 6f 6e 2d 6e 65 77 2d 70 6f 73 69 74 69 6f 6e 5f 64 6f 77 6e 2e 6c 69 6e 6b 2d Data Ascii: ontent:"\e975"}[data-value^=icon-new-position_down].ico-rev::after{content:"\e976"}[data-value^=icon-new-position_down]:not(.ico-rev)::after{content:"\e976"}.icon-new-position_down.link-icon.ico-rev::after{content:"\e976"}.icon-new-position_down.link-
2023-06-06 08:38:57 UTC	1082	IN	Data Raw: 6e 2d 6e 65 77 2d 73 74 61 74 75 73 5f 77 61 72 6e 69 6e 67 5f 6f 6e 61 6d 62 65 72 2e 6c 69 6e 6b 2d 69 63 6f 6e 3a 6e 6f 74 28 2e 69 63 6f 2d 72 65 76 29 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 61 39 22 7d 0a 2e 69 63 6f 6e 2d 6e 65 77 2d 73 74 61 74 75 73 5f 77 61 72 6e 69 6e 67 5f 6f 6e 61 6d 62 65 72 3a 6e 6f 74 28 2e 6c 69 6e 6b 2d 69 63 6f 6e 29 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 61 39 22 7d 0a 5b 64 61 74 61 2d 76 61 6c 75 65 5e 3d 69 63 6f 6e 2d 6e 65 77 2d 73 74 61 74 75 73 5f 77 61 72 6e 69 6e 67 5f 6f 6e 64 61 72 6b 5d 2e 69 63 6f 2d 72 65 76 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 61 63 22 7d 0a 5b 64 61 74 61 2d 76 61 6c 75 65 5e 3d 69 63 6f 6e 2d 6e 65 77 2d 73 74 61 74 75 Data Ascii: n-new-status_warning_onamber.link-icon:not(.ico-rev)::before{content:"\e9a9"}.icon-new-status_warning_onamber:not(.link-icon)::after{content:"\e9a9"}[data-value^=icon-new-status_warning_ondark].ico-rev::after{content:"\e9ac"}[data-value^=icon-new-statu
2023-06-06 08:38:57 UTC	1098	IN	Data Raw: 65 39 32 65 22 7d 0a 5b 64 61 74 61 2d 76 61 6c 75 65 5e 3d 69 63 6f 6e 2d 6e 65 77 2d 63 6f 6e 74 61 63 74 6c 65 73 73 5d 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 32 66 22 7d 0a 5b 64 61 74 61 2d 76 61 6c 75 65 5e 3d 69 63 6f 6e 2d 6e 65 77 2d 63 6f 6e 74 72 6f 6c 5f 62 61 63 6b 77 61 72 64 5d 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 33 30 22 7d 0a 5b 64 61 74 61 2d 76 61 6c 75 65 5e 3d 69 63 6f 6e 2d 6e 65 77 2d 63 6f 6e 74 72 6f 6c 5f 66 6f 72 77 61 72 64 5d 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 33 31 22 7d 0a 5b 64 61 74 61 2d 76 61 6c 75 65 5e 3d 69 63 6f 6e 2d 6e 65 77 2d 63 6f 6e 74 72 6f 6c 5f 70 61 75 73 65 5d 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 33 32 22 7d 0a 5b Data Ascii: e92e"}[data-value^=icon-new-contactless]::after{content:"\e92f"}[data-value^=icon-new-control_backward]::after{content:"\e930"}[data-value^=icon-new-control_forward]::after{content:"\e931"}[data-value^=icon-new-control_pause]::after{content:"\e932"}[
2023-06-06 08:38:57 UTC	1099	IN	Data Raw: 74 61 2d 76 61 6c 75 65 5e 3d 69 63 6f 6e 2d 6e 65 77 2d 64 6f 6c 6c 61 72 5f 62 69 6c 6c 5d 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 34 38 22 7d 0a 5b 64 61 74 61 2d 76 61 6c 75 65 5e 3d 69 63 6f 6e 2d 6e 65 77 2d 64 6f 77 6e 6c 6f 61 64 5d 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 34 39 22 7d 0a 5b 64 61 74 61 2d 76 61 6c 75 65 5e 3d 69 63 6f 6e 2d 6e 65 77 2d 65 64 69 74 5d 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 34 61 22 7d 0a 5b 64 61 74 61 2d 76 61 6c 75 65 5e 3d 69 63 6f 6e 2d 6e 65 77 2d 65 64 75 63 61 74 69 6f 6e 5d 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 34 62 22 7d 0a 5b 64 61 74 61 2d 76 61 6c 75 65 5e 3d 69 63 6f 6e 2d 6e 65 77 2d 65 64 75 63 61 74 69 6f 6e 5f 62 6f Data Ascii: ta-value^=icon-new-dollar_bill]::after{content:"\e948"}[data-value^=icon-new-download]::after{content:"\e949"}[data-value^=icon-new-edit]::after{content:"\e94a"}[data-value^=icon-new-education]::after{content:"\e94b"}[data-value^=icon-new-education_bo
2023-06-06 08:38:57 UTC	1115	IN	Data Raw: 6c 69 63 2f 63 6c 69 65 6e 74 6c 69 62 2d 73 69 74 65 2f 72 65 73 6f 75 72 63 65 73 2f 69 63 6f 6e 73 2f 73 76 67 2f 63 68 61 74 5f 61 69 2e 73 76 67 22 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 7d 0a 2e 69 63 6f 6e 2e 69 63 6f 6e 2d 6e 65 77 2d 63 68 61 74 5f 61 69 3a 3a 61 66 74 65 72 2c 2e 69 63 6f 6e 2e 69 63 6f 6e 2d 6e 65 77 2d 63 68 61 74 5f 61 69 3a 3a 62 65 66 6f 72 65 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 0a 2e 69 63 6f 6e 2e 69 63 6f 6e 2d 6e 65 77 2d 63 68 65 71 75 65 5f 64 65 70 6f 73 69 74 7b 2d 77 65 62 6b 69 74 2d 6d 61 73 6b 3a 75 72 6c 28 22 2e 2e 2f 2e 2e 2f 2e 2e 2f 65 74 63 2e 63 6c 69 65 6e 74 6c 69 62 73 2f 64 70 77 73 2f 63 6c 69 65 6e Data Ascii: lic/clientlib-site/resources/icons/svg/chat_ai.svg") no-repeat center;background-color:#000}.icon.icon-new-chat_ai::after,.icon.icon-new-chat_ai::before{visibility:hidden}.icon.icon-new-cheque_deposit{-webkit-mask:url("../../../etc.clientlibs/dpws/clien
2023-06-06 08:38:57 UTC	1121	IN	Data Raw: 73 69 74 65 2f 72 65 73 6f 75 72 63 65 73 2f 69 63 6f 6e 73 2f 73 76 67 2f 63 68 65 76 72 6f 6e 5f 72 69 67 68 74 2e 73 76 67 22 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 6d 61 73 6b 3a 75 72 6c 28 22 2e 2e 2f 2e 2e 2f 2e 2e 2f 65 74 63 2e 63 6c 69 65 6e 74 6c 69 62 73 2f 64 70 77 73 2f 63 6c 69 65 6e 74 6c 69 62 73 2d 70 75 62 6c 69 63 2f 63 6c 69 65 6e 74 6c 69 62 2d 73 69 74 65 2f 72 65 73 6f 75 72 63 65 73 2f 69 63 6f 6e 73 2f 73 76 67 2f 63 68 65 76 72 6f 6e 5f 72 69 67 68 74 2e 73 76 67 22 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 7d 0a 2e 69 63 6f 6e 2e 69 63 6f 6e 2d 6e 65 77 2d 63 68 65 76 72 6f 6e 5f 72 69 67 68 74 3a 3a 61 66 74 65 72 2c 2e 69 63 6f 6e Data Ascii: site/resources/icons/svg/chevron_right.svg") no-repeat center;mask:url("../../../etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/icons/svg/chevron_right.svg") no-repeat center;background-color:#000}.icon.icon-new-chevron_right::after,.icon
2023-06-06 08:38:57 UTC	1137	IN	Data Raw: 69 65 6e 74 6c 69 62 73 2d 70 75 62 6c 69 63 2f 63 6c 69 65 6e 74 6c 69 62 2d 73 69 74 65 2f 72 65 73 6f 75 72 63 65 73 2f 69 63 6f 6e 73 2f 73 76 67 2f 64 6f 63 75 6d 65 6e 74 5f 63 6f 6e 66 69 64 65 6e 74 69 61 6c 2e 73 76 67 22 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 7d 0a 2e 69 63 6f 6e 2e 69 63 6f 6e 2d 6e 65 77 2d 64 6f 63 75 6d 65 6e 74 5f 63 6f 6e 66 69 64 65 6e 74 69 61 6c 3a 3a 61 66 74 65 72 2c 2e 69 63 6f 6e 2e 69 63 6f 6e 2d 6e 65 77 2d 64 6f 63 75 6d 65 6e 74 5f 63 6f 6e 66 69 64 65 6e 74 69 61 6c 3a 3a 62 65 66 6f 72 65 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 0a 2e 69 63 6f 6e 2e 69 63 6f 6e 2d 6e 65 77 2d 64 6f 63 75 6d 65 6e 74 5f 65 5f 73 74 Data Ascii: ientlibs-public/clientlib-site/resources/icons/svg/document_confidential.svg") no-repeat center;background-color:#000}.icon.icon-new-document_confidential::after,.icon.icon-new-document_confidential::before{visibility:hidden}.icon.icon-new-document_e_st
2023-06-06 08:38:57 UTC	1153	IN	Data Raw: 6c 69 74 79 3a 68 69 64 64 65 6e 7d 0a 2e 69 63 6f 6e 2e 69 63 6f 6e 2d 6e 65 77 2d 70 61 79 6d 65 6e 74 5f 64 69 72 65 63 74 5f 64 65 62 69 74 7b 2d 77 65 62 6b 69 74 2d 6d 61 73 6b 3a 75 72 6c 28 22 2e 2e 2f 2e 2e 2f 2e 2e 2f 65 74 63 2e 63 6c 69 65 6e 74 6c 69 62 73 2f 64 70 77 73 2f 63 6c 69 65 6e 74 6c 69 62 73 2d 70 75 62 6c 69 63 2f 63 6c 69 65 6e 74 6c 69 62 2d 73 69 74 65 2f 72 65 73 6f 75 72 63 65 73 2f 69 63 6f 6e 73 2f 73 76 67 2f 70 61 79 6d 65 6e 74 5f 64 69 72 65 63 74 5f 64 65 62 69 74 2e 73 76 67 22 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 6d 61 73 6b 3a 75 72 6c 28 22 2e 2e 2f 2e 2e 2f 2e 2e 2f 65 74 63 2e 63 6c 69 65 6e 74 6c 69 62 73 2f 64 70 77 73 2f 63 6c 69 65 6e 74 6c 69 62 73 2d 70 75 62 6c 69 63 2f 63 6c 69 65 6e Data Ascii: lity:hidden}.icon.icon-new-payment_direct_debit{-webkit-mask:url("../../../etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/icons/svg/payment_direct_debit.svg") no-repeat center;mask:url("../../../etc.clientlibs/dpws/clientlibs-public/clien
2023-06-06 08:38:57 UTC	1163	IN	Data Raw: 2d 6e 65 77 2d 73 65 63 75 72 69 74 79 5f 64 69 67 69 74 61 6c 5f 69 64 65 6e 74 69 74 79 3a 3a 61 66 74 65 72 2c 2e 69 63 6f 6e 2e 69 63 6f 6e 2d 6e 65 77 2d 73 65 63 75 72 69 74 79 5f 64 69 67 69 74 61 6c 5f 69 64 65 6e 74 69 74 79 3a 3a 62 65 66 6f 72 65 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 0a 2e 69 63 6f 6e 2e 69 63 6f 6e 2d 6e 65 77 2d 73 65 63 75 72 69 74 79 5f 65 6e 74 69 74 6c 65 6d 65 6e 74 73 7b 2d 77 65 62 6b 69 74 2d 6d 61 73 6b 3a 75 72 6c 28 22 2e 2e 2f 2e 2e 2f 2e 2e 2f 65 74 63 2e 63 6c 69 65 6e 74 6c 69 62 73 2f 64 70 77 73 2f 63 6c 69 65 6e 74 6c 69 62 73 2d 70 75 62 6c 69 63 2f 63 6c 69 65 6e 74 6c 69 62 2d 73 69 74 65 2f 72 65 73 6f 75 72 63 65 73 2f 69 63 6f 6e 73 2f 73 76 67 2f 73 65 63 75 72 69 74 79 5f 65 6e 74 Data Ascii: -new-security_digital_identity::after,.icon.icon-new-security_digital_identity::before{visibility:hidden}.icon.icon-new-security_entitlements{-webkit-mask:url("../../../etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/icons/svg/security_ent
2023-06-06 08:38:57 UTC	1179	IN	Data Raw: 70 2e 73 76 67 22 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 7d 0a 2e 69 63 6f 6e 2e 69 63 6f 6e 2d 6e 65 77 2d 74 6f 75 63 68 5f 73 77 69 70 65 5f 75 70 3a 3a 61 66 74 65 72 2c 2e 69 63 6f 6e 2e 69 63 6f 6e 2d 6e 65 77 2d 74 6f 75 63 68 5f 73 77 69 70 65 5f 75 70 3a 3a 62 65 66 6f 72 65 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 0a 2e 69 63 6f 6e 2e 69 63 6f 6e 2d 6e 65 77 2d 74 6f 75 63 68 5f 74 61 70 7b 2d 77 65 62 6b 69 74 2d 6d 61 73 6b 3a 75 72 6c 28 22 2e 2e 2f 2e 2e 2f 2e 2e 2f 65 74 63 2e 63 6c 69 65 6e 74 6c 69 62 73 2f 64 70 77 73 2f 63 6c 69 65 6e 74 6c 69 62 73 2d 70 75 62 6c 69 63 2f 63 6c 69 65 6e 74 6c 69 62 2d 73 69 74 65 2f 72 65 73 6f 75 72 63 65 Data Ascii: p.svg") no-repeat center;background-color:#000}.icon.icon-new-touch_swipe_up::after,.icon.icon-new-touch_swipe_up::before{visibility:hidden}.icon.icon-new-touch_tap{-webkit-mask:url("../../../etc.clientlibs/dpws/clientlibs-public/clientlib-site/resource
2023-06-06 08:38:57 UTC	1182	IN	Data Raw: 69 62 73 2d 70 75 62 6c 69 63 2f 63 6c 69 65 6e 74 6c 69 62 2d 73 69 74 65 2f 72 65 73 6f 75 72 63 65 73 2f 69 63 6f 6e 73 2f 73 76 67 2f 75 70 6c 6f 61 64 2e 73 76 67 22 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 6d 61 73 6b 3a 75 72 6c 28 22 2e 2e 2f 2e 2e 2f 2e 2e 2f 65 74 63 2e 63 6c 69 65 6e 74 6c 69 62 73 2f 64 70 77 73 2f 63 6c 69 65 6e 74 6c 69 62 73 2d 70 75 62 6c 69 63 2f 63 6c 69 65 6e 74 6c 69 62 2d 73 69 74 65 2f 72 65 73 6f 75 72 63 65 73 2f 69 63 6f 6e 73 2f 73 76 67 2f 75 70 6c 6f 61 64 2e 73 76 67 22 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 7d 0a 2e 69 63 6f 6e 2e 69 63 6f 6e 2d 6e 65 77 2d 75 70 6c 6f 61 64 3a 3a 61 66 74 65 72 2c 2e 69 63 6f 6e Data Ascii: ibs-public/clientlib-site/resources/icons/svg/upload.svg") no-repeat center;mask:url("../../../etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/icons/svg/upload.svg") no-repeat center;background-color:#000}.icon.icon-new-upload::after,.icon
2023-06-06 08:38:57 UTC	1198	IN	Data Raw: 75 62 6c 69 63 2f 63 6c 69 65 6e 74 6c 69 62 2d 73 69 74 65 2f 72 65 73 6f 75 72 63 65 73 2f 69 63 6f 6e 73 2f 73 76 67 2f 63 68 65 76 72 6f 6e 5f 72 69 67 68 74 5f 74 68 69 63 6b 2e 73 76 67 22 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 6d 61 73 6b 2d 69 6d 61 67 65 3a 69 6e 68 65 72 69 74 3b 6d 61 73 6b 2d 69 6d 61 67 65 3a 69 6e 68 65 72 69 74 7d 0a 2e 6c 61 6e 64 69 6e 67 50 61 67 65 54 65 6d 70 6c 61 74 65 20 2e 69 63 6f 6e 2e 69 63 6f 6e 2d 6e 65 77 2d 63 68 65 76 72 6f 6e 5f 72 69 67 68 74 5f 74 68 69 63 6b 3a 3a 61 66 74 65 72 2c 2e 6c 61 6e 64 69 6e 67 50 61 67 65 54 65 6d 70 6c 61 74 65 20 2e 69 63 6f 6e 2e 69 63 6f 6e 2d 6e 65 77 2d 63 68 65 76 72 6f 6e 5f 72 69 67 68 74 5f 74 68 69 63 6b 3a 3a 62 65 66 6f Data Ascii: ublic/clientlib-site/resources/icons/svg/chevron_right_thick.svg") no-repeat center;-webkit-mask-image:inherit;mask-image:inherit}.landingPageTemplate .icon.icon-new-chevron_right_thick::after,.landingPageTemplate .icon.icon-new-chevron_right_thick::befo
2023-06-06 08:38:57 UTC	1214	IN	Data Raw: 63 6f 6e 2e 69 63 6f 6e 2d 6e 65 77 2d 65 64 75 63 61 74 69 6f 6e 5f 62 6f 6f 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 22 2e 2e 2f 2e 2e 2f 2e 2e 2f 65 74 63 2e 63 6c 69 65 6e 74 6c 69 62 73 2f 64 70 77 73 2f 63 6c 69 65 6e 74 6c 69 62 73 2d 70 75 62 6c 69 63 2f 63 6c 69 65 6e 74 6c 69 62 2d 73 69 74 65 2f 72 65 73 6f 75 72 63 65 73 2f 69 63 6f 6e 73 2f 73 76 67 2f 65 64 75 63 61 74 69 6f 6e 5f 62 6f 6f 6b 2e 73 76 67 22 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 6d 61 73 6b 2d 69 6d 61 67 65 3a 69 6e 68 65 72 69 74 3b 6d 61 73 6b 2d 69 6d 61 67 65 3a 69 6e 68 65 72 69 74 7d 0a 2e 6c 61 6e 64 69 6e 67 50 61 67 65 54 65 6d 70 6c 61 74 65 20 2e 69 63 6f 6e 2e 69 63 6f 6e 2d 6e 65 77 2d 65 64 75 63 61 74 69 6f Data Ascii: con.icon-new-education_book{background:url("../../../etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/icons/svg/education_book.svg") no-repeat center;-webkit-mask-image:inherit;mask-image:inherit}.landingPageTemplate .icon.icon-new-educatio
2023-06-06 08:38:57 UTC	1230	IN	Data Raw: 2f 69 63 6f 6e 73 2f 73 76 67 2f 70 72 6f 64 75 63 74 73 5f 61 6e 64 5f 73 65 72 76 69 63 65 73 2e 73 76 67 22 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 6d 61 73 6b 2d 69 6d 61 67 65 3a 69 6e 68 65 72 69 74 3b 6d 61 73 6b 2d 69 6d 61 67 65 3a 69 6e 68 65 72 69 74 7d 0a 2e 6c 61 6e 64 69 6e 67 50 61 67 65 54 65 6d 70 6c 61 74 65 20 2e 69 63 6f 6e 2e 69 63 6f 6e 2d 6e 65 77 2d 70 72 6f 64 75 63 74 73 5f 61 6e 64 5f 73 65 72 76 69 63 65 73 3a 3a 61 66 74 65 72 2c 2e 6c 61 6e 64 69 6e 67 50 61 67 65 54 65 6d 70 6c 61 74 65 20 2e 69 63 6f 6e 2e 69 63 6f 6e 2d 6e 65 77 2d 70 72 6f 64 75 63 74 73 5f 61 6e 64 5f 73 65 72 76 69 63 65 73 3a 3a 62 65 66 6f 72 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 0a 2e 6c 61 6e 64 69 6e Data Ascii: /icons/svg/products_and_services.svg") no-repeat center;-webkit-mask-image:inherit;mask-image:inherit}.landingPageTemplate .icon.icon-new-products_and_services::after,.landingPageTemplate .icon.icon-new-products_and_services::before{display:none}.landin
2023-06-06 08:38:57 UTC	1239	IN	Data Raw: 69 74 79 5f 73 65 74 74 69 6e 67 73 3a 3a 62 65 66 6f 72 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 0a 2e 6c 61 6e 64 69 6e 67 50 61 67 65 54 65 6d 70 6c 61 74 65 20 2e 69 63 6f 6e 2e 69 63 6f 6e 2d 6e 65 77 2d 73 65 74 74 69 6e 67 73 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 22 2e 2e 2f 2e 2e 2f 2e 2e 2f 65 74 63 2e 63 6c 69 65 6e 74 6c 69 62 73 2f 64 70 77 73 2f 63 6c 69 65 6e 74 6c 69 62 73 2d 70 75 62 6c 69 63 2f 63 6c 69 65 6e 74 6c 69 62 2d 73 69 74 65 2f 72 65 73 6f 75 72 63 65 73 2f 69 63 6f 6e 73 2f 73 76 67 2f 73 65 74 74 69 6e 67 73 2e 73 76 67 22 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 6d 61 73 6b 2d 69 6d 61 67 65 3a 69 6e 68 65 72 69 74 3b 6d 61 73 6b 2d 69 6d 61 67 65 3a 69 6e 68 65 72 69 74 Data Ascii: ity_settings::before{display:none}.landingPageTemplate .icon.icon-new-settings{background:url("../../../etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/icons/svg/settings.svg") no-repeat center;-webkit-mask-image:inherit;mask-image:inherit
2023-06-06 08:38:57 UTC	1242	IN	Data Raw: 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 6d 61 73 6b 2d 69 6d 61 67 65 3a 69 6e 68 65 72 69 74 3b 6d 61 73 6b 2d 69 6d 61 67 65 3a 69 6e 68 65 72 69 74 7d 0a 2e 6c 61 6e 64 69 6e 67 50 61 67 65 54 65 6d 70 6c 61 74 65 20 2e 69 63 6f 6e 2e 69 63 6f 6e 2d 6e 65 77 2d 73 74 61 74 75 73 5f 65 72 72 6f 72 5f 6f 6e 64 61 72 6b 3a 3a 61 66 74 65 72 2c 2e 6c 61 6e 64 69 6e 67 50 61 67 65 54 65 6d 70 6c 61 74 65 20 2e 69 63 6f 6e 2e 69 63 6f 6e 2d 6e 65 77 2d 73 74 61 74 75 73 5f 65 72 72 6f 72 5f 6f 6e 64 61 72 6b 3a 3a 62 65 66 6f 72 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 0a 2e 6c 61 6e 64 69 6e 67 50 61 67 65 54 65 6d 70 6c 61 74 65 20 2e 69 63 6f 6e 2e 69 63 6f 6e 2d 6e 65 77 2d 73 74 61 74 75 73 5f 69 6e 64 65 74 Data Ascii: ) no-repeat center;-webkit-mask-image:inherit;mask-image:inherit}.landingPageTemplate .icon.icon-new-status_error_ondark::after,.landingPageTemplate .icon.icon-new-status_error_ondark::before{display:none}.landingPageTemplate .icon.icon-new-status_indet
2023-06-06 08:38:57 UTC	1258	IN	Data Raw: 30 30 70 78 7d 0a 2e 6d 6f 62 69 6c 65 2d 66 6c 61 67 2e 66 6c 61 67 2d 42 49 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 2d 32 32 34 70 78 7d 0a 2e 6d 6f 62 69 6c 65 2d 66 6c 61 67 2e 66 6c 61 67 2d 42 4a 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 2d 32 37 38 34 70 78 7d 0a 2e 6d 6f 62 69 6c 65 2d 66 6c 61 67 2e 66 6c 61 67 2d 42 4d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 2d 35 39 32 70 78 7d 0a 2e 6d 6f 62 69 6c 65 2d 66 6c 61 67 2e 66 6c 61 67 2d 42 4e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 2d 34 33 32 70 78 7d 0a 2e 6d 6f 62 69 6c 65 2d 66 6c 61 67 2e 66 6c 61 67 2d 42 4f 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 2d Data Ascii: 00px}.mobile-flag.flag-BI{background-position:0 -224px}.mobile-flag.flag-BJ{background-position:0 -2784px}.mobile-flag.flag-BM{background-position:0 -592px}.mobile-flag.flag-BN{background-position:0 -432px}.mobile-flag.flag-BO{background-position:0 -
2023-06-06 08:38:57 UTC	1274	IN	Data Raw: 74 69 6f 6e 3a 30 20 2d 32 33 31 70 78 7d 0a 2e 66 6c 61 67 2d 4b 57 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 2d 31 35 34 30 70 78 7d 0a 2e 66 6c 61 67 2d 4b 59 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 2d 36 39 33 70 78 7d 0a 2e 66 6c 61 67 2d 4b 5a 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 2d 38 39 31 70 78 7d 0a 2e 66 6c 61 67 2d 4c 41 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 2d 31 34 38 35 70 78 7d 0a 2e 66 6c 61 67 2d 4c 42 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 2d 31 38 30 34 70 78 7d 0a 2e 66 6c 61 67 2d 4c 43 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 2d 31 35 34 70 78 7d 0a 2e 66 6c Data Ascii: tion:0 -231px}.flag-KW{background-position:0 -1540px}.flag-KY{background-position:0 -693px}.flag-KZ{background-position:0 -891px}.flag-LA{background-position:0 -1485px}.flag-LB{background-position:0 -1804px}.flag-LC{background-position:0 -154px}.fl
2023-06-06 08:38:57 UTC	1281	IN	Data Raw: 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 48 53 42 43 20 4e 65 75 65 20 48 65 6c 76 65 74 69 63 61 22 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 73 72 63 3a 75 72 6c 28 22 2e 2e 2f 2e 2e 2f 2e 2e 2f 65 74 63 2e 63 6c 69 65 6e 74 6c 69 62 73 2f 64 70 77 73 2f 63 6c 69 65 6e 74 6c 69 62 73 2d 70 75 62 6c 69 63 2f 63 6c 69 65 6e 74 6c 69 62 2d 73 69 74 65 2f 72 65 73 6f 75 72 63 65 73 2f 66 6f 6e 74 73 2f 48 65 6c 76 65 74 69 63 61 4e 65 75 65 66 6f 72 48 53 42 43 57 38 34 2d 4c 49 74 2e 77 6f 66 66 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 7d 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c Data Ascii: font-face{font-family:"HSBC Neue Helvetica";font-display:swap;font-style:italic;font-weight:300;src:url("../../../etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/fonts/HelveticaNeueforHSBCW84-LIt.woff") format("woff")}@font-face{font-famil
2023-06-06 08:38:57 UTC	1297	IN	Data Raw: 36 36 37 25 7d 0a 2e 6d 64 2d 39 7b 77 69 64 74 68 3a 37 35 25 7d 0a 2e 6d 64 2d 31 30 7b 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 33 33 33 33 25 7d 0a 2e 6d 64 2d 31 31 7b 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 36 36 36 36 37 25 7d 0a 2e 6d 64 2d 31 32 7b 77 69 64 74 68 3a 31 30 30 25 7d 0a 2e 6f 66 66 73 65 74 2d 6d 64 2d 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 0a 2e 6f 66 66 73 65 74 2d 6d 64 2d 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 2e 33 33 33 33 33 33 33 33 33 33 25 7d 0a 2e 6f 66 66 73 65 74 2d 6d 64 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 2e 36 36 36 36 36 36 36 36 36 37 25 7d 0a 2e 6f 66 66 73 65 74 2d 6d 64 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 35 25 7d 0a 2e 6f 66 66 73 65 74 2d 6d 64 2d 34 7b 6d 61 72 Data Ascii: 667%}.md-9{width:75%}.md-10{width:83.3333333333%}.md-11{width:91.6666666667%}.md-12{width:100%}.offset-md-0{margin-left:0}.offset-md-1{margin-left:8.3333333333%}.offset-md-2{margin-left:16.6666666667%}.offset-md-3{margin-left:25%}.offset-md-4{mar
2023-06-06 08:38:57 UTC	1307	IN	Data Raw: 2e 4f 2d 4e 45 57 53 50 43 47 45 4e 2d 44 45 56 20 2e 6d 64 2d 39 2c 2e 4f 2d 4e 45 57 53 50 43 47 45 4e 2d 44 45 56 20 2e 6c 67 2d 39 2c 2e 4f 2d 4e 45 57 53 50 43 47 45 4e 2d 44 45 56 20 2e 6d 2d 78 73 6d 2d 39 2c 2e 4f 2d 4e 45 57 53 50 43 47 45 4e 2d 44 45 56 20 2e 6d 2d 73 6d 2d 39 2c 2e 4f 2d 4e 45 57 53 50 43 47 45 4e 2d 44 45 56 20 2e 6d 2d 6d 64 73 6d 2d 39 2c 2e 4f 2d 4e 45 57 53 50 43 47 45 4e 2d 44 45 56 20 2e 6d 2d 6d 64 2d 39 2c 2e 4f 2d 4e 45 57 53 50 43 47 45 4e 2d 44 45 56 20 2e 6d 2d 6c 67 2d 39 2c 2e 4f 2d 4e 45 57 53 50 43 47 45 4e 2d 44 45 56 20 2e 73 6d 2d 31 30 2c 2e 4f 2d 4e 45 57 53 50 43 47 45 4e 2d 44 45 56 20 2e 6d 64 2d 31 30 2c 2e 4f 2d 4e 45 57 53 50 43 47 45 4e 2d 44 45 56 20 2e 6c 67 2d 31 30 2c 2e 4f 2d 4e 45 57 53 50 43 Data Ascii: .O-NEWSPCGEN-DEV .md-9,.O-NEWSPCGEN-DEV .lg-9,.O-NEWSPCGEN-DEV .m-xsm-9,.O-NEWSPCGEN-DEV .m-sm-9,.O-NEWSPCGEN-DEV .m-mdsm-9,.O-NEWSPCGEN-DEV .m-md-9,.O-NEWSPCGEN-DEV .m-lg-9,.O-NEWSPCGEN-DEV .sm-10,.O-NEWSPCGEN-DEV .md-10,.O-NEWSPCGEN-DEV .lg-10,.O-NEWSPC
2023-06-06 08:38:57 UTC	1323	IN	Data Raw: 63 61 6c 63 28 31 30 30 25 20 2b 20 30 2e 35 72 65 6d 29 7d 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 33 30 65 6d 29 7b 2e 63 72 68 2d 63 65 6c 6c 2d 2d 73 69 7a 65 2d 73 6d 61 6c 6c 2d 31 7b 77 69 64 74 68 3a 63 61 6c 63 28 38 2e 33 33 33 33 33 33 33 33 33 33 25 20 2d 20 31 72 65 6d 29 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 35 72 65 6d 7d 0a 7d 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 33 30 65 6d 29 7b 2e 63 72 68 2d 63 65 6c 6c 2d 2d 73 69 7a 65 2d 73 6d 61 6c 6c 2d 32 7b 77 69 64 74 68 3a 63 61 6c 63 28 31 36 2e 36 36 36 36 36 36 36 36 36 37 25 20 2d 20 31 72 65 6d 29 3b 6d 61 72 67 69 6e 2d 6c 65 Data Ascii: calc(100% + 0.5rem)}@media screen and (min-width:30em){.crh-cell--size-small-1{width:calc(8.3333333333% - 1rem);margin-left:.5rem;margin-right:.5rem}}@media screen and (min-width:30em){.crh-cell--size-small-2{width:calc(16.6666666667% - 1rem);margin-le
2023-06-06 08:38:57 UTC	1339	IN	Data Raw: 69 6e 6b 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 72 65 6d 7d 0a 7d 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 30 65 6d 29 7b 2e 63 72 68 2d 63 61 72 64 2d 77 69 74 68 2d 6c 69 6e 6b 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 2e 32 35 72 65 6d 7d 0a 7d 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 30 65 6d 29 7b 2e 63 72 68 2d 63 61 72 64 2d 77 69 74 68 2d 6c 69 6e 6b 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 2e 35 72 65 6d 7d 0a 7d 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 30 65 6d 29 7b 2e 63 72 68 2d 63 61 72 64 2d 77 69 74 68 2d 6c 69 6e 6b 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 2e 32 Data Ascii: ink{padding-top:1rem}}@media screen and (min-width:60em){.crh-card-with-link{padding-right:1.25rem}}@media screen and (min-width:60em){.crh-card-with-link{padding-bottom:1.5rem}}@media screen and (min-width:60em){.crh-card-with-link{padding-left:1.2
2023-06-06 08:38:57 UTC	1355	IN	Data Raw: 6d 7d 0a 7d 0a 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 39 36 30 70 78 29 7b 2e 4f 2d 42 45 4e 42 4c 53 54 2d 52 57 2d 44 45 56 20 2e 62 65 6e 65 66 69 74 73 2d 62 75 6c 6c 65 74 2d 6c 69 73 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 62 65 6e 65 66 69 74 73 2d 62 75 6c 6c 65 74 2d 6c 69 73 74 20 2e 62 65 6e 65 66 69 74 73 2d 62 75 6c 6c 65 74 2d 6c 69 73 74 2d 65 6c 65 6d 65 6e 74 20 2e 69 63 6f 6e 2d 61 67 72 65 65 7b 70 61 64 64 69 6e 67 3a 30 20 31 30 70 78 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 30 72 65 6d 20 2e 36 32 35 72 65 6d 20 30 72 65 6d 20 30 72 65 6d 7d 0a 7d 0a 2e 4f 2d 42 45 4e 42 4c 53 54 2d 52 57 2d 44 45 56 20 2e 62 65 6e 65 66 69 74 73 2d 62 75 6c 6c 65 74 2d 6c 69 73 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 62 65 6e 65 66 69 74 73 Data Ascii: m}}@media(min-width:960px){.O-BENBLST-RW-DEV .benefits-bullet-list-container .benefits-bullet-list .benefits-bullet-list-element .icon-agree{padding:0 10px 0 0;padding:0rem .625rem 0rem 0rem}}.O-BENBLST-RW-DEV .benefits-bullet-list-container .benefits
2023-06-06 08:38:57 UTC	1370	IN	Data Raw: 6f 6e 3a 3a 61 66 74 65 72 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 38 37 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 0a 2e 4d 2d 42 53 43 54 42 4c 2d 52 57 2d 52 42 57 4d 20 74 61 62 6c 65 20 74 64 20 2e 41 2d 4c 4e 4b 44 2d 52 57 2d 41 4c 4c 3a 3a 61 66 74 65 72 2c 2e 4d 2d 42 53 43 54 42 4c 2d 52 57 2d 52 42 57 4d 20 74 61 62 6c 65 20 74 64 20 2e 41 2d 4c 4e 4b 44 2d 52 57 2d 41 4c 4c 3a 3a 62 65 66 6f 72 65 2c 2e 4d 2d 42 53 43 54 42 4c 2d 52 57 2d 52 42 57 4d 20 74 61 62 6c 65 20 74 64 20 2e 41 2d 4d 4f 44 4c 4e 4b 2d 52 57 2d 41 4c 4c 3a 3a 61 66 74 65 72 2c 2e 4d 2d 42 53 43 54 42 4c 2d 52 57 2d 52 42 57 4d 20 74 61 62 6c 65 20 74 64 20 2e 41 2d 4d 4f 44 4c 4e 4b 2d 52 57 2d 41 4c 4c 3a 3a 62 Data Ascii: on::after{font-size:30px;font-size:1.875rem;line-height:1}.M-BSCTBL-RW-RBWM table td .A-LNKD-RW-ALL::after,.M-BSCTBL-RW-RBWM table td .A-LNKD-RW-ALL::before,.M-BSCTBL-RW-RBWM table td .A-MODLNK-RW-ALL::after,.M-BSCTBL-RW-RBWM table td .A-MODLNK-RW-ALL::b
2023-06-06 08:38:57 UTC	1371	IN	Data Raw: 4c 2c 2e 4d 2d 42 53 43 54 42 4c 2d 52 57 2d 52 42 57 4d 20 74 61 62 6c 65 20 74 62 6f 64 79 20 2e 41 2d 54 59 50 32 32 4c 2d 52 57 2d 41 4c 4c 2c 2e 4d 2d 42 53 43 54 42 4c 2d 52 57 2d 52 42 57 4d 20 74 61 62 6c 65 20 74 62 6f 64 79 20 2e 41 2d 54 59 50 31 32 52 2d 52 57 2d 41 4c 4c 2c 2e 4d 2d 42 53 43 54 42 4c 2d 52 57 2d 52 42 57 4d 20 74 61 62 6c 65 20 74 68 65 61 64 20 2e 41 2d 54 59 50 53 50 2d 52 57 2d 41 4c 4c 2c 2e 4d 2d 42 53 43 54 42 4c 2d 52 57 2d 52 42 57 4d 20 74 61 62 6c 65 20 74 68 65 61 64 20 2e 41 2d 50 41 52 31 32 52 2d 52 57 2d 41 4c 4c 2c 2e 4d 2d 42 53 43 54 42 4c 2d 52 57 2d 52 42 57 4d 20 74 61 62 6c 65 20 74 68 65 61 64 20 2e 41 2d 50 41 52 31 34 52 2d 52 57 2d 41 4c 4c 2c 2e 4d 2d 42 53 43 54 42 4c 2d 52 57 2d 52 42 57 4d 20 74 Data Ascii: L,.M-BSCTBL-RW-RBWM table tbody .A-TYP22L-RW-ALL,.M-BSCTBL-RW-RBWM table tbody .A-TYP12R-RW-ALL,.M-BSCTBL-RW-RBWM table thead .A-TYPSP-RW-ALL,.M-BSCTBL-RW-RBWM table thead .A-PAR12R-RW-ALL,.M-BSCTBL-RW-RBWM table thead .A-PAR14R-RW-ALL,.M-BSCTBL-RW-RBWM t
2023-06-06 08:38:57 UTC	1387	IN	Data Raw: 30 70 78 7d 0a 2e 4f 2d 48 45 52 4f 42 41 4e 32 2d 52 57 2d 44 45 56 20 2e 41 2d 50 4e 4c 2d 52 57 2d 41 4c 4c 7b 70 61 64 64 69 6e 67 3a 30 20 31 34 70 78 20 32 31 70 78 20 31 34 70 78 3b 70 61 64 64 69 6e 67 3a 30 72 65 6d 20 2e 38 37 35 72 65 6d 20 31 2e 33 31 32 35 72 65 6d 20 2e 38 37 35 72 65 6d 7d 0a 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 34 38 30 70 78 29 7b 2e 4f 2d 48 45 52 4f 42 41 4e 32 2d 52 57 2d 44 45 56 20 2e 41 2d 50 4e 4c 2d 52 57 2d 41 4c 4c 7b 70 61 64 64 69 6e 67 3a 30 20 31 38 70 78 20 32 37 70 78 20 31 38 70 78 3b 70 61 64 64 69 6e 67 3a 30 72 65 6d 20 31 2e 31 32 35 72 65 6d 20 31 2e 36 38 37 35 72 65 6d 20 31 2e 31 32 35 72 65 6d 7d 0a 7d 0a 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 39 36 30 70 78 29 7b 2e 4f Data Ascii: 0px}.O-HEROBAN2-RW-DEV .A-PNL-RW-ALL{padding:0 14px 21px 14px;padding:0rem .875rem 1.3125rem .875rem}@media(min-width:480px){.O-HEROBAN2-RW-DEV .A-PNL-RW-ALL{padding:0 18px 27px 18px;padding:0rem 1.125rem 1.6875rem 1.125rem}}@media(min-width:960px){.O
2023-06-06 08:38:57 UTC	1403	IN	Data Raw: 69 6e 2d 6c 65 66 74 3a 2d 30 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 30 2e 35 72 65 6d 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 30 3b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 2d 31 3b 6f 72 64 65 72 3a 2d 31 7d 0a 7d 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 35 39 2e 39 33 37 35 65 6d 29 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 30 65 6d 29 7b 2e 4f 2d 48 45 52 4f 2d 52 57 2d 44 45 56 20 2e 63 72 68 2d 68 65 72 6f 2d 62 61 6e 6e 65 72 5f 5f 6d 61 69 6e 2d 69 6d 61 67 65 2d 77 72 61 70 70 65 72 7b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2b 20 31 2e 32 35 72 65 6d 29 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 30 2e 36 32 35 72 65 Data Ascii: in-left:-0.5rem;margin-right:-0.5rem;-webkit-box-ordinal-group:0;-ms-flex-order:-1;order:-1}}@media screen and (max-width:59.9375em) and (min-width:60em){.O-HERO-RW-DEV .crh-hero-banner__main-image-wrapper{width:calc(100% + 1.25rem);margin-left:-0.625re
2023-06-06 08:38:57 UTC	1409	IN	Data Raw: 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 35 72 65 6d 7d 0a 7d 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 30 65 6d 29 7b 2e 4f 2d 48 45 52 4f 2d 52 57 2d 44 45 56 20 2e 63 72 68 2d 68 65 72 6f 2d 62 61 6e 6e 65 72 5f 5f 63 61 72 64 73 2d 77 72 61 70 70 65 72 20 2e 63 72 68 2d 63 61 72 64 2d 77 69 74 68 2d 6c 69 6e 6b 5f 5f 77 72 61 70 70 65 72 7b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 31 2e 32 35 72 65 6d 29 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 36 32 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 36 32 35 72 65 6d 7d 0a 7d 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 30 29 7b 2e 4f Data Ascii: argin-left:.5rem;margin-right:.5rem}}@media screen and (min-width:60em){.O-HERO-RW-DEV .crh-hero-banner__cards-wrapper .crh-card-with-link__wrapper{width:calc(100% - 1.25rem);margin-left:.625rem;margin-right:.625rem}}@media screen and (min-width:0){.O
2023-06-06 08:38:57 UTC	1425	IN	Data Raw: 64 74 68 3a 39 36 30 70 78 29 7b 2e 4f 2d 53 52 43 48 52 45 53 2d 52 57 2d 52 42 57 4d 20 2e 73 65 61 72 63 68 2d 72 65 73 75 6c 74 2d 69 74 65 6d 20 2e 41 2d 50 41 52 31 36 52 2d 52 57 2d 41 4c 4c 7b 70 61 64 64 69 6e 67 3a 32 30 70 78 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 31 2e 32 35 72 65 6d 20 30 72 65 6d 20 30 72 65 6d 20 30 72 65 6d 7d 0a 7d 0a 2e 4f 2d 53 52 43 48 52 45 53 2d 52 57 2d 52 42 57 4d 20 2e 73 65 61 72 63 68 2d 72 65 73 75 6c 74 2d 69 74 65 6d 20 2e 69 74 65 6d 2d 74 69 74 6c 65 7b 6d 61 72 67 69 6e 3a 2d 37 70 78 20 30 20 2d 35 70 78 7d 0a 2e 4f 2d 53 52 43 48 52 45 53 2d 52 57 2d 52 42 57 4d 20 2e 73 65 61 72 63 68 2d 72 65 73 75 6c 74 2d 69 74 65 6d 20 2e 62 6f 78 7b 77 69 64 74 68 3a 31 30 30 70 78 3b 68 65 69 67 68 74 3a 31 Data Ascii: dth:960px){.O-SRCHRES-RW-RBWM .search-result-item .A-PAR16R-RW-ALL{padding:20px 0 0 0;padding:1.25rem 0rem 0rem 0rem}}.O-SRCHRES-RW-RBWM .search-result-item .item-title{margin:-7px 0 -5px}.O-SRCHRES-RW-RBWM .search-result-item .box{width:100px;height:1
2023-06-06 08:38:57 UTC	1435	IN	Data Raw: 56 2e 74 69 74 6c 65 2d 68 69 64 64 65 6e 7b 6d 61 72 67 69 6e 3a 2d 31 34 70 78 20 30 20 30 20 30 3b 6d 61 72 67 69 6e 3a 2d 30 2e 38 37 35 72 65 6d 20 30 72 65 6d 20 30 72 65 6d 20 30 72 65 6d 7d 0a 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 34 38 30 70 78 29 7b 68 74 6d 6c 3a 6e 6f 74 28 2e 61 65 6d 2d 41 75 74 68 6f 72 4c 61 79 65 72 2d 45 64 69 74 29 20 2e 4f 2d 4c 49 4e 4b 53 4f 4e 54 49 4c 45 2d 44 45 56 2e 74 69 74 6c 65 2d 68 69 64 64 65 6e 7b 6d 61 72 67 69 6e 3a 2d 31 38 70 78 20 30 20 30 20 30 3b 6d 61 72 67 69 6e 3a 2d 31 2e 31 32 35 72 65 6d 20 30 72 65 6d 20 30 72 65 6d 20 30 72 65 6d 7d 0a 7d 0a 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 39 36 30 70 78 29 7b 68 74 6d 6c 3a 6e 6f 74 28 2e 61 65 6d 2d 41 75 74 68 6f 72 4c 61 Data Ascii: V.title-hidden{margin:-14px 0 0 0;margin:-0.875rem 0rem 0rem 0rem}@media(min-width:480px){html:not(.aem-AuthorLayer-Edit) .O-LINKSONTILE-DEV.title-hidden{margin:-18px 0 0 0;margin:-1.125rem 0rem 0rem 0rem}}@media(min-width:960px){html:not(.aem-AuthorLa
2023-06-06 08:38:57 UTC	1451	IN	Data Raw: 32 35 72 65 6d 20 2e 38 37 35 72 65 6d 7d 0a 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 34 38 30 70 78 29 7b 2e 4d 2d 4d 41 53 54 45 52 54 49 4c 45 49 54 45 4d 2d 44 45 56 3a 6e 6f 74 28 2e 72 6f 77 29 20 2e 41 2d 50 4e 4c 2d 52 57 2d 41 4c 4c 20 2e 73 69 6e 67 6c 65 2d 6c 69 6e 6b 7b 6d 61 72 67 69 6e 3a 30 20 31 38 70 78 20 32 37 70 78 20 31 38 70 78 3b 6d 61 72 67 69 6e 3a 30 72 65 6d 20 31 2e 31 32 35 72 65 6d 20 31 2e 36 38 37 35 72 65 6d 20 31 2e 31 32 35 72 65 6d 7d 0a 7d 0a 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 39 36 30 70 78 29 7b 2e 4d 2d 4d 41 53 54 45 52 54 49 4c 45 49 54 45 4d 2d 44 45 56 3a 6e 6f 74 28 2e 72 6f 77 29 20 2e 41 2d 50 4e 4c 2d 52 57 2d 41 4c 4c 20 2e 73 69 6e 67 6c 65 2d 6c 69 6e 6b 7b 6d 61 72 67 69 6e 3a Data Ascii: 25rem .875rem}@media(min-width:480px){.M-MASTERTILEITEM-DEV:not(.row) .A-PNL-RW-ALL .single-link{margin:0 18px 27px 18px;margin:0rem 1.125rem 1.6875rem 1.125rem}}@media(min-width:960px){.M-MASTERTILEITEM-DEV:not(.row) .A-PNL-RW-ALL .single-link{margin:
2023-06-06 08:38:57 UTC	1467	IN	Data Raw: 61 70 70 65 72 20 2e 76 6a 73 2d 62 69 67 2d 70 6c 61 79 2d 62 75 74 74 6f 6e 3a 3a 62 65 66 6f 72 65 7b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 31 38 70 78 20 30 20 31 38 70 78 20 32 34 70 78 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 20 32 32 70 78 3b 6c 65 66 74 3a 31 32 70 78 3b 74 6f 70 3a 63 61 6c 63 28 35 30 25 20 2d 20 31 38 70 78 29 7d 0a 7d 0a 2e 62 72 69 67 68 74 63 6f 76 65 56 69 64 65 6f 20 2e 76 69 64 65 6f 2d 77 72 61 70 70 65 72 20 2e 76 6a 73 2d 62 69 67 2d 70 6c 61 79 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 6f 70 61 63 69 74 79 3a 2e 38 7d 0a 2e 62 72 69 67 68 74 63 6f 76 65 56 69 64 65 6f 20 2e 76 69 64 65 6f 2d 77 72 61 70 70 65 72 20 2e 76 6a 73 2d 62 69 67 2d 70 6c 61 79 2d 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 7b 6f 70 61 63 69 74 79 3a Data Ascii: apper .vjs-big-play-button::before{border-width:18px 0 18px 24px;margin:auto 22px;left:12px;top:calc(50% - 18px)}}.brightcoveVideo .video-wrapper .vjs-big-play-button:hover{opacity:.8}.brightcoveVideo .video-wrapper .vjs-big-play-button:active{opacity:
2023-06-06 08:38:57 UTC	1483	IN	Data Raw: 57 2d 41 4c 4c 20 2e 64 72 6f 70 64 6f 77 6e 7b 70 61 64 64 69 6e 67 3a 31 30 70 78 20 31 36 70 78 20 31 34 70 78 7d 0a 7d 0a 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 39 36 30 70 78 29 7b 2e 41 2d 4c 52 47 45 58 50 2d 52 57 2d 41 4c 4c 20 2e 64 72 6f 70 64 6f 77 6e 7b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 31 39 70 78 20 31 35 70 78 7d 0a 7d 0a 2e 41 2d 4c 52 47 45 58 50 2d 52 57 2d 41 4c 4c 20 2e 64 72 6f 70 64 6f 77 6e 3a 68 6f 76 65 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 63 6f 6c 6f 72 3a 23 62 36 62 37 62 36 7d 0a 2e 41 2d 4c 52 47 45 58 50 2d 52 57 2d 41 4c 4c 20 2e 64 72 6f 70 64 6f 77 6e 20 2e 64 72 6f 70 64 6f 77 6e 2d 74 65 78 74 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 0a 2e 41 2d 4c 52 47 45 58 50 2d 52 57 Data Ascii: W-ALL .dropdown{padding:10px 16px 14px}}@media(min-width:960px){.A-LRGEXP-RW-ALL .dropdown{padding:12px 19px 15px}}.A-LRGEXP-RW-ALL .dropdown:hover{cursor:pointer;color:#b6b7b6}.A-LRGEXP-RW-ALL .dropdown .dropdown-text{position:relative}.A-LRGEXP-RW
2023-06-06 08:38:57 UTC	1498	IN	Data Raw: 65 66 74 3a 30 3b 63 6f 6c 6f 72 3a 23 30 30 38 35 38 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 74 6f 70 3a 2d 31 31 70 78 7d 0a 2e 4f 2d 41 44 56 50 52 44 4d 4f 44 2d 52 57 2d 44 45 56 20 75 6c 2e 6d 61 69 6e 2d 6c 69 73 74 7b 70 61 64 64 69 6e 67 3a 37 70 78 20 30 20 31 34 70 78 20 30 3b 70 61 64 64 69 6e 67 3a 2e 34 33 37 35 72 65 6d 20 30 72 65 6d 20 2e 38 37 35 72 65 6d 20 30 72 65 6d 7d 0a 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 34 38 30 70 78 29 7b 2e 4f 2d 41 44 56 50 52 44 4d 4f 44 2d 52 57 2d 44 45 56 20 75 6c 2e 6d 61 69 6e 2d 6c 69 73 74 7b 70 61 64 64 69 6e 67 3a 39 70 78 20 30 20 31 38 70 78 20 30 3b 70 61 64 64 69 6e 67 3a 2e 35 36 32 35 72 65 6d 20 30 72 65 6d 20 31 2e 31 32 35 72 65 6d 20 30 72 65 6d 7d 0a 7d 0a 40 6d 65 Data Ascii: eft:0;color:#008580;line-height:0;top:-11px}.O-ADVPRDMOD-RW-DEV ul.main-list{padding:7px 0 14px 0;padding:.4375rem 0rem .875rem 0rem}@media(min-width:480px){.O-ADVPRDMOD-RW-DEV ul.main-list{padding:9px 0 18px 0;padding:.5625rem 0rem 1.125rem 0rem}}@me
2023-06-06 08:38:57 UTC	1514	IN	Data Raw: 65 6d 20 30 72 65 6d 20 2e 38 37 35 72 65 6d 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 34 34 70 78 7d 0a 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 34 38 30 70 78 29 7b 2e 41 2d 46 49 53 52 43 48 2d 52 57 2d 41 4c 4c 20 2e 69 6e 70 75 74 7b 70 61 64 64 69 6e 67 3a 30 20 33 36 70 78 20 30 20 31 38 70 78 3b 70 61 64 64 69 6e 67 3a 30 72 65 6d 20 32 2e 32 35 72 65 6d 20 30 72 65 6d 20 31 2e 31 32 35 72 65 6d 7d 0a 7d 0a 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 39 36 30 70 78 29 7b 2e 41 2d 46 49 53 52 43 48 2d 52 57 2d 41 4c 4c 20 2e 69 6e 70 75 74 7b 70 61 64 64 69 6e 67 Data Ascii: em 0rem .875rem;-webkit-box-sizing:border-box;box-sizing:border-box;width:100%;height:44px}@media(min-width:480px){.A-FISRCH-RW-ALL .input{padding:0 36px 0 18px;padding:0rem 2.25rem 0rem 1.125rem}}@media(min-width:960px){.A-FISRCH-RW-ALL .input{padding
2023-06-06 08:38:57 UTC	1530	IN	Data Raw: 31 34 42 53 49 2d 52 57 2d 41 4c 4c 20 2e 6c 69 6e 6b 20 68 33 2c 2e 41 2d 4c 4e 4b 31 34 42 53 49 2d 52 57 2d 41 4c 4c 20 2e 6c 69 6e 6b 20 68 34 2c 2e 41 2d 4c 4e 4b 31 34 42 53 49 2d 52 57 2d 41 4c 4c 20 2e 6c 69 6e 6b 20 68 35 2c 2e 41 2d 4c 4e 4b 31 34 42 53 49 2d 52 57 2d 41 4c 4c 20 2e 6c 69 6e 6b 20 68 36 2c 2e 41 2d 4c 4e 4b 31 36 42 53 49 2d 52 57 2d 41 4c 4c 20 2e 6c 69 6e 6b 20 70 2c 2e 41 2d 4c 4e 4b 31 36 42 53 49 2d 52 57 2d 41 4c 4c 20 2e 6c 69 6e 6b 20 68 31 2c 2e 41 2d 4c 4e 4b 31 36 42 53 49 2d 52 57 2d 41 4c 4c 20 2e 6c 69 6e 6b 20 68 32 2c 2e 41 2d 4c 4e 4b 31 36 42 53 49 2d 52 57 2d 41 4c 4c 20 2e 6c 69 6e 6b 20 68 33 2c 2e 41 2d 4c 4e 4b 31 36 42 53 49 2d 52 57 2d 41 4c 4c 20 2e 6c 69 6e 6b 20 68 34 2c 2e 41 2d 4c 4e 4b 31 36 42 53 Data Ascii: 14BSI-RW-ALL .link h3,.A-LNK14BSI-RW-ALL .link h4,.A-LNK14BSI-RW-ALL .link h5,.A-LNK14BSI-RW-ALL .link h6,.A-LNK16BSI-RW-ALL .link p,.A-LNK16BSI-RW-ALL .link h1,.A-LNK16BSI-RW-ALL .link h2,.A-LNK16BSI-RW-ALL .link h3,.A-LNK16BSI-RW-ALL .link h4,.A-LNK16BS
2023-06-06 08:38:57 UTC	1546	IN	Data Raw: 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 7d 0a 2e 41 2d 4c 4e 4b 53 54 2d 52 57 2d 41 4c 4c 20 2e 69 63 6f 6e 3a 3a 61 66 74 65 72 2c 2e 41 2d 4c 4e 4b 53 54 2d 52 57 2d 41 4c 4c 20 2e 69 63 6f 6e 3a 3a 62 65 66 6f 72 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 31 65 6d 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 70 78 3b 63 6f 6c 6f 72 3a 23 64 62 30 30 31 31 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 2d 31 70 78 7d 0a 2e 41 2d 4c 4e 4b 53 54 2d 52 57 2d 41 4c 4c 20 2e 76 69 73 75 61 6c 6c 79 68 69 64 64 65 6e 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 7d 0a 2e 41 2d 4c 4e 4b 4e 44 33 38 4c 2d 52 57 2d 41 4c 4c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 48 53 42 43 20 55 6e 69 76 65 72 73 20 4e 65 78 74 22 2c 22 48 53 42 43 20 4e 65 Data Ascii: te-space:normal}.A-LNKST-RW-ALL .icon::after,.A-LNKST-RW-ALL .icon::before{font-size:1.1em;margin-left:-1px;color:#db0011;vertical-align:-1px}.A-LNKST-RW-ALL .visuallyhidden{white-space:normal}.A-LNKND38L-RW-ALL{font-family:"HSBC Univers Next","HSBC Ne
2023-06-06 08:38:57 UTC	1547	IN	Data Raw: 6e 6b 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 70 78 7d 0a 7d 0a 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 39 36 30 70 78 29 7b 2e 41 2d 4d 4f 44 4c 4e 4b 2d 52 57 2d 41 4c 4c 20 2e 6c 69 6e 6b 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 70 78 7d 0a 7d 0a 2e 41 2d 54 41 47 4c 4e 4b 2d 52 57 2d 41 4c 4c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 48 53 42 43 20 55 6e 69 76 65 72 73 20 4e 65 78 74 22 2c 22 48 53 42 43 20 4e 65 75 65 20 48 65 6c 76 65 74 69 63 61 22 2c 22 73 61 6e 73 2d 73 65 72 69 66 22 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 72 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 Data Ascii: nk{margin-left:1px}}@media(min-width:960px){.A-MODLNK-RW-ALL .link{margin-left:2px}}.A-TAGLNK-RW-ALL{font-family:"HSBC Univers Next","HSBC Neue Helvetica","sans-serif";font-size:14px;font-size:.875rem;font-style:normal;font-weight:400;text-transform:u
2023-06-06 08:38:57 UTC	1563	IN	Data Raw: 20 30 72 65 6d 20 2e 32 38 31 32 35 72 65 6d 7d 0a 7d 0a 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 39 36 30 70 78 29 7b 2e 41 2d 50 41 47 4d 41 4e 2d 52 57 2d 41 4c 4c 20 6c 69 7b 6d 61 72 67 69 6e 3a 30 20 35 70 78 20 30 20 35 70 78 3b 6d 61 72 67 69 6e 3a 30 72 65 6d 20 2e 33 31 32 35 72 65 6d 20 30 72 65 6d 20 2e 33 31 32 35 72 65 6d 7d 0a 7d 0a 2e 41 2d 50 41 47 4d 41 4e 2d 52 57 2d 41 4c 4c 20 6c 69 20 61 7b 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 73 74 61 63 6b 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 2a 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 61 75 74 6f 3b 2a 7a 6f 6f 6d 3a 31 3b 2a 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 36 70 78 3b 70 61 64 64 69 Data Ascii: 0rem .28125rem}}@media(min-width:960px){.A-PAGMAN-RW-ALL li{margin:0 5px 0 5px;margin:0rem .3125rem 0rem .3125rem}}.A-PAGMAN-RW-ALL li a{display:-moz-inline-stack;display:inline-block;vertical-align:auto;zoom:1;*display:inline;min-height:16px;paddi
2023-06-06 08:38:57 UTC	1579	IN	Data Raw: 6d 69 6e 2d 77 69 64 74 68 3a 39 36 30 70 78 29 7b 2e 41 2d 42 4c 51 32 38 4c 49 2d 52 57 2d 41 4c 4c 20 2e 69 63 6f 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 3a 3a 61 66 74 65 72 2c 2e 41 2d 42 4c 51 32 38 4c 49 2d 52 57 2d 41 4c 4c 20 2e 69 63 6f 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 3a 3a 62 65 66 6f 72 65 7b 72 69 67 68 74 3a 61 75 74 6f 3b 6c 65 66 74 3a 2d 38 70 78 3b 74 6f 70 3a 2d 31 34 70 78 7d 0a 7d 0a 2e 41 2d 42 4c 51 32 38 4c 49 2d 52 57 2d 41 4c 4c 20 2e 69 63 6f 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 3a 3a 61 66 74 65 72 2c 2e 41 2d 42 4c 51 32 38 4c 49 2d 52 57 2d 41 4c 4c 20 2e 69 63 6f 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 3a 3a 62 65 66 6f 72 65 7b 6c 65 66 74 3a 61 75 74 6f 3b 72 69 67 68 74 3a 2d 36 70 78 3b 62 6f 74 74 6f 6d 3a 2d 38 70 78 Data Ascii: min-width:960px){.A-BLQ28LI-RW-ALL .icon:first-child::after,.A-BLQ28LI-RW-ALL .icon:first-child::before{right:auto;left:-8px;top:-14px}}.A-BLQ28LI-RW-ALL .icon:last-child::after,.A-BLQ28LI-RW-ALL .icon:last-child::before{left:auto;right:-6px;bottom:-8px
2023-06-06 08:38:57 UTC	1595	IN	Data Raw: 20 4e 65 78 74 22 2c 22 48 53 42 43 20 4e 65 75 65 20 48 65 6c 76 65 74 69 63 61 22 2c 22 73 61 6e 73 2d 73 65 72 69 66 22 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 0a 2e 41 2d 54 59 50 31 36 52 2d 52 57 2d 41 4c 4c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 48 53 42 43 20 55 6e 69 76 65 72 73 20 4e 65 78 74 22 2c 22 48 53 42 43 20 4e 65 75 65 20 48 65 6c 76 65 74 69 63 61 22 2c 22 73 61 6e 73 2d 73 65 72 69 66 22 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d Data Ascii: Next","HSBC Neue Helvetica","sans-serif";font-size:16px;font-size:1rem;font-style:normal;font-weight:700}.A-TYP16R-RW-ALL{font-family:"HSBC Univers Next","HSBC Neue Helvetica","sans-serif";font-size:16px;font-size:1rem;font-style:normal;font-weight:400}
2023-06-06 08:38:57 UTC	1608	IN	Data Raw: 77 72 61 70 70 65 72 20 2e 6c 65 66 74 2d 69 63 6f 6e 7b 6c 65 66 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 0a 2e 62 72 6f 77 73 65 72 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 20 2e 62 72 6f 77 73 65 72 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 77 72 61 70 70 65 72 20 2e 6c 65 66 74 2d 69 63 6f 6e 20 2e 69 63 6f 6e 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 22 2e 2e 2f 2e 2e 2f 2e 2e 2f 65 74 63 2e 63 6c 69 65 6e 74 6c 69 62 73 2f 64 70 77 73 2f 63 6c 69 65 6e 74 6c 69 62 73 2d 70 75 62 6c 69 63 2f 63 6c 69 65 6e 74 6c 69 62 2d 73 69 74 65 2f 72 65 73 6f 75 72 63 65 73 2f 69 6d 67 2f 65 78 63 6c 61 6d 61 74 69 6f 6e 5f 6d 61 72 6b 2e 70 6e 67 22 29 7d 0a 2e 62 72 6f 77 73 65 Data Ascii: wrapper .left-icon{left:0;position:relative}.browser-notification .browser-notification-wrapper .left-icon .icon-exclamation{background-image:url("../../../etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/img/exclamation_mark.png")}.browse
2023-06-06 08:38:57 UTC	1611	IN	Data Raw: 6e 2d 62 6f 74 74 6f 6d 3a 31 38 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 31 32 35 72 65 6d 7d 0a 7d 0a 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 39 36 30 70 78 29 7b 2e 63 6f 6f 6b 69 65 2d 62 61 6e 6e 65 72 2d 6f 70 74 6f 75 74 20 2e 63 6f 6f 6b 69 65 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 41 2d 54 59 50 32 32 4c 2d 52 57 2d 41 4c 4c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 32 35 72 65 6d 7d 0a 7d 0a 2e 63 6f 6f 6b 69 65 2d 62 61 6e 6e 65 72 2d 6f 70 74 6f 75 74 20 2e 63 6f 6f 6b 69 65 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 62 61 6e 6e 65 72 2d 74 65 78 74 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 63 6f 6c 6f 72 Data Ascii: n-bottom:18px;margin-bottom:1.125rem}}@media(min-width:960px){.cookie-banner-optout .cookie-container .A-TYP22L-RW-ALL{margin-bottom:20px;margin-bottom:1.25rem}}.cookie-banner-optout .cookie-container .banner-text{line-height:1.1;overflow:hidden;color
2023-06-06 08:38:57 UTC	1620	IN	Data Raw: 4e 50 2d 52 57 2d 41 4c 4c 2c 2e 6d 6f 64 61 6c 45 78 74 65 72 6e 61 6c 4c 69 6e 6b 20 2e 41 2d 42 54 4e 50 2d 52 57 2d 41 4c 4c 7b 6d 61 72 67 69 6e 3a 37 70 78 20 30 20 30 7d 0a 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 34 38 30 70 78 29 7b 2e 4d 2d 4d 4f 44 57 49 4e 2d 44 45 56 20 2e 41 2d 42 54 4e 50 2d 52 57 2d 41 4c 4c 2c 2e 6d 6f 64 61 6c 45 78 74 65 72 6e 61 6c 4c 69 6e 6b 20 2e 41 2d 42 54 4e 50 2d 52 57 2d 41 4c 4c 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 34 70 78 3b 6d 61 72 67 69 6e 3a 30 72 65 6d 20 30 72 65 6d 20 30 72 65 6d 20 2e 38 37 35 72 65 6d 7d 0a 7d 0a 2e 4d 2d 4d 4f 44 57 49 4e 2d 57 4c 53 54 2d 44 45 56 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 48 53 42 43 20 55 6e 69 76 65 72 73 20 4e 65 78 74 22 2c 22 48 53 42 43 20 Data Ascii: NP-RW-ALL,.modalExternalLink .A-BTNP-RW-ALL{margin:7px 0 0}@media(min-width:480px){.M-MODWIN-DEV .A-BTNP-RW-ALL,.modalExternalLink .A-BTNP-RW-ALL{margin:0 0 0 14px;margin:0rem 0rem 0rem .875rem}}.M-MODWIN-WLST-DEV{font-family:"HSBC Univers Next","HSBC
2023-06-06 08:38:57 UTC	1636	IN	Data Raw: 64 64 69 6e 67 3a 30 20 33 30 70 78 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 30 72 65 6d 20 31 2e 38 37 35 72 65 6d 20 30 72 65 6d 20 30 72 65 6d 7d 0a 7d 0a 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 34 38 30 70 78 29 7b 2e 66 6f 6f 74 65 72 76 32 20 2e 64 6f 77 6e 2d 74 69 65 72 2d 66 6f 6f 74 65 72 20 2e 6e 61 76 69 67 61 74 69 6f 6e 2d 69 74 65 6d 7b 6d 61 72 67 69 6e 3a 30 20 30 20 31 38 70 78 20 30 3b 6d 61 72 67 69 6e 3a 30 72 65 6d 20 30 72 65 6d 20 31 2e 31 32 35 72 65 6d 20 30 72 65 6d 7d 0a 7d 0a 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 39 36 30 70 78 29 7b 2e 66 6f 6f 74 65 72 76 32 20 2e 64 6f 77 6e 2d 74 69 65 72 2d 66 6f 6f 74 65 72 20 2e 6e 61 76 69 67 61 74 69 6f 6e 2d 69 74 65 6d 7b 6d 61 72 67 69 6e 3a 30 20 30 20 32 30 Data Ascii: dding:0 30px 0 0;padding:0rem 1.875rem 0rem 0rem}}@media(min-width:480px){.footerv2 .down-tier-footer .navigation-item{margin:0 0 18px 0;margin:0rem 0rem 1.125rem 0rem}}@media(min-width:960px){.footerv2 .down-tier-footer .navigation-item{margin:0 0 20
2023-06-06 08:38:57 UTC	1652	IN	Data Raw: 72 20 2e 70 72 69 6d 61 72 79 2d 62 75 74 74 6f 6e 2e 68 65 61 64 65 72 2d 6c 6f 67 69 6e 2d 62 75 74 74 6f 6e 20 2e 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 64 6f 77 6e 2d 73 6d 61 6c 6c 2c 2e 68 65 61 64 65 72 20 2e 70 72 69 6d 61 72 79 2d 62 75 74 74 6f 6e 2e 68 65 61 64 65 72 2d 6c 6f 67 69 6e 2d 62 75 74 74 6f 6e 20 2e 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 75 70 2d 73 6d 61 6c 6c 7b 74 6f 70 3a 32 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 0a 2e 68 65 61 64 65 72 20 2e 68 65 61 64 65 72 2d 6d 6f 62 69 6c 65 2d 73 65 61 72 63 68 2d 63 6f 6e 74 61 69 6e 65 72 7b 68 65 69 67 68 74 3a 35 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 30 7d 0a 2e 68 65 61 64 65 72 20 2e 68 65 61 64 65 72 2d 6d 6f 62 69 6c 65 2d 73 65 61 72 63 68 Data Ascii: r .primary-button.header-login-button .icon-chevron-down-small,.header .primary-button.header-login-button .icon-chevron-up-small{top:2px;position:relative}.header .header-mobile-search-container{height:50px;background:#000}.header .header-mobile-search
2023-06-06 08:38:57 UTC	1655	IN	Data Raw: 65 72 2c 2e 68 65 61 64 65 72 20 2e 63 6c 6f 73 65 2d 73 75 62 6d 65 6e 75 2d 74 72 69 67 67 65 72 20 2e 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 6c 65 66 74 3a 3a 62 65 66 6f 72 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 77 69 64 74 68 3a 32 30 70 78 7d 0a 2e 68 65 61 64 65 72 20 2e 73 69 64 65 62 61 72 2d 73 75 62 6d 65 6e 75 2d 74 72 69 67 67 65 72 2e 65 78 70 61 6e 64 65 64 2c 2e 68 65 61 64 65 72 20 2e 73 69 64 65 62 61 72 2d 73 75 62 6d 65 6e 75 2d 74 72 69 67 67 65 72 2e 61 63 74 69 76 65 7b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 35 70 78 20 73 6f 6c 69 64 20 23 64 62 30 30 31 31 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 65 64 65 64 65 64 7d 0a 2e 68 65 61 64 65 72 20 2e 6d 6f 62 69 6c 65 2d 66 6c 61 67 7b 62 61 63 Data Ascii: er,.header .close-submenu-trigger .icon-chevron-left::before{display:block;margin:auto;width:20px}.header .sidebar-submenu-trigger.expanded,.header .sidebar-submenu-trigger.active{border-left:5px solid #db0011;background:#ededed}.header .mobile-flag{bac
2023-06-06 08:38:57 UTC	1671	IN	Data Raw: 69 74 69 6f 6e 3a 76 69 73 69 62 69 6c 69 74 79 20 2e 32 73 2c 6d 61 78 2d 68 65 69 67 68 74 20 2e 32 73 20 65 61 73 65 2d 6f 75 74 3b 6d 61 78 2d 68 65 69 67 68 74 3a 30 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 0a 2e 73 65 61 72 63 68 2d 73 75 67 67 65 73 74 69 6f 6e 73 20 2e 73 75 67 67 65 73 74 69 6f 6e 73 2d 74 69 74 6c 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 36 32 35 72 65 6d 3b 63 6f 6c 6f 72 3a 23 37 63 37 63 37 63 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 0a 2e 73 65 61 72 63 68 2d 73 75 67 67 65 73 74 69 6f 6e 73 20 2e 73 75 67 67 65 73 74 69 6f 6e 2d 6c 69 73 74 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 0a 2e 73 65 61 72 63 68 2d 73 75 67 67 65 73 74 69 6f 6e 73 20 2e 73 Data Ascii: ition:visibility .2s,max-height .2s ease-out;max-height:0;visibility:hidden}.search-suggestions .suggestions-title{font-size:10px;font-size:.625rem;color:#7c7c7c;padding:15px}.search-suggestions .suggestion-list{position:relative}.search-suggestions .s
2023-06-06 08:38:57 UTC	1687	IN	Data Raw: 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 7d 0a 2e 63 6f 75 6e 74 72 79 2d 66 6c 61 67 20 2e 66 6c 61 67 2d 67 6d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 22 2e 2e 2f 2e 2e 2f 2e 2e 2f 65 74 63 2e 63 6c 69 65 6e 74 6c 69 62 73 2f 64 70 77 73 2f 63 6c 69 65 6e 74 6c 69 62 73 2d 70 75 62 6c 69 63 2f 63 6c 69 65 6e 74 6c 69 62 2d 73 69 74 65 2f 72 65 73 6f 75 72 63 65 73 2f 69 6d 67 2f 73 76 67 2f 66 6c 61 67 73 2f 67 6d 2e 73 76 67 22 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 7d 0a 2e 63 6f 75 6e 74 72 79 2d 66 6c 61 67 20 2e 66 6c 61 67 2d Data Ascii: ;background-position:0 0;background-size:cover}.country-flag .flag-gm{background-image:url("../../../etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/img/svg/flags/gm.svg");background-position:0 0;background-size:cover}.country-flag .flag-
2023-06-06 08:38:57 UTC	1700	IN	Data Raw: 2f 64 70 77 73 2f 63 6c 69 65 6e 74 6c 69 62 73 2d 70 75 62 6c 69 63 2f 63 6c 69 65 6e 74 6c 69 62 2d 73 69 74 65 2f 72 65 73 6f 75 72 63 65 73 2f 69 6d 67 2f 73 76 67 2f 66 6c 61 67 73 2f 6d 78 2e 73 76 67 22 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 7d 0a 2e 63 6f 75 6e 74 72 79 2d 66 6c 61 67 20 2e 66 6c 61 67 2d 6d 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 22 2e 2e 2f 2e 2e 2f 2e 2e 2f 65 74 63 2e 63 6c 69 65 6e 74 6c 69 62 73 2f 64 70 77 73 2f 63 6c 69 65 6e 74 6c 69 62 73 2d 70 75 62 6c 69 63 2f 63 6c 69 65 6e 74 6c 69 62 2d 73 69 74 65 2f 72 65 73 6f 75 72 63 65 73 2f 69 6d 67 2f 73 76 67 2f 66 6c 61 67 73 2f 6d 79 2e 73 76 Data Ascii: /dpws/clientlibs-public/clientlib-site/resources/img/svg/flags/mx.svg");background-position:0 0;background-size:cover}.country-flag .flag-my{background-image:url("../../../etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/img/svg/flags/my.sv
2023-06-06 08:38:57 UTC	1716	IN	Data Raw: 65 72 7d 0a 2e 63 6f 75 6e 74 72 79 2d 66 6c 61 67 20 2e 66 6c 61 67 2d 79 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 22 2e 2e 2f 2e 2e 2f 2e 2e 2f 65 74 63 2e 63 6c 69 65 6e 74 6c 69 62 73 2f 64 70 77 73 2f 63 6c 69 65 6e 74 6c 69 62 73 2d 70 75 62 6c 69 63 2f 63 6c 69 65 6e 74 6c 69 62 2d 73 69 74 65 2f 72 65 73 6f 75 72 63 65 73 2f 69 6d 67 2f 73 76 67 2f 66 6c 61 67 73 2f 79 65 2e 73 76 67 22 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 7d 0a 2e 63 6f 75 6e 74 72 79 2d 66 6c 61 67 20 2e 66 6c 61 67 2d 79 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 22 2e 2e 2f 2e 2e 2f 2e 2e 2f 65 74 63 2e 63 6c 69 65 6e 74 Data Ascii: er}.country-flag .flag-ye{background-image:url("../../../etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/img/svg/flags/ye.svg");background-position:0 0;background-size:cover}.country-flag .flag-yt{background-image:url("../../../etc.client
2023-06-06 08:38:57 UTC	1732	IN	Data Raw: 3a 22 48 53 42 43 20 55 6e 69 76 65 72 73 20 4e 65 78 74 22 2c 22 48 53 42 43 20 4e 65 75 65 20 48 65 6c 76 65 74 69 63 61 22 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 22 48 65 6c 76 65 74 69 63 61 22 2c 22 41 72 69 61 6c 22 2c 22 50 69 6e 67 46 61 6e 67 20 53 43 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 61 48 65 69 22 2c 22 4c 61 6e 74 69 6e 67 68 65 69 20 53 43 22 2c 22 48 65 69 74 69 20 53 43 22 2c 22 73 69 6d 68 65 69 22 2c 22 73 61 6e 73 2d 73 65 72 69 66 22 7d 0a 2e 63 72 68 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 63 6f 6e 74 65 78 74 75 61 6c 2d 2d 69 6e 66 6f 72 6d 61 74 69 6f 6e 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b Data Ascii: :"HSBC Univers Next","HSBC Neue Helvetica","Helvetica Neue","Helvetica","Arial","PingFang SC","Microsoft YaHei","Lantinghei SC","Heiti SC","simhei","sans-serif"}.crh-notification-contextual--information{font-size:1rem;line-height:1.5;display:-webkit-box;
2023-06-06 08:38:57 UTC	1748	IN	Data Raw: 36 30 70 78 29 7b 2e 4f 2d 4c 4e 53 43 41 4c 43 2d 52 57 2d 52 42 57 4d 20 2e 41 2d 50 4e 4c 50 45 41 52 4c 2d 52 57 2d 41 4c 4c 2c 2e 4f 2d 4c 4e 53 43 41 4c 43 43 2d 52 57 2d 52 42 57 4d 20 2e 41 2d 50 4e 4c 50 45 41 52 4c 2d 52 57 2d 41 4c 4c 7b 70 61 64 64 69 6e 67 3a 32 33 70 78 20 33 30 70 78 20 31 33 70 78 7d 0a 7d 0a 2e 4f 2d 4c 4e 53 43 41 4c 43 2d 52 57 2d 52 42 57 4d 20 2e 41 2d 50 4e 4c 50 45 41 52 4c 2d 52 57 2d 41 4c 4c 20 2e 41 2d 54 59 50 32 38 4c 2d 52 57 2d 41 4c 4c 2c 2e 4f 2d 4c 4e 53 43 41 4c 43 43 2d 52 57 2d 52 42 57 4d 20 2e 41 2d 50 4e 4c 50 45 41 52 4c 2d 52 57 2d 41 4c 4c 20 2e 41 2d 54 59 50 32 38 4c 2d 52 57 2d 41 4c 4c 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 36 70 78 7d 0a 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 Data Ascii: 60px){.O-LNSCALC-RW-RBWM .A-PNLPEARL-RW-ALL,.O-LNSCALCC-RW-RBWM .A-PNLPEARL-RW-ALL{padding:23px 30px 13px}}.O-LNSCALC-RW-RBWM .A-PNLPEARL-RW-ALL .A-TYP28L-RW-ALL,.O-LNSCALCC-RW-RBWM .A-PNLPEARL-RW-ALL .A-TYP28L-RW-ALL{padding-bottom:6px}@media(min-widt
2023-06-06 08:38:57 UTC	1764	IN	Data Raw: 4c 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 39 70 78 7d 0a 2e 4f 2d 4c 4e 52 45 50 43 41 4c 43 2d 52 57 2d 44 45 56 20 2e 63 61 6c 63 2d 64 65 73 63 72 69 70 74 69 6f 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 34 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 33 70 78 7d 0a 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 34 38 30 70 78 29 7b 2e 4f 2d 4c 4e 52 45 50 43 41 4c 43 2d 52 57 2d 44 45 56 20 2e 63 61 6c 63 2d 64 65 73 63 72 69 70 74 69 6f 6e 7b 6d 61 72 67 69 6e 3a 30 20 30 20 33 70 78 20 31 38 70 78 7d 0a 7d 0a 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 39 36 30 70 78 29 7b 2e 4f 2d 4c 4e 52 45 50 43 41 4c 43 2d 52 57 2d 44 45 56 20 2e 63 61 6c 63 2d 64 65 73 63 72 69 70 74 69 6f 6e 7b 6d 61 72 67 69 6e 3a 30 20 30 Data Ascii: L{padding-bottom:9px}.O-LNREPCALC-RW-DEV .calc-description{margin-left:14px;padding-bottom:13px}@media(min-width:480px){.O-LNREPCALC-RW-DEV .calc-description{margin:0 0 3px 18px}}@media(min-width:960px){.O-LNREPCALC-RW-DEV .calc-description{margin:0 0
2023-06-06 08:38:57 UTC	1780	IN	Data Raw: 29 7b 2e 4f 2d 43 4f 4c 43 54 52 4c 2d 52 57 2d 44 45 56 20 2e 63 63 20 2e 63 63 2d 63 6f 6c 75 6d 6e 2c 2e 4f 2d 43 4f 4c 43 54 52 4c 2d 52 57 2d 44 45 56 20 2e 63 63 20 2e 63 63 2d 73 65 70 61 72 61 74 6f 72 7b 70 61 64 64 69 6e 67 3a 30 20 39 70 78 20 30 20 39 70 78 3b 70 61 64 64 69 6e 67 3a 30 72 65 6d 20 2e 35 36 32 35 72 65 6d 20 30 72 65 6d 20 2e 35 36 32 35 72 65 6d 7d 0a 7d 0a 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 39 36 30 70 78 29 7b 2e 4f 2d 43 4f 4c 43 54 52 4c 2d 52 57 2d 44 45 56 20 2e 63 63 20 2e 63 63 2d 63 6f 6c 75 6d 6e 2c 2e 4f 2d 43 4f 4c 43 54 52 4c 2d 52 57 2d 44 45 56 20 2e 63 63 20 2e 63 63 2d 73 65 70 61 72 61 74 6f 72 7b 70 61 64 64 69 6e 67 3a 30 20 31 30 70 78 20 30 20 31 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 72 Data Ascii: ){.O-COLCTRL-RW-DEV .cc .cc-column,.O-COLCTRL-RW-DEV .cc .cc-separator{padding:0 9px 0 9px;padding:0rem .5625rem 0rem .5625rem}}@media(min-width:960px){.O-COLCTRL-RW-DEV .cc .cc-column,.O-COLCTRL-RW-DEV .cc .cc-separator{padding:0 10px 0 10px;padding:0r
2023-06-06 08:38:57 UTC	1783	IN	Data Raw: 69 64 65 72 73 20 2e 63 63 2d 73 65 70 61 72 61 74 6f 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 0a 2e 4f 2d 43 4f 4c 43 54 52 4c 2d 52 57 2d 44 45 56 20 2e 63 63 2d 64 69 76 69 64 65 72 73 20 2e 63 63 2d 73 65 70 61 72 61 74 6f 72 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 0a 2e 4f 2d 43 4f 4c 43 54 52 4c 2d 52 57 2d 44 45 56 20 2e 63 63 2d 64 69 76 69 64 65 72 73 20 2e 63 63 2d 73 65 70 61 72 61 74 6f 72 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 32 6e 29 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 0a 2e 4f 2d 43 4f 4c 43 54 52 4c 2d 52 57 2d 44 45 56 20 2e 63 63 2d 64 69 76 69 64 65 72 73 2e 63 63 2d 63 6f 6c 75 6d 6e 73 2d 33 33 2d 33 33 2d 33 33 20 2e 63 63 2d 73 65 70 61 72 61 74 6f 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 0a 2e 4f 2d 43 4f 4c 43 Data Ascii: iders .cc-separator{display:none}.O-COLCTRL-RW-DEV .cc-dividers .cc-separator{display:block}.O-COLCTRL-RW-DEV .cc-dividers .cc-separator:nth-of-type(2n){display:none}.O-COLCTRL-RW-DEV .cc-dividers.cc-columns-33-33-33 .cc-separator{display:none}.O-COLC
2023-06-06 08:38:57 UTC	1799	IN	Data Raw: 6d 69 6e 2d 77 69 64 74 68 3a 34 38 30 70 78 29 7b 2e 61 6c 6c 2d 66 6f 72 6d 73 20 2e 67 75 69 64 65 64 72 6f 70 64 6f 77 6e 6c 69 73 74 20 2e 67 75 69 64 65 46 69 65 6c 64 57 69 64 67 65 74 7b 77 69 64 74 68 3a 38 30 25 7d 0a 7d 0a 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 39 36 30 70 78 29 7b 2e 61 6c 6c 2d 66 6f 72 6d 73 20 2e 67 75 69 64 65 64 72 6f 70 64 6f 77 6e 6c 69 73 74 20 2e 67 75 69 64 65 46 69 65 6c 64 57 69 64 67 65 74 7b 77 69 64 74 68 3a 37 35 25 7d 0a 7d 0a 2e 72 61 64 69 6f 2d 66 6f 72 6d 20 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 63 6f 6c 75 6d 6e 2d 63 6f 6e 74 72 6f 6c 2d 77 72 61 70 70 65 72 7b 70 61 64 64 69 6e 67 3a 30 20 32 30 70 78 20 30 20 30 7d 0a 2e 72 61 64 69 6f 2d 66 6f 72 6d 2e 70 75 62 20 23 Data Ascii: min-width:480px){.all-forms .guidedropdownlist .guideFieldWidget{width:80%}}@media(min-width:960px){.all-forms .guidedropdownlist .guideFieldWidget{width:75%}}.radio-form .content-container .column-control-wrapper{padding:0 20px 0 0}.radio-form.pub #
2023-06-06 08:38:57 UTC	1815	IN	Data Raw: 70 6f 6e 65 6e 74 73 54 61 62 6c 65 7b 77 69 64 74 68 3a 31 30 30 25 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 7d 0a 2e 72 65 70 6f 72 74 2d 70 61 67 65 2d 77 72 61 70 70 65 72 20 2e 63 6f 6d 70 6f 6e 65 6e 74 73 54 61 62 6c 65 20 2e 67 72 6f 75 70 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 2d 63 65 6c 6c 3b 70 61 64 64 69 6e 67 3a 33 70 78 3b 77 69 64 74 68 3a 32 25 7d 0a 2e 72 65 70 6f 72 74 2d 70 61 67 65 2d 77 72 61 70 70 65 72 20 2e 63 6f 6d 70 6f 6e 65 6e 74 73 54 61 62 6c 65 20 2e 67 72 6f 75 70 5b 69 64 3d 74 61 62 6c 65 2d 73 74 61 72 74 5d 2c 2e 72 65 70 6f 72 74 2d 70 61 67 65 2d 77 72 61 70 70 65 72 20 2e 63 6f 6d 70 6f 6e 65 6e 74 73 54 61 62 6c 65 20 2e 67 72 6f 75 70 5b 69 64 3d 74 61 62 6c 65 2d 65 6e 64 5d 7b 70 61 64 64 69 6e 67 2d 74 6f Data Ascii: ponentsTable{width:100%;display:table}.report-page-wrapper .componentsTable .group{display:table-cell;padding:3px;width:2%}.report-page-wrapper .componentsTable .group[id=table-start],.report-page-wrapper .componentsTable .group[id=table-end]{padding-to
2023-06-06 08:38:57 UTC	1831	IN	Data Raw: 4e 45 52 2d 52 57 2d 41 4c 4c 7b 70 6f 73 69 74 69 6f 6e 3a 73 74 61 74 69 63 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 7d 0a 2e 4f 2d 50 49 4e 42 41 4e 4e 45 52 2d 52 57 2d 41 4c 4c 2e 61 63 74 69 76 65 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 35 73 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 35 73 7d 0a 2e 4f 2d 50 49 4e 42 41 4e 4e 45 52 2d 52 57 2d 41 4c 4c 2e 64 79 6e 61 6d 69 63 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 6f 74 74 6f 6d 3a 30 3b 7a 2d 69 6e 64 65 78 3a 2d 31 7d 0a 2e Data Ascii: NER-RW-ALL{position:static;margin-top:20px;margin-bottom:20px;border-bottom:0}.O-PINBANNER-RW-ALL.active{position:relative;top:0;-webkit-transition-duration:.5s;transition-duration:.5s}.O-PINBANNER-RW-ALL.dynamic{position:absolute;bottom:0;z-index:-1}.
2023-06-06 08:38:57 UTC	1847	IN	Data Raw: 29 7b 2e 4f 2d 50 52 4f 44 43 4d 50 2d 52 57 2d 44 45 56 20 2e 6d 6f 64 61 6c 2d 77 69 6e 64 6f 77 20 2e 6d 61 69 6e 2d 6d 6f 64 61 6c 20 2e 6d 6f 64 61 6c 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6d 6f 64 61 6c 2d 64 69 61 6c 6f 67 20 2e 6d 6f 64 61 6c 2d 62 75 74 74 6f 6e 2e 70 69 6e 6e 65 64 7b 6d 61 72 67 69 6e 3a 30 20 2d 32 30 70 78 20 30 20 2d 32 30 70 78 3b 6d 61 72 67 69 6e 3a 30 72 65 6d 20 2d 31 2e 32 35 72 65 6d 20 30 72 65 6d 20 2d 31 2e 32 35 72 65 6d 7d 0a 7d 0a 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 39 36 30 70 78 29 7b 2e 4f 2d 50 52 4f 44 43 4d 50 2d 52 57 2d 44 45 56 20 2e 6d 6f 64 61 6c 2d 77 69 6e 64 6f 77 20 2e 6d 61 69 6e 2d 6d 6f 64 61 6c 20 2e 6d 6f 64 61 6c 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6d 6f 64 61 6c 2d 64 69 61 6c Data Ascii: ){.O-PRODCMP-RW-DEV .modal-window .main-modal .modal-container .modal-dialog .modal-button.pinned{margin:0 -20px 0 -20px;margin:0rem -1.25rem 0rem -1.25rem}}@media(min-width:960px){.O-PRODCMP-RW-DEV .modal-window .main-modal .modal-container .modal-dial
2023-06-06 08:38:57 UTC	1863	IN	Data Raw: 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 30 7d 0a 2e 4f 2d 50 52 4f 44 43 4d 50 2d 52 57 2d 44 45 56 20 2e 61 63 63 6f 72 64 69 6f 6e 2d 73 65 63 74 69 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 65 63 74 69 6f 6e 2d 63 6f 6c 75 6d 6e 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 65 63 74 69 6f 6e 2d 63 6f 6c 75 6d 6e 20 70 2b 70 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 36 70 78 7d 0a 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 39 36 30 70 78 29 7b 2e 4f 2d 50 52 4f 44 43 4d 50 2d 52 57 2d 44 45 56 20 2e 61 63 63 6f 72 64 69 6f 6e 2d 73 65 63 74 69 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 65 63 74 69 6f 6e 2d 63 6f 6c 75 6d 6e 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 65 63 74 69 6f 6e 2d 63 6f 6c 75 6d 6e 20 70 2b 70 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a Data Ascii: ding-bottom:0}.O-PRODCMP-RW-DEV .accordion-section-container .section-columns-container .section-column p+p{margin-top:-6px}@media(min-width:960px){.O-PRODCMP-RW-DEV .accordion-section-container .section-columns-container .section-column p+p{margin-top:
2023-06-06 08:38:57 UTC	1879	IN	Data Raw: 78 73 6d 2d 31 32 2c 2e 4f 2d 41 52 54 49 43 4c 45 42 4f 4f 4b 45 4e 44 2d 41 52 54 2d 44 45 56 20 2e 6e 65 78 74 2d 73 74 65 70 73 2e 6d 2d 6d 64 73 6d 2d 36 2c 2e 4f 2d 41 52 54 49 43 4c 45 42 4f 4f 4b 45 4e 44 2d 41 52 54 2d 44 45 56 20 2e 73 6f 63 69 61 6c 2d 73 68 61 72 65 2e 6d 2d 78 73 6d 2d 31 32 2c 2e 4f 2d 41 52 54 49 43 4c 45 42 4f 4f 4b 45 4e 44 2d 41 52 54 2d 44 45 56 20 2e 73 6f 63 69 61 6c 2d 73 68 61 72 65 2e 6d 2d 6d 64 73 6d 2d 36 7b 70 61 64 64 69 6e 67 3a 34 38 70 78 20 30 20 34 38 70 78 20 30 3b 70 61 64 64 69 6e 67 3a 33 72 65 6d 20 30 72 65 6d 20 33 72 65 6d 20 30 72 65 6d 7d 0a 7d 0a 2e 4f 2d 41 52 54 49 43 4c 45 42 4f 4f 4b 45 4e 44 2d 41 52 54 2d 44 45 56 20 2e 6e 65 78 74 2d 73 74 65 70 73 2e 6d 2d 78 73 6d 2d 31 32 20 2e 41 2d Data Ascii: xsm-12,.O-ARTICLEBOOKEND-ART-DEV .next-steps.m-mdsm-6,.O-ARTICLEBOOKEND-ART-DEV .social-share.m-xsm-12,.O-ARTICLEBOOKEND-ART-DEV .social-share.m-mdsm-6{padding:48px 0 48px 0;padding:3rem 0rem 3rem 0rem}}.O-ARTICLEBOOKEND-ART-DEV .next-steps.m-xsm-12 .A-
2023-06-06 08:38:57 UTC	1892	IN	Data Raw: 30 7d 0a 35 30 25 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 38 39 2c 32 30 30 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 33 35 7d 0a 31 30 30 25 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 38 39 2c 32 30 30 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 31 32 34 7d 0a 7d 0a 40 6b 65 79 66 72 61 6d 65 73 20 64 61 73 68 2d 73 70 69 6e 6e 65 72 7b 30 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 2c 32 30 30 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 7d 0a 35 30 25 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 38 39 2c 32 30 30 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 35 30 70 78 7d 0a 31 30 30 25 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 38 Data Ascii: 0}50%{stroke-dasharray:89,200;stroke-dashoffset:-35}100%{stroke-dasharray:89,200;stroke-dashoffset:-124}}@keyframes dash-spinner{0{stroke-dasharray:1,200;stroke-dashoffset:0}50%{stroke-dasharray:89,200;stroke-dashoffset:-50px}100%{stroke-dasharray:8
2023-06-06 08:38:57 UTC	1908	IN	Data Raw: 6f 6c 6f 72 20 36 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 69 6e 66 69 6e 69 74 65 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3a 72 6f 75 6e 64 7d 0a 40 6b 65 79 66 72 61 6d 65 73 20 72 6f 74 61 74 65 2d 73 70 69 6e 6e 65 72 7b 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 7d 0a 7d 0a 40 6b 65 79 66 72 61 6d 65 73 20 72 6f 74 61 74 65 2d 73 70 69 6e 6e 65 72 7b 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 7d 0a 7d 0a 40 6b 65 79 66 72 61 6d 65 73 20 64 61 73 68 2d 73 70 69 6e Data Ascii: olor 6s ease-in-out infinite;stroke-linecap:round}@keyframes rotate-spinner{100%{-webkit-transform:rotate(360deg);transform:rotate(360deg)}}@keyframes rotate-spinner{100%{-webkit-transform:rotate(360deg);transform:rotate(360deg)}}@keyframes dash-spin
2023-06-06 08:38:57 UTC	1924	IN	Data Raw: 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 38 70 78 3b 63 6f 6c 6f 72 3a 23 33 33 33 7d 0a 2e 61 72 74 69 63 6c 65 50 61 67 65 20 2e 69 6e 2d 70 61 67 65 2d 70 72 6f 6d 6f 20 2e 69 6e 2d 70 61 67 65 2d 70 72 6f 6d 6f 5f 5f 70 72 6f 6d 6f 74 69 6f 6e 20 2e 63 71 2d 45 64 69 74 61 62 6c 65 2d 64 6f 6d 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 Data Ascii: splay:-ms-flexbox;display:flex;-webkit-box-align:center;-ms-flex-align:center;align-items:center;padding-bottom:8px;color:#333}.articlePage .in-page-promo .in-page-promo__promotion .cq-Editable-dom{display:-webkit-box;display:-ms-flexbox;display:flex;-ms
2023-06-06 08:38:57 UTC	1940	IN	Data Raw: 2d 2d 68 69 64 65 2d 66 72 61 6d 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 37 35 72 65 6d 7d 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 30 65 6d 29 7b 2e 4d 2d 4d 41 53 54 45 52 43 41 52 44 2e 63 72 68 2d 6d 61 73 74 65 72 2d 63 61 72 64 73 5f 5f 66 6f 75 72 74 68 2d 63 61 72 64 2e 63 72 68 2d 6d 61 73 74 65 72 2d 63 61 72 64 73 5f 5f 63 61 72 64 2d 2d 68 69 64 65 2d 66 72 61 6d 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 72 65 6d 7d 0a 7d 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 34 37 2e 35 65 6d 29 7b 2e 4d 2d 4d 41 53 54 45 52 43 41 52 44 2e 63 72 68 2d 6d 61 73 74 65 72 2d 63 61 72 64 73 5f 5f 66 6f 75 72 74 68 2d 63 61 72 64 2e 63 72 Data Ascii: --hide-frame{margin-bottom:1.75rem}@media screen and (min-width:60em){.M-MASTERCARD.crh-master-cards__fourth-card.crh-master-cards__card--hide-frame{margin-bottom:2rem}}@media screen and (min-width:47.5em){.M-MASTERCARD.crh-master-cards__fourth-card.cr

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
68	192.168.2.4	49848	18.66.192.16	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:57 UTC	1950	OUT	GET /utag/hsbc/uk-rbwm/prod/utag.sync.js HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:38:57 UTC	1951	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1738 Connection: close Date: Tue, 06 Jun 2023 08:38:58 GMT Last-Modified: Wed, 31 May 2023 18:12:49 GMT ETag: "b83cf2217ed81c6b9771d0fd207f360e" x-amz-server-side-encryption: AES256 x-amz-version-id: k2TvBh08Yk5vwrtqYltdyrP.dITgL3QG Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 77aa8087323921dee0b130bc0589bda8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P1 X-Amz-Cf-Id: wkI5HxE1frKuvdGa-5MbYpaRnttkVBC8_jdHaiiTUOqtKXI4QKu56A== Cache-Control: max-age=300
2023-06-06 08:38:57 UTC	1952	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 73 79 6e 63 20 75 74 34 2e 30 2e 32 30 32 33 30 35 33 31 31 38 30 39 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 33 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 77 69 6e 64 6f 77 2e 48 53 42 43 3d 77 69 6e 64 6f 77 2e 48 53 42 43 7c 7c 7b 7d 3b 48 53 42 43 2e 53 49 54 45 3d 48 53 42 43 2e 53 49 54 45 7c 7c 7b 7d 3b 48 53 42 43 2e 50 41 47 45 3d 48 53 42 43 2e 50 41 47 45 7c 7c 7b 7d 3b 48 53 42 43 2e 45 58 54 3d 48 53 42 43 2e 45 58 54 7c 7c 7b 7d 3b 48 53 42 43 2e 4c 4f 47 3d 48 53 42 43 2e 4c 4f 47 7c 7c 7b 7d 3b 48 53 42 43 2e 44 43 53 3d 48 53 42 43 2e 44 43 53 7c 7c 7b 7d 3b 77 69 6e 64 Data Ascii: //tealium universal tag - utag.sync ut4.0.202305311809, Copyright 2023 Tealium.com Inc. All Rights Reserved.window.HSBC=window.HSBC\|\|{};HSBC.SITE=HSBC.SITE\|\|{};HSBC.PAGE=HSBC.PAGE\|\|{};HSBC.EXT=HSBC.EXT\|\|{};HSBC.LOG=HSBC.LOG\|\|{};HSBC.DCS=HSBC.DCS\|\|{};wind

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
69	192.168.2.4	49855	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:57 UTC	1951	OUT	GET /etc.clientlibs/hsbc/global/clientlibs/appd.min.28729b81913621076cb1004898cb22c7.js HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373
2023-06-06 08:38:57 UTC	1954	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 36295 Connection: close Date: Tue, 06 Jun 2023 08:38:57 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains Last-Modified: Sat, 03 Jun 2023 04:24:58 GMT Accept-Ranges: bytes S: dispatcher2euwest2 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=31536000, s-maxage=31536000 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 47225389ee58add3b9e790ead940cda4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: FJBOz2s3HpVtr9epMUG2Z0JrxnYXKnUSnzjX_GT_3bTkfNpcUMI1Vg==
2023-06-06 08:38:57 UTC	1954	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 77 69 6e 64 6f 77 2e 41 44 52 55 4d 26 26 21 30 21 3d 3d 77 69 6e 64 6f 77 5b 22 61 64 72 75 6d 2d 64 69 73 61 62 6c 65 22 5d 29 7b 76 61 72 20 67 3d 77 69 6e 64 6f 77 2e 41 44 52 55 4d 3d 7b 7d 3b 77 69 6e 64 6f 77 5b 22 61 64 72 75 6d 2d 73 74 61 72 74 2d 74 69 6d 65 22 5d 3d 77 69 6e 64 6f 77 5b 22 61 64 72 75 6d 2d 73 74 61 72 74 2d 74 69 6d 65 22 5d 7c 7c 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 3b 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 5a 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 5b 5d 2c 62 3d 30 3b 62 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 Data Ascii: (function(){new function(){if(!window.ADRUM&&!0!==window["adrum-disable"]){var g=window.ADRUM={};window["adrum-start-time"]=window["adrum-start-time"]\|\|(new Date).getTime();(function(a){(function(a){a.Zc=function(){for(var a=[],b=0;b<arguments.length;b++)
2023-06-06 08:38:57 UTC	1970	IN	Data Raw: 74 2c 65 6e 64 3a 61 2e 62 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 2c 6e 61 6d 65 3a 22 46 42 54 22 7d 2c 53 68 3a 7b 73 74 61 72 74 3a 61 2e 62 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 2c 65 6e 64 3a 61 2e 62 2e 72 65 71 75 65 73 74 53 74 61 72 74 2c 6e 61 6d 65 3a 22 53 43 54 22 7d 2c 54 68 3a 7b 73 74 61 72 74 3a 61 2e 62 2e 73 65 63 75 72 65 43 6f 6e 6e 65 63 74 69 6f 6e 53 74 61 72 74 2c 65 6e 64 3a 61 2e 62 2e 63 6f 6e 6e 65 63 74 45 6e 64 2c 6e 61 6d 65 3a 22 53 48 54 22 7d 2c 7a 68 3a 7b 73 74 61 72 74 3a 61 2e 62 2e 64 6f 6d 61 69 6e 4c 6f 6f 6b 75 70 53 74 61 72 74 2c 65 6e 64 3a 61 2e 62 2e 64 6f 6d 61 69 6e 4c 6f 6f 6b 75 70 45 6e 64 2c 0a 6e 61 6d 65 3a 22 44 4c 54 22 7d 2c 56 68 3a 7b 73 74 61 72 74 3a 61 2e 62 2e 63 6f 6e 6e 65 63 Data Ascii: t,end:a.b.responseStart,name:"FBT"},Sh:{start:a.b.navigationStart,end:a.b.requestStart,name:"SCT"},Th:{start:a.b.secureConnectionStart,end:a.b.connectEnd,name:"SHT"},zh:{start:a.b.domainLookupStart,end:a.b.domainLookupEnd,name:"DLT"},Vh:{start:a.b.connec
2023-06-06 08:38:57 UTC	1976	IN	Data Raw: 64 26 26 74 68 69 73 2e 5f 61 64 72 75 6d 41 6a 61 78 54 29 7b 76 61 72 20 65 3d 64 3b 69 66 28 65 2e 5f 5f 61 64 72 75 6d 49 6e 74 65 72 63 65 70 74 6f 72 29 65 3d 65 2e 5f 5f 61 64 72 75 6d 49 6e 74 65 72 63 65 70 74 6f 72 3b 65 6c 73 65 20 69 66 28 61 2e 61 6f 70 2e 73 75 70 70 6f 72 74 28 65 29 29 7b 76 61 72 20 66 3d 62 2e 56 62 28 65 2c 74 68 69 73 2c 22 58 48 52 2e 69 6e 76 6f 6b 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 29 3b 65 3d 65 2e 5f 5f 61 64 72 75 6d 49 6e 74 65 72 63 65 70 74 6f 72 3d 66 7d 65 6c 73 65 20 65 3d 6e 75 6c 6c 3b 69 66 28 65 29 72 65 74 75 72 6e 20 66 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 2c 0a 66 5b 31 5d 3d 65 2c 61 2e 6c 6f 67 28 22 4d 34 34 22 Data Ascii: d&&this._adrumAjaxT){var e=d;if(e.__adrumInterceptor)e=e.__adrumInterceptor;else if(a.aop.support(e)){var f=b.Vb(e,this,"XHR.invokeEventListener");e=e.__adrumInterceptor=f}else e=null;if(e)return f=Array.prototype.slice.call(arguments),f[1]=e,a.log("M44"

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
7	192.168.2.4	49702	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:19 UTC	146	OUT	GET /front_end/front_end_files/core.css HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hs-login.online/front_end/front_end_files/ursula.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:20 UTC	176	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:19 GMT Content-Type: text/css Content-Length: 98438 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:38 GMT ETag: "18086-5fd6542df254a" Accept-Ranges: bytes Vary: Accept-Encoding
2023-06-06 08:38:20 UTC	176	IN	Data Raw: 2e 75 72 73 75 6c 61 20 2e 63 6f 6e 74 61 69 6e 65 72 53 74 79 6c 65 30 31 20 2e 62 75 74 74 6f 6e 52 6f 77 4d 65 6d 4f 6c 72 7b 0a 09 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 30 70 78 3b 0a 7d 66 0a 2e 75 72 73 75 6c 61 20 2e 68 65 61 64 65 72 53 74 79 6c 65 30 31 5f 32 30 34 30 7b 0a 09 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 30 70 78 3b 0a 7d 0a 2e 75 72 73 75 6c 61 20 2e 63 6f 6e 74 61 69 6e 65 72 53 74 79 6c 65 30 31 20 2e 62 75 74 74 6f 6e 52 6f 77 43 72 65 64 7b 0a 09 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 30 70 78 3b 0a 7d 0a 2e 75 72 73 75 6c 61 20 2e 63 6f 6e 74 61 69 6e 65 72 53 74 79 6c 65 30 31 20 2e 62 75 74 74 6f 6e 52 6f 77 4f 66 72 7b 0a 09 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 30 70 78 3b 0a 7d 0a 2e 75 72 73 75 6c 61 20 2e 63 6f 6e Data Ascii: .ursula .containerStyle01 .buttonRowMemOlr{padding-top:20px;}f.ursula .headerStyle01_2040{padding-bottom:0px;}.ursula .containerStyle01 .buttonRowCred{padding-top:20px;}.ursula .containerStyle01 .buttonRowOfr{padding-top:20px;}.ursula .con
2023-06-06 08:38:20 UTC	192	IN	Data Raw: 66 6f 63 75 73 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 64 62 30 30 31 31 3b 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 2f 2a 20 2d 2d 20 63 6f 6e 74 61 69 6e 65 72 20 73 74 79 6c 65 73 20 2d 2d 2a 2f 0a 2f 2a 20 63 6f 6e 74 61 69 6e 65 72 53 74 79 6c 65 30 31 20 2a 2f 0a 2e 75 72 73 75 6c 61 20 2e 63 6f 6e 74 61 69 6e 65 72 53 74 79 6c 65 30 31 20 7b 0a 09 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 09 2f 2a 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 33 30 70 78 3b 2a 2f 0a 09 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 32 70 78 3b 0a 7d 0a 2e 75 72 73 75 6c 61 20 2e 63 6f 6e 74 61 69 6e 65 72 53 74 79 6c 65 30 31 20 2e 6c 61 73 74 43 6f 6c 20 7b 0a 09 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 30 3b 0a 7d Data Ascii: focus {color: #db0011;text-decoration: underline;}/* -- container styles --// containerStyle01 /.ursula .containerStyle01 {float: left;/padding-bottom: 30px;*/padding-top: 12px;}.ursula .containerStyle01 .lastCol {padding-right: 0;}
2023-06-06 08:38:20 UTC	216	IN	Data Raw: 20 7b 0a 09 77 69 64 74 68 3a 20 32 32 70 78 3b 0a 7d 0a 2e 75 72 73 75 6c 61 20 2e 63 6f 6e 74 61 69 6e 65 72 53 74 79 6c 65 31 38 20 2e 73 65 63 75 72 69 74 79 44 65 74 61 69 6c 73 20 2e 71 75 65 73 74 69 6f 6e 20 2e 74 65 78 74 49 6e 70 75 74 20 69 6e 70 75 74 20 7b 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 34 34 70 78 3b 0a 7d 0a 2e 75 72 73 75 6c 61 20 2e 63 6f 6e 74 61 69 6e 65 72 53 74 79 6c 65 31 38 20 2e 73 65 63 75 72 69 74 79 44 65 74 61 69 6c 73 20 61 20 7b 0a 09 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 34 65 6d 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 32 70 78 3b 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 70 78 3b 0a 7d 0a 2f 2a 20 63 6f 6e 74 61 69 6e 65 72 53 74 79 6c 65 Data Ascii: {width: 22px;}.ursula .containerStyle18 .securityDetails .question .textInput input {margin-bottom: 44px;}.ursula .containerStyle18 .securityDetails a {float: left;font-size: 1.4em;line-height: 22px;margin-bottom: 2px;}/* containerStyle
2023-06-06 08:38:20 UTC	232	IN	Data Raw: 69 6e 2d 68 65 69 67 68 74 3a 20 31 35 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 65 63 75 72 69 74 79 2e 68 73 62 63 2e 63 6f 2e 75 6b 2f 67 73 70 2f 73 61 61 73 2f 43 6f 6d 70 6f 6e 65 6e 74 73 2f 64 65 66 61 75 6c 74 2f 72 65 73 6f 75 72 63 65 73 2f 73 63 72 69 70 74 2f 6c 69 62 72 61 72 69 65 73 2f 68 73 62 63 2f 77 69 64 67 65 74 2f 74 68 65 6d 65 73 2f 75 72 73 75 6c 61 2f 69 6d 61 67 65 73 2f 41 6c 65 72 74 42 6f 78 2f 69 63 6f 6e 2d 69 6e 66 6f 72 6d 61 74 69 76 65 2d 78 6c 61 72 67 65 2e 67 69 66 22 29 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 Data Ascii: in-height: 150px;background-image: url("https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/images/AlertBox/icon-informative-xlarge.gif");background-repeat:no-repeat;background-position:0
2023-06-06 08:38:20 UTC	248	IN	Data Raw: 3a 2f 2f 77 77 77 2e 73 65 63 75 72 69 74 79 2e 68 73 62 63 2e 63 6f 2e 75 6b 2f 67 73 70 2f 73 61 61 73 2f 43 6f 6d 70 6f 6e 65 6e 74 73 2f 64 65 66 61 75 6c 74 2f 72 65 73 6f 75 72 63 65 73 2f 73 63 72 69 70 74 2f 6c 69 62 72 61 72 69 65 73 2f 68 73 62 63 2f 77 69 64 67 65 74 2f 74 68 65 6d 65 73 2f 75 72 73 75 6c 61 2f 69 6d 61 67 65 73 2f 62 61 63 6b 67 72 6f 75 6e 64 2f 62 79 50 6f 73 74 2e 70 6e 67 22 29 20 6e 6f 2d 72 65 70 65 61 74 20 31 39 70 78 20 31 33 70 78 3b 0a 7d 0a 2e 75 72 73 75 6c 61 20 2e 74 61 62 53 68 6f 77 48 69 64 65 20 20 2e 62 79 42 72 61 6e 63 68 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 65 63 75 72 69 74 79 2e 68 73 62 63 2e 63 6f 2e 75 6b 2f 67 73 70 2f 73 61 61 73 2f Data Ascii: ://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/themes/ursula/images/background/byPost.png") no-repeat 19px 13px;}.ursula .tabShowHide .byBranch {background: url("https://www.security.hsbc.co.uk/gsp/saas/
2023-06-06 08:38:20 UTC	265	IN	Data Raw: 74 61 6e 74 3b 0a 7d 0a 2e 79 65 6c 6c 6f 77 42 74 6e 5f 73 6b 68 6f 5f 6d 74 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 36 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 33 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 32 38 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 67 72 65 65 6e 42 74 6e 5f 73 6b 68 6f 5f 6d 74 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 36 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 Data Ascii: tant;}.yellowBtn_skho_mt{font-size: 1.6em !important; line-height: 23px !important; margin-bottom: 10px !important; margin-top: 0 !important; padding-left: 28px !important;}.greenBtn_skho_mt{font-size: 1.6em !important; line-he
2023-06-06 08:38:20 UTC	281	IN	Data Raw: 20 6c 65 66 74 3b 0a 09 77 69 64 74 68 3a 20 33 30 30 70 78 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 09 63 6c 65 61 72 3a 20 72 69 67 68 74 3b 0a 09 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 37 70 78 3b 0a 7d 0a 2e 75 72 73 75 6c 61 20 2e 63 6f 6e 66 69 72 6d 41 64 64 20 64 6c 20 64 74 20 7b 0a 09 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 09 77 69 64 74 68 3a 20 37 35 70 78 3b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 09 63 6c 65 61 72 3a 20 6c 65 66 74 3b 0a 7d 0a 2e 75 72 73 75 6c 61 20 2e 6c 61 62 65 6c 5f 72 61 64 69 6f 53 74 79 6c 65 20 7b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 09 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 30 70 78 3b 0a 09 70 Data Ascii: left;width: 300px;font-weight: bold;display: block;clear: right;padding-bottom: 7px;}.ursula .confirmAdd dl dt {float: left;width: 75px;display: block;clear: left;}.ursula .label_radioStyle {text-align: left;padding-top: 0px;p

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
70	192.168.2.4	49856	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:57 UTC	1990	OUT	GET /etc.clientlibs/dpws/clientlibs-public/clientlib-jquery.e707977d551ec8c86a2541af384e7f64.js HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373
2023-06-06 08:38:57 UTC	1991	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 113909 Connection: close Date: Tue, 06 Jun 2023 08:38:57 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains Last-Modified: Sat, 03 Jun 2023 04:23:40 GMT Accept-Ranges: bytes S: dispatcher3euwest2 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=31536000, s-maxage=31536000 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 d0b8b50936db949f99b5544ecb5eda1c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: SYoO4_6KDfhCnZEowU3wg1SwO6zUONn2uxHVpTCuZYZdyttJZS7uOQ==
2023-06-06 08:38:57 UTC	1992	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2023-06-06 08:38:57 UTC	2007	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 68 2c 65 2c 74 2c 67 2c 76 29 7b 76 61 72 20 79 3d 22 6e 74 68 22 21 3d 3d 68 2e 73 6c 69 63 65 28 30 2c 33 29 2c 6d 3d 22 6c 61 73 74 22 21 3d 3d 68 2e 73 6c 69 63 65 28 2d 34 29 2c 78 3d 22 6f 66 2d 74 79 70 65 22 3d 3d 3d 65 3b 72 65 74 75 72 6e 20 31 3d 3d 3d 67 26 26 30 3d 3d 3d 76 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 3d 79 21 3d 3d 6d 3f 22 6e 65 78 74 53 69 62 6c 69 6e 67 Data Ascii: function(h,e,t,g,v){var y="nth"!==h.slice(0,3),m="last"!==h.slice(-4),x="of-type"===e;return 1===g&&0===v?function(e){return!!e.parentNode}:function(e,t,n){var r,i,o,a,s,u,l=y!==m?"nextSibling
2023-06-06 08:38:57 UTC	2007	IN	Data Raw: 22 3a 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 2c 63 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 78 26 26 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 70 3d 21 6e 26 26 21 78 2c 64 3d 21 31 3b 69 66 28 63 29 7b 69 66 28 79 29 7b 77 68 69 6c 65 28 6c 29 7b 61 3d 65 3b 77 68 69 6c 65 28 61 3d 61 5b 6c 5d 29 69 66 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 21 31 3b 75 3d 6c 3d 22 6f 6e 6c 79 22 3d 3d 3d 68 26 26 21 75 26 26 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 7d 72 65 74 75 72 6e 21 30 7d 69 66 28 75 3d 5b 6d 3f 63 2e 66 69 72 73 74 43 68 69 6c 64 3a 63 2e 6c 61 73 74 43 68 69 6c 64 5d 2c 6d 26 26 Data Ascii: ":"previousSibling",c=e.parentNode,f=x&&e.nodeName.toLowerCase(),p=!n&&!x,d=!1;if(c){if(y){while(l){a=e;while(a=a[l])if(x?a.nodeName.toLowerCase()===f:1===a.nodeType)return!1;u=l="only"===h&&!u&&"nextSibling"}return!0}if(u=[m?c.firstChild:c.lastChild],m&&
2023-06-06 08:38:57 UTC	2023	IN	Data Raw: 64 22 2c 42 29 2c 43 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 Data Ascii: d",B),C.addEventListener
2023-06-06 08:38:57 UTC	2023	IN	Data Raw: 28 22 6c 6f 61 64 22 2c 42 29 29 3b 76 61 72 20 24 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 29 7b 76 61 72 20 73 3d 30 2c 75 3d 65 2e 6c 65 6e 67 74 68 2c 6c 3d 6e 75 6c 6c 3d 3d 6e 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 77 28 6e 29 29 66 6f 72 28 73 20 69 6e 20 69 3d 21 30 2c 6e 29 24 28 65 2c 74 2c 73 2c 6e 5b 73 5d 2c 21 30 2c 6f 2c 61 29 3b 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 26 26 28 69 3d 21 30 2c 6d 28 72 29 7c 7c 28 61 3d 21 30 29 2c 6c 26 26 28 61 3f 28 74 2e 63 61 6c 6c 28 65 2c 72 29 2c 74 3d 6e 75 6c 6c 29 3a 28 6c 3d 74 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6c 2e 63 61 6c 6c 28 53 28 65 29 2c 6e 29 7d 29 29 2c 74 29 29 66 6f 72 28 3b 73 3c 75 3b 73 2b Data Ascii: ("load",B));var $=function(e,t,n,r,i,o,a){var s=0,u=e.length,l=null==n;if("object"===w(n))for(s in i=!0,n)$(e,t,s,n[s],!0,o,a);else if(void 0!==r&&(i=!0,m(r)\|\|(a=!0),l&&(a?(t.call(e,r),t=null):(l=t,t=function(e,t,n){return l.call(S(e),n)})),t))for(;s<u;s+
2023-06-06 08:38:57 UTC	2039	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 2c 63 6c 6f 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 2c 63 3d 65 2e 63 6c 6f 6e 65 4e 6f 64 65 28 21 30 29 2c 66 3d 69 65 28 65 29 3b 69 66 28 21 28 79 2e 6e 6f 43 6c 6f 6e 65 43 68 65 63 6b 65 64 7c 7c 31 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 31 31 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 29 29 66 6f 72 28 61 3d 76 65 28 63 29 2c 72 3d 30 2c 69 3d 28 6f 3d 76 65 28 65 29 29 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 73 3d 6f 5b 72 5d 2c 75 3d 61 5b 72 5d 2c 76 6f 69 64 20 30 2c 22 69 6e 70 75 74 22 3d 3d 3d 28 6c 3d 75 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 Data Ascii: :function(e){return e},clone:function(e,t,n){var r,i,o,a,s,u,l,c=e.cloneNode(!0),f=ie(e);if(!(y.noCloneChecked\|\|1!==e.nodeType&&11!==e.nodeType\|\|S.isXMLDoc(e)))for(a=ve(c),r=0,i=(o=ve(e)).length;r<i;r++)s=o[r],u=a[r],void 0,"input"===(l=u.nodeName.toLower
2023-06-06 08:38:57 UTC	2046	IN	Data Raw: 53 2e 65 78 74 65 6e 64 28 7b 63 73 73 48 6f 6f 6b 73 3a 7b 6f 70 61 63 69 74 79 3a 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 29 7b 76 61 72 20 6e 3d 57 65 28 65 2c 22 6f 70 61 63 69 74 79 22 29 3b 72 65 74 75 72 6e 22 22 3d 3d 3d 6e 3f 22 31 22 3a 6e 7d 7d 7d 7d 2c 63 73 73 4e 75 6d 62 65 72 3a 7b 61 6e 69 6d 61 74 69 6f 6e 49 74 65 72 61 74 69 6f 6e 43 6f 75 6e 74 3a 21 30 2c 63 6f 6c 75 6d 6e 43 6f 75 6e 74 3a 21 30 2c 66 69 6c 6c 4f 70 61 63 69 74 79 3a 21 30 2c 66 6c 65 78 47 72 6f 77 3a 21 30 2c 66 6c 65 78 53 68 72 69 6e 6b 3a 21 30 2c 66 6f 6e 74 57 65 69 67 68 74 3a 21 30 2c 67 72 69 64 41 72 65 61 3a 21 30 2c 67 72 69 64 43 6f 6c 75 6d 6e 3a 21 30 2c 67 72 69 64 43 6f 6c 75 6d 6e 45 6e 64 3a 21 30 2c 67 72 69 64 43 6f Data Ascii: S.extend({cssHooks:{opacity:{get:function(e,t){if(t){var n=We(e,"opacity");return""===n?"1":n}}}},cssNumber:{animationIterationCount:!0,columnCount:!0,fillOpacity:!0,flexGrow:!0,flexShrink:!0,fontWeight:!0,gridArea:!0,gridColumn:!0,gridColumnEnd:!0,gridCo
2023-06-06 08:38:57 UTC	2057	IN	Data Raw: 67 65 74 41 74 74 72 69 62 75 74 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 29 7c 7c 22 22 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 65 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 2e 6d 61 74 63 68 28 50 29 7c 7c 5b 5d 7d 53 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 70 72 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 24 28 74 68 69 73 2c 53 2e 70 72 6f 70 2c 65 2c 74 2c 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 72 65 6d 6f 76 65 50 72 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 74 Data Ascii: getAttribute&&e.getAttribute("class")\|\|""}function vt(e){return Array.isArray(e)?e:"string"==typeof e&&e.match(P)\|\|[]}S.fn.extend({prop:function(e,t){return $(this,S.prop,e,t,1<arguments.length)},removeProp:function(e){return this.each(function(){delete t
2023-06-06 08:38:57 UTC	2073	IN	Data Raw: 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 2c 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 65 63 6d 61 73 63 72 69 70 74 2c 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 65 63 6d 61 73 63 72 69 70 74 22 7d 2c 63 6f 6e 74 65 6e 74 73 3a 7b 73 63 72 69 70 74 3a 2f 5c 62 28 3f 3a 6a 61 76 61 7c 65 63 6d 61 29 73 63 72 69 70 74 5c 62 2f 7d 2c 63 6f 6e 76 65 72 74 65 72 73 3a 7b 22 74 65 78 74 20 73 63 72 69 70 74 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 67 6c 6f 62 61 6c 45 76 61 6c 28 65 29 2c 65 7d 7d 7d 29 2c 53 2e 61 6a 61 78 50 72 65 66 69 6c 74 65 72 28 22 73 63 72 69 70 74 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 2e 63 61 63 68 65 26 26 28 65 2e 63 61 63 68 65 3d 21 31 29 2c 65 2e 63 Data Ascii: plication/javascript, application/ecmascript, application/x-ecmascript"},contents:{script:/\b(?:java\|ecma)script\b/},converters:{"text script":function(e){return S.globalEval(e),e}}}),S.ajaxPrefilter("script",function(e){void 0===e.cache&&(e.cache=!1),e.c
2023-06-06 08:38:57 UTC	2087	IN	Data Raw: 6f 2c 6e 2e 64 65 6c 61 79 26 26 73 2e 64 65 6c 61 79 28 6e 2e 64 65 6c 61 79 29 2c 61 26 26 74 2e 65 66 66 65 63 74 73 26 26 74 2e 65 66 66 65 63 74 73 2e 65 66 66 65 63 74 5b 72 5d 3f 73 5b 65 5d 28 6e 29 3a 72 21 3d 3d 65 26 26 73 5b 72 5d 3f 73 5b 72 5d 28 6e 2e 64 75 72 61 74 69 6f 6e 2c 6e 2e 65 61 73 69 6e 67 2c 6f 29 3a 73 2e 71 75 65 75 65 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 74 28 74 68 69 73 29 5b 65 5d 28 29 2c 6f 26 26 6f 2e 63 61 6c 6c 28 73 5b 30 5d 29 2c 69 28 29 7d 29 7d 7d 29 2c 74 2e 77 69 64 67 65 74 2c 74 2e 75 69 2e 66 6f 63 75 73 61 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 69 2c 73 29 7b 76 61 72 20 6e 2c 6f 2c 61 2c 72 2c 6c 2c 68 3d 69 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 61 Data Ascii: o,n.delay&&s.delay(n.delay),a&&t.effects&&t.effects.effect[r]?s[e](n):r!==e&&s[r]?s[r](n.duration,n.easing,o):s.queue(function(i){t(this)[e](),o&&o.call(s[0]),i()})}}),t.widget,t.ui.focusable=function(i,s){var n,o,a,r,l,h=i.nodeName.toLowerCase();return"a

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
71	192.168.2.4	49857	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:57 UTC	1990	OUT	GET /etc.clientlibs/dpws/clientlibs-public/clientlib-all.min.62aeb07d53816af841a6e6653da5c9da.js HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373
2023-06-06 08:38:57 UTC	2103	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 571615 Connection: close Date: Tue, 06 Jun 2023 08:38:57 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains Last-Modified: Sat, 03 Jun 2023 04:21:37 GMT Accept-Ranges: bytes S: dispatcher2euwest1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=31536000, s-maxage=31536000 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 fc6dca2df1221c0bec817610bc20e504.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: GMLL_EWUmLfJdlf3HnY5Ew5ENcrfKia_ht3N07JXTbKCo8e7_jxhMg==
2023-06-06 08:38:57 UTC	2104	IN	Data Raw: 2f 2a 0a 20 40 6c 69 63 65 6e 73 65 20 44 4f 4d 50 75 72 69 66 79 20 32 2e 33 2e 31 20 7c 20 28 63 29 20 43 75 72 65 35 33 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 6c 69 63 65 6e 73 65 20 32 2e 30 20 61 6e 64 20 4d 6f 7a 69 6c 6c 61 20 50 75 62 6c 69 63 20 4c 69 63 65 6e 73 65 20 32 2e 30 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 63 75 72 65 35 33 2f 44 4f 4d 50 75 72 69 66 79 2f 62 6c 6f 62 2f 32 2e 33 2e 31 2f 4c 49 43 45 4e 53 45 20 20 6d 75 73 74 61 63 68 65 2e 6a 73 20 2d 20 4c 6f 67 69 63 2d 6c 65 73 73 20 7b 7b 6d 75 73 74 61 63 68 65 7d 7d 20 74 65 6d 70 6c 61 74 65 73 20 77 69 74 68 20 4a 61 76 61 53 63 72 69 70 74 0a 20 68 74 74 70 Data Ascii: /* @license DOMPurify 2.3.1 \| (c) Cure53 and other contributors \| Released under the Apache license 2.0 and Mozilla Public License 2.0 \| github.com/cure53/DOMPurify/blob/2.3.1/LICENSE mustache.js - Logic-less {{mustache}} templates with JavaScript http
2023-06-06 08:38:57 UTC	2119	IN	Data Raw: 6b 64 61 79 73 53 68 6f 72 74 28 6e 2c 22 22 29 2e 74 6f 4c 6f 63 61 6c 65 4c 6f 77 65 72 43 61 73 65 28 29 3b 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 50 61 72 73 65 5b 63 5d 3d 74 68 69 73 2e 77 65 65 6b 64 61 79 73 28 6e 2c 22 22 29 2e 74 6f 4c 6f 63 61 6c 65 4c 6f 77 65 72 43 61 73 65 28 29 7d 69 66 28 64 29 62 3d 22 64 64 64 64 22 3d 3d 3d 62 3f 56 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 50 61 72 73 65 2c 61 29 3a 22 64 64 64 22 3d 3d 3d 62 3f 56 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 73 68 6f 72 74 57 65 65 6b 64 61 79 73 50 61 72 73 65 2c 61 29 Data Ascii: kdaysShort(n,"").toLocaleLowerCase();this._weekdaysParse[c]=this.weekdays(n,"").toLocaleLowerCase()}if(d)b="dddd"===b?V.call(this._weekdaysParse,a):"ddd"===b?V.call(this._shortWeekdaysParse,a)
2023-06-06 08:38:57 UTC	2119	IN	Data Raw: 3a 56 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 6d 69 6e 57 65 65 6b 64 61 79 73 50 61 72 73 65 2c 61 29 3b 65 6c 73 65 20 69 66 28 22 64 64 64 64 22 3d 3d 3d 62 29 7b 62 3d 56 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 50 61 72 73 65 2c 61 29 3b 69 66 28 2d 31 21 3d 3d 62 29 72 65 74 75 72 6e 20 62 3b 62 3d 56 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 73 68 6f 72 74 57 65 65 6b 64 61 79 73 50 61 72 73 65 2c 61 29 3b 69 66 28 2d 31 21 3d 3d 62 29 72 65 74 75 72 6e 20 62 3b 62 3d 56 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 6d 69 6e 57 65 65 6b 64 61 79 73 50 61 72 73 65 2c 0a 61 29 7d 65 6c 73 65 20 69 66 28 22 64 64 64 22 3d 3d 3d 62 29 7b 62 3d 56 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 73 68 6f 72 74 57 65 65 6b 64 61 79 73 50 61 72 73 65 2c 61 29 3b 69 66 Data Ascii: :V.call(this._minWeekdaysParse,a);else if("dddd"===b){b=V.call(this._weekdaysParse,a);if(-1!==b)return b;b=V.call(this._shortWeekdaysParse,a);if(-1!==b)return b;b=V.call(this._minWeekdaysParse,a)}else if("ddd"===b){b=V.call(this._shortWeekdaysParse,a);if
2023-06-06 08:38:57 UTC	2135	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 43 28 61 29 2b 28 36 38 3c 43 28 61 29 3f 31 39 30 30 3a 32 45 33 29 7d 3b 76 61 72 20 71 63 3d 6a 61 28 22 46 75 6c 6c 59 65 61 72 22 2c 21 30 29 3b 74 28 22 77 22 2c 5b 22 77 77 22 2c 32 5d 2c 22 77 6f 22 2c 22 77 65 65 6b 22 29 3b 74 28 22 57 22 2c 5b 22 57 57 22 2c 32 5d 2c 22 57 6f 22 2c 22 69 73 6f 57 65 65 6b 22 29 3b 4b 28 22 77 65 65 6b 22 2c 22 77 22 29 3b 4b 28 22 69 73 6f 57 65 65 6b 22 2c 22 57 22 29 3b 55 2e 77 65 65 6b 3d 35 3b 55 2e 69 73 6f 57 65 65 6b 3d 35 3b 77 28 22 77 22 2c 4e 29 3b 77 28 22 77 77 22 2c 4e 2c 52 29 3b 77 28 22 57 22 2c 4e 29 3b 77 28 22 57 57 22 2c 4e 2c 52 29 3b 6c 61 28 5b 22 77 22 2c 22 77 77 22 2c 22 57 22 2c 22 57 57 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 65 2c 64 29 7b 62 5b Data Ascii: ){return C(a)+(68<C(a)?1900:2E3)};var qc=ja("FullYear",!0);t("w",["ww",2],"wo","week");t("W",["WW",2],"Wo","isoWeek");K("week","w");K("isoWeek","W");U.week=5;U.isoWeek=5;w("w",N);w("ww",N,R);w("W",N);w("WW",N,R);la(["w","ww","W","WW"],function(a,b,e,d){b[
2023-06-06 08:38:57 UTC	2151	IN	Data Raw: 74 68 3b 65 3c 61 3b 2b 2b 65 29 7b 76 61 72 20 64 3d 62 5b 65 5d 2e 73 69 6e 63 65 3c 3d 62 5b 65 5d 2e 75 6e 74 69 6c 3f 31 3a 2d 31 3b 76 61 72 20 63 3d 74 68 69 73 2e 63 6c 6f 6e 65 28 29 2e 73 74 61 72 74 4f 66 28 22 64 61 79 22 29 2e 76 61 6c 75 65 4f 66 28 29 3b 69 66 28 62 5b 65 5d 2e 73 69 6e 63 65 3c 3d 63 26 26 63 3c 3d 62 5b 65 5d 2e 75 6e 74 69 6c 7c 7c 62 5b 65 5d 2e 75 6e 74 69 6c 3c 3d 63 26 26 63 3c 3d 62 5b 65 5d 2e 73 69 6e 63 65 29 72 65 74 75 72 6e 28 74 68 69 73 2e 79 65 61 72 28 29 2d 68 28 62 5b 65 5d 2e 73 69 6e 63 65 29 2e 79 65 61 72 28 29 29 2a 64 2b 62 5b 65 5d 2e 6f 66 66 73 65 74 7d 72 65 74 75 72 6e 20 74 68 69 73 2e 79 65 61 72 28 29 7d 3b 71 2e 79 65 61 72 3d 71 63 3b 71 2e 69 73 4c 65 61 70 59 65 61 72 3d 66 75 6e 63 74 Data Ascii: th;e<a;++e){var d=b[e].since<=b[e].until?1:-1;var c=this.clone().startOf("day").valueOf();if(b[e].since<=c&&c<=b[e].until\|\|b[e].until<=c&&c<=b[e].since)return(this.year()-h(b[e].since).year())*d+b[e].offset}return this.year()};q.year=qc;q.isLeapYear=funct
2023-06-06 08:38:57 UTC	2167	IN	Data Raw: 72 65 74 75 72 6e 20 70 62 28 50 29 7d 3b 68 2e 77 65 65 6b 64 61 79 73 53 68 6f 72 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 65 29 7b 72 65 74 75 72 6e 20 6e 62 28 61 2c 62 2c 65 2c 22 77 65 65 6b 64 61 79 73 53 68 6f 72 74 22 29 7d 3b 68 2e 6e 6f 72 6d 61 6c 69 7a 65 55 6e 69 74 73 3d 47 3b 68 2e 72 65 6c 61 74 69 76 65 54 69 6d 65 52 6f 75 6e 64 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 61 3f 46 61 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 61 3f 28 46 61 3d 61 2c 21 30 29 3a 21 31 7d 3b 68 2e 72 65 6c 61 74 69 76 65 54 69 6d 65 54 68 72 65 73 68 6f 6c 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 75 62 5b 61 5d 29 72 65 74 75 72 6e 21 31 Data Ascii: return pb(P)};h.weekdaysShort=function(a,b,e){return nb(a,b,e,"weekdaysShort")};h.normalizeUnits=G;h.relativeTimeRounding=function(a){return void 0===a?Fa:"function"===typeof a?(Fa=a,!0):!1};h.relativeTimeThreshold=function(a,b){if(void 0===ub[a])return!1
2023-06-06 08:38:57 UTC	2181	IN	Data Raw: 20 2b 30 33 7c 2d 32 30 20 2d 33 30 20 2d 33 30 7c 30 31 30 31 30 31 32 7c 31 4c 49 31 30 20 31 6e 41 30 20 31 31 41 30 20 31 74 41 30 20 55 30 30 20 31 35 77 30 7c 31 33 65 36 3b 41 73 69 61 2f 4a 61 6b 61 72 74 61 7c 57 49 42 7c 2d 37 30 7c 30 7c 7c 33 31 65 36 3b 41 73 69 61 2f 4a 61 79 61 70 75 72 61 7c 57 49 54 7c 2d 39 30 7c 30 7c 7c 32 36 65 34 3b 41 73 69 61 2f 4a 65 72 75 73 61 6c 65 6d 7c 49 53 54 20 49 44 54 7c 2d 32 30 20 2d 33 30 7c 30 31 30 31 30 31 30 31 30 31 30 31 30 31 30 31 30 31 30 31 30 31 30 7c 31 4c 47 4d 30 20 31 6f 4c 30 20 31 30 4e 30 20 31 6f 4c 30 20 31 30 4e 30 20 31 72 7a 30 20 57 31 30 20 31 72 7a 30 20 57 31 30 20 31 72 7a 30 20 31 30 4e 30 20 31 6f 4c 30 20 31 30 4e 30 20 31 6f 4c 30 20 31 30 4e 30 20 31 72 7a 30 20 57 31 Data Ascii: +03\|-20 -30 -30\|0101012\|1LI10 1nA0 11A0 1tA0 U00 15w0\|13e6;Asia/Jakarta\|WIB\|-70\|0\|\|31e6;Asia/Jayapura\|WIT\|-90\|0\|\|26e4;Asia/Jerusalem\|IST IDT\|-20 -30\|01010101010101010101010\|1LGM0 1oL0 10N0 1oL0 10N0 1rz0 W10 1rz0 W10 1rz0 10N0 1oL0 10N0 1oL0 10N0 1rz0 W1
2023-06-06 08:38:57 UTC	2184	IN	Data Raw: 2d 31 30 7c 30 31 30 31 30 31 30 31 30 31 30 31 30 31 30 31 30 31 30 31 30 31 30 7c 31 4c 48 42 30 20 31 6f 30 30 20 31 31 41 30 20 31 6f 30 30 20 31 31 41 30 20 31 71 4d 30 20 57 4d 30 20 31 71 4d 30 20 57 4d 30 20 31 71 4d 30 20 31 31 41 30 20 31 6f 30 30 20 31 31 41 30 20 31 6f 30 30 20 31 31 41 30 20 31 71 4d 30 20 57 4d 30 20 31 71 4d 30 20 57 4d 30 20 31 71 4d 30 20 31 31 41 30 20 31 6f 30 30 7c 31 30 65 36 3b 45 75 72 6f 70 65 2f 43 68 69 73 69 6e 61 75 7c 45 45 54 20 45 45 53 54 7c 2d 32 30 20 2d 33 30 7c 30 31 30 31 30 31 30 31 30 31 30 31 30 31 30 31 30 31 30 31 30 31 30 7c 31 4c 48 41 30 20 31 6f 30 30 20 31 31 41 30 20 31 6f 30 30 20 31 31 41 30 20 31 71 4d 30 20 57 4d 30 20 31 71 4d 30 20 57 4d 30 20 31 71 4d 30 20 31 31 41 30 20 31 6f 30 30 Data Ascii: -10\|01010101010101010101010\|1LHB0 1o00 11A0 1o00 11A0 1qM0 WM0 1qM0 WM0 1qM0 11A0 1o00 11A0 1o00 11A0 1qM0 WM0 1qM0 WM0 1qM0 11A0 1o00\|10e6;Europe/Chisinau\|EET EEST\|-20 -30\|01010101010101010101010\|1LHA0 1o00 11A0 1o00 11A0 1qM0 WM0 1qM0 WM0 1qM0 11A0 1o00
2023-06-06 08:38:57 UTC	2200	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 68 2c 66 2c 63 29 7b 63 2e 72 28 66 29 3b 68 3d 63 28 32 29 3b 63 2e 6e 28 68 29 3b 68 3d 63 28 33 29 3b 63 2e 6e 28 68 29 3b 6e 65 77 20 28 63 28 34 29 2e 42 72 6f 77 73 65 72 4e 6f 74 69 66 69 63 61 74 69 6f 6e 29 28 22 2e 62 72 6f 77 73 65 72 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 22 29 7d 2c 0a 66 75 6e 63 74 69 6f 6e 28 68 2c 66 29 7b 77 69 6e 64 6f 77 2e 42 6f 6f 74 73 74 72 61 70 3d 7b 6a 51 75 65 72 79 3a 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 28 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 68 2c 66 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 64 2c 62 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 62 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 76 61 72 20 65 3d 62 5b 61 5d 3b 65 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 65 2e 65 6e Data Ascii: unction(h,f,c){c.r(f);h=c(2);c.n(h);h=c(3);c.n(h);new (c(4).BrowserNotification)(".browser-notification")},function(h,f){window.Bootstrap={jQuery:jQuery.noConflict()}},function(h,f){function c(d,b){for(var a=0;a<b.length;a++){var e=b[a];e.enumerable=e.en
2023-06-06 08:38:57 UTC	2216	IN	Data Raw: 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 69 66 28 74 68 69 73 2e 67 6c 6f 62 61 6c 43 6f 6d 70 6f 6e 65 6e 74 73 2e 61 6e 63 68 6f 72 53 63 72 6f 6c 6c 43 6f 6e 74 72 6f 6c 6c 65 72 2e 73 6d 6f 6f 74 68 53 63 72 6f 6c 6c 45 6e 61 62 6c 65 64 29 74 68 69 73 2e 73 6d 6f 6f 74 68 53 63 72 6f 6c 6c 54 6f 48 54 4d 4c 4e 6f 64 65 28 62 29 3b 0a 65 6c 73 65 7b 76 61 72 20 61 3d 74 68 69 73 2e 63 61 6c 63 75 6c 61 74 65 54 6f 70 4f 66 66 73 65 74 28 62 29 3b 61 26 26 28 62 3d 61 2d 74 68 69 73 2e 67 6c 6f 62 61 6c 43 6f 6d 70 6f 6e 65 6e 74 73 2e 68 65 61 64 65 72 43 6f 6e 74 72 6f 6c 6c 65 72 2e 63 61 6c 63 75 6c 61 74 65 48 65 61 64 65 72 48 65 69 67 68 74 28 62 29 2c 2d 31 3c 62 26 26 6b 28 64 6f 63 75 6d 65 6e 74 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 62 Data Ascii: lue:function(b){if(this.globalComponents.anchorScrollController.smoothScrollEnabled)this.smoothScrollToHTMLNode(b);else{var a=this.calculateTopOffset(b);a&&(b=a-this.globalComponents.headerController.calculateHeaderHeight(b),-1<b&&k(document).scrollTop(b
2023-06-06 08:38:58 UTC	2224	IN	Data Raw: 5d 3e 74 68 69 73 2e 6d 65 6d 6f 72 79 5b 64 2d 32 5d 2b 31 26 26 74 68 69 73 2e 6d 65 6d 6f 72 79 5b 64 2d 32 5d 3e 74 68 69 73 2e 6d 65 6d 6f 72 79 5b 64 2d 33 5d 2b 31 26 26 74 68 69 73 2e 6d 65 6d 6f 72 79 5b 64 2d 33 5d 3e 74 68 69 73 2e 6d 65 6d 6f 72 79 5b 64 2d 34 5d 2b 31 7d 7d 2c 7b 6b 65 79 3a 22 69 73 53 63 72 6f 6c 6c 65 64 55 70 53 69 6d 70 6c 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 3d 74 68 69 73 2e 6d 65 6d 6f 72 79 2e 6c 65 6e 67 74 68 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 65 6d 6f 72 79 5b 64 2d 31 5d 3c 74 68 69 73 2e 6d 65 6d 6f 72 79 5b 64 2d 32 5d 2d 34 26 26 74 68 69 73 2e 6d 65 6d 6f 72 79 5b 64 2d 32 5d 3c 74 68 69 73 2e 6d 65 6d 6f 72 79 5b 64 2d 33 5d 2d 34 26 26 74 68 69 73 2e 6d 65 6d 6f Data Ascii: ]>this.memory[d-2]+1&&this.memory[d-2]>this.memory[d-3]+1&&this.memory[d-3]>this.memory[d-4]+1}},{key:"isScrolledUpSimple",value:function(){var d=this.memory.length;return this.memory[d-1]<this.memory[d-2]-4&&this.memory[d-2]<this.memory[d-3]-4&&this.memo
2023-06-06 08:38:58 UTC	2233	IN	Data Raw: 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 70 61 72 65 6e 74 2e 47 72 61 6e 69 74 65 2e 61 75 74 68 6f 72 2e 6c 61 79 65 72 4d 61 6e 61 67 65 72 26 26 2d 31 21 3d 3d 74 68 69 73 2e 65 64 69 74 4d 6f 64 65 73 2e 69 6e 64 65 78 4f 66 28 70 61 72 65 6e 74 2e 47 72 61 6e 69 74 65 2e 61 75 74 68 6f 72 2e 6c 61 79 65 72 4d 61 6e 61 67 65 72 2e 67 65 74 43 75 72 72 65 6e 74 4c 61 79 65 72 28 29 29 7d 7d 2c 7b 6b 65 79 3a 22 63 68 65 63 6b 56 69 65 77 54 79 70 65 49 73 46 6f 72 43 6c 69 65 6e 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 74 68 69 73 2e 69 73 43 6f 6e 66 69 67 50 61 67 65 28 29 26 26 21 74 68 69 73 2e 69 73 45 64 69 74 4d 6f 64 65 28 29 26 26 21 74 68 69 73 2e 69 73 50 61 74 74 65 72 6e 4c 61 62 28 29 7d 7d 5d 29 3b Data Ascii: ed"!==typeof parent.Granite.author.layerManager&&-1!==this.editModes.indexOf(parent.Granite.author.layerManager.getCurrentLayer())}},{key:"checkViewTypeIsForClient",value:function(){return!this.isConfigPage()&&!this.isEditMode()&&!this.isPatternLab()}}]);
2023-06-06 08:38:58 UTC	2249	IN	Data Raw: 24 2f 29 2c 75 61 3d 78 28 2f 5e 28 3f 3a 28 3f 3a 28 3f 3a 66 7c 68 74 29 74 70 73 3f 7c 6d 61 69 6c 74 6f 7c 74 65 6c 7c 63 61 6c 6c 74 6f 7c 63 69 64 7c 78 6d 70 70 29 3a 7c 5b 5e 61 2d 7a 5d 7c 5b 61 2d 7a 2b 2e 5c 2d 5d 2b 28 3f 3a 5b 5e 61 2d 7a 2b 2e 5c 2d 3a 5d 7c 24 29 29 2f 69 29 2c 64 62 3d 78 28 2f 5e 28 3f 3a 5c 77 2b 73 63 72 69 70 74 7c 64 61 74 61 29 3a 2f 69 29 2c 65 62 3d 78 28 2f 5b 5c 75 30 30 30 30 2d 5c 75 30 30 32 30 5c 75 30 30 41 30 5c 75 31 36 38 30 5c 75 31 38 30 45 5c 75 32 30 30 30 2d 5c 75 32 30 32 39 5c 75 32 30 35 46 5c 75 33 30 30 30 5d 2f 67 29 2c 54 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 Data Ascii: $/),ua=x(/^(?:(?:(?:f\|ht)tps?\|mailto\|tel\|callto\|cid\|xmpp):\|[^a-z]\|[a-z+.\-]+(?:[^a-z+.\-:]\|$))/i),db=x(/^(?:\w+script\|data):/i),eb=x(/[\u0000-\u0020\u00A0\u1680\u180E\u2000-\u2029\u205F\u3000]/g),Ta="function"===typeof Symbol&&"symbol"===typeof Symbol.ite
2023-06-06 08:38:58 UTC	2265	IN	Data Raw: 3a 63 2e 70 75 73 68 28 6d 29 3b 67 2e 70 75 73 68 28 6d 29 3b 63 3d 6d 5b 34 5d 3d 5b 5d 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 2f 22 3a 63 3d 67 2e 70 6f 70 28 29 3b 63 5b 35 5d 3d 6d 5b 32 5d 3b 63 3d 30 3c 67 2e 6c 65 6e 67 74 68 3f 67 5b 67 2e 6c 65 6e 67 74 68 2d 31 5d 5b 34 5d 3a 66 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 63 2e 70 75 73 68 28 6d 29 7d 72 65 74 75 72 6e 20 66 7d 66 75 6e 63 74 69 6f 6e 20 53 63 61 6e 6e 65 72 28 68 29 7b 74 68 69 73 2e 74 61 69 6c 3d 74 68 69 73 2e 73 74 72 69 6e 67 3d 68 3b 74 68 69 73 2e 70 6f 73 3d 30 7d 53 63 61 6e 6e 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6f 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 22 3d 3d 3d 74 68 69 73 2e 74 61 69 6c 7d 3b 53 63 61 6e 6e 65 72 2e 70 72 6f 74 6f 74 Data Ascii: :c.push(m);g.push(m);c=m[4]=[];break;case "/":c=g.pop();c[5]=m[2];c=0<g.length?g[g.length-1][4]:f;break;default:c.push(m)}return f}function Scanner(h){this.tail=this.string=h;this.pos=0}Scanner.prototype.eos=function(){return""===this.tail};Scanner.protot
2023-06-06 08:38:58 UTC	2281	IN	Data Raw: 38 2c 2d 31 29 3b 22 4f 62 6a 65 63 74 22 3d 3d 3d 62 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 28 62 3d 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 29 3b 69 66 28 22 4d 61 70 22 3d 3d 3d 62 7c 7c 22 53 65 74 22 3d 3d 3d 62 29 7b 62 3d 41 72 72 61 79 2e 66 72 6f 6d 28 61 29 3b 62 72 65 61 6b 20 61 7d 69 66 28 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 3d 62 7c 7c 2f 5e 28 3f 3a 55 69 7c 49 29 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f 3a 43 6c 61 6d 70 65 64 29 3f 41 72 72 61 79 24 2f 2e 74 65 73 74 28 62 29 29 7b 62 3d 6d 28 61 2c 76 6f 69 64 20 30 29 3b 62 72 65 61 6b 20 61 7d 7d 62 3d 76 6f 69 64 20 30 7d 69 66 28 21 28 61 3d 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d Data Ascii: 8,-1);"Object"===b&&a.constructor&&(b=a.constructor.name);if("Map"===b\|\|"Set"===b){b=Array.from(a);break a}if("Arguments"===b\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(b)){b=m(a,void 0);break a}}b=void 0}if(!(a=b))throw new TypeError("Invalid attem
2023-06-06 08:38:58 UTC	2296	IN	Data Raw: 62 79 22 2c 61 29 3b 74 68 69 73 2e 24 76 61 6c 69 64 61 74 69 6f 6e 4d 65 73 73 61 67 65 2e 61 64 64 43 6c 61 73 73 28 22 68 69 64 65 22 29 7d 7d 5d 29 3b 0a 72 65 74 75 72 6e 20 65 7d 28 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 68 2c 66 2c 63 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 63 2c 64 29 7b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 64 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 7b 76 61 72 20 61 3d 64 5b 62 5d 3b 61 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 61 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 3b 61 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 3b 22 76 61 6c 75 65 22 69 6e 20 61 26 26 28 61 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 63 2c 61 2e 6b 65 79 2c 61 29 7d 7d 66 75 6e 63 74 69 6f Data Ascii: by",a);this.$validationMessage.addClass("hide")}}]);return e}()},function(h,f,c){function g(c,d){for(var b=0;b<d.length;b++){var a=d[b];a.enumerable=a.enumerable\|\|!1;a.configurable=!0;"value"in a&&(a.writable=!0);Object.defineProperty(c,a.key,a)}}functio
2023-06-06 08:38:58 UTC	2312	IN	Data Raw: 6f 74 79 70 65 22 2c 7b 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 3b 72 65 74 75 72 6e 20 64 7d 63 2e 72 28 66 29 3b 63 2e 64 28 66 2c 22 43 61 6c 63 75 6c 61 74 69 6f 6e 53 65 72 76 69 63 65 43 68 69 6e 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 29 3b 76 61 72 20 6b 3d 63 28 39 29 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 62 29 7b 69 66 28 21 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 64 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 74 68 69 73 2e 73 65 74 74 69 6e 67 73 3d 0a 62 7c 7c 7b 7d 3b 74 68 69 73 2e 66 6f 72 6d 61 74 55 74 69 6c 73 3d 6e 65 77 20 6b 2e Data Ascii: otype",{writable:!1});return d}c.r(f);c.d(f,"CalculationServiceChina",function(){return l});var k=c(9),l=function(){function d(b){if(!(this instanceof d))throw new TypeError("Cannot call a class as a function");this.settings=b\|\|{};this.formatUtils=new k.
2023-06-06 08:38:58 UTC	2313	IN	Data Raw: 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2e 62 69 6e 64 28 29 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 3b 72 65 74 75 72 6e 20 61 7d 3b 72 65 74 75 72 6e 20 64 28 61 2c 62 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 76 61 72 20 64 3d 61 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 65 28 62 29 3b 69 66 28 64 29 7b 76 61 72 20 63 3d 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 61 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 61 2c 61 72 67 75 6d 65 6e 74 73 2c 63 29 7d 65 6c 73 65 20 61 3d 61 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 0a 69 66 28 21 61 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 3d 67 28 61 29 26 26 22 66 75 6e Data Ascii: .setPrototypeOf.bind():function(a,b){a.__proto__=b;return a};return d(a,b)}function b(b){var d=a();return function(){var a=e(b);if(d){var c=e(this).constructor;a=Reflect.construct(a,arguments,c)}else a=a.apply(this,arguments);if(!a\|\|"object"!==g(a)&&"fun
2023-06-06 08:38:58 UTC	2329	IN	Data Raw: 61 6c 5f 22 2e 63 6f 6e 63 61 74 28 61 29 2c 69 64 3a 74 68 69 73 2e 69 64 7d 29 7d 7d 5d 29 3b 72 65 74 75 72 6e 20 61 7d 28 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 68 2c 66 2c 63 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 63 2c 64 29 7b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 64 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 7b 76 61 72 20 61 3d 64 5b 62 5d 3b 61 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 61 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 3b 61 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 3b 22 76 61 6c 75 65 22 69 6e 20 61 26 26 28 61 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 63 2c 61 2e 6b 65 79 2c 61 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 63 2c 64 2c 62 29 7b 64 26 26 67 28 63 2e 70 72 6f Data Ascii: al_".concat(a),id:this.id})}}]);return a}()},function(h,f,c){function g(c,d){for(var b=0;b<d.length;b++){var a=d[b];a.enumerable=a.enumerable\|\|!1;a.configurable=!0;"value"in a&&(a.writable=!0);Object.defineProperty(c,a.key,a)}}function m(c,d,b){d&&g(c.pro
2023-06-06 08:38:58 UTC	2345	IN	Data Raw: 72 61 62 6c 65 3d 64 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 3b 64 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 3b 22 76 61 6c 75 65 22 69 6e 0a 64 26 26 28 64 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 62 2c 64 2e 6b 65 79 2c 64 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 62 2c 61 2c 65 29 7b 61 26 26 67 28 62 2e 70 72 6f 74 6f 74 79 70 65 2c 61 29 3b 65 26 26 67 28 62 2c 65 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 62 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 7b 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 3b 72 65 74 75 72 6e 20 62 7d 63 2e 72 28 66 29 3b 63 2e 64 28 66 2c 22 41 72 74 69 63 6c 65 42 61 63 6b 54 6f 54 6f 70 54 65 61 6c 69 75 6d 22 2c 66 75 6e 63 Data Ascii: rable=d.enumerable\|\|!1;d.configurable=!0;"value"ind&&(d.writable=!0);Object.defineProperty(b,d.key,d)}}function m(b,a,e){a&&g(b.prototype,a);e&&g(b,e);Object.defineProperty(b,"prototype",{writable:!1});return b}c.r(f);c.d(f,"ArticleBackToTopTealium",func
2023-06-06 08:38:58 UTC	2348	IN	Data Raw: 72 6f 74 6f 74 79 70 65 2c 62 29 3b 61 26 26 67 28 64 2c 61 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 64 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 7b 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 3b 72 65 74 75 72 6e 20 64 7d 0a 63 2e 72 28 66 29 3b 63 2e 64 28 66 2c 22 41 72 74 69 63 6c 65 42 6f 6f 6b 65 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 29 3b 76 61 72 20 6b 3d 42 6f 6f 74 73 74 72 61 70 2e 6a 51 75 65 72 79 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 62 29 7b 69 66 28 21 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 64 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 Data Ascii: rototype,b);a&&g(d,a);Object.defineProperty(d,"prototype",{writable:!1});return d}c.r(f);c.d(f,"ArticleBookend",function(){return l});var k=Bootstrap.jQuery,l=function(){function d(b){if(!(this instanceof d))throw new TypeError("Cannot call a class as a
2023-06-06 08:38:58 UTC	2364	IN	Data Raw: 75 6d 65 72 61 62 6c 65 7c 7c 21 31 3b 65 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 3b 22 76 61 6c 75 65 22 69 6e 20 65 26 26 28 65 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 64 2c 65 2e 6b 65 79 2c 65 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 64 2c 62 2c 61 29 7b 62 26 26 0a 67 28 64 2e 70 72 6f 74 6f 74 79 70 65 2c 62 29 3b 61 26 26 67 28 64 2c 61 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 64 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 7b 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 3b 72 65 74 75 72 6e 20 64 7d 63 2e 72 28 66 29 3b 63 2e 64 28 66 2c 22 43 6f 6e 74 61 69 6e 65 72 49 74 65 6d 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 29 3b 76 Data Ascii: umerable\|\|!1;e.configurable=!0;"value"in e&&(e.writable=!0);Object.defineProperty(d,e.key,e)}}function m(d,b,a){b&&g(d.prototype,b);a&&g(d,a);Object.defineProperty(d,"prototype",{writable:!1});return d}c.r(f);c.d(f,"ContainerItem",function(){return l});v
2023-06-06 08:38:58 UTC	2380	IN	Data Raw: 43 6f 6d 70 6f 6e 65 6e 74 28 7b 6e 61 6d 65 3a 22 65 78 70 61 6e 64 65 72 2d 74 6f 67 67 6c 65 22 2c 73 65 6c 65 63 74 6f 72 3a 22 2e 4d 2d 43 4e 54 2d 45 58 50 4c 49 4e 2d 44 45 56 20 2e 65 6c 65 6d 65 6e 74 22 2c 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 6e 65 77 20 67 2e 45 78 70 61 6e 64 65 72 4c 69 6e 6b 28 63 29 3b 6e 65 77 20 6d 2e 45 78 70 61 6e 64 65 72 4c 69 6e 6b 54 65 61 6c 69 75 6d 28 63 29 7d 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 68 2c 66 2c 63 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 62 2c 61 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 61 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 64 3d 61 5b 65 5d 3b 64 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 64 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 3b 64 2e 63 6f 6e 66 69 67 75 72 Data Ascii: Component({name:"expander-toggle",selector:".M-CNT-EXPLIN-DEV .element",init:function(c){new g.ExpanderLink(c);new m.ExpanderLinkTealium(c)}})},function(h,f,c){function g(b,a){for(var e=0;e<a.length;e++){var d=a[e];d.enumerable=d.enumerable\|\|!1;d.configur
2023-06-06 08:38:58 UTC	2392	IN	Data Raw: 72 65 61 74 65 46 6f 6f 74 6e 6f 74 65 52 65 66 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 74 68 69 73 2e 70 75 73 68 46 6f 6f 74 6e 6f 74 65 28 61 29 3b 72 65 74 75 72 6e 20 61 2e 6e 61 6d 65 3f 27 5c 78 33 63 73 75 70 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 33 65 5c 78 33 63 61 20 68 72 65 66 5c 78 33 64 22 23 27 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 61 6e 63 68 6f 72 50 72 65 66 69 78 29 2e 63 6f 6e 63 61 74 28 61 2e 61 6e 63 68 6f 72 2c 0a 27 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 33 65 5c 78 33 63 73 70 61 6e 20 61 72 69 61 2d 68 69 64 64 65 6e 5c 78 33 64 22 74 72 75 65 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: reateFootnoteRef",value:function(a){a=this.pushFootnote(a);return a.name?'\x3csup\n \x3e\x3ca href\x3d"#'.concat(this.anchorPrefix).concat(a.anchor,'"\n \x3e\x3cspan aria-hidden\x3d"true"\n
2023-06-06 08:38:58 UTC	2408	IN	Data Raw: 6f 72 74 73 3d 21 21 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 26 26 21 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 53 79 6d 62 6f 6c 28 29 3b 72 65 74 75 72 6e 21 53 74 72 69 6e 67 28 63 29 7c 7c 21 28 4f 62 6a 65 63 74 28 63 29 69 6e 73 74 61 6e 63 65 6f 66 20 53 79 6d 62 6f 6c 29 7c 7c 21 53 79 6d 62 6f 6c 2e 73 68 61 6d 26 26 67 26 26 34 31 3e 67 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 68 2c 66 2c 63 29 7b 66 3d 63 28 31 30 31 29 3b 63 3d 63 28 31 31 34 29 3b 76 61 72 20 67 3d 66 2e 70 72 6f 63 65 73 73 3b 66 3d 66 2e 44 65 6e 6f 3b 66 3d 28 66 3d 67 26 26 67 2e 76 65 72 73 69 6f 6e 73 7c 7c 66 26 26 66 2e 76 65 72 73 69 6f 6e 29 26 26 66 2e 76 38 3b 69 66 28 66 29 7b 66 3d 66 2e 73 70 6c 69 74 28 Data Ascii: orts=!!Object.getOwnPropertySymbols&&!f(function(){var c=Symbol();return!String(c)\|\|!(Object(c)instanceof Symbol)\|\|!Symbol.sham&&g&&41>g})},function(h,f,c){f=c(101);c=c(114);var g=f.process;f=f.Deno;f=(f=g&&g.versions\|\|f&&f.version)&&f.v8;if(f){f=f.split(
2023-06-06 08:38:58 UTC	2424	IN	Data Raw: 72 67 65 74 43 6f 6e 74 61 69 6e 65 72 3d 74 68 69 73 2e 24 65 6c 2e 66 69 6e 64 28 22 2e 6e 6f 6d 75 73 74 61 63 68 65 2d 63 6f 6e 74 65 6e 74 22 29 3b 74 68 69 73 2e 24 74 61 72 67 65 74 43 6f 6e 74 65 6e 74 3d 74 68 69 73 2e 24 74 61 72 67 65 74 43 6f 6e 74 61 69 6e 65 72 2e 66 69 6e 64 28 22 2e 4d 2d 53 4d 50 54 42 4c 2d 52 57 2d 52 42 57 4d 22 29 3b 74 68 69 73 2e 64 61 74 61 53 6f 75 72 63 65 55 72 6c 3d 74 68 69 73 2e 24 74 61 72 67 65 74 43 6f 6e 74 61 69 6e 65 72 2e 64 61 74 61 28 22 73 6f 75 72 63 65 22 29 3b 74 68 69 73 2e 74 61 62 6c 65 54 65 6d 70 6c 61 74 65 3d 74 68 69 73 2e 24 65 6c 2e 66 69 6e 64 28 22 2e 64 79 6e 61 6d 69 63 2d 74 61 62 6c 65 2d 74 65 6d 70 6c 61 74 65 22 29 2e 68 74 6d 6c 28 29 3b 0a 74 68 69 73 2e 72 65 61 64 44 61 74 Data Ascii: rgetContainer=this.$el.find(".nomustache-content");this.$targetContent=this.$targetContainer.find(".M-SMPTBL-RW-RBWM");this.dataSourceUrl=this.$targetContainer.data("source");this.tableTemplate=this.$el.find(".dynamic-table-template").html();this.readDat
2023-06-06 08:38:58 UTC	2440	IN	Data Raw: 3b 48 53 42 43 5f 75 74 69 6c 73 2e 69 73 45 64 69 74 4d 6f 64 65 28 29 7c 7c 28 74 68 69 73 2e 24 65 6c 3d 6d 28 64 29 2c 74 68 69 73 2e 24 6d 61 69 6e 43 6f 6e 74 65 6e 74 3d 6d 28 27 2e 67 72 69 64 5b 72 6f 6c 65 5c 78 33 64 22 6d 61 69 6e 22 5d 27 29 2c 74 68 69 73 2e 24 61 62 73 6f 6c 75 74 65 45 6c 65 6d 65 6e 74 73 3d 74 68 69 73 2e 24 65 6c 2e 66 69 6e 64 28 22 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 77 72 61 70 70 65 72 2c 20 2e 73 65 63 74 69 6f 6e 2d 74 69 74 6c 65 2c 20 2e 73 65 63 74 69 6f 6e 2d 68 65 61 64 69 6e 67 2c 20 22 2b 22 2e 22 2e 63 6f 6e 63 61 74 28 22 4f 2d 46 4f 4f 54 4e 4f 54 45 53 2d 52 57 2d 44 45 56 22 29 29 2c 74 68 69 73 2e 24 64 72 6f 70 64 6f 77 6e 45 6c 65 6d 65 6e 74 73 3d 74 68 69 73 2e 24 65 6c 2e 66 69 6e 64 28 22 2e 64 Data Ascii: ;HSBC_utils.isEditMode()\|\|(this.$el=m(d),this.$mainContent=m('.grid[role\x3d"main"]'),this.$absoluteElements=this.$el.find(".pagination-wrapper, .section-title, .section-heading, "+".".concat("O-FOOTNOTES-RW-DEV")),this.$dropdownElements=this.$el.find(".d
2023-06-06 08:38:58 UTC	2448	IN	Data Raw: 65 77 3d 7b 70 61 67 65 5f 75 72 6c 3a 22 2f 70 72 6f 64 75 63 74 2d 63 6f 6d 70 61 72 61 74 6f 72 2f 22 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 70 72 6f 64 75 63 74 2e 75 72 6c 29 2c 70 61 67 65 5f 6e 61 6d 65 3a 22 70 77 73 3a 70 72 6f 64 75 63 74 20 63 6f 6d 70 61 72 61 74 6f 72 3a 22 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 70 72 6f 64 75 63 74 2e 6e 61 6d 65 29 2c 0a 73 69 74 65 5f 73 65 63 74 69 6f 6e 3a 22 70 77 73 22 2c 70 61 67 65 5f 74 79 70 65 3a 22 74 6f 6f 6c 22 2c 70 61 67 65 5f 63 75 73 74 6f 6d 65 72 5f 67 72 6f 75 70 3a 22 67 65 6e 65 72 61 6c 22 2c 70 61 67 65 5f 63 61 74 65 67 6f 72 79 3a 22 70 72 6f 64 75 63 74 20 63 6f 6d 70 61 72 61 74 6f 72 22 2c 70 61 67 65 5f 73 75 62 63 61 74 65 67 6f 72 79 3a 74 68 69 73 2e 70 72 6f 64 75 63 74 2e Data Ascii: ew={page_url:"/product-comparator/".concat(this.product.url),page_name:"pws:product comparator:".concat(this.product.name),site_section:"pws",page_type:"tool",page_customer_group:"general",page_category:"product comparator",page_subcategory:this.product.
2023-06-06 08:38:58 UTC	2464	IN	Data Raw: 3a 22 69 6e 69 74 43 6c 61 73 73 65 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 3d 74 68 69 73 2e 24 67 72 69 64 43 6c 61 73 73 65 73 2e 64 61 74 61 28 22 67 72 69 64 2d 63 6c 61 73 73 65 73 22 29 3b 64 26 26 74 68 69 73 2e 24 61 6c 6c 4c 69 6e 6b 73 2e 61 64 64 43 6c 61 73 73 28 64 29 7d 7d 2c 7b 6b 65 79 3a 22 62 69 6e 64 55 49 45 76 65 6e 74 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 3d 74 68 69 73 3b 63 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 22 72 65 73 69 7a 65 22 2c 0a 66 75 6e 63 74 69 6f 6e 28 29 7b 64 2e 73 65 74 48 65 69 67 68 74 73 28 29 3b 64 2e 61 64 64 44 69 76 69 64 65 72 28 29 3b 64 2e 72 65 6d 6f 76 65 4c 61 73 74 52 6f 77 44 69 76 69 64 65 72 28 29 7d 29 7d 7d 2c 7b 6b 65 79 3a Data Ascii: :"initClasses",value:function(){var d=this.$gridClasses.data("grid-classes");d&&this.$allLinks.addClass(d)}},{key:"bindUIEvents",value:function(){var d=this;c(window).on("resize",function(){d.setHeights();d.addDivider();d.removeLastRowDivider()})}},{key:
2023-06-06 08:38:58 UTC	2480	IN	Data Raw: 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 24 73 65 61 72 63 68 49 6e 70 75 74 2e 61 74 74 72 28 22 61 75 74 6f 63 6f 6d 70 6c 65 74 65 22 2c 0a 22 6f 66 66 22 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 53 75 62 6d 69 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 24 73 65 61 72 63 68 49 6e 70 75 74 2e 76 61 6c 28 29 3b 69 66 28 74 68 69 73 2e 76 61 6c 69 64 61 74 65 45 6d 70 74 79 28 61 29 29 74 68 69 73 2e 6f 6e 53 75 62 6d 69 74 28 61 29 3b 65 6c 73 65 20 74 68 69 73 2e 73 65 74 53 65 61 72 63 68 46 69 65 6c 64 28 22 22 29 7d 7d 2c 7b 6b 65 79 3a 22 73 65 74 53 65 61 72 63 68 46 69 65 6c 64 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 24 73 65 Data Ascii: ",value:function(){this.$searchInput.attr("autocomplete","off")}},{key:"handleSubmit",value:function(){var a=this.$searchInput.val();if(this.validateEmpty(a))this.onSubmit(a);else this.setSearchField("")}},{key:"setSearchField",value:function(a){this.$se
2023-06-06 08:38:58 UTC	2492	IN	Data Raw: 65 64 48 65 61 64 65 72 73 4f 6e 4d 6f 62 69 6c 65 41 6e 64 54 61 62 6c 65 74 28 29 2c 74 68 69 73 2e 62 69 6e 64 55 49 45 76 65 6e 74 73 28 29 2c 74 68 69 73 2e 61 63 74 69 76 65 54 61 62 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 29 2c 74 68 69 73 2e 73 65 74 48 65 69 67 68 74 28 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 73 57 69 74 68 49 6e 6c 69 6e 65 53 74 79 6c 65 48 65 69 67 68 74 29 2c 74 68 69 73 2e 74 65 61 6c 69 75 6d 4f 62 73 65 72 76 65 72 3d 6e 65 77 20 62 2e 54 65 61 6c 69 75 6d 4f 62 73 65 72 76 65 72 28 74 68 69 73 2e 24 74 61 62 73 4d 65 6e 75 4c 69 6e 6b 73 2c 7b 65 76 65 6e 74 5f 74 79 70 65 3a 22 63 6c 69 63 6b 22 2c 65 76 65 6e 74 5f 63 61 74 65 67 6f 72 79 3a 22 63 6f 6e 74 65 6e 74 22 2c 0a 65 76 65 6e 74 5f 61 63 Data Ascii: edHeadersOnMobileAndTablet(),this.bindUIEvents(),this.activeTab(window.location.hash),this.setHeight(this.$elementsWithInlineStyleHeight),this.tealiumObserver=new b.TealiumObserver(this.$tabsMenuLinks,{event_type:"click",event_category:"content",event_ac
2023-06-06 08:38:58 UTC	2508	IN	Data Raw: 75 69 64 65 43 6f 6e 74 61 69 6e 65 72 2d 72 6f 6f 74 50 61 6e 65 6c 2d 67 75 69 64 65 64 72 6f 70 64 6f 77 6e 6c 69 73 74 5f 63 6f 75 6e 74 72 79 5f 5f 5f 67 75 69 64 65 2d 69 74 65 6d 22 29 3b 74 68 69 73 2e 24 73 65 71 75 65 6e 63 65 4e 75 6d 62 65 72 46 69 65 6c 64 3d 74 68 69 73 2e 24 65 6c 2e 66 69 6e 64 28 22 23 67 75 69 64 65 43 6f 6e 74 61 69 6e 65 72 2d 72 6f 6f 74 50 61 6e 65 6c 2d 67 75 69 64 65 6e 75 6d 65 72 69 63 62 6f 78 5f 73 65 71 75 65 6e 63 65 5f 5f 5f 67 75 69 64 65 2d 69 74 65 6d 22 29 3b 74 68 69 73 2e 24 73 65 71 75 65 6e 63 65 4e 75 6d 62 65 72 45 78 70 61 6e 64 65 72 3d 74 68 69 73 2e 24 65 6c 2e 66 69 6e 64 28 22 23 67 75 69 64 65 43 6f 6e 74 61 69 6e 65 72 2d 72 6f 6f 74 50 61 6e 65 6c 2d 65 78 70 61 6e 64 65 72 5f 73 65 71 75 Data Ascii: uideContainer-rootPanel-guidedropdownlist_country___guide-item");this.$sequenceNumberField=this.$el.find("#guideContainer-rootPanel-guidenumericbox_sequence___guide-item");this.$sequenceNumberExpander=this.$el.find("#guideContainer-rootPanel-expander_sequ
2023-06-06 08:38:58 UTC	2520	IN	Data Raw: 29 7d 67 28 64 2c 0a 5b 7b 6b 65 79 3a 22 73 65 74 43 6c 61 73 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 24 62 72 61 6e 64 42 61 72 46 6f 6e 74 31 36 2e 61 64 64 43 6c 61 73 73 28 22 66 69 72 65 66 6f 78 46 69 78 22 29 7d 7d 5d 29 3b 72 65 74 75 72 6e 20 64 7d 28 29 2c 6c 3d 7b 6e 61 6d 65 3a 22 62 72 61 6e 64 42 61 72 22 2c 73 65 6c 65 63 74 6f 72 3a 22 2e 4f 2d 42 52 42 41 52 2d 52 57 2d 52 42 57 4d 22 2c 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 66 28 64 29 7d 7d 3b 48 53 42 43 5f 75 74 69 6c 73 2e 69 73 46 69 72 65 66 6f 78 26 26 48 53 42 43 5f 75 74 69 6c 73 2e 72 65 67 69 73 74 65 72 43 6f 6d 70 6f 6e 65 6e 74 28 6c 29 7d 29 28 42 6f 6f 74 73 74 72 61 70 2e 6a 51 75 65 72 79 Data Ascii: )}g(d,[{key:"setClass",value:function(){this.$brandBarFont16.addClass("firefoxFix")}}]);return d}(),l={name:"brandBar",selector:".O-BRBAR-RW-RBWM",init:function(d){return new f(d)}};HSBC_utils.isFirefox&&HSBC_utils.registerComponent(l)})(Bootstrap.jQuery
2023-06-06 08:38:58 UTC	2536	IN	Data Raw: 61 6c 2e 66 69 6e 64 28 22 2e 22 2e 63 6f 6e 63 61 74 28 64 2e 6d 6f 64 61 6c 41 6e 6e 6f 75 6e 63 65 6d 65 6e 74 29 29 2e 61 64 64 43 6c 61 73 73 28 64 2e 68 69 64 65 29 3b 63 21 3d 66 7c 7c 61 2e 73 68 69 66 74 4b 65 79 3f 63 3d 3d 65 26 26 61 2e 73 68 69 66 74 4b 65 79 26 26 28 66 2e 66 6f 63 75 73 28 29 2c 61 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 29 3a 0a 28 65 2e 66 6f 63 75 73 28 29 2c 61 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 29 7d 7d 5d 29 3b 72 65 74 75 72 6e 20 61 7d 28 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 68 2c 66 2c 63 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 62 2c 61 29 7b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 63 3d 61 5b 64 5d 3b 63 2e 65 6e 75 6d 65 72 61 62 6c Data Ascii: al.find(".".concat(d.modalAnnouncement)).addClass(d.hide);c!=f\|\|a.shiftKey?c==e&&a.shiftKey&&(f.focus(),a.preventDefault()):(e.focus(),a.preventDefault())}}]);return a}()},function(h,f,c){function g(b,a){for(var d=0;d<a.length;d++){var c=a[d];c.enumerabl
2023-06-06 08:38:58 UTC	2544	IN	Data Raw: 26 28 74 68 69 73 2e 63 6c 65 61 6e 45 6c 65 6d 65 6e 74 73 28 29 2c 74 68 69 73 2e 73 65 74 53 65 6c 65 63 74 65 64 45 6c 65 6d 65 6e 74 28 62 2e 70 61 72 65 6e 74 28 29 2c 61 29 29 3b 74 68 69 73 2e 61 6c 6c 79 2e 73 65 74 41 72 69 61 53 65 6c 65 63 74 65 64 54 61 67 73 28 29 7d 7d 2c 7b 6b 65 79 3a 22 62 69 6e 64 55 49 45 76 65 6e 74 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 3b 74 68 69 73 2e 24 74 61 62 73 4d 65 6e 75 2e 66 69 6e 64 28 22 61 22 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 61 2e 74 61 62 73 4d 65 6e 75 43 6c 69 63 6b 48 61 6e 64 6c 65 72 28 62 29 7d 29 3b 63 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 22 72 65 73 69 7a 65 22 2c 66 75 6e 63 74 69 Data Ascii: &(this.cleanElements(),this.setSelectedElement(b.parent(),a));this.ally.setAriaSelectedTags()}},{key:"bindUIEvents",value:function(){var a=this;this.$tabsMenu.find("a").on("click",function(b){return a.tabsMenuClickHandler(b)});c(window).on("resize",functi
2023-06-06 08:38:58 UTC	2560	IN	Data Raw: 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 64 29 7b 76 61 72 20 63 3d 6d 6f 6d 65 6e 74 28 29 2e 79 65 61 72 28 29 3b 72 65 74 75 72 6e 20 61 3e 3d 63 26 26 39 39 39 39 3e 3d 61 26 26 31 3c 3d 62 26 26 31 32 3e 3d 62 26 26 31 3c 3d 64 26 26 33 31 3e 3d 64 26 26 30 3c 61 2e 74 6f 53 74 72 69 6e 67 28 29 2e 6c 65 6e 67 74 68 26 26 34 3e 3d 61 2e 74 6f 53 74 72 69 6e 67 28 29 2e 6c 65 6e 67 74 68 26 26 30 3c 62 2e 74 6f 53 74 72 69 6e 67 28 29 2e 6c 65 6e 67 74 68 26 26 0a 32 3e 3d 62 2e 74 6f 53 74 72 69 6e 67 28 29 2e 6c 65 6e 67 74 68 26 26 30 3c 64 2e 74 6f 53 74 72 69 6e 67 28 29 2e 6c 65 6e 67 74 68 26 26 32 3e 3d 64 2e 74 6f 53 74 72 69 6e 67 28 29 2e 6c 65 6e 67 74 68 7d 7d 2c 7b 6b 65 79 3a 22 66 6f 72 6d 61 74 4e 75 6d 62 65 72 22 2c Data Ascii: value:function(a,b,d){var c=moment().year();return a>=c&&9999>=a&&1<=b&&12>=b&&1<=d&&31>=d&&0<a.toString().length&&4>=a.toString().length&&0<b.toString().length&&2>=b.toString().length&&0<d.toString().length&&2>=d.toString().length}},{key:"formatNumber",
2023-06-06 08:38:58 UTC	2576	IN	Data Raw: 65 49 6e 70 75 74 56 61 6c 28 62 29 7d 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 75 70 64 61 74 65 49 6e 70 75 74 56 61 6c 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 6c 28 61 2e 74 61 72 67 65 74 29 2e 64 61 74 61 28 22 76 61 6c 75 65 22 29 3b 74 68 69 73 2e 24 69 6e 70 75 74 46 69 65 6c 64 2e 76 61 6c 28 61 2e 74 72 69 6d 28 29 2e 74 6f 4c 6f 63 61 6c 65 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 74 68 69 73 2e 24 69 6e 70 75 74 46 69 65 6c 64 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 3b 22 22 21 3d 3d 61 3f 74 68 69 73 2e 24 76 61 6c 69 64 61 74 69 6f 6e 2e 68 69 64 65 45 72 72 6f 72 4d 65 73 73 61 67 65 28 29 3a 28 74 68 69 73 2e 24 76 61 6c 69 64 61 74 69 6f 6e 2e 73 65 74 45 72 72 6f 72 4d 65 73 73 61 67 65 28 22 69 6e 63 6f 6d Data Ascii: eInputVal(b)}})}},{key:"updateInputVal",value:function(a){a=l(a.target).data("value");this.$inputField.val(a.trim().toLocaleLowerCase());this.$inputField.trigger("change");""!==a?this.$validation.hideErrorMessage():(this.$validation.setErrorMessage("incom
2023-06-06 08:38:58 UTC	2592	IN	Data Raw: 42 75 74 74 6f 6e 54 65 78 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 3d 74 68 69 73 2e 63 6f 6e 74 65 78 74 2e 69 73 45 78 70 61 6e 64 65 64 28 29 3f 74 68 69 73 2e 73 65 61 72 63 68 42 75 74 74 6f 6e 41 72 69 61 4c 61 62 65 6c 73 2e 63 6c 6f 73 65 3a 0a 74 68 69 73 2e 73 65 61 72 63 68 42 75 74 74 6f 6e 41 72 69 61 4c 61 62 65 6c 73 2e 6f 70 65 6e 3b 74 68 69 73 2e 24 73 65 61 72 63 68 42 75 74 74 6f 6e 2e 61 74 74 72 28 22 61 72 69 61 2d 6c 61 62 65 6c 22 2c 64 29 3b 74 68 69 73 2e 73 65 74 53 65 61 72 63 68 42 75 74 74 6f 6e 54 61 62 69 6e 64 65 78 28 29 7d 7d 2c 7b 6b 65 79 3a 22 73 75 62 6d 69 74 54 65 78 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 24 73 65 61 72 63 68 42 75 74 74 6f 6e Data Ascii: ButtonText",value:function(){var d=this.context.isExpanded()?this.searchButtonAriaLabels.close:this.searchButtonAriaLabels.open;this.$searchButton.attr("aria-label",d);this.setSearchButtonTabindex()}},{key:"submitText",value:function(){this.$searchButton
2023-06-06 08:38:58 UTC	2601	IN	Data Raw: 20 63 2c 65 3d 28 63 3d 7b 7d 2c 67 28 63 2c 64 2e 45 4e 54 45 52 2c 61 2e 63 6f 6e 74 65 78 74 2e 68 61 6e 64 6c 65 53 75 67 67 65 73 74 69 6f 6e 43 68 6f 69 63 65 29 2c 67 28 63 2c 64 2e 45 53 43 2c 61 2e 63 6f 6e 74 65 78 74 2e 68 69 64 65 53 75 67 67 65 73 74 69 6f 6e 73 29 2c 67 28 63 2c 64 2e 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 6e 65 78 74 28 29 2e 66 6f 63 75 73 28 29 7d 29 2c 67 28 63 2c 64 2e 55 50 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 70 72 65 76 28 29 2e 66 6f 63 75 73 28 29 7d 29 2c 63 29 3b 61 2e 68 61 6e 64 6c 65 4b 65 79 50 72 65 73 73 28 62 2c 65 29 7d 29 3b 74 68 69 73 2e 63 6f 6e 74 65 78 74 2e 24 73 75 67 67 65 73 74 69 6f 6e 49 74 65 6d 73 2e 66 69 72 73 74 28 29 2e Data Ascii: c,e=(c={},g(c,d.ENTER,a.context.handleSuggestionChoice),g(c,d.ESC,a.context.hideSuggestions),g(c,d.DOWN,function(a){return a.next().focus()}),g(c,d.UP,function(a){return a.prev().focus()}),c);a.handleKeyPress(b,e)});this.context.$suggestionItems.first().
2023-06-06 08:38:58 UTC	2617	IN	Data Raw: 65 72 72 65 64 4c 6f 63 61 6c 65 5c 78 33 64 22 29 3f 61 2e 72 65 70 6c 61 63 65 28 63 2c 22 24 31 22 2b 62 2b 22 24 32 22 29 3a 61 2b 22 2c 22 2b 62 3a 62 3b 48 53 42 43 5f 75 74 69 6c 73 2e 64 65 6c 65 74 65 43 6f 6f 6b 69 65 28 22 48 53 42 43 5f 43 4c 49 45 4e 54 5f 43 4f 4f 4b 49 45 22 2c 0a 66 2e 70 61 74 68 29 3b 48 53 42 43 5f 75 74 69 6c 73 2e 73 65 74 43 6f 6f 6b 69 65 28 22 48 53 42 43 5f 43 4c 49 45 4e 54 5f 43 4f 4f 4b 49 45 22 2c 61 2c 66 29 7d 7d 2c 7b 6b 65 79 3a 22 67 65 74 4c 6f 63 61 6c 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 48 53 42 43 5f 75 74 69 6c 73 2e 67 65 74 43 6f 6f 6b 69 65 28 22 48 53 42 43 5f 43 4c 49 45 4e 54 5f 43 4f 4f 4b 49 45 22 29 2c 61 3d 2f 5e 28 2e 2a 2c 29 3f 50 72 65 66 65 72 Data Ascii: erredLocale\x3d")?a.replace(c,"$1"+b+"$2"):a+","+b:b;HSBC_utils.deleteCookie("HSBC_CLIENT_COOKIE",f.path);HSBC_utils.setCookie("HSBC_CLIENT_COOKIE",a,f)}},{key:"getLocale",value:function(){var b=HSBC_utils.getCookie("HSBC_CLIENT_COOKIE"),a=/^(.*,)?Prefer
2023-06-06 08:38:58 UTC	2623	IN	Data Raw: 74 6f 74 79 70 65 22 2c 7b 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 3b 72 65 74 75 72 6e 20 63 7d 63 2e 72 28 66 29 3b 76 61 72 20 6b 3d 63 28 32 36 32 29 2c 6c 3d 63 28 32 37 31 29 3b 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 62 3d 7b 73 69 64 65 62 61 72 3a 22 68 65 61 64 65 72 2d 6d 6f 62 69 6c 65 2d 73 69 64 65 62 61 72 22 2c 73 69 64 65 62 61 72 54 72 69 67 67 65 72 3a 22 68 65 61 64 65 72 2d 73 69 64 65 62 61 72 2d 74 72 69 67 67 65 72 22 2c 73 69 64 65 62 61 72 4f 70 65 6e 3a 22 73 69 64 65 62 61 72 2d 6f 70 65 6e 22 2c 73 69 64 65 62 61 72 4f 76 65 72 6c 61 79 3a 22 68 65 61 64 65 72 2d 6d 6f 62 69 6c 65 2d 6f 76 65 72 6c 61 79 22 2c 6c 6f 67 6f 4d 6f 62 69 6c 65 3a 22 68 65 61 64 65 72 2d 6d 6f 62 69 6c 65 2d 6c 6f 67 6f 22 2c 0a 65 78 70 Data Ascii: totype",{writable:!1});return c}c.r(f);var k=c(262),l=c(271);(function(c){var b={sidebar:"header-mobile-sidebar",sidebarTrigger:"header-sidebar-trigger",sidebarOpen:"sidebar-open",sidebarOverlay:"header-mobile-overlay",logoMobile:"header-mobile-logo",exp
2023-06-06 08:38:58 UTC	2639	IN	Data Raw: 4b 65 79 26 26 28 65 2e 66 6f 63 75 73 28 29 2c 61 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 29 3a 28 64 2e 66 6f 63 75 73 28 29 2c 61 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 29 7d 7d 5d 29 3b 72 65 74 75 72 6e 20 61 7d 28 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 68 2c 66 29 7b 7d 2c 66 75 6e 63 74 69 6f 6e 28 68 2c 66 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 63 2c 66 29 7b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 66 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 7b 76 61 72 20 64 3d 66 5b 67 5d 3b 64 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 0a 64 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 3b 64 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 3b 22 76 61 6c 75 65 22 69 6e 20 64 26 26 28 64 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 3b 4f 62 6a 65 63 74 2e 64 Data Ascii: Key&&(e.focus(),a.preventDefault()):(d.focus(),a.preventDefault())}}]);return a}()},function(h,f){},function(h,f){function c(c,f){for(var g=0;g<f.length;g++){var d=f[g];d.enumerable=d.enumerable\|\|!1;d.configurable=!0;"value"in d&&(d.writable=!0);Object.d
2023-06-06 08:38:58 UTC	2655	IN	Data Raw: 31 2c 22 6c 63 2d 69 6e 63 6f 6d 65 2d 73 79 6e 74 61 78 22 3a 21 31 2c 22 6c 63 2d 69 6e 63 6f 6d 65 2d 6c 65 74 74 65 72 73 22 3a 21 31 2c 22 6c 63 2d 72 61 74 65 2d 72 61 6e 67 65 22 3a 21 31 2c 22 6c 63 2d 72 61 74 65 2d 73 79 6e 74 61 78 22 3a 21 31 2c 22 6c 63 2d 72 61 74 65 2d 6c 65 74 74 65 72 73 22 3a 21 31 2c 22 6c 63 2d 70 65 72 69 6f 64 2d 72 61 6e 67 65 22 3a 21 31 2c 22 6c 63 2d 70 65 72 69 6f 64 2d 73 79 6e 74 61 78 22 3a 21 31 2c 22 6c 63 2d 70 65 72 69 6f 64 2d 6c 65 74 74 65 72 73 22 3a 21 31 7d 3b 74 68 69 73 2e 63 72 65 61 74 65 41 6e 64 53 65 74 53 6c 69 64 65 72 28 29 3b 74 68 69 73 2e 62 69 6e 64 55 49 45 76 65 6e 74 73 28 29 3b 74 68 69 73 2e 63 68 61 6e 67 65 57 69 64 74 68 28 29 3b 74 68 69 73 2e 72 65 73 69 7a 65 43 6f 6c 75 6d Data Ascii: 1,"lc-income-syntax":!1,"lc-income-letters":!1,"lc-rate-range":!1,"lc-rate-syntax":!1,"lc-rate-letters":!1,"lc-period-range":!1,"lc-period-syntax":!1,"lc-period-letters":!1};this.createAndSetSlider();this.bindUIEvents();this.changeWidth();this.resizeColum

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
72	192.168.2.4	49859	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:58 UTC	2662	OUT	GET /etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/fonts/UniversNextforHSBCW02-Rg.woff HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.hsbc.co.uk sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.hsbc.co.uk/etc.clientlibs/dpws/clientlibs-public/clientlib-default.min.7675554f68ae226cdde18af7ac43f392.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373
2023-06-06 08:38:58 UTC	2663	IN	HTTP/1.1 200 OK Content-Type: application/font-woff Content-Length: 27464 Connection: close Date: Tue, 06 Jun 2023 08:38:58 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains Last-Modified: Sat, 03 Jun 2023 04:23:49 GMT Accept-Ranges: bytes S: dispatcher3euwest2 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Cache-Control: max-age=7776000, s-maxage=7776000 X-Cache: Miss from cloudfront Via: 1.1 acc9aed747aea07d6138203ddfb2dcd8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: HnMtZ5xFkdSMrOy3I4yZVdGLLhCv6q0AcqVqEHEq7xlKibFS8O5wiA==
2023-06-06 08:38:58 UTC	2663	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 6b 48 00 0f 00 00 00 00 cc 90 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4f 53 2f 32 00 00 01 58 00 00 00 57 00 00 00 60 86 0b 0d 96 63 6d 61 70 00 00 01 b0 00 00 02 7d 00 00 03 52 8f d0 93 a4 63 76 74 20 00 00 04 30 00 00 00 4f 00 00 01 e2 07 6d 07 ad 66 70 67 6d 00 00 04 80 00 00 05 ed 00 00 0a a2 63 0e 9d d9 67 61 73 70 00 00 0a 70 00 00 00 10 00 00 00 10 00 17 00 09 67 6c 79 66 00 00 0a 80 00 00 46 b5 00 00 83 4a 20 82 17 e6 68 64 6d 78 00 00 51 38 00 00 0a bc 00 00 1a 10 e4 78 25 34 68 65 61 64 00 00 5b f4 00 00 00 36 00 00 00 36 fb 26 74 d5 68 68 65 61 00 00 5c 2c 00 00 00 21 00 00 00 24 07 20 03 ff 68 6d 74 78 00 00 5c 50 00 00 02 c5 00 00 06 0e 3d b9 4b 49 6c 6f 63 61 00 00 5f 18 00 00 03 Data Ascii: wOFFkHOS/2XW`cmap}Rcvt 0OmfpgmcgasppglyfFJ hdmxQ8x%4head[66&thhea\,!$ hmtx\P=KIloca_
2023-06-06 08:38:58 UTC	2679	IN	Data Raw: 06 0f 9f a8 3d 3e 78 e8 4a 72 fe 9e 7b ee c1 11 30 4a 05 6e c2 32 e9 4d 95 a7 54 b8 3c 20 8e 92 37 13 df c6 3c 7d 09 89 09 b9 f1 28 66 63 0c 4d e5 89 6f 53 77 ff 05 68 2a 2f 40 87 a1 9f 43 40 69 e2 6a d7 d5 46 ab 95 b1 60 ff c6 82 dc 1a 8b 02 92 12 aa e8 ea f9 a6 1f 73 49 ff 85 17 36 11 10 1b 5c 12 97 db b4 a9 8b 31 d5 8d b2 76 60 5b 8a f5 51 9c f9 c1 76 ec 20 da 34 0e c8 bf b0 51 f5 97 37 2a 7a 84 37 51 2f 11 9f ad 3f 8b f6 7a b7 c6 5d c9 5b 80 83 a8 da c5 43 a0 8f 57 c3 4b ff f4 69 08 fd 27 38 8b ae de a8 6f a8 5b 08 81 7e 80 97 73 20 53 e5 96 c8 e7 56 50 2c e0 6d f0 ed 26 7c 0e b4 1c 72 61 47 6c 11 1f 04 48 23 23 c7 80 52 c4 45 d1 e1 c3 3b c9 8f d4 66 d0 cf 21 fc 8f 78 53 a7 4f 93 c4 be 7a 8a f8 1e a4 f2 25 4e f3 74 b4 9f e6 69 e2 4d 87 0e 1f 35 6c 31 Data Ascii: =>xJr{0Jn2MT< 7<}(fcMoSwh/@C@ijF`sI6\1v`[Qv 4Q7z7Q/?z][CWKi'8o[~s SVP,m&\|raGlH##RE;f!xSOz%NtiM5l1
2023-06-06 08:38:58 UTC	2687	IN	Data Raw: 1f 25 2b 25 3d 25 4e 25 61 25 a8 25 bf 25 d0 25 e1 25 f4 25 ff 26 12 26 23 26 67 26 95 26 a8 26 ba 26 cc 26 de 26 ef 27 26 27 38 27 4a 27 5e 27 6a 27 7c 27 8e 27 a0 27 b2 27 c6 27 d2 27 e6 27 f8 28 04 28 18 28 8d 29 12 29 23 29 36 29 47 29 58 29 6b 29 7e 2a 1f 2a 30 2a b2 2a c4 2a d5 2a e6 2b 2d 2b 7e 2b 90 2b a2 2b b6 2b c2 2b d6 2b e8 2b f4 2c 08 2c 1c 2c 7b 2c 8f 2c a0 2c b3 2c c6 2c d7 2c ea 2c fb 2d 07 2d 13 2d 1f 2d 2b 2d 43 2d 5a 2d 71 2d 8f 2d ad 2d ca 2d e7 2d fe 2e 2c 2e 5a 2e 78 2e 96 2e ac 2e c2 2e d8 2e fc 2f 20 2f 52 2f 84 2f a4 2f c4 2f db 2f f2 30 38 30 64 30 7b 30 93 30 b8 30 ce 30 f0 31 42 31 59 31 70 31 91 31 b2 31 c8 31 e7 32 02 32 1d 32 46 32 6f 32 85 32 9b 32 c5 32 db 32 f1 33 18 33 4c 33 f2 34 1c 34 3c 34 bf 35 44 35 82 35 fc 36 75 Data Ascii: %+%=%N%a%%%%%%&&#&g&&&&&&'&'8'J'^'j'\|'''''''((())#)6)G)X)k)~0**+-+~+++++++,,,{,,,,,,,----+-C-Z-q-----.,.Z.x...../ /R/////080d0{00001B1Y1p1111222F2o2222233L344<45D556u

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
73	192.168.2.4	49864	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:58 UTC	2690	OUT	GET /etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/fonts/UniversNextforHSBCW02-Bd.woff HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.hsbc.co.uk sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.hsbc.co.uk/etc.clientlibs/dpws/clientlibs-public/clientlib-default.min.7675554f68ae226cdde18af7ac43f392.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373
2023-06-06 08:38:58 UTC	2751	IN	HTTP/1.1 200 OK Content-Type: application/font-woff Content-Length: 26328 Connection: close Date: Tue, 06 Jun 2023 08:38:58 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains Last-Modified: Sat, 03 Jun 2023 04:23:49 GMT Accept-Ranges: bytes S: dispatcher2euwest2 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Cache-Control: max-age=7776000, s-maxage=7776000 X-Cache: Miss from cloudfront Via: 1.1 56abe0fedc00b031003c08f0306dae62.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: bXDNc56FYtJOeeeSmdk8lPy6hod_mlTklZQpC14Qlb2LAhlV_B_Aqw==
2023-06-06 08:38:58 UTC	2752	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 66 d8 00 0f 00 00 00 00 bf 8c 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4f 53 2f 32 00 00 01 58 00 00 00 57 00 00 00 60 87 30 10 bb 63 6d 61 70 00 00 01 b0 00 00 02 99 00 00 03 5a 60 2a c3 57 63 76 74 20 00 00 04 4c 00 00 00 56 00 00 01 e2 09 d1 09 e5 66 70 67 6d 00 00 04 a4 00 00 05 ed 00 00 0a a2 63 0e 9d d9 67 61 73 70 00 00 0a 94 00 00 00 10 00 00 00 10 00 17 00 09 67 6c 79 66 00 00 0a a4 00 00 45 ed 00 00 82 34 03 fe 90 c7 68 64 6d 78 00 00 50 94 00 00 0b 2a 00 00 1a 10 8a 55 95 5d 68 65 61 64 00 00 5b c0 00 00 00 36 00 00 00 36 fb 6c 74 6e 68 68 65 61 00 00 5b f8 00 00 00 21 00 00 00 24 07 6c 04 3a 68 6d 74 78 00 00 5c 1c 00 00 02 d2 00 00 06 0e 6e 9e 3d 02 6c 6f 63 61 00 00 5e f0 00 00 03 Data Ascii: wOFFfOS/2XW`0cmapZ`Wcvt LVfpgmcgaspglyfE4hdmxPU]head[66ltnhhea[!$l:hmtx\n=loca^
2023-06-06 08:38:58 UTC	2768	IN	Data Raw: 29 f0 81 f6 62 29 34 34 d7 0c f8 9d 4c 6d 8b 68 e0 d0 a1 c7 1e 3b f4 45 f0 e3 46 01 fc 78 eb 23 8f 90 5e 37 b1 19 a9 4c 3b 36 3d a5 47 d8 a0 52 a7 c6 9b a4 a0 41 39 8b 54 df c4 dd 3c 33 7f 76 91 0e d7 f1 57 5f 44 3f f8 ed a1 87 1e da f2 cf 5b 1f 7c 70 eb 3f 6f 41 63 b6 7d e6 75 a8 87 af 52 bd d4 e2 ce 1b 2f 4c 0b 69 5a 39 c0 b2 71 83 d2 a8 d5 18 72 71 51 3a c5 5f e8 82 ff 35 63 d2 7c 96 e4 6c f2 f6 ec 71 e8 a2 8e 0b 1d cc 16 a6 95 82 21 c2 91 0a e1 2e 07 4b 1f 80 fa 52 2c 96 8b f5 2f 09 24 d7 27 bc f3 58 6d 84 b5 45 7a 87 7b 23 7a 57 d8 12 ce 06 7b 86 7c a1 25 21 77 af 57 e5 b4 e9 c2 3d 83 3d e1 9b 4d 6e 56 cb c4 18 6f 48 67 0a 80 8f 67 eb 26 13 97 4d f4 f8 d4 72 f5 46 a5 8a 56 5a 19 b3 03 19 1c b9 90 23 e6 b3 2b f5 e5 64 24 ef 56 2a a4 9b e4 2a 91 ca a4 Data Ascii: )b)44Lmh;EFx#^7L;6=GRA9T<3vW_D?[\|p?oAc}uR/LiZ9qrqQ:_5c\|lq!.KR,/$'XmEz{#zW{\|%!wW==MnVoHgg&MrFVZ#+d$V**

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
74	192.168.2.4	49862	18.66.192.16	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:58 UTC	2691	OUT	GET /utag/hsbc/uk-rbwm/prod/utag.js HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:38:58 UTC	3071	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 352892 Connection: close Date: Tue, 06 Jun 2023 08:38:59 GMT Last-Modified: Wed, 31 May 2023 18:12:49 GMT ETag: "97f4126a800e6598cb281175c86fa907" x-amz-server-side-encryption: AES256 x-amz-version-id: F0xMiyWwl7VTexmr0C6VW2axaCK4giSL Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 3ddbbcaacc1ba68ddfab04ef45c3ca98.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P1 X-Amz-Cf-Id: 0NR-ZLQ-cAv_PYSs_SipIkxTbXBI6i-1Cze-jvrHWV6CPoeuvnzaMw== Cache-Control: max-age=300
2023-06-06 08:38:58 UTC	3072	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 6c 6f 61 64 65 72 20 75 74 34 2e 30 2e 32 30 32 33 30 35 33 31 31 38 30 39 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 33 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 69 66 28 74 79 70 65 6f 66 20 75 74 61 67 5f 65 72 72 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 29 76 61 72 20 75 74 61 67 5f 65 72 72 3d 5b 5d 3b 77 69 6e 64 6f 77 2e 5f 74 65 61 6c 69 75 6d 5f 6f 6c 64 5f 65 72 72 6f 72 3d 77 69 6e 64 6f 77 2e 5f 74 65 61 6c 69 75 6d 5f 6f 6c 64 5f 65 72 72 6f 72 7c 7c 77 69 6e 64 6f 77 2e 6f 6e 65 72 72 6f 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 77 69 6e 64 6f 77 2e 6f 6e 65 72 72 6f 72 Data Ascii: //tealium universal tag - utag.loader ut4.0.202305311809, Copyright 2023 Tealium.com Inc. All Rights Reserved.if(typeof utag_err=='undefined')var utag_err=[];window._tealium_old_error=window._tealium_old_error\|\|window.onerror\|\|function(){};window.onerror
2023-06-06 08:38:58 UTC	3073	IN	Data Raw: 61 72 20 69 3d 30 3b 69 3c 73 63 72 69 70 74 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 69 66 28 73 63 72 69 70 74 73 5b 69 5d 2e 73 72 63 2e 69 6e 64 65 78 4f 66 28 22 2f 2f 74 61 67 73 2e 74 69 71 63 64 6e 2e 63 6f 6d 2f 75 74 61 67 22 29 3e 2d 31 26 26 73 63 72 69 70 74 73 5b 69 5d 2e 73 72 63 2e 69 6e 64 65 78 4f 66 28 27 73 79 6e 63 27 29 3d 3d 2d 31 26 26 73 63 72 69 70 74 73 5b 69 5d 2e 73 72 63 2e 69 6e 64 65 78 4f 66 28 27 75 74 76 3d 75 74 27 29 3d 3d 2d 31 29 7b 75 74 61 67 53 63 72 69 70 74 73 53 72 63 3d 73 63 72 69 70 74 73 5b 69 5d 2e 73 72 63 7d 7d 0a 75 74 61 67 53 63 72 69 70 74 73 53 72 63 3d 75 74 61 67 53 63 72 69 70 74 73 53 72 63 2e 72 65 70 6c 61 63 65 28 27 68 74 74 70 73 3a 2f 2f 74 61 67 73 2e 74 69 71 63 64 6e 2e 63 6f 6d 2f 75 Data Ascii: ar i=0;i<scripts.length;i++){if(scripts[i].src.indexOf("//tags.tiqcdn.com/utag")>-1&&scripts[i].src.indexOf('sync')==-1&&scripts[i].src.indexOf('utv=ut')==-1){utagScriptsSrc=scripts[i].src}}utagScriptsSrc=utagScriptsSrc.replace('https://tags.tiqcdn.com/u
2023-06-06 08:38:58 UTC	3089	IN	Data Raw: 63 61 74 63 68 28 65 29 7b 75 74 61 67 2e 44 42 26 26 75 74 61 67 2e 44 42 28 65 29 7d 0a 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 67 65 74 5f 76 61 6c 75 65 28 6b 65 79 2c 62 61 73 65 29 7b 69 66 28 74 6f 54 79 70 65 28 6b 65 79 29 21 3d 3d 22 73 74 72 69 6e 67 22 7c 7c 6b 65 79 3d 3d 3d 22 22 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 7d 0a 76 61 72 20 70 61 72 74 3d 22 22 2c 70 61 72 74 73 3d 6b 65 79 2e 73 70 6c 69 74 28 22 2e 22 29 2c 72 65 66 65 72 65 6e 63 65 3d 62 61 73 65 3f 62 61 73 65 3a 77 69 6e 64 6f 77 3b 77 68 69 6c 65 28 70 61 72 74 3d 70 61 72 74 73 2e 73 68 69 66 74 28 29 29 7b 69 66 28 21 72 65 66 65 72 65 6e 63 65 29 7b 72 Data Ascii: catch(e){utag.DB&&utag.DB(e)}(function(b){try{(function(b){"use strict";function get_value(key,base){if(toType(key)!=="string"\|\|key===""){return null;}var part="",parts=key.split("."),reference=base?base:window;while(part=parts.shift()){if(!reference){r
2023-06-06 08:38:58 UTC	3090	IN	Data Raw: 6f 63 65 73 73 28 63 6f 6e 66 69 67 2c 64 61 74 61 29 7b 69 66 28 74 6f 54 79 70 65 28 63 6f 6e 66 69 67 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 7b 72 65 74 75 72 6e 7b 7d 3b 7d 0a 64 61 74 61 3d 64 61 74 61 7c 7c 7b 7d 3b 66 6f 72 28 76 61 72 20 64 61 74 61 5f 6c 61 79 65 72 5f 6b 65 79 20 69 6e 20 63 6f 6e 66 69 67 29 7b 69 66 28 64 61 74 61 5b 64 61 74 61 5f 6c 61 79 65 72 5f 6b 65 79 5d 29 7b 63 6f 6e 74 69 6e 75 65 3b 7d 0a 76 61 72 20 6c 6f 6f 6b 75 70 5f 6b 65 79 73 3d 63 6f 6e 66 69 67 5b 64 61 74 61 5f 6c 61 79 65 72 5f 6b 65 79 5d 3b 69 66 28 74 6f 54 79 70 65 28 6c 6f 6f 6b 75 70 5f 6b 65 79 73 29 3d 3d 3d 22 73 74 72 69 6e 67 22 29 7b 6c 6f 6f 6b 75 70 5f 6b 65 79 73 3d 5b 6c 6f 6f 6b 75 70 5f 6b 65 79 73 5d 3b 7d 0a 69 66 28 74 6f 54 79 70 65 Data Ascii: ocess(config,data){if(toType(config)!=="object"){return{};}data=data\|\|{};for(var data_layer_key in config){if(data[data_layer_key]){continue;}var lookup_keys=config[data_layer_key];if(toType(lookup_keys)==="string"){lookup_keys=[lookup_keys];}if(toType
2023-06-06 08:38:58 UTC	3106	IN	Data Raw: 2c 22 65 78 70 69 72 65 22 3a 30 2c 22 74 79 70 65 22 3a 33 2c 22 76 65 6e 64 6f 72 22 3a 22 66 62 22 7d 2c 7b 22 74 69 6d 65 22 3a 30 2c 22 63 6f 6e 66 69 67 22 3a 22 56 69 65 77 43 6f 6e 74 65 6e 74 22 2c 22 74 72 69 67 67 65 72 22 3a 22 76 69 65 77 22 2c 22 72 75 6c 65 73 22 3a 7b 22 70 61 67 65 5f 75 72 6c 22 3a 22 2f 63 75 72 72 65 6e 74 2f 70 72 65 6d 69 65 72 2f 64 65 63 6c 69 6e 65 22 7d 2c 22 65 78 70 69 72 65 22 3a 30 2c 22 74 79 70 65 22 3a 33 2c 22 76 65 6e 64 6f 72 22 3a 22 66 62 22 7d 2c 7b 22 74 69 6d 65 22 3a 30 2c 22 63 6f 6e 66 69 67 22 3a 22 56 69 65 77 43 6f 6e 74 65 6e 74 22 2c 22 74 72 69 67 67 65 72 22 3a 22 76 69 65 77 22 2c 22 72 75 6c 65 73 22 3a 7b 22 70 61 67 65 5f 75 72 6c 22 3a 22 2f 63 75 72 72 65 6e 74 2f 70 72 65 6d 69 65 Data Ascii: ,"expire":0,"type":3,"vendor":"fb"},{"time":0,"config":"ViewContent","trigger":"view","rules":{"page_url":"/current/premier/decline"},"expire":0,"type":3,"vendor":"fb"},{"time":0,"config":"ViewContent","trigger":"view","rules":{"page_url":"/current/premie
2023-06-06 08:38:58 UTC	3115	IN	Data Raw: 69 22 7d 2c 7b 22 74 69 6d 65 22 3a 30 2c 22 63 6f 6e 66 69 67 22 3a 22 68 74 74 70 73 3a 2f 2f 70 78 2e 61 64 73 2e 6c 69 6e 6b 65 64 69 6e 2e 63 6f 6d 2f 63 6f 6c 6c 65 63 74 2f 3f 70 69 64 3d 34 33 36 35 32 34 26 63 6f 6e 76 65 72 73 69 6f 6e 49 64 3d 39 39 35 34 33 35 34 26 66 6d 74 3d 67 69 66 22 2c 22 74 72 69 67 67 65 72 22 3a 22 76 69 65 77 22 2c 22 72 75 6c 65 73 22 3a 7b 22 70 61 67 65 5f 6e 61 6d 65 22 3a 22 70 77 73 3a 61 70 70 6c 69 63 61 74 69 6f 6e 3a 63 75 72 72 65 6e 74 20 61 63 63 6f 75 6e 74 73 3a 61 70 70 6c 69 63 61 74 69 6f 6e 20 73 75 62 6d 69 74 3a 4e 43 56 72 65 66 65 72 22 2c 7d 2c 22 65 78 70 69 72 65 22 3a 31 37 30 30 30 35 31 31 32 32 35 31 35 2c 22 74 79 70 65 22 3a 31 2c 22 76 65 6e 64 6f 72 22 3a 22 6c 69 22 7d 2c 7b 22 74 Data Ascii: i"},{"time":0,"config":"https://px.ads.linkedin.com/collect/?pid=436524&conversionId=9954354&fmt=gif","trigger":"view","rules":{"page_name":"pws:application:current accounts:application submit:NCVrefer",},"expire":1700051122515,"type":1,"vendor":"li"},{"t
2023-06-06 08:38:58 UTC	3122	IN	Data Raw: 36 38 38 38 39 33 37 38 2c 22 74 79 70 65 22 3a 33 2c 22 76 65 6e 64 6f 72 22 3a 22 67 64 63 22 7d 2c 7b 22 74 69 6d 65 22 3a 30 2c 22 63 6f 6e 66 69 67 22 3a 22 68 73 62 63 5f 30 30 30 7c 68 73 62 63 5f 30 30 31 7c 73 74 61 6e 64 61 72 64 22 2c 22 74 72 69 67 67 65 72 22 3a 22 76 69 65 77 22 2c 22 72 75 6c 65 73 22 3a 7b 22 70 61 67 65 5f 75 72 6c 22 3a 22 2f 6d 6f 72 74 67 61 67 65 73 2f 64 65 63 69 73 69 6f 6e 2d 69 6e 2d 70 72 69 6e 63 69 70 6c 65 2f 73 65 63 6f 6e 64 2d 61 70 70 6c 69 63 61 6e 74 2d 65 6d 70 6c 6f 79 6d 65 6e 74 2d 73 74 61 74 75 73 22 7d 2c 22 65 78 70 69 72 65 22 3a 31 36 38 37 38 36 38 38 38 39 33 37 38 2c 22 74 79 70 65 22 3a 33 2c 22 76 65 6e 64 6f 72 22 3a 22 67 64 63 22 7d 2c 7b 22 74 69 6d 65 22 3a 30 2c 22 63 6f 6e 66 69 67 Data Ascii: 68889378,"type":3,"vendor":"gdc"},{"time":0,"config":"hsbc_000\|hsbc_001\|standard","trigger":"view","rules":{"page_url":"/mortgages/decision-in-principle/second-applicant-employment-status"},"expire":1687868889378,"type":3,"vendor":"gdc"},{"time":0,"config
2023-06-06 08:38:58 UTC	3138	IN	Data Raw: 65 6d 2e 63 6f 6d 2f 73 2f 69 75 33 3f 70 69 64 3d 65 64 64 33 38 38 32 63 2d 61 38 61 61 2d 34 30 38 31 2d 39 30 31 62 2d 65 37 38 34 33 61 37 36 65 65 33 64 26 65 76 65 6e 74 3d 53 69 67 6e 55 70 26 61 70 70 69 64 3d 5b 61 70 70 6c 69 63 61 74 69 6f 6e 5f 69 64 5d 26 70 61 67 65 75 72 6c 3d 5b 70 61 67 65 5f 75 72 6c 5d 26 70 61 67 65 6e 61 6d 65 3d 5b 70 61 67 65 5f 6e 61 6d 65 5d 22 2c 22 74 72 69 67 67 65 72 22 3a 22 76 69 65 77 22 2c 22 72 75 6c 65 73 22 3a 7b 22 70 61 67 65 5f 6e 61 6d 65 22 3a 22 70 77 73 3a 61 70 70 6c 69 63 61 74 69 6f 6e 3a 63 72 65 64 69 74 20 63 61 72 64 73 3a 61 70 70 6c 69 63 61 74 69 6f 6e 20 63 6f 6d 70 6c 65 74 65 22 7d 2c 22 65 78 70 69 72 65 22 3a 30 2c 22 74 79 70 65 22 3a 31 2c 22 76 65 6e 64 6f 72 22 3a 22 61 7a 22 Data Ascii: em.com/s/iu3?pid=edd3882c-a8aa-4081-901b-e7843a76ee3d&event=SignUp&appid=[application_id]&pageurl=[page_url]&pagename=[page_name]","trigger":"view","rules":{"page_name":"pws:application:credit cards:application complete"},"expire":0,"type":1,"vendor":"az"
2023-06-06 08:38:58 UTC	3154	IN	Data Raw: 22 65 78 70 69 72 65 22 3a 30 2c 22 74 79 70 65 22 3a 33 2c 22 76 65 6e 64 6f 72 22 3a 22 6f 6d 22 7d 2c 7b 22 74 69 6d 65 22 3a 30 2c 22 63 6f 6e 66 69 67 22 3a 22 4d 49 44 3d 34 31 34 37 26 50 49 44 3d 33 30 34 35 36 22 2c 22 74 72 69 67 67 65 72 22 3a 22 76 69 65 77 22 2c 22 72 75 6c 65 73 22 3a 7b 22 70 61 67 65 5f 6e 61 6d 65 22 3a 22 70 77 73 3a 61 70 70 6c 69 63 61 74 69 6f 6e 3a 63 72 65 64 69 74 20 63 61 72 64 73 3a 64 65 63 6c 69 6e 65 3a 70 6f 6c 69 63 79 22 7d 2c 22 65 78 70 69 72 65 22 3a 30 2c 22 74 79 70 65 22 3a 33 2c 22 76 65 6e 64 6f 72 22 3a 22 6f 6d 22 7d 2c 7b 22 74 69 6d 65 22 3a 30 2c 22 63 6f 6e 66 69 67 22 3a 22 4d 49 44 3d 34 31 34 37 26 50 49 44 3d 33 30 34 35 36 22 2c 22 74 72 69 67 67 65 72 22 3a 22 76 69 65 77 22 2c 22 72 75 Data Ascii: "expire":0,"type":3,"vendor":"om"},{"time":0,"config":"MID=4147&PID=30456","trigger":"view","rules":{"page_name":"pws:application:credit cards:decline:policy"},"expire":0,"type":3,"vendor":"om"},{"time":0,"config":"MID=4147&PID=30456","trigger":"view","ru
2023-06-06 08:38:58 UTC	3170	IN	Data Raw: 6e 28 6f 2c 6c 29 7b 76 61 72 20 61 3d 22 22 2c 62 3b 61 3d 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 6c 29 3b 69 66 28 21 61 7c 7c 61 3d 3d 22 7b 7d 22 29 72 65 74 75 72 6e 3b 62 3d 75 74 61 67 2e 75 74 2e 66 6c 61 74 74 65 6e 28 7b 76 61 3a 4a 53 4f 4e 2e 70 61 72 73 65 28 61 29 7d 29 3b 75 74 61 67 2e 75 74 2e 6d 65 72 67 65 28 6f 2c 62 2c 31 29 3b 7d 0a 74 72 79 7b 72 65 61 64 41 74 74 72 28 6f 2c 22 74 65 61 6c 69 75 6d 5f 76 61 22 29 3b 72 65 61 64 41 74 74 72 28 6f 2c 22 74 65 61 6c 69 75 6d 5f 76 61 5f 22 2b 6f 5b 22 75 74 2e 61 63 63 6f 75 6e 74 22 5d 2b 22 5f 22 2b 6f 5b 22 75 74 2e 70 72 6f 66 69 6c 65 22 5d 29 3b 7d 63 61 74 63 68 28 65 29 7b 75 74 61 67 2e 44 42 28 65 29 7d 7d 2c 52 44 75 74 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: n(o,l){var a="",b;a=localStorage.getItem(l);if(!a\|\|a=="{}")return;b=utag.ut.flatten({va:JSON.parse(a)});utag.ut.merge(o,b,1);}try{readAttr(o,"tealium_va");readAttr(o,"tealium_va_"+o["ut.account"]+"_"+o["ut.profile"]);}catch(e){utag.DB(e)}},RDut:function(
2023-06-06 08:38:58 UTC	3186	IN	Data Raw: 2e 44 42 28 65 29 7d 3b 62 72 65 61 6b 3b 63 61 73 65 27 31 31 30 33 27 3a 74 72 79 7b 63 5b 31 31 30 33 5d 7c 3d 28 64 5b 27 74 6d 73 4c 69 62 56 65 72 5f 63 6c 69 63 6b 74 72 61 63 6b 69 6e 67 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 27 32 2e 30 27 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 64 5b 27 6c 69 62 5f 63 6c 69 63 6b 74 72 61 63 6b 69 6e 67 5f 74 72 69 67 67 65 72 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 27 31 27 29 3e 2d 31 29 7d 63 61 74 63 68 28 65 29 7b 75 74 61 67 2e 44 42 28 65 29 7d 3b 62 72 65 61 6b 3b 63 61 73 65 27 31 31 30 34 27 3a 74 72 79 7b 63 5b 31 31 30 34 5d 7c 3d 28 64 5b 27 74 6d 73 4c 69 62 56 65 72 5f 63 6c 69 63 6b 74 72 61 63 6b 69 6e 67 27 5d 2e Data Ascii: .DB(e)};break;case'1103':try{c[1103]\|=(d['tmsLibVer_clicktracking'].toString().toLowerCase()=='2.0'.toLowerCase()&&d['lib_clicktracking_trigger'].toString().indexOf('1')>-1)}catch(e){utag.DB(e)};break;case'1104':try{c[1104]\|=(d['tmsLibVer_clicktracking'].
2023-06-06 08:38:58 UTC	3190	IN	Data Raw: 69 6e 64 65 78 4f 66 28 27 31 2e 36 27 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3e 2d 31 29 7d 63 61 74 63 68 28 65 29 7b 75 74 61 67 2e 44 42 28 65 29 7d 3b 62 72 65 61 6b 3b 63 61 73 65 27 31 36 36 37 27 3a 74 72 79 7b 63 5b 31 36 36 37 5d 7c 3d 28 64 5b 27 74 6d 73 4c 69 62 56 65 72 5f 6c 69 76 65 70 65 72 73 6f 6e 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 27 31 2e 33 27 29 3e 2d 31 29 7d 63 61 74 63 68 28 65 29 7b 75 74 61 67 2e 44 42 28 65 29 7d 3b 62 72 65 61 6b 3b 63 61 73 65 27 31 36 36 38 27 3a 74 72 79 7b 63 5b 31 36 36 38 5d 7c 3d 28 64 5b 27 74 6d 73 4c 69 62 56 65 72 5f 70 72 6f 6d 6f 74 69 6f 6e 74 72 61 63 6b 69 6e 67 5f 63 6f 6d 62 69 6e 65 64 27 5d 3d 3d 27 34 2e 32 27 29 7d 63 61 74 63 68 28 65 29 7b 75 74 61 Data Ascii: indexOf('1.6'.toLowerCase())>-1)}catch(e){utag.DB(e)};break;case'1667':try{c[1667]\|=(d['tmsLibVer_liveperson'].toString().indexOf('1.3')>-1)}catch(e){utag.DB(e)};break;case'1668':try{c[1668]\|=(d['tmsLibVer_promotiontracking_combined']=='4.2')}catch(e){uta
2023-06-06 08:38:58 UTC	3206	IN	Data Raw: 2c 62 29 7d 7d 63 61 74 63 68 28 65 29 7b 75 74 61 67 2e 44 42 28 65 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 62 2e 5f 63 63 69 74 79 3d 28 74 79 70 65 6f 66 20 62 5b 27 63 75 73 74 6f 6d 65 72 5f 63 69 74 79 27 5d 21 3d 27 75 6e 64 65 66 69 6e 65 64 27 29 3f 62 5b 27 63 75 73 74 6f 6d 65 72 5f 63 69 74 79 27 5d 3a 27 27 3b 62 2e 5f 63 63 6f 75 6e 74 72 79 3d 28 74 79 70 65 6f 66 20 62 5b 27 63 75 73 74 6f 6d 65 72 5f 63 6f 75 6e 74 72 79 27 5d 21 3d 27 75 6e 64 65 66 69 6e 65 64 27 29 3f 62 5b 27 63 75 73 74 6f 6d 65 72 5f 63 6f 75 6e 74 72 79 27 5d 3a 27 27 3b 62 2e 5f 63 63 75 72 72 65 6e 63 79 3d 28 74 79 70 65 6f 66 20 62 5b 27 6f 72 64 65 72 5f 63 75 72 72 65 6e 63 79 27 5d 21 3d 27 75 6e 64 65 66 69 6e 65 64 27 29 3f 62 5b Data Ascii: ,b)}}catch(e){utag.DB(e)}},function(a,b,c,d){b._ccity=(typeof b['customer_city']!='undefined')?b['customer_city']:'';b._ccountry=(typeof b['customer_country']!='undefined')?b['customer_country']:'';b._ccurrency=(typeof b['order_currency']!='undefined')?b[
2023-06-06 08:38:58 UTC	3207	IN	Data Raw: 6e 64 65 66 69 6e 65 64 27 29 3f 62 5b 27 63 75 73 74 6f 6d 65 72 5f 7a 69 70 27 5d 3a 27 27 3b 62 2e 5f 63 70 72 6f 64 3d 28 74 79 70 65 6f 66 20 62 5b 27 70 72 6f 64 75 63 74 5f 69 64 27 5d 21 3d 27 75 6e 64 65 66 69 6e 65 64 27 26 26 62 5b 27 70 72 6f 64 75 63 74 5f 69 64 27 5d 2e 6c 65 6e 67 74 68 3e 30 29 3f 62 5b 27 70 72 6f 64 75 63 74 5f 69 64 27 5d 2e 73 70 6c 69 74 28 27 2c 27 29 3a 5b 5d 3b 62 2e 5f 63 70 72 6f 64 6e 61 6d 65 3d 28 74 79 70 65 6f 66 20 62 5b 27 70 72 6f 64 75 63 74 5f 6e 61 6d 65 27 5d 21 3d 27 75 6e 64 65 66 69 6e 65 64 27 26 26 62 5b 27 70 72 6f 64 75 63 74 5f 6e 61 6d 65 27 5d 2e 6c 65 6e 67 74 68 3e 30 29 3f 62 5b 27 70 72 6f 64 75 63 74 5f 6e 61 6d 65 27 5d 2e 73 70 6c 69 74 28 27 2c 27 29 3a 5b 5d 3b 62 2e 5f 63 62 72 61 Data Ascii: ndefined')?b['customer_zip']:'';b._cprod=(typeof b['product_id']!='undefined'&&b['product_id'].length>0)?b['product_id'].split(','):[];b._cprodname=(typeof b['product_name']!='undefined'&&b['product_name'].length>0)?b['product_name'].split(','):[];b._cbra
2023-06-06 08:38:58 UTC	3223	IN	Data Raw: 63 5b 65 5d 29 29 7b 69 66 28 64 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 66 29 3e 2d 31 29 7b 62 5b 27 76 65 6e 64 6f 72 5f 6f 70 74 69 6d 69 73 65 5f 6d 65 64 69 61 5f 70 69 78 65 6c 5f 66 69 72 65 27 5d 3d 63 5b 65 5d 5b 66 5d 3b 6d 3d 74 72 75 65 7d 3b 7d 3b 69 66 28 6d 29 62 72 65 61 6b 7d 3b 69 66 28 21 6d 29 62 5b 27 76 65 6e 64 6f 72 5f 6f 70 74 69 6d 69 73 65 5f 6d 65 64 69 61 5f 70 69 78 65 6c 5f 66 69 72 65 27 5d 3d 27 27 3b 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 72 79 7b 69 66 28 74 79 70 65 6f 66 20 62 5b 27 63 70 2e 75 74 61 67 5f 6d 61 69 6e 5f 73 73 6b 65 79 27 5d 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 29 7b 75 74 61 67 2e 6c 6f 61 64 65 72 2e 53 43 28 27 75 74 61 67 5f 6d 61 69 6e 27 2c 7b 27 73 73 6b 65 Data Ascii: c[e])){if(d.toString().indexOf(f)>-1){b['vendor_optimise_media_pixel_fire']=c[e][f];m=true};};if(m)break};if(!m)b['vendor_optimise_media_pixel_fire']='';}},function(a,b){try{if(typeof b['cp.utag_main_sskey']=='undefined'){utag.loader.SC('utag_main',{'sske
2023-06-06 08:38:58 UTC	3239	IN	Data Raw: 61 70 70 6e 65 78 75 73 5f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 32 22 2c 22 76 65 6e 64 6f 72 5f 61 70 70 6e 65 78 75 73 5f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 2c 22 76 65 6e 64 6f 72 5f 67 61 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 69 64 22 2c 22 76 65 6e 64 6f 72 5f 67 61 72 6c 69 6e 6b 5f 63 6f 6e 76 65 72 73 69 6f 6e 69 64 22 2c 22 76 65 6e 64 6f 72 5f 62 69 6e 67 61 64 73 5f 74 61 67 69 64 22 2c 22 64 6f 75 62 6c 65 63 6c 69 63 6b 5f 74 79 70 65 32 22 2c 22 5f 74 6d 73 5f 63 6f 6e 66 69 67 5f 76 65 6e 64 6f 72 5f 6d 61 70 70 69 6e 67 5f 76 61 72 69 61 62 6c 65 73 22 2c 22 61 76 6f 63 65 74 5f 73 65 67 6d 65 6e 74 5f 69 64 22 2c 22 55 43 41 53 5f 74 61 67 5f 64 65 66 69 6e 65 64 22 2c 22 76 65 6e 64 6f 72 5f 79 61 68 6f 6f 64 6f 74 5f 63 6f 6e 66 Data Ascii: appnexus_configuration2","vendor_appnexus_configuration","vendor_gar_conversionid","vendor_garlink_conversionid","vendor_bingads_tagid","doubleclick_type2","_tms_config_vendor_mapping_variables","avocet_segment_id","UCAS_tag_defined","vendor_yahoodot_conf
2023-06-06 08:38:58 UTC	3255	IN	Data Raw: 73 65 6e 64 3a 31 2c 76 3a 32 30 32 32 31 30 32 37 31 38 33 32 2c 77 61 69 74 3a 31 2c 74 69 64 3a 32 30 30 31 30 7d 2c 22 32 35 37 35 22 3a 7b 6c 6f 61 64 3a 75 74 61 67 2e 63 6f 6e 64 5b 31 33 38 36 5d 2c 74 63 61 74 3a 32 2c 73 65 6e 64 3a 31 2c 76 3a 32 30 32 32 31 30 32 37 31 38 33 32 2c 77 61 69 74 3a 31 2c 74 69 64 3a 32 30 30 31 30 7d 2c 22 32 35 31 30 22 3a 7b 6c 6f 61 64 3a 28 75 74 61 67 2e 63 6f 6e 64 5b 31 33 33 32 5d 26 26 75 74 61 67 2e 63 6f 6e 64 5b 31 33 33 33 5d 26 26 75 74 61 67 2e 63 6f 6e 64 5b 31 33 32 39 5d 29 2c 74 63 61 74 3a 32 2c 73 65 6e 64 3a 31 2c 76 3a 32 30 32 32 30 36 30 39 31 36 32 30 2c 77 61 69 74 3a 31 2c 74 69 64 3a 32 30 30 31 30 7d 2c 22 32 35 31 31 22 3a 7b 6c 6f 61 64 3a 28 75 74 61 67 2e 63 6f 6e 64 5b 31 33 33 Data Ascii: send:1,v:202210271832,wait:1,tid:20010},"2575":{load:utag.cond[1386],tcat:2,send:1,v:202210271832,wait:1,tid:20010},"2510":{load:(utag.cond[1332]&&utag.cond[1333]&&utag.cond[1329]),tcat:2,send:1,v:202206091620,wait:1,tid:20010},"2511":{load:(utag.cond[133
2023-06-06 08:38:58 UTC	3271	IN	Data Raw: 22 74 65 61 6c 69 75 6d 5f 76 69 73 69 74 6f 72 5f 69 64 22 20 3a 20 22 27 2b 75 74 61 67 2e 64 61 74 61 5b 27 63 70 2e 75 74 61 67 5f 6d 61 69 6e 5f 76 5f 69 64 27 5d 2b 27 22 7d 27 29 3b 7d 0a 65 6c 73 65 7b 78 68 72 2e 73 65 6e 64 28 27 7b 22 74 65 61 6c 69 75 6d 5f 61 63 63 6f 75 6e 74 22 3a 22 68 73 62 63 22 2c 27 2b 0a 27 22 74 65 61 6c 69 75 6d 5f 70 72 6f 66 69 6c 65 22 3a 22 27 2b 28 75 74 61 67 2e 67 64 70 72 2e 65 76 65 6e 74 50 72 6f 66 69 6c 65 7c 7c 22 77 70 62 2d 73 74 72 65 61 6d 2d 75 6b 22 29 2b 27 22 2c 22 74 65 61 6c 69 75 6d 5f 65 76 65 6e 74 22 3a 22 64 65 63 6c 69 6e 65 5f 63 6f 6e 73 65 6e 74 22 2c 22 63 6f 6e 73 65 6e 74 5f 63 61 74 65 67 6f 72 69 65 73 22 3a 22 22 2c 22 70 6f 6c 69 63 79 22 3a 22 67 64 70 72 22 2c 20 22 74 65 61 Data Ascii: "tealium_visitor_id" : "'+utag.data['cp.utag_main_v_id']+'"}');}else{xhr.send('{"tealium_account":"hsbc",'+'"tealium_profile":"'+(utag.gdpr.eventProfile\|\|"wpb-stream-uk")+'","tealium_event":"decline_consent","consent_categories":"","policy":"gdpr", "tea
2023-06-06 08:38:58 UTC	3287	IN	Data Raw: 65 22 3a 22 22 7d 7d 2c 22 74 72 22 3a 7b 22 63 75 73 74 6f 6d 5f 74 6f 6b 65 6e 73 22 3a 7b 22 6c 69 73 74 31 5f 63 6d 62 22 3a 22 7a 69 79 61 72 65 74 69 6e 69 7a 69 20 64 61 68 61 20 6b 69 c5 9f 69 73 65 6c 20 68 61 6c 65 20 67 65 74 69 72 6d 65 6b 22 2c 22 6f 70 74 5f 69 6e 22 3a 22 22 2c 22 63 6f 6d 70 61 6e 79 5f 6c 6f 67 6f 5f 75 72 6c 22 3a 22 22 2c 22 63 6f 6f 6b 69 65 5f 6e 6f 74 69 63 65 5f 65 6e 64 5f 63 6d 62 22 3a 22 20 7a 69 79 61 72 65 74 20 65 64 65 62 69 6c 69 72 73 69 6e 69 7a 2e 22 2c 22 61 63 63 65 70 74 5f 61 6c 6c 5f 63 6d 62 22 3a 22 54 c3 bc 6d 20 c3 a7 65 72 65 7a 6c 65 72 69 20 6b 61 62 75 6c 20 65 74 22 2c 22 63 6f 6f 6b 69 65 5f 6e 6f 74 69 63 65 5f 63 6d 62 22 3a 22 c3 87 65 72 65 7a 20 42 69 6c 64 69 72 69 6d 69 e2 80 99 6d Data Ascii: e":""}},"tr":{"custom_tokens":{"list1_cmb":"ziyaretinizi daha kiisel hale getirmek","opt_in":"","company_logo_url":"","cookie_notice_end_cmb":" ziyaret edebilirsiniz.","accept_all_cmb":"Tm erezleri kabul et","cookie_notice_cmb":"erez Bildirimim
2023-06-06 08:38:58 UTC	3303	IN	Data Raw: 22 5d 2e 74 6f 67 67 6c 65 3a 66 6f 63 75 73 3a 63 68 65 63 6b 65 64 20 20 2b 20 6c 61 62 65 6c 20 7b 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 33 37 36 37 39 38 3b 7d 62 6f 64 79 20 20 64 69 76 2e 70 72 69 76 61 63 79 5f 70 72 6f 6d 70 74 20 20 2e 70 72 69 76 61 63 79 5f 70 72 6f 6d 70 74 5f 63 6f 6e 74 65 6e 74 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 5c 22 63 68 65 63 6b 62 6f 78 5c 22 5d 2e 74 6f 67 67 6c 65 3a 63 68 65 63 6b 65 64 20 20 2b 20 6c 61 62 65 6c 3a 62 65 66 6f 72 65 2c 62 6f 64 79 20 20 64 69 76 2e 70 72 69 76 61 63 79 5f 70 72 6f 6d 70 74 20 20 2e 70 72 69 76 61 63 79 5f 70 72 6f 6d 70 74 5f 63 6f 6e 74 65 6e 74 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 5c 22 63 68 65 63 6b 62 6f 78 5c 22 5d 2e 74 6f 67 67 6c 65 3a 63 68 Data Ascii: "].toggle:focus:checked + label { background-color: #376798;}body div.privacy_prompt .privacy_prompt_content input[type=\"checkbox\"].toggle:checked + label:before,body div.privacy_prompt .privacy_prompt_content input[type=\"checkbox\"].toggle:ch
2023-06-06 08:38:58 UTC	3319	IN	Data Raw: 22 3a 22 22 2c 22 63 6f 6f 6b 69 65 5f 6e 6f 74 69 63 65 5f 65 6e 64 5f 63 6d 62 22 3a 22 2e 22 2c 22 61 66 66 69 6c 69 61 74 65 73 5f 74 69 74 6c 65 5f 63 6d 62 22 3a 22 43 6f 6f 6b 69 65 20 63 68 65 20 73 75 70 70 6f 72 74 61 6e 6f 20 61 74 74 69 76 69 74 c3 a0 20 64 69 20 6d 61 72 6b 65 74 69 6e 67 22 2c 22 6f 70 74 69 6f 6e 61 6c 5f 63 6f 6f 6b 69 65 73 5f 72 62 77 6d 22 3a 22 22 2c 22 61 6e 61 6c 79 74 69 63 73 5f 64 65 73 63 5f 72 62 77 6d 22 3a 22 22 2c 22 61 6c 6c 6f 77 5f 61 6e 61 6c 79 74 69 63 73 5f 63 6d 62 22 3a 22 4c 27 75 74 65 6e 74 65 20 61 63 63 65 74 74 61 20 69 20 63 6f 6f 6b 69 65 20 63 68 65 20 61 69 75 74 61 6e 6f 20 61 20 6d 69 67 6c 69 6f 72 61 72 65 20 69 6c 20 73 69 74 6f 20 57 65 62 3f 22 2c 22 6e 6f 5f 72 62 77 6d 22 3a 22 22 Data Ascii: ":"","cookie_notice_end_cmb":".","affiliates_title_cmb":"Cookie che supportano attivit di marketing","optional_cookies_rbwm":"","analytics_desc_rbwm":"","allow_analytics_cmb":"L'utente accetta i cookie che aiutano a migliorare il sito Web?","no_rbwm":""
2023-06-06 08:38:58 UTC	3326	IN	Data Raw: 20 63 61 74 26 65 61 63 75 74 65 3b 67 6f 72 69 65 73 20 64 65 20 63 65 73 20 63 6f 6f 6b 69 65 73 20 73 74 72 69 63 74 65 6d 65 6e 74 20 6e 26 65 61 63 75 74 65 3b 63 65 73 73 61 69 72 65 73 20 73 75 72 20 6e 6f 74 72 65 20 70 61 67 65 20 64 27 69 6e 66 6f 72 6d 61 74 69 6f 6e 73 20 73 75 72 20 6c 65 73 20 63 6f 6f 6b 69 65 73 2e 22 2c 22 70 61 72 61 67 72 61 70 68 32 5f 63 6d 62 22 3a 22 56 6f 75 73 20 70 6f 75 76 65 7a 20 63 68 6f 69 73 69 72 20 6c 65 20 74 79 70 65 20 64 65 20 63 6f 6f 6b 69 65 73 20 66 61 63 75 6c 74 61 74 69 66 73 20 71 75 65 20 76 6f 75 73 20 73 6f 75 68 61 69 74 65 7a 20 61 63 63 65 70 74 65 72 20 63 69 2d 64 65 73 73 6f 75 73 2e 22 2c 22 61 6c 6c 6f 77 5f 61 6e 61 6c 79 74 69 63 73 5f 63 6d 62 22 3a 22 41 75 74 6f 72 69 73 65 72 Data Ascii: catégories de ces cookies strictement nécessaires sur notre page d'informations sur les cookies.","paragraph2_cmb":"Vous pouvez choisir le type de cookies facultatifs que vous souhaitez accepter ci-dessous.","allow_analytics_cmb":"Autoriser
2023-06-06 08:38:58 UTC	3342	IN	Data Raw: 6c 69 61 74 65 73 5f 74 69 74 6c 65 5f 63 6d 62 22 3a 22 50 6c 69 6b 69 20 63 6f 6f 6b 69 65 20 77 73 70 69 65 72 61 6a c4 85 63 65 20 64 7a 69 61 c5 82 61 6c 6e 6f c5 9b c4 87 20 6d 61 72 6b 65 74 69 6e 67 6f 77 c4 85 22 2c 22 6f 70 74 69 6f 6e 61 6c 5f 63 6f 6f 6b 69 65 73 5f 72 62 77 6d 22 3a 22 22 2c 22 61 6c 6c 6f 77 5f 61 6e 61 6c 79 74 69 63 73 5f 63 6d 62 22 3a 22 5a 65 7a 77 6f 6c 69 c4 87 20 6e 61 20 70 6c 69 6b 69 20 63 6f 6f 6b 69 65 2c 20 6b 74 c3 b3 72 65 20 70 6f 6d 61 67 61 6a c4 85 20 75 73 70 72 61 77 6e 69 61 c4 87 20 66 75 6e 6b 63 6a 6f 6e 6f 77 61 6e 69 65 20 77 69 74 72 79 6e 79 3f 22 2c 22 61 6e 61 6c 79 74 69 63 73 5f 64 65 73 63 5f 72 62 77 6d 22 3a 22 22 2c 22 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 5f 62 75 74 74 6f 6e 5f 63 6d 62 Data Ascii: liates_title_cmb":"Pliki cookie wspierajce dziaalno marketingow","optional_cookies_rbwm":"","allow_analytics_cmb":"Zezwoli na pliki cookie, ktre pomagaj usprawnia funkcjonowanie witryny?","analytics_desc_rbwm":"","confirmation_button_cmb
2023-06-06 08:38:58 UTC	3353	IN	Data Raw: 22 59 6f 75 20 63 61 6e 20 63 68 6f 6f 73 65 20 77 68 69 63 68 20 74 79 70 65 73 20 6f 66 20 6f 70 74 69 6f 6e 61 6c 20 63 6f 6f 6b 69 65 73 20 79 6f 75 20 77 69 73 68 20 74 6f 20 61 63 63 65 70 74 2e 20 59 6f 75 20 63 61 6e 20 6d 61 6e 61 67 65 20 74 68 65 73 65 20 70 72 65 66 65 72 65 6e 63 65 73 20 61 74 20 61 6e 79 20 74 69 6d 65 20 62 65 6c 6f 77 2e 22 2c 22 74 69 74 6c 65 5f 63 6d 62 22 3a 22 4d 61 6e 61 67 65 20 63 6f 6f 6b 69 65 20 73 65 74 74 69 6e 67 73 22 2c 22 70 61 72 61 67 72 61 70 68 31 5f 63 6d 62 22 3a 22 43 6f 6f 6b 69 65 73 20 61 72 65 20 73 6d 61 6c 6c 20 70 69 65 63 65 73 20 6f 66 20 64 61 74 61 20 74 68 61 74 20 77 65 62 73 69 74 65 73 20 73 74 6f 72 65 20 6f 6e 20 79 6f 75 72 20 62 72 6f 77 73 65 72 20 77 68 65 6e 20 79 6f 75 20 76 Data Ascii: "You can choose which types of optional cookies you wish to accept. You can manage these preferences at any time below.","title_cmb":"Manage cookie settings","paragraph1_cmb":"Cookies are small pieces of data that websites store on your browser when you v
2023-06-06 08:38:59 UTC	3360	IN	Data Raw: 3a 22 54 79 74 6f 20 73 6f 75 62 6f 72 79 20 63 6f 6f 6b 69 65 73 20 75 6d 6f c5 be c5 88 75 6a c3 ad 20 66 75 6e 67 6f 76 c3 a1 6e c3 ad 20 76 6f 6c 69 74 65 6c 6e c3 bd 63 68 20 66 75 6e 6b 63 c3 ad 20 6e 65 62 6f 20 73 6c 75 c5 be 65 62 2e 20 4e 61 c5 a1 65 20 69 6e 74 65 72 6e 65 74 6f 76 c3 a9 20 73 74 72 c3 a1 6e 6b 79 20 62 75 64 6f 75 20 66 75 6e 67 6f 76 61 74 20 69 20 62 65 7a 20 6e 69 63 68 2e 20 22 2c 22 6d 6f 72 65 5f 72 62 77 6d 22 3a 22 22 7d 2c 22 64 69 73 70 6c 61 79 5f 6e 61 6d 65 22 3a 22 43 7a 65 63 68 20 28 63 73 29 22 2c 22 69 73 44 65 66 61 75 6c 74 22 3a 22 66 61 6c 73 65 22 2c 22 63 6f 6d 6d 6f 6e 5f 74 6f 6b 65 6e 73 22 3a 7b 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 50 6f 70 69 73 22 2c 22 63 6f 6e 66 69 72 6d 61 74 69 6f 6e Data Ascii: :"Tyto soubory cookies umouj fungovn volitelnch funkc nebo slueb. Nae internetov strnky budou fungovat i bez nich. ","more_rbwm":""},"display_name":"Czech (cs)","isDefault":"false","common_tokens":{"description":"Popis","confirmation
2023-06-06 08:38:59 UTC	3369	IN	Data Raw: 70 50 72 65 66 73 20 7b 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 36 70 78 3b 20 20 7d 20 20 62 6f 64 79 20 64 69 76 2e 70 72 69 76 61 63 79 5f 70 72 6f 6d 70 74 20 7b 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 35 30 30 70 78 3b 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 36 30 70 78 3b 20 20 7d 20 20 62 6f 64 79 20 64 69 76 2e 70 72 69 76 61 63 79 5f 70 72 6f 6d 70 74 2e 63 6f 6e 73 65 6e 74 5f 70 72 65 66 65 72 65 6e 63 65 73 20 7b 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 38 30 30 70 78 3b 20 20 7d 20 20 62 6f 64 79 20 64 69 76 2e 70 72 69 76 61 63 79 5f 70 72 6f 6d 70 74 20 2e 70 72 69 76 61 63 79 5f 70 72 6f 6d 70 74 5f 68 65 61 64 65 72 20 7b 20 20 20 20 70 61 64 64 69 6e 67 3a 20 34 34 70 78 20 31 36 70 78 20 30 3b 20 20 7d 20 20 62 Data Ascii: pPrefs { padding: 0 16px; } body div.privacy_prompt { max-width: 500px; margin-top: 60px; } body div.privacy_prompt.consent_preferences { max-width: 800px; } body div.privacy_prompt .privacy_prompt_header { padding: 44px 16px 0; } b
2023-06-06 08:38:59 UTC	3385	IN	Data Raw: 69 66 28 6d 6f 64 61 6c 2e 66 6f 63 75 73 61 62 6c 65 45 6c 73 2e 6c 65 6e 67 74 68 3d 3d 3d 31 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 62 72 65 61 6b 3b 7d 69 66 28 65 2e 73 68 69 66 74 4b 65 79 29 7b 68 61 6e 64 6c 65 42 61 63 6b 77 61 72 64 54 61 62 28 29 3b 7d 65 6c 73 65 7b 68 61 6e 64 6c 65 46 6f 72 77 61 72 64 54 61 62 28 29 3b 7d 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 62 72 65 61 6b 3b 7d 7d 3b 73 69 62 6c 69 6e 67 73 41 64 64 41 72 69 61 48 69 64 65 28 29 3b 24 63 6f 6e 73 65 6e 74 4d 61 6e 61 67 65 6d 65 6e 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 5c 22 63 6f 6e 73 65 6e 74 4d 61 6e 61 67 65 6d 65 6e 74 5c 22 29 3b 24 63 6f 6e 73 65 6e 74 4d 61 6e 61 67 65 6d 65 6e 74 2e 66 6f 63 75 Data Ascii: if(modal.focusableEls.length===1){e.preventDefault();break;}if(e.shiftKey){handleBackwardTab();}else{handleForwardTab();}break;default:break;}};siblingsAddAriaHide();$consentManagement=document.getElementById(\"consentManagement\");$consentManagement.focu
2023-06-06 08:38:59 UTC	3386	IN	Data Raw: 73 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 5c 22 2e 74 65 61 6c 2d 63 6f 6f 6b 69 65 2d 6e 6f 74 69 63 65 2d 75 72 6c 5c 22 29 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 61 6e 63 68 6f 72 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 6c 69 6e 6b 3d 61 6e 63 68 6f 72 73 5b 69 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 68 72 65 66 27 29 3b 61 6e 63 68 6f 72 73 5b 69 5d 2e 68 72 65 66 3d 75 74 61 67 2e 64 61 74 61 2e 63 6f 6f 6b 69 65 5f 70 6f 6c 69 63 79 5f 70 61 67 65 2b 6c 69 6e 6b 3b 7d 22 3b 75 74 61 67 2e 67 64 70 72 2e 70 72 65 66 65 72 65 6e 63 65 73 5f 70 72 6f 6d 70 74 2e 64 65 66 61 75 6c 74 4c 61 6e 67 3d 22 65 6e 22 3b 75 74 61 67 2e 67 64 70 72 2e 73 68 6f 77 43 6f 6e 73 65 6e 74 50 72 65 Data Ascii: s=document.querySelectorAll(\".teal-cookie-notice-url\");for(var i=0;i<anchors.length;i++){var link=anchors[i].getAttribute('href');anchors[i].href=utag.data.cookie_policy_page+link;}";utag.gdpr.preferences_prompt.defaultLang="en";utag.gdpr.showConsentPre
2023-06-06 08:38:59 UTC	3402	IN	Data Raw: 64 6f 77 2e 54 4d 53 2e 70 69 78 65 78 70 69 72 65 64 3d 77 69 6e 64 6f 77 2e 54 4d 53 2e 70 69 78 65 78 70 69 72 65 64 7c 7c 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 70 69 78 65 6c 28 61 2c 62 2c 6f 62 6a 29 7b 7d 0a 70 69 78 65 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 72 75 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 70 69 78 65 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 62 75 73 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 61 6e 64 6f 6d 4e 75 6d 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 22 22 2c 63 61 63 68 65 42 75 73 74 3d 28 72 61 6e 64 6f 6d 4e 75 6d 2a 31 30 30 30 30 30 30 30 30 30 30 30 30 30 29 3b 72 65 74 75 72 6e 20 63 61 63 68 65 42 75 73 74 3b 7d 3b 70 69 78 65 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 44 61 74 65 3d 28 66 75 6e 63 74 69 6f Data Ascii: dow.TMS.pixexpired=window.TMS.pixexpired\|\|[];function pixel(a,b,obj){}pixel.prototype.run=function(){};pixel.prototype.bust=function(){var randomNum=Math.random()+"",cacheBust=(randomNum*10000000000000);return cacheBust;};pixel.prototype.getDate=(functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
75	192.168.2.4	49858	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:58 UTC	2692	OUT	GET /content/dam/hsbc/gb/images/logos/hsbc-uk.svg HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373
2023-06-06 08:38:58 UTC	2936	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 2043 Connection: close Date: Tue, 06 Jun 2023 08:38:58 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains Last-Modified: Fri, 02 Jun 2023 17:23:23 GMT Accept-Ranges: bytes S: dispatcher2euwest1 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=2592000, s-maxage=2592000 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 39ed76664123c3090231ff0882467152.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: BRRpCDKVYrCdG9xSTn2mEyy3-mn834PA_VKkJAKw8oTa69qF7H1iYg==
2023-06-06 08:38:58 UTC	2937	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 31 2e 30 2e 32 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 48 53 42 43 5f 4d 41 53 54 45 52 42 52 41 4e 44 5f 55 4b 5f 57 57 5f 52 47 42 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 21.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="HSBC_MASTERBRAND_UK_WW_RGB" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
76	192.168.2.4	49860	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:58 UTC	2692	OUT	GET /etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/fonts/HSBCIcon-Font-Extension.woff?ee39a20e77cff3aec879befe2cd1d29d HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.hsbc.co.uk sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.hsbc.co.uk/etc.clientlibs/dpws/clientlibs-public/clientlib-default.min.7675554f68ae226cdde18af7ac43f392.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373
2023-06-06 08:38:58 UTC	3033	IN	HTTP/1.1 200 OK Content-Type: application/font-woff Content-Length: 38384 Connection: close Date: Tue, 06 Jun 2023 08:38:58 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains Last-Modified: Sat, 03 Jun 2023 04:22:02 GMT Accept-Ranges: bytes S: dispatcher3euwest1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Cache-Control: max-age=7776000, s-maxage=7776000 X-Cache: Miss from cloudfront Via: 1.1 5f3006c64f23c42b9bf4b3b63c77aedc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: ijphcvt6VFEy0SqHOBny7ELTuTgwAzOVMiE0i495c_eLiqb5i24OBw==
2023-06-06 08:38:58 UTC	3034	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 95 f0 00 0b 00 00 00 00 95 a4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4f 53 2f 32 00 00 01 08 00 00 00 60 00 00 00 60 0f 12 06 fa 63 6d 61 70 00 00 01 68 00 00 00 54 00 00 00 54 17 56 d3 59 67 61 73 70 00 00 01 bc 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 01 c4 00 00 8c fc 00 00 8c fc 00 d0 d5 85 68 65 61 64 00 00 8e c0 00 00 00 36 00 00 00 36 16 98 70 af 68 68 65 61 00 00 8e f8 00 00 00 24 00 00 00 24 07 c9 04 93 68 6d 74 78 00 00 8f 1c 00 00 03 5c 00 00 03 5c 52 02 23 d4 6c 6f 63 61 00 00 92 78 00 00 01 b0 00 00 01 b0 a3 73 c6 7e 6d 61 78 70 00 00 94 28 00 00 00 20 00 00 00 20 00 e7 00 db 6e 61 6d 65 00 00 94 48 00 00 01 86 00 00 01 86 99 4a 09 fb 70 6f 73 74 00 00 95 d0 00 00 00 Data Ascii: wOFFOS/2``cmaphTTVYgaspglyfhead66phhea$$hmtx\\R#locaxs~maxp( nameHJpost
2023-06-06 08:38:58 UTC	3050	IN	Data Raw: 00 00 17 21 35 21 15 11 15 21 35 21 11 21 35 21 15 39 03 8e fc 72 03 8e fc 72 03 8e fc 72 07 44 44 03 8e 44 44 fe 17 44 44 00 00 00 00 03 00 00 01 6b 04 00 02 15 00 0c 00 19 00 26 00 00 13 22 06 15 14 16 33 32 36 35 34 26 23 21 22 06 15 14 16 33 32 36 35 34 26 23 21 22 06 15 14 16 33 32 36 35 34 26 23 55 23 32 32 23 24 32 32 24 03 56 24 32 32 24 23 32 32 23 fe 55 23 32 32 23 23 32 32 23 02 15 32 23 23 32 32 23 23 32 32 23 23 32 32 23 23 32 32 23 23 32 32 23 23 32 00 03 01 ab ff c0 02 55 03 c0 00 0b 00 17 00 24 00 00 01 32 36 35 34 26 23 22 06 15 14 16 13 22 06 15 14 16 33 32 36 35 34 26 03 22 06 15 14 16 33 32 36 35 34 26 23 02 00 23 32 32 23 23 32 32 23 23 32 32 23 23 32 32 23 23 32 32 23 23 32 32 23 03 15 32 24 23 32 32 23 24 32 fd 56 32 24 23 32 32 23 Data Ascii: !5!!5!!5!9rrrDDDDDDk&"32654&#!"32654&#!"32654&#U#22#$22$V$22$#22#U#22##22#2##22##22##22##22##22##2U$2654&#""32654&"32654&##22##22##22##22##22##22#2$#22#$2V2$#22#
2023-06-06 08:38:58 UTC	3066	IN	Data Raw: 69 46 47 52 41 45 36 2e 2e 44 14 13 0f 0e 35 24 24 2b 37 28 21 22 31 0e 0e 11 11 3a 27 27 2d 87 8a 65 57 57 82 25 25 22 23 78 51 52 5e fe 02 1e 1e 69 46 47 52 41 45 36 2e 2e 44 14 13 0f 0e 34 25 24 2b 37 28 21 22 31 0e 0e 11 11 3a 27 27 2d 87 8a 65 57 57 82 25 25 22 23 78 51 52 5e 5e 3e 34 34 4c 15 15 01 a4 25 2c 3f 14 17 1b 09 1e 09 1a 09 44 2c 25 35 23 29 3f 14 17 1b 09 1e 09 1a 09 44 29 23 35 03 bb 5e 18 29 29 6c 40 40 47 55 4b 4b 76 26 26 0b 41 44 0a 1c 1c 51 34 33 39 31 2e 2d 4b 1d 1d 11 36 0a 17 16 3e 26 26 2b 2f 29 2a 40 15 15 06 85 87 06 2b 2a 89 5a 5a 66 62 57 56 88 2c 2c 0c fe 05 55 4b 4c 75 26 27 0a 41 44 0a 1c 1c 51 34 33 39 31 2e 2d 4b 1d 1d 11 36 0a 17 16 3e 26 26 2b 2f 29 2a 40 15 15 06 85 87 06 2b 2a 89 5a 5a 66 62 56 57 88 2c 2c 0c 5e 18 Data Ascii: iFGRAE6..D5$$+7(!"1:''-eWW%%"#xQR^iFGRAE6..D4%$+7(!"1:''-eWW%%"#xQR^^>44L%,?D,%5#)?D)#5^))l@@GUKKv&&ADQ4391.-K6>&&+/)@+ZZfbWV,,UKLu&'ADQ4391.-K6>&&+/)@+ZZfbVW,,^

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
77	192.168.2.4	49863	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:58 UTC	2693	OUT	GET /content/dam/hsbc/gb/images/insurance/21-9/10039-eating-pizza-surrounded-by-moving-box-mass-retail-933x400.jpg HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373
2023-06-06 08:38:58 UTC	2695	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 260811 Connection: close Date: Tue, 06 Jun 2023 08:38:58 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains Last-Modified: Fri, 02 Jun 2023 17:41:15 GMT Accept-Ranges: bytes S: dispatcher2euwest2 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=2592000, s-maxage=2592000 X-Cache: Miss from cloudfront Via: 1.1 4699c08b44211e17f977ca0133ec5e8e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: wnYqXFpo_YuvuEQ0rCjpQ9Vazc4iieBrKOzy8ll8SJmY1KFzx76GRg==
2023-06-06 08:38:58 UTC	2695	IN	Data Raw: ff d8 ff db 00 84 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 02 02 02 02 02 02 02 02 02 02 02 03 03 03 03 03 03 03 03 03 03 01 01 01 01 01 01 01 02 01 01 02 02 02 01 02 02 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 ff dd 00 04 00 75 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff c0 00 11 08 01 90 03 a5 03 00 11 00 01 11 01 02 11 01 ff c4 00 e8 00 00 01 04 03 01 01 01 01 00 00 00 00 00 00 00 00 04 03 05 06 07 02 08 09 01 0a 00 0b 01 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 02 00 01 03 04 05 06 07 08 09 10 00 02 01 03 03 02 04 04 03 06 03 05 03 05 01 21 01 Data Ascii: uAdobed!
2023-06-06 08:38:58 UTC	2716	IN	Data Raw: 4f 38 24 75 2e 91 51 a4 99 ee ad 76 be 42 05 61 c7 60 4e 09 fa 0c f3 f7 c7 44 0a 80 d3 6a 98 48 15 19 ac b6 5b ee 16 eb b5 1d d2 92 96 e1 6c ab b4 dc 69 6e 76 fa ea 53 57 43 5f 6d 96 92 51 5b 43 59 44 1e 2f 9b a4 ab a7 dc 92 46 19 19 d4 e0 32 b6 18 13 aa c9 6c e2 d7 a8 4b 4a 27 c9 24 d4 f6 e9 5a ee 5a 43 64 87 0b 88 00 8d 08 25 40 03 5a 4d 5f f0 31 e1 05 f6 79 ae 7a 5e 5b ee 96 a4 aa 26 ae 9f 4f 45 76 b8 55 db ad eb 52 24 90 d2 d1 56 5c 16 ae bc 51 d2 12 12 25 95 a4 70 a0 29 62 41 27 e7 36 ba 6b 8a 2e 49 4b 45 33 a4 a7 58 9d 01 83 04 c6 93 5f 48 0c 35 86 12 94 3a 56 56 04 12 08 d4 88 93 1d e7 5a 88 d4 7c 00 e9 70 f2 2c 3a b7 50 c3 1e 77 c6 86 a2 19 18 67 78 0f 21 92 da ea 22 dc 14 83 ce 01 c6 73 da d8 e9 a5 fc 49 69 92 40 e4 7f 7a 2f a9 5b 1d 94 e0 f5 53 Data Ascii: O8$u.QvBa`NDjH[linvSWC_mQ[CYD/F2lKJ'$ZZCd%@ZM_1yz^[&OEvUR$V\Q%p)bA'6k.IKE3X_H5:VVZ\|p,:Pwgx!"sIi@z/[S
2023-06-06 08:38:58 UTC	2732	IN	Data Raw: 1c fe 5c 8e b3 2f 95 f6 b6 c3 9b e3 dc 6b 4e c1 32 d5 c2 b9 30 7d aa 15 3e 35 1c 93 ed 92 c7 9e e7 3d be b9 cf 5a b9 81 35 9b b5 67 e7 e0 01 9e dd f2 79 ce 72 7f 2e 4f 45 34 d5 93 4e 02 fe 21 ef f4 ff 00 58 3e dd 48 93 a5 34 4d 45 ee d5 c2 28 9d de 55 86 08 b2 d2 cf 8c b0 2e f8 86 18 d3 0c a5 a5 75 e4 e0 fa 47 03 24 75 0b ab 09 49 24 c2 07 1f 70 f3 a9 9a 41 59 80 25 5c bd f5 f2 cb fb 62 7e 22 ef b6 2d 79 4b a2 f4 a8 a9 92 ba ae d7 5b 6b a2 99 d9 a3 5b 7c f7 29 62 fd e7 7a a9 90 e4 52 d3 da ed b1 4e c5 4e 1e 28 61 f5 60 c9 b4 78 56 34 c3 3d 21 e9 4a d1 70 b2 30 fb 41 98 83 ba 89 d4 24 0f cc 72 a1 23 7d 4d 7d 19 d0 d6 d5 83 f4 69 37 09 48 37 8f aa 01 1b 00 06 fd f0 25 44 ed b5 7c e8 e8 8a 4b ae bb 8b 54 6a db ed 61 5a 3b 14 8f 65 a2 73 23 a9 82 1a f5 ba d3 Data Ascii: \/kN20}>5=Z5gyr.OE4N!X>H4ME(U.uG$uI$pAY%\b~"-yK[k[\|)bzRNN(a`xV4=!Jp0A$r#}M}i7H7%D\|KTjaZ;es#
2023-06-06 08:38:58 UTC	2778	IN	Data Raw: 25 44 e9 bd 24 9d 29 19 19 67 55 97 b2 01 e5 d4 81 ea 21 87 a4 1e 3b 1c f4 2a ca ae d0 f3 a2 12 93 04 6b b8 a2 20 84 a4 45 97 d2 f0 36 f5 24 e4 c8 87 d8 fd b1 f9 f4 e9 48 4a 67 96 b4 ca 56 65 4f 3a 55 99 19 96 48 c7 32 0d e3 df 6b f1 9e 39 c7 45 d9 9e cf 1d 69 84 89 0a de bf 24 88 5b 76 7d 0d e8 7c 11 8d df e2 2b db 8e 90 50 3a d2 20 8d 0d 2b b5 55 d4 f1 98 ce d7 19 dd ba 36 f6 6f 63 df a2 d3 48 dc 53 09 f5 d6 70 2a 6e 92 0d a7 31 b1 96 06 c0 dc c8 7b af 19 24 0e 84 72 a4 a2 62 6b c5 55 de d1 8f 42 4d eb 45 1c 10 e3 3c 71 c0 e4 74 80 00 c0 d8 fb e9 89 31 3c aa 85 f8 85 f0 83 4c f8 db e1 ce a4 f0 ef 57 d1 45 57 68 d4 f4 13 51 c6 e7 00 db ef 02 26 fd dd 70 47 ee af 14 f8 e7 b8 ef d1 db be e5 a5 d3 77 2d 12 97 50 b9 49 1c 15 fb 1d 88 3b 83 57 2d 9c c9 20 6a Data Ascii: %D$)gU!;k E6$HJgVeO:UH2k9Ei$[v}\|+P: +U6ocHSpn1{$rbkUBME<qt1<LWEWhQ&pGw-PI;W- j
2023-06-06 08:38:58 UTC	2810	IN	Data Raw: c0 0f 8c ed cf b1 19 e8 c1 07 7d 8d 01 04 03 1c 29 27 8c c4 c6 40 d9 c9 fe 28 03 d3 81 dc f1 8c 71 d0 90 06 b4 f3 98 04 c7 85 28 23 1b 83 46 a0 8d bb d5 fd b2 3d 97 e9 d2 00 05 76 46 94 89 39 75 3a f2 ac fc bd f1 99 48 c2 90 cb 20 63 9c b1 ec 47 d4 74 a0 11 98 ed c6 94 90 60 6f 41 0f 31 97 cb 6c 89 22 3b 97 81 f8 4f e9 db 1d 34 e6 11 c4 51 98 9e e3 5e c5 fc 39 ca b7 31 4e b8 27 38 1b fb 64 63 df 9e 89 12 0c 1f 44 d0 90 0a 73 0f 48 7b ab df 2e 58 df 63 13 98 fd 49 9e 49 52 7b 13 f6 cf 4b 29 0a 85 70 a7 cc 82 24 0d f7 a7 13 22 f0 0b 0c 95 c3 0f b7 f9 64 1e 9d 54 00 71 a2 22 f5 a1 56 6d c2 26 c1 04 02 5a 33 91 81 db b7 4c 81 29 85 1d 07 ba 92 8e b2 34 9f 7d 6a 27 c6 a7 85 4f e2 47 82 d5 95 f6 7a 35 93 5c f8 5d 52 75 7e 92 a8 55 cd 4d 5d a6 10 4d de d0 8c b8 Data Ascii: })'@(q(#F=vF9u:H cGt`oA1l";O4Q^91N'8dcDsH{.XcIIR{K)p$"dTq"Vm&Z3L)4}j'OGz5\]Ru~UM]M
2023-06-06 08:38:58 UTC	2839	IN	Data Raw: cf 74 24 d2 90 0f e2 a9 a0 1c f0 79 b8 52 9e c7 ec 3a 89 7a a6 3b c7 bc 54 88 04 1d 79 1f 71 a4 35 59 06 ba ec dc 7a 4c a7 3c e7 d1 4c 33 fd 31 fa f5 2d dc 75 ab 3e 3e ea 8d 8d 93 ce a1 ba be e2 2c 76 1b ed e7 f7 7d d2 ee 2d 36 43 55 fb aa c9 4a b5 d7 9a f1 15 05 3c 4d 4d 6d a3 79 20 15 15 4a 1c c8 54 b2 e2 24 76 19 2a 14 c0 f2 82 12 a5 1d 92 9f 70 ee ff 00 5a 9d 94 17 1d 4a 04 02 a5 c6 bb 6f ce ab ab 25 c5 6f da ae aa ed 0c 2e 6d b4 76 6a 5b 35 04 ce 63 29 2a 46 cf 59 71 91 0c 4e f1 9f 2e eb 51 2c 12 c6 db 66 82 68 59 24 44 61 8e bc ce e9 f7 2e fa 40 b7 8a 14 96 1a b7 4b 68 27 6d f3 ae 08 d0 c2 c9 49 e2 0a 48 30 6b d4 2c 2d 9b b1 c0 10 ca 56 95 3e ed c2 9c 5c 6e 34 09 40 20 80 47 60 05 24 ec a0 a0 41 3c 33 f1 0d 71 61 b8 05 07 2f 4b 28 1b 58 0c e2 32 46 Data Ascii: t$yR:z;Tyq5YzL<L31-u>>,v}-6CUJ<MMmy JT$vpZJo%o.mvj[5c)FYqN.Q,fhY$Da.@Kh'mIH0k,-V>\n4@ G`$A<3qa/K(X2F
2023-06-06 08:38:58 UTC	2855	IN	Data Raw: 7b 54 f0 d3 55 db 6e 76 c8 67 0b 35 2d 48 79 22 74 fa 83 b6 0e 89 ab f8 be 15 7c c2 72 22 e4 3b 39 79 2b d2 cd 9b 59 92 08 91 1b f8 4f 5f 8e a1 56 37 f6 cf 10 ae a4 a4 83 de 3d 18 8f 02 0f 1f da 21 58 f4 f6 ff 00 14 2c 1a 69 6d ab 53 47 aa ad d4 56 e1 4c c0 a4 a2 bc d3 7c dc 35 54 b5 71 95 14 e6 a2 df 0b ff 00 16 31 94 18 6c 02 01 ea c8 ce f6 06 f5 f6 7c ae 5b a9 4a 9e 19 66 08 23 8c 28 8d 0e fb 77 53 30 84 a3 18 66 c0 a7 32 1f 80 07 1c d9 66 41 e1 a0 3a f0 de ba b3 6a b2 43 a6 ed 17 8b c5 15 54 74 5e 0f da b4 7d 65 be fb ae 7c ca 99 a9 e4 bb 5b ed ed 78 ae d1 3a 4a ae ae 49 1f 53 54 d8 a0 46 a5 aa 3e 64 e9 4a 8c c9 3b 6f 53 bb e7 bb cb 95 62 17 2d 5b b8 82 ae 91 bb 76 14 cb 3a 48 41 50 40 b8 74 0d 1a 0a 24 29 3a 02 a2 01 48 83 a7 b5 30 96 ec db 58 42 80 Data Ascii: {TUnvg5-Hy"t\|r";9y+YO_V7=!X,imSGVL\|5Tq1l\|[Jf#(wS0f2fA:jCTt^}e\|[x:JISTF>dJ;oSb-[v:HAP@t$):H0XB
2023-06-06 08:38:58 UTC	2867	IN	Data Raw: 91 c6 0e 73 f5 e4 f4 61 66 26 81 49 93 df 40 47 0a c7 e5 48 00 05 9b 0c e4 76 19 fe fc 0e 8e 66 45 06 50 45 3a d2 c6 aa 42 33 03 19 05 bd 20 00 33 92 49 fd 7f 4e 85 44 81 3c 68 d0 20 c1 3a 51 b1 53 a9 df 2e e3 80 b9 f5 73 9e 46 49 ec 7b fb f5 11 51 88 a9 22 81 a8 50 c2 a5 d3 69 64 9a 3c 1e 4f a8 91 91 8f af fa fc 88 1d 40 e1 14 31 bf 3a 6d b8 47 b8 4b 1a aa 92 55 1a 4c 0c 72 79 c0 3d bb f4 4d 18 d6 92 84 82 28 5a 7b 7b 66 42 ec 76 34 41 14 a8 e5 1f f3 fa 1f b7 46 a5 ec 38 d0 84 44 ce c6 90 36 cf 55 6a ed 62 5a 98 11 df 1e d9 c9 e7 dc f2 7a 20 e6 82 39 d0 96 e4 9e 51 4c 15 56 72 e1 64 65 52 7c 90 bb 49 f5 2a 80 3d b8 fe bc f5 3a 1e 8d 38 4d 40 b6 4e fc 62 99 1e d6 bc 6c 2c 0e d2 ac 0f 04 7b 80 7b f7 1d 4e 1c e7 50 f5 46 7b e9 64 b7 47 b8 37 96 41 f2 d4 63 Data Ascii: saf&I@GHvfEPE:B3 3IND<h :QS.sFI{Q"Pid<O@1:mGKULry=M(Z{{fBv4AF8D6UjbZz 9QLVrdeR\|I*=:8M@Nbl,{{NPF{dG7Ac
2023-06-06 08:38:58 UTC	2883	IN	Data Raw: e1 b8 47 1f 99 34 35 16 f9 a5 21 4b a3 b7 96 e4 09 02 92 33 a7 84 e3 d8 6e 2c 85 0b 45 12 ea 37 4a 86 55 00 76 54 6b 29 3b 48 3a 1d 0c 71 ce c5 30 3c 43 0c 5a 4d ca 47 56 b1 a2 92 65 32 38 70 85 71 8e 23 69 d6 36 16 29 96 45 52 30 47 d7 ea 3d be bf f8 75 ae 97 24 d6 4f 57 1a 54 bb 48 b9 fd e6 f9 20 62 8e 73 c8 ff 00 9a 2c 7e bc f5 a1 87 2f 33 e4 1d f2 9f 85 55 bb 44 36 23 69 15 61 42 e3 f8 fc 8f f8 89 91 f9 c4 9d be 80 f5 b2 93 33 54 14 0e 9e 1f 1a 67 ba c9 89 6d 7c 81 ff 00 6c 5b 46 07 ff 00 4d 7c 90 78 c7 50 bc 63 2c fe 31 52 25 3d 93 fa 4d 2b 34 bb 49 1f f3 36 07 d0 0e 47 b8 e9 ea 44 23 36 a6 9b a5 93 3c e7 9c 1e 70 3d bd bf a9 e8 14 a8 9a b2 04 e9 51 7b e4 b8 5a 23 f5 af 4f 7f a4 32 93 c7 6e e3 ac fb a5 08 48 e3 9c 7b 8d 5f b4 4f 69 5c b2 53 53 cb ee Data Ascii: G45!K3n,E7JUvTk);H:q0<CZMGVe28pq#i6)ER0G=u$OWTH bs,~/3UD6#iaB3Tgm\|l[FM\|xPc,1R%=M+4I6GD#6<p=Q{Z#O2nH{_Oi\SS
2023-06-06 08:38:58 UTC	2899	IN	Data Raw: 56 b0 63 cd 70 7c 40 11 f5 67 8e b3 a1 ef 3c 3b a7 7e 53 a6 92 2a c2 8d a4 8c b4 35 30 c9 04 b0 ee f3 23 96 35 f3 54 e5 77 33 16 4c 92 57 f1 a8 04 32 90 41 eb 99 49 ec 8e 20 fc ef 5d 06 50 92 47 3f 9f f4 a7 4a 7a 82 0e d9 11 63 7f 52 2e 1c 1f 33 2a d2 2c 7f 89 f2 a0 28 68 cf 3c 1e f8 e3 a2 4e fd d5 0a 93 a6 9a 8f 9f 93 5a 99 f1 67 14 bf ba 34 55 69 05 e9 24 af be db aa 16 60 df 2a b5 35 54 94 95 30 c8 f0 b9 21 64 78 e9 18 e7 1e 96 51 d8 91 d5 96 07 6c 91 cb e3 56 ad 48 ca a4 f1 d2 b4 55 e9 e4 2a b1 ab a3 b3 c4 b2 43 93 1f 9b b3 1b e4 20 a0 c2 aa c7 ea 2c 79 23 23 bf 7b a0 83 a9 1f b5 59 29 a0 1c 54 d3 95 93 cd 8e 2d a2 36 8e 0d f3 4a fe 59 91 09 67 cc 51 45 4e 5e 33 93 92 e7 68 ed 93 c3 e4 6d 62 23 dd f2 69 c4 f3 34 4c 95 32 6f 90 e3 71 01 9a 40 ca a9 20 Data Ascii: Vcp\|@g<;~S50#5Tw3LW2AI ]PG?JzcR.3,(h<NZg4Ui$`5T0!dxQlVHUC ,y##{Y)T-6JYgQEN^3hmb#i4L2oq@
2023-06-06 08:38:58 UTC	2915	IN	Data Raw: 3c 43 cd 8d 08 95 01 55 18 f3 7d 59 00 29 fa f7 eb e6 e2 0c 13 3d aa fa 39 26 45 4a a1 11 b9 86 32 c4 bc 7e 6c 30 48 ee 05 43 05 aa 95 36 a2 36 25 97 cd 50 a4 6d 6c 31 03 b0 ea 9a c1 82 63 7e 1e 54 7b 53 b5 bc cd 4c be 69 94 d5 b2 ca b4 d2 2d 52 44 d1 fc cc c2 65 04 f9 6a 76 97 84 90 17 b2 be 3f 3e a1 52 64 c0 11 a7 0a 7a 36 86 b5 bc 98 a1 92 99 a1 91 95 27 85 69 15 a2 64 8e 31 1a cb 1f e3 6f 5b 8d dc 7e 11 93 ef d4 6b 4c 1d 4e 94 e2 b3 bb 5c 5e 9e 92 dd 1c 33 46 ec 5a b1 dd ab 63 89 e4 2a 7e 59 63 09 e7 49 0e d4 50 84 60 64 ee 07 3e dd 3b 09 12 a9 07 86 df d2 9c 6b 5f ff d3 d0 bb 5a 2c 33 b6 08 60 54 ae 18 63 19 c9 5c 1e 30 7a fc ca 27 39 d7 e7 f7 af d5 67 94 22 a6 d4 14 00 c7 11 c9 c3 6f 6c 0f ae ee f9 f7 20 8e ac a0 99 ef 02 b0 ee 17 00 8e fa 79 68 91 Data Ascii: <CU}Y)=9&EJ2~l0HC66%Pml1c~T{SLi-RDejv?>Rdz6'id1o[~kLN\^3FZc*~YcIP`d>;k_Z,3`Tc\0z'9g"ol yh
2023-06-06 08:38:58 UTC	2920	IN	Data Raw: b8 0e 33 da 6c 89 1f 3c ab 63 28 af 7b 91 72 cc 31 0b 61 94 33 00 48 d8 24 8d 00 1b e3 d8 dc e7 b9 f6 c7 57 83 c3 9e 84 7c fc fc 8c 95 b3 ac f7 d4 9a 19 b7 ed 2b bb 66 d5 70 77 04 31 a4 23 7e 39 c1 01 19 01 6c e0 63 bf 1d e6 04 90 39 55 75 26 35 3b fe f5 22 a3 9a 58 52 13 1c f3 26 06 7c c8 a5 91 41 dd b4 c6 e3 6e d2 5d c3 64 f1 80 0f f4 9d 0a 23 8c 1e ea aa e2 52 49 90 3c c0 a7 85 be dd d5 a2 41 75 ad da d3 ae 77 d6 d4 a1 8e 25 91 4d 44 8b bf 21 8a a6 e1 b7 80 7d 8f 1d 4c 1f 71 2a 04 28 83 3c ce 83 fd 2a b1 b7 65 40 92 81 b7 20 64 c6 94 e3 1e a9 bc 3b 2f 93 7d ba a4 45 91 97 6d 6d 42 61 94 bf 9a 06 65 0e d9 4c 71 b7 1c f5 71 ac 5b 11 6f f9 17 37 08 4f 72 d4 3e 3b 55 75 e1 56 0b 1f 6d 6e c2 95 de 84 9f 0e 15 04 ae f0 fb c3 9b cd e9 35 25 eb 43 da 2f 1a 92 Data Ascii: 3l<c({r1a3H$W\|+fpw1#~9lc9Uu&5;"XR&\|An]d#RI<Auw%MD!}Lq(<e@ d;/}EmmBaeLqq[o7Or>;UuVmn5%C/
2023-06-06 08:38:58 UTC	2939	IN	Data Raw: 51 ee af cf 59 43 1a 6c 15 35 6e 92 46 ad e9 48 a0 2e 07 f8 71 96 ee 3a 62 a4 77 9a 7c 8b 3c 85 25 15 5d b2 a1 8b 2d 0c d5 0e 8c 36 b5 45 44 8e aa 71 86 66 50 54 01 81 d0 ca 0f 02 4d 16 47 07 de 00 78 51 3f bc 37 12 29 e0 8a 9c 45 90 5a 28 87 20 af a8 96 6d c4 ed f7 e7 a2 cf c8 0a 41 10 7b 66 45 24 d7 42 cb b5 a6 32 c6 29 dd 94 8c 28 62 b9 e4 ae 3b 0f fa 74 19 c9 1d d4 41 00 19 03 b5 55 37 8b 8f 1d c7 c1 af 16 e0 a8 76 a9 a6 9f 4e ad 35 54 6f 90 9b 66 47 50 8a 55 95 b0 17 e8 78 ea f6 16 b2 9c 41 95 49 90 f2 3d f4 9c 4e 99 48 dd 0b f7 57 ce 9d 4f 87 f6 69 f3 25 a2 f1 70 b5 2b 46 ec b1 49 32 d6 c0 66 8d f6 28 db 51 97 0a 49 e3 0f 80 78 fc bd fd 18 83 a3 47 90 85 f9 41 f5 8f da b8 1f ab a0 fa 0a 23 e7 be 98 6a b4 a6 aa a0 0e 69 2a 2d 97 68 54 32 70 5a 8e a4 Data Ascii: QYCl5nFH.q:bw\|<%]-6EDqfPTMGxQ?7)EZ( mA{fE$B2)(b;tAU7vN5TofGPUxAI=NHWOi%p+FI2f(QIxGA#ji*-hT2pZ
2023-06-06 08:38:58 UTC	2941	IN	Data Raw: a8 97 4f 55 ea 26 b6 56 d0 78 4f a8 2b 27 83 41 ea 35 b9 50 4d 55 43 7f b7 57 41 10 8a a2 be 9e 76 33 5c 69 dc 4a 62 76 31 2c 37 38 82 ee 9a 67 16 bb 75 b6 30 db 95 96 d0 b1 97 22 9f 4a 02 9c 42 93 95 45 2b 83 99 29 54 43 4a 00 48 04 d5 9c 1e f2 e3 a4 56 8c 37 61 88 da a5 56 a8 42 56 52 de 65 15 6a 20 21 79 16 3d 18 51 82 02 f3 6b a8 98 0e 90 d7 17 eb 4e b6 d3 96 4d 07 47 e2 40 9f 50 5c 29 26 b1 58 ac de 20 fe e4 5b e5 5d d6 bd a8 a3 a8 77 8a d7 51 64 ba da 98 cf 2c 55 93 4c b1 ca ac d9 f9 92 4b 1e ae 5e e1 d8 5b f8 7a df c4 97 6a 2d da 04 2d 4e 34 25 b2 13 f8 8a 92 a4 2a 34 4c 4a 72 e6 05 21 35 af 8a 60 45 76 2f ae ed 76 bd 7b 60 ad 6e 06 12 b0 1b 48 cc a4 90 32 10 a1 e9 27 52 4a a3 42 48 ae da dd fe 1f be 2c 74 75 ab 4d 5d bc 2f f1 ca c8 d6 f3 53 25 45 Data Ascii: OU&VxO+'A5PMUCWAv3\iJbv1,78gu0"JBE+)TCJHV7aVBVRej !y=QkNMG@P\)&X []wQd,ULK^[zj--N4%*4LJr!5`Ev/v{`nH2'RJBH,tuM]/S%E
2023-06-06 08:38:58 UTC	2957	IN	Data Raw: a9 dc 47 70 0e 09 3f ae 06 73 d5 a6 d5 ea 34 60 c1 ef aa 1b 5b 58 e9 6e 74 a5 2a a2 2c f4 ec d2 c1 32 90 93 53 ca 78 dd 0c 9c 91 bf f9 97 95 71 dc 76 c6 8b 2a 9e cf 13 57 2d 71 0b 9b 07 83 d6 e4 05 71 07 65 0e 44 7c 77 1c 29 9f 41 ea 67 b5 d4 1b 6d 64 d9 10 6c 42 c7 21 bc a2 76 c5 3e 3d 44 21 c9 5d c0 10 1c 60 fb 67 1b 17 c3 b3 27 3a 46 fa 83 cf bb c7 ba be 9f fa 35 e9 cb 17 6c 03 98 a5 68 84 b8 89 92 83 c0 f7 a4 fd d5 46 b1 06 08 8a da 6b 35 e9 91 62 92 19 10 b2 05 64 de 77 a1 de 0b 51 d4 6c 19 12 04 a8 0a 33 ce 1b eb 91 9e 02 e6 d9 49 57 77 ed b8 f5 6b 5f 4b d8 df 31 73 6e 79 c0 fb d0 08 56 81 43 b8 9e c9 ef f1 ad bc f0 07 4c 51 78 93 e2 1e 9b d3 77 13 3c 76 1a 70 6e 3a 89 a9 a4 31 d4 4b 67 b7 79 52 49 4d 4b 54 a5 5a 96 a2 f1 3b 2c 0e d9 dc ab 31 71 c8 Data Ascii: Gp?s4`[Xnt,2SxqvW-qqeD\|w)AgmdlB!v>=D!]`g':F5lhFk5bdwQl3IWwk_K1snyVCLQxw<vpn:1KgyRIMKTZ;,1q
2023-06-06 08:38:58 UTC	2960	IN	Data Raw: 5a 6c 43 68 42 7c 00 14 61 36 e8 94 a8 b8 51 03 80 48 15 11 90 99 ed ef 8d a7 03 8e a4 6d 8b 9f c0 b8 f0 34 0a 75 13 da 22 7c 69 d6 8a 9e 8a 74 55 12 ad 41 dd f8 20 60 db 8f d5 76 83 93 d4 a5 8b 94 eb 91 43 c8 d4 2b b8 68 7d e4 8f 31 4f 95 94 86 d9 41 1d c2 7b 6c f1 51 34 89 10 ab 9e 29 16 32 ed ff 00 0d 4b b2 2a a8 62 40 1f 53 d1 b5 67 74 f2 b2 b6 da 8a b7 da ab ae fa d1 bf 4d c4 03 e2 2a b4 bd 78 9d a5 f4 e5 70 a0 bd 32 5b 67 7f 29 f7 d4 b4 4a ab 1c a7 d3 2a 65 89 74 23 9e dd ba d8 b7 e8 d6 21 70 8e b0 08 1f 3b d6 7b d8 f6 1c d6 99 c9 3d c3 4a 4e ef e3 2e 81 b6 d3 59 e7 b5 57 57 ea 5a db b7 9d b6 9a c3 6e ab af 5a 78 a1 7d 9b a6 f9 78 8a c6 c4 8e 06 7a b0 df 45 ae e4 87 d4 db 61 23 75 10 26 ab ab a4 2c 7f 74 db 8b 9d a0 55 c5 e1 96 a2 d3 9a ae 9a e7 59 Data Ascii: ZlChB\|a6QHm4u"\|itUA `vC+h}1OA{lQ4)2Kb@SgtMxp2[g)J*et#!p;{=JN.YWWZnZx}xzEa#u&,tUY
2023-06-06 08:38:58 UTC	2972	IN	Data Raw: fa 86 9e da ce 76 fd b0 61 a0 a5 f8 08 13 e2 7f 6a d7 dd 4d e3 9e bb bc 6e 86 89 ec ba 42 9c f3 b6 db 4c f7 4b b0 1f 87 3f 3d 5c 25 0b 21 c7 78 e2 4c 7d ba d8 63 0c b7 6f 55 e6 70 f7 e8 3d 42 a8 39 7a fa f6 29 47 86 a7 db 54 65 da be aa f5 3b d4 5d eb 6e b7 f9 ff 00 10 9a f1 5d 34 ea a4 9e e2 02 ec 91 8f a2 a8 1d 6a b6 90 d0 86 c2 50 3f 28 ac e5 cb aa 25 64 a9 5d e6 a2 b5 f6 f9 aa a3 68 f7 3c 51 15 0b e5 c0 16 18 70 bc 81 b5 7d 64 60 01 ce 4f 56 db 75 28 d7 73 df bd 55 75 85 2e 79 72 1a 0a 2f 4b df e6 b0 4f 15 a2 e6 0c 74 65 b6 d0 54 c9 26 04 61 8f fe 6b 2e e2 59 61 0c 7f 86 e7 8e 76 9f 6e a2 bd b5 4d ca 4b ec ea be 23 e3 e3 ce bb ae 87 74 91 58 6a 93 85 df 2a 2d f6 6d 47 84 fd c3 c8 7e 13 df 97 95 6c 96 94 d5 d7 9d 2f 5f 05 df 4f 5c a7 b5 d6 c7 b1 bc ea Data Ascii: vajMnBLK?=\%!xL}coUp=B9z)GTe;]n]4jP?(%d]h<Qp}d`OVu(sUu.yr/KOteT&ak.YavnMK#tXj*-mG~l/_O\
2023-06-06 08:38:58 UTC	2988	IN	Data Raw: 9f 46 fa 47 60 ac 43 0d b9 42 12 dc 07 1b 79 49 69 d6 89 1a 66 0a 54 29 27 ee ad 0a 52 55 dc 74 1a 13 f1 b7 f0 61 7b f1 db c2 bb 8e 9c d6 5a 1f 56 5b 69 a8 a7 86 f3 a6 75 44 5a 2a ff 00 45 77 d0 fa 86 99 25 8e 96 fd 63 ab af a0 34 73 a4 91 39 a7 b9 51 4d 34 70 5c a9 1c a4 8c ae b1 49 1e 9f 47 31 4c 67 a3 b7 69 bd 36 d7 29 6e 08 58 5b 2e 25 2b 41 dd 2a 56 51 a4 ea 95 6a 50 ad 40 89 06 ef d6 ba 3d 8c 32 70 ff 00 ae 5b 29 c2 65 25 0f 34 a5 a5 5c c0 cd af 7a 76 50 91 c8 8f 98 0b 85 a3 c4 bf 86 5f 10 17 c3 bf 13 20 a5 a0 8b e7 20 b9 5b ef 51 c8 cb a7 35 05 a6 9e ab cb 3a 87 4e dc 26 20 2c 48 41 5a aa 29 88 a8 a2 94 95 90 7e 17 7f 60 74 61 7d 26 c3 8e 27 87 12 55 90 85 27 42 a4 92 3d 15 81 c7 f0 a8 68 a1 ea 1b 3d 14 e9 16 33 d1 0c 55 ac 3e ed 49 fa 92 df 42 c2 Data Ascii: FG`CByIifT)'RUta{ZV[iuDZEw%c4s9QM4p\IG1Lgi6)nX[.%+AVQjP@=2p[)e%4\zvP_ [Q5:N& ,HAZ)~`ta}&'U'B=h=3U>IB
2023-06-06 08:38:58 UTC	2991	IN	Data Raw: 2b ca c7 f4 45 dd c9 03 df a5 42 0e b2 76 af 56 52 18 a9 49 77 a9 55 f3 98 65 04 7f e1 4f 60 c3 fe 9d 2a 5d e3 d5 58 d5 d5 55 46 88 d1 2a c4 b1 c8 55 15 db 77 9a a7 bc ac 07 3c 03 cf 4d af 01 44 90 93 be f5 9d 3d 52 c1 52 be 70 8a 79 1a 32 19 91 b2 30 e3 3e c4 8c 63 a7 20 83 14 ca 19 86 9a 01 5f 84 52 cd eb 87 6c 11 ab 7a e5 dd eb 53 df 6f d3 6e 30 31 d3 10 74 8d a9 c9 00 c1 a2 a1 14 91 cf 1d 44 ce d5 32 55 06 50 88 a4 ec 64 1c 48 cc 30 19 79 fc fa 2d 3c e9 76 88 20 08 8a 74 8e 95 6a 29 db f8 4e 71 22 bc b2 67 82 33 94 55 c7 63 81 8e 9c e9 a7 1a 0c f0 ae 1b 51 54 90 d4 33 a4 8a f0 40 19 cc 4b 1c 84 48 f8 41 8d ec ab 9c 02 06 7a 49 0b d4 c8 cb 4c b2 98 8d 49 e7 59 6e 8a 9a a1 fe 7a a9 26 73 1e 50 a6 23 55 c9 e7 d2 49 38 ed 80 06 7a 61 00 9c c7 4a 5d a2 9e Data Ascii: +EBvVRIwUeO`]XUFUw<MD=RRpy20>c _RlzSon01tD2UPdH0y-<v tj)Nq"g3UcQT3@KHAzILIYnz&sP#UI8zaJ]
2023-06-06 08:38:58 UTC	3004	IN	Data Raw: 13 c8 cf db ff 00 7c bc 69 25 39 be d1 c2 72 53 64 f2 55 49 4e c9 24 ab 1b b0 c8 31 92 be ac ee 6e 41 19 63 8f 6e e7 bf 6e 9c 54 88 4a 0a 86 41 a4 eb 3a e9 cc 79 d2 6f 55 52 b4 2a b3 97 58 95 e3 5d db 81 92 50 a7 71 05 8e 38 39 f6 ef d2 81 44 94 23 ad 27 4d b6 8d 38 79 52 94 ec d2 13 24 8a 42 30 5d ab b8 96 2b d8 05 1d c7 1d 2a 4b 6d 19 72 88 0a 3a fe f4 e9 44 b1 b4 f3 42 81 44 d3 c7 93 e6 85 db 18 1c e1 09 c0 56 00 7e 7d 35 44 e6 7c 89 9d 53 3a 69 c3 9d 61 44 92 ca d5 90 a9 1b 61 3b 5b dc 90 37 72 4f 7e 71 9f b7 4f 46 e7 52 8e d8 99 3c b4 f8 56 71 4d 39 54 1b 55 d1 1b 6a 44 8a 14 92 49 e5 8f b8 53 db fe 9d 2a 65 34 83 a2 74 3c 49 e1 fb cd 3a 8a a9 c2 d4 05 44 92 30 a3 64 6c b8 f5 e4 02 1f 04 1c 71 db df fc 91 a6 ea da cc 13 3a f1 ef a4 60 81 e5 53 e6 4a Data Ascii: \|i%9rSdUIN$1nAcnnTJA:yoURX]Pq89D#'M8yR$B0]+Kmr:DBDV~}5D\|S:iaDa;[7rO~qOFR<VqM9TUjDIS*e4t<I:D0dlq:`SJ
2023-06-06 08:38:58 UTC	3016	IN	Data Raw: b7 7c ac 34 77 06 a2 a9 48 e9 60 ae 29 f3 35 d5 8f 54 db ee 37 49 93 02 1d b0 82 82 56 66 66 44 52 0f 41 84 63 2d 58 24 ac 24 17 12 64 13 a9 3c 12 98 d9 23 ef 13 c8 44 12 74 cb bc b6 55 d0 4b 6a 51 08 5c 88 1a 00 3f 17 32 78 01 cc ce d5 de 9f d8 e3 f0 79 43 a3 b4 b6 aa f1 66 ba d2 b4 36 ad 6f 69 a3 d0 3a 4a 9e e7 04 c6 fb 59 a4 34 fd e5 2e 7a 96 ef 2d ce a8 bc f3 d9 f5 9e a1 b7 d3 42 52 24 58 e7 82 da 72 c5 24 23 af 60 fa 3b b1 b9 c4 14 fe 3f 88 19 eb e5 b4 40 80 53 98 15 94 8d b2 a8 80 9e f0 93 c0 99 f1 2f a5 2c 71 8b 65 5b f4 73 0e 27 fb 3f da 39 ac c2 ca 72 a0 13 c5 68 49 52 b5 d8 ac 69 23 4f a2 9b 35 05 35 2c 2b 1c 6b 1a aa 20 51 b1 57 85 1c a8 56 6d db 70 00 1c 01 d7 b4 32 da 52 00 11 1f 3f 3a 57 87 29 52 64 ef 4f 92 22 05 c9 1b b8 3f 88 93 df bf 19 Data Ascii: \|4wH`)5T7IVffDRAc-X$$d<#DtUKjQ\?2xyCf6oi:JY4.z-BR$Xr$#`;?@S/,qe[s'?9rhIRi#O55,+k QWVmp2R?:W)RdO"?
2023-06-06 08:38:58 UTC	3022	IN	Data Raw: bd 45 e5 ac 7d e1 a1 07 70 6b 93 c5 6c d7 67 72 52 7d 13 a8 23 62 0d 4e 0a 1a 67 0e 02 81 14 b8 76 23 68 88 31 0c a8 4a aa b6 4b 12 03 e7 3c 63 b7 5a 19 32 1f 03 f3 fe b3 54 0a b3 0a c6 79 96 34 90 6d 91 5a 39 55 83 60 06 91 8b 6d 50 5c 0e 0b 3e 08 60 76 b6 3d cf 46 a5 00 08 1b 8f 9f 9e 14 c3 5d f6 a4 5a aa 55 96 46 8d 10 ac 9b 5c 00 82 40 a1 86 46 73 e6 6d 72 49 c8 cf 4c 56 a9 d0 0f 54 d3 40 35 ff d7 b5 12 25 8a 9e 37 95 a4 2d e7 b2 19 7c ce 3c c9 38 e4 02 3d 25 8f f5 eb f1 d8 57 ea 21 a1 e4 8d 5a a6 09 3c dc c4 ad b6 59 33 b4 0c 8f fb b4 ff 00 1e 38 27 b7 4f c2 38 54 81 c8 41 4f 1e 1a 7a e9 c1 8a 40 4a 90 c5 10 17 4f 56 10 7f ed 00 72 5c 91 f9 1f 7e 9a 82 89 aa 9e 9c ac 0c c8 c6 53 0c 60 98 c9 3c 96 c6 e7 1e f9 3f e7 d2 a5 5a cf f1 59 4c 95 1e 16 5f 20 Data Ascii: E}pklgrR}#bNgv#h1JK<cZ2Ty4mZ9U`mP\>`v=F]ZUF\@FsmrILVT@5%7-\|<8=%W!Z<Y38'O8TAOz@JOVr\~S`<?ZYL_

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
78	192.168.2.4	49861	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:58 UTC	2694	OUT	GET /content/dam/hsbc/gb/images/16-9/learning-to-ride-1.jpg/jcr:content/renditions/cq5dam.web.590.1000.jpeg HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373
2023-06-06 08:38:58 UTC	2711	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 54880 Connection: close Date: Tue, 06 Jun 2023 08:38:58 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains Last-Modified: Fri, 02 Jun 2023 17:41:15 GMT Accept-Ranges: bytes S: dispatcher3euwest2 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=2592000, s-maxage=2592000 X-Cache: Miss from cloudfront Via: 1.1 c4c822c878c22be90d0bb70ab49a395a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: 9IrXquPqMXDvg_K7_2NeoUutoJvc9VHVWCwpMn84AqC7AmxxBM4NHw==
2023-06-06 08:38:58 UTC	2711	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 4b 02 4e 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFCCKN"}!1AQa"q2
2023-06-06 08:38:58 UTC	2735	IN	Data Raw: 80 4d 8b c9 39 ef 5e dd 49 de 4a c7 bd 4d 2b 3b 9e d7 e0 eb f9 3c 53 a0 34 37 4f 89 50 e3 77 72 2b 89 f1 22 47 6f 71 f6 61 83 24 2e 41 6f 51 5d 5f 84 21 96 d3 49 69 ed d0 38 63 8e 3a 8a e5 fc 61 3a c1 70 2e 9e 0c 89 14 9e 3a e6 ba 1f c3 a9 87 52 94 f6 d0 b4 50 2c 60 35 ba c4 32 07 62 6a 00 88 88 f6 f2 c6 b3 41 2a 34 6e 5c 7c a1 48 ef 5b cc 74 db 6f 0f 2a ca 3c 90 10 48 cc a7 9f a5 70 b7 da dc 9a 84 81 20 85 bc a0 72 80 f0 3e bf 95 3b 5f 71 a7 63 e7 af 89 be 1c 9f c3 5a c9 88 45 f6 fb 37 2d f6 79 4b 10 d1 e0 fc ab 8c 72 39 f5 07 8a e4 f4 ad 26 e6 de f5 f5 1d 52 e4 6f 70 ab 1d b4 59 11 c2 30 3d 49 25 8e 32 49 fd 2b dd fe 21 e8 b7 da fc 16 df 67 b5 8e 60 84 f0 48 07 3d b1 9a f0 4b cd 74 df 6b 97 5a 2c 0b fe 9d 68 0b 49 13 21 52 39 c1 ed ce 08 af 92 c6 61 e5 Data Ascii: M9^IJM+;<S47OPwr+"Goqa$.AoQ]_!Ii8c:a:p.:RP,`52bjA4n\\|H[to<Hp r>;_qcZE7-yKr9&RopY0=I%2I+!g`H=KtkZ,hI!R9a
2023-06-06 08:38:58 UTC	2791	IN	Data Raw: dc ad 32 f9 b3 88 c7 2a ab 1f 1c 93 8f bc 40 00 93 cf 43 a3 ff 00 0b 5a c7 4c bd 9e ea c7 c3 d6 31 6a 04 6c fb 73 ae f9 36 f6 00 9f c6 b9 79 7c 7d ab dc eb 67 55 96 e2 4b a9 ba 4d 1b 37 12 27 a7 b1 1d ab cb a7 53 0d 0a b7 9e cf 4f 24 8f 61 e5 f8 a7 49 f2 da eb 6f 33 d8 bc 31 0e 95 f0 be ca 7b 5f 0e 5b b9 f3 dc bc b7 57 2e 5e 59 18 f5 3e 8b f4 50 05 25 d5 fc ba 9b 79 cf 2b 48 5b bb 1f d2 b3 2c ef 63 d5 2c e1 b9 85 83 c5 2a 86 52 7b d1 0e f1 2b 05 fb a7 86 1e fe b5 f6 11 f6 74 e2 94 34 47 c7 49 54 9c 9f 3e e5 b3 1e 7b 7e 34 e4 c0 7d b9 c9 f4 a7 db db 4d 75 91 18 2e 00 cb 15 e8 3e a6 ac ea 1a 24 d1 e8 d3 49 63 2a 3d f6 d2 63 4c e1 4e 3d eb 9e ad 75 14 d9 b4 29 6a 70 5f 15 7e 24 59 fc 37 f0 cd c5 f4 80 5c 5f 32 91 6b 68 3a c8 fd b3 e8 a3 b9 ae 47 c1 9f 08 b5 Data Ascii: 2@CZL1jls6y\|}gUKM7'SO$aIo31{_[W.^Y>P%y+H[,c,R{+t4GIT>{~4}Mu.>$Ic*=cLN=u)jp_~$Y7\_2kh:G
2023-06-06 08:38:58 UTC	2807	IN	Data Raw: d0 74 9b 6a 50 ec fa 74 fb bf c8 fd 0f 97 da 47 95 d9 fa 9f a4 7e 16 d4 24 d6 7c 39 a4 df 4c e0 4d 73 67 14 cf 81 8f 99 90 13 fa d6 ba a0 fe f6 6b cd 3e 00 ea af ab 7c 2f d2 bc db 81 3b db 97 84 1c f2 a0 1c 81 fa d7 a2 09 40 c1 dd c1 e3 ad 7f 48 e1 6b 2a f4 21 55 75 49 9f 92 62 a9 3a 35 e7 4f b3 65 d0 a3 19 38 18 ae 7f c6 9e 06 d2 fc 65 a4 5c db 5d da 42 d7 12 46 44 77 01 46 f4 6c 70 73 d6 b5 04 9b 40 c9 e0 d4 77 77 90 da 5a cf 34 ee 23 85 11 9d d8 7f 0a 81 92 7f 2a de a4 21 56 2e 13 57 4c e7 84 e5 4e 4a 51 76 68 fc fe f1 16 9b 71 a3 ea d7 36 72 0d af 0b b2 31 1d 41 07 14 fd 2b 52 1a 69 01 c7 9a 08 e8 dd f3 e9 5e 2f e1 af 8f ba af 8c fe 2a ea 3a 3a d9 c5 a8 d9 ea 17 93 fd 8a 49 8b 09 87 2c 53 73 64 f5 ef c7 19 ae f4 78 90 db 38 37 1a 6d e4 57 6b 90 f1 6c Data Ascii: tjPtG~$\|9LMsgk>\|/;@Hk!UuIb:5Oe8e\]BFDwFlps@wwZ4#!V.WLNJQvhq6r1A+Ri^/*::I,Ssdx87mWkl
2023-06-06 08:38:58 UTC	2826	IN	Data Raw: f8 8d e1 14 d7 75 29 a4 96 42 d6 93 5a 35 b3 5b 71 b1 dc 91 96 3f 40 06 3e a6 bc ab c1 fe 22 d1 3e 09 f8 c7 c0 7e 07 b4 82 49 64 d5 e7 9a 08 7c 90 09 4c 29 cc 8e 0f 62 c7 a8 f4 35 cf 9f ce 58 88 d0 ca 57 fc be 9a 4f fc 11 f7 a5 f8 23 97 03 08 d3 73 c5 ff 00 24 7f 17 a2 3e 9f 8a 04 85 16 30 ab b5 40 00 0e d8 e2 94 80 42 90 81 4f 7c 73 55 5a e0 ec 07 23 9f 4e f4 f3 74 71 e8 0f 5e 78 af b6 56 4a c8 f0 dd fa 8f 79 3c be 32 a3 03 38 15 13 5d 32 a8 04 13 9e 98 19 a6 3b ee 42 43 1c 67 92 78 a8 98 89 3e e3 11 8f a8 a4 db 19 23 de bf 27 1b 71 c6 7d ea 31 78 c4 90 5b a7 39 a6 48 30 42 ee dd cf 53 eb 4d 38 04 b1 5e 07 27 9e 4d 4d d9 4a c7 cb df b7 ee a1 0a 7c 39 b2 81 cb 1d f2 97 1b 47 0a 47 af b7 3f a5 7e 69 5c 33 49 21 24 60 0e 95 f7 9f fc 14 1b c5 8b 05 f6 9d a2 Data Ascii: u)BZ5[q?@>">~Id\|L)b5XWO#s$>0@BO\|sUZ#Ntq^xVJy<28]2;BCgx>#'q}1x[9H0BSM8^'MMJ\|9GG?~i\3I!$`

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
79	192.168.2.4	49865	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:59 UTC	3417	OUT	GET /content/dam/hsbc/gb/images/articles/16-9/9840-person-gardening-2000X1125.jpg/jcr:content/renditions/cq5dam.web.590.1000.jpeg HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373
2023-06-06 08:38:59 UTC	3417	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 71856 Connection: close Date: Tue, 06 Jun 2023 08:38:59 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains Last-Modified: Fri, 02 Jun 2023 17:28:56 GMT Accept-Ranges: bytes S: dispatcher2euwest1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=2592000, s-maxage=2592000 X-Cache: Miss from cloudfront Via: 1.1 a8d866886b5d25a5cfcb0df362279f88.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: YvfgQpRhE06dTyYdg35YXRJEAk-zMSsFUhA_NRkpqd26K0pa5co4VA==
2023-06-06 08:38:59 UTC	3418	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 4b 02 4e 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFCCKN"}!1AQa"q2
2023-06-06 08:38:59 UTC	3433	IN	Data Raw: be 3b 7f 0d 6b 56 10 2d 9d fd a9 77 92 47 0a 12 4c 64 9d d8 fc b0 2b 0b c1 9f 10 b4 19 cd 96 89 a3 cc f2 dd a2 6e 73 7e bb 9d c1 1d 03 7b 57 12 75 58 75 ef 8c e3 43 9e de f4 4e aa d2 5e 6c bc 08 b2 45 b7 9d 9e e3 8f 4f ad 72 49 4a 96 23 d9 51 9a b4 ae f9 16 c9 36 af d7 f1 b7 73 db 8d 25 83 8b 73 97 bd 6e d7 35 3c 57 a6 78 7a eb 47 f1 24 b3 69 71 c5 35 99 36 91 4b 08 2d bf 1d 5c b0 18 ed fa 57 c9 3a e4 51 a5 fc b6 76 2d f6 9b 77 3c 3b 71 fa 57 d2 da 55 d5 e6 b7 e1 eb cf 0d e8 57 b0 e9 5a 55 cc 8e 6d 24 d4 1c 38 28 09 fe 3f a0 af 9b 7c 46 a9 a3 5f dc c3 15 c4 4c 60 7d b2 ca bc ee 61 d7 07 d2 af 2e 84 97 3c f7 4d d9 6b 7d b4 3c 6c 55 77 39 6a df fc 03 9d d5 6c 85 9d 9a 00 08 71 d5 50 75 cd 7a 15 97 c3 29 34 1f 00 da 78 87 50 d5 6d ad 45 ec 81 23 b2 57 dd 30 Data Ascii: ;kV-wGLd+ns~{WuXuCN^lEOrIJ#Q6s%sn5<WxzG$iq56K-\W:Qv-w<;qWUWZUm$8(?\|F_L`}a.<Mk}<lUw9jlqPuz)4xPmE#W0
2023-06-06 08:38:59 UTC	3449	IN	Data Raw: e7 76 0e bc 9b e5 8e c6 5f c4 af 13 db 6a 3e 19 d4 ec d9 8b 15 84 11 ec 6b e6 48 75 bd 43 c2 ba ad 86 ab a6 de 9b 7b e8 a5 57 84 46 3e 61 83 d4 d7 b8 f8 96 e6 d6 5d 26 ea 50 08 96 68 ce f5 c7 18 15 f3 d6 ab 6b 70 36 de c0 07 18 53 eb 8a fa 2c 27 99 ea 66 0b dc 47 a7 6a 3e 31 3a fc 51 47 7d ac 35 be a5 ac ce ef 73 79 a8 a8 16 ea 0f 70 47 7f ca ab 7c 26 f0 86 a1 ae f8 86 e3 4d f0 fa c5 aa dd 46 c4 19 ad d8 05 64 07 05 b2 7b 56 36 b3 f0 e2 58 bc 29 a4 5d ea c9 75 6c fa 89 f2 f4 eb 69 0e 36 39 3d 5c 1e 8a 7a e6 be c1 fd 9b fc 15 e0 7f 80 3a 06 9f a8 f8 9b 51 d3 c7 8a 64 85 8b c3 04 de 63 30 63 c6 07 e1 d4 8c 75 ac 31 75 63 87 a7 cb 0f 8e 5f d5 ff 00 ae a7 8b 0b c5 de 27 8c fc 46 f8 6f aa 78 0e 50 da 93 5b 91 79 19 64 10 49 b8 82 3a 82 08 18 af 28 d2 06 0c b9 Data Ascii: v_j>kHuC{WF>a]&Phkp6S,'fGj>1:QG}5sypG\|&MFd{V6X)]uli69=\z:Qdc0cu1uc_'FoxP[ydI:(
2023-06-06 08:38:59 UTC	3450	IN	Data Raw: 54 db e7 a0 f9 e2 6e cd f8 57 98 78 ab f6 7f f1 af 86 d8 dc e9 fa 3d cf 88 b4 77 24 c5 a8 69 31 1b 85 23 d1 95 32 c8 47 7c 8a f5 15 09 28 a9 53 d5 1c 78 6c ce 84 a6 e8 e2 1a 84 d6 d7 d1 3f 47 fa 6e 70 93 dc ce 8c 1d 18 80 0f 50 6b 6f 4c d4 7f b4 a1 31 96 02 75 1c 67 bd 67 4b a6 6a 16 2c d1 ea 1a 6d dd 91 e9 fe 91 03 a6 0f e2 05 76 7f 0e fe 03 f8 97 e2 35 85 fe a5 a2 4f 65 6e 96 72 ac 6b f6 c9 4c 62 56 23 24 29 00 8c 81 8e be b4 a3 4e 73 97 2c 56 a7 a5 8a c4 61 e8 d2 f6 b5 a6 a3 15 d7 a6 a6 0f 9c d1 93 9c c6 e3 be 38 a7 9d 77 74 7e 4b a8 2d db 1d eb bd f1 1f ec fd e3 fd 3b 49 7b 89 b4 a8 a7 96 2f bc 96 37 51 cc ce 3d 42 03 b8 fe 03 3e d5 97 f0 3f c1 56 9a fd f7 88 35 0d 6c 79 56 fa 34 71 ac b1 cf 19 f9 5e 47 29 f3 02 3b 60 f0 79 fe 9b c3 0f 51 cd 53 6a d7 Data Ascii: TnWx=w$i1#2G\|(Sxl?GnpPkoL1uggKj,mv5OenrkLbV#$)Ns,Va8wt~K-;I{/7Q=B>?V5lyV4q^G);`yQSj
2023-06-06 08:38:59 UTC	3466	IN	Data Raw: 30 c0 1e a0 9a f4 af 04 e8 17 4b a6 f8 b6 fe e1 e3 bb 69 6d 22 d3 20 30 9d fb 9a 47 dc c1 71 ed 10 07 d9 ab d6 c9 6b d4 a7 8a 54 17 c3 3d 3f e0 9c 75 ac a2 db e8 79 c4 9a 71 d5 75 1b 9d 66 6e 31 21 62 23 18 47 62 73 81 d8 01 9a f7 3f 83 7a 4d bc 9e 11 f1 6c d7 1f bd 96 59 6d 04 a8 5f 0a a7 6c 87 03 d0 e0 8f d2 bc 87 c5 fa c5 c7 86 ae a3 b5 d2 76 cf 69 6c c2 16 21 37 a4 d2 7f 13 7d 33 9f ca be 89 fd 9f 0c 3e 28 f8 59 ac ea 3f 61 86 c2 69 75 67 b7 98 45 92 b2 94 82 26 07 07 38 fb fd 2b a3 1f 8b 96 33 30 5c bf c3 85 d2 b7 e2 cb c2 d3 70 4a fb b2 df 86 74 5b 0b 99 20 8d 21 7f b2 c2 41 93 2c 30 e7 b2 fb fa d7 a7 da f9 52 7d f7 55 03 a2 af 5a e5 6c 34 58 ec 2d 76 c0 93 30 27 25 10 60 55 b6 d7 ec b4 b5 cd fd 95 e5 bc 63 fe 5a f9 3b d4 7d 76 e4 fe 95 ac 63 27 aa Data Ascii: 0Kim" 0GqkT=?uyqufn1!b#Gbs?zMlYm_lvil!7}3>(Y?aiugE&8+30\pJt[ !A,0R}UZl4X-v0'%`UcZ;}vc'
2023-06-06 08:38:59 UTC	3470	IN	Data Raw: 6f 4d f5 a4 92 09 57 0d 9f 23 7e 57 3d 31 53 39 7b d2 4b fa 64 73 36 d9 ec 9e 11 d1 4f 89 3c 37 6e b7 b6 1f 67 8c 21 12 3c 92 82 a3 1d ca 9e 4d 6a bf 86 7c 1d 65 71 14 91 9b 29 c3 2e 4b 88 19 49 3d c8 2a 71 9a f3 9f 0c c5 ac 6a da b4 d0 de cf 74 d1 dd 46 56 31 86 51 b4 f6 f4 15 bf a5 7c 34 d6 55 62 b7 8c 1b 7b 78 5b 28 aa b9 3c 9f 52 c2 bc 69 a4 9d 94 ad e8 67 2b 77 3a 8d 4b 4b f0 be b7 65 05 93 5f fd 8d 21 2c 22 5c 73 cf 5e b5 de f8 2f c1 b7 7f 0d 7e 0e eb 9a dd 85 ff 00 db a0 99 a5 86 31 28 19 66 65 08 9b 06 3e f2 92 cd f8 0f 4a f3 fd 5b c1 b7 be 43 b4 f6 93 2a 22 03 b2 e2 25 95 5f 1d f2 0e 47 e7 57 75 ef 8a d7 37 de 0d f0 ce 85 a5 e9 7f 65 b3 d1 55 f7 bd 93 79 cd 23 b1 e5 9d 4f 40 2b d1 c0 e2 9e 19 ca 77 bb b3 4b d5 e9 f8 23 17 14 ce 06 3f 12 5e db 69 Data Ascii: oMW#~W=1S9{Kds6O<7ng!<Mj\|eq).KI=qjtFV1Q\|4Ub{x[(<Rig+w:KKe_!,"\s^/~1(fe>J[C"%_GWu7eUy#O@+wK#?^i
2023-06-06 08:38:59 UTC	3486	IN	Data Raw: de 33 a9 dc 1d 83 25 c7 23 8e f5 df e9 e0 47 63 6a aa 02 86 4c 1c 0e b5 f4 b9 3b f6 b3 94 5a d1 a3 bf 0e f4 6d 14 3c 35 36 a1 ab 78 78 cd 34 b1 c2 21 cc 64 48 a7 2f 8f 4a 8a f7 4b b9 bf d2 fc 9d db a3 95 4a b2 aa 1c 57 43 e1 6b 48 8e 9d 32 ed 3b 45 c4 98 01 88 15 4e 37 75 b8 70 24 70 32 46 37 9c 57 d8 46 3e e2 89 d6 dd dd cc df 0c f8 56 19 f4 86 37 06 28 1e dc 94 60 c7 05 b1 dc 56 5f 8a 74 ab 49 f4 f9 ed e2 71 03 14 20 49 19 24 e6 b0 f5 cd 77 50 5f 11 dc 5a 8b b9 3e cf b8 fc 99 e2 ad 58 df 5c 4b 1e d7 99 d8 1f 53 4a 36 51 b0 ed d4 d6 f0 36 92 9a fe 9b 02 3d ed ad 94 41 76 97 9a 1c 9c 8e b5 7f c5 5a 24 5a 0d a4 af a6 6a b1 5e ce ab 95 0b 18 0a a7 d2 b8 68 20 5b 5b a7 8a 22 e9 19 72 c5 44 8d 8c fa f5 a8 6c c1 b9 b8 91 25 79 1d 48 3c 19 1b 1f ce 9c 6f 6b 31 Data Ascii: 3%#GcjL;Zm<56xx4!dH/JKJWCkH2;EN7up$p2F7WF>V7(`V_tIq I$wP_Z>X\KSJ6Q6=AvZ$Zj^h [["rDl%yH<ok1

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
8	192.168.2.4	49704	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:19 UTC	147	OUT	GET /front_end/front_end_files/footer.css HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hs-login.online/front_end/front_end_files/ursula.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:20 UTC	208	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:20 GMT Content-Type: text/css Content-Length: 6773 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:40 GMT ETag: "1a75-5fd6542f2dc2d" Accept-Ranges: bytes Vary: Accept-Encoding
2023-06-06 08:38:20 UTC	208	IN	Data Raw: 23 66 6f 6f 74 65 72 4c 69 6e 6b 73 2c 0a 23 66 6f 6f 74 65 72 4d 61 70 2c 0a 23 66 6f 6f 74 65 72 55 74 69 6c 69 74 79 0a 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 65 34 30 34 35 3b 0a 09 77 69 64 74 68 3a 31 30 30 25 3b 0a 09 66 6c 6f 61 74 3a 6c 65 66 74 3b 0a 09 6d 69 6e 2d 77 69 64 74 68 3a 39 36 30 70 78 3b 0a 7d 0a 23 66 6f 6f 74 65 72 4c 69 6e 6b 73 52 6f 77 2c 0a 23 66 6f 6f 74 65 72 4d 61 70 52 6f 77 2c 0a 23 66 6f 6f 74 65 72 55 74 69 6c 69 74 79 52 6f 77 0a 7b 0a 09 70 61 64 64 69 6e 67 3a 30 20 31 30 70 78 3b 0a 09 77 69 64 74 68 3a 31 31 37 35 70 78 3b 0a 09 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 0a 7d 0a 23 66 6f 6f 74 65 72 4c 69 6e 6b 73 52 6f 77 3a 61 66 74 65 72 2c 0a 23 66 6f 6f 74 65 72 4d 61 70 52 6f 77 3a Data Ascii: #footerLinks,#footerMap,#footerUtility{background-color:#3e4045;width:100%;float:left;min-width:960px;}#footerLinksRow,#footerMapRow,#footerUtilityRow{padding:0 10px;width:1175px;margin:0 auto;}#footerLinksRow:after,#footerMapRow:

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
80	192.168.2.4	49867	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:59 UTC	3488	OUT	GET /content/dam/hsbc/ciiom/images/bank-accounts/16-9/1568-holding-child-smiling-together-800x450.jpg/jcr:content/renditions/cq5dam.web.590.1000.jpeg HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373
2023-06-06 08:38:59 UTC	3494	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 54289 Connection: close Date: Tue, 06 Jun 2023 08:38:59 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains Last-Modified: Tue, 06 Jun 2023 06:54:27 GMT Accept-Ranges: bytes S: dispatcher2euwest1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=2592000, s-maxage=2592000 X-Cache: Miss from cloudfront Via: 1.1 4ba99d04800d29b58ab9861f60991a2a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: _gQi4qCcN0TOk5rZw0ZxBiYvdp0HHxDQ-uUUcSBzJp5mtAohyiFn8w==
2023-06-06 08:38:59 UTC	3494	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 4b 02 4e 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFCCKN"}!1AQa"q2
2023-06-06 08:38:59 UTC	3510	IN	Data Raw: cb 62 38 25 f3 14 e0 60 e7 15 30 18 34 c8 57 6a e0 fe 95 25 04 c5 68 37 6e 68 3c 53 8f 00 9a 82 59 71 40 4a c9 12 7a 57 cd da de a1 f6 ff 00 8e da b8 5f 9c 5b d8 dc c4 30 7a 7c d0 03 c7 d4 1a fa 2e 06 66 e4 d7 cc 7a ac 37 56 9f 19 bc 50 0b 46 99 b6 b9 92 36 1d 70 d3 a1 e6 bd 5c 02 57 9f a7 ea 8f 9c cd e4 da a4 96 dc df 92 3e 95 b2 b7 f2 6d d4 72 7e b5 2b 39 03 8a 92 31 98 94 67 b5 0c a3 e8 6b cd bd de a7 b8 a3 65 64 67 cd 77 24 52 aa 2a 92 9e a6 ae 40 e4 8c 9e b5 05 d4 60 90 7b e6 a6 84 8d be f5 52 b3 8a d0 ce 09 a9 3b b2 50 f9 38 e9 9a fc c2 fd ad ad d1 7e 35 78 a5 9a 41 39 f3 b7 ec c7 29 f2 83 82 3f cf 41 5f a7 40 ed cf 19 af cd 8f db 4b c2 cf a5 7c 56 f1 4c ac 0a 9d 46 d9 6e 63 60 bc 05 2a aa 79 fc eb cc c5 e9 14 fc cf 53 0b ac 9a 3e 6a be d4 1e dc 86 Data Ascii: b8%`04Wj%h7nh<SYq@JzW_[0z\|.fz7VPF6p\W>mr~+91gkedgw$R@`{R;P8~5xA9)?A_@K\|VLFnc`yS>j
2023-06-06 08:38:59 UTC	3528	IN	Data Raw: 4c 86 4d 3f 5c 75 8c c5 0b 5d 23 20 3c 81 98 53 20 57 d0 46 fc 8d 1e 0c 92 f6 f1 7e 47 a8 1a 6b f1 9a 71 38 a4 27 8a 83 b1 ab 8d 8c e4 1e d4 fa 45 50 3a 52 e3 9a 04 b4 03 d2 a1 78 03 1c 9a 95 9b 14 c2 d9 a0 99 59 ee 0a 02 8c 0a f9 83 58 b7 30 fc 71 f1 44 32 39 6d f6 72 48 3f dd 79 90 81 5f 4f 8c f5 26 be 63 d4 ca 49 fb 43 78 84 48 43 46 2c 5b 24 9e 00 f3 97 8a f5 30 3a 7b 47 e5 fa a3 e7 73 64 bf 72 bf bc ff 00 26 7d 27 13 9f 2c 01 d4 53 67 91 94 7b d5 88 90 04 e0 0a 8a 58 b3 26 4f dd f4 af 3d 35 73 d9 92 76 2b b1 76 c7 04 8a 96 2e 7b 63 15 6c 20 db d2 98 61 03 24 50 e5 71 aa 6d 6a 46 bc 8a f9 e7 f6 c0 f8 2c df 10 fc 3d 6b ad d9 28 37 da 64 32 44 eb 8e 5e 26 03 3f 91 00 d7 d1 01 31 9a 6d d5 bc 77 70 c9 0c a8 24 8a 45 da ca dd 08 3d 45 73 d6 a6 aa c1 c1 9d Data Ascii: LM?\u]# <S WF~Gkq8'EP:RxYX0qD29mrH?y_O&cICxHCF,[$0:{Gsdr&}',Sg{X&O=5sv+v.{cl a$PqmjF,=k(7d2D^&?1mwp$E=Es
2023-06-06 08:38:59 UTC	3560	IN	Data Raw: b6 3c e9 46 32 92 be e7 a5 7c 36 d5 52 6d 04 99 63 f3 9e 27 2a 84 8f 4e 6b 72 1b e9 ae 49 81 99 98 73 85 e9 93 58 de 05 43 6f e1 f6 85 e2 64 06 43 2a 37 66 04 75 15 a7 31 db 2e e0 a4 10 b9 cf 4c 56 f7 b9 df 4a ea 11 57 25 8e 56 b7 66 86 45 5c c8 76 93 d4 a1 a6 b4 8e ee 77 30 27 b0 1d 2a 84 93 2c 50 a3 70 3b f5 e7 35 1b 4e d3 29 6c 05 04 67 02 b5 d4 cf 9e 36 b3 36 6c 2f 5e 2d a1 31 b4 1c 11 5e 17 a9 cf 3d b7 ed 11 e3 39 23 55 24 58 c1 92 7f bb f2 d7 ae 5b 4e 61 90 64 9c 1c 64 d7 90 de dc 11 fb 40 f8 cb 74 5b 9d b4 e8 95 15 b8 fb a5 7f 3a e9 c3 c7 de 6f cb fc 8c eb 4b dc 49 f7 ff 00 33 dc 7c 39 a9 01 a1 db 79 45 fc b5 55 08 b2 0f 98 0c 0e b5 a5 15 fc b2 4b 8c fc b8 cd 72 b1 4a 6c ed 4a 02 7a 8e 09 cf f0 8e f5 b7 a6 3f 98 00 24 6e 0b d8 d7 2c 92 bb 67 a5 0b Data Ascii: <F2\|6Rmc'NkrIsXCodC7fu1.LVJW%VfE\vw0'*,Pp;5N)lg66l/^-1^=9#U$X[Nadd@t[:oKI3\|9yEUKrJlJz?$n,g
2023-06-06 08:38:59 UTC	3592	IN	Data Raw: a7 95 f3 6a ec a8 a0 2c 6c 09 dc d8 e4 7a 0e 7d ab d4 34 7f 88 9a ae b7 10 30 2d 9e 93 67 24 5f ba 36 96 99 90 65 c8 52 19 d8 8f ba a4 f0 3b fe 5a a7 c5 f7 92 dd 3a 3d ec ec a4 10 91 07 c0 39 c8 05 88 e9 d3 a5 1f bb 5b b6 fd 0e 69 55 af b2 8a 5f 33 cf ec ff 00 66 eb cb 79 12 3b a1 6d 69 00 27 fd 6b 2a b3 9c 02 4e 58 74 18 3f 97 bd 75 3a 77 c1 0d 2a 09 97 ed 7a e5 b6 25 60 be 44 0a 18 16 d8 5c 7c d8 c9 c2 ae 7d ff 00 2a cf f1 8f 88 0c 97 d7 30 1d d0 11 66 f0 a3 9e 42 3d d4 f1 5a a6 3b e7 86 c7 d6 b6 7c 15 ab c7 a8 f8 a2 08 65 db 2a dc 5d ea 86 2d 8c 72 91 c7 24 56 a8 80 67 03 e5 1c 9f cb a9 ae aa 4a 93 69 5a fe af fc ac 71 d5 a9 88 e4 e6 e6 b7 a2 ff 00 33 b5 d1 fe 07 e8 51 b0 93 cf 92 67 e4 07 71 ce 0f 51 e9 fa 57 57 a6 fc 1a d0 f4 d9 8c 91 86 19 6d c4 05 Data Ascii: j,lz}40-g$_6eR;Z:=9[iU_3fy;mi'kNXt?u:wz%`D\\|}0fB=Z;\|e]-r$VgJiZq3QgqQWWm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
81	192.168.2.4	49870	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:59 UTC	3489	OUT	GET /content/dam/hsbc/gb/images/cma/feb-2023/desktop/overall-service-quality-gb.jpg/jcr:content/renditions/cq5dam.web.590.1000.jpeg HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373
2023-06-06 08:38:59 UTC	3620	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 57592 Connection: close Date: Tue, 06 Jun 2023 08:38:59 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains Last-Modified: Fri, 02 Jun 2023 17:32:13 GMT Accept-Ranges: bytes S: dispatcher2euwest1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=2592000, s-maxage=2592000 X-Cache: Miss from cloudfront Via: 1.1 89a45b9ac94fb6c6e52c37fdd89a6cb0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: DTm0xkP8nw3F9UAuZwMIzGFUS7Qi3WnvWjcwZC4HsZ93Kc-e4nIhqw==
2023-06-06 08:38:59 UTC	3621	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 f0 02 4e 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFCCN"}!1AQa"q2
2023-06-06 08:38:59 UTC	3629	IN	Data Raw: 06 d9 97 b3 35 94 9e 50 51 81 b9 71 c9 22 80 3f 47 f3 46 6b e2 4f 86 ff 00 05 34 6b 5f 8c 1e 16 f8 33 e3 c2 ba e6 85 e1 9f 87 96 ba 95 9e 81 7d 36 fb 2d 4f 53 9e ee 71 a8 de c9 11 e2 76 0e 13 01 f7 04 f3 49 00 16 cd 70 be 3d b8 b9 d3 be 08 fc 70 f0 ed 95 d5 d6 a1 e0 0f 0b fc 4b d0 ed b4 2b db bb 86 99 6d 93 ed ba 7b dd da 23 b7 3e 55 bc cc e8 09 24 0c 95 cf cb 40 1f a2 b9 cf 4a e0 be 03 fc 53 ff 00 85 d9 f0 77 c2 5e 3b fe cc fe c5 fe de b1 4b df b0 7d a3 cf f2 37 67 e5 f3 36 ae ee 9d 76 8f a5 78 f7 c5 bd 4a d2 5f db db e0 05 82 5c c4 d7 b0 68 5e 23 9e 5b 70 e0 c8 91 bc 50 2a 39 5e a0 31 8e 40 0f 7d 8d e8 6b c4 be 05 41 61 e3 7f 08 7e c9 3f 0f 7c 55 38 93 c1 7a b7 84 35 4d 45 f4 59 a5 db 6f ac de db 88 04 70 cc 9c 79 aa 91 cb 34 9e 59 ca b6 32 c0 ed 18 00 Data Ascii: 5PQq"?GFkO4k_3}6-OSqvIp=pK+m{#>U$@JSw^;K}7g6vxJ_\h^#[pP*9^1@}kAa~?\|U8z5MEYopy4Y2
2023-06-06 08:38:59 UTC	3645	IN	Data Raw: e9 31 ce 24 ff 00 84 98 5e 8d a5 04 de 6f 11 63 7e fc f1 bb 68 c8 e3 be 6b d8 3e 2e fc 32 d5 75 0f d9 ba e7 c1 1a 0a be b5 aa 43 61 65 65 07 99 22 44 d3 f9 52 45 96 25 d8 28 25 50 9e 4f e7 5e c1 4b 5e 7c 30 34 e1 19 46 ed dd 72 fa 2e c8 f6 ea e7 15 ea d4 85 4e 58 ae 59 73 d9 27 67 2d 2e de b7 d6 db 26 91 c9 fc 3a d3 2f bc 2f f0 af c3 1a 75 ed a3 ff 00 69 69 da 35 ad bc d6 91 ba 16 f3 63 81 55 90 36 ed a4 ee 04 67 76 3d f1 cd 79 6f 8c be 0d 6b fe 2a f8 48 ca 56 2f f8 4c ee f5 68 7c 43 7b 6b 24 c0 45 34 ca df f1 ea 5c 64 6c 48 f6 a2 9e 46 63 07 be 6b df 71 46 07 a5 74 4f 0f 09 c1 42 5b 5a df d7 99 c7 4b 1d 56 8d 57 5a 09 5d cb 9b f1 bd bd 3f e0 76 3c 9b e0 a7 83 7c 43 a7 78 87 c6 de 2d f1 26 9d 0e 85 7b e2 6b 9b 79 57 46 82 e9 6e 45 aa c3 19 4c b3 a8 0a 5d Data Ascii: 1$^oc~hk>.2uCaee"DRE%(%PO^K^\|04Fr.NXYs'g-.&://uii5cU6gv=yok*HV/Lh\|C{k$E4\dlHFckqFtOB[ZKVWZ]?v<\|Cx-&{kyWFnEL]
2023-06-06 08:38:59 UTC	3653	IN	Data Raw: c6 ab c6 68 a3 eb 98 9f f9 fb 2f bd ff 00 98 7f 64 e5 df f4 0f 0f fc 06 3f e4 7b 37 fc 36 1f c5 df fa 1b 47 fe 0b 6c ff 00 f8 d5 1f f0 d8 7f 17 7f e8 6d 1f f8 2d b3 ff 00 e3 55 e3 34 51 f5 cc 4f fc fd 97 de ff 00 cc 3f b2 72 ef fa 07 87 fe 03 1f f2 3d 9b fe 1b 0f e2 ef fd 0d a3 ff 00 05 b6 7f fc 6a 8f f8 6c 3f 8b bf f4 36 8f fc 16 d9 ff 00 f1 aa f1 9a 28 fa e6 27 fe 7e cb ef 7f e6 1f d9 39 77 fd 03 c3 ff 00 01 8f f9 1e cd ff 00 0d 87 f1 77 fe 86 d1 ff 00 82 db 3f fe 35 47 fc 36 1f c5 df fa 1b 47 fe 0b 6c ff 00 f8 d5 78 cd 14 7d 73 13 ff 00 3f 65 f7 bf f3 0f ec 9c bb fe 81 e1 ff 00 80 c7 fc 8f 66 ff 00 86 c3 f8 bb ff 00 43 68 ff 00 c1 6d 9f ff 00 1a a3 fe 1b 0f e2 ef fd 0d a3 ff 00 05 b6 7f fc 6a bc 66 8a 3e b9 89 ff 00 9f b2 fb df f9 87 f6 4e 5d ff 00 40 Data Ascii: h/d?{76Glm-U4QO?r=jl?6('~9ww?5G6Glx}s?efChmjf>N]@
2023-06-06 08:38:59 UTC	3669	IN	Data Raw: e5 7f 70 7d 62 8f f3 af bd 1c cd 7d 3d fb 1a f8 5a 78 db 5d f1 14 a8 c9 03 aa d8 c0 48 fb e7 3b e4 3f 86 13 f3 3e 95 c7 fc 39 fd 94 3c 65 e2 db a8 67 d6 74 eb 9f 0f e9 39 0c ed 73 11 17 0e 3d 16 3e a0 fb b0 1f 8f 4a fb 13 c3 de 0d 8f c2 ba 2d a6 95 a6 69 cf 6b 63 6a 9e 5c 51 ac 67 a7 72 78 e4 93 92 4f 52 49 35 f5 19 3e 5f 55 55 58 8a aa c9 6d 7e a7 e7 5c 55 9e e1 de 1a 58 1c 3c 94 a5 2d da d5 25 be fd de de 5a 96 68 ab 1f d9 d7 7f f3 ed 37 fd fb 34 7f 67 5d ff 00 cf b4 df f7 ec d7 db 1f 8f 95 e8 ab 1f d9 d7 7f f3 ed 37 fd fb 34 7f 67 5d ff 00 cf b4 df f7 ec d3 11 5e 8a b1 fd 9d 77 ff 00 3e d3 7f df b3 47 f6 75 df fc fb 4d ff 00 7e cd 00 57 a2 ac 7f 67 5d ff 00 cf b4 df f7 ec d1 fd 9d 77 ff 00 3e d3 7f df b3 40 15 e8 ab 1f d9 d7 7f f3 ed 37 fd fb 35 6a cb Data Ascii: p}b}=Zx]H;?>9<egt9s=>J-ikcj\QgrxORI5>_UUXm~\UX<-%Zh74g]74g]^w>GuM~Wg]w>@75j

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
82	192.168.2.4	49868	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:59 UTC	3490	OUT	GET /content/dam/hsbc/gb/images/cma/feb-2023/desktop/overall-service-quality-ni.jpg/jcr:content/renditions/cq5dam.web.590.1000.jpeg HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373
2023-06-06 08:38:59 UTC	3512	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 59131 Connection: close Date: Tue, 06 Jun 2023 08:38:59 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains Last-Modified: Fri, 02 Jun 2023 17:25:37 GMT Accept-Ranges: bytes S: dispatcher3euwest1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=2592000, s-maxage=2592000 X-Cache: Miss from cloudfront Via: 1.1 81f038b63d8af92c2b360530d51919c2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: znwWvw8ANVPFyy1Z2PNgm0j3LbRpWsMc2R3uKqbKXEfQsd5M6kVSoA==
2023-06-06 08:38:59 UTC	3512	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 f0 02 4e 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFCCN"}!1AQa"q2
2023-06-06 08:38:59 UTC	3544	IN	Data Raw: 21 a1 47 af f8 81 b4 69 e5 d3 b4 6d 46 02 16 ea 53 11 2b 14 91 36 09 ce 70 63 38 27 ee 9c 66 bb cc 51 b4 7a 50 07 c0 be 15 f0 87 88 7c 51 fb 54 fe cf be 22 8e f3 e2 86 bb a3 68 36 ba e4 57 97 be 30 f0 aa 69 76 da 64 f2 e9 c2 34 86 38 e3 b4 b7 f2 54 e0 fc cd be 32 52 34 46 24 9c f6 df b3 15 ce b5 f0 a3 e1 07 81 be 0f 6b ff 00 0e 75 ff 00 11 f8 c3 48 d7 26 82 fa e6 f3 4a 95 74 c8 e2 37 d3 4f fd a6 b7 ef 1b 40 fb 51 96 45 55 7f 30 be 17 01 ba 7d 89 81 46 28 03 e3 ef 01 5e 6b 5f 06 23 f8 bf e0 fd 6f e1 d7 88 3c 75 ac f8 93 c7 17 fa ce 93 6c 9a 4c b3 69 9a a5 a5 e3 c4 62 f3 6f 7c b7 b7 80 46 32 ae 26 2a 54 47 c0 23 15 ad f0 f3 58 bf fd 9b fe 21 7c 68 b7 f1 4f 85 fc 59 e2 05 f1 3f 89 a5 f1 36 8f ab e8 1a 0d d6 aa 97 b6 f2 db c2 8b 66 5a 04 7f 25 e1 68 59 00 94 Data Ascii: !GimFS+6pc8'fQzP\|QT"h6W0ivd48T2R4F$kuH&Jt7O@QEU0}F(^k_#o<ulLibo\|F2&*TG#X!\|hOY?6fZ%hY
2023-06-06 08:38:59 UTC	3560	IN	Data Raw: 0c 03 bc f7 09 34 9b 7b 95 58 d8 82 7d 8b 0a fa 8f e1 a7 c0 88 7e 17 68 86 c7 4b b2 79 26 94 86 b9 bc 95 97 cc 9d 87 af 3c 01 93 80 38 19 3d c9 27 dd a8 af 47 0b 97 61 f0 6f 9a 9a bb ee f7 3c 0c cb 3f c7 66 b1 f6 75 a4 94 3b 2d 17 cf 76 fe 6c f3 8f f8 46 35 3f f9 f5 6f fb e9 7f c6 8f f8 46 35 3f f9 f5 6f fb e9 7f c6 bd 1e 8a f5 2e 7c e5 8f 38 ff 00 84 63 53 ff 00 9f 56 ff 00 be 97 fc 68 ff 00 84 63 53 ff 00 9f 56 ff 00 be 97 fc 6b d1 e8 a2 e1 63 ce 3f e1 18 d4 ff 00 e7 d1 bf ef a5 ff 00 1a 96 df c2 5a 94 ef 86 84 42 bd d9 d8 63 f4 cd 7a 15 14 5c 2c 65 68 9a 04 1a 32 12 a7 cd 9d be f4 a4 63 f0 1e 82 b5 68 a2 90 c2 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 2b 23 5e f1 7e 85 e1 65 8d b5 ad 6b 4e d2 16 53 84 37 f7 71 c0 1f e9 Data Ascii: 4{X}~hKy&<8='Gao<?fu;-vlF5?oF5?o.\|8cSVhcSVkc?ZBcz\,eh2ch((((((+#^~ekNS7q
2023-06-06 08:38:59 UTC	3576	IN	Data Raw: 4b 22 c1 45 5e 4d a5 ea bf c8 cd 66 18 89 3b 24 be e3 f5 97 fe 1e 83 f0 3f fe 7f 75 df fc 15 b7 ff 00 15 47 fc 3d 07 e0 7f fc fe eb bf f8 2b 6f fe 2a bf 24 3c 69 e0 cd 67 e1 e7 8a f5 4f 0d f8 82 c9 b4 ed 6b 4d 98 c1 75 6c cc ad b1 c7 3c 32 92 08 20 82 08 24 10 41 ac 5a 71 c8 b0 72 49 a6 ec fc d7 f9 03 cc 2b c5 d9 a5 f7 1f b1 3f f0 f4 1f 81 ff 00 f3 fb ae ff 00 e0 ad bf f8 aa 3f e1 e8 3f 03 ff 00 e7 f7 5d ff 00 c1 5b 7f f1 55 f8 ed 45 3f ec 0c 27 77 f7 ff 00 c0 27 fb 46 b7 91 fb 13 ff 00 0f 41 f8 1f ff 00 3f ba ef fe 0a db ff 00 8a a3 fe 1e 83 f0 3f fe 7f 75 df fc 15 b7 ff 00 15 5f 95 9f 0a 3e 0b 78 cb e3 7e b3 7b a5 78 2b 45 7d 6e fe ca d5 af 67 89 66 8e 2d b1 82 06 73 23 28 24 92 00 00 e4 93 f5 ac 3f 08 78 3f 53 f1 d7 89 ac bc 3f a4 25 bb ea b7 b2 79 36 Data Ascii: K"E^Mf;$?uG=+o*$<igOkMul<2 $AZqrI+???][UE?'w'FA??u_>x~{x+E}ngf-s#($?x?S?%y6
2023-06-06 08:38:59 UTC	3596	IN	Data Raw: 23 c2 5e 16 b0 f0 57 87 2c 34 5d 36 32 96 96 91 ec 5d d8 dc c7 ab 33 63 b9 24 93 ee 6b 5e bf 53 c1 d0 78 6c 3c 29 3d d2 3f 9b b3 5c 62 cc 31 b5 71 31 5a 49 e9 e8 b4 5f 82 0a 28 a2 bb 0f 24 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 50 09 20 0e 49 e3 15 ea 96 91 18 2d 21 8c f5 44 55 3f 80 ae 4f c2 fe 1b 91 a6 4b cb a4 28 89 f3 47 1b 0e 58 f6 27 da bb 1a 96 52 16 90 f4 a5 a2 90 cf 0a be f8 53 e2 1f 18 7e d2 96 be 2f d7 a0 b6 5f 0a e8 76 db 34 98 c4 81 9e 49 71 90 ec 99 38 21 dd d8 1e 3e e2 71 5a bf 1e fe 14 6b 5e 37 b9 f0 bf 89 3c 2b 73 6d 07 89 fc 35 74 6e 2d 63 bd 38 86 75 62 a5 91 88 19 ea 83 1d 06 0b 0e 33 91 ec 14 57 13 c2 53 70 9c 1f da 77 7d ef ff 00 02 ca c7 a8 b3 2a f1 a9 4e ac 6c b9 23 ca 95 b4 b6 b7 ba f3 bb bf a9 e2 9f 05 7e 15 f8 97 47 f1 b7 89 7c 7d Data Ascii: #^W,4]62]3c$k^Sxl<)=?\b1q1ZI_($(((P I-!DU?OK(GX'RS~/_v4Iq8!>qZk^7<+sm5tn-c8ub3WSpw}*Nl#~G\|}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
83	192.168.2.4	49866	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:59 UTC	3491	OUT	GET /content/dam/hsbc/gb/images/logos/fscs.jpg HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373
2023-06-06 08:38:59 UTC	3606	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 14367 Connection: close Date: Tue, 06 Jun 2023 08:38:59 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains Last-Modified: Fri, 02 Jun 2023 17:29:59 GMT Accept-Ranges: bytes S: dispatcher3euwest1 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=2592000, s-maxage=2592000 X-Cache: Miss from cloudfront Via: 1.1 37e2872b8b14122ba8fe3a34c3bb506a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: igwvoBrWW8DCPznH66SKqr3oeH2a-6lOLcOkvHqVmLLy5xCjshbLRg==
2023-06-06 08:38:59 UTC	3606	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 1f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
84	192.168.2.4	49869	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:59 UTC	3491	OUT	GET /etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/social/facebook.svg HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hsbc.co.uk/etc.clientlibs/dpws/clientlibs-public/clientlib-default.min.7675554f68ae226cdde18af7ac43f392.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373
2023-06-06 08:38:59 UTC	3492	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 950 Connection: close Date: Tue, 06 Jun 2023 08:38:59 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains Last-Modified: Sat, 03 Jun 2023 04:21:37 GMT Accept-Ranges: bytes S: dispatcher3euwest1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=7776000, s-maxage=7776000 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 89a45b9ac94fb6c6e52c37fdd89a6cb0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: aSGmYJD63n0V5XL37qHPK6mRfzUjV9tF_F8Vf7EYResIgv2cRvyS7w==
2023-06-06 08:38:59 UTC	3493	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 66 61 63 65 62 6f 6f 6b 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_facebook" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
85	192.168.2.4	49871	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:00 UTC	3677	OUT	GET /etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/fonts/UniversNextforHSBCW02-Lt.woff HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.hsbc.co.uk sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.hsbc.co.uk/etc.clientlibs/dpws/clientlibs-public/clientlib-default.min.7675554f68ae226cdde18af7ac43f392.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373
2023-06-06 08:39:00 UTC	3697	IN	HTTP/1.1 200 OK Content-Type: application/font-woff Content-Length: 26300 Connection: close Date: Tue, 06 Jun 2023 08:39:00 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains Last-Modified: Sat, 03 Jun 2023 04:28:00 GMT Accept-Ranges: bytes S: dispatcher3euwest2 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Cache-Control: max-age=7776000, s-maxage=7776000 X-Cache: Miss from cloudfront Via: 1.1 ac90d46be219b2aa8a23e6982405715c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: A6IKJxIEY-zmEuXzxetD_E32fMHFPirC2kvd6WyBJ-6jxKybymXVgw==
2023-06-06 08:39:00 UTC	3697	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 66 bc 00 0f 00 00 00 00 c0 cc 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4f 53 2f 32 00 00 01 58 00 00 00 5c 00 00 00 60 89 40 10 63 63 6d 61 70 00 00 01 b4 00 00 02 99 00 00 03 5a 60 2a c3 57 63 76 74 20 00 00 04 50 00 00 00 54 00 00 01 e2 06 fa 06 d4 66 70 67 6d 00 00 04 a4 00 00 05 ed 00 00 0a a2 63 0e 9d d9 67 61 73 70 00 00 0a 94 00 00 00 10 00 00 00 10 00 17 00 09 67 6c 79 66 00 00 0a a4 00 00 46 2c 00 00 83 70 92 08 81 98 68 64 6d 78 00 00 50 d0 00 00 0a f8 00 00 1a 10 5f eb a9 8a 68 65 61 64 00 00 5b c8 00 00 00 36 00 00 00 36 fb 09 74 84 68 68 65 61 00 00 5c 00 00 00 00 20 00 00 00 24 07 00 03 e6 68 6d 74 78 00 00 5c 20 00 00 02 ae 00 00 06 0e 26 1d 51 4d 6c 6f 63 61 00 00 5e d0 00 00 03 Data Ascii: wOFFfOS/2X\`@ccmapZ`*Wcvt PTfpgmcgaspglyfF,phdmxP_head[66thhea\ $hmtx\ &QMloca^
2023-06-06 08:39:00 UTC	3713	IN	Data Raw: 46 d2 49 34 11 09 38 28 d4 ee ae e6 43 e2 ea 2a 82 7f 09 ce 9b b3 df e8 04 0d d8 bd 97 2a f9 a0 74 82 06 45 dc 02 df 2e c7 a7 39 2b 21 df 0d c4 12 f1 61 7e 34 32 60 4c 28 b1 bb 80 33 90 f1 8b f2 2d b5 ce 45 bf bb f1 0f f1 26 4e 90 26 89 6b 36 b2 c4 e3 a4 ec 4c 27 75 3a fb 4f ea 64 44 e6 9a a5 25 5d 59 07 3e b5 7b f7 fa bb c9 d8 fa 77 21 8e c4 06 0f 2e c6 38 84 fe dd 06 7a 96 60 43 d0 aa 09 85 04 99 13 d6 dd c4 d9 60 22 dd 45 c8 f4 9c bb 8e f6 bd 89 38 0d 88 ea 18 fb 3f 5d aa 39 72 f8 f0 c9 ad e7 52 66 1d 52 1b f0 c1 93 39 7e a4 2c 9e ee 5c 4a ac 89 e4 c4 b7 df e8 6c f4 Data Ascii: FI48(C**tE.9+!a~42`L(3-E&N&k6L'u:OdD%]Y>{w!.8z`C`"E8?]9rRfR9~,\Jl
2023-06-06 08:39:00 UTC	3722	IN	Data Raw: 92 f8 d1 ed 33 45 52 8e cf de fe 13 a0 6f 2f a6 96 31 34 89 a0 c1 fb ff a4 fb 19 e0 50 c3 17 38 6b e7 ae c2 0b 3b 76 15 60 f9 27 df 34 06 34 8b c1 48 a1 b4 a3 f5 db 42 71 a7 84 02 9d 5e 73 1b f1 1f 6f 78 b2 f8 ed ed 93 c5 d1 4e ec db c0 9d 6d 0e e3 7a 79 58 4e c2 aa d2 8f e6 a0 55 26 ef d4 34 56 12 77 b4 7e 8f cb 3e 89 69 33 41 8c 10 3f 06 8f 41 c6 e8 2b 2b 43 09 f9 e9 47 91 ac 29 09 b0 9f dc 27 ce 3b 4f dc 7f 60 e4 5f bf fc af 5f 3e 73 29 39 09 6d 17 74 8e 2b ba fe a2 04 4d 88 6b 61 99 fc 79 a8 14 6a 29 2c 05 ee c4 a5 b4 03 bb 3a 95 40 23 93 29 48 15 81 db cb a1 53 27 71 ad 41 fc 0e 0e e3 ca 9f db 6c 02 6e c6 1b 62 54 91 5a b9 4c 09 4d 9d 4d 8c b8 45 72 fc 0e 92 e2 fe 83 85 63 ad e7 ba ed fb 32 6e 23 80 34 7c 01 bc 06 1c 67 9c 65 f8 34 9d 17 62 68 db 02 Data Ascii: 3ERo/14P8k;v`'44HBq^soxNmzyXNU&4Vw~>i3A?A++CG)';O`__>s)9mt+Mkayj),:@#)HS'qAlnbTZLMMErc2n#4\|ge4bh

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
86	192.168.2.4	49872	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:00 UTC	3678	OUT	GET /etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/fonts/UniversNextforHSBCW02-LtIt.woff HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.hsbc.co.uk sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.hsbc.co.uk/etc.clientlibs/dpws/clientlibs-public/clientlib-default.min.7675554f68ae226cdde18af7ac43f392.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373
2023-06-06 08:39:00 UTC	3681	IN	HTTP/1.1 200 OK Content-Type: application/font-woff Content-Length: 24980 Connection: close Date: Tue, 06 Jun 2023 08:39:00 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains Last-Modified: Sat, 03 Jun 2023 04:23:47 GMT Accept-Ranges: bytes S: dispatcher3euwest2 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Cache-Control: max-age=7776000, s-maxage=7776000 X-Cache: Miss from cloudfront Via: 1.1 086da553b96e728b869925910597a098.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: 8Gu5XrfuY45teQDoafSi_VEMlimzCoSRr6WhvZE0fQoDac7QpFRcuw==
2023-06-06 08:39:00 UTC	3681	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 61 94 00 0e 00 00 00 00 ab ec 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4f 53 2f 32 00 00 01 44 00 00 00 58 00 00 00 60 85 a4 0c 81 63 6d 61 70 00 00 01 9c 00 00 02 7d 00 00 03 52 8f d0 93 a4 63 76 74 20 00 00 04 1c 00 00 00 53 00 00 01 e2 07 b2 07 01 66 70 67 6d 00 00 04 70 00 00 05 ed 00 00 0a a2 63 0e 9d d9 67 61 73 70 00 00 0a 60 00 00 00 10 00 00 00 10 00 17 00 09 67 6c 79 66 00 00 0a 70 00 00 4c 07 00 00 88 a2 12 fb 1a da 68 65 61 64 00 00 56 78 00 00 00 36 00 00 00 36 fb 33 74 b8 68 68 65 61 00 00 56 b0 00 00 00 21 00 00 00 24 07 3a 03 d8 68 6d 74 78 00 00 56 d4 00 00 02 d0 00 00 06 0e 19 b3 0b 2a 6c 6f 63 61 00 00 59 a4 00 00 03 0e 00 00 03 0e b5 57 92 0f 6d 61 78 70 00 00 5c b4 00 00 00 Data Ascii: wOFFaOS/2DX`cmap}Rcvt Sfpgmpcgasp`glyfpLheadVx663thheaV!$:hmtxV*locaYWmaxp\
2023-06-06 08:39:00 UTC	3713	IN	Data Raw: af 4d ca c7 85 4f 4a bd c4 7c c7 d5 fa 77 65 06 92 f3 53 c7 f4 c7 1c dd 04 fd 9d d9 bb 06 32 f4 ef c8 ee c4 29 fa dd 53 2b df 5d bf 23 63 90 2b 35 2a a5 73 ed c1 d1 86 b1 32 70 6e 05 bc c5 c9 51 f1 d0 0a 30 34 b6 26 b7 9e ff c0 0a f5 e1 f6 8f e3 e1 c1 c3 2a 70 9e f0 e9 01 2c 31 96 06 bc 69 6f 6f 16 d6 c2 74 bd e9 7e bd 2b c0 bc d0 85 e9 f8 60 1e 2f e7 ef d7 e1 02 dc 33 02 1c b6 01 ee 20 7a df 9f e9 3e df f1 9e b9 80 80 c9 e0 f3 8f 74 e1 3a de f3 7a 7c bf de ed a3 e3 3d 0b df bf d6 7d 96 27 6e c2 7d e4 53 91 75 38 ce f7 8d b7 40 3c b0 de 3e c3 27 2f e6 f1 c9 8b 22 c1 f7 cf 29 e3 0a eb 75 06 9d ce a8 a6 18 27 93 3e e1 b5 14 f4 61 e1 0c 46 c7 71 e8 1c 70 ed a5 ff f4 87 a8 df fa 7c 46 2f 4d ad cf b9 38 ff 99 8d 5e be 50 cf df 38 f7 39 0e 38 72 7c 12 03 cf e2 Data Ascii: MOJ\|weS2)S+]#c+5s2pnQ04&p,1ioot~+`/3 z>t:z\|=}'n}Su8@<>'/")u'>aFqp\|F/M8^P898r\|
2023-06-06 08:39:00 UTC	3722	IN	Data Raw: c7 2c 1e a7 ff ff f3 9e 36 5a a4 d9 f2 14 c6 5b 44 b3 8b 79 87 86 f7 34 cc d3 a0 3b de 80 87 ea ed df 7b fe 02 d2 13 8d 80 Data Ascii: ,6Z[Dy4;{

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
87	192.168.2.4	49873	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:00 UTC	3679	OUT	GET /etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/fonts/UniversNextforHSBCW02-Th.woff HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.hsbc.co.uk sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.hsbc.co.uk/etc.clientlibs/dpws/clientlibs-public/clientlib-default.min.7675554f68ae226cdde18af7ac43f392.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373
2023-06-06 08:39:00 UTC	3732	IN	HTTP/1.1 200 OK Content-Type: application/font-woff Content-Length: 26884 Connection: close Date: Tue, 06 Jun 2023 08:39:00 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains Last-Modified: Sat, 03 Jun 2023 04:40:10 GMT Accept-Ranges: bytes S: dispatcher2euwest2 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Cache-Control: max-age=7776000, s-maxage=7776000 X-Cache: Miss from cloudfront Via: 1.1 f4d15e906467f56692c7fc70be861e04.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: 6wD-RI4-Oh1khSFuRGLuwDD2pu5Mh5lQjFOrpYz-o99f6O69F8gxpw==
2023-06-06 08:39:00 UTC	3733	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 69 04 00 0f 00 00 00 00 c3 cc 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4f 53 2f 32 00 00 01 58 00 00 00 56 00 00 00 60 85 59 0b 56 63 6d 61 70 00 00 01 b0 00 00 02 7e 00 00 03 52 8f eb 93 7c 63 76 74 20 00 00 04 30 00 00 00 51 00 00 01 e2 06 c3 05 dd 66 70 67 6d 00 00 04 84 00 00 05 ed 00 00 0a a2 63 0e 9d d9 67 61 73 70 00 00 0a 74 00 00 00 10 00 00 00 10 00 17 00 09 67 6c 79 66 00 00 0a 84 00 00 48 e7 00 00 86 74 ca 18 72 81 68 64 6d 78 00 00 53 6c 00 00 0a a2 00 00 1a 10 06 d0 aa 9d 68 65 61 64 00 00 5e 10 00 00 00 36 00 00 00 36 f9 57 5a 36 68 68 65 61 00 00 5e 48 00 00 00 20 00 00 00 24 06 d8 03 ec 68 6d 74 78 00 00 5e 68 00 00 02 b4 00 00 06 14 09 8a 52 9c 6c 6f 63 61 00 00 61 1c 00 00 03 Data Ascii: wOFFiOS/2XV`YVcmap~R\|cvt 0QfpgmcgasptglyfHtrhdmxSlhead^66WZ6hhea^H $hmtx^hRlocaa
2023-06-06 08:39:00 UTC	3748	IN	Data Raw: 57 29 20 fc bf 22 71 64 13 54 b0 8c f3 c9 bd 67 06 cf 2d 9c 45 2e 5e 7a e9 07 3f 88 f0 22 28 0d f1 0a 6c e9 f5 97 a5 34 dd b2 b8 dd 67 06 cb 2a 68 19 4f 5c 96 c3 db 76 8e 95 ce 0a ee df 1f 84 bd bb ec 32 dc aa 76 a3 56 5f a3 24 ec 29 2e b9 95 1c 26 3e b5 6e 67 ea 5d e4 55 94 4c 19 88 ea a7 ca 61 96 7c e2 c3 1f 46 38 92 e4 9b 89 3f 92 0f 12 76 42 df 03 4f d8 f0 2c 95 d6 2d 50 18 05 87 b5 fe a8 8e 04 5d 79 87 cd ae f6 ab e2 41 67 da 69 65 d4 7e f2 41 6f 9c d1 5b fc 9c dd 64 41 f5 51 19 e2 8f d4 95 ff f3 fa a8 2b 7b ea 23 09 37 b9 44 3c 4b 3e be c1 59 86 70 04 e8 ee 08 94 a0 06 83 af cf 65 be 91 21 97 46 47 a5 73 fd dc 54 99 78 96 3a f2 17 94 a5 ca 52 59 a8 67 c9 f7 12 cf 93 77 9c e2 44 64 54 c6 f8 14 f9 de 08 de c5 64 a4 aa c4 f3 d4 de d7 84 a5 aa 7f 31 ec Data Ascii: W) "qdTg-E.^z?"(l4g*hO\v2vV_$).&>ng]ULa\|F8?vBO,-P]yAgie~Ao[dAQ+{#7D<K>Ype!FGsTx:RYgwDdTd1
2023-06-06 08:39:00 UTC	3754	IN	Data Raw: 20 cf c1 93 6c 0c ca 9b 92 c6 66 c8 84 ca 5a 65 b5 92 56 37 78 84 d5 1a 01 af f0 81 19 22 2a 0b 5c a3 09 88 75 0b 91 82 5a b9 a0 0e 6a 20 38 76 3b 32 c6 da e5 60 82 18 87 eb 3d c8 26 2c 0d a9 b4 cd 37 b4 b3 1d fc 9c 6b db 4c 7c c3 46 5b 24 f4 29 d9 54 b9 dc fd ea f9 e0 4b d9 b3 a8 9c 1f f8 5f a1 9a 9c 81 02 d0 cd 49 4e d9 c8 e8 23 2b 8b 7a 26 30 5e d6 65 59 36 7a 43 20 a0 10 da e2 aa 55 96 3a 8c be 57 e6 80 22 a5 75 eb a9 69 b2 64 b7 19 30 46 a4 75 0e 69 65 b4 f3 b9 34 ba 2d 4b 53 5a a3 bc ed ad c1 02 66 55 ae 34 3e cc e0 d2 93 59 78 1f ba 7b ad 2a 2a 66 39 b7 cc 2d e8 02 83 de fb 55 19 9a f5 7e e9 34 e1 3e a4 cd 1e 64 13 96 06 d9 fc 8a 1e 53 8b 44 84 78 f0 fd 8c 09 2b 36 d6 22 a1 fa 09 cd d2 16 98 e7 83 eb 2a 56 4f 2f 94 9a 37 97 7d f8 69 92 e9 9e d1 85 Data Ascii: lfZeV7x"\uZj 8v;2`=&,7kL\|F[$)TK_IN#+z&0^eY6zC U:W"uid0Fuie4-KSZfU4>Yx{f9-U~4>dSDx+6"VO/7}i

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
88	192.168.2.4	49875	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:00 UTC	3680	OUT	GET /etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/fonts/HSBCIcon-Font.woff?ee39a20e77cff3aec879befe2cd1d29d HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://www.hsbc.co.uk sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.hsbc.co.uk/etc.clientlibs/dpws/clientlibs-public/clientlib-default.min.7675554f68ae226cdde18af7ac43f392.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373
2023-06-06 08:39:00 UTC	3760	IN	HTTP/1.1 200 OK Content-Type: application/font-woff Content-Length: 22532 Connection: close Date: Tue, 06 Jun 2023 08:39:00 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains Last-Modified: Sat, 03 Jun 2023 04:28:42 GMT Accept-Ranges: bytes S: dispatcher3euwest2 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Cache-Control: max-age=7776000, s-maxage=7776000 X-Cache: Miss from cloudfront Via: 1.1 39ed76664123c3090231ff0882467152.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: uuxIWbUXl6Z7V5ziV0xCRiQK-rRTMoouvjrdllcR0MQXrrbrn3kKWw==
2023-06-06 08:39:00 UTC	3761	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 58 04 00 10 00 00 00 00 94 20 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 6c 00 00 00 1a 00 00 00 1c 78 6f 28 f7 47 44 45 46 00 00 01 88 00 00 00 1d 00 00 00 1e 00 27 00 a3 4f 53 2f 32 00 00 01 a8 00 00 00 4a 00 00 00 60 2f 9e dc e6 63 6d 61 70 00 00 01 f4 00 00 00 ec 00 00 02 32 d9 c0 bf be 63 76 74 20 00 00 02 e0 00 00 00 14 00 00 00 24 03 16 00 06 66 70 67 6d 00 00 02 f4 00 00 06 3a 00 00 0d 16 76 64 7d 76 67 61 73 70 00 00 09 30 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 09 38 00 00 48 e2 00 00 77 74 b0 f0 d5 3a 68 65 61 64 00 00 52 1c 00 00 00 2e 00 00 00 36 07 5b 01 2c 68 68 65 61 00 00 52 4c 00 00 00 1d 00 00 00 24 03 71 01 fc 68 6d 74 78 00 00 52 6c 00 00 00 Data Ascii: wOFFX FFTMlxo(GDEF'OS/2J`/cmap2cvt $fpgm:vd}vgasp0glyf8Hwt:headR.6[,hheaRL$qhmtxRl
2023-06-06 08:39:00 UTC	3777	IN	Data Raw: 24 71 8b 85 71 19 3d 1d 3c e6 4e 49 9a 3c 06 0f 8d 71 b5 59 74 43 b0 04 95 b2 7f 1e cc 64 b3 99 c1 ea 86 6c a6 da d6 24 f9 2d b6 93 8b 32 f2 03 32 75 dc d0 b5 fd 33 de dd 85 c2 ad 85 c2 6d e3 e3 ff 5b 26 5b 1d cc 64 a6 f6 64 32 b7 86 9b 83 a0 56 1e 28 c7 9e 54 2c 01 51 e9 66 18 4d 25 b5 b9 b9 b7 4f 4f bf 7d 29 06 d1 7e 63 6d 53 94 db 58 f9 0f a4 25 e9 91 9d 54 eb e9 45 6a 99 1b a8 e7 62 b8 57 09 24 dd 61 ae 9b dd 67 e4 04 8d 69 8f 09 58 2f ce 24 d2 49 9b 9a 79 47 b0 5c d3 3a e5 53 b7 10 08 5e e8 7a a7 62 1a 16 13 21 92 c3 e8 54 86 72 ad 9c de 5c 9a 2d 8b 51 7e fb 79 c9 3f 22 5e f8 19 5f f6 78 6f f7 2d b7 b4 db b5 5a ea 8a bc 65 e7 2d 3b 77 6c c7 4a 2f 6b 82 71 64 38 2d 02 58 1d c8 e7 78 e4 d0 4d 8e 4a 74 26 bb 25 34 72 ac c5 4a 00 a0 c3 8a 24 ac d3 82 4f Data Ascii: $qq=<NI<qYtCdl$-22u3m[&[dd2V(T,QfM%OO})~cmSX%TEjbW$agiX/$IyG\:S^zb!Tr\-Q~y?"^_xo-Ze-;wlJ/kqd8-XxMJt&%4rJ$O

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
89	192.168.2.4	49874	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:00 UTC	3759	OUT	GET /configuration/modals/leaving-hsbc-for-adobe-live-sign-forms.modal/ HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Accept: / X-Requested-With: XMLHttpRequest ADRUM: isAjax:true sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373
2023-06-06 08:39:00 UTC	3788	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 1919 Connection: close Date: Tue, 06 Jun 2023 08:39:00 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains Content-Security-Policy: default-src 'self' .hsbc.com.hk; script-src 'self' 'unsafe-eval' 'unsafe-inline' .tiqcdn.com .tealiumiq.com .liveperson.net .googletagmanager.com .hsbc.co.uk .hsbc.com.hk .doubleclick.net .googleadservices.com .lpsnmedia.net .optimizely.com .facebook.net .google.com .gstatic.com .appdynamics.com .googleapis.com .awswaf.com bat.bing.com .amazon-adsystem.com players.brightcove.net vjs.zencdn.net s.amazon-adsystem.com .v.liveperson.net googleads.g.doubleclick.net connect.facebook.net static.ads-twitter.com tags.tiqcdn.com lptag.liveperson.net lpcdn.lpsnmedia.net cdn.optimizely.com accdn.lpsnmedia.net www.googletagmanager.com cdn.appdynamics.com www.google-analytics.com ssl.google-analytics.com www.googleadservices.com cdn-assets-prod.s3.amazonaws.com app.contentsquare.com; img-src data: blob:; connect-src 'self' .tiqcdn.com .tealiumiq.com .hsbc.com.hk .eum-appdynamics.com .optimizely.com wss://.liveperson.net .cloud.hsbc .awswaf.com .contentsquare.net bat.bing.com manifest.prod.boltdns.net .brightcovecdn.com adservice.google.com .api.brightcove.com brightcove.hs.llnwd.net www.facebook.com maps.googleapis.com www.google.com www.googletagmanager.com .siteintercept.qualtrics.com ad.doubleclick.net http://127.0.0.1:5000 http://127.0.0.1:5000/* stats.g.doubleclick.net www.google-analytics.com t.co analytics.twitter.com analytics.google.com logx.optimizely.com www.google.co.uk hsbc.co.uk www.hsbc.co.uk .demdex.net .lo.cobrowse.liveperson.net .tt.omtrdc.net .sc.omtrdc.net .mcmprod.hsbc.co.uk rbwm-api.us.hsbc.com rbwm-api.hsbc.co.uk rbwm-api.hsbc.com.hk www.askus.hsbc.co.uk www.security.hsbc.co.uk translate.googleapis.com .brightcove.com cdn-assets-prod.s3.amazonaws.com; frame-src 'self' blob: .lpsnmedia.net .optimizely.com .liveperson.net .google.com .doubleclick.net www.facebook.com connect.facebook.net www.youtube.com m.youtube.com .demdex.net www.googletagmanager.com td.doubleclick.net .ep-mimecast.facebook.com 8068700.fls.doubleclick.net gateway.zscalertwo.net google.com; frame-ancestors 'self' www.hsbc.co.uk .liveperson.net; font-src 'self' data: .hsbc.com.hk fonts.gstatic.com .cloudfront.net at.alicdn.com cdn.jsdelivr.net; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' .hsbc.com.hk .googleapis.com .askus.hsbc.co.uk www.googletagmanager.com .lo.cobrowse.liveperson.net; object-src 'self' players.brightcove.net; media-src 'self' blob: lpcdn.lpsnmedia.net *.brightcovecdn.com manifest.prod.boltdns.net ssl.gstatic.com brightcove.hs.llnwd.net; manifest-src 'self' www.hsbc.co.uk; upgrade-insecure-requests ; report-uri /csp/report; Last-Modified: Tue, 06 Jun 2023 08:10:54 GMT Accept-Ranges: bytes S: dispatcher3euwest1 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=60, s-maxage=60 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 5f3006c64f23c42b9bf4b3b63c77aedc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: qV9evNutrkN4HjYj3WQWYlcXCZNN-CShLXSeCCILLdwm-6aamj76gQ==
2023-06-06 08:39:00 UTC	3792	IN	Data Raw: 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 61 6c 2d 63 75 72 74 61 69 6e 22 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 72 69 64 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 61 6c 2d 62 6f 64 79 20 6c 67 2d 38 20 6d 64 2d 31 32 20 73 6d 2d 31 32 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 4d 2d 4d 4f 44 57 49 4e 2d 52 57 2d 44 45 56 20 63 6c 65 61 72 66 69 78 20 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 64 61 74 61 2d 76 61 6c 69 64 61 74 69 6f 6e 2d 6d 65 73 73 61 67 65 3d 22 43 6f 6e 74 69 6e 75 65 22 3e 0a 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 61 72 69 61 2d 6c 61 62 65 6c Data Ascii: <div class="modal-curtain"> <div class="grid"> <div class="row"> <div class="modal-body lg-8 md-12 sm-12"><div class="M-MODWIN-RW-DEV clearfix " tabindex="-1" data-validation-message="Continue"> <button type="button" aria-label

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
9	192.168.2.4	49701	5.42.199.96	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:38:19 UTC	148	OUT	GET /front_end/front_end_files/grid.css HTTP/1.1 Host: hs-login.online Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hs-login.online/front_end/front_end_files/ursula.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: PHPSESSID=5gsfu9jfpc23l5e9dtsmquf8m0
2023-06-06 08:38:20 UTC	174	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Tue, 06 Jun 2023 08:38:19 GMT Content-Type: text/css Content-Length: 2088 Connection: close Last-Modified: Mon, 05 Jun 2023 17:30:40 GMT ETag: "828-5fd6542f58bad" Accept-Ranges: bytes Vary: Accept-Encoding
2023-06-06 08:38:20 UTC	174	IN	Data Raw: 23 67 72 69 64 0a 7b 0a 09 77 69 64 74 68 3a 31 32 30 30 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 30 20 30 20 30 20 31 30 70 78 3b 0a 09 66 6c 6f 61 74 3a 6c 65 66 74 3b 0a 7d 0a 23 67 72 69 64 3a 61 66 74 65 72 0a 7b 0a 09 63 6f 6e 74 65 6e 74 3a 22 2e 22 3b 0a 09 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 0a 09 68 65 69 67 68 74 3a 30 3b 0a 09 63 6c 65 61 72 3a 62 6f 74 68 3b 0a 09 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 0a 7d 0a 62 6f 64 79 20 2e 72 6f 77 20 7b 20 2f 2a 20 6e 6f 74 20 73 75 72 65 20 6f 6e 20 61 63 74 75 61 6c 20 73 74 79 6c 65 73 20 68 65 72 65 20 2a 2f 0a 09 70 61 64 64 69 6e 67 3a 20 30 70 78 20 30 20 32 30 70 78 3b 0a 09 68 65 69 67 68 74 3a 31 25 3b 0a 7d 0a 62 6f 64 79 20 2e 72 6f 77 3a 61 66 74 65 72 0a 7b 0a 09 63 6f Data Ascii: #grid{width:1200px;padding:0 0 0 10px;float:left;}#grid:after{content:".";display:block;height:0;clear:both;visibility:hidden;}body .row { /* not sure on actual styles here */padding: 0px 0 20px;height:1%;}body .row:after{co

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
90	192.168.2.4	49876	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:00 UTC	3760	OUT	GET /configuration/modals/you-are-leaving-hsbc.modal/ HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Accept: / X-Requested-With: XMLHttpRequest ADRUM: isAjax:true sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373
2023-06-06 08:39:00 UTC	3783	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 2141 Connection: close Date: Tue, 06 Jun 2023 08:39:00 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains Content-Security-Policy: default-src 'self' .hsbc.com.hk; script-src 'self' 'unsafe-eval' 'unsafe-inline' .tiqcdn.com .tealiumiq.com .liveperson.net .googletagmanager.com .hsbc.co.uk .hsbc.com.hk .doubleclick.net .googleadservices.com .lpsnmedia.net .optimizely.com .facebook.net .google.com .gstatic.com .appdynamics.com .googleapis.com .awswaf.com bat.bing.com .amazon-adsystem.com players.brightcove.net vjs.zencdn.net s.amazon-adsystem.com .v.liveperson.net googleads.g.doubleclick.net connect.facebook.net static.ads-twitter.com tags.tiqcdn.com lptag.liveperson.net lpcdn.lpsnmedia.net cdn.optimizely.com accdn.lpsnmedia.net www.googletagmanager.com cdn.appdynamics.com www.google-analytics.com ssl.google-analytics.com www.googleadservices.com cdn-assets-prod.s3.amazonaws.com app.contentsquare.com; img-src data: blob:; connect-src 'self' .tiqcdn.com .tealiumiq.com .hsbc.com.hk .eum-appdynamics.com .optimizely.com wss://.liveperson.net .cloud.hsbc .awswaf.com .contentsquare.net bat.bing.com manifest.prod.boltdns.net .brightcovecdn.com adservice.google.com .api.brightcove.com brightcove.hs.llnwd.net www.facebook.com maps.googleapis.com www.google.com www.googletagmanager.com .siteintercept.qualtrics.com ad.doubleclick.net http://127.0.0.1:5000 http://127.0.0.1:5000/* stats.g.doubleclick.net www.google-analytics.com t.co analytics.twitter.com analytics.google.com logx.optimizely.com www.google.co.uk hsbc.co.uk www.hsbc.co.uk .demdex.net .lo.cobrowse.liveperson.net .tt.omtrdc.net .sc.omtrdc.net .mcmprod.hsbc.co.uk rbwm-api.us.hsbc.com rbwm-api.hsbc.co.uk rbwm-api.hsbc.com.hk www.askus.hsbc.co.uk www.security.hsbc.co.uk translate.googleapis.com .brightcove.com cdn-assets-prod.s3.amazonaws.com; frame-src 'self' blob: .lpsnmedia.net .optimizely.com .liveperson.net .google.com .doubleclick.net www.facebook.com connect.facebook.net www.youtube.com m.youtube.com .demdex.net www.googletagmanager.com td.doubleclick.net .ep-mimecast.facebook.com 8068700.fls.doubleclick.net gateway.zscalertwo.net google.com; frame-ancestors 'self' www.hsbc.co.uk .liveperson.net; font-src 'self' data: .hsbc.com.hk fonts.gstatic.com .cloudfront.net at.alicdn.com cdn.jsdelivr.net; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' .hsbc.com.hk .googleapis.com .askus.hsbc.co.uk www.googletagmanager.com .lo.cobrowse.liveperson.net; object-src 'self' players.brightcove.net; media-src 'self' blob: lpcdn.lpsnmedia.net *.brightcovecdn.com manifest.prod.boltdns.net ssl.gstatic.com brightcove.hs.llnwd.net; manifest-src 'self' www.hsbc.co.uk; upgrade-insecure-requests ; report-uri /csp/report; Last-Modified: Tue, 06 Jun 2023 08:10:55 GMT Accept-Ranges: bytes S: dispatcher3euwest1 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=60, s-maxage=60 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 af3abf09293a5c762de5e451f8d6a912.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: o8zms88icaLGlQdWtXWjwJagUwO5MuMIGvFw7aa0l4XfwzQxWgl86A==
2023-06-06 08:39:00 UTC	3786	IN	Data Raw: 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 61 6c 2d 63 75 72 74 61 69 6e 22 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 72 69 64 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 61 6c 2d 62 6f 64 79 20 6c 67 2d 38 20 6d 64 2d 31 32 20 73 6d 2d 31 32 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 4d 2d 4d 4f 44 57 49 4e 2d 52 57 2d 44 45 56 20 63 6c 65 61 72 66 69 78 20 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 64 61 74 61 2d 76 61 6c 69 64 61 74 69 6f 6e 2d 6d 65 73 73 61 67 65 3d 22 43 6f 6e 74 69 6e 75 65 22 3e 0a 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 61 72 69 61 2d 6c 61 62 65 6c Data Ascii: <div class="modal-curtain"> <div class="grid"> <div class="row"> <div class="modal-body lg-8 md-12 sm-12"><div class="M-MODWIN-RW-DEV clearfix " tabindex="-1" data-validation-message="Continue"> <button type="button" aria-label

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
91	192.168.2.4	49878	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:00 UTC	3793	OUT	GET /configuration/modals/you-are-leaving-hsbc-make-claim.modal/ HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Accept: / X-Requested-With: XMLHttpRequest ADRUM: isAjax:true sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373
2023-06-06 08:39:00 UTC	3797	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 2141 Connection: close Date: Tue, 06 Jun 2023 08:39:00 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains Content-Security-Policy: default-src 'self' .hsbc.com.hk; script-src 'self' 'unsafe-eval' 'unsafe-inline' .tiqcdn.com .tealiumiq.com .liveperson.net .googletagmanager.com .hsbc.co.uk .hsbc.com.hk .doubleclick.net .googleadservices.com .lpsnmedia.net .optimizely.com .facebook.net .google.com .gstatic.com .appdynamics.com .googleapis.com .awswaf.com bat.bing.com .amazon-adsystem.com players.brightcove.net vjs.zencdn.net s.amazon-adsystem.com .v.liveperson.net googleads.g.doubleclick.net connect.facebook.net static.ads-twitter.com tags.tiqcdn.com lptag.liveperson.net lpcdn.lpsnmedia.net cdn.optimizely.com accdn.lpsnmedia.net www.googletagmanager.com cdn.appdynamics.com www.google-analytics.com ssl.google-analytics.com www.googleadservices.com cdn-assets-prod.s3.amazonaws.com app.contentsquare.com; img-src data: blob:; connect-src 'self' .tiqcdn.com .tealiumiq.com .hsbc.com.hk .eum-appdynamics.com .optimizely.com wss://.liveperson.net .cloud.hsbc .awswaf.com .contentsquare.net bat.bing.com manifest.prod.boltdns.net .brightcovecdn.com adservice.google.com .api.brightcove.com brightcove.hs.llnwd.net www.facebook.com maps.googleapis.com www.google.com www.googletagmanager.com .siteintercept.qualtrics.com ad.doubleclick.net http://127.0.0.1:5000 http://127.0.0.1:5000/* stats.g.doubleclick.net www.google-analytics.com t.co analytics.twitter.com analytics.google.com logx.optimizely.com www.google.co.uk hsbc.co.uk www.hsbc.co.uk .demdex.net .lo.cobrowse.liveperson.net .tt.omtrdc.net .sc.omtrdc.net .mcmprod.hsbc.co.uk rbwm-api.us.hsbc.com rbwm-api.hsbc.co.uk rbwm-api.hsbc.com.hk www.askus.hsbc.co.uk www.security.hsbc.co.uk translate.googleapis.com .brightcove.com cdn-assets-prod.s3.amazonaws.com; frame-src 'self' blob: .lpsnmedia.net .optimizely.com .liveperson.net .google.com .doubleclick.net www.facebook.com connect.facebook.net www.youtube.com m.youtube.com .demdex.net www.googletagmanager.com td.doubleclick.net .ep-mimecast.facebook.com 8068700.fls.doubleclick.net gateway.zscalertwo.net google.com; frame-ancestors 'self' www.hsbc.co.uk .liveperson.net; font-src 'self' data: .hsbc.com.hk fonts.gstatic.com .cloudfront.net at.alicdn.com cdn.jsdelivr.net; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' .hsbc.com.hk .googleapis.com .askus.hsbc.co.uk www.googletagmanager.com .lo.cobrowse.liveperson.net; object-src 'self' players.brightcove.net; media-src 'self' blob: lpcdn.lpsnmedia.net *.brightcovecdn.com manifest.prod.boltdns.net ssl.gstatic.com brightcove.hs.llnwd.net; manifest-src 'self' www.hsbc.co.uk; upgrade-insecure-requests ; report-uri /csp/report; Last-Modified: Tue, 06 Jun 2023 08:10:58 GMT Accept-Ranges: bytes S: dispatcher3euwest2 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=60, s-maxage=60 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 6f5ba49c3df973a476d63dbb743d9b22.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: lBiV7tRh5h9syJZ5mnV9KqOYgcb8UrgFcCQ1BX1Zg1iqx30xWJ6dGQ==
2023-06-06 08:39:00 UTC	3800	IN	Data Raw: 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 61 6c 2d 63 75 72 74 61 69 6e 22 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 72 69 64 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 61 6c 2d 62 6f 64 79 20 6c 67 2d 38 20 6d 64 2d 31 32 20 73 6d 2d 31 32 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 4d 2d 4d 4f 44 57 49 4e 2d 52 57 2d 44 45 56 20 63 6c 65 61 72 66 69 78 20 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 64 61 74 61 2d 76 61 6c 69 64 61 74 69 6f 6e 2d 6d 65 73 73 61 67 65 3d 22 43 6f 6e 74 69 6e 75 65 22 3e 0a 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 61 72 69 61 2d 6c 61 62 65 6c Data Ascii: <div class="modal-curtain"> <div class="grid"> <div class="row"> <div class="modal-body lg-8 md-12 sm-12"><div class="M-MODWIN-RW-DEV clearfix " tabindex="-1" data-validation-message="Continue"> <button type="button" aria-label

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
92	192.168.2.4	49879	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:00 UTC	3794	OUT	GET /auth-status-hint?_=1686040767408 HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Content-Type: json Accept: / X-Requested-With: XMLHttpRequest ADRUM: isAjax:true sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373
2023-06-06 08:39:00 UTC	3796	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 20 Connection: close Server: CloudFront Date: Tue, 06 Jun 2023 08:39:00 GMT Cache-Control: max-age=0, no-cache, no-store Content-Encoding: UTF-8 X-Cache: LambdaGeneratedResponse from cloudfront Via: 1.1 ae3f020e2e89e632d339db198e9ba75a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: TdC2mVg23QYjbIp8HVcObozS-QBEFLltQlApQ1ZFfRVEsjBV9IevXg==
2023-06-06 08:39:00 UTC	3797	IN	Data Raw: 7b 22 61 75 74 68 6f 72 69 7a 65 64 22 3a 66 61 6c 73 65 7d Data Ascii: {"authorized":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
93	192.168.2.4	49882	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:00 UTC	3795	OUT	GET /etc.clientlibs/dpws/clientlibs-public/clientlib-site/resources/social/twitter.svg HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.hsbc.co.uk/etc.clientlibs/dpws/clientlibs-public/clientlib-default.min.7675554f68ae226cdde18af7ac43f392.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373; tms_ref=; servicingTrafficManagement2=SegmentNewJourney; servicingTrafficManagement3=SegmentNewJourney; utag_main=v_id:01888fdc714a00035f72975780d20006f001706700918$_sn:1$_se:1$_ss:1$_st:1686042568844$ses_id:1686040768844%3Bexp-session$_pn:1%3Bexp-session$sskey:undefined%3Bexp-1688632768902; dclid=undefined
2023-06-06 08:39:00 UTC	3802	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1230 Connection: close Date: Tue, 06 Jun 2023 08:39:00 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains Last-Modified: Sat, 03 Jun 2023 04:23:42 GMT Accept-Ranges: bytes S: dispatcher3euwest2 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=7776000, s-maxage=7776000 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 c7cdb483c2afdb721f3c8ba14cd43e86.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: 7iw4wwCZw4YuyeABHZzTkAbqvomQ7fauYqkrBEbhh9_Mg_Ksm9ehnQ==
2023-06-06 08:39:00 UTC	3803	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 74 77 69 74 74 65 72 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_twitter" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0p

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
94	192.168.2.4	49881	18.66.192.16	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:00 UTC	3804	OUT	GET /utag/hsbc/uk-rbwm/prod/utag.3520.js?utv=ut4.47.202207061622 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:39:00 UTC	4361	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 43920 Connection: close Last-Modified: Wed, 31 May 2023 18:12:39 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: BbFTlSqQ8EUO_IMOKh3WeLsnfDAfoqVq Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 06 Jun 2023 08:39:01 GMT ETag: "211259ac196840071dc9ca32ab461ce3" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 89efe3a7854e47cf7f1fe47e28e39348.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P1 X-Amz-Cf-Id: oWH1bmd2aZmK-KGZQ86UWiJAy0WQ3GAcvyYXeKt8Opemm4iLVzItXQ== Cache-Control: max-age=1296000
2023-06-06 08:39:00 UTC	4362	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 33 35 32 30 20 75 74 34 2e 30 2e 32 30 32 33 30 35 33 31 31 38 30 39 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 33 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 75 2e 65 76 3d 7b 22 76 69 65 77 22 3a 31 2c 22 6c 69 6e 6b 22 3a 31 7d 3b 75 2e 73 63 72 69 70 74 72 65 71 75 65 73 74 65 64 3d 75 2e 73 63 72 69 70 74 72 65 71 75 65 73 74 65 64 7c 7c 66 61 6c 73 65 3b 76 61 72 20 55 44 4f 73 41 Data Ascii: //tealium universal tag - utag.3520 ut4.0.202305311809, Copyright 2023 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;u.ev={"view":1,"link":1};u.scriptrequested=u.scriptrequested\|\|false;var UDOsA
2023-06-06 08:39:00 UTC	4378	IN	Data Raw: 2c 31 45 34 29 7d 3b 30 3d 3d 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 22 66 69 6c 65 3a 2f 2f 22 29 26 26 77 69 6e 64 6f 77 5b 63 73 61 4e 61 6d 65 2b 27 74 6d 6f 50 6f 6c 6c 27 5d 28 29 3b 77 69 6e 64 6f 77 5b 63 73 61 4e 61 6d 65 2b 27 6a 73 49 6e 73 65 72 74 41 6c 72 65 61 64 79 4c 6f 61 64 65 64 27 5d 3d 21 31 3b 6c 5b 63 73 61 4e 61 6d 65 2b 27 67 65 74 53 44 27 5d 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 66 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 62 2c 63 2c 61 29 7b 69 66 28 21 63 26 26 30 21 3d 3d 63 26 26 21 31 21 3d 3d 63 29 0a 72 65 74 75 72 6e 20 61 3b 63 3d 68 28 63 29 3b 61 2e 6c 65 6e 67 74 68 2b 62 2e 6c 65 6e 67 74 68 2b 63 2e 6c 65 6e 67 74 68 3c 3d 46 26 26 28 61 3d 61 2b 62 2b 63 29 3b Data Ascii: ,1E4)};0===window.location.href.indexOf("file://")&&window[csaName+'tmoPoll']();window[csaName+'jsInsertAlreadyLoaded']=!1;l[csaName+'getSD']=function(a,c,f){function d(b,c,a){if(!c&&0!==c&&!1!==c)return a;c=h(c);a.length+b.length+c.length<=F&&(a=a+b+c);
2023-06-06 08:39:00 UTC	4430	IN	Data Raw: 2c 63 2c 62 29 29 0a 72 65 74 75 72 6e 21 30 7d 63 61 74 63 68 28 66 29 7b 7d 0a 72 65 74 75 72 6e 21 31 7d 2c 64 69 73 74 72 69 62 75 74 65 41 63 74 69 6f 6e 54 6f 43 68 69 6c 64 43 73 61 73 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 77 69 6e 64 6f 77 5b 63 73 61 4e 61 6d 65 2b 27 67 48 57 27 5d 29 7b 76 61 72 20 63 3d 5b 5d 3b 61 3d 74 68 69 73 2e 72 65 63 75 72 73 65 43 68 69 6c 64 43 73 61 73 28 77 69 6e 64 6f 77 5b 63 73 61 4e 61 6d 65 2b 27 67 48 57 27 5d 28 29 2c 61 2c 63 29 3b 69 66 28 30 3c 63 2e 6c 65 6e 67 74 68 29 0a 66 6f 72 28 76 61 72 20 62 3d 30 2c 64 3d 63 2e 6c 65 6e 67 74 68 3b 62 3c 64 3b 62 2b 2b 29 0a 63 5b 62 5d 5b 63 73 61 4e 61 6d 65 2b 27 52 54 45 48 61 6e 64 6c 65 72 27 5d 2e 70 72 6f 63 65 73 73 51 75 65 75 65 28 29 3b 72 Data Ascii: ,c,b))return!0}catch(f){}return!1},distributeActionToChildCsas:function(a){if(window[csaName+'gHW']){var c=[];a=this.recurseChildCsas(window[csaName+'gHW'](),a,c);if(0<c.length)for(var b=0,d=c.length;b<d;b++)c[b][csaName+'RTEHandler'].processQueue();r

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
95	192.168.2.4	49880	18.66.192.16	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:00 UTC	3804	OUT	GET /utag/hsbc/uk-rbwm/prod/utag.3605.js?utv=ut4.47.202206091620 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.hsbc.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-06 08:39:00 UTC	4347	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 14234 Connection: close Date: Tue, 06 Jun 2023 08:39:01 GMT Last-Modified: Wed, 31 May 2023 18:12:43 GMT ETag: "f2ff301305b83aa76780b3823aa8cd25" x-amz-server-side-encryption: AES256 x-amz-version-id: qhtyE7Kfg9ei3MD7kV3m9b1pvtRBu7Er Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 1a45d1e1304c39dfa9b034c2308f4976.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P1 X-Amz-Cf-Id: LVqqbxchP2kgSF3OnWYkMTQLyLuC68ueHcGyAMo7gw6CPqbm4j8w6Q== Cache-Control: max-age=1296000
2023-06-06 08:39:00 UTC	4347	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 33 36 30 35 20 75 74 34 2e 30 2e 32 30 32 33 30 35 33 31 31 38 30 39 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 33 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 77 69 6e 64 6f 77 2e 6c 70 54 61 67 3d 77 69 6e 64 6f 77 2e 6c 70 54 61 67 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 6c 70 54 61 67 2e 61 75 74 6f 53 74 61 72 74 3d 66 61 6c 73 65 3b 6c 70 54 61 67 2e 73 64 65 73 3d 6c 70 54 61 67 2e 73 64 65 73 7c 7c 5b 5d 3b 76 61 72 20 70 75 73 68 49 64 65 6e 74 69 74 69 65 73 3d 74 72 75 65 3b 66 75 6e 63 74 69 6f 6e 20 74 65 61 6c 69 75 6d 5f 6c 69 76 65 70 65 72 73 6f 6e 5f 6c 69 62 28 5f 73 69 74 65 Data Ascii: //tealium universal tag - utag.3605 ut4.0.202305311809, Copyright 2023 Tealium.com Inc. All Rights Reserved.window.lpTag=window.lpTag\|\|{};window.lpTag.autoStart=false;lpTag.sdes=lpTag.sdes\|\|[];var pushIdentities=true;function tealium_liveperson_lib(_site

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
96	192.168.2.4	49883	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:00 UTC	3805	OUT	GET /content/dam/hsbc/gb/images/logos/hsbc-uk.svg HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373; tms_ref=; servicingTrafficManagement2=SegmentNewJourney; servicingTrafficManagement3=SegmentNewJourney; utag_main=v_id:01888fdc714a00035f72975780d20006f001706700918$_sn:1$_se:1$_ss:1$_st:1686042568844$ses_id:1686040768844%3Bexp-session$_pn:1%3Bexp-session$sskey:undefined%3Bexp-1688632768902; dclid=undefined
2023-06-06 08:39:00 UTC	3806	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 2043 Connection: close Date: Tue, 06 Jun 2023 08:38:58 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains Last-Modified: Fri, 02 Jun 2023 17:23:23 GMT Accept-Ranges: bytes S: dispatcher2euwest1 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=2592000, s-maxage=2592000 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 5b3be43b5ff3292b36e9c737ff94254a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: MqoWvZjF__dQ-xxTb38-dbPCTaWl5uQWuHLBFcrzgczDC03khy1c9w== Age: 2
2023-06-06 08:39:00 UTC	3806	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 31 2e 30 2e 32 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 48 53 42 43 5f 4d 41 53 54 45 52 42 52 41 4e 44 5f 55 4b 5f 57 57 5f 52 47 42 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 21.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="HSBC_MASTERBRAND_UK_WW_RGB" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
97	192.168.2.4	49884	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:00 UTC	3808	OUT	GET /content/dam/hsbc/gb/images/16-9/learning-to-ride-1.jpg/jcr:content/renditions/cq5dam.web.590.1000.jpeg HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373; tms_ref=; servicingTrafficManagement2=SegmentNewJourney; servicingTrafficManagement3=SegmentNewJourney; utag_main=v_id:01888fdc714a00035f72975780d20006f001706700918$_sn:1$_se:1$_ss:1$_st:1686042568844$ses_id:1686040768844%3Bexp-session$_pn:1%3Bexp-session$sskey:undefined%3Bexp-1688632768902; dclid=undefined
2023-06-06 08:39:00 UTC	3809	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 54880 Connection: close Date: Tue, 06 Jun 2023 08:38:58 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains Last-Modified: Fri, 02 Jun 2023 17:41:15 GMT Accept-Ranges: bytes S: dispatcher3euwest2 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=2592000, s-maxage=2592000 X-Cache: Hit from cloudfront Via: 1.1 ac90d46be219b2aa8a23e6982405715c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: BGFM35hpiwhN3CSbff3c9xDr2PZ4fcMYSuXVAXAFmOj9uzyuArMKoQ== Age: 2
2023-06-06 08:39:00 UTC	3810	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 4b 02 4e 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFCCKN"}!1AQa"q2
2023-06-06 08:39:00 UTC	3825	IN	Data Raw: af 5f bc 00 c2 d7 57 b1 4d 95 68 62 1b 95 72 38 00 0a fa 97 e2 4e 91 e1 df 1f fc 2f b9 b7 76 5b 96 b4 b6 33 ac ca 72 db b1 90 73 5f 3f f8 3e ea c3 c1 7a 3f 93 2c c8 b7 2f 89 63 20 f9 86 60 7a 03 f4 af a0 af 81 a3 19 f3 73 68 d1 e7 50 c5 ce 51 e5 b6 a8 e8 ff 00 67 3d 56 5b eb 20 9a 8d dc d6 fa 6b 44 63 d9 21 f9 81 e9 8f 6a ef f5 8f 02 68 d6 ba a6 9f 36 a9 72 df 60 b9 25 14 39 db b7 d3 35 e2 96 9e 38 b0 d3 f4 eb 97 b6 b4 2a 61 b9 32 49 38 1c 1e 72 6b de bc 13 aa 68 be 2e d0 6d 5a 4b a8 af 6e ee 1c 39 59 65 e1 00 c6 07 b5 4e 17 d9 55 fd dd 95 f7 57 fc 8d 31 12 9d 3b 4d 37 e7 63 9f d4 a0 b3 f0 77 8e d2 0d 3a fc cd a6 39 8a 19 a3 53 b8 80 7a f1 f4 ae b7 5e f8 Data Ascii: _WMhbr8N/v[3rs_?>z?,/c `zshPQg=V[ kDc!jh6r`%958*a2I8rkh.mZKn9YeNUW1;M7cw:9Sz^
2023-06-06 08:39:00 UTC	3825	IN	Data Raw: 8d 63 6d 7f 25 aa 48 55 24 4f 2a da 32 31 9f 5a f2 1f 1e 6a 5a 66 a7 f1 27 54 8f 41 05 2e 2d f0 af 70 47 c8 92 01 82 07 e1 5c ef 88 b4 ed 46 6d 62 28 2f ae 10 3a c0 1a 1b a5 62 06 e2 79 00 67 83 5a e2 1d 78 cd d3 a4 95 b7 fe bc 89 a3 ec a5 05 52 a3 77 3d d3 4d f8 ad 63 e1 db 6b 9b 54 f3 e4 bb 2b c1 23 e4 cf b5 6a d8 7c 4e b6 be d4 74 e8 a1 0e 92 96 cc 9e 61 c0 af 99 af 65 d4 ed 4d c4 93 4b 10 16 4a 36 e7 92 c3 bf e3 5b 5a 46 a5 0d f4 5a 7b 11 2c ad 70 76 3b 96 3c 67 a5 56 1f 17 5e 0d 2a 8d 58 2a 61 a8 cd 37 05 a9 f5 dc be 3e 08 d3 21 04 49 c0 49 81 fd de 4f 41 9a e6 bc 5b e2 db 8b d5 8a c5 e3 8f c9 6b 88 c1 66 1c 0e fd 6b 0e dd 5e e3 c0 d0 e9 a8 6d 9e fa 51 88 02 1e 5b 1d 33 ef 4d f0 4c fa 87 8a e6 b1 b5 ba 4d 92 d9 cd e5 cb 1c a9 85 2c a3 9a f7 54 a5 52 Data Ascii: cm%HU$O21ZjZf'TA.-pG\Fmb(/:bygZxRw=MckT+#j\|NtaeMKJ6[ZFZ{,pv;<gV^X*a7>!IIOA[kfk^mQ[3MLM,TR
2023-06-06 08:39:00 UTC	3826	IN	Data Raw: 73 cc 85 55 4e 7b 1a f3 7d 57 e3 5d c7 81 7c 4d 3d aa dc 43 a9 44 e0 6f 0f cf d7 3e 95 cc f1 bc 91 b5 45 f3 dc d9 61 94 df 34 1f c8 f7 7b 2f 13 69 73 ac b6 b2 5e 99 2e d9 33 e4 46 dd b1 da bc 03 c4 fa b9 87 5e d6 ad 7e d0 92 42 64 46 c3 1c 90 42 f4 35 c1 df fc 4e 97 54 f1 6d ec b6 a2 2b 17 55 de 05 bb 10 0a 9e c0 d7 31 0d f4 b0 6a 7a a9 9a e2 47 33 14 9c bb 1e 57 23 d0 fe 15 e1 d6 c4 4f 15 46 a2 b5 ac b4 f3 5a 7e 87 b3 42 8a a1 56 0e f7 be fe 4f 53 a9 d4 7c 41 6f 73 6f 2a 45 18 8e 58 41 e5 5b 81 5c 8e af e2 67 b1 5b 69 27 8d 81 ea 5b f8 8a 91 d8 57 37 ae de 1f 32 65 69 88 8e 5e 52 48 fa 93 e8 69 fa 24 9a 86 a9 a6 cd 1d e1 48 a1 24 05 9e 51 ba 46 03 f8 46 7a 0a f2 f0 d8 58 39 5d b3 be bd 79 25 a1 2f 86 75 ed 2a 4d 4e ea da ee c9 e4 91 88 91 59 f8 2c 6a 7f Data Ascii: sUN{}W]\|M=CDo>Ea4{/is^.3F^~BdFB5NTm+U1jzG3W#OFZ~BVOS\|AosoEXA[\g[i'[W72ei^RHi$H$QFFzX9]y%/uMNY,j
2023-06-06 08:39:00 UTC	3842	IN	Data Raw: 8c 35 8d 5f 48 89 b4 6b db 38 5a ee 19 1e 79 d0 c5 e5 a2 b8 2c 79 c1 ce 07 6a fb f3 c1 da 4d dd d6 ab 15 c4 97 f7 06 2b 51 9f 2d 48 1b 89 e3 0c 7d 2b 47 5a d2 da e2 25 b8 13 3c 5e 49 fb bd 06 3d 6b 6f c0 72 c7 6f 6b 72 d2 c5 1d d2 ef c9 91 8b 70 00 f6 35 f0 0a b6 37 fd 60 a7 87 9c dc 69 46 2e 56 56 b4 95 b7 7a df 47 e5 d0 f4 f3 7c ca 39 c5 29 e3 65 04 a6 f4 d2 fa 6b e7 ea 6e 47 e6 ca db 40 c6 7b 93 d2 b8 0f 8a 7f 16 e0 f0 06 93 21 b5 47 9e 56 fd db 5c 46 32 10 9e 9c 7a 55 6f 8a 1f 12 35 7f 0f d8 ce f6 ba 74 16 16 27 ac cf 26 59 87 6e 09 fd 2b e4 bf 1f fc 68 f1 56 bd 71 34 30 ea 7f 66 b1 2a 54 c1 6e 8a 03 7f bd c6 4d 7b 18 fc cd cd ba 34 9b 5e 67 95 81 cb ad 6a b5 6c ce 5b c6 7e 23 d4 7e 20 f8 ba 18 fe d7 3d c5 c5 ec ca 91 2b fd d0 cc 7a 0f 6a fa 07 4f 87 Data Ascii: 5_Hk8Zy,yjM+Q-H}+GZ%<^I=korokrp57`iF.VVzG\|9)eknG@{!GV\F2zUo5t'&Yn+hVq40f*TnM{4^gjl[~#~ =+zjO
2023-06-06 08:39:00 UTC	3858	IN	Data Raw: 7f 3a bf 62 fa b2 7d aa 7b 23 cd e2 b2 0c 87 82 e3 19 0c 14 64 63 b7 63 56 6d 34 86 91 b7 88 9a 77 24 80 a2 33 91 8e fc 7f f5 8d 7a 02 eb 7a 3a e3 6c b0 91 db cb 43 c1 f7 e3 8f a9 a8 a4 f1 c6 95 0c 86 38 e4 69 98 13 f2 c5 82 78 1c f7 a3 d9 45 6f 21 fb 49 3d a2 72 7f f0 8e df 49 04 65 2c 26 0c 9c 6e 19 c9 c9 1d 33 c7 61 d6 a6 ff 00 84 37 57 9d 94 a5 b7 97 b3 8c 5c 38 e7 38 ee 1b fa 1e 95 b8 ff 00 10 63 21 00 b3 73 11 62 a5 89 3c 7a 02 31 d6 ab cb f1 06 e5 5f 22 d2 31 b5 b6 a8 66 24 8f 73 ed c8 a2 d4 97 50 bd 47 d0 4b 7f 00 5d 08 d4 3b 5b a8 18 24 38 2c 4f b1 e3 f5 ad 0b 6f 01 61 73 25 d7 ef 4a fc ec a0 9f c3 a8 fe 55 9a de 39 d4 ae 37 34 5b 3c be 72 55 33 8c 7a 13 c6 3f 3a ab 37 88 f5 29 18 ca b7 cc 00 e1 b6 63 ae 7f bb 8e d4 ef 49 6c 85 cb 51 ee ce 9e 0f Data Ascii: :b}{#dccVm4w$3zz:lC8ixEo!I=rIe,&n3a7W\88c!sb<z1_"1f$sPGK];[$8,Ooas%JU974[<rU3z?:7)cIlQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
98	192.168.2.4	49885	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:00 UTC	3863	OUT	GET /content/dam/hsbc/gb/images/insurance/21-9/10039-eating-pizza-surrounded-by-moving-box-mass-retail-933x400.jpg HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373; tms_ref=; servicingTrafficManagement2=SegmentNewJourney; servicingTrafficManagement3=SegmentNewJourney; utag_main=v_id:01888fdc714a00035f72975780d20006f001706700918$_sn:1$_se:1$_ss:1$_st:1686042568844$ses_id:1686040768844%3Bexp-session$_pn:1%3Bexp-session$sskey:undefined%3Bexp-1688632768902; dclid=undefined
2023-06-06 08:39:00 UTC	3948	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 260811 Connection: close Date: Tue, 06 Jun 2023 08:38:58 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains Last-Modified: Fri, 02 Jun 2023 17:41:15 GMT Accept-Ranges: bytes S: dispatcher2euwest2 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=2592000, s-maxage=2592000 X-Cache: Hit from cloudfront Via: 1.1 47225389ee58add3b9e790ead940cda4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: ttKGe7_EezR47AOdqtSZWOSlnW_oGzMeRtHguBOXGeRmgDkw6tx4Lw== Age: 2
2023-06-06 08:39:00 UTC	3980	IN	Data Raw: ff d8 ff db 00 84 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 02 02 02 02 02 02 02 02 02 02 02 03 03 03 03 03 03 03 03 03 03 01 01 01 01 01 01 01 02 01 01 02 02 02 01 02 02 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 ff dd 00 04 00 75 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff c0 00 11 08 01 90 03 a5 03 00 11 00 01 11 01 02 11 01 ff c4 00 e8 00 00 01 04 03 01 01 01 01 00 00 00 00 00 00 00 00 04 03 05 06 07 02 08 09 01 0a 00 0b 01 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 02 00 01 03 04 05 06 07 08 09 10 00 02 01 03 03 02 04 04 03 06 03 05 03 05 01 21 01 Data Ascii: uAdobed!
2023-06-06 08:39:00 UTC	4015	IN	Data Raw: 3e 30 db e4 31 4b a0 6f f0 1e db 56 8a 79 17 70 00 b0 0c 22 60 70 18 7d ba be 8c 6f 0a 70 48 79 07 ce ab 9b 77 d3 ba 4d 7f ff d2 de ef 89 af 0f a6 bc 68 aa 8d 77 68 89 da e1 a5 d1 5e e7 04 63 2d 35 ac 30 f3 a6 18 04 97 a4 20 3e 7e 99 eb f2 eb a3 17 a2 de f0 34 e7 fe 5d d2 12 7f 2a b6 49 f0 3b 1f 1a fb f7 17 67 ae 64 a4 7f 31 20 91 de 38 8f 1e 22 aa cf 87 8f 14 21 9e 2a 6a 59 27 06 58 24 54 93 d4 41 65 07 1b b1 ef 81 d7 73 8b d8 66 46 70 35 02 b8 30 bc ab 20 ed 5d 24 b1 dc 21 af a7 22 39 37 89 23 59 23 3d f3 b8 0c 6d fb 9e b8 b5 36 50 4a 0d 4c a2 20 2a 9e 18 b0 29 21 6f c3 98 dc 1f 62 38 19 f7 c6 7a 8f b5 21 54 80 4e a9 e7 59 20 65 0d 1e d6 e5 8b a7 d7 07 93 81 93 c0 e9 00 ac a5 24 19 9a 62 63 5e 1c 6b 17 19 90 e4 03 b8 60 e3 20 b3 63 91 9e 3b 74 c7 7a 20 Data Ascii: >01KoVyp"`p}opHywMhwh^c-50 >~4]I;gd1 8"!jY'X$TAesfFp50 ]$!"97#Y#=m6PJL *)!ob8z!TNY e$bc^k` c;tz
2023-06-06 08:39:00 UTC	4047	IN	Data Raw: 37 1e 8a cd 56 44 fd 5d e4 14 af 81 49 80 7c 75 83 af 2d 7d 95 c6 bf 86 dc dd 92 fe 1c f0 51 93 28 74 00 a0 3b 8e d1 ca 62 9f e3 f1 5b c3 2f 16 ac 51 5f 7c 3f d6 3a 67 57 d8 6a 8b b3 56 d8 6f 54 d5 86 9d 90 f9 65 27 8a 19 56 b6 dd 56 1c 15 c4 c9 1b 86 18 c1 23 88 af c2 1b 50 07 d3 26 60 c8 31 e0 63 4e fd bc ea 7c 3e de ea d5 5d a0 42 80 8d a4 1f 78 3d e3 dd 55 fd d6 f4 f1 3c 88 a8 af 4f 4a a9 23 ba a9 c8 7e 56 38 c6 dc b7 e1 23 71 c6 58 8f e9 94 e2 fb 79 52 07 f5 ae 82 de dd 25 39 a7 b6 49 8f 89 fd ab 5c bc 4e d5 53 69 2d 37 7f d4 f5 b2 bd 14 30 d2 55 d6 d4 34 7c aa c7 18 91 89 59 0e f3 34 cf 1c 60 6d 04 63 00 7b f1 4d 4c af 30 09 1f 68 a3 b7 89 f9 f5 56 b3 3d 52 40 ce 41 4a 47 b8 7b ab e3 e3 51 78 b3 53 e2 b7 8c 9e 3d f8 ef 79 89 6e 10 d3 d7 41 a7 34 c5 Data Ascii: 7VD]I\|u-}Q(t;b[/Q_\|?:gWjVoTe'VV#P&`1cN\|>]Bx=U<OJ#~V8#qXyR%9I\NSi-70U4\|Y4`mc{ML0hV=R@AJG{QxS=ynA4
2023-06-06 08:39:00 UTC	4052	IN	Data Raw: 13 ca 0e 70 37 16 38 52 5c a0 31 81 81 d9 b1 9c 8e ca 74 03 63 e1 40 a4 1f 4b 85 64 f2 44 73 0a 99 64 84 19 10 fc ba 28 02 57 d8 b2 83 20 22 42 a4 e7 39 ed ce 32 7b 3e df 3c 69 80 3b e8 0f 7d 0a f4 ee f0 e2 39 36 44 5c 4d e6 79 6e d3 28 7c c6 e6 73 18 d8 aa 9b f0 a0 77 19 27 a6 85 47 75 16 60 15 f9 a2 3f d2 b2 55 40 67 7c bb 2b 4d 14 3b 8e 1a 41 e5 4b 2b cb bb 76 11 06 53 d2 00 04 9c 73 d2 1b 1a 7d e0 6c 62 9c 3c b0 8b 2c 4f 23 ac b3 c4 bb 18 49 ea 52 5d 77 18 d8 9d a1 98 92 76 f7 60 41 ef d1 4c 02 99 32 6a 3f 0d 87 cf cf cc 11 4d 4d 23 06 de cb 18 ce e0 26 50 ec ee ec ef 24 a3 72 b8 22 42 c3 9e 09 3d fb 74 69 01 5a 9d 29 8a 84 c0 d6 bf ff d7 ec 34 41 be 61 d4 b1 0a cd 94 2c d8 03 8f b7 60 47 3d 7e 47 25 27 ad 33 e8 f0 d7 d7 5f a3 4e 84 f5 39 c0 d6 a6 96 Data Ascii: p78R\1tc@KdDsd(W "B92{><i;}96D\Myn(\|sw'Gu`?U@g\|+M;AK+vSs}lb<,O#IR]wv`AL2j?MM#&P$r"B=tiZ)4Aa,`G=~G%'3_N9
2023-06-06 08:39:00 UTC	4080	IN	Data Raw: 8c a6 08 9f e9 5c 9f 49 71 bb 4e 8e de 22 d3 ea a8 70 ad bc d3 e7 e3 5b 05 27 82 3e 2c d6 19 9a bb c7 8b f0 f3 8f aa 3a 4b 7d 34 71 c6 00 c7 f0 c6 ce 19 89 cf d7 ef d6 b8 fa 34 b1 1a ad f7 49 9e 66 b9 cf f6 f9 23 46 ec da 1e 5f d6 83 b0 f8 39 ae 6a af 75 96 eb a7 8d ba d2 58 6d b4 b1 48 0d 30 a7 89 aa 3c e2 06 d9 7d 23 0b 18 6e dd 3b 3f 47 b8 52 de 53 6b 71 d2 00 fc 47 59 a8 de e9 cb e9 40 5b 56 cc 82 79 81 a5 4a cf c3 75 05 4c 50 c3 72 f1 33 c4 8a d4 8a 57 9f d3 7d 96 98 b3 be 7f 11 89 93 d0 b9 e0 75 a0 df d1 cf 47 51 19 83 8a 8e 6a 27 e3 54 97 d3 dc 5c 92 50 86 53 a7 e1 1f b5 3b 5a fe 1a 7c 36 a0 dd f3 4d a9 ef 66 46 f3 18 dd f5 1d ca a0 34 80 f3 26 d3 3e 07 20 71 d5 e6 3a 0f d1 b6 4c fd 5d 2a 3d fa d5 37 7a 6d d2 27 84 07 82 07 e5 00 54 aa 8f c3 ad 25 Data Ascii: \IqN"p['>,:K}4q4If#F_9juXmH0<}#n;?GRSkqGY@[VyJuLPr3W}uGQj'T\PS;Z\|6MfF4&> q:L]*=7zm'T%
2023-06-06 08:39:00 UTC	4122	IN	Data Raw: ee 3a f5 26 71 7f af 62 d6 0e b8 72 a5 eb 65 34 7f 56 89 06 7f 28 de 78 c9 e5 5e 42 70 94 d8 61 77 8c b4 24 a2 e0 38 07 8c aa 3c ce c3 96 95 32 d2 77 1b b5 8e 0d 2b 6e 9e a5 ae b1 84 b9 cd ba 45 8c cd 43 49 a9 e4 a8 bc d2 34 41 c7 95 51 05 2c 92 4d 0c 60 ee d8 c0 02 17 70 ce 6e 24 c3 17 5d 7b a9 48 6d 47 2c c6 ca 2d 80 83 3c 44 c2 49 e7 df 1a 69 e0 ee 38 d2 9a 61 47 38 ed 10 4e e0 39 da 1e 20 6a 07 23 5b 2f e1 7e b5 d3 1a a6 2d 47 1e a1 09 4d 63 d2 f1 3d e6 49 62 ca 45 56 d6 e8 a3 a5 b2 69 ea 7a 78 db cc a9 f2 58 45 4f 4e 91 ec 48 e4 67 24 b6 09 4e 17 1d c3 2f 6c 7a 93 6b da bb 78 e5 13 b8 cc 65 6b 51 e1 3a a9 44 c9 20 0e 7a f7 38 4d e5 b3 ea 75 6e 88 b6 6b 53 1b 1c ba 21 20 71 8d 12 3b e4 f8 59 da 22 a3 4a 6a 4a dd 45 06 a1 12 b5 d6 94 d5 da 6c a6 8e 40 Data Ascii: :&qbre4V(x^Bpaw$8<2w+nECI4AQ,M`pn$]{HmG,-<DIi8aG8N9 j#[/~-GMc=IbEVizxXEONHg$N/lzkxekQ:D z8MunkS! q;Y"JjJEl@
2023-06-06 08:39:00 UTC	4138	IN	Data Raw: 25 34 65 e5 9e 51 e9 3f 46 c9 4b bd 1a 6a d9 2d 38 ab 92 82 da e3 4c dd 59 c8 11 9b 64 a4 65 ed 1d ce c0 6a 4d 79 17 d2 1a 1f 67 1d 5d ed dd dd ba 18 69 e2 5a 4a 8e 62 d8 56 a5 ce a8 02 56 e2 a6 10 98 81 19 94 60 01 5b e1 6e b5 6a 2f 0f ad 1f bb ae ba bf 40 f8 27 49 74 2f 59 7b 9a c9 5a fa ab 5b 5c 59 f7 09 ea 6b 35 6e af 58 8c 95 d2 c8 fe 5c 2b 4d 41 31 8b 9f 2f b6 7a f5 06 9a 72 cd bc aa 71 ab 64 ab 52 41 ce e2 bb ca 95 ec 01 26 38 57 9b ba fd ae 28 ff 00 58 cd bd d6 24 fa 34 4e 71 d5 b2 8e e0 d3 53 03 89 cc b4 cf 1a 42 8a 0a 7a 89 25 ff 00 c9 4e 9a d4 57 5a f9 6d f5 76 e6 f1 77 5f b5 c1 29 e8 12 e5 ff 00 a5 2f 74 8f 7c 58 6f 17 f9 e2 84 13 14 54 d0 52 50 96 e6 49 36 64 74 68 08 26 70 f4 2d 6e 94 91 d7 39 30 27 75 0c da aa 38 04 80 27 73 14 37 0e 2d 00 Data Ascii: %4eQ?FKj-8LYdejMyg]iZJbVV`[nj/@'It/Y{Z[\Yk5nX\+MA1/zrqdRA&8W(X$4NqSBz%NWZmvw_)/t\|XoTRPI6dth&p-n90'u8's7-
2023-06-06 08:39:00 UTC	4154	IN	Data Raw: 9a c9 88 48 de 65 03 70 97 d0 07 3b 8f 20 f0 32 71 8e 94 c9 ca 76 23 5a 23 a0 d2 b0 a6 94 4a 3c a0 4f 9a cc c7 6b f1 db f1 90 4f 20 00 3a 25 88 12 7d 1a 71 4e 0d 34 b1 cf 05 3b 43 e6 17 53 b1 86 5b 6a e3 90 3f 5e a2 09 49 42 97 3a 0a 7e 34 a7 a5 51 ca c6 77 49 0b 2e c1 9d a7 b9 cb 10 00 c9 03 a8 e0 95 0c c7 40 69 e8 78 59 16 64 dc 84 99 20 20 02 bc 0c 0c 6d 19 e7 83 fd 3a 91 7e 8e 84 6f 4a 9c 29 24 19 ac 50 9c 4b 0c 6a 1b 3b f6 38 e0 c6 57 19 e7 a8 56 08 cb 3b 8a 55 84 91 33 02 a3 79 6c aa 32 9c 0f 2f 07 92 07 04 93 f6 ed d0 e7 33 4f 4e 89 08 4a 46 67 90 c8 dd d6 3d d8 38 53 90 18 f2 48 03 a8 49 25 7a 6d ce 9c 0d 62 8b 55 13 46 1c 2a af a7 0d 80 4a 9c 72 1c 2f 71 93 ef 8e a3 27 22 a3 59 a9 a2 77 af 0c 72 2a 1c aa 28 13 21 32 7a 41 c6 70 14 0c ee 00 1e 90 Data Ascii: Hep; 2qv#Z#J<OkO :%}qN4;CS[j?^IB:~4QwI.@ixYd m:~oJ)$PKj;8WV;U3yl2/3ONJFg=8SHI%zmbUFJr/q'"Ywr(!2zAp
2023-06-06 08:39:00 UTC	4170	IN	Data Raw: 04 73 a2 c9 4f 3e 9d a2 a9 b8 d1 54 a3 47 e6 a4 94 f7 2d b4 f6 f9 e2 95 47 a1 92 46 57 24 60 f5 e8 ce e3 78 7b 72 33 15 28 18 ec 82 75 1e a1 5e 3c d7 47 f1 37 60 e4 08 49 e2 a2 07 b0 49 aa da f9 f1 0d 67 b9 2c 71 5a 34 ed e2 5f 2e 58 aa 92 5b ad 45 25 ba 27 11 6e 0c 92 45 0f cd c8 81 5d b0 79 dc 08 ed 8c 75 9a fe 3e db 90 19 6d 67 5e 24 0f de b4 1b e8 cb c9 d5 e7 90 07 e5 05 47 db 14 d5 5d f1 05 ab a5 8c bd be d1 61 a0 db f8 d1 a1 ac ba 4d 95 1e b5 2d 51 55 4d 0a 6d c6 41 db ea f6 ea ab 98 fd d2 bd 04 36 93 e6 a3 ef 15 69 be 8e 59 27 47 56 e2 bc c2 47 b0 13 ed ae 69 fc 6e 6a 0b b6 a6 bf 78 7b ab 75 05 48 ac ad 9a c7 77 b1 45 51 1d 35 35 1d 3c 74 f6 fb 8a 5c 21 a5 11 d3 c2 a8 3d 57 47 65 f3 0b 39 04 8c e0 75 9a eb f7 17 af 17 1e 39 88 48 1a 00 34 04 e9 03 Data Ascii: sO>TG-GFW$`x{r3(u^<G7`IIg,qZ4_.X[E%'nE]yu>mg^$G]aM-QUMmA6iY'GVGinjx{uHwEQ55<t\!=WGe9u9H4
2023-06-06 08:39:00 UTC	4179	IN	Data Raw: aa 44 04 34 52 3b 5b 9d 4e c6 29 d7 4a 6b bf 12 f5 2e ab f9 7b ad 68 d1 35 75 37 78 22 a5 2b 32 43 69 b0 52 53 d4 c1 05 35 65 be ac c4 f3 d6 d9 ee 15 74 cc d2 50 53 d3 54 5a d5 77 27 91 99 a5 2e ae b0 6c 36 de d3 ac 6c 97 d1 93 5d 3b 4b 24 49 04 4c 24 a4 1f 48 90 b2 75 98 00 05 63 8f e2 37 37 65 95 a7 a8 5e 60 07 e1 40 06 02 82 8e aa 0a 23 d1 00 a4 6c 44 93 2f fe 2a d0 5f fc 5f f0 3a f9 e0 96 bb 86 a9 f5 85 1d 9e df ab 7c 1c ae a9 b7 54 47 2c 9a ce c7 35 7c f5 16 f7 ab 9e a6 63 6b a1 d4 14 e2 7a 68 69 d7 6c 01 67 8c c4 89 1a ed 1c d1 16 b8 4e 30 de 3b 60 47 d5 ba c2 87 d2 0f f7 4b 81 30 00 92 9d 14 4e f2 35 93 ad 77 f6 4f dd 63 18 43 98 05 f8 3f 59 53 69 5b 06 3f bd 44 91 c7 4c da a6 36 85 08 d3 41 a4 bf 0e da c1 ef 76 09 b4 a5 7c d5 10 4f 49 05 6d 23 d3 Data Ascii: D4R;[N)Jk.{h5u7x"+2CiRS5etPSTZw'.l6l];K$IL$Huc77e^`@#lD/*__:\|TG,5\|ckzhilgN0;`GK0N5wOcC?YSi[?DL6Av\|OIm#
2023-06-06 08:39:00 UTC	4195	IN	Data Raw: b2 15 3b 57 27 21 5e 58 da d9 5b b2 5c 7b ad bf 79 b2 ae ad 05 25 0c f6 88 19 d4 09 95 10 27 28 00 89 d4 d2 b3 bd b9 bd b9 79 2d b5 d5 d8 b2 e0 48 71 79 82 9d ec 82 4a 13 02 12 09 8c c4 99 8d 05 44 b5 2d 97 56 dc 2a 6a af 52 5c ed da 72 85 63 a9 86 9e 92 f7 71 af a8 a0 d3 36 d5 59 69 e5 bc 2d 0d a8 53 c1 5f aa ef 10 3b 15 92 6a 86 a6 a0 80 aa 46 af 33 33 0d 3b 1b 9c 3d 96 d3 6c 96 d6 f3 c4 82 54 84 a4 29 c5 68 72 66 54 94 b4 82 35 01 21 4e 2b 52 42 40 15 4a f2 d7 12 75 c5 5c 97 10 cb 30 40 4a d4 a2 96 d3 b1 5e 54 40 53 ab 07 75 2b 2b 63 40 0a a4 d4 0a b2 e7 e1 e0 a1 a2 a6 b0 0d 4d 70 86 96 fb 4e f5 b6 8b 32 d3 69 f9 75 4d fe 85 20 8a 92 eb a8 ae 97 aa 78 6a 2e b4 76 ca 74 32 d2 c4 8c 23 58 e3 f3 11 72 b1 93 ac d3 18 c7 5a a7 2f 3a 84 29 4d 10 95 ae 5c ea Data Ascii: ;W'!^X[\{y%'(y-HqyJD-V*jR\rcq6Yi-S_;jF33;=lT)hrfT5!N+RB@Ju\0@J^T@Su++c@MpN2iuM xj.vt2#XrZ/:)M\
2023-06-06 08:39:00 UTC	4211	IN	Data Raw: 0f 65 6b de b5 f1 ef c0 fd 2b b9 75 1f 88 32 56 32 36 f4 a5 b5 25 3c 12 ef 03 24 7a d9 a5 38 00 f1 8e 7a ed b0 ce 88 e3 f7 9f f9 5b 65 6b c4 83 1e d8 15 c9 de f4 c7 0e b6 30 a5 27 cc d5 5c 3e 35 f4 4d 4c 92 d0 78 63 e1 e6 b8 d5 b2 cc 52 35 9e 5b 5d 6d 5a 54 b6 38 25 8c 10 53 a8 dd f7 c7 5a cf 7d 18 df 29 49 7f 18 ba b6 b6 6d 20 e8 56 99 f5 02 4d 63 ff 00 fd c0 61 60 b7 64 db af 38 76 c8 85 47 ac 8a 24 f8 83 f1 97 ae 62 db a3 3c 2a a2 d2 b4 f2 6e 6a 7a eb e4 94 76 f9 22 56 1e 8f e1 53 a4 93 82 01 cf e2 07 a9 53 85 fd 1f 61 04 7d 7a f8 bc b1 b8 6c 13 3e 66 aa 2a fb a5 d8 9c 9b 7b 65 21 2a e2 b5 01 ec 14 c7 5d f0 f5 f1 d3 ad d5 06 a1 f1 8e dd a6 a9 5f 73 7c a5 aa 3a 9a 83 1f 99 e9 7c 49 3c ee a5 b0 78 ca f5 30 e9 87 d1 96 1e 4f 51 87 b9 70 a1 c5 6a 10 7c 80 Data Ascii: ek+u2V26%<$z8z[ek0'\>5MLxcR5[]mZT8%SZ})Im VMca`d8vG$b<njzv"VSSa}zl>f{e!*]_s\|:\|I<x0OQpj\|
2023-06-06 08:39:00 UTC	4227	IN	Data Raw: ef bb 4c 03 cb 3c 33 16 92 cf 03 c1 70 f6 8b 4c 5a 04 a9 5e 92 d2 fd c2 5c 56 b3 04 f5 8a 49 e4 3b 1a 0d 36 a8 57 88 3f 70 ea 1d bb 71 6f 04 49 4a 1c ca e3 60 c1 04 e5 52 77 d7 34 e6 07 37 6b 7a 37 4d eb 4f 8c 6d 0c af 16 9c d6 1f 0a 3a c6 df 34 42 3a b8 b5 47 81 ba af c3 fd 45 5e 79 33 cd 26 af d3 1a c7 54 d1 c5 55 22 cc e0 2c d6 b9 e0 8b 7f a6 30 a3 1d 5c b1 b3 c2 f0 b6 16 30 fb 77 18 bc 5f f7 f2 cb eb 8e 45 2e b4 d8 56 9a 7a 40 c7 12 60 8c 7c 52 c9 9c 62 e5 2f 5f bc fb 88 4e bd 59 5a d2 89 e0 41 4a 94 53 a8 9d 06 b1 ad 4e 75 b7 8e 9e 3c 78 8d a0 f5 16 80 d4 de 04 f8 3b a1 e9 ae ff 00 2d 0c 5a ab 4b f8 bf 74 d6 33 a3 43 57 49 58 d7 da 2b 44 7a 37 46 ff 00 db 72 c9 40 83 7d 61 77 53 ce 5f f0 8d 8b dc 45 ab bb 31 6a 5b 6d 46 3d 20 d1 6c a4 c4 28 90 1c 5a Data Ascii: L<3pLZ^\VI;6W?pqoIJ`Rw47kz7MOm:4B:GE^y3&TU",0\0w_E.Vz@`\|Rb/_NYZAJSNu<x;-ZKt3CWIX+Dz7Fr@}awS_E1j[mF= l(Z
2023-06-06 08:39:00 UTC	4233	IN	Data Raw: 42 8a 82 89 94 c7 bb f7 af d5 1c b9 a6 76 1e fa 9b 5a 65 21 a3 6c 7f 11 66 63 82 38 23 3c 2e 78 07 03 ab 29 20 e8 3d 08 ac 9b 94 ee 4f 33 53 18 5a 3d be 66 e2 5b 79 38 63 e8 db dc 8f be 31 d5 94 93 19 46 d1 59 0a 44 aa 8f 7a a8 d6 30 5e 25 25 f6 60 a9 c1 5c 1e 78 39 e4 8e 84 02 4c 03 b5 20 80 37 d6 95 a7 a8 92 20 76 92 51 9f 1b 87 a8 81 81 e9 1f 72 4f 4c 40 57 8c 51 09 98 e1 4e 69 34 91 a3 3c 4c a5 a4 23 00 ae 1b 0c 0a 11 bf 82 48 3e de dd 40 40 d9 5b 51 f8 56 6c ad 14 89 33 c8 01 92 12 84 96 20 21 51 cf 6f 62 3b 0e 98 2a 41 00 71 a1 30 69 aa e1 24 0a 30 04 93 b4 ca 48 48 a3 32 3e 07 b9 55 04 fb 75 3b 39 d4 75 81 15 0a c8 4e a7 68 a8 9b d1 5e ab 27 86 4a 0b 45 7c 91 2b 14 77 a8 09 4b 18 24 9c 05 33 ba 64 7d 7a d9 69 09 08 39 c8 f2 d6 a8 39 72 c2 0c 29 49 Data Ascii: BvZe!lfc8#<.x) =O3SZ=f[y8c1FYDz0^%%`\x9L 7 vQrOL@WQNi4<L#H>@@[QVl3 !Qob;*Aq0i$0HH2>Uu;9uNh^'JE\|+wK$3d}zi99r)I
2023-06-06 08:39:00 UTC	4249	IN	Data Raw: cc 93 4e 62 a5 05 1f 98 06 f9 25 2d 13 b8 6c 30 45 39 24 fb 85 03 a7 2a 02 a3 09 25 5a 6c 2b d6 8e 49 4c 11 28 1e 59 85 de 38 d4 e0 1c fe 12 c7 8c f2 7a 40 e6 30 76 8a 40 c4 9e 33 42 3b 35 24 2d 0a 03 23 ef 0e cc a7 11 26 06 71 c7 07 04 74 04 40 a9 07 68 e6 3a 69 59 d5 dc 24 9e 98 97 25 08 48 f3 32 b6 4b 61 86 53 6f b0 c1 1d 14 92 29 92 88 54 0d b9 57 95 12 48 67 a7 67 91 a1 85 23 88 a8 5f 53 3e 48 e4 81 cf 27 a1 0a d4 51 00 02 4e 92 a9 a3 a4 91 23 f3 91 fc d4 02 58 e5 f3 b6 9d ee 31 9d 83 76 4f a8 74 5c 75 de 80 4a a0 88 da 95 87 cb 4d 8d 19 62 27 91 b6 99 00 0e 8c dd f7 6e ee a3 3d 08 4e ba ef 48 92 78 6d 44 88 66 76 95 f7 6d f9 78 ca 22 7e 14 62 79 2c dd 89 cf d0 74 a0 9f 2a 70 a0 20 73 af d1 33 46 cb 2e f8 89 55 21 c8 cf 00 76 5c 1c 63 07 df db a5 04 Data Ascii: Nb%-l0E9$%Zl+IL(Y8z@0v@3B;5$-#&qt@h:iY$%H2KaSo)TWHgg#_S>H'QN#X1vOt\uJMb'n=NHxmDfvmx"~by,tp s3F.U!v\c
2023-06-06 08:39:00 UTC	4265	IN	Data Raw: 9d 2a 5d e3 d5 58 d5 d5 55 46 88 d1 2a c4 b1 c8 55 15 db 77 9a a7 bc ac 07 3c 03 cf 4d af 01 44 90 93 be f5 9d 3d 52 c1 52 be 70 8a 79 1a 32 19 91 b2 30 e3 3e c4 8c 63 a7 20 83 14 ca 19 86 9a 01 5f 84 52 cd eb 87 6c 11 ab 7a e5 dd eb 53 df 6f d3 6e 30 31 d3 10 74 8d a9 c9 00 c1 a2 a1 14 91 cf 1d 44 ce d5 32 55 06 50 88 a4 ec 64 1c 48 cc 30 19 79 fc fa 2d 3c e9 76 88 20 08 8a 74 8e 95 6a 29 db f8 4e 71 22 bc b2 67 82 33 94 55 c7 63 81 8e 9c e9 a7 1a 0c f0 ae 1b 51 54 90 d4 33 a4 8a f0 40 19 cc 4b 1c 84 48 f8 41 8d ec ab 9c 02 06 7a 49 0b d4 c8 cb 4c b2 98 8d 49 e7 59 6e 8a 9a a1 fe 7a a9 26 73 1e 50 a6 23 55 c9 e7 d2 49 38 ed 80 06 7a 61 00 9c c7 4a 5d a2 9e c8 8a 2e 89 e9 a2 8e 7a 85 a3 96 40 1d 76 ab 86 7d ee c0 fe 0e c3 6e 48 27 3d ba 24 c4 48 13 4c bc Data Ascii: ]XUFUw<MD=RRpy20>c _RlzSon01tD2UPdH0y-<v tj)Nq"g3UcQT3@KHAzILIYnz&sP#UI8zaJ].z@v}nH'=$HL
2023-06-06 08:39:00 UTC	4281	IN	Data Raw: de bc 81 a7 a1 bf d3 cc f4 57 ad 45 62 92 d6 21 bc c5 45 e6 c5 68 a8 9a 28 26 93 ce 69 23 8b cd fe 93 70 bc 42 de db 0e c4 2e 1b 52 6c dc 2e a5 24 fe 2e c1 13 cb 32 67 2c ea 40 3c ab ed 4f fe 90 b1 bc 12 e0 74 8b 09 b2 75 2b c5 19 36 ae 2c 0d cb 6a 0e b7 99 23 ef 04 2f 45 fe 1c e8 98 2a 13 a1 77 19 29 a2 96 19 97 7a b3 44 8e 4e e8 dd 5a 49 64 65 20 f3 9c 28 ca 92 79 e7 af 29 00 f1 f1 af b7 ed 4a dc cc d9 82 02 a3 d4 28 9d 2d 6b 9f 57 5f 6d f6 7b 7f 96 d5 55 33 86 78 6a 03 34 0b 03 33 f9 69 50 54 15 34 90 c3 0b d4 4e 06 0b 45 1b 2f 76 18 34 34 54 ac a7 d1 e7 e1 bf ec 3c 6b 1b a6 1d 20 b7 e8 87 47 6e 71 bb a1 99 2d 22 10 01 82 b7 0e 89 48 ef 52 b4 9e 42 78 56 ef d3 69 58 6c d6 bf dd f6 69 9d 28 e8 e9 4c ab 54 fe aa 9a ca a7 3f c6 af a9 9a 20 51 ea 26 94 65 Data Ascii: WEb!Eh(&i#pB.Rl.$.2g,@<Otu+6,j#/E*w)zDNZIde (y)J(-kW_m{U3xj43iPT4NE/v44T<k Gnq-"HRBxViXli(LT? Q&e
2023-06-06 08:39:00 UTC	4297	IN	Data Raw: 9e 6a 5c ce 90 22 60 e8 23 bb 7a 55 2e 49 14 42 04 a5 82 10 81 a5 a7 69 23 57 2a 17 90 43 90 30 73 fe 5d 2a 1c 85 63 32 4e 65 1d f9 d6 72 54 d5 c5 42 6a c3 86 79 a5 89 c3 88 c6 e6 71 82 ed b3 8c 16 5f b7 07 a5 51 c0 27 80 a5 12 4d ea ea 41 66 9b 73 b3 4b 92 e1 8a e7 0c 4f 28 9d b3 db 9e 95 38 ef a0 cc 91 d2 43 fe f0 5a 47 dc ca 46 4b 2e 1c e5 54 12 32 00 fe a3 a6 a9 d2 3a d7 25 ae cc 0a 70 a4 74 7a b8 43 48 c6 36 8d 90 f9 68 ca 09 61 95 46 23 89 02 9f b9 ef d3 ed 51 c0 4a 0a 4e 8e 66 f3 88 a2 c0 88 b1 82 18 ea 23 64 59 64 67 c9 e0 83 b4 e0 f3 8c 63 e9 db fb 9a 44 8a 8a 72 9c c6 0e bb 1e 34 a5 3b d5 c5 1b c9 08 8c c4 d1 2a 99 8b 28 79 5c b7 0e fc e4 9e d9 fa 67 a0 a3 90 47 25 4f 95 38 c1 e7 47 22 7c c4 86 67 8c 97 01 8e 12 25 7f c4 0a 8e 1b 03 b9 ef df a5 Data Ascii: j\"`#zU.IBi#WC0s]c2NerTBjyq_Q'MAfsKO(8CZGFK.T2:%ptzCH6haF#QJNf#dYdgcDr4;*(y\gG%O8G"\|g%

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
99	192.168.2.4	49889	99.84.88.99	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-06-06 08:39:00 UTC	3864	OUT	GET /content/dam/hsbc/gb/images/articles/16-9/9840-person-gardening-2000X1125.jpg/jcr:content/renditions/cq5dam.web.590.1000.jpeg HTTP/1.1 Host: www.hsbc.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: TS01b4284e=01a90929556faf06cd5b441eccf03c6fcf8597137363503b848482636813fc6a1a8cc46db53bdf514cbbc86e93c54f33c03fd71373; tms_ref=; servicingTrafficManagement2=SegmentNewJourney; servicingTrafficManagement3=SegmentNewJourney; utag_main=v_id:01888fdc714a00035f72975780d20006f001706700918$_sn:1$_se:1$_ss:1$_st:1686042568844$ses_id:1686040768844%3Bexp-session$_pn:1%3Bexp-session$sskey:undefined%3Bexp-1688632768902; dclid=undefined
2023-06-06 08:39:00 UTC	3996	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 71856 Connection: close Date: Tue, 06 Jun 2023 08:38:59 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains Last-Modified: Fri, 02 Jun 2023 17:28:56 GMT Accept-Ranges: bytes S: dispatcher2euwest1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: max-age=2592000, s-maxage=2592000 X-Cache: Hit from cloudfront Via: 1.1 acc9aed747aea07d6138203ddfb2dcd8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: LOoXtC8QV3LQcjtZrzclZm0_chTE8S-Qka9RCqBO3Djpr9um8tIO3A== Age: 1
2023-06-06 08:39:00 UTC	3999	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 4b 02 4e 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFCCKN"}!1AQa"q2
2023-06-06 08:39:00 UTC	4031	IN	Data Raw: a3 ea 13 e0 b4 b3 5b aa f2 43 70 45 55 38 45 24 e6 d6 97 56 bd d6 ae fd 0c e7 6f 99 d1 7c 49 f1 65 af c4 4d 4b fb 45 74 3b 2f 0a c2 10 46 f6 f6 03 00 e3 ab 1f 53 5c 75 ed d0 b4 b7 5b 6d 21 4c e8 ff 00 2b ca dc 35 76 3e 0a f0 3e ad e2 8d 76 df 47 b4 d2 e4 d4 cd d9 f9 de 30 58 af a9 27 f8 47 a9 3c 0a fa 46 1f d9 57 c2 5f 0e 63 b4 bd f1 66 a1 24 8f 6e 04 b3 da 5b 82 91 37 fd 33 0f f7 9d ba 0c 0c 72 c3 b5 7b 38 2c 1d 6c 53 e5 a1 1b af c0 e7 ad 5e 34 57 33 76 67 c6 7a 47 87 fe d9 24 b3 c8 ae db 1b 04 3f 3c d7 73 e1 df 0e de 40 73 6f 67 33 c6 c7 1b 92 32 46 7f 01 5f 74 78 47 c3 3e 0b f0 dd bc 37 76 fe 08 d3 ad af b5 56 0f 05 8c 8b e7 bc 71 63 21 e5 2d 95 4f 53 e9 d3 93 5e bf f0 a2 fa cf c4 1f 6a 68 12 de 1d 32 d8 fc df 63 8c 47 13 bf 23 00 0e 38 03 3f 42 be b5 Data Ascii: [CpEU8E$Vo\|IeMKEt;/FS\u[m!L+5v>>vG0X'G<FW_cf$n[73r{8,lS^4W3vgzG$?<s@sog32F_txG>7vVqc!-OS^jh2cG#8?B
2023-06-06 08:39:00 UTC	4068	IN	Data Raw: 54 db e7 a0 f9 e2 6e cd f8 57 98 78 ab f6 7f f1 af 86 d8 dc e9 fa 3d cf 88 b4 77 24 c5 a8 69 31 1b 85 23 d1 95 32 c8 47 7c 8a f5 15 09 28 a9 53 d5 1c 78 6c ce 84 a6 e8 e2 1a 84 d6 d7 d1 3f 47 fa 6e 70 93 dc ce 8c 1d 18 80 0f 50 6b 6f 4c d4 7f b4 a1 31 96 02 75 1c 67 bd 67 4b a6 6a 16 2c d1 ea 1a 6d dd 91 e9 fe 91 03 a6 0f e2 05 76 7f 0e fe 03 f8 97 e2 35 85 fe a5 a2 4f 65 6e 96 72 ac 6b f6 c9 4c 62 56 23 24 29 00 8c 81 8e be b4 a3 4e 73 97 2c 56 a7 a5 8a c4 61 e8 d2 f6 b5 a6 a3 15 d7 a6 a6 0f 9c d1 93 9c c6 e3 be 38 a7 9d 77 74 7e 4b a8 2d db 1d eb bd f1 1f ec fd e3 fd 3b 49 7b 89 b4 a8 a7 96 2f bc 96 37 51 cc ce 3d 42 03 b8 fe 03 3e d5 97 f0 3f c1 56 9a fd f7 88 35 0d 6c 79 56 fa 34 71 ac b1 cf 19 f9 5e 47 29 f3 02 3b 60 f0 79 fe 9b c3 0f 51 cd 53 6a d7 Data Ascii: TnWx=w$i1#2G\|(Sxl?GnpPkoL1uggKj,mv5OenrkLbV#$)Ns,Va8wt~K-;I{/7Q=B>?V5lyV4q^G);`yQSj
2023-06-06 08:39:00 UTC	4096	IN	Data Raw: 75 91 a4 3e 5c 6c 43 aa 8a 9e 66 f5 2a dc ba 33 2a 4f 06 e8 d0 5c 88 e3 d3 6d 9a 47 39 c0 8c 62 a7 4d 0f 4c d3 e4 60 fa 44 0c 1c 72 a8 83 92 2a 87 8f 7c 59 e1 cd 12 28 ae 1e fd ad 82 f2 65 ce 08 af 31 f1 67 ed 27 e1 cd 37 49 9e 1d 3d 66 bd bd 08 4c 73 31 da a4 f6 e4 d7 0d 56 a9 ca 57 e8 75 42 0e a4 53 47 a2 df ae 93 1d 8d c5 fc 92 5a e8 e6 35 6d b9 41 bc 91 d8 7b fd 2b c1 fc 63 f0 93 59 f8 a3 af a5 a3 df dc d8 68 96 d0 19 f3 7c a0 34 bb 87 25 47 e9 cf 4a f0 4f 89 5f 1a fc 51 ad 88 a6 b9 7f 2c 2b 87 5f b3 e0 92 7d 3a 57 a7 fc 33 d2 fc 7d f1 22 e6 d3 55 d7 35 56 b5 86 d9 00 51 77 28 12 45 09 eb b5 40 19 35 e7 c5 46 5a cb 5f 9d af fd 79 1d b5 12 c1 ee ee 8f 30 f0 bf ec e5 a3 a6 af 21 d6 ad ee 35 0d 32 2b a7 11 5a db c4 5b 71 04 e1 a4 3d 15 7e a4 57 bb 7c 20 Data Ascii: u>\lCf3O\mG9bML`Dr*\|Y(e1g'7I=fLs1VWuBSGZ5mA{+cYh\|4%GJO_Q,+_}:W3}"U5VQw(E@5FZ_y0!52+Z[q=~W\|
2023-06-06 08:39:00 UTC	4112	IN	Data Raw: 44 88 92 06 6b bb d7 f5 c0 45 c7 e3 9c 55 ab 6d 57 43 f0 b6 a5 71 a7 78 33 c6 fa 6b 78 8c b0 0f 1d ed 9d cb 44 71 d9 e4 0a 41 3f 90 15 4d 49 5a 74 52 e6 34 4f c8 f3 98 be 1e 6b 1e 14 89 64 d7 34 2b db 45 2f b3 cd d5 ae c5 b4 19 f6 55 c9 3f 9d 7d 0d fb 32 c7 75 79 ae 6a 1a 35 e6 a5 66 da 7c 96 2f 75 0e 9f a4 dc c9 01 dc 24 8d 4b 9c 30 66 e0 81 9e 3b 57 0b 71 e2 3d 43 56 8a e6 ef 4f fb 2e a9 ad b2 e2 78 2c ae 5e e6 c5 5c 1c 12 aa ca 7f 91 15 a7 fb 34 e9 77 ba 5f c7 7b 1d 67 56 d1 ee 2c b5 3d 46 d2 e2 cc c8 8a 63 86 45 db bf 04 1e 07 31 ae 30 07 38 ad f0 15 f9 f1 11 73 d1 de d6 fe bf 34 69 17 ef 5d 1f 4d 49 a1 58 da 5c 89 17 4f 65 99 78 f3 1e 43 23 91 ee cd 92 6a df ee 70 3e 52 a7 fd a5 ad 2d 42 47 7b 86 3e 52 a7 fb 38 e9 f5 35 4d cb b8 c0 89 73 fe f5 7d ec Data Ascii: DkEUmWCqx3kxDqA?MIZtR4Okd4+E/U?}2uyj5f\|/u$K0f;Wq=CVO.x,^\4w_{gV,=FcE108s4i]MIX\OexC#jp>R-BG{>R85Ms}

Target ID:	1
Start time:	10:38:42
Start date:	06/06/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Imagebase:	0x7ff683680000
File size:	2851656 bytes
MD5 hash:	0FEC2748F363150DC54C1CAFFB1A9408
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Target ID:	2
Start time:	10:38:43
Start date:	06/06/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=1612 --field-trial-handle=1808,i,18247198348551292155,10654389683627602374,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff683680000
File size:	2851656 bytes
MD5 hash:	0FEC2748F363150DC54C1CAFFB1A9408
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Target ID:	3
Start time:	10:38:46
Start date:	06/06/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" "https://hs-login.online/pages
Imagebase:	0x7ff683680000
File size:	2851656 bytes
MD5 hash:	0FEC2748F363150DC54C1CAFFB1A9408
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://hs-login.online/pages	Avira URL Cloud: detection malicious, Label: phishing
Source: https://hs-login.online/pages	SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Source: https://hs-login.online/front_end/front_end_files/newValidations.css	Avira URL Cloud: Label: phishing
Source: https://hs-login.online/front_end/front_end_files/ursula.css	Avira URL Cloud: Label: phishing
Source: https://hs-login.online/front_end/front_end_files/D650-login-seckey-300x255.jpg	Avira URL Cloud: Label: phishing
Source: https://hs-login.online/js/shared/loading.js	Avira URL Cloud: Label: phishing
Source: https://hs-login.online/front_end/front_end_files/terms.css	Avira URL Cloud: Label: phishing
Source: https://hs-login.online/js/cntdjs/jquery.mask.js	Avira URL Cloud: Label: phishing
Source: https://hs-login.online/front_end/front_end_files/side-box.css	Avira URL Cloud: Label: phishing
Source: https://hs-login.online/js/cntdjs/cntd.js	Avira URL Cloud: Label: phishing
Source: https://hs-login.online/front_end/front_end_files/protecting-your-money.jpg	Avira URL Cloud: Label: phishing
Source: https://hs-login.online/front_end/front_end_files/security-details.css	Avira URL Cloud: Label: phishing

Source: https://hs-login.online/pages	HTTP Parser: Invalid link: Life events Help and support
Source: https://hs-login.online/pages	HTTP Parser: Invalid link: Help & Support
Source: https://hs-login.online/pages	HTTP Parser: Invalid link: Legal
Source: https://hs-login.online/pages	HTTP Parser: Invalid link: Privacy notice
Source: https://hs-login.online/pages	HTTP Parser: Invalid link: Accessibility
Source: https://hs-login.online/pages	HTTP Parser: Invalid link: Life events Help and support
Source: https://hs-login.online/pages	HTTP Parser: Invalid link: Help & Support
Source: https://hs-login.online/pages	HTTP Parser: Invalid link: Legal
Source: https://hs-login.online/pages	HTTP Parser: Invalid link: Privacy notice
Source: https://hs-login.online/pages	HTTP Parser: Invalid link: Accessibility

Source: https://hs-login.online/pages	HTTP Parser: No favicon
Source: https://hs-login.online/pages	HTTP Parser: No favicon
Source: https://www.security.hsbc.co.uk/gsa/IDV_SYSTEM_ERROR/	HTTP Parser: No favicon
Source: https://www.security.hsbc.co.uk/gsa/IDV_SYSTEM_ERROR/	HTTP Parser: No favicon
Source: https://www.security.hsbc.co.uk/gsa/IDV_SYSTEM_ERROR/#innerPage	HTTP Parser: No favicon
Source: https://www.security.hsbc.co.uk/gsa/IDV_SYSTEM_ERROR/#innerPage	HTTP Parser: No favicon
Source: https://www.security.hsbc.co.uk/gsa/IDV_SYSTEM_ERROR/#innerPage	HTTP Parser: No favicon
Source: https://www.security.hsbc.co.uk/gsa/IDV_SYSTEM_ERROR/#innerPage	HTTP Parser: No favicon
Source: https://www.security.hsbc.co.uk/gsa/IDV_SYSTEM_ERROR/#countrySelectorContent	HTTP Parser: No favicon
Source: https://www.security.hsbc.co.uk/gsa/IDV_SYSTEM_ERROR/#countrySelectorContent	HTTP Parser: No favicon
Source: https://8071582.fls.doubleclick.net/activityi;dc_pre=CIvSy8Gfrv8CFY5UwgodtGYOYQ;src=8071582;type=hsbc_000;cat=hsbc_000;ord=6128550615292;gtm=45fe35v0;auiddc=583344058.1686040849;u2=%2Fen-gb;u20=en-GB;u21=hsbc_000%7Chsbc_000%7Cstandard;uaa=x86;uab=64;uafvl=Chromium%3B104.0.5112.81%7C%2520Not%2520A%253BBrand%3B99.0.0.0%7CGoogle%2520Chrome%3B104.0.5112.81;uam=;uamb=0;uap=Windows;uapv=6.0.0;uaw=0;~oref=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb?	HTTP Parser: No favicon
Source: https://8071582.fls.doubleclick.net/activityi;dc_pre=CIvSy8Gfrv8CFY5UwgodtGYOYQ;src=8071582;type=hsbc_000;cat=hsbc_000;ord=6128550615292;gtm=45fe35v0;auiddc=583344058.1686040849;u2=%2Fen-gb;u20=en-GB;u21=hsbc_000%7Chsbc_000%7Cstandard;uaa=x86;uab=64;uafvl=Chromium%3B104.0.5112.81%7C%2520Not%2520A%253BBrand%3B99.0.0.0%7CGoogle%2520Chrome%3B104.0.5112.81;uam=;uamb=0;uap=Windows;uapv=6.0.0;uaw=0;~oref=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb?	HTTP Parser: No favicon
Source: https://8071582.fls.doubleclick.net/activityi;dc_pre=CP7Vy8Gfrv8CFZlEHgIdpSYJ-A;src=8071582;type=hsbc_000;cat=hsbc_000;ord=7367362538109;gtm=45fe35v0;auiddc=583344058.1686040849;u2=%2Fen-gb;u15=pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage;u16=pws%20home;u20=en-GB;u21=hsbc_000%7Chsbc_000%7Cstandard;uaa=x86;uab=64;uafvl=Chromium%3B104.0.5112.81%7C%2520Not%2520A%253BBrand%3B99.0.0.0%7CGoogle%2520Chrome%3B104.0.5112.81;uam=;uamb=0;uap=Windows;uapv=6.0.0;uaw=0;~oref=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb?	HTTP Parser: No favicon
Source: https://8071582.fls.doubleclick.net/activityi;dc_pre=CP7Vy8Gfrv8CFZlEHgIdpSYJ-A;src=8071582;type=hsbc_000;cat=hsbc_000;ord=7367362538109;gtm=45fe35v0;auiddc=583344058.1686040849;u2=%2Fen-gb;u15=pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage;u16=pws%20home;u20=en-GB;u21=hsbc_000%7Chsbc_000%7Cstandard;uaa=x86;uab=64;uafvl=Chromium%3B104.0.5112.81%7C%2520Not%2520A%253BBrand%3B99.0.0.0%7CGoogle%2520Chrome%3B104.0.5112.81;uam=;uamb=0;uap=Windows;uapv=6.0.0;uaw=0;~oref=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb?	HTTP Parser: No favicon
Source: https://8071582.fls.doubleclick.net/activityi;dc_pre=CPqtzMGfrv8CFRVBwgodzgsPDA;src=8071582;type=hsbc_000;cat=hsbc_000;ord=4515886411756;gtm=45fe35v0;auiddc=583344058.1686040849;u2=%2Fen-gb;u21=hsbc_000%7Chsbc_000%7Cstandard;uaa=x86;uab=64;uafvl=Chromium%3B104.0.5112.81%7C%2520Not%2520A%253BBrand%3B99.0.0.0%7CGoogle%2520Chrome%3B104.0.5112.81;uam=;uamb=0;uap=Windows;uapv=6.0.0;uaw=0;~oref=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb?	HTTP Parser: No favicon
Source: https://8071582.fls.doubleclick.net/activityi;dc_pre=CPqtzMGfrv8CFRVBwgodzgsPDA;src=8071582;type=hsbc_000;cat=hsbc_000;ord=4515886411756;gtm=45fe35v0;auiddc=583344058.1686040849;u2=%2Fen-gb;u21=hsbc_000%7Chsbc_000%7Cstandard;uaa=x86;uab=64;uafvl=Chromium%3B104.0.5112.81%7C%2520Not%2520A%253BBrand%3B99.0.0.0%7CGoogle%2520Chrome%3B104.0.5112.81;uam=;uamb=0;uap=Windows;uapv=6.0.0;uaw=0;~oref=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb?	HTTP Parser: No favicon
Source: https://8071582.fls.doubleclick.net/activityi;dc_pre=CNDvzcGfrv8CFWZFHgIdcKAJQg;src=8071582;type=hsbc_000;cat=hsbc_000;ord=1397879849022;gtm=45fe35v0;auiddc=583344058.1686040849;u2=%2Fen-gb;u20=en-GB;u21=hsbc_000%7Chsbc_000%7Cstandard;uaa=x86;uab=64;uafvl=Chromium%3B104.0.5112.81%7C%2520Not%2520A%253BBrand%3B99.0.0.0%7CGoogle%2520Chrome%3B104.0.5112.81;uam=;uamb=0;uap=Windows;uapv=6.0.0;uaw=0;~oref=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb?	HTTP Parser: No favicon
Source: https://8071582.fls.doubleclick.net/activityi;dc_pre=CNDvzcGfrv8CFWZFHgIdcKAJQg;src=8071582;type=hsbc_000;cat=hsbc_000;ord=1397879849022;gtm=45fe35v0;auiddc=583344058.1686040849;u2=%2Fen-gb;u20=en-GB;u21=hsbc_000%7Chsbc_000%7Cstandard;uaa=x86;uab=64;uafvl=Chromium%3B104.0.5112.81%7C%2520Not%2520A%253BBrand%3B99.0.0.0%7CGoogle%2520Chrome%3B104.0.5112.81;uam=;uamb=0;uap=Windows;uapv=6.0.0;uaw=0;~oref=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb?	HTTP Parser: No favicon
Source: https://8071582.fls.doubleclick.net/activityi;dc_pre=CJ7y2cGfrv8CFVRCwgod1KANgA;src=8071582;type=hsbc_000;cat=hsbc_000;ord=807883971953;gtm=45fe35v0;auiddc=583344058.1686040849;u2=%2Fen-gb;u15=pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage;u16=pws%20home;u20=en-GB;u21=hsbc_000%7Chsbc_000%7Cstandard;uaa=x86;uab=64;uafvl=Chromium%3B104.0.5112.81%7C%2520Not%2520A%253BBrand%3B99.0.0.0%7CGoogle%2520Chrome%3B104.0.5112.81;uam=;uamb=0;uap=Windows;uapv=6.0.0;uaw=0;~oref=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb?	HTTP Parser: No favicon
Source: https://8071582.fls.doubleclick.net/activityi;dc_pre=CJ7y2cGfrv8CFVRCwgod1KANgA;src=8071582;type=hsbc_000;cat=hsbc_000;ord=807883971953;gtm=45fe35v0;auiddc=583344058.1686040849;u2=%2Fen-gb;u15=pws%20%3A%20pws%20home%20%3A%20no%20segment%20%3A%20pws%20homepage;u16=pws%20home;u20=en-GB;u21=hsbc_000%7Chsbc_000%7Cstandard;uaa=x86;uab=64;uafvl=Chromium%3B104.0.5112.81%7C%2520Not%2520A%253BBrand%3B99.0.0.0%7CGoogle%2520Chrome%3B104.0.5112.81;uam=;uamb=0;uap=Windows;uapv=6.0.0;uaw=0;~oref=https%3A%2F%2Fwww.business.hsbc.uk%2Fen-gb?	HTTP Parser: No favicon

Source: https://hs-login.online/pages	HTTP Parser: No <meta name="copyright".. found
Source: https://hs-login.online/pages	HTTP Parser: No <meta name="copyright".. found

Source: chromecache_313.2.dr	String found in binary or memory: <a class="social-image social-icon-facebook" id="pp_socialmediafooterlink_1" href="https://www.facebook.com/hsbcuk" rel="noopener noreferrer" data-event-component="other" data-event-name="Facebook Icon" target="_blank"> equals www.facebook.com (Facebook)
Source: chromecache_313.2.dr	String found in binary or memory: <a class="social-image social-icon-youtube" id="pp_socialmediafooterlink_3" href="https://www.youtube.com/user/hsbcuk" rel="noopener noreferrer" data-event-component="other" data-event-name="YouTube logo" target="_blank"> equals www.youtube.com (Youtube)
Source: chromecache_602.2.dr	String found in binary or memory: function Df(a,b){if("1"!=jc[b]){var c=d+"ytEvent"+Xc;window[c]=function(a){Cf(b,a)};try{a.addEventListener("onStateChange","window."+c),jc[b]="1",Xc++}catch(g){B(g,"error adding YouTube state change listener")}}}function ch(a){if(!a)return!1;var b=""+a.data;if(0===b.indexOf("http://www.youtube.com")\|\|0===b.indexOf("https://www.youtube.com"))return!0;a=a.getElementsByTagName("PARAM");for(var c=0;c<a.length;c++)if(b=a[c],"movie"==b.name&&(b=""+b.value,0===b.indexOf("http://www.youtube.com")\|\|0===b.indexOf("https://www.youtube.com")))return!0; equals www.youtube.com (Youtube)

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Tue, 06 Jun 2023 08:38:21 GMTContent-Type: text/html; charset=UTF-8Content-Length: 0Connection: closeExpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, must-revalidatePragma: no-cache
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Tue, 06 Jun 2023 08:38:21 GMTContent-Type: text/html; charset=UTF-8Content-Length: 0Connection: closeExpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, must-revalidatePragma: no-cache
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Tue, 06 Jun 2023 08:38:21 GMTContent-Type: text/html; charset=UTF-8Content-Length: 0Connection: closeExpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, must-revalidatePragma: no-cache
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Tue, 06 Jun 2023 08:38:24 GMTContent-Type: text/html; charset=UTF-8Content-Length: 0Connection: closeExpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, must-revalidatePragma: no-cache
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Tue, 06 Jun 2023 08:38:40 GMTContent-Type: text/html; charset=UTF-8Content-Length: 0Connection: closeExpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, must-revalidatePragma: no-cache

Source: chromecache_602.2.dr	String found in binary or memory: http://caligatio.github.com/jsSHA/
Source: chromecache_280.2.dr	String found in binary or memory: http://cdn.appdynamics.com
Source: chromecache_550.2.dr, chromecache_352.2.dr	String found in binary or memory: http://code.google.com/p/episodes/
Source: chromecache_280.2.dr, chromecache_368.2.dr	String found in binary or memory: http://col.eum-appdynamics.com
Source: chromecache_577.2.dr	String found in binary or memory: http://github.com/janl/mustache.js
Source: chromecache_287.2.dr	String found in binary or memory: http://igorescobar.com
Source: chromecache_542.2.dr, chromecache_604.2.dr, chromecache_486.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_577.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/add-inverted-param/
Source: chromecache_577.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/define-locale/
Source: chromecache_577.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/dst-shifted/
Source: chromecache_577.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/js-date/
Source: chromecache_577.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/min-max/
Source: chromecache_577.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/zone/
Source: chromecache_577.2.dr	String found in binary or memory: http://momentjs.com/timezone/docs/#/data-loading/.
Source: chromecache_313.2.dr	String found in binary or memory: http://retirementcalculator.hsbc.co.uk
Source: chromecache_313.2.dr	String found in binary or memory: http://schema.org/WebPage
Source: chromecache_313.2.dr	String found in binary or memory: http://www.about.hsbc.co.uk/
Source: chromecache_550.2.dr, chromecache_352.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_313.2.dr	String found in binary or memory: http://www.business.hsbc.uk/
Source: chromecache_600.2.dr, chromecache_294.2.dr, chromecache_548.2.dr, chromecache_596.2.dr	String found in binary or memory: http://www.day.com/dam/1.0
Source: chromecache_313.2.dr	String found in binary or memory: http://www.homeandawayrewards.com/odeon
Source: chromecache_313.2.dr	String found in binary or memory: http://www.hsbc.com
Source: chromecache_287.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_602.2.dr	String found in binary or memory: http://www.youtube.com
Source: chromecache_440.2.dr	String found in binary or memory: https://askus.business.hsbc.uk/commercial-banking/build/init.js
Source: chromecache_313.2.dr	String found in binary or memory: https://benefitshelp.entitledto.co.uk/home/start
Source: chromecache_440.2.dr	String found in binary or memory: https://c.amazon-adsystem.com/aat/amzn.js
Source: chromecache_280.2.dr	String found in binary or memory: https://cdn.appdynamics.com
Source: chromecache_280.2.dr	String found in binary or memory: https://cdn.appdynamics.com/adrum-xd.0086dbec5e8a6e717bf36d3a06b62042.html
Source: chromecache_280.2.dr, chromecache_368.2.dr	String found in binary or memory: https://col.eum-appdynamics.com
Source: chromecache_440.2.dr	String found in binary or memory: https://collect.tealiumiq.com/event
Source: chromecache_313.2.dr	String found in binary or memory: https://forms.hsbc.gb/forms/international-account-opening
Source: chromecache_577.2.dr	String found in binary or memory: https://github.com/jonnyreeves/jquery-Mustache
Source: chromecache_287.2.dr	String found in binary or memory: https://github.com/umdjs/umd/blob/master/templates/jqueryPlugin.js
Source: chromecache_577.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_577.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.25.0/LICENSE
Source: chromecache_313.2.dr	String found in binary or memory: https://homeandawayrewards.com
Source: chromecache_313.2.dr	String found in binary or memory: https://hsbccoll.consents.online/
Source: chromecache_313.2.dr	String found in binary or memory: https://hsbccovid.consents.online
Source: chromecache_440.2.dr	String found in binary or memory: https://hsbcstage.creativevirtual.com/hsbccmb_upgrade_stage/init.js
Source: chromecache_313.2.dr	String found in binary or memory: https://itunes.apple.com/app/apple-store/id1183884067?pt
Source: chromecache_313.2.dr	String found in binary or memory: https://itunes.apple.com/app/apple-store/id1220329065?pt
Source: chromecache_313.2.dr	String found in binary or memory: https://itunes.apple.com/app/apple-store/id1220329065?pt=118152957&ct=M_SB_PWS_HPS_E&mt=8
Source: chromecache_577.2.dr	String found in binary or memory: https://momentjs.com/timezone/docs/#/use-it/browser/
Source: chromecache_313.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id
Source: chromecache_313.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=uk.co.hsbc.hsbcukmobilebanking
Source: chromecache_313.2.dr	String found in binary or memory: https://retirementcalculator.hsbc.co.uk
Source: chromecache_313.2.dr	String found in binary or memory: https://tags.tiqcdn.com/utag/hsbc/uk-rbwm/prod/utag.sync.js
Source: chromecache_313.2.dr	String found in binary or memory: https://twitter.com/HSBC_UK
Source: chromecache_313.2.dr	String found in binary or memory: https://uk.chili.com/promotion
Source: chromecache_313.2.dr	String found in binary or memory: https://www.business.hsbc.uk/en-gb/everyday-banking/business-accounts
Source: chromecache_313.2.dr	String found in binary or memory: https://www.business.hsbc.uk/en-gb/protection/insurance
Source: chromecache_313.2.dr	String found in binary or memory: https://www.eu430.p2g.netd2.hsbc.com.hk
Source: chromecache_293.2.dr, chromecache_331.2.dr, chromecache_618.2.dr, chromecache_589.2.dr	String found in binary or memory: https://www.eyeem.com/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.fscs.org.uk/
Source: chromecache_602.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: chromecache_313.2.dr	String found in binary or memory: https://www.homeandawayrewards.com/wagamama
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/1/2//linklaunch/overdraft-calculator
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/credit-cards/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/credit-cards/credit-builder-credit-cards/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/credit-cards/premier-credit-cards/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/credit-cards/products/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/credit-cards/purchase-credit-cards/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/credit-cards/rewards-credit-cards/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/current-accounts/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/current-accounts/products/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/current-accounts/products/advance/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/current-accounts/products/bank-account/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/current-accounts/products/children/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/current-accounts/products/international-student/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/current-accounts/products/overdraft-calculator/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/current-accounts/products/overdrafts/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/current-accounts/products/premier/day-to-day-banking/bank-account/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/current-accounts/products/student/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/help/banking-made-easy/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/help/banking-made-easy/how-to-set-up-standing-order/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/help/money-worries/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/insurance/home/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/insurance/home/claims/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/insurance/life/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/insurance/life/claims/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/insurance/products/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/insurance/products/aspects/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/insurance/products/aspects/claims/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/insurance/products/contents/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/insurance/products/critical-illness-cover/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/insurance/products/income-protection/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/insurance/products/life-cover/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/insurance/products/premier-travel/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/insurance/products/select-and-cover/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/insurance/products/select-and-cover/claims/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/insurance/protection-advice/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/insurance/travel/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/insurance/travel/claims/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/international/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/international/currency-account/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/international/money-transfer/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/international/overseas-account-opening/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/international/travel-money/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/international/using-your-card-abroad/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/investments/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/investments/advice/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/investments/advice/financial-advice/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/investments/advice/my-investment/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/investments/existing-customers/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/investments/existing-customers/global-investment-centre/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/investments/existing-customers/invest-direct/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/investments/financial-action-plan
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/investments/funds/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/investments/isas/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/investments/products/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/investments/products/child-trust-fund/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/investments/products/invest-direct/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/investments/products/onshore-investment-bond/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/investments/products/sustainable-portfolios/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/loans/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/loans/products/car-loan/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/loans/products/home-improvements/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/loans/products/personal/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/loans/products/premier/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/loans/products/top-up-loans/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/mortgages/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/mortgages/calculators/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/mortgages/first-time-buyers/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/mortgages/how-to-apply/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/mortgages/move-your-mortgage/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/mortgages/our-rates/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/online/dashboard/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/retirement/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/retirement/investing-for-retirement/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/savings/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/savings/easy-access-accounts/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/savings/isas/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/savings/products/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/savings/products/cash-isa/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/savings/products/fixed-rate/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/savings/products/mysavings/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/savings/products/online-bonus-saver/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/savings/products/regular-saver/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/ways-to-bank/mobile/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/ways-to-bank/online-banking/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/wealth/insights/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.co.uk/wealth/planning/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.com/our-approach/risk-and-responsibility/modern-slavery-act
Source: chromecache_313.2.dr	String found in binary or memory: https://www.hsbc.com/who-we-are/esg-and-responsible-business/modern-slavery-act
Source: chromecache_313.2.dr	String found in binary or memory: https://www.makeaclaim.hsbc.co.uk/HomeClaimOTP/MakeAClaim/
Source: chromecache_602.2.dr	String found in binary or memory: https://www.mcmprod.hsbc.co.uk
Source: chromecache_540.2.dr	String found in binary or memory: https://www.security.hsbc.co.uk/gsp/saas/Components/default/resources/script/libraries/hsbc/widget/t
Source: chromecache_602.2.dr	String found in binary or memory: https://www.youtube.com
Source: chromecache_313.2.dr	String found in binary or memory: https://www.youtube.com/user/hsbcuk

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://hs-login.online/pages

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 276

Chrome Cache Entry: 277

Chrome Cache Entry: 278

Chrome Cache Entry: 279

Chrome Cache Entry: 280

Chrome Cache Entry: 281

Chrome Cache Entry: 282

Chrome Cache Entry: 283

Chrome Cache Entry: 284

Chrome Cache Entry: 285

Chrome Cache Entry: 286

Chrome Cache Entry: 287

Chrome Cache Entry: 288

Chrome Cache Entry: 289

Chrome Cache Entry: 290

Chrome Cache Entry: 291

Chrome Cache Entry: 292

Chrome Cache Entry: 293

Chrome Cache Entry: 294

Chrome Cache Entry: 295

Chrome Cache Entry: 296

Chrome Cache Entry: 297

Chrome Cache Entry: 298

Chrome Cache Entry: 299

Chrome Cache Entry: 300

Chrome Cache Entry: 301

Chrome Cache Entry: 302

Windows Analysis Report
https://hs-login.online/pages