Edit tour

Windows Analysis Report
http://datechf.cc/de/receive/79469380

Overview

General Information

Sample URL:	http://datechf.cc/de/receive/79469380
Analysis ID:	1520168
Infos:

Detection

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

HTML page contains suspicious base64 encoded javascript

Detected non-DNS traffic on DNS port

HTML body with high number of embedded images detected

HTML body with high number of large embedded background images detected

HTML page contains hidden javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2588 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5012 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2116 --field-trial-handle=1856,i,1715639760046732038,11749315745599090564,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 732 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6520 --field-trial-handle=1856,i,1715639760046732038,11749315745599090564,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2648 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4912 --field-trial-handle=1856,i,1715639760046732038,11749315745599090564,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6352 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://datechf.cc/de/receive/79469380" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://datechf.cc/de/receive/79469380

Avira URL Cloud: detection malicious, Label: phishing

Phishing

AI detected phishing page

Source: https://datechf.cc/de/receive/79469380

LLM: Score: 9 Reasons: The brand TWINT is a known Swiss mobile payment solution., The legitimate domain for TWINT is twint.ch., The provided URL (datechf.cc) does not match the legitimate domain name., The domain extension .cc is unusual for a Swiss brand and raises suspicion., The URL does not contain any recognizable association with TWINT., Requesting sensitive information like phone number and TWINT PIN on an unrecognized domain is a common phishing tactic. DOM: 0.2.pages.csv

HTML page contains suspicious base64 encoded javascript

Source: https://datechf.cc/de/receive/79469380

HTTP Parser: Base64 decoded: <script>

Source: https://datechf.cc/de/receive/79469380

HTTP Parser: Total embedded image size: 825345

Source: https://datechf.cc/de/receive/79469380

HTTP Parser: Total embedded background img size: 412208

Source: https://www.twint.ch/privatkunden/funktionen/digitale-gutscheine/google-play/

HTTP Parser: Base64 decoded: <svg xmlns="http://www.w3.org/2000/svg" width="32" height="32" fill="none"><path fill="#B20F03" d="M16 3a13 13 0 1 0 13 13A13.015 13.015 0 0 0 16 3m0 24a11 11 0 1 1 11-11 11.01 11.01 0 0 1-11 11"/><path fill="#B20F03" d="M17.038 18.615H14.87L14.563 9.5h2....

Source: https://datechf.cc/de/receive/79469380	HTTP Parser: No favicon
Source: https://datechf.cc/de/receive/79469380	HTTP Parser: No favicon
Source: https://datechf.cc/de/receive/79469380	HTTP Parser: No favicon
Source: https://www.twint.ch/privatkunden/funktionen/digitale-gutscheine/google-play/	HTTP Parser: No favicon
Source: https://www.twint.ch/privatkunden/funktionen/digitale-gutscheine/google-play/	HTTP Parser: No favicon
Source: https://www.twint.ch/privatkunden/funktionen/digitale-gutscheine/google-play/	HTTP Parser: No favicon
Source: https://www.twint.ch/privatkunden/funktionen/digitale-gutscheine/google-play/	HTTP Parser: No favicon
Source: https://www.twint.ch/privatkunden/funktionen/spenden/	HTTP Parser: No favicon
Source: https://www.twint.ch/privatkunden/funktionen/spenden/	HTTP Parser: No favicon
Source: https://www.twint.ch/privatkunden/funktionen/spenden/	HTTP Parser: No favicon
Source: https://www.twint.ch/privatkunden/funktionen/versicherung/	HTTP Parser: No favicon
Source: https://www.twint.ch/privatkunden/funktionen/versicherung/	HTTP Parser: No favicon
Source: https://www.twint.ch/privatkunden/funktionen/versicherung/	HTTP Parser: No favicon
Source: https://www.twint.ch/privatkunden/funktionen/versicherung/	HTTP Parser: No favicon
Source: https://www.twint.ch/privatkunden/funktionen/versicherung/	HTTP Parser: No favicon
Source: https://www.twint.ch/privatkunden/funktionen/versicherung/velo/	HTTP Parser: No favicon
Source: https://www.twint.ch/privatkunden/funktionen/digitale-gutscheine/netflix/	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49754 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 0MB later: 49MB

Source: global traffic

TCP traffic: 192.168.2.4:60546 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /de/receive/79469380 HTTP/1.1Host: datechf.ccConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/axios/1.6.8/axios.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://datechf.ccsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.7.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://datechf.ccsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://datechf.cc/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/socket.io.js HTTP/1.1Host: datechf.ccConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://datechf.cc/de/receive/79469380Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w
Source: global traffic	HTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1Host: translate.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://datechf.cc/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/axios/1.6.8/axios.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.7.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /action/0?ti=20058379&tm=gtm002&Ver=2&mid=02a8a785-8918-43e2-b5d0-e92e6622cee3&sid=720096c0d19411eea29537e3b25514f1&vid=acb5f8f0164d11eeb349c77596053fd5&vids=0&msclkid=N&pi=918639831&lg=ru-RU&sw=1680&sh=1050&sc=30&tl=TWINT%3A%20Die%20Bezahl-App%20der%20Schweiz%20-%20Bezahlen,%20Geld%20versenden%20%26%20vieles%20mehr&p=https%3A%2F%2Fwww.twint.ch%2F&r=&lt=490&evt=pageLoad&sv=1&rn=879876 HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://datechf.cc/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE
Source: global traffic	HTTP traffic detected: GET /loader.js? HTTP/1.1Host: www.smartsuppchat.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://datechf.cc/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nf450 HTTP/1.1Host: datechf.ccConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://datechf.cc/de/receive/79469380Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w
Source: global traffic	HTTP traffic detected: GET /socket.io/socket.io.js HTTP/1.1Host: datechf.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w
Source: global traffic	HTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1Host: translate.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nf450 HTTP/1.1Host: datechf.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w
Source: global traffic	HTTP traffic detected: GET /loader.js? HTTP/1.1Host: www.smartsuppchat.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget/2c2a729197af9ea70bef8e5db0c0d79373d6af7d.json HTTP/1.1Host: bootstrap.smartsuppchat.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: /Origin: https://datechf.ccSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://datechf.cc/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nf4WM&sid=xSgUJ84KMgPLXcJ2ADHj HTTP/1.1Host: datechf.ccConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://datechf.cc/de/receive/79469380Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=websocket&sid=xSgUJ84KMgPLXcJ2ADHj HTTP/1.1Host: datechf.ccConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://datechf.ccSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9wSec-WebSocket-Key: unyc/2Yjs0iXPkC6FMVTpw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /images/cleardot.gif HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://datechf.cc/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/cleardot.gif HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://datechf.cc/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nf4z9&sid=xSgUJ84KMgPLXcJ2ADHj HTTP/1.1Host: datechf.ccConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://datechf.cc/de/receive/79469380Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nf4WI&sid=xSgUJ84KMgPLXcJ2ADHj HTTP/1.1Host: datechf.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nf4WM&sid=xSgUJ84KMgPLXcJ2ADHj HTTP/1.1Host: datechf.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /images/cleardot.gif HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __Secure-BUCKET=CMwD
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nf4zB&sid=xSgUJ84KMgPLXcJ2ADHj HTTP/1.1Host: datechf.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nf4z9&sid=xSgUJ84KMgPLXcJ2ADHj HTTP/1.1Host: datechf.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /images/cleardot.gif HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __Secure-BUCKET=CMwD
Source: global traffic	HTTP traffic detected: GET /gen204?sl=auto&tl=de&textlen=1433&ctt=1&ttt=3111&ttl=2143&sr=1&nca=te_time&client=te&logld=vTE_20240925 HTTP/1.1Host: translate.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://datechf.cc/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nf5mn HTTP/1.1Host: datechf.ccConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://datechf.cc/de/receive/79469380Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nf5mn HTTP/1.1Host: datechf.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=websocket&sid=9y9cewKasiXpUlx9ADHm HTTP/1.1Host: datechf.ccConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://datechf.ccSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/deSec-WebSocket-Key: T0fz0iYS4HrXrOD7vQoP3A==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nf6S0&sid=9y9cewKasiXpUlx9ADHm HTTP/1.1Host: datechf.ccConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://datechf.cc/de/receive/79469380Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nf6Ru&sid=9y9cewKasiXpUlx9ADHm HTTP/1.1Host: datechf.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nf6S0&sid=9y9cewKasiXpUlx9ADHm HTTP/1.1Host: datechf.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nf6ny&sid=9y9cewKasiXpUlx9ADHm HTTP/1.1Host: datechf.ccConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://datechf.cc/de/receive/79469380Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/ec4b873d446c/api.js?onload=Jeuhg1&render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.twint.chsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/15pzp/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/ec4b873d446c/api.js?onload=Jeuhg1&render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8c9898691a4b42b5&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/15pzp/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/15pzp/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nf7k6 HTTP/1.1Host: datechf.ccConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://datechf.cc/de/receive/79469380Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8c9898691a4b42b5&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nf7k6 HTTP/1.1Host: datechf.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nf8A-&sid=wblwJSknquM5SMA3ADHp HTTP/1.1Host: datechf.ccConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://datechf.cc/de/receive/79469380Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=websocket&sid=wblwJSknquM5SMA3ADHp HTTP/1.1Host: datechf.ccConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://datechf.ccSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/deSec-WebSocket-Key: W3ST8xe3H3d9xA2PYCRWBA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1747044856:1727406813:cYobLX1V0bNGFw4HsDfHR7tNyeWvFZHZq9lR0vUDSLA/8c9898691a4b42b5/154eb201ebda143 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/8c9898691a4b42b5/1727409719717/5b06ee5dbbd1b2452cb1acf6647d2475161453c780a73d0285d7d820c113f77a/uIY9KT1wjH83wWA HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/15pzp/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nf8Au&sid=wblwJSknquM5SMA3ADHp HTTP/1.1Host: datechf.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nf8A-&sid=wblwJSknquM5SMA3ADHp HTTP/1.1Host: datechf.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nf8by&sid=wblwJSknquM5SMA3ADHp HTTP/1.1Host: datechf.ccConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://datechf.cc/de/receive/79469380Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/z2exq/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nf9Q5 HTTP/1.1Host: datechf.ccConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://datechf.cc/de/receive/79469380Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8c98989bea707d00&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/z2exq/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nf9vB&sid=rK5nYzdFNB7SnldaADHs HTTP/1.1Host: datechf.ccConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://datechf.cc/de/receive/79469380Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=websocket&sid=rK5nYzdFNB7SnldaADHs HTTP/1.1Host: datechf.ccConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://datechf.ccSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/deSec-WebSocket-Key: ERIjIkcgONXtsWcIdRuEwQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8c9898691a4b42b5/1727409719721/QRnLOEdUTmV-wSC HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/15pzp/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8c98989bea707d00&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nf9Q5 HTTP/1.1Host: datechf.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nf9v3&sid=rK5nYzdFNB7SnldaADHs HTTP/1.1Host: datechf.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nf9vB&sid=rK5nYzdFNB7SnldaADHs HTTP/1.1Host: datechf.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nfAEk&sid=rK5nYzdFNB7SnldaADHs HTTP/1.1Host: datechf.ccConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://datechf.cc/de/receive/79469380Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8c9898691a4b42b5/1727409719721/QRnLOEdUTmV-wSC HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1747044856:1727406813:cYobLX1V0bNGFw4HsDfHR7tNyeWvFZHZq9lR0vUDSLA/8c9898691a4b42b5/154eb201ebda143 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1013387493:1727406779:YeLLeSo_U6RZZGVQuSYB98sLFp2Tgq99RTAz7RsFCL0/8c98989bea707d00/b235806045ed28b HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/jkyme/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8c9898c28eda4378&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/jkyme/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/baf1656f-0c9f-4cd8-83fe-a5ce8d8c9eed/OtAutoBlock.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/otSDKStub.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8c98989bea707d00/1727409729545/yrXd159Ts3jd8Vz HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/z2exq/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/otSDKStub.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/baf1656f-0c9f-4cd8-83fe-a5ce8d8c9eed/OtAutoBlock.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/baf1656f-0c9f-4cd8-83fe-a5ce8d8c9eed/baf1656f-0c9f-4cd8-83fe-a5ce8d8c9eed.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.twint.chSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8c9898c28eda4378&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8c98989bea707d00/1727409729545/yrXd159Ts3jd8Vz HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/8c98989bea707d00/1727409729549/6e772fe038b38ec32bda048e9279175be3e9a3c1b033612b98a2703d39605abc/_6b6v8N3gCA3UaK HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/z2exq/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nfBLz HTTP/1.1Host: datechf.ccConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://datechf.cc/de/receive/79469380Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /consent/baf1656f-0c9f-4cd8-83fe-a5ce8d8c9eed/baf1656f-0c9f-4cd8-83fe-a5ce8d8c9eed.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.twint.chSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1731196884:1727406774:ogyKtD3DYRZvneb8A8Xd4gumCbdnDgJl3yl7WoSTagU/8c9898c28eda4378/cf4fc23845fcc6d HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nfBLz HTTP/1.1Host: datechf.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nfBk-&sid=qkaZApVbB7RCdyB5ADHv HTTP/1.1Host: datechf.ccConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://datechf.cc/de/receive/79469380Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=websocket&sid=qkaZApVbB7RCdyB5ADHv HTTP/1.1Host: datechf.ccConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://datechf.ccSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/deSec-WebSocket-Key: YzgEtue9jvyMxPYWhtacPA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.twint.chSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8c9898c28eda4378/1727409733188/7Hf4hPCc6PpUz1G HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/jkyme/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202307.1.0/otBannerSdk.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nfC8J&sid=qkaZApVbB7RCdyB5ADHv HTTP/1.1Host: datechf.ccConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://datechf.cc/de/receive/79469380Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /consent/baf1656f-0c9f-4cd8-83fe-a5ce8d8c9eed/01921dfd-0535-7c88-9558-f9c8250e558c/de.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.twint.chSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bat.js HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MR=0
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/946203707?random=1727409735110&cv=11&fst=1727409735110&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465z876304729za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2Fvelo%2F&hn=www.googleadservices.com&frm=0&tiba=Veloversicherung%20mit%20TWINT%20abschliessen%20%C2%BB%20TWINT&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/946203707/?random=1727409735110&cv=11&fst=1727409735110&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465z876304729za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2Fvelo%2F&hn=www.googleadservices.com&frm=0&tiba=Veloversicherung%20mit%20TWINT%20abschliessen%20%C2%BB%20TWINT&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202307.1.0/assets/otFloatingRoundedIcon.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.twint.chSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202307.1.0/assets/v2/otPcCenter.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.twint.chSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202307.1.0/assets/otCookieSettingsButton.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.twint.chSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202307.1.0/assets/otCommonStyles.css HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.twint.chSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/946203707?random=1727409736078&cv=11&fst=1727409736078&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465z876304729za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fgoogle-play%2F&ref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fgoogle-play%2F%3F__cf_chl_tk%3DvPDafy5u7fTr24UoQidgupFmfFsp3K2ZYE8LkGIqA1g-1727409712-0.0.1.1-4734&hn=www.googleadservices.com&frm=0&tiba=Kaufe%20Google%20Play%20Guthaben%20direkt%20in%20der%20TWINT%20App%20%C2%BB%20TWINT&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/action/20058379.js HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MR=0
Source: global traffic	HTTP traffic detected: GET /signals/config/979879722096658?v=2.9.168&r=stable&domain=www.twint.ch&hme=3ba426d944c98eb3ce406a0f93fc097d0320a486b65b445a33b2eda3a5aa3429&ex_m=70%2C119%2C105%2C109%2C61%2C4%2C98%2C69%2C16%2C95%2C87%2C51%2C54%2C170%2C173%2C185%2C181%2C182%2C184%2C29%2C99%2C53%2C76%2C183%2C165%2C168%2C178%2C179%2C186%2C129%2C41%2C34%2C141%2C15%2C50%2C192%2C191%2C131%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C91%2C17%2C14%2C94%2C90%2C89%2C106%2C52%2C108%2C39%2C107%2C30%2C92%2C26%2C166%2C169%2C138%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C74%2C100%2C27%2C75%2C9%2C8%2C79%2C48%2C21%2C102%2C101%2C103%2C96%2C10%2C20%2C3%2C38%2C19%2C84%2C56%2C82%2C33%2C73%2C0%2C93%2C32%2C81%2C86%2C47%2C46%2C85%2C37%2C5%2C88%2C80%2C44%2C35%2C83%2C2%2C36%2C63%2C42%2C104%2C45%2C78%2C68%2C110%2C60%2C59%2C31%2C97%2C58%2C55%2C49%2C77%2C72%2C24%2C111 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=9818618;type=twint002;cat=twint0;ord=1895166089217;npa=0;auiddc=1403402495.1727409735;ps=1;pcor=137932440;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2Fvelo%2F? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /activityi;src=9818618;type=twint002;cat=twint0;ord=1895166089217;npa=0;auiddc=1403402495.1727409735;ps=1;pcor=137932440;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2Fvelo%2F? HTTP/1.1Host: 9818618.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9818618;type=twint002;cat=twint0;ord=1895166089217;npa=0;auiddc=1403402495.1727409735;ps=1;pcor=137932440;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2Fvelo%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-source;navigation-sourceReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/946203707/?random=1727409735110&cv=11&fst=1727409600000&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465z876304729za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2Fvelo%2F&hn=www.googleadservices.com&frm=0&tiba=Veloversicherung%20mit%20TWINT%20abschliessen%20%C2%BB%20TWINT&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwDpaXnfDjnBfoqWX8gWwYQN_2l4SiJ06y1Qag&random=1750163495&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=uHE3MPhWkkCAHJpDH1pishVOR2DYGb4VCGR8FWemchSsyuvuwmsiE1fPmcYb8cy-vat5744oZWk9lzdQx-eGkMtCG5oHkHJxpbmzc-IPDj-LYdAi_7nLYb4BOjEbMLc04Iw9jJ28d0aZ82FWxcJUVm6xZxGsIZdSvdTjN3etGqpmcJVcLA
Source: global traffic	HTTP traffic detected: GET /logos/static/ot_close.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/c6763161-a85e-4d6f-9902-c9d4575334af/209d2df7-c2dd-4023-807a-b382cfc1c6a0/f8ae775d-1572-46f6-ab4d-b468dd952de8/MicrosoftTeams-image_(53).png HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/c6763161-a85e-4d6f-9902-c9d4575334af/3c138d7e-9ef4-4168-8713-9b0f422d7140/328b026b-df30-40ce-be3e-cf9ec7a8cf13/twint_logo_q_pos_bg.png HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/powered_by_logo.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/ot_guard_logo.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.twint.chSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nfBkw&sid=qkaZApVbB7RCdyB5ADHv HTTP/1.1Host: datechf.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202307.1.0/otBannerSdk.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nfBk-&sid=qkaZApVbB7RCdyB5ADHv HTTP/1.1Host: datechf.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8c9898c28eda4378/1727409733188/7Hf4hPCc6PpUz1G HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /action/0?ti=20058379&tm=gtm002&Ver=2&mid=95270a66-e649-4deb-a4ab-3b09c746e031&sid=497e5f707c8511efa859ef9731879154&vid=498037407c8511ef8c4a6b44ef6ef254&vids=1&msclkid=N&uach=pv%3D10.0.0&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Veloversicherung%20mit%20TWINT%20abschliessen%20%C2%BB%20TWINT&p=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2Fvelo%2F&r=&lt=686&evt=pageLoad&sv=1&cdb=AQET&rn=935116 HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MR=0
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CIDIkN-e4ogDFcSHgwcdx90GEg;src=9818618;type=twint002;cat=twint0;ord=1895166089217;npa=0;auiddc=1403402495.1727409735;ps=1;pcor=137932440;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2Fvelo%2F? HTTP/1.1Host: 9818618.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnaxrRQiOXDkuDPypDvKrx_28Q0spLOcJvV9FpcEPQeJgRmNFlJQAQ_CJMG
Source: global traffic	HTTP traffic detected: GET /tr/?id=979879722096658&ev=PageView&dl=https%3A%2F%2Fwww.twint.ch&rl=&if=false&ts=1727409739025&sw=1280&sh=1024&v=2.9.168&r=stable&ec=0&o=4125&fbp=fb.1.1727409739018.104976150382192680&cs_est=true&pm=1&hrl=683abd&ler=empty&cdl=API_unavailable&it=1727409736851&coo=false&cs_cc=1&cas=1184151431702574%2C7836316349762126%2C7350041391718351&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=979879722096658&ev=PageView&dl=https%3A%2F%2Fwww.twint.ch&rl=&if=false&ts=1727409739025&sw=1280&sh=1024&v=2.9.168&r=stable&ec=0&o=4125&fbp=fb.1.1727409739018.104976150382192680&cs_est=true&pm=1&hrl=683abd&ler=empty&cdl=API_unavailable&it=1727409736851&coo=false&cs_cc=1&cas=1184151431702574%2C7836316349762126%2C7350041391718351&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-sourceReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CIDIkN-e4ogDFcSHgwcdx90GEg;src=9818618;type=twint002;cat=twint0;ord=1895166089217;npa=0;auiddc=;ps=1;pcor=137932440;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2Fvelo%2F HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9818618.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=uHE3MPhWkkCAHJpDH1pishVOR2DYGb4VCGR8FWemchSsyuvuwmsiE1fPmcYb8cy-vat5744oZWk9lzdQx-eGkMtCG5oHkHJxpbmzc-IPDj-LYdAi_7nLYb4BOjEbMLc04Iw9jJ28d0aZ82FWxcJUVm6xZxGsIZdSvdTjN3etGqpmcJVcLA
Source: global traffic	HTTP traffic detected: GET /logos/c6763161-a85e-4d6f-9902-c9d4575334af/209d2df7-c2dd-4023-807a-b382cfc1c6a0/f8ae775d-1572-46f6-ab4d-b468dd952de8/MicrosoftTeams-image_(53).png HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=244800-244800If-Range: 0x8DBAD5A5C6086B9
Source: global traffic	HTTP traffic detected: GET /consent/baf1656f-0c9f-4cd8-83fe-a5ce8d8c9eed/01921dfd-0535-7c88-9558-f9c8250e558c/de.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/8c9898c28eda4378/1727409733189/025777101fe1a45b0f5d87c612f46fac53b6d59d903f2a5f242cb7915cf2c14c/x8Gv9uqo--nZHa1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/jkyme/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nfC8Q&sid=qkaZApVbB7RCdyB5ADHv HTTP/1.1Host: datechf.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /bat.js HTTP/1.1Host: bat.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MR=0
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.twint.chSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/946203707/?random=1727409736078&cv=11&fst=1727409736078&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465z876304729za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fgoogle-play%2F&ref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fgoogle-play%2F%3F__cf_chl_tk%3DvPDafy5u7fTr24UoQidgupFmfFsp3K2ZYE8LkGIqA1g-1727409712-0.0.1.1-4734&hn=www.googleadservices.com&frm=0&tiba=Kaufe%20Google%20Play%20Guthaben%20direkt%20in%20der%20TWINT%20App%20%C2%BB%20TWINT&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnaxrRQiOXDkuDPypDvKrx_28Q0spLOcJvV9FpcEPQeJgRmNFlJQAQ_CJMG
Source: global traffic	HTTP traffic detected: GET /activityi;src=9818618;type=twint000;cat=twint0;ord=2448675382325;npa=0;auiddc=1403402495.1727409735;ps=1;pcor=867644488;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fgoogle-play%2F? HTTP/1.1Host: 9818618.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnaxrRQiOXDkuDPypDvKrx_28Q0spLOcJvV9FpcEPQeJgRmNFlJQAQ_CJMG
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=9818618;type=twint000;cat=twint0;ord=2448675382325;npa=0;auiddc=1403402495.1727409735;ps=1;pcor=867644488;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fgoogle-play%2F? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnaxrRQiOXDkuDPypDvKrx_28Q0spLOcJvV9FpcEPQeJgRmNFlJQAQ_CJMG
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9818618;type=twint000;cat=twint0;ord=2448675382325;npa=0;auiddc=1403402495.1727409735;ps=1;pcor=867644488;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fgoogle-play%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnaxrRQiOXDkuDPypDvKrx_28Q0spLOcJvV9FpcEPQeJgRmNFlJQAQ_CJMG
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202307.1.0/assets/otCookieSettingsButton.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1013387493:1727406779:YeLLeSo_U6RZZGVQuSYB98sLFp2Tgq99RTAz7RsFCL0/8c98989bea707d00/b235806045ed28b HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202307.1.0/assets/otFloatingRoundedIcon.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nfCqH&sid=qkaZApVbB7RCdyB5ADHv HTTP/1.1Host: datechf.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nfC8J&sid=qkaZApVbB7RCdyB5ADHv HTTP/1.1Host: datechf.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202307.1.0/assets/otCommonStyles.css HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/946203707/?random=1727409735110&cv=11&fst=1727409735110&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465z876304729za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2Fvelo%2F&hn=www.googleadservices.com&frm=0&tiba=Veloversicherung%20mit%20TWINT%20abschliessen%20%C2%BB%20TWINT&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnaxrRQiOXDkuDPypDvKrx_28Q0spLOcJvV9FpcEPQeJgRmNFlJQAQ_CJMG
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9818618;type=twint002;cat=twint0;ord=1895166089217;npa=0;auiddc=1403402495.1727409735;ps=1;pcor=137932440;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2Fvelo%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnaxrRQiOXDkuDPypDvKrx_28Q0spLOcJvV9FpcEPQeJgRmNFlJQAQ_CJMG
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202307.1.0/assets/v2/otPcCenter.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/powered_by_logo.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/946203707/?random=1727409735110&cv=11&fst=1727409600000&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465z876304729za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2Fvelo%2F&hn=www.googleadservices.com&frm=0&tiba=Veloversicherung%20mit%20TWINT%20abschliessen%20%C2%BB%20TWINT&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwDpaXnfDjnBfoqWX8gWwYQN_2l4SiJ06y1Qag&random=1750163495&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __Secure-BUCKET=CMwD; NID=517=uHE3MPhWkkCAHJpDH1pishVOR2DYGb4VCGR8FWemchSsyuvuwmsiE1fPmcYb8cy-vat5744oZWk9lzdQx-eGkMtCG5oHkHJxpbmzc-IPDj-LYdAi_7nLYb4BOjEbMLc04Iw9jJ28d0aZ82FWxcJUVm6xZxGsIZdSvdTjN3etGqpmcJVcLA
Source: global traffic	HTTP traffic detected: GET /logos/static/ot_close.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/979879722096658?v=2.9.168&r=stable&domain=www.twint.ch&hme=3ba426d944c98eb3ce406a0f93fc097d0320a486b65b445a33b2eda3a5aa3429&ex_m=70%2C119%2C105%2C109%2C61%2C4%2C98%2C69%2C16%2C95%2C87%2C51%2C54%2C170%2C173%2C185%2C181%2C182%2C184%2C29%2C99%2C53%2C76%2C183%2C165%2C168%2C178%2C179%2C186%2C129%2C41%2C34%2C141%2C15%2C50%2C192%2C191%2C131%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C91%2C17%2C14%2C94%2C90%2C89%2C106%2C52%2C108%2C39%2C107%2C30%2C92%2C26%2C166%2C169%2C138%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C74%2C100%2C27%2C75%2C9%2C8%2C79%2C48%2C21%2C102%2C101%2C103%2C96%2C10%2C20%2C3%2C38%2C19%2C84%2C56%2C82%2C33%2C73%2C0%2C93%2C32%2C81%2C86%2C47%2C46%2C85%2C37%2C5%2C88%2C80%2C44%2C35%2C83%2C2%2C36%2C63%2C42%2C104%2C45%2C78%2C68%2C110%2C60%2C59%2C31%2C97%2C58%2C55%2C49%2C77%2C72%2C24%2C111 HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=979879722096658&ev=PageView&dl=https%3A%2F%2Fwww.twint.ch&rl=https%3A%2F%2Fwww.twint.ch&if=false&ts=1727409743210&sw=1280&sh=1024&v=2.9.168&r=stable&ec=0&o=4125&fbp=fb.1.1727409739018.104976150382192680&cs_est=true&pm=1&hrl=ab3925&ler=empty&cdl=API_unavailable&it=1727409742898&coo=false&cs_cc=1&cas=1184151431702574%2C7836316349762126%2C7350041391718351&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/action/20058379.js HTTP/1.1Host: bat.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MR=0
Source: global traffic	HTTP traffic detected: GET /action/0?ti=20058379&tm=gtm002&Ver=2&mid=469668cb-f2c0-4a39-bff5-f3069aec2bc1&sid=497e5f707c8511efa859ef9731879154&vid=498037407c8511ef8c4a6b44ef6ef254&vids=0&msclkid=N&uach=pv%3D10.0.0&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Kaufe%20Google%20Play%20Guthaben%20direkt%20in%20der%20TWINT%20App%20%C2%BB%20TWINT&p=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fgoogle-play%2F&r=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fgoogle-play%2F%3F__cf_chl_tk%3DvPDafy5u7fTr24UoQidgupFmfFsp3K2ZYE8LkGIqA1g-1727409712-0.0.1.1-4734&lt=3686&evt=pageLoad&sv=1&cdb=AQET&rn=61301 HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MR=0; MSPTC=2of7DkoixaLfYUbWyihudepkmANZsPUZb-bl4_5CISU
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=979879722096658&ev=PageView&dl=https%3A%2F%2Fwww.twint.ch&rl=https%3A%2F%2Fwww.twint.ch&if=false&ts=1727409743210&sw=1280&sh=1024&v=2.9.168&r=stable&ec=0&o=4125&fbp=fb.1.1727409739018.104976150382192680&cs_est=true&pm=1&hrl=ab3925&ler=empty&cdl=API_unavailable&it=1727409742898&coo=false&cs_cc=1&cas=1184151431702574%2C7836316349762126%2C7350041391718351&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger;navigation-source, event-sourceReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nfEQ- HTTP/1.1Host: datechf.ccConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://datechf.cc/de/receive/79469380Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CMGggOKe4ogDFT2Igwcdeksm6g;src=9818618;type=twint000;cat=twint0;ord=2448675382325;npa=0;auiddc=1403402495.1727409735;ps=1;pcor=867644488;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fgoogle-play%2F? HTTP/1.1Host: 9818618.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnaxrRQiOXDkuDPypDvKrx_28Q0spLOcJvV9FpcEPQeJgRmNFlJQAQ_CJMG
Source: global traffic	HTTP traffic detected: GET /td/rul/946203707?random=1727409744002&cv=11&fst=1727409744002&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465z876304729za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fspenden%2F&ref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fspenden%2F%3F__cf_chl_tk%3D8Ylek.WKI04G6TXvVTCL_69k6NRX5ocFRXcdiigbSf8-1727409721-0.0.1.1-4670&hn=www.googleadservices.com&frm=0&tiba=Sicher%20und%20schnell%20Spenden%20direkt%20in%20der%20TWINT%20App&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnaxrRQiOXDkuDPypDvKrx_28Q0spLOcJvV9FpcEPQeJgRmNFlJQAQ_CJMG
Source: global traffic	HTTP traffic detected: GET /logos/static/ot_guard_logo.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/c6763161-a85e-4d6f-9902-c9d4575334af/3c138d7e-9ef4-4168-8713-9b0f422d7140/328b026b-df30-40ce-be3e-cf9ec7a8cf13/twint_logo_q_pos_bg.png HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/946203707/?random=1727409736078&cv=11&fst=1727409600000&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465z876304729za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fgoogle-play%2F&ref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fgoogle-play%2F%3F__cf_chl_tk%3DvPDafy5u7fTr24UoQidgupFmfFsp3K2ZYE8LkGIqA1g-1727409712-0.0.1.1-4734&hn=www.googleadservices.com&frm=0&tiba=Kaufe%20Google%20Play%20Guthaben%20direkt%20in%20der%20TWINT%20App%20%C2%BB%20TWINT&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDpaXnf2oQDLOilvPE3AkGZM8K7zLJFKHoP3GwJFqN6CxNlis8qHfYP&random=2946198191&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=uHE3MPhWkkCAHJpDH1pishVOR2DYGb4VCGR8FWemchSsyuvuwmsiE1fPmcYb8cy-vat5744oZWk9lzdQx-eGkMtCG5oHkHJxpbmzc-IPDj-LYdAi_7nLYb4BOjEbMLc04Iw9jJ28d0aZ82FWxcJUVm6xZxGsIZdSvdTjN3etGqpmcJVcLA
Source: global traffic	HTTP traffic detected: GET /logos/c6763161-a85e-4d6f-9902-c9d4575334af/209d2df7-c2dd-4023-807a-b382cfc1c6a0/f8ae775d-1572-46f6-ab4d-b468dd952de8/MicrosoftTeams-image_(53).png HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=979879722096658&ev=PageView&dl=https%3A%2F%2Fwww.twint.ch&rl=&if=false&ts=1727409739025&sw=1280&sh=1024&v=2.9.168&r=stable&ec=0&o=4125&fbp=fb.1.1727409739018.104976150382192680&cs_est=true&pm=1&hrl=683abd&ler=empty&cdl=API_unavailable&it=1727409736851&coo=false&cs_cc=1&cas=1184151431702574%2C7836316349762126%2C7350041391718351&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=979879722096658&ev=PageView&dl=https%3A%2F%2Fwww.twint.ch&rl=&if=false&ts=1727409739025&sw=1280&sh=1024&v=2.9.168&r=stable&ec=0&o=4125&fbp=fb.1.1727409739018.104976150382192680&cs_est=true&pm=1&hrl=683abd&ler=empty&cdl=API_unavailable&it=1727409736851&coo=false&cs_cc=1&cas=1184151431702574%2C7836316349762126%2C7350041391718351&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CMGggOKe4ogDFT2Igwcdeksm6g;src=9818618;type=twint000;cat=twint0;ord=2448675382325;npa=0;auiddc=;ps=1;pcor=867644488;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fgoogle-play%2F HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9818618.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=uHE3MPhWkkCAHJpDH1pishVOR2DYGb4VCGR8FWemchSsyuvuwmsiE1fPmcYb8cy-vat5744oZWk9lzdQx-eGkMtCG5oHkHJxpbmzc-IPDj-LYdAi_7nLYb4BOjEbMLc04Iw9jJ28d0aZ82FWxcJUVm6xZxGsIZdSvdTjN3etGqpmcJVcLA
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=websocket&sid=FTghqIbk_2IPVTtyADHy HTTP/1.1Host: datechf.ccConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://datechf.ccSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/deSec-WebSocket-Key: ZOGscY/4b6Dee1qc3ERDVw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nfEwn&sid=FTghqIbk_2IPVTtyADHy HTTP/1.1Host: datechf.ccConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://datechf.cc/de/receive/79469380Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nfFIz&sid=FTghqIbk_2IPVTtyADHy HTTP/1.1Host: datechf.ccConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://datechf.cc/de/receive/79469380Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.twint.chSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/946203707/?random=1727409744002&cv=11&fst=1727409744002&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465z876304729za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fspenden%2F&ref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fspenden%2F%3F__cf_chl_tk%3D8Ylek.WKI04G6TXvVTCL_69k6NRX5ocFRXcdiigbSf8-1727409721-0.0.1.1-4670&hn=www.googleadservices.com&frm=0&tiba=Sicher%20und%20schnell%20Spenden%20direkt%20in%20der%20TWINT%20App&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnaxrRQiOXDkuDPypDvKrx_28Q0spLOcJvV9FpcEPQeJgRmNFlJQAQ_CJMG
Source: global traffic	HTTP traffic detected: GET /activityi;src=9818618;type=twint00;cat=pvtwi0;ord=9421055585359;npa=0;auiddc=1403402495.1727409735;ps=1;pcor=1564699894;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fspenden%2F? HTTP/1.1Host: 9818618.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnaxrRQiOXDkuDPypDvKrx_28Q0spLOcJvV9FpcEPQeJgRmNFlJQAQ_CJMG
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=9818618;type=twint00;cat=pvtwi0;ord=9421055585359;npa=0;auiddc=1403402495.1727409735;ps=1;pcor=1564699894;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fspenden%2F? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnaxrRQiOXDkuDPypDvKrx_28Q0spLOcJvV9FpcEPQeJgRmNFlJQAQ_CJMG
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9818618;type=twint00;cat=pvtwi0;ord=9421055585359;npa=0;auiddc=1403402495.1727409735;ps=1;pcor=1564699894;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fspenden%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnaxrRQiOXDkuDPypDvKrx_28Q0spLOcJvV9FpcEPQeJgRmNFlJQAQ_CJMG
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/946203707/?random=1727409736078&cv=11&fst=1727409736078&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465z876304729za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fgoogle-play%2F&ref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fgoogle-play%2F%3F__cf_chl_tk%3DvPDafy5u7fTr24UoQidgupFmfFsp3K2ZYE8LkGIqA1g-1727409712-0.0.1.1-4734&hn=www.googleadservices.com&frm=0&tiba=Kaufe%20Google%20Play%20Guthaben%20direkt%20in%20der%20TWINT%20App%20%C2%BB%20TWINT&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnaxrRQiOXDkuDPypDvKrx_28Q0spLOcJvV9FpcEPQeJgRmNFlJQAQ_CJMG
Source: global traffic	HTTP traffic detected: GET /tr/?id=979879722096658&ev=PageView&dl=https%3A%2F%2Fwww.twint.ch&rl=https%3A%2F%2Fwww.twint.ch&if=false&ts=1727409743210&sw=1280&sh=1024&v=2.9.168&r=stable&ec=0&o=4125&fbp=fb.1.1727409739018.104976150382192680&cs_est=true&pm=1&hrl=ab3925&ler=empty&cdl=API_unavailable&it=1727409742898&coo=false&cs_cc=1&cas=1184151431702574%2C7836316349762126%2C7350041391718351&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9818618;type=twint000;cat=twint0;ord=2448675382325;npa=0;auiddc=1403402495.1727409735;ps=1;pcor=867644488;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fgoogle-play%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnaxrRQiOXDkuDPypDvKrx_28Q0spLOcJvV9FpcEPQeJgRmNFlJQAQ_CJMG
Source: global traffic	HTTP traffic detected: GET /tr/?id=979879722096658&ev=PageView&dl=https%3A%2F%2Fwww.twint.ch&rl=https%3A%2F%2Fwww.twint.ch&if=false&ts=1727409748737&sw=1280&sh=1024&v=2.9.168&r=stable&ec=0&o=4125&fbp=fb.1.1727409739018.104976150382192680&cs_est=true&pm=1&hrl=654d6e&ler=empty&cdl=API_unavailable&it=1727409748414&coo=false&cs_cc=1&cas=1184151431702574%2C7836316349762126%2C7350041391718351&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CKq-zuSe4ogDFYSHgwcdrd8U9g;src=9818618;type=twint00;cat=pvtwi0;ord=9421055585359;npa=0;auiddc=1403402495.1727409735;ps=1;pcor=1564699894;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fspenden%2F? HTTP/1.1Host: 9818618.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnaxrRQiOXDkuDPypDvKrx_28Q0spLOcJvV9FpcEPQeJgRmNFlJQAQ_CJMG
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=979879722096658&ev=PageView&dl=https%3A%2F%2Fwww.twint.ch&rl=https%3A%2F%2Fwww.twint.ch&if=false&ts=1727409748737&sw=1280&sh=1024&v=2.9.168&r=stable&ec=0&o=4125&fbp=fb.1.1727409739018.104976150382192680&cs_est=true&pm=1&hrl=654d6e&ler=empty&cdl=API_unavailable&it=1727409748414&coo=false&cs_cc=1&cas=1184151431702574%2C7836316349762126%2C7350041391718351&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-source=navigation-sourceReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /action/0?ti=20058379&tm=gtm002&Ver=2&mid=413e2505-368e-465b-8eb3-ffe788848299&sid=497e5f707c8511efa859ef9731879154&vid=498037407c8511ef8c4a6b44ef6ef254&vids=0&msclkid=N&uach=pv%3D10.0.0&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Sicher%20und%20schnell%20Spenden%20direkt%20in%20der%20TWINT%20App&p=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fspenden%2F&r=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fspenden%2F%3F__cf_chl_tk%3D8Ylek.WKI04G6TXvVTCL_69k6NRX5ocFRXcdiigbSf8-1727409721-0.0.1.1-4670&lt=3631&evt=pageLoad&sv=1&cdb=AQET&rn=448074 HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MR=0; MSPTC=2of7DkoixaLfYUbWyihudepkmANZsPUZb-bl4_5CISU
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=979879722096658&ev=PageView&dl=https%3A%2F%2Fwww.twint.ch&rl=https%3A%2F%2Fwww.twint.ch&if=false&ts=1727409743210&sw=1280&sh=1024&v=2.9.168&r=stable&ec=0&o=4125&fbp=fb.1.1727409739018.104976150382192680&cs_est=true&pm=1&hrl=ab3925&ler=empty&cdl=API_unavailable&it=1727409742898&coo=false&cs_cc=1&cas=1184151431702574%2C7836316349762126%2C7350041391718351&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/946203707/?random=1727409744002&cv=11&fst=1727409600000&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465z876304729za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fspenden%2F&ref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fspenden%2F%3F__cf_chl_tk%3D8Ylek.WKI04G6TXvVTCL_69k6NRX5ocFRXcdiigbSf8-1727409721-0.0.1.1-4670&hn=www.googleadservices.com&frm=0&tiba=Sicher%20und%20schnell%20Spenden%20direkt%20in%20der%20TWINT%20App&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDpaXnf2wzw5r2qZw1p22bAF3afrRFHrWIghWAnAwsNxvVm_xQQf4Bn&random=537469945&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=uHE3MPhWkkCAHJpDH1pishVOR2DYGb4VCGR8FWemchSsyuvuwmsiE1fPmcYb8cy-vat5744oZWk9lzdQx-eGkMtCG5oHkHJxpbmzc-IPDj-LYdAi_7nLYb4BOjEbMLc04Iw9jJ28d0aZ82FWxcJUVm6xZxGsIZdSvdTjN3etGqpmcJVcLA
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CKq-zuSe4ogDFYSHgwcdrd8U9g;src=9818618;type=twint00;cat=pvtwi0;ord=9421055585359;npa=0;auiddc=;ps=1;pcor=1564699894;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fspenden%2F HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9818618.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=uHE3MPhWkkCAHJpDH1pishVOR2DYGb4VCGR8FWemchSsyuvuwmsiE1fPmcYb8cy-vat5744oZWk9lzdQx-eGkMtCG5oHkHJxpbmzc-IPDj-LYdAi_7nLYb4BOjEbMLc04Iw9jJ28d0aZ82FWxcJUVm6xZxGsIZdSvdTjN3etGqpmcJVcLA
Source: global traffic	HTTP traffic detected: GET /td/rul/946203707?random=1727409752296&cv=11&fst=1727409752296&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465z876304729za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2F&ref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2F%3F__cf_chl_tk%3D5A09ioEQ0UuE6kMF8J70tFRZFy1rLN1KfmGgecubOiU-1727409728-0.0.1.1-4692&hn=www.googleadservices.com&frm=0&tiba=Versicherung%20mit%20TWINT%20abschliessen%20%7C%20TWINT&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnaxrRQiOXDkuDPypDvKrx_28Q0spLOcJvV9FpcEPQeJgRmNFlJQAQ_CJMG
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1731196884:1727406774:ogyKtD3DYRZvneb8A8Xd4gumCbdnDgJl3yl7WoSTagU/8c9898c28eda4378/cf4fc23845fcc6d HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nfEQ- HTTP/1.1Host: datechf.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nfEwb&sid=FTghqIbk_2IPVTtyADHy HTTP/1.1Host: datechf.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nfEwn&sid=FTghqIbk_2IPVTtyADHy HTTP/1.1Host: datechf.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nfFJ0&sid=FTghqIbk_2IPVTtyADHy HTTP/1.1Host: datechf.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/946203707/?random=1727409736078&cv=11&fst=1727409600000&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465z876304729za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fgoogle-play%2F&ref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fgoogle-play%2F%3F__cf_chl_tk%3DvPDafy5u7fTr24UoQidgupFmfFsp3K2ZYE8LkGIqA1g-1727409712-0.0.1.1-4734&hn=www.googleadservices.com&frm=0&tiba=Kaufe%20Google%20Play%20Guthaben%20direkt%20in%20der%20TWINT%20App%20%C2%BB%20TWINT&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDpaXnf2oQDLOilvPE3AkGZM8K7zLJFKHoP3GwJFqN6CxNlis8qHfYP&random=2946198191&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __Secure-BUCKET=CMwD; NID=517=uHE3MPhWkkCAHJpDH1pishVOR2DYGb4VCGR8FWemchSsyuvuwmsiE1fPmcYb8cy-vat5744oZWk9lzdQx-eGkMtCG5oHkHJxpbmzc-IPDj-LYdAi_7nLYb4BOjEbMLc04Iw9jJ28d0aZ82FWxcJUVm6xZxGsIZdSvdTjN3etGqpmcJVcLA
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.twint.chSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/946203707?random=1727409754779&cv=11&fst=1727409754779&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465z876304729za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fnetflix%2F&hn=www.googleadservices.com&frm=0&tiba=Kaufe%20Netflix%20Guthaben%20direkt%20in%20der%20TWINT%20App%20%C2%BB%20TWINT&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnaxrRQiOXDkuDPypDvKrx_28Q0spLOcJvV9FpcEPQeJgRmNFlJQAQ_CJMG
Source: global traffic	HTTP traffic detected: GET /td/rul/946203707?random=1727409754803&cv=11&fst=1727409754803&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fnetflix%2F&hn=www.googleadservices.com&frm=0&tiba=Kaufe%20Netflix%20Guthaben%20direkt%20in%20der%20TWINT%20App%20%C2%BB%20TWINT&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnaxrRQiOXDkuDPypDvKrx_28Q0spLOcJvV9FpcEPQeJgRmNFlJQAQ_CJMG
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nfFeA&sid=FTghqIbk_2IPVTtyADHy HTTP/1.1Host: datechf.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/946203707/?random=1727409754779&cv=11&fst=1727409754779&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465z876304729za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fnetflix%2F&hn=www.googleadservices.com&frm=0&tiba=Kaufe%20Netflix%20Guthaben%20direkt%20in%20der%20TWINT%20App%20%C2%BB%20TWINT&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnaxrRQiOXDkuDPypDvKrx_28Q0spLOcJvV9FpcEPQeJgRmNFlJQAQ_CJMG
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/946203707/?random=1727409744002&cv=11&fst=1727409744002&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465z876304729za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fspenden%2F&ref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fspenden%2F%3F__cf_chl_tk%3D8Ylek.WKI04G6TXvVTCL_69k6NRX5ocFRXcdiigbSf8-1727409721-0.0.1.1-4670&hn=www.googleadservices.com&frm=0&tiba=Sicher%20und%20schnell%20Spenden%20direkt%20in%20der%20TWINT%20App&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnaxrRQiOXDkuDPypDvKrx_28Q0spLOcJvV9FpcEPQeJgRmNFlJQAQ_CJMG
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/946203707/?random=1727409754803&cv=11&fst=1727409754803&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fnetflix%2F&hn=www.googleadservices.com&frm=0&tiba=Kaufe%20Netflix%20Guthaben%20direkt%20in%20der%20TWINT%20App%20%C2%BB%20TWINT&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnaxrRQiOXDkuDPypDvKrx_28Q0spLOcJvV9FpcEPQeJgRmNFlJQAQ_CJMG
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9818618;type=twint00;cat=pvtwi0;ord=9421055585359;npa=0;auiddc=1403402495.1727409735;ps=1;pcor=1564699894;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fspenden%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnaxrRQiOXDkuDPypDvKrx_28Q0spLOcJvV9FpcEPQeJgRmNFlJQAQ_CJMG
Source: global traffic	HTTP traffic detected: GET /tr/?id=979879722096658&ev=PageView&dl=https%3A%2F%2Fwww.twint.ch&rl=https%3A%2F%2Fwww.twint.ch&if=false&ts=1727409748737&sw=1280&sh=1024&v=2.9.168&r=stable&ec=0&o=4125&fbp=fb.1.1727409739018.104976150382192680&cs_est=true&pm=1&hrl=654d6e&ler=empty&cdl=API_unavailable&it=1727409748414&coo=false&cs_cc=1&cas=1184151431702574%2C7836316349762126%2C7350041391718351&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=979879722096658&ev=PageView&dl=https%3A%2F%2Fwww.twint.ch&rl=https%3A%2F%2Fwww.twint.ch&if=false&ts=1727409748737&sw=1280&sh=1024&v=2.9.168&r=stable&ec=0&o=4125&fbp=fb.1.1727409739018.104976150382192680&cs_est=true&pm=1&hrl=654d6e&ler=empty&cdl=API_unavailable&it=1727409748414&coo=false&cs_cc=1&cas=1184151431702574%2C7836316349762126%2C7350041391718351&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/946203707/?random=1727409744002&cv=11&fst=1727409600000&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465z876304729za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fspenden%2F&ref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fspenden%2F%3F__cf_chl_tk%3D8Ylek.WKI04G6TXvVTCL_69k6NRX5ocFRXcdiigbSf8-1727409721-0.0.1.1-4670&hn=www.googleadservices.com&frm=0&tiba=Sicher%20und%20schnell%20Spenden%20direkt%20in%20der%20TWINT%20App&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDpaXnf2wzw5r2qZw1p22bAF3afrRFHrWIghWAnAwsNxvVm_xQQf4Bn&random=537469945&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __Secure-BUCKET=CMwD; NID=517=uHE3MPhWkkCAHJpDH1pishVOR2DYGb4VCGR8FWemchSsyuvuwmsiE1fPmcYb8cy-vat5744oZWk9lzdQx-eGkMtCG5oHkHJxpbmzc-IPDj-LYdAi_7nLYb4BOjEbMLc04Iw9jJ28d0aZ82FWxcJUVm6xZxGsIZdSvdTjN3etGqpmcJVcLA
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=9818618;type=twint000;cat=twint0;ord=8444076415182;npa=0;auiddc=1403402495.1727409735;ps=1;pcor=1986224265;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fnetflix%2F? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnaxrRQiOXDkuDPypDvKrx_28Q0spLOcJvV9FpcEPQeJgRmNFlJQAQ_CJMG
Source: global traffic	HTTP traffic detected: GET /activityi;src=9818618;type=twint000;cat=twint0;ord=8444076415182;npa=0;auiddc=1403402495.1727409735;ps=1;pcor=1986224265;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fnetflix%2F? HTTP/1.1Host: 9818618.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnaxrRQiOXDkuDPypDvKrx_28Q0spLOcJvV9FpcEPQeJgRmNFlJQAQ_CJMG
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9818618;type=twint000;cat=twint0;ord=8444076415182;npa=0;auiddc=1403402495.1727409735;ps=1;pcor=1986224265;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fnetflix%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger;navigation-source, event-sourceReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnaxrRQiOXDkuDPypDvKrx_28Q0spLOcJvV9FpcEPQeJgRmNFlJQAQ_CJMG
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/946203707/?random=1727409754779&cv=11&fst=1727409600000&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465z876304729za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fnetflix%2F&hn=www.googleadservices.com&frm=0&tiba=Kaufe%20Netflix%20Guthaben%20direkt%20in%20der%20TWINT%20App%20%C2%BB%20TWINT&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDpaXnfD4PNL5GajCw4O2PROrEMkRUJ442nzdCQ5-cdQc1KvGRj4f_X&random=1170471227&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=uHE3MPhWkkCAHJpDH1pishVOR2DYGb4VCGR8FWemchSsyuvuwmsiE1fPmcYb8cy-vat5744oZWk9lzdQx-eGkMtCG5oHkHJxpbmzc-IPDj-LYdAi_7nLYb4BOjEbMLc04Iw9jJ28d0aZ82FWxcJUVm6xZxGsIZdSvdTjN3etGqpmcJVcLA
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CNb5keme4ogDFfCqgwcdUAQ1Qg;src=9818618;type=twint000;cat=twint0;ord=8444076415182;npa=0;auiddc=1403402495.1727409735;ps=1;pcor=1986224265;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fnetflix%2F? HTTP/1.1Host: 9818618.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnaxrRQiOXDkuDPypDvKrx_28Q0spLOcJvV9FpcEPQeJgRmNFlJQAQ_CJMG
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/946203707/?random=1727409754803&cv=11&fst=1727409600000&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fnetflix%2F&hn=www.googleadservices.com&frm=0&tiba=Kaufe%20Netflix%20Guthaben%20direkt%20in%20der%20TWINT%20App%20%C2%BB%20TWINT&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDpaXnfTxaXFEa455endocBtx5JKmZi27z5gQy0CTt7gOepkj5ItrRu&random=672796695&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=uHE3MPhWkkCAHJpDH1pishVOR2DYGb4VCGR8FWemchSsyuvuwmsiE1fPmcYb8cy-vat5744oZWk9lzdQx-eGkMtCG5oHkHJxpbmzc-IPDj-LYdAi_7nLYb4BOjEbMLc04Iw9jJ28d0aZ82FWxcJUVm6xZxGsIZdSvdTjN3etGqpmcJVcLA
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/946203707/?random=1727409752296&cv=11&fst=1727409752296&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465z876304729za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2F&ref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2F%3F__cf_chl_tk%3D5A09ioEQ0UuE6kMF8J70tFRZFy1rLN1KfmGgecubOiU-1727409728-0.0.1.1-4692&hn=www.googleadservices.com&frm=0&tiba=Versicherung%20mit%20TWINT%20abschliessen%20%7C%20TWINT&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnaxrRQiOXDkuDPypDvKrx_28Q0spLOcJvV9FpcEPQeJgRmNFlJQAQ_CJMG
Source: global traffic	HTTP traffic detected: GET /activityi;src=9818618;type=twint002;cat=twint0;ord=4668833148283;npa=0;auiddc=1403402495.1727409735;ps=1;pcor=1409597338;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2F? HTTP/1.1Host: 9818618.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnaxrRQiOXDkuDPypDvKrx_28Q0spLOcJvV9FpcEPQeJgRmNFlJQAQ_CJMG
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=9818618;type=twint002;cat=twint0;ord=4668833148283;npa=0;auiddc=1403402495.1727409735;ps=1;pcor=1409597338;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2F? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnaxrRQiOXDkuDPypDvKrx_28Q0spLOcJvV9FpcEPQeJgRmNFlJQAQ_CJMG
Source: global traffic	HTTP traffic detected: GET /iframe_api HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=979879722096658&ev=PageView&dl=https%3A%2F%2Fwww.twint.ch&rl=&if=false&ts=1727409758907&sw=1280&sh=1024&v=2.9.168&r=stable&ec=0&o=4125&fbp=fb.1.1727409739018.104976150382192680&cs_est=true&pm=1&hrl=33f8d2&ler=empty&cdl=API_unavailable&it=1727409757585&coo=false&cs_cc=1&cas=1184151431702574%2C7836316349762126%2C7350041391718351&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=979879722096658&ev=PageView&dl=https%3A%2F%2Fwww.twint.ch&rl=&if=false&ts=1727409758907&sw=1280&sh=1024&v=2.9.168&r=stable&ec=0&o=4125&fbp=fb.1.1727409739018.104976150382192680&cs_est=true&pm=1&hrl=33f8d2&ler=empty&cdl=API_unavailable&it=1727409757585&coo=false&cs_cc=1&cas=1184151431702574%2C7836316349762126%2C7350041391718351&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nfFIz&sid=FTghqIbk_2IPVTtyADHy HTTP/1.1Host: datechf.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CNb5keme4ogDFfCqgwcdUAQ1Qg;src=9818618;type=twint000;cat=twint0;ord=8444076415182;npa=0;auiddc=;ps=1;pcor=1986224265;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fnetflix%2F HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9818618.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=uHE3MPhWkkCAHJpDH1pishVOR2DYGb4VCGR8FWemchSsyuvuwmsiE1fPmcYb8cy-vat5744oZWk9lzdQx-eGkMtCG5oHkHJxpbmzc-IPDj-LYdAi_7nLYb4BOjEbMLc04Iw9jJ28d0aZ82FWxcJUVm6xZxGsIZdSvdTjN3etGqpmcJVcLA
Source: global traffic	HTTP traffic detected: GET /action/0?ti=20058379&tm=gtm002&Ver=2&mid=f28359a7-14ee-4342-9478-e8e28ca87905&sid=497e5f707c8511efa859ef9731879154&vid=498037407c8511ef8c4a6b44ef6ef254&vids=0&msclkid=N&uach=pv%3D10.0.0&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Kaufe%20Netflix%20Guthaben%20direkt%20in%20der%20TWINT%20App%20%C2%BB%20TWINT&p=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fnetflix%2F&r=&lt=1923&evt=pageLoad&sv=1&cdb=AQET&rn=172087 HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MR=0; MSPTC=2of7DkoixaLfYUbWyihudepkmANZsPUZb-bl4_5CISU
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=COOh1Ome4ogDFcOHgwcd2l8z9Q;src=9818618;type=twint002;cat=twint0;ord=4668833148283;npa=0;auiddc=1403402495.1727409735;ps=1;pcor=1409597338;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2F? HTTP/1.1Host: 9818618.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnaxrRQiOXDkuDPypDvKrx_28Q0spLOcJvV9FpcEPQeJgRmNFlJQAQ_CJMG
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9818618;type=twint002;cat=twint0;ord=4668833148283;npa=0;auiddc=1403402495.1727409735;ps=1;pcor=1409597338;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-sourceReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnaxrRQiOXDkuDPypDvKrx_28Q0spLOcJvV9FpcEPQeJgRmNFlJQAQ_CJMG
Source: global traffic	HTTP traffic detected: GET /action/0?ti=20058379&tm=gtm002&Ver=2&mid=22c20d2e-7c34-4136-ae23-48da5e538363&sid=497e5f707c8511efa859ef9731879154&vid=498037407c8511ef8c4a6b44ef6ef254&vids=0&msclkid=N&uach=pv%3D10.0.0&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Versicherung%20mit%20TWINT%20abschliessen%20%7C%20TWINT&p=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2F&r=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2F%3F__cf_chl_tk%3D5A09ioEQ0UuE6kMF8J70tFRZFy1rLN1KfmGgecubOiU-1727409728-0.0.1.1-4692&lt=2113&evt=pageLoad&sv=1&cdb=AQET&rn=915018 HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MR=0; MSPTC=2of7DkoixaLfYUbWyihudepkmANZsPUZb-bl4_5CISU
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/946203707/?random=1727409752296&cv=11&fst=1727409600000&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465z876304729za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2F&ref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2F%3F__cf_chl_tk%3D5A09ioEQ0UuE6kMF8J70tFRZFy1rLN1KfmGgecubOiU-1727409728-0.0.1.1-4692&hn=www.googleadservices.com&frm=0&tiba=Versicherung%20mit%20TWINT%20abschliessen%20%7C%20TWINT&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDpaXnfiBfL-gMZMcox3N5VPDcanwndPU4HiC7yGD5gbT7lMJwSNvp_&random=3862314837&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=uHE3MPhWkkCAHJpDH1pishVOR2DYGb4VCGR8FWemchSsyuvuwmsiE1fPmcYb8cy-vat5744oZWk9lzdQx-eGkMtCG5oHkHJxpbmzc-IPDj-LYdAi_7nLYb4BOjEbMLc04Iw9jJ28d0aZ82FWxcJUVm6xZxGsIZdSvdTjN3etGqpmcJVcLA
Source: global traffic	HTTP traffic detected: GET /tr/?id=979879722096658&ev=PageView&dl=https%3A%2F%2Fwww.twint.ch&rl=https%3A%2F%2Fwww.twint.ch&if=false&ts=1727409760274&sw=1280&sh=1024&v=2.9.168&r=stable&ec=0&o=4125&fbp=fb.1.1727409739018.104976150382192680&cs_est=true&pm=1&hrl=5a650c&ler=empty&cdl=API_unavailable&it=1727409759036&coo=false&cs_cc=1&cas=1184151431702574%2C7836316349762126%2C7350041391718351&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=979879722096658&ev=PageView&dl=https%3A%2F%2Fwww.twint.ch&rl=https%3A%2F%2Fwww.twint.ch&if=false&ts=1727409760274&sw=1280&sh=1024&v=2.9.168&r=stable&ec=0&o=4125&fbp=fb.1.1727409739018.104976150382192680&cs_est=true&pm=1&hrl=5a650c&ler=empty&cdl=API_unavailable&it=1727409759036&coo=false&cs_cc=1&cas=1184151431702574%2C7836316349762126%2C7350041391718351&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger;navigation-source, event-sourceReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=COOh1Ome4ogDFcOHgwcd2l8z9Q;src=9818618;type=twint002;cat=twint0;ord=4668833148283;npa=0;auiddc=;ps=1;pcor=1409597338;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2F HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9818618.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=uHE3MPhWkkCAHJpDH1pishVOR2DYGb4VCGR8FWemchSsyuvuwmsiE1fPmcYb8cy-vat5744oZWk9lzdQx-eGkMtCG5oHkHJxpbmzc-IPDj-LYdAi_7nLYb4BOjEbMLc04Iw9jJ28d0aZ82FWxcJUVm6xZxGsIZdSvdTjN3etGqpmcJVcLA
Source: global traffic	HTTP traffic detected: GET /s/player/b0557ce3/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.twint.ch/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=Q_eHeCsPKMA; VISITOR_INFO1_LIVE=_TzoU-TzW1A; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgYg%3D%3D
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nfIu8 HTTP/1.1Host: datechf.ccConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://datechf.cc/de/receive/79469380Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/th/KZ9qBfv2Fvj8--thF3jkrqmjFIXwxVfodGy5wvrcirQ.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube-nocookie.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=uHE3MPhWkkCAHJpDH1pishVOR2DYGb4VCGR8FWemchSsyuvuwmsiE1fPmcYb8cy-vat5744oZWk9lzdQx-eGkMtCG5oHkHJxpbmzc-IPDj-LYdAi_7nLYb4BOjEbMLc04Iw9jJ28d0aZ82FWxcJUVm6xZxGsIZdSvdTjN3etGqpmcJVcLA
Source: global traffic	HTTP traffic detected: GET /vi/rrdmkY1xtjg/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGEsgZShDMA8=&rs=AOn4CLD0Sj8pWlWnPKIRxnXk58RdyoG3-g HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube-nocookie.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ytc/AIdro_nsnpDHndRIgw_D137nMXybt_A9C6gggxF9A7gF4rjCOvU=s68-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube-nocookie.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nfJU9&sid=3r9bDDVSXbEFGIhqADH1 HTTP/1.1Host: datechf.ccConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://datechf.cc/de/receive/79469380Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=websocket&sid=3r9bDDVSXbEFGIhqADH1 HTTP/1.1Host: datechf.ccConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://datechf.ccSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/deSec-WebSocket-Key: x8n/D9MV+Q3kp8cTjMFqvA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /tr/?id=979879722096658&ev=PageView&dl=https%3A%2F%2Fwww.twint.ch&rl=&if=false&ts=1727409758907&sw=1280&sh=1024&v=2.9.168&r=stable&ec=0&o=4125&fbp=fb.1.1727409739018.104976150382192680&cs_est=true&pm=1&hrl=33f8d2&ler=empty&cdl=API_unavailable&it=1727409757585&coo=false&cs_cc=1&cas=1184151431702574%2C7836316349762126%2C7350041391718351&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/946203707/?random=1727409754779&cv=11&fst=1727409600000&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465z876304729za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fnetflix%2F&hn=www.googleadservices.com&frm=0&tiba=Kaufe%20Netflix%20Guthaben%20direkt%20in%20der%20TWINT%20App%20%C2%BB%20TWINT&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDpaXnfD4PNL5GajCw4O2PROrEMkRUJ442nzdCQ5-cdQc1KvGRj4f_X&random=1170471227&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __Secure-BUCKET=CMwD; NID=517=uHE3MPhWkkCAHJpDH1pishVOR2DYGb4VCGR8FWemchSsyuvuwmsiE1fPmcYb8cy-vat5744oZWk9lzdQx-eGkMtCG5oHkHJxpbmzc-IPDj-LYdAi_7nLYb4BOjEbMLc04Iw9jJ28d0aZ82FWxcJUVm6xZxGsIZdSvdTjN3etGqpmcJVcLA
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/946203707/?random=1727409754779&cv=11&fst=1727409754779&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465z876304729za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fnetflix%2F&hn=www.googleadservices.com&frm=0&tiba=Kaufe%20Netflix%20Guthaben%20direkt%20in%20der%20TWINT%20App%20%C2%BB%20TWINT&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnaxrRQiOXDkuDPypDvKrx_28Q0spLOcJvV9FpcEPQeJgRmNFlJQAQ_CJMG
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9818618;type=twint000;cat=twint0;ord=8444076415182;npa=0;auiddc=1403402495.1727409735;ps=1;pcor=1986224265;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fnetflix%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnaxrRQiOXDkuDPypDvKrx_28Q0spLOcJvV9FpcEPQeJgRmNFlJQAQ_CJMG
Source: global traffic	HTTP traffic detected: GET /iframe_api HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/946203707/?random=1727409754803&cv=11&fst=1727409600000&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fnetflix%2F&hn=www.googleadservices.com&frm=0&tiba=Kaufe%20Netflix%20Guthaben%20direkt%20in%20der%20TWINT%20App%20%C2%BB%20TWINT&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDpaXnfTxaXFEa455endocBtx5JKmZi27z5gQy0CTt7gOepkj5ItrRu&random=672796695&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __Secure-BUCKET=CMwD; NID=517=uHE3MPhWkkCAHJpDH1pishVOR2DYGb4VCGR8FWemchSsyuvuwmsiE1fPmcYb8cy-vat5744oZWk9lzdQx-eGkMtCG5oHkHJxpbmzc-IPDj-LYdAi_7nLYb4BOjEbMLc04Iw9jJ28d0aZ82FWxcJUVm6xZxGsIZdSvdTjN3etGqpmcJVcLA
Source: global traffic	HTTP traffic detected: GET /s/player/26636eff/player_ias.vflset/en_US/embed.js HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/946203707/?random=1727409754803&cv=11&fst=1727409754803&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fnetflix%2F&hn=www.googleadservices.com&frm=0&tiba=Kaufe%20Netflix%20Guthaben%20direkt%20in%20der%20TWINT%20App%20%C2%BB%20TWINT&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnaxrRQiOXDkuDPypDvKrx_28Q0spLOcJvV9FpcEPQeJgRmNFlJQAQ_CJMG
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/946203707/?random=1727409752296&cv=11&fst=1727409752296&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465z876304729za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2F&ref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2F%3F__cf_chl_tk%3D5A09ioEQ0UuE6kMF8J70tFRZFy1rLN1KfmGgecubOiU-1727409728-0.0.1.1-4692&hn=www.googleadservices.com&frm=0&tiba=Versicherung%20mit%20TWINT%20abschliessen%20%7C%20TWINT&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnaxrRQiOXDkuDPypDvKrx_28Q0spLOcJvV9FpcEPQeJgRmNFlJQAQ_CJMG
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=979879722096658&ev=PageView&dl=https%3A%2F%2Fwww.twint.ch&rl=&if=false&ts=1727409758907&sw=1280&sh=1024&v=2.9.168&r=stable&ec=0&o=4125&fbp=fb.1.1727409739018.104976150382192680&cs_est=true&pm=1&hrl=33f8d2&ler=empty&cdl=API_unavailable&it=1727409757585&coo=false&cs_cc=1&cas=1184151431702574%2C7836316349762126%2C7350041391718351&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/26636eff/www-embed-player.vflset/www-embed-player.js HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nfIu8 HTTP/1.1Host: datechf.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9818618;type=twint002;cat=twint0;ord=4668833148283;npa=0;auiddc=1403402495.1727409735;ps=1;pcor=1409597338;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnaxrRQiOXDkuDPypDvKrx_28Q0spLOcJvV9FpcEPQeJgRmNFlJQAQ_CJMG
Source: global traffic	HTTP traffic detected: GET /tr/?id=979879722096658&ev=PageView&dl=https%3A%2F%2Fwww.twint.ch&rl=https%3A%2F%2Fwww.twint.ch&if=false&ts=1727409760274&sw=1280&sh=1024&v=2.9.168&r=stable&ec=0&o=4125&fbp=fb.1.1727409739018.104976150382192680&cs_est=true&pm=1&hrl=5a650c&ler=empty&cdl=API_unavailable&it=1727409759036&coo=false&cs_cc=1&cas=1184151431702574%2C7836316349762126%2C7350041391718351&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/946203707/?random=1727409752296&cv=11&fst=1727409600000&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465z876304729za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2F&ref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2F%3F__cf_chl_tk%3D5A09ioEQ0UuE6kMF8J70tFRZFy1rLN1KfmGgecubOiU-1727409728-0.0.1.1-4692&hn=www.googleadservices.com&frm=0&tiba=Versicherung%20mit%20TWINT%20abschliessen%20%7C%20TWINT&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDpaXnfiBfL-gMZMcox3N5VPDcanwndPU4HiC7yGD5gbT7lMJwSNvp_&random=3862314837&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __Secure-BUCKET=CMwD; NID=517=uHE3MPhWkkCAHJpDH1pishVOR2DYGb4VCGR8FWemchSsyuvuwmsiE1fPmcYb8cy-vat5744oZWk9lzdQx-eGkMtCG5oHkHJxpbmzc-IPDj-LYdAi_7nLYb4BOjEbMLc04Iw9jJ28d0aZ82FWxcJUVm6xZxGsIZdSvdTjN3etGqpmcJVcLA
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=979879722096658&ev=PageView&dl=https%3A%2F%2Fwww.twint.ch&rl=https%3A%2F%2Fwww.twint.ch&if=false&ts=1727409760274&sw=1280&sh=1024&v=2.9.168&r=stable&ec=0&o=4125&fbp=fb.1.1727409739018.104976150382192680&cs_est=true&pm=1&hrl=5a650c&ler=empty&cdl=API_unavailable&it=1727409759036&coo=false&cs_cc=1&cas=1184151431702574%2C7836316349762126%2C7350041391718351&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/26636eff/player_ias.vflset/en_US/base.js HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/b0557ce3/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=hPSAp1_Qe-w; VISITOR_INFO1_LIVE=EzDlWw_gZng; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgQQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /js/th/KZ9qBfv2Fvj8--thF3jkrqmjFIXwxVfodGy5wvrcirQ.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __Secure-BUCKET=CMwD; NID=517=uHE3MPhWkkCAHJpDH1pishVOR2DYGb4VCGR8FWemchSsyuvuwmsiE1fPmcYb8cy-vat5744oZWk9lzdQx-eGkMtCG5oHkHJxpbmzc-IPDj-LYdAi_7nLYb4BOjEbMLc04Iw9jJ28d0aZ82FWxcJUVm6xZxGsIZdSvdTjN3etGqpmcJVcLA
Source: global traffic	HTTP traffic detected: GET /s/player/26636eff/player_ias.vflset/en_US/remote.js HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nfJU4&sid=3r9bDDVSXbEFGIhqADH1 HTTP/1.1Host: datechf.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nfJU9&sid=3r9bDDVSXbEFGIhqADH1 HTTP/1.1Host: datechf.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /vi/rrdmkY1xtjg/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGEsgZShDMA8=&rs=AOn4CLD0Sj8pWlWnPKIRxnXk58RdyoG3-g HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=4&transport=polling&t=P8nfK9r&sid=3r9bDDVSXbEFGIhqADH1 HTTP/1.1Host: datechf.ccConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://datechf.cc/de/receive/79469380Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
Source: global traffic	HTTP traffic detected: GET /ytc/AIdro_nsnpDHndRIgw_D137nMXybt_A9C6gggxF9A7gF4rjCOvU=s68-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __Secure-BUCKET=CMwD; NID=517=DvegMHshKafqyLE7vjXEVT3vAMSSVvLlzd_HYvTMA8erdASaCGxeburEWtXCvMEhx4Xbp9qHNP9Xa06jNYkqWbmAk8hDPZ_BP-s8cIJozN6Esw_WQxDsAk7O7JfiTiKN9Hzc6MA5GYuiDCvQLCFDNftL7SUsWjRDODT93dX59hfxAWTmh_U-9-fS1Q
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __Secure-BUCKET=CMwD; NID=517=DvegMHshKafqyLE7vjXEVT3vAMSSVvLlzd_HYvTMA8erdASaCGxeburEWtXCvMEhx4Xbp9qHNP9Xa06jNYkqWbmAk8hDPZ_BP-s8cIJozN6Esw_WQxDsAk7O7JfiTiKN9Hzc6MA5GYuiDCvQLCFDNftL7SUsWjRDODT93dX59hfxAWTmh_U-9-fS1Q
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __Secure-BUCKET=CMwD; NID=517=DvegMHshKafqyLE7vjXEVT3vAMSSVvLlzd_HYvTMA8erdASaCGxeburEWtXCvMEhx4Xbp9qHNP9Xa06jNYkqWbmAk8hDPZ_BP-s8cIJozN6Esw_WQxDsAk7O7JfiTiKN9Hzc6MA5GYuiDCvQLCFDNftL7SUsWjRDODT93dX59hfxAWTmh_U-9-fS1Q
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_349.2.dr	String found in binary or memory: <a href="https://www.facebook.com/twintapp" target="_blank" equals www.facebook.com (Facebook)
Source: chromecache_349.2.dr	String found in binary or memory: <a href="https://www.youtube.com/channel/UC6Y2-XBcccmo4l_3qTKWOyg" equals www.youtube.com (Youtube)
Source: chromecache_349.2.dr	String found in binary or memory: src="https://www.facebook.com/tr?id=979879722096658&ev=PageView&noscript=1"></noscript> equals www.facebook.com (Facebook)
Source: chromecache_349.2.dr	String found in binary or memory: <meta property="article:publisher" content="https://www.facebook.com/twintapp"> equals www.facebook.com (Facebook)
Source: chromecache_412.2.dr, chromecache_203.2.dr	String found in binary or memory: (g.rk(c,"redirector.googlevideo.com"),d=c.toString()):c.j.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.rk(c,"www.youtube.com"),d=c.toString()):(c=iwa(d),jE(c)&&(d=c));c=new g.XL(d);c.set("cmo=pf","1");e&&c.set("cmo=td","a1.googlevideo.com");return c}; equals www.youtube.com (Youtube)
Source: chromecache_412.2.dr, chromecache_203.2.dr	String found in binary or memory: 0?"http":"https";this.Ca=iE((b?b.customBaseYoutubeUrl:a.BASE_YT_URL)\|\|"")\|\|iE(this.mf)\|\|this.protocol+"://www.youtube.com/";h=b?b.eventLabel:a.el;d="detailpage";h==="adunit"?d=this.D?"embedded":"detailpage":h==="embedded"\|\|this.N?d=is(d,h,GJa):h&&(d="embedded");this.Ja=d;Qqa();h=null;d=b?b.playerStyle:a.ps;f=g.Vb(HJa,d);!d\|\|f&&!this.N\|\|(h=d);this.playerStyle=h;this.K=g.Vb(HJa,this.playerStyle);this.houseBrandUserStatus=b==null?void 0:b.houseBrandUserStatus;this.qa=this.K&&this.playerStyle!=="play"&& equals www.youtube.com (Youtube)
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_325.2.dr	String found in binary or memory: <a href="https://ch.linkedin.com/company/twint" target="_blank" rel="nofollow noopener"><span class="sr-only">LinkedIn</span><svg height="100" viewBox="0 0 100 100" width="100" xmlns="http://www.w3.org/2000/svg"><path d="m77.2816379 0h-70.10415992c-3.83061325 0-7.17747798 2.75625-7.17747798 6.541875v70.26c0 3.80625 3.34686473 7.198125 7.17747798 7.198125h70.08353502c3.8512382 0 6.7388589-3.414375 6.7388589-7.198125v-70.26c.0223703-3.785625-2.8876207-6.541875-6.718234-6.541875zm-51.2435928 70.018125h-12.0337131v-37.415625h12.0337131zm-5.6006078-43.104375h-.0862497c-3.8512382 0-6.3449806-2.866875-6.3449806-6.455625 0-3.654375 2.5593672-6.45375 6.4968551-6.45375s6.3468555 2.77875 6.4331053 6.45375c-.001875 3.58875-2.4956174 6.455625-6.4987301 6.455625zm49.5804729 43.104375h-12.0337131v-20.458125c0-4.90125-1.7512446-8.25-6.1049813-8.25-3.3262398 0-5.2949837 2.25-6.170606 4.441875-.328124.7875-.4162487 1.86-.4162487 2.955v21.31125h-12.0337131v-37.415625h12.0337131v5.206875c1.7512446-2.49375 4.4868612-6.0825 10.8524667-6.0825 7.8993507 0 13.8749574 5.206875 13.8749574 16.4325z" fill="#fff" transform="translate(8 8)" /></svg></a> equals www.linkedin.com (Linkedin)
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_325.2.dr	String found in binary or memory: <a href="https://twitter.com/twintapp" target="_blank" rel="nofollow noopener"><span class="sr-only">Twitter</span><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" width="1080" height="1080" viewBox="0 0 1080 1080" xml:space="preserve"><desc>Created with Fabric.js 5.2.4</desc><defs></defs><g transform="matrix(1 0 0 1 540 540)" id="51f1a822-b8ac-4d2e-8063-29c4a5df59d5"><rect style="stroke: none; stroke-width: 1; stroke-dasharray: none; stroke-linecap: butt; stroke-dashoffset: 0; stroke-linejoin: miter; stroke-miterlimit: 4; fill: rgb(255,255,255); fill-rule: nonzero; opacity: 1; visibility: hidden;" vector-effect="non-scaling-stroke" x="-540" y="-540" rx="0" ry="0" width="1080" height="1080" /></g><g transform="matrix(1 0 0 1 540 540)" id="61540981-1d4a-4a7b-898e-3fa1ed726447"></g><g transform="matrix(1 0 0 1 540 540)" id="path1009"><path style="stroke: rgb(0,0,0); stroke-width: 0; stroke-dasharray: none; stroke-linecap: butt; stroke-dashoffset: 0; stroke-linejoin: miter; stroke-miterlimit: 4; fill: rgb(200,200,200); fill-rule: nonzero; opacity: 1;" vector-effect="non-scaling-stroke" transform=" translate(-781.89, -635.65)" d="M 283.94 167.31 L 670.3299999999999 683.95 L 281.5 1104 L 369.01 1104 L 709.4300000000001 736.24 L 984.48 1104 L 1282.28 1104 L 874.15 558.3 L 1236.07 167.30999999999995 L 1148.56 167.30999999999995 L 835.05 506.00999999999993 L 581.74 167.30999999999995 L 283.94 167.30999999999995 z M 412.63 231.77 L 549.44 231.77 L 1153.5700000000002 1039.53 L 1016.7600000000002 1039.53 L 412.63 231.77 z" stroke-linecap="round" /></g></svg></a> equals www.twitter.com (Twitter)
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_325.2.dr	String found in binary or memory: <a href="https://www.facebook.com/twintapp" target="_blank" rel="nofollow noopener"><span class="sr-only">Facebook</span><svg height="100" viewBox="0 0 100 100" width="100" xmlns="http://www.w3.org/2000/svg"><path d="m86.1928251 43.2597516c0-23.8894253-19.2540178-43.2597516-43-43.2597516-23.7459821 0-42.99999999 19.3703263-42.99999999 43.2597516 0 21.5912511 15.72187499 39.4880421 36.28124999 42.7363859v-30.2277514h-10.9208482v-12.5086345h10.9208482v-9.5325952c0-10.8400441 6.4212054-16.8326784 16.2420982-16.8326784 4.7050447 0 9.627009.8458826 9.627009.8458826v10.6469202h-5.4249108c-5.3385267 0-7.008616 3.3333183-7.008616 6.7593362v8.1150659h11.9248214l-1.9042857 12.5086344h-10.0205357v30.2296827c20.5612946-3.2464126 36.2831696-21.1432036 36.2831696-42.7402484z" fill="#fff" fill-rule="evenodd" transform="translate(6.807 7)" /></svg></a> equals www.facebook.com (Facebook)
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_325.2.dr	String found in binary or memory: <a href="https://www.youtube.com/channel/UC6Y2-XBcccmo4l_3qTKWOyg" target="_blank" rel="nofollow noopener"><span class="sr-only">YouTube</span><svg height="100" viewBox="0 0 100 100" width="100" xmlns="http://www.w3.org/2000/svg"><path d="m96.4534847 16.1184935c0-8.55445464-6.2716895-15.43603812-14.0212997-15.43603812-10.4970272-.49235639-21.202479-.68245538-32.1428824-.68245538h-3.4105864c-10.9138766 0-21.6382761.19009899-32.1353032.68435637-7.7306626 0-14.00235209 6.91960328-14.00235209 15.47405783-.47369256 6.7656231-.6745382 13.5331472-.66316958 20.3006713-.0189477 6.7675241.19579292 13.5413848.64422188 20.3215822 0 8.5544546 6.27168949 15.4930677 14.00235209 15.4930677 11.0275628.5132673 22.3393411.7413861 33.8405964.7223762 11.5202031.0380198 22.8004019-.2027722 33.8405965-.7223762 7.7496103 0 14.0212997-6.9386131 14.0212997-15.4930677.4547449-6.786534.6631696-13.5540581.6442219-20.3405921.0429482-6.7675241-.1629502-13.5413848-.6176951-20.3215821zm-57.1538494 38.989303v-37.3544517l27.4741684 18.6677209z" fill="#fff" transform="translate(1.923 14)" /></svg></a> equals www.youtube.com (Youtube)
Source: chromecache_413.2.dr	String found in binary or memory: <link itemprop="embedUrl" href="//www.youtube.com/watch?v=rrdmkY1xtjg" /> equals www.youtube.com (Youtube)
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_325.2.dr	String found in binary or memory: <meta property="article:publisher" content="https://www.facebook.com/twintapp" /> equals www.facebook.com (Facebook)
Source: chromecache_203.2.dr	String found in binary or memory: Io.prototype.Ia=function(){return this.C};var kna=(new Date).getTime();var xla="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),yla=/\bocr\b/;var Ala=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;var Qab=0,Rab=0,Sab=0;var Ro;g.Ko=null;g.Mo=!1;g.So=1;Ro=Symbol("SIGNAL");g.To={version:0,s_:0,Pm:!1,eg:void 0,Ry:void 0,Bn:void 0,NL:0,ij:void 0,Ou:void 0,aF:!1,pP:!1,P1:function(){return!1}, equals www.youtube.com (Youtube)
Source: chromecache_320.2.dr	String found in binary or memory: L.getElementsByTagName("iframe"),la=S.length,na=0;na<la;na++)if(!u&&c(S[na],H.Ge)){hJ("https://www.youtube.com/iframe_api");u=!0;break}})}}else F(v.vtp_gtmOnSuccess)}var q=["www.youtube.com","www.youtube-nocookie.com"],r={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},t,u=!1;Z.__ytl=n;Z.__ytl.o="ytl";Z.__ytl.isVendorTemplate=!0;Z.__ytl.priorityOverride=0;Z.__ytl.isInfrastructure=!1; equals www.youtube.com (Youtube)
Source: chromecache_203.2.dr	String found in binary or memory: LIa=function(a,b){if(!a.j["0"]){var c=new VF("0","fakesb",{video:new RF(0,0,0,void 0,void 0,"auto")});a.j["0"]=b?new oN(new g.XL("http://www.youtube.com/videoplayback"),c,"fake"):new FN(new g.XL("http://www.youtube.com/videoplayback"),c,new $M(0,0),new $M(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_239.2.dr, chromecache_228.2.dr, chromecache_251.2.dr, chromecache_320.2.dr	String found in binary or memory: Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Yj:function(){e=zb()},nd:function(){d()}}};var gc=ja(["data-gtm-yt-inspected-"]),FC=["www.youtube.com","www.youtube-nocookie.com"],GC,HC=!1; equals www.youtube.com (Youtube)
Source: chromecache_203.2.dr	String found in binary or memory: a))):this.api.U().L("enable_adb_handling_in_sabr")&&c==="BROWSER_OR_EXTENSION_ERROR"&&!d.K?(d=d.hostLanguage,a="//support.google.com/youtube/answer/3037019#zippy=%2Cupdate-your-browser-and-check-your-extensions",d&&(a=g.Ui(a,{hl:d})),this.Cd(rY(this,"BROWSER_OR_EXTENSION_ERROR",a))):this.Cd(g.pY(a.errorMessage)):this.Cd(rY(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c=g.Ui(c, equals www.youtube.com (Youtube)
Source: chromecache_412.2.dr, chromecache_203.2.dr	String found in binary or memory: a.details.rc!=="429"?a.errorCode==="ump.spsrejectfailure"&&(e="HTML5_SPS_UMP_STATUS_REJECTED"):(e="TOO_MANY_REQUESTS",f="6");this.ea.Qf(a.errorCode,a.severity,e,DF(a.details),f)}else this.ea.publish("nonfatalerror",a),d=/^pp/.test(this.videoData.clientPlaybackNonce),this.Fd(a.errorCode,a.details),d&&a.errorCode==="manifest.net.connect"&&(a="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.It)(),iT(a,"manifest",function(h){b.K=!0;b.ma("pathprobe",h)},function(h){b.Fd(h.errorCode, equals www.youtube.com (Youtube)
Source: chromecache_203.2.dr	String found in binary or memory: a.ismb);this.eq?(r=a.vss_host\|\|"s.youtube.com",r==="s.youtube.com"&&(r=sP(this.Ca)\|\|"www.youtube.com")):r="video.google.com";this.Rn=r;tP(this,a,!0);this.La=new OO;g.P(this,this.La);q=b?b.innertubeApiKey:ks("",a.innertube_api_key);p=b?b.innertubeApiVersion:ks("",a.innertube_api_version);r=b?b.innertubeContextClientVersion:ks("",a.innertube_context_client_version);q=g.$q("INNERTUBE_API_KEY")\|\|q;p=g.$q("INNERTUBE_API_VERSION")\|\|p;l=g.$q("INNERTUBE_CONTEXT_CLIENT_CONFIG_INFO");m=HO(this);n=typeof this.j.c=== equals www.youtube.com (Youtube)
Source: chromecache_412.2.dr, chromecache_203.2.dr	String found in binary or memory: b=this.api.U();a=this.api.getVideoData();var c="";b.C\|\|(b=g.xP(b),b.indexOf("www.")===0&&(b=b.substring(4)),c=g.DR(a)?"Watch on YouTube Music":b==="youtube.com"?"Watch on YouTube":g.AE("Watch on $WEBSITE",{WEBSITE:b}));this.updateValue("title",c)}; equals www.youtube.com (Youtube)
Source: chromecache_218.2.dr, chromecache_249.2.dr, chromecache_220.2.dr, chromecache_237.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=lA(a,c,e);N(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return N(122),!0;if(d&&f){for(var m=Kb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},oA=function(){var a=[],b=function(c){return ob(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_385.2.dr, chromecache_400.2.dr	String found in binary or memory: function X(a,b){this.v={};this.playerInfo={};this.videoTitle="";this.j=this.g=null;this.h=0;this.m=!1;this.l=[];this.i=null;this.A={};this.options=null;if(!a)throw Error("YouTube player element ID required.");this.id=ra(this);b=Object.assign({title:"video player",videoId:"",width:640,height:360},b\|\|{});var c=document;if(a=typeof a==="string"?c.getElementById(a):a){W.yt_embedsEnableRsaforFromIframeApi&&vb();c=a.tagName.toLowerCase()==="iframe";b.host\|\|(b.host=c?ob(a.src):"https://www.youtube.com");this.options= equals www.youtube.com (Youtube)
Source: chromecache_385.2.dr, chromecache_400.2.dr	String found in binary or memory: function vb(){var a=new tb,b=["https://www.youtube.com"];b=b===void 0?sb:b;pa(function(c){switch(c.g){case 1:return C(c,ub(),2);case 2:if(!c.m){c.g=3;break}return C(c,Promise.all(b.map(function(d){var g;return pa(function(k){if(k.g==1)return k.l=2,C(k,navigator.permissions.query({name:"top-level-storage-access",requestedOrigin:d}),4);k.g!=2?(g=k.m,g.state==="prompt"&&a.g.push(d),k.g=0,k.l=0):(k.l=0,k.i=null,k.g=0)})})),4); equals www.youtube.com (Youtube)
Source: chromecache_412.2.dr, chromecache_203.2.dr	String found in binary or memory: g.KP=function(a){var b=g.xP(a);RJa.includes(b)&&(b="www.youtube.com");return a.protocol+"://"+b}; equals www.youtube.com (Youtube)
Source: chromecache_203.2.dr	String found in binary or memory: g.k.getVideoUrl=function(a,b,c,d,e,f,h){b={list:b};c&&(e?b.time_continue=c:b.t=c);c=h?"music.youtube.com":g.xP(this);e=c==="www.youtube.com";!f&&d&&e?f="https://youtu.be/"+a:g.oP(this)?(f="https://"+c+"/fire",b.v=a):(f&&e?(f=this.protocol+"://"+c+"/shorts/"+a,d&&(b.feature="share")):(f=this.protocol+"://"+c+"/watch",b.v=a),au&&(a=ana())&&(b.ebc=a));return g.Ui(f,b)}; equals www.youtube.com (Youtube)
Source: chromecache_412.2.dr, chromecache_203.2.dr	String found in binary or memory: g.xP=function(a){a=sP(a.Ca);return a==="www.youtube-nocookie.com"?"www.youtube.com":a}; equals www.youtube.com (Youtube)
Source: chromecache_228.2.dr, chromecache_251.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={eh:e,ah:f,bh:g,Ph:k,Qh:m,Ge:n,Bb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(QC(w,"iframe_api")\|\|QC(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!HC&&OC(x[A],p.Ge))return wc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_218.2.dr, chromecache_249.2.dr, chromecache_267.2.dr, chromecache_232.2.dr, chromecache_255.2.dr, chromecache_220.2.dr, chromecache_229.2.dr, chromecache_237.2.dr	String found in binary or memory: return b}DC.H="internal.enableAutoEventOnTimer";var gc=ja(["data-gtm-yt-inspected-"]),FC=["www.youtube.com","www.youtube-nocookie.com"],GC,HC=!1; equals www.youtube.com (Youtube)
Source: chromecache_405.2.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_405.2.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_405.2.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_412.2.dr, chromecache_203.2.dr	String found in binary or memory: this.Y.Aa&&(a.authuser=this.Y.Aa);this.Y.pageId&&(a.pageid=this.Y.pageId);isNaN(this.cryptoPeriodIndex)\|\|(a.cpi=this.cryptoPeriodIndex.toString());var e=(e=/_(TV\|STB\|GAME\|OTT\|ATV\|BDP)_/.exec(g.Bb()))?e[1]:"";e==="ATV"&&(a.cdt=e);this.G=a;this.G.session_id=d;this.oa=!0;this.B.flavor==="widevine"&&(this.G.hdr="1");this.B.flavor==="playready"&&(b=Number(JO(b.experiments,"playready_first_play_expiration")),!isNaN(b)&&b>=0&&(this.G.mfpe=""+b),this.oa=!1);b="";g.lO(this.B)?kO(this.B)?(d=c.B)&&(b="https://www.youtube.com/api/drm/fps?ek="+ equals www.youtube.com (Youtube)
Source: chromecache_412.2.dr, chromecache_203.2.dr	String found in binary or memory: var D2={};var Mdb={Fs:[{JB:/Unable to load player module/,weight:20},{JB:/Failed to fetch/,weight:500},{JB:/XHR API fetch failed/,weight:10},{JB:/JSON parsing failed after XHR fetch/,weight:10},{JB:/Retrying OnePlatform request/,weight:10},{JB:/CSN Missing or undefined during playback association/,weight:100}],Mr:[{callback:K7a,weight:500}]};var X7a=/[&\?]action_proxy=1/,W7a=/[&\?]token=([\w-])/,Y7a=/[&\?]video_id=([\w-])/,Z7a=/[&\?]index=([\d-])/,$7a=/[&\?]m_pos_ms=([\d-])/,b8a=/[&\?]vvt=([\w-]*)/,O7a="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),a8a="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),R7a={android:"ANDROID", equals www.youtube.com (Youtube)
Source: chromecache_218.2.dr, chromecache_249.2.dr, chromecache_239.2.dr, chromecache_220.2.dr, chromecache_320.2.dr, chromecache_237.2.dr	String found in binary or memory: var SB=function(a,b,c,d,e){var f=Jz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Jz("fsl","nv.ids",[]):Jz("fsl","ids",[]);if(!g.length)return!0;var k=Oz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);N(121);if(m==="https://www.facebook.com/tr/")return N(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!wy(k,yy(b, equals www.facebook.com (Facebook)
Source: chromecache_343.2.dr	String found in binary or memory: var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/b0557ce3\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"}; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: datechf.cc
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: translate.google.com
Source: global traffic	DNS traffic detected: DNS query: www.smartsuppchat.com
Source: global traffic	DNS traffic detected: DNS query: bootstrap.smartsuppchat.com
Source: global traffic	DNS traffic detected: DNS query: www.twint.ch
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdn.cookielaw.org
Source: global traffic	DNS traffic detected: DNS query: geolocation.onetrust.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: 9818618.fls.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: adservice.google.com
Source: global traffic	DNS traffic detected: DNS query: www.youtube-nocookie.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: yt3.ggpht.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com

Source: unknown

HTTP traffic detected: POST /socket.io/?EIO=4&transport=polling&t=P8nf4WI&sid=xSgUJ84KMgPLXcJ2ADHj HTTP/1.1Host: datechf.ccConnection: keep-aliveContent-Length: 2sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*Content-type: text/plain;charset=UTF-8sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://datechf.ccSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://datechf.cc/de/receive/79469380Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 27 Sep 2024 04:01:45 GMTContent-Type: application/json; charset=utf-8Content-Length: 57Connection: closex-version: 8b3ca176698fc26311ade373172146d69a1a7c02Vary: Accept-EncodingAccess-Control-Allow-Origin: *Cache-Control: private, max-age=0, must-revalidateX-Hit: redis
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 27 Sep 2024 04:02:00 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: Y99CckoNAXL9mcFCpmxoQngv0rtdpOyPQPg=$bsizApDkpiJDll5PServer: cloudflareCF-RAY: 8c9898825aa843c9-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 27 Sep 2024 04:02:10 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: wLfF0offVEKx3Fq6+P/dDzBTyTaI6nYnisM=$vHh89sbsoo1Qgj8oServer: cloudflareCF-RAY: 8c9898bf5c39c404-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 27 Sep 2024 04:02:10 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: X8oUXB0b6H7D+TT5145BcxIaI3mWrre9jnU=$beds3qn73PKM7Djicache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8c9898bf7cacc454-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 27 Sep 2024 04:02:14 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: TGKSqQyj7h4B+ceuE4AjU9pCyXkpeYmM3ts=$RYg7JzL5M+rU5YL8cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8c9898d82b03435d-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 27 Sep 2024 04:02:25 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: gIMCcoHADNfdAm4Udw1ITf07EPcCjwSNICU=$Rrl8ts7ssKJ40bDXcache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8c98991dcf147280-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 27 Sep 2024 04:02:35 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: vhldPlgk37Nfvpkdii+w309ER42GU1XUplg=$ia8chxqtU8ljiS4Ucache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8c98995a0a36440c-EWR

Source: chromecache_412.2.dr, chromecache_318.2.dr, chromecache_203.2.dr, chromecache_253.2.dr	String found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: http://twint.ch/download-migros-bank
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: http://twint.ch/download-tkb
Source: chromecache_391.2.dr, chromecache_183.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_203.2.dr	String found in binary or memory: http://www.youtube.com/videoplayback
Source: chromecache_412.2.dr, chromecache_203.2.dr	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: chromecache_412.2.dr, chromecache_203.2.dr	String found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: chromecache_412.2.dr, chromecache_203.2.dr	String found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: chromecache_412.2.dr, chromecache_203.2.dr	String found in binary or memory: http://youtube.com/yt/2012/10/10
Source: chromecache_229.2.dr	String found in binary or memory: https://ad.doubleclick.net
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_325.2.dr	String found in binary or memory: https://ad.doubleclick.net/ddm/activity/src=14196387;type=sm-co0;cat=twint0;dc_lat=;dc_rdid=;tag_for
Source: chromecache_239.2.dr, chromecache_267.2.dr, chromecache_232.2.dr, chromecache_255.2.dr, chromecache_320.2.dr, chromecache_229.2.dr	String found in binary or memory: https://ade.googlesyndication.com
Source: chromecache_412.2.dr, chromecache_203.2.dr	String found in binary or memory: https://admin.youtube.com
Source: chromecache_229.2.dr, chromecache_237.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_325.2.dr	String found in binary or memory: https://aids.ch/
Source: chromecache_412.2.dr, chromecache_203.2.dr	String found in binary or memory: https://angular.dev/license
Source: chromecache_349.2.dr	String found in binary or memory: https://api.imgbb.com/1/upload
Source: chromecache_349.2.dr	String found in binary or memory: https://assets-v2.lottiefiles.com/a/b90ff028-1177-11ee-81af-97de0bdd79c1/3mdk9wAzDF.gif);position:
Source: chromecache_349.2.dr	String found in binary or memory: https://banks.twint.ch/
Source: chromecache_315.2.dr, chromecache_242.2.dr	String found in binary or memory: https://caniuse.com/url
Source: chromecache_218.2.dr, chromecache_249.2.dr, chromecache_239.2.dr, chromecache_228.2.dr, chromecache_267.2.dr, chromecache_251.2.dr, chromecache_232.2.dr, chromecache_255.2.dr, chromecache_220.2.dr, chromecache_320.2.dr, chromecache_229.2.dr, chromecache_237.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_333.2.dr, chromecache_275.2.dr	String found in binary or memory: https://cdn.cookielaw.org
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_325.2.dr	String found in binary or memory: https://cdn.cookielaw.org/consent/baf1656f-0c9f-4cd8-83fe-a5ce8d8c9eed/OtAutoBlock.js
Source: chromecache_349.2.dr	String found in binary or memory: https://cdn.cookielaw.org/logos/c6763161-a85e-4d6f-9902-c9d4575334af/209d2df7-c2dd-4023-807a-b382cfc
Source: chromecache_349.2.dr	String found in binary or memory: https://cdn.cookielaw.org/logos/c6763161-a85e-4d6f-9902-c9d4575334af/3c138d7e-9ef4-4168-8713-9b0f422
Source: chromecache_349.2.dr	String found in binary or memory: https://cdn.cookielaw.org/logos/static/ot_close.svg
Source: chromecache_349.2.dr	String found in binary or memory: https://cdn.cookielaw.org/logos/static/ot_external_link.svg);
Source: chromecache_349.2.dr	String found in binary or memory: https://cdn.cookielaw.org/logos/static/powered_by_logo.svg
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_325.2.dr	String found in binary or memory: https://cdn.cookielaw.org/scripttemplates/otSDKStub.js
Source: chromecache_333.2.dr, chromecache_275.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/googleData.json
Source: chromecache_333.2.dr, chromecache_275.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/iab2Data.json
Source: chromecache_333.2.dr, chromecache_275.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/iab2V2Data.json
Source: chromecache_333.2.dr, chromecache_275.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/iabData.json
Source: chromecache_349.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/axios/1.6.8/axios.min.js
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://ch.linkedin.com/company/twint
Source: chromecache_325.2.dr	String found in binary or memory: https://chde.camaquito.org/home/
Source: chromecache_349.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.7.1.slim.min.js
Source: chromecache_407.2.dr, chromecache_405.2.dr	String found in binary or memory: https://connect.facebook.net/
Source: chromecache_407.2.dr, chromecache_405.2.dr	String found in binary or memory: https://connect.facebook.net/log/fbevents_telemetry/
Source: chromecache_325.2.dr	String found in binary or memory: https://connexio-develop.ch/
Source: chromecache_265.2.dr, chromecache_349.2.dr, chromecache_406.2.dr	String found in binary or memory: https://cookiepedia.co.uk/giving-consent-to-cookies
Source: chromecache_333.2.dr, chromecache_275.2.dr	String found in binary or memory: https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck
Source: chromecache_325.2.dr	String found in binary or memory: https://de.alliancef.ch/
Source: chromecache_325.2.dr	String found in binary or memory: https://de.morija.org/
Source: chromecache_315.2.dr, chromecache_242.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/URL
Source: chromecache_315.2.dr, chromecache_242.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/WebSocket/send
Source: chromecache_315.2.dr, chromecache_242.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/WebSockets_API/Writing_WebSocket_servers#decoding_p
Source: chromecache_385.2.dr, chromecache_400.2.dr	String found in binary or memory: https://developers.google.com/youtube/iframe_api_reference#Events
Source: chromecache_412.2.dr, chromecache_203.2.dr	String found in binary or memory: https://docs.google.com/get_video_info
Source: chromecache_325.2.dr	String found in binary or memory: https://ethz-foundation.ch/
Source: chromecache_325.2.dr	String found in binary or memory: https://fastenaktion.ch/
Source: chromecache_391.2.dr, chromecache_183.2.dr	String found in binary or memory: https://fonts.googleapis.com
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://fonts.googleapis.com/
Source: chromecache_391.2.dr, chromecache_183.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg
Source: chromecache_325.2.dr	String found in binary or memory: https://freethebees.ch/
Source: chromecache_333.2.dr, chromecache_275.2.dr	String found in binary or memory: https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
Source: chromecache_349.2.dr, chromecache_417.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_315.2.dr, chromecache_242.2.dr	String found in binary or memory: https://github.com/component/has-cors
Source: chromecache_315.2.dr, chromecache_242.2.dr	String found in binary or memory: https://github.com/galkn/parseuri
Source: chromecache_315.2.dr, chromecache_242.2.dr	String found in binary or memory: https://github.com/galkn/querystring
Source: chromecache_239.2.dr, chromecache_320.2.dr	String found in binary or memory: https://github.com/krux/postscribe/blob/master/LICENSE.
Source: chromecache_412.2.dr, chromecache_318.2.dr, chromecache_203.2.dr, chromecache_253.2.dr	String found in binary or memory: https://github.com/madler/zlib/blob/master/zlib.h
Source: chromecache_315.2.dr, chromecache_242.2.dr	String found in binary or memory: https://github.com/socketio/base64-arraybuffer
Source: chromecache_315.2.dr, chromecache_242.2.dr	String found in binary or memory: https://github.com/socketio/engine.io-client/commit/de2c561e4564efeb78f1bdb1ba39ef81b2822cb3
Source: chromecache_315.2.dr, chromecache_242.2.dr	String found in binary or memory: https://github.com/socketio/engine.io-client/commit/df32277c3f6d622eec5ed09f493cae3f3391d242
Source: chromecache_315.2.dr, chromecache_242.2.dr	String found in binary or memory: https://github.com/socketio/socket.io-client/commit/4ee1d5d94b3906a9c052b459f1a818b15f38f91c
Source: chromecache_349.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_315.2.dr, chromecache_242.2.dr	String found in binary or memory: https://github.com/unshiftio/yeast
Source: chromecache_320.2.dr, chromecache_237.2.dr	String found in binary or memory: https://google.com
Source: chromecache_320.2.dr, chromecache_237.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_325.2.dr	String found in binary or memory: https://grainofwheat.org/
Source: chromecache_349.2.dr	String found in binary or memory: https://i.ibb.co/dLFW7Pb/animation-gif.gif
Source: chromecache_412.2.dr, chromecache_203.2.dr	String found in binary or memory: https://i.ytimg.com/vi/
Source: chromecache_412.2.dr, chromecache_203.2.dr	String found in binary or memory: https://jnn-pa.googleapis.com
Source: chromecache_325.2.dr	String found in binary or memory: https://kirche-in-not.ch/
Source: chromecache_325.2.dr	String found in binary or memory: https://makeawish.ch/de/
Source: chromecache_325.2.dr	String found in binary or memory: https://medecinsdumonde.ch/de/
Source: chromecache_412.2.dr, chromecache_203.2.dr	String found in binary or memory: https://music.youtube.com
Source: chromecache_315.2.dr, chromecache_242.2.dr	String found in binary or memory: https://nodejs.org/api/events.html#events_event_newlistener
Source: chromecache_229.2.dr, chromecache_237.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_218.2.dr, chromecache_249.2.dr, chromecache_239.2.dr, chromecache_228.2.dr, chromecache_267.2.dr, chromecache_251.2.dr, chromecache_232.2.dr, chromecache_255.2.dr, chromecache_220.2.dr, chromecache_320.2.dr, chromecache_229.2.dr, chromecache_237.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_325.2.dr	String found in binary or memory: https://paneco.ch/
Source: chromecache_253.2.dr, chromecache_183.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_325.2.dr	String found in binary or memory: https://portal.twint.ch/partner/gui/?login
Source: chromecache_203.2.dr	String found in binary or memory: https://redux.js.org/api/store#subscribelistener
Source: chromecache_412.2.dr, chromecache_203.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers
Source: chromecache_412.2.dr, chromecache_203.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#middleware
Source: chromecache_412.2.dr, chromecache_203.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-6-async-logic#using-the-redux-thunk-middleware
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_325.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_349.2.dr	String found in binary or memory: https://schema.org/Question
Source: chromecache_413.2.dr	String found in binary or memory: https://schema.org/VideoObject
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://shop.twint.ch/
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://shop.twint.ch/de/
Source: chromecache_315.2.dr, chromecache_242.2.dr	String found in binary or memory: https://socket.io/docs/v3/migrating-from-2-x-to-3-0/)
Source: chromecache_315.2.dr, chromecache_242.2.dr	String found in binary or memory: https://stackoverflow.com/questions/8511281/check-if-a-value-is-an-object-in-javascript
Source: chromecache_228.2.dr, chromecache_251.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_412.2.dr, chromecache_203.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=missing_quality
Source: chromecache_412.2.dr, chromecache_203.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=noaudio
Source: chromecache_412.2.dr, chromecache_203.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=report_playback
Source: chromecache_203.2.dr	String found in binary or memory: https://support.google.com/youtube/answer/3037019#check_ad_blockers&zippy=%2Ccheck-your-extensions-i
Source: chromecache_412.2.dr, chromecache_203.2.dr	String found in binary or memory: https://support.google.com/youtube/answer/6276924
Source: chromecache_218.2.dr, chromecache_249.2.dr, chromecache_239.2.dr, chromecache_228.2.dr, chromecache_267.2.dr, chromecache_251.2.dr, chromecache_232.2.dr, chromecache_255.2.dr, chromecache_220.2.dr, chromecache_320.2.dr, chromecache_229.2.dr, chromecache_237.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_391.2.dr, chromecache_183.2.dr	String found in binary or memory: https://translate.google.com
Source: chromecache_391.2.dr, chromecache_183.2.dr	String found in binary or memory: https://translate.googleapis.com/element/log?format=json&hasfast=true
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://twitter.com/twintapp
Source: chromecache_412.2.dr, chromecache_203.2.dr	String found in binary or memory: https://viacon.corp.google.com
Source: chromecache_325.2.dr	String found in binary or memory: https://www.aha.ch/allergiezentrum-schweiz/
Source: chromecache_325.2.dr	String found in binary or memory: https://www.alpeninitiative.ch
Source: chromecache_325.2.dr	String found in binary or memory: https://www.amnesty.ch/de
Source: chromecache_325.2.dr	String found in binary or memory: https://www.berghilfe.ch/
Source: chromecache_325.2.dr	String found in binary or memory: https://www.biovision.ch/home/
Source: chromecache_325.2.dr	String found in binary or memory: https://www.buyfoodwithplastic.org/
Source: chromecache_325.2.dr	String found in binary or memory: https://www.caritas.ch/de/startseite.html
Source: chromecache_325.2.dr	String found in binary or memory: https://www.dearfoundation.ch/
Source: chromecache_325.2.dr	String found in binary or memory: https://www.gfbv.ch/de/
Source: chromecache_325.2.dr	String found in binary or memory: https://www.glueckskette.ch/
Source: chromecache_229.2.dr, chromecache_237.2.dr, chromecache_400.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_391.2.dr, chromecache_183.2.dr	String found in binary or memory: https://www.google.com/images/cleardot.gif
Source: chromecache_222.2.dr, chromecache_206.2.dr, chromecache_281.2.dr, chromecache_300.2.dr, chromecache_296.2.dr, chromecache_187.2.dr, chromecache_192.2.dr, chromecache_376.2.dr, chromecache_263.2.dr, chromecache_327.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/946203707/?random
Source: chromecache_391.2.dr, chromecache_183.2.dr	String found in binary or memory: https://www.google.com/support/translate
Source: chromecache_320.2.dr, chromecache_229.2.dr, chromecache_237.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_412.2.dr, chromecache_203.2.dr	String found in binary or memory: https://www.googleapis.com/certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2i
Source: chromecache_229.2.dr, chromecache_237.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_349.2.dr	String found in binary or memory: https://www.googletagmanager.com/
Source: chromecache_218.2.dr, chromecache_249.2.dr, chromecache_239.2.dr, chromecache_220.2.dr, chromecache_320.2.dr, chromecache_237.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_239.2.dr, chromecache_267.2.dr, chromecache_232.2.dr, chromecache_255.2.dr, chromecache_320.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.googletagmanager.com/dclk/ns/v1.js
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=AW-946203707
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=DC-14196387
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-MCR5GXQ
Source: chromecache_218.2.dr, chromecache_249.2.dr, chromecache_239.2.dr, chromecache_220.2.dr, chromecache_320.2.dr, chromecache_237.2.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_325.2.dr	String found in binary or memory: https://www.greenpeace.ch/de/
Source: chromecache_349.2.dr	String found in binary or memory: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.qhDXWpKopYk.L.W.O/am=wA/d=0/rs=AN8
Source: chromecache_293.2.dr, chromecache_246.2.dr	String found in binary or memory: https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Source: chromecache_391.2.dr, chromecache_183.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png
Source: chromecache_391.2.dr, chromecache_183.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_68x28dp.png
Source: chromecache_391.2.dr, chromecache_183.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/1x/translate_24dp.png
Source: chromecache_412.2.dr, chromecache_203.2.dr	String found in binary or memory: https://www.gstatic.com/ytlr/img/sign_in_avatar_default.png?rn=
Source: chromecache_325.2.dr	String found in binary or memory: https://www.heilsarmee.ch/
Source: chromecache_325.2.dr	String found in binary or memory: https://www.heks.ch/
Source: chromecache_325.2.dr	String found in binary or memory: https://www.helvetas.org/de/schweiz
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.instagram.com/twint_ag/
Source: chromecache_325.2.dr	String found in binary or memory: https://www.kinderkrebs-schweiz.ch/
Source: chromecache_325.2.dr	String found in binary or memory: https://www.kinderkrebshilfe.ch/de
Source: chromecache_325.2.dr	String found in binary or memory: https://www.kinderschutz.ch/
Source: chromecache_325.2.dr	String found in binary or memory: https://www.kispi-spenden.ch/
Source: chromecache_325.2.dr	String found in binary or memory: https://www.krebsforschung.ch/
Source: chromecache_325.2.dr	String found in binary or memory: https://www.krebsliga.ch/
Source: chromecache_325.2.dr	String found in binary or memory: https://www.laureus.ch/
Source: chromecache_325.2.dr	String found in binary or memory: https://www.lunge-zuerich.ch/
Source: chromecache_325.2.dr	String found in binary or memory: https://www.medair.org/de/
Source: chromecache_325.2.dr	String found in binary or memory: https://www.menschenfuermenschen.ch/
Source: chromecache_228.2.dr, chromecache_251.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_325.2.dr	String found in binary or memory: https://www.missio.ch/
Source: chromecache_325.2.dr	String found in binary or memory: https://www.omct.org/
Source: chromecache_349.2.dr	String found in binary or memory: https://www.onetrust.com/products/cookie-consent/
Source: chromecache_325.2.dr	String found in binary or memory: https://www.partage.ch/fr/
Source: chromecache_325.2.dr	String found in binary or memory: https://www.plusport.ch/de/
Source: chromecache_325.2.dr	String found in binary or memory: https://www.proinfirmis.ch/
Source: chromecache_325.2.dr	String found in binary or memory: https://www.promentesana.ch/
Source: chromecache_325.2.dr	String found in binary or memory: https://www.pronatura.ch/de
Source: chromecache_325.2.dr	String found in binary or memory: https://www.protier.ch/
Source: chromecache_315.2.dr, chromecache_242.2.dr	String found in binary or memory: https://www.rfc-editor.org/rfc/rfc3986#appendix-B
Source: chromecache_349.2.dr	String found in binary or memory: https://www.smartsuppchat.com/loader.js?
Source: chromecache_325.2.dr	String found in binary or memory: https://www.sosfuturesmamans.org/
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.tiktok.com/
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/#website
Source: chromecache_349.2.dr	String found in binary or memory: https://www.twint.ch/?lang=de
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/?s=
Source: chromecache_349.2.dr	String found in binary or memory: https://www.twint.ch/agb-app/
Source: chromecache_349.2.dr	String found in binary or memory: https://www.twint.ch/apple-touch-icon.png
Source: chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/bank/bcv/
Source: chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/bank/credit-suisse/
Source: chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/bank/postfinance/
Source: chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/bank/raiffeisen/
Source: chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/bank/ubs/
Source: chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/bank/zkb/
Source: chromecache_349.2.dr	String found in binary or memory: https://www.twint.ch/content/themes/twint/assets/css/frontend.css?v=1708602499
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/themes/twint/assets/css/frontend.css?ver=1727271305
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/themes/twint/assets/js/frontend.js?ver=1727271305
Source: chromecache_349.2.dr	String found in binary or memory: https://www.twint.ch/content/themes/twint/images/file-o.svg)
Source: chromecache_349.2.dr	String found in binary or memory: https://www.twint.ch/content/themes/twint/images/loader.svg)
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/themes/twint/images/twint-logo.svg
Source: chromecache_349.2.dr	String found in binary or memory: https://www.twint.ch/content/themes/twint/images/twint-plus.svg);
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2017/02/amnesty_international_logo_
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2017/02/app-icon-bcv-2-x
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2017/02/app-icon-postfinance
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2017/02/app-icon-raiffeisen-2-x
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2017/02/app-icon-ubs-2-x
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2017/02/app-icon-zkb-2-x
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2017/02/caritas_schweiz_logo_
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2017/03/HeilsArmee.png
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2017/04/app-icon-credit-suisse
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2017/06/app-icon-bcge-
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2017/06/app-icon-okb-
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2017/07/Zuger_KB_new.png
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2018/01/Appenzeller_Kantonalbank_Icon.png
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2018/12/Walliser_Kantonalbank_Icon.png
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2019/03/St_Galler_Kantonalbank_Icon.png
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2019/09/Einkauf-mitnehmen-150x150.png
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2019/09/Einkauf-mitnehmen-300x300.png
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2019/09/Einkauf-mitnehmen.png
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2019/09/Icon_Checkmarrk-150x150.png
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2019/09/Icon_Checkmarrk.png
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2019/10/GKB_App_Icon_new.png
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2019/12/fastenaktion_de.png
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2020/05/Helvetas_Logo_TWINT.png
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2020/06/App_Icon_BCF.png
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2020/08/App_Icon_BCJ.png
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2020/08/Smartphone-Spenden-Hand
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2020/09/Krebsliga_Schweiz_Logo.png
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2020/09/Medair_Logo.png
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2020/10/App_Icon_BCN.png
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2020/12/Aids-Hilfe-PNG.png
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2020/12/Berghilfe_de.png
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2020/12/FREETHEBEES-e1607356698648.png
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2020/12/Greenpeace_Logo.png
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2020/12/Logo_Glueckskette.png
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2020/12/heks_de.png
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2021/04/App_Icon_TKB.png
Source: chromecache_349.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2021/05/Multi-usecase-1-600x452.jpg
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2021/05/Valiant_App_Icon.png
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2021/05/app-icon-migros.png
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2021/05/website-donation-500x750.jpg
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2021/05/website-donation-800x800.jpg
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2021/05/website-donation.jpg
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2021/08/AI-Logo_WEB_320x400-Alpen-Initiative-1.png
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2021/08/BV_Logo_RGB-e1629213730794.png
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2021/08/Black-Circle.png
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2021/08/GfbV_Logo_Neutral-GfbV-Schweiz.svg
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2021/08/Kinderkrebs-Logo-NGO.png
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2021/08/pro-infirmis-Logo-NGO-e1629350878881.png
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2021/09/Grain_of_Wheat_Logo-removebg-preview.png
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2021/09/Kispi_Logo-removebg-preview.png
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2021/09/Krebsforschung_Schweiz-removebg-preview.png
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2021/09/Logo_Dear_Fondation-removebg-preview.png
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2021/09/Lunge_Zuerich_Logo-removebg-preview.png
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2021/09/Missio_Logo_Claim_RGB-removebg-preview.png
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2021/09/PanEco.png
Source: chromecache_413.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2021/09/Versicherung_Header_800x800px-1.png
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2021/09/aha.png
Source: chromecache_413.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2021/09/grey_DE_v2
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2021/09/mfm.png
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2021/09/morija_de.png
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2021/09/partage.png
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2021/09/plusport.png
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2021/09/sosfuturemamanlogo.png
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2021/11/GLKB_App_Icon
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2021/12/Dontations_02_CloseU-1024x682.jpg
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2021/12/Dontations_02_CloseU-600x400.jpg
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2021/12/Dontations_02_CloseU-768x512.jpg
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2021/12/Dontations_02_CloseU.jpg
Source: chromecache_349.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2021/12/Headerbild_Startseite-1-1-500x750.png
Source: chromecache_349.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2021/12/Headerbild_Startseite-1-1.png
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2021/12/camaquito.png
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2021/12/connexio.png
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2021/12/kinderschutz.png
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2021/12/medecins_du_monde.png
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2021/12/omct_en.png
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2021/12/promentesana.png
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2021/12/pronatura.png
Source: chromecache_413.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2022/02/Versicherungen_Header
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2022/04/alliance_f.png
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2022/04/charity-bild-1200x800_2-1024x683.jpg
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2022/04/charity-bild-1200x800_2-600x400.jpg
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2022/04/charity-bild-1200x800_2-768x512.jpg
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2022/04/charity-bild-1200x800_2.jpg
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2022/04/eth_foundation_logo.png
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2022/04/kinderkrebshilfe_schweiz.png
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2022/04/laureus.png
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2022/04/make_a_wish_logo.png
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2022/05/App_Icon_BEKB_Schatten.png
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2022/05/App_Icon_BLKB_Schatten.png
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2022/05/App_Icon_SHKB_Schatten.png
Source: chromecache_413.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2022/05/Versicherungen_inkl_Velo
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2022/07/AEK_Schatten.png
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2022/08/AEK_Icon_Schatten.png
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2022/08/NKB_Icon_Schatten-002.png
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2022/08/SZKB_Logo_Schatten.png
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2022/08/Swissquote_Icon_Schatten-3.png
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2022/10/How-To-1-1.svg
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2022/10/How-To-2-1.svg
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2022/10/How-To-3-1.svg
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2022/11/Baloise_Icon_schatten.png
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2022/11/LUKB_Schatten-1.png
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2022/11/UKB_App_Schatten.png
Source: chromecache_368.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2022/12/Velo_Assistance.svg
Source: chromecache_368.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2022/12/Velo_Beschaedigung.svg
Source: chromecache_368.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2022/12/Velo_Diebstahl.svg
Source: chromecache_368.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2022/12/Velo_Icon_Boxout.svg
Source: chromecache_368.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2022/12/Veloversicherung_Header_DE-1-500x750.jpg
Source: chromecache_368.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2022/12/Veloversicherung_Header_DE-1-800x930.jpg
Source: chromecache_368.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2022/12/Veloversicherung_Header_DE-1.jpg
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2023/05/Credit-Agricole_App_Icon_schatten
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2023/05/yuh_App_Icon_Schatten.png
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2023/06/App_Icon_Banca-Stato_Schatten
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2023/06/Herunterladen.png
Source: chromecache_349.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2023/06/Home_Handy-Overlay_DE-e1686057501755.png
Source: chromecache_413.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2023/06/Versicherung_Reise.svg
Source: chromecache_413.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2023/06/Versicherung_Velo.svg
Source: chromecache_268.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2023/07/Digital-Goods_Google-Play_Header_DE-500x750.jpg
Source: chromecache_268.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2023/07/Digital-Goods_Google-Play_Header_DE-800x930.jpg
Source: chromecache_393.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2023/07/Digital-Goods_Google-Play_Header_DE.jpg
Source: chromecache_268.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2023/07/Digital-Goods_Google-Play_LP-1-100x67.jpg
Source: chromecache_268.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2023/07/Digital-Goods_Google-Play_LP-1-1024x683.jpg
Source: chromecache_268.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2023/07/Digital-Goods_Google-Play_LP-1-1536x1024.jpg
Source: chromecache_268.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2023/07/Digital-Goods_Google-Play_LP-1-2048x1366.jpg
Source: chromecache_268.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2023/07/Digital-Goods_Google-Play_LP-1-600x400.jpg
Source: chromecache_268.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2023/07/Digital-Goods_Google-Play_LP-1-768x512.jpg
Source: chromecache_393.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2023/07/Digital-Goods_Netflix_Header_DE-500x750.jpg
Source: chromecache_393.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2023/07/Digital-Goods_Netflix_Header_DE-800x930.jpg
Source: chromecache_393.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2023/07/Digital-Goods_Netflix_LP-100x67.jpg
Source: chromecache_393.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2023/07/Digital-Goods_Netflix_LP-1024x683.jpg
Source: chromecache_393.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2023/07/Digital-Goods_Netflix_LP-1536x1024.jpg
Source: chromecache_393.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2023/07/Digital-Goods_Netflix_LP-2048x1366.jpg
Source: chromecache_393.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2023/07/Digital-Goods_Netflix_LP-600x400.jpg
Source: chromecache_393.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2023/07/Digital-Goods_Netflix_LP-768x512.jpg
Source: chromecache_413.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2023/08/Tierversicherung_30x30mm_mitKreis.svg
Source: chromecache_413.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2023/08/Versicherung_Handy-1.svg
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2023/08/llb_App_Icon_schatten
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2023/09/QR-Code-2.0_Teaser-Geschaeftskunden_DE_1
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2023/09/radicant_App_Icon_schatten.png
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2023/12/Bank-Avera_App_Icon_schatten
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2023/12/VZ_App_Icon_schatten
Source: chromecache_349.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2024/01/Landingpage-Widget_Widget_Teaser_Rechteckig_DE-500x750.
Source: chromecache_349.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2024/01/MicrosoftTeams-image-69-860x570.jpg
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2024/03/App_Icon_Aplha-Rheintal_schatten
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2024/03/App_Icon_Bernerland_schatten
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2024/04/App_Icon_Bank-Thalwil_schatten
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2024/09/Donation-Campaign_Emergency
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2024/09/POS_Teaser_Rechteckig-Kopie
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/content/uploads/2024/09/Webseite_Teaser-1.png
Source: chromecache_265.2.dr, chromecache_349.2.dr, chromecache_406.2.dr	String found in binary or memory: https://www.twint.ch/datenschutz/
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/download-aek/
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/download-alpha-rheintal-bank
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/download-appkb
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/download-baloise/
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/download-bancastato/
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/download-bank-avera/
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/download-bank-thawil
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/download-bcge
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/download-bcj
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/download-bcn/
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/download-bcv/
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/download-bekb
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/download-bernerland-bank/
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/download-blkb/
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/download-ca-next-bank/
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/download-credit-suisse
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/download-fkb/
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/download-gkb/
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/download-glkb/
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/download-llb/
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/download-lukb/
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/download-nkb/
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/download-okb
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/download-postfinance/
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/download-radicant/
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/download-raiffeisen/
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/download-sgkb
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/download-shkb/
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/download-sq/
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/download-szkb/
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/download-ubs/
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/download-ukb/
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/download-valiant/
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/download-vz/
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/download-wkb
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/download-yuh/
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/download-zkb/
Source: chromecache_413.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/download-zugerkb
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/download/
Source: chromecache_349.2.dr	String found in binary or memory: https://www.twint.ch/en/
Source: chromecache_349.2.dr	String found in binary or memory: https://www.twint.ch/en/?lang=en
Source: chromecache_268.2.dr	String found in binary or memory: https://www.twint.ch/en/private-customers/functions/digital-vouchers/google-play/
Source: chromecache_268.2.dr	String found in binary or memory: https://www.twint.ch/en/private-customers/functions/digital-vouchers/google-play/?lang=en
Source: chromecache_393.2.dr	String found in binary or memory: https://www.twint.ch/en/private-customers/functions/digital-vouchers/netflix/
Source: chromecache_393.2.dr	String found in binary or memory: https://www.twint.ch/en/private-customers/functions/digital-vouchers/netflix/?lang=en
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/en/private-customers/functions/donation/
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/en/private-customers/functions/donation/?lang=en
Source: chromecache_413.2.dr	String found in binary or memory: https://www.twint.ch/en/private-customers/functions/insurance/
Source: chromecache_413.2.dr	String found in binary or memory: https://www.twint.ch/en/private-customers/functions/insurance/?lang=en
Source: chromecache_368.2.dr	String found in binary or memory: https://www.twint.ch/en/private-customers/functions/insurance/bicycle/
Source: chromecache_368.2.dr	String found in binary or memory: https://www.twint.ch/en/private-customers/functions/insurance/bicycle/?lang=en
Source: chromecache_268.2.dr, chromecache_393.2.dr	String found in binary or memory: https://www.twint.ch/faq-category/digitale-gutscheine/
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/faq-category/spenden/
Source: chromecache_368.2.dr	String found in binary or memory: https://www.twint.ch/faq-category/versicherung/
Source: chromecache_349.2.dr	String found in binary or memory: https://www.twint.ch/faq/ich-habe-meine-twint-pin-vergessen-kann-ich-tun/?audience=private_customer
Source: chromecache_349.2.dr	String found in binary or memory: https://www.twint.ch/faq/ich-oder-einer-meiner-kontakte-kann-kein-geld-mehr-empfangen-weshalb-ist-da
Source: chromecache_349.2.dr	String found in binary or memory: https://www.twint.ch/faq/kann-ich-mehrere-twint-apps-verwenden/?audience=private_customer
Source: chromecache_349.2.dr	String found in binary or memory: https://www.twint.ch/faq/welche-auflade-und-bezugslimiten-gibt-es-fuer-twint/?audience=private_custo
Source: chromecache_349.2.dr	String found in binary or memory: https://www.twint.ch/faq/wie-kann-ich-guthaben-auf-meine-twint-app-laden/?audience=private_customer
Source: chromecache_349.2.dr	String found in binary or memory: https://www.twint.ch/favicon-32x32.png
Source: chromecache_349.2.dr	String found in binary or memory: https://www.twint.ch/fr/
Source: chromecache_349.2.dr	String found in binary or memory: https://www.twint.ch/fr/?lang=fr
Source: chromecache_413.2.dr	String found in binary or memory: https://www.twint.ch/fr/clients-prives/fonctions/assurance/
Source: chromecache_413.2.dr	String found in binary or memory: https://www.twint.ch/fr/clients-prives/fonctions/assurance/?lang=fr
Source: chromecache_368.2.dr	String found in binary or memory: https://www.twint.ch/fr/clients-prives/fonctions/assurance/velo/
Source: chromecache_368.2.dr	String found in binary or memory: https://www.twint.ch/fr/clients-prives/fonctions/assurance/velo/?lang=fr
Source: chromecache_268.2.dr	String found in binary or memory: https://www.twint.ch/fr/clients-prives/fonctions/bons-numeriques/google-play/
Source: chromecache_268.2.dr	String found in binary or memory: https://www.twint.ch/fr/clients-prives/fonctions/bons-numeriques/google-play/?lang=fr
Source: chromecache_393.2.dr	String found in binary or memory: https://www.twint.ch/fr/clients-prives/fonctions/bons-numeriques/netflix/
Source: chromecache_393.2.dr	String found in binary or memory: https://www.twint.ch/fr/clients-prives/fonctions/bons-numeriques/netflix/?lang=fr
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/fr/clients-prives/fonctions/don/
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/fr/clients-prives/fonctions/don/?lang=fr
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/geschaeftskunden/support/
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/geschaeftskunden/unsere-loesungen/
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/geschaeftskunden/unsere-loesungen/app-shop/
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/geschaeftskunden/unsere-loesungen/automat/
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/geschaeftskunden/unsere-loesungen/integratoren/
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/geschaeftskunden/unsere-loesungen/kasse/
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/geschaeftskunden/unsere-loesungen/kundenkarten/
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/geschaeftskunden/unsere-loesungen/onlineshop/
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/geschaeftskunden/unsere-loesungen/qr-code-sticker/
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/geschaeftskunden/unsere-loesungen/qr-code-sticker/#section-betrag
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/geschaeftskunden/unsere-loesungen/rechnung-via-twint-qr-code/
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/geschaeftskunden/unsere-loesungen/spaeter-bezahlen/
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/geschaeftskunden/unsere-loesungen/zahlterminal/
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/geschaeftskunden/werbemittel/
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/impressum/
Source: chromecache_349.2.dr	String found in binary or memory: https://www.twint.ch/it/
Source: chromecache_349.2.dr	String found in binary or memory: https://www.twint.ch/it/?lang=it
Source: chromecache_413.2.dr	String found in binary or memory: https://www.twint.ch/it/clienti-privati/funzioni/assicurazione/
Source: chromecache_413.2.dr	String found in binary or memory: https://www.twint.ch/it/clienti-privati/funzioni/assicurazione/?lang=it
Source: chromecache_368.2.dr	String found in binary or memory: https://www.twint.ch/it/clienti-privati/funzioni/assicurazione/bicicletta/
Source: chromecache_368.2.dr	String found in binary or memory: https://www.twint.ch/it/clienti-privati/funzioni/assicurazione/bicicletta/?lang=it
Source: chromecache_268.2.dr	String found in binary or memory: https://www.twint.ch/it/clienti-privati/funzioni/buoni-digitali/google-play/
Source: chromecache_268.2.dr	String found in binary or memory: https://www.twint.ch/it/clienti-privati/funzioni/buoni-digitali/google-play/?lang=it
Source: chromecache_393.2.dr	String found in binary or memory: https://www.twint.ch/it/clienti-privati/funzioni/buoni-digitali/netflix/
Source: chromecache_393.2.dr	String found in binary or memory: https://www.twint.ch/it/clienti-privati/funzioni/buoni-digitali/netflix/?lang=it
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/it/clienti-privati/funzioni/donazione/
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/it/clienti-privati/funzioni/donazione/?lang=it
Source: chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/newsletter/
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/bezahlen/an-der-kasse/
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/bezahlen/an-der-kasse/#wettbewerb
Source: chromecache_349.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/bezahlen/an-der-kasse/#widget
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/bezahlen/kundenkarten/
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/bezahlen/onlineshop/
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/bezahlen/spaeter-bezahlen/
Source: chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/dein-twint-support/
Source: chromecache_349.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/dein-twint-support/#section-faq
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/funktionen/
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/funktionen/bargeldbezug/
Source: chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/funktionen/digitale-gutscheine/
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/funktionen/digitale-gutscheine/google-play/
Source: chromecache_268.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/funktionen/digitale-gutscheine/google-play/#breadcrumb
Source: chromecache_268.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/funktionen/digitale-gutscheine/google-play/#primaryimage
Source: chromecache_268.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/funktionen/digitale-gutscheine/google-play/?lang=de
Source: chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/funktionen/digitale-gutscheine/netflix/
Source: chromecache_393.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/funktionen/digitale-gutscheine/netflix/#breadcrumb
Source: chromecache_393.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/funktionen/digitale-gutscheine/netflix/#primaryimage
Source: chromecache_393.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/funktionen/digitale-gutscheine/netflix/?lang=de
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/funktionen/digitale-gutscheine/paysafecard/
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/funktionen/geld-senden-und-anfordern/
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/funktionen/handy-abo-vergleich/
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/funktionen/kaffee-bestellen/
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/funktionen/mobilitaet/billettkauf/
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/funktionen/mobilitaet/parking/
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/funktionen/mobilitaet/tanken/
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/funktionen/spenden/
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/funktionen/spenden/#breadcrumb
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/funktionen/spenden/#primaryimage
Source: chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/funktionen/spenden/?lang=de
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/funktionen/spin-win/
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/funktionen/super-deals/
Source: chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/funktionen/versicherung/
Source: chromecache_413.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/funktionen/versicherung/#breadcrumb
Source: chromecache_413.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/funktionen/versicherung/#faq
Source: chromecache_413.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/funktionen/versicherung/#primaryimage
Source: chromecache_413.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/funktionen/versicherung/?lang=de
Source: chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/funktionen/versicherung/handy/
Source: chromecache_413.2.dr, chromecache_368.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/funktionen/versicherung/haustier/
Source: chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/funktionen/versicherung/reise/
Source: chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/funktionen/versicherung/velo/
Source: chromecache_368.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/funktionen/versicherung/velo/#breadcrumb
Source: chromecache_368.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/funktionen/versicherung/velo/#primaryimage
Source: chromecache_368.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/funktionen/versicherung/velo/?lang=de
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/support/
Source: chromecache_349.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/support/#faq
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/support/#video-tutorials
Source: chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/support/sicherheit/
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/privatkunden/support/sicherheit/sicherheitstipps/#gefaelschte-briefe
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/rechtliches/
Source: chromecache_349.2.dr	String found in binary or memory: https://www.twint.ch/site.webmanifest
Source: chromecache_413.2.dr	String found in binary or memory: https://www.twint.ch/supportanfrage
Source: chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/unternehmen/arbeiten-bei-twint/
Source: chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/unternehmen/news/
Source: chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/unternehmen/ueber-uns/
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.twint.ch/unternehmen/ueber-uns/#section-fakten
Source: chromecache_385.2.dr, chromecache_343.2.dr, chromecache_400.2.dr	String found in binary or memory: https://www.youtube.com
Source: chromecache_412.2.dr, chromecache_203.2.dr	String found in binary or memory: https://www.youtube.com/api/drm/fps?ek=
Source: chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	String found in binary or memory: https://www.youtube.com/channel/UC6Y2-XBcccmo4l_3qTKWOyg
Source: chromecache_412.2.dr, chromecache_203.2.dr	String found in binary or memory: https://www.youtube.com/generate_204?cpn=
Source: chromecache_239.2.dr, chromecache_228.2.dr, chromecache_251.2.dr, chromecache_320.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_412.2.dr, chromecache_203.2.dr	String found in binary or memory: https://youtu.be/
Source: chromecache_203.2.dr	String found in binary or memory: https://youtube.com/api/drm/fps?ek=uninitialized
Source: chromecache_412.2.dr, chromecache_203.2.dr	String found in binary or memory: https://youtubei.googleapis.com/youtubei/
Source: chromecache_412.2.dr, chromecache_203.2.dr	String found in binary or memory: https://yurt.corp.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 50383 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50360 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 50314 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50268 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50359 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50371 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50403
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50402
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50405
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50407
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50401
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50396 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50405 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 50210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 50382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50324 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 50335 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 50209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50370 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50407 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 50336 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 50281 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50397 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 50381 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 50369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50337
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50339
Source: unknown	Network traffic detected: HTTP traffic on port 50386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50210
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50212
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50214
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50335
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50223
Source: unknown	Network traffic detected: HTTP traffic on port 50339 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 50352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50222
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50224
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50363 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50359
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50233
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50356
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50360
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50369
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50241
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50240
Source: unknown	Network traffic detected: HTTP traffic on port 50150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50243
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50364
Source: unknown	Network traffic detected: HTTP traffic on port 50393 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50245
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 50224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50246
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50367
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50371
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50370
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50306 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 50117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 50278 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 50152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50373 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 50384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 50256 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50394 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50204
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50206
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50209
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50200
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 50372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50174
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50184
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50366 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50251 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50185
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50187
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50190
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 50159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50195
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50204 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50388 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50275 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50197
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50199
Source: unknown	Network traffic detected: HTTP traffic on port 50332 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 50390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50297 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50354 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 50241 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50139
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50138
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50373
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50130
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50372
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50375
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 50376 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50376
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50137
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50379
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50382
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50381
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 50387 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50299 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50384
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50262
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50383
Source: unknown	Network traffic detected: HTTP traffic on port 50391 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50386
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50388
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50145
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50387
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50269

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49754 version: TLS 1.2

Source: classification engine

Classification label: mal60.phis.win@38/398@114/42

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2116 --field-trial-handle=1856,i,1715639760046732038,11749315745599090564,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://datechf.cc/de/receive/79469380"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6520 --field-trial-handle=1856,i,1715639760046732038,11749315745599090564,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4912 --field-trial-handle=1856,i,1715639760046732038,11749315745599090564,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2116 --field-trial-handle=1856,i,1715639760046732038,11749315745599090564,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6520 --field-trial-handle=1856,i,1715639760046732038,11749315745599090564,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4912 --field-trial-handle=1856,i,1715639760046732038,11749315745599090564,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Extra Window Memory Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://datechf.cc/de/receive/79469380	100%	Avira URL Cloud	phishing

Source	Detection	Scanner	Label
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	0%	URL Reputation	safe
https://developers.google.com/youtube/iframe_api_reference#Events	0%	URL Reputation	safe
https://youtu.be/	0%	URL Reputation	safe
https://www.twint.ch/faq/ich-habe-meine-twint-pin-vergessen-kann-ich-tun/?audience=private_customer	0%	Avira URL Cloud	safe
https://www.twint.ch/content/uploads/2017/04/app-icon-credit-suisse	0%	Avira URL Cloud	safe
https://www.twint.ch/download-vz/	0%	Avira URL Cloud	safe
https://a.nel.cloudflare.com/report/v4?s=S3sMQUVWpNyS4H7qhl9R0QMic8JD2Wr2SYUFM6OEPJeMwV6iQrHniX2v6CISpYocnSYZu50K6ZLl4KNVbOaD51mquAdMzPWFuGKVyMLn%2FlFSSZORBLx24zn%2B%2B8n7	0%	Avira URL Cloud	safe
https://datechf.cc/socket.io/?EIO=4&transport=websocket&sid=3r9bDDVSXbEFGIhqADH1	0%	Avira URL Cloud	safe
https://www.twint.ch/bank/bcv/	0%	Avira URL Cloud	safe
https://cdn.cookielaw.org/scripttemplates/202307.1.0/assets/otCommonStyles.css	0%	Avira URL Cloud	safe
https://www.twint.ch/privatkunden/funktionen/versicherung/#breadcrumb	0%	Avira URL Cloud	safe
https://cdn.cookielaw.org/logos/c6763161-a85e-4d6f-9902-c9d4575334af/3c138d7e-9ef4-4168-8713-9b0f422	0%	Avira URL Cloud	safe
https://www.twint.ch/privatkunden/	0%	Avira URL Cloud	safe
https://www.twint.ch/privatkunden/funktionen/digitale-gutscheine/netflix/#breadcrumb	0%	Avira URL Cloud	safe
https://www.twint.ch/unternehmen/news/	0%	Avira URL Cloud	safe
https://www.twint.ch/download-valiant/	0%	Avira URL Cloud	safe
https://www.twint.ch/content/uploads/2023/06/Versicherung_Reise.svg	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/15pzp/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/normal/auto/	0%	Avira URL Cloud	safe
https://www.twint.ch/download-ca-next-bank/	0%	Avira URL Cloud	safe
https://cdn.cookielaw.org/consent/baf1656f-0c9f-4cd8-83fe-a5ce8d8c9eed/01921dfd-0535-7c88-9558-f9c8250e558c/de.json	0%	Avira URL Cloud	safe
https://www.twint.ch/content/uploads/2021/05/website-donation-500x750.jpg	0%	Avira URL Cloud	safe
https://www.buyfoodwithplastic.org/	0%	Avira URL Cloud	safe
https://www.twint.ch/content/uploads/2020/08/App_Icon_BCJ.png	0%	Avira URL Cloud	safe
https://de.morija.org/	0%	Avira URL Cloud	safe
https://www.twint.ch/fr/clients-prives/fonctions/bons-numeriques/netflix/?lang=fr	0%	Avira URL Cloud	safe
https://www.twint.ch/content/uploads/2017/02/app-icon-postfinance	0%	Avira URL Cloud	safe
https://www.twint.ch/content/uploads/2023/08/Tierversicherung_30x30mm_mitKreis.svg	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1731196884:1727406774:ogyKtD3DYRZvneb8A8Xd4gumCbdnDgJl3yl7WoSTagU/8c9898c28eda4378/cf4fc23845fcc6d	0%	Avira URL Cloud	safe
https://www.facebook.com/tr/?id=979879722096658&ev=PageView&dl=https%3A%2F%2Fwww.twint.ch&rl=https%3A%2F%2Fwww.twint.ch&if=false&ts=1727409748737&sw=1280&sh=1024&v=2.9.168&r=stable&ec=0&o=4125&fbp=fb.1.1727409739018.104976150382192680&cs_est=true&pm=1&hrl=654d6e&ler=empty&cdl=API_unavailable&it=1727409748414&coo=false&cs_cc=1&cas=1184151431702574%2C7836316349762126%2C7350041391718351&rqm=GET	0%	Avira URL Cloud	safe
https://www.twint.ch/en/private-customers/functions/insurance/bicycle/	0%	Avira URL Cloud	safe
https://www.twint.ch/unternehmen/ueber-uns/	0%	Avira URL Cloud	safe
https://www.twint.ch/content/uploads/2020/12/Logo_Glueckskette.png	0%	Avira URL Cloud	safe
https://www.twint.ch/download-fkb/	0%	Avira URL Cloud	safe
https://www.twint.ch/en/private-customers/functions/digital-vouchers/netflix/	0%	Avira URL Cloud	safe
https://www.youtube.com/generate_204?cpn=	0%	Avira URL Cloud	safe
https://www.krebsliga.ch/	0%	Avira URL Cloud	safe
https://www.twint.ch/content/uploads/2021/12/Dontations_02_CloseU-768x512.jpg	0%	Avira URL Cloud	safe
https://ch.linkedin.com/company/twint	0%	Avira URL Cloud	safe
https://datechf.cc/socket.io/socket.io.js	0%	Avira URL Cloud	safe
https://www.pronatura.ch/de	0%	Avira URL Cloud	safe
https://www.twint.ch/en/private-customers/functions/donation/?lang=en	0%	Avira URL Cloud	safe
https://www.twint.ch/privatkunden/funktionen/digitale-gutscheine/google-play/#breadcrumb	0%	Avira URL Cloud	safe
https://datechf.cc/socket.io/?EIO=4&transport=polling&t=P8nfKhs&sid=3r9bDDVSXbEFGIhqADH1	0%	Avira URL Cloud	safe
https://www.twint.ch/privatkunden/funktionen/mobilitaet/tanken/	0%	Avira URL Cloud	safe
https://www.twint.ch/content/uploads/2023/07/Digital-Goods_Google-Play_LP-1-1536x1024.jpg	0%	Avira URL Cloud	safe
https://paneco.ch/	0%	Avira URL Cloud	safe
https://www.twint.ch/download-glkb/	0%	Avira URL Cloud	safe
https://www.twint.ch/content/uploads/2022/11/Baloise_Icon_schatten.png	0%	Avira URL Cloud	safe
https://www.twint.ch/content/uploads/2022/11/UKB_App_Schatten.png	0%	Avira URL Cloud	safe
https://cdn.cookielaw.org/logos/c6763161-a85e-4d6f-9902-c9d4575334af/209d2df7-c2dd-4023-807a-b382cfc	0%	Avira URL Cloud	safe
https://www.twint.ch/content/uploads/2021/05/Multi-usecase-1-600x452.jpg	0%	Avira URL Cloud	safe
https://www.twint.ch/privatkunden/funktionen/geld-senden-und-anfordern/	0%	Avira URL Cloud	safe
https://www.twint.ch/content/uploads/2019/09/Icon_Checkmarrk-150x150.png	0%	Avira URL Cloud	safe
https://www.twint.ch/en/private-customers/functions/insurance/	0%	Avira URL Cloud	safe
https://www.twint.ch/download-okb	0%	Avira URL Cloud	safe
https://www.twint.ch/it/clienti-privati/funzioni/assicurazione/bicicletta/	0%	Avira URL Cloud	safe
https://www.twint.ch/content/uploads/2021/12/pronatura.png	0%	Avira URL Cloud	safe
https://www.twint.ch/content/uploads/2019/09/Einkauf-mitnehmen-150x150.png	0%	Avira URL Cloud	safe
https://www.missio.ch/	0%	Avira URL Cloud	safe
https://www.twint.ch/content/uploads/2022/08/AEK_Icon_Schatten.png	0%	Avira URL Cloud	safe
https://www.kinderkrebshilfe.ch/de	0%	Avira URL Cloud	safe
https://www.twint.ch/privatkunden/funktionen/versicherung/reise/	0%	Avira URL Cloud	safe
https://datechf.cc/socket.io/?EIO=4&transport=websocket&sid=xSgUJ84KMgPLXcJ2ADHj	0%	Avira URL Cloud	safe
https://www.twint.ch/content/themes/twint/images/twint-plus.svg);	0%	Avira URL Cloud	safe
https://www.twint.ch/content/uploads/2023/12/VZ_App_Icon_schatten	0%	Avira URL Cloud	safe
https://www.twint.ch/privatkunden/funktionen/super-deals/	0%	Avira URL Cloud	safe
https://www.protier.ch/	0%	Avira URL Cloud	safe
https://www.twint.ch/bank/postfinance/	0%	Avira URL Cloud	safe
https://code.jquery.com/jquery-3.7.1.slim.min.js	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8c9898691a4b42b5/1727409719717/5b06ee5dbbd1b2452cb1acf6647d2475161453c780a73d0285d7d820c113f77a/uIY9KT1wjH83wWA	0%	Avira URL Cloud	safe
https://github.com/component/has-cors	0%	Avira URL Cloud	safe
https://www.biovision.ch/home/	0%	Avira URL Cloud	safe
https://datechf.cc/socket.io/?EIO=4&transport=polling&t=P8nfFIz&sid=FTghqIbk_2IPVTtyADHy	0%	Avira URL Cloud	safe
https://www.twint.ch/faq-category/spenden/	0%	Avira URL Cloud	safe
https://www.twint.ch/content/uploads/2022/04/charity-bild-1200x800_2-600x400.jpg	0%	Avira URL Cloud	safe
https://www.twint.ch/content/uploads/2023/09/radicant_App_Icon_schatten.png	0%	Avira URL Cloud	safe
https://www.proinfirmis.ch/	0%	Avira URL Cloud	safe
https://www.lunge-zuerich.ch/	0%	Avira URL Cloud	safe
https://www.twint.ch/fr/clients-prives/fonctions/assurance/velo/?lang=fr	0%	Avira URL Cloud	safe
https://www.google.com/images/cleardot.gif	0%	Avira URL Cloud	safe
https://www.partage.ch/fr/	0%	Avira URL Cloud	safe
https://www.twint.ch/content/uploads/2022/04/alliance_f.png	0%	Avira URL Cloud	safe
https://www.twint.ch/content/uploads/2023/07/Digital-Goods_Netflix_LP-600x400.jpg	0%	Avira URL Cloud	safe
https://www.twint.ch/content/uploads/2021/12/medecins_du_monde.png	0%	Avira URL Cloud	safe
https://www.twint.ch/fr/clients-prives/fonctions/don/	0%	Avira URL Cloud	safe
https://www.twint.ch/content/uploads/2019/03/St_Galler_Kantonalbank_Icon.png	0%	Avira URL Cloud	safe
https://a.nel.cloudflare.com/report/v4?s=9ARkx9F6aGOPAtkrecxvVL7PI%2Bw7cR4xFOpB0AKBRGXI15qA0BpdGvr2S%2FO1oaTmGejY2UykIQxglWR5kDoZCREisqR9rmZ%2FxnWnn1%2Fxz8U3Q1TIahGvm%2BIE0mAQ	0%	Avira URL Cloud	safe
https://www.twint.ch/privatkunden/funktionen/spin-win/	0%	Avira URL Cloud	safe
https://angular.dev/license	0%	Avira URL Cloud	safe
https://www.omct.org/	0%	Avira URL Cloud	safe
https://shop.twint.ch/	0%	Avira URL Cloud	safe
https://twitter.com/twintapp	0%	Avira URL Cloud	safe
https://www.glueckskette.ch/	0%	Avira URL Cloud	safe
https://www.twint.ch/bank/credit-suisse/	0%	Avira URL Cloud	safe
https://www.twint.ch/content/uploads/2022/12/Velo_Assistance.svg	0%	Avira URL Cloud	safe
https://www.twint.ch/it/clienti-privati/funzioni/buoni-digitali/netflix/?lang=it	0%	Avira URL Cloud	safe
https://www.plusport.ch/de/	0%	Avira URL Cloud	safe
https://www.twint.ch/content/uploads/2022/04/eth_foundation_logo.png	0%	Avira URL Cloud	safe
https://cdn.cookielaw.org/vendorlist/googleData.json	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
dart.l.doubleclick.net	172.217.16.198	true	false	unknown
i.ytimg.com	172.217.16.214	true	false	unknown
adservice.google.com	142.250.186.66	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
scontent.xx.fbcdn.net	157.240.0.6	true	false	unknown
code.jquery.com	151.101.66.137	true	false	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	unknown
photos-ugc.l.googleusercontent.com	142.250.184.193	true	false	unknown
www.google.com	142.250.186.132	true	false	unknown
star-mini.c10r.facebook.com	157.240.0.35	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
ad.doubleclick.net	142.250.186.134	true	false	unknown
default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	217.20.57.34	true	false	unknown
ax-0001.ax-msedge.net	150.171.27.10	true	false	unknown
datechf.cc	188.114.96.3	true	true	unknown
youtube-ui.l.google.com	142.250.186.142	true	false	unknown
www3.l.google.com	142.250.186.46	true	false	unknown
googleads.g.doubleclick.net	142.250.186.34	true	false	unknown
play.google.com	172.217.16.142	true	false	unknown
challenges.cloudflare.com	104.18.94.41	true	false	unknown
td.doubleclick.net	142.250.186.98	true	false	unknown
bootstrap.smartsuppchat.com	18.158.199.82	true	false	unknown
cdn.cookielaw.org	104.18.86.42	true	false	unknown
geolocation.onetrust.com	104.18.32.137	true	false	unknown
1161431244.rsc.cdn77.org	212.102.56.179	true	false	unknown
yt3.ggpht.com	unknown	unknown	false	unknown
www.smartsuppchat.com	unknown	unknown	false	unknown
9818618.fls.doubleclick.net	unknown	unknown	false	unknown
www.youtube.com	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	unknown
www.linkedin.com	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown
px.ads.linkedin.com	unknown	unknown	false	unknown
www.twint.ch	unknown	unknown	false	unknown
snap.licdn.com	unknown	unknown	false	unknown
translate.google.com	unknown	unknown	false	unknown
www.youtube-nocookie.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cdn.cookielaw.org/scripttemplates/202307.1.0/assets/otCommonStyles.css	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=S3sMQUVWpNyS4H7qhl9R0QMic8JD2Wr2SYUFM6OEPJeMwV6iQrHniX2v6CISpYocnSYZu50K6ZLl4KNVbOaD51mquAdMzPWFuGKVyMLn%2FlFSSZORBLx24zn%2B%2B8n7	false	Avira URL Cloud: safe	unknown
https://datechf.cc/socket.io/?EIO=4&transport=websocket&sid=3r9bDDVSXbEFGIhqADH1	false	Avira URL Cloud: safe	unknown
https://cdn.cookielaw.org/consent/baf1656f-0c9f-4cd8-83fe-a5ce8d8c9eed/01921dfd-0535-7c88-9558-f9c8250e558c/de.json	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/15pzp/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/normal/auto/	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1731196884:1727406774:ogyKtD3DYRZvneb8A8Xd4gumCbdnDgJl3yl7WoSTagU/8c9898c28eda4378/cf4fc23845fcc6d	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/tr/?id=979879722096658&ev=PageView&dl=https%3A%2F%2Fwww.twint.ch&rl=https%3A%2F%2Fwww.twint.ch&if=false&ts=1727409748737&sw=1280&sh=1024&v=2.9.168&r=stable&ec=0&o=4125&fbp=fb.1.1727409739018.104976150382192680&cs_est=true&pm=1&hrl=654d6e&ler=empty&cdl=API_unavailable&it=1727409748414&coo=false&cs_cc=1&cas=1184151431702574%2C7836316349762126%2C7350041391718351&rqm=GET	false	Avira URL Cloud: safe	unknown
https://datechf.cc/socket.io/socket.io.js	false	Avira URL Cloud: safe	unknown
https://datechf.cc/socket.io/?EIO=4&transport=polling&t=P8nfKhs&sid=3r9bDDVSXbEFGIhqADH1	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/privatkunden/funktionen/digitale-gutscheine/netflix/	false		unknown
https://datechf.cc/socket.io/?EIO=4&transport=websocket&sid=xSgUJ84KMgPLXcJ2ADHj	false	Avira URL Cloud: safe	unknown
https://code.jquery.com/jquery-3.7.1.slim.min.js	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8c9898691a4b42b5/1727409719717/5b06ee5dbbd1b2452cb1acf6647d2475161453c780a73d0285d7d820c113f77a/uIY9KT1wjH83wWA	false	Avira URL Cloud: safe	unknown
https://datechf.cc/socket.io/?EIO=4&transport=polling&t=P8nfFIz&sid=FTghqIbk_2IPVTtyADHy	false	Avira URL Cloud: safe	unknown
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	false	URL Reputation: safe	unknown
https://www.google.com/images/cleardot.gif	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=9ARkx9F6aGOPAtkrecxvVL7PI%2Bw7cR4xFOpB0AKBRGXI15qA0BpdGvr2S%2FO1oaTmGejY2UykIQxglWR5kDoZCREisqR9rmZ%2FxnWnn1%2Fxz8U3Q1TIahGvm%2BIE0mAQ	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://cdn.cookielaw.org/logos/c6763161-a85e-4d6f-9902-c9d4575334af/3c138d7e-9ef4-4168-8713-9b0f422	chromecache_349.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/faq/ich-habe-meine-twint-pin-vergessen-kann-ich-tun/?audience=private_customer	chromecache_349.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/download-vz/	chromecache_413.2.dr, chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/privatkunden/funktionen/versicherung/#breadcrumb	chromecache_413.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/content/uploads/2017/04/app-icon-credit-suisse	chromecache_413.2.dr, chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/bank/bcv/	chromecache_349.2.dr, chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/privatkunden/	chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/download-valiant/	chromecache_413.2.dr, chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/unternehmen/news/	chromecache_349.2.dr, chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/content/uploads/2023/06/Versicherung_Reise.svg	chromecache_413.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/download-ca-next-bank/	chromecache_413.2.dr, chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.buyfoodwithplastic.org/	chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/privatkunden/funktionen/digitale-gutscheine/netflix/#breadcrumb	chromecache_393.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/content/uploads/2021/05/website-donation-500x750.jpg	chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/content/uploads/2020/08/App_Icon_BCJ.png	chromecache_413.2.dr, chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/content/uploads/2023/08/Tierversicherung_30x30mm_mitKreis.svg	chromecache_413.2.dr	false	Avira URL Cloud: safe	unknown
https://de.morija.org/	chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/content/uploads/2017/02/app-icon-postfinance	chromecache_413.2.dr, chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/unternehmen/ueber-uns/	chromecache_349.2.dr, chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/fr/clients-prives/fonctions/bons-numeriques/netflix/?lang=fr	chromecache_393.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/en/private-customers/functions/insurance/bicycle/	chromecache_368.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/content/uploads/2020/12/Logo_Glueckskette.png	chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/download-fkb/	chromecache_413.2.dr, chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/content/uploads/2021/12/Dontations_02_CloseU-768x512.jpg	chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/generate_204?cpn=	chromecache_412.2.dr, chromecache_203.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/en/private-customers/functions/digital-vouchers/netflix/	chromecache_393.2.dr	false	Avira URL Cloud: safe	unknown
https://www.krebsliga.ch/	chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.pronatura.ch/de	chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://ch.linkedin.com/company/twint	chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/en/private-customers/functions/donation/?lang=en	chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/privatkunden/funktionen/digitale-gutscheine/google-play/#breadcrumb	chromecache_268.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/privatkunden/funktionen/mobilitaet/tanken/	chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/content/uploads/2023/07/Digital-Goods_Google-Play_LP-1-1536x1024.jpg	chromecache_268.2.dr	false	Avira URL Cloud: safe	unknown
https://paneco.ch/	chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/download-glkb/	chromecache_413.2.dr, chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/content/uploads/2022/11/UKB_App_Schatten.png	chromecache_413.2.dr, chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.cookielaw.org/logos/c6763161-a85e-4d6f-9902-c9d4575334af/209d2df7-c2dd-4023-807a-b382cfc	chromecache_349.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/content/uploads/2022/11/Baloise_Icon_schatten.png	chromecache_413.2.dr, chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/content/uploads/2021/05/Multi-usecase-1-600x452.jpg	chromecache_349.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/en/private-customers/functions/insurance/	chromecache_413.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/privatkunden/funktionen/geld-senden-und-anfordern/	chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/download-okb	chromecache_413.2.dr, chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/content/uploads/2019/09/Icon_Checkmarrk-150x150.png	chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/it/clienti-privati/funzioni/assicurazione/bicicletta/	chromecache_368.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/content/uploads/2021/12/pronatura.png	chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/content/uploads/2019/09/Einkauf-mitnehmen-150x150.png	chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.missio.ch/	chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/content/uploads/2022/08/AEK_Icon_Schatten.png	chromecache_413.2.dr, chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/privatkunden/funktionen/versicherung/reise/	chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.kinderkrebshilfe.ch/de	chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/content/themes/twint/images/twint-plus.svg);	chromecache_349.2.dr	false	Avira URL Cloud: safe	unknown
https://www.protier.ch/	chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/content/uploads/2023/12/VZ_App_Icon_schatten	chromecache_413.2.dr, chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/privatkunden/funktionen/super-deals/	chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/bank/postfinance/	chromecache_349.2.dr, chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.biovision.ch/home/	chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/component/has-cors	chromecache_315.2.dr, chromecache_242.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/content/uploads/2022/04/charity-bild-1200x800_2-600x400.jpg	chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/faq-category/spenden/	chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/content/uploads/2023/09/radicant_App_Icon_schatten.png	chromecache_413.2.dr, chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.proinfirmis.ch/	chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.lunge-zuerich.ch/	chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/fr/clients-prives/fonctions/assurance/velo/?lang=fr	chromecache_368.2.dr	false	Avira URL Cloud: safe	unknown
https://www.partage.ch/fr/	chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/content/uploads/2022/04/alliance_f.png	chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/fr/clients-prives/fonctions/don/	chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/content/uploads/2023/07/Digital-Goods_Netflix_LP-600x400.jpg	chromecache_393.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/content/uploads/2019/03/St_Galler_Kantonalbank_Icon.png	chromecache_413.2.dr, chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/content/uploads/2021/12/medecins_du_monde.png	chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://angular.dev/license	chromecache_412.2.dr, chromecache_203.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/privatkunden/funktionen/spin-win/	chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.omct.org/	chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/youtube/iframe_api_reference#Events	chromecache_385.2.dr, chromecache_400.2.dr	false	URL Reputation: safe	unknown
https://shop.twint.ch/	chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://twitter.com/twintapp	chromecache_268.2.dr, chromecache_393.2.dr, chromecache_413.2.dr, chromecache_368.2.dr, chromecache_349.2.dr, chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/content/uploads/2022/12/Velo_Assistance.svg	chromecache_368.2.dr	false	Avira URL Cloud: safe	unknown
https://www.glueckskette.ch/	chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/bank/credit-suisse/	chromecache_349.2.dr, chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/it/clienti-privati/funzioni/buoni-digitali/netflix/?lang=it	chromecache_393.2.dr	false	Avira URL Cloud: safe	unknown
https://www.plusport.ch/de/	chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://www.twint.ch/content/uploads/2022/04/eth_foundation_logo.png	chromecache_325.2.dr	false	Avira URL Cloud: safe	unknown
https://youtu.be/	chromecache_412.2.dr, chromecache_203.2.dr	false	URL Reputation: safe	unknown
https://cdn.cookielaw.org/vendorlist/googleData.json	chromecache_333.2.dr, chromecache_275.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
18.158.199.82	bootstrap.smartsuppchat.com	United States	16509	AMAZON-02US	false
172.217.16.214	i.ytimg.com	United States	15169	GOOGLEUS	false
104.18.32.137	geolocation.onetrust.com	United States	13335	CLOUDFLARENETUS	false
151.101.66.137	code.jquery.com	United States	54113	FASTLYUS	false
142.250.186.110	unknown	United States	15169	GOOGLEUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
157.240.252.13	unknown	United States	32934	FACEBOOKUS	false
172.217.16.142	play.google.com	United States	15169	GOOGLEUS	false
142.250.185.65	unknown	United States	15169	GOOGLEUS	false
142.250.184.196	unknown	United States	15169	GOOGLEUS	false
142.250.186.34	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.184.193	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false
157.240.0.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
172.217.18.6	unknown	United States	15169	GOOGLEUS	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.185.238	unknown	United States	15169	GOOGLEUS	false
212.102.56.179	1161431244.rsc.cdn77.org	Italy	60068	CDN77GB	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	unknown	European Union	13335	CLOUDFLARENETUS	false
172.217.16.198	dart.l.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.186.46	www3.l.google.com	United States	15169	GOOGLEUS	false
142.250.185.78	unknown	United States	15169	GOOGLEUS	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
157.240.0.6	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
142.250.181.238	unknown	United States	15169	GOOGLEUS	false
150.171.28.10	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.186.132	www.google.com	United States	15169	GOOGLEUS	false
142.250.186.134	ad.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.186.98	td.doubleclick.net	United States	15169	GOOGLEUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
172.217.23.118	unknown	United States	15169	GOOGLEUS	false
195.181.170.18	unknown	United Kingdom	60068	CDN77GB	false
216.58.206.68	unknown	United States	15169	GOOGLEUS	false
150.171.27.10	ax-0001.ax-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
151.101.2.137	unknown	United States	54113	FASTLYUS	false
142.250.181.226	unknown	United States	15169	GOOGLEUS	false
188.114.96.3	datechf.cc	European Union	13335	CLOUDFLARENETUS	true
104.18.86.42	cdn.cookielaw.org	United States	13335	CLOUDFLARENETUS	false
157.240.251.35	unknown	United States	32934	FACEBOOKUS	false
142.250.186.66	adservice.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1520168
Start date and time:	2024-09-27 06:00:40 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 30s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://datechf.cc/de/receive/79469380
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.phis.win@38/398@114/42
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.twint.ch/privatkunden/funktionen/digitale-gutscheine/google-play/ Browse: https://www.twint.ch/privatkunden/funktionen/spenden/ Browse: https://www.twint.ch/privatkunden/funktionen/versicherung/ Browse: https://www.twint.ch/privatkunden/funktionen/versicherung/velo/ Browse: https://www.twint.ch/privatkunden/funktionen/digitale-gutscheine/netflix/

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.195, 216.58.206.46, 64.233.167.84, 34.104.35.123, 142.250.185.195, 142.250.184.202, 142.250.74.202, 172.217.18.106, 142.250.181.234, 142.250.185.138, 142.250.184.234, 142.250.185.202, 142.250.186.138, 142.250.185.74, 142.250.185.170, 142.250.185.106, 172.217.16.202, 142.250.185.234, 172.217.18.10, 142.250.186.74, 142.250.186.106, 142.250.186.170, 216.58.206.74, 142.250.186.42, 172.217.16.138, 216.58.206.42, 216.58.212.170, 142.250.185.131, 104.22.72.145, 104.22.73.145, 172.67.28.229, 142.250.186.35, 216.58.212.138, 172.217.23.106, 142.250.186.131, 4.175.87.197, 217.20.57.34, 192.229.221.95, 52.165.164.15, 20.242.39.171, 142.250.185.136, 172.217.16.200, 142.250.184.194, 172.217.18.2, 2.18.64.220, 2.18.64.212, 13.107.42.14, 216.239.36.178, 216.239.38.178, 216.239.34.178, 216.239.32.178, 172.64.146.215, 104.18.41.41, 216.58.206.34, 104.124.11.217, 104.124.11.145, 216.58.206.67, 142.250.185.67, 142.250.185.227, 142.250.186.142
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, translate-pa.googleapis.com, l-0005.l-msedge.net, clients2.google.com, ade.googlesyndication.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bat.bing.com, sls.update.microsoft.com, update.googleapis.com, www.gstatic.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, www.google-analytics.com, www-linkedin-com.l-0005.l-msedge.net, clients1.google.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, www-alv.google-analytics.com, ctldl.windowsupdate.com, pagead2.googlesyndication.com, od.linkedin.edgesuite.net, jnn-pa.googleapis.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, www.linkedin.com.cdn.cloudflare.net, edgedl.me.gvt1.com, translate.googleapis.com, www.twint.ch.cdn.cloudflare.ne
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://datechf.cc/de/receive/79469380

Input	Output
URL: https://datechf.cc/de/receive/79469380 Model: jbxai	{ "brand":["TWINT"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Continue", "text_input_field_labels":["Phone Number", "TWINT PIN*"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://datechf.cc/de/receive/79469380 Model: jbxai	{ "brand":["TWINT"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Continue", "text_input_field_labels":["Phone Number", "TWINT PIN*"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://datechf.cc/de/receive/79469380 Model: jbxai	{ "phishing_score":9, "brands":"TWINT", "legit_domain":"twint.ch", "classification":"known", "reasons":["The brand TWINT is a known Swiss mobile payment solution.", "The legitimate domain for TWINT is twint.ch.", "The provided URL (datechf.cc) does not match the legitimate domain name.", "The domain extension .cc is unusual for a Swiss brand and raises suspicion.", "The URL does not contain any recognizable association with TWINT.", "Requesting sensitive information like phone number and TWINT PIN on an unrecognized domain is a common phishing tactic."], "brand_matches":[false], "url_match":false, "brand_input":"TWINT", "input_fields":"Phone Number, TWINT PIN*"}

URL: https://www.twint.ch/privatkunden/funktionen/digitale-gutscheine/google-play/ Model: jbxai	{ "brand":["www.twint.ch"], "contains_trigger_text":true, "trigger_text":"www.twint.ch needs to review the security of your connection before proceeding", "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":true, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.twint.ch/privatkunden/funktionen/digitale-gutscheine/google-play/ Model: jbxai	{ "brand":["www.twint.ch"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":["www.twint.ch needs to review the security of your connection before proceeding"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.twint.ch/privatkunden/funktionen/digitale-gutscheine/google-play/ Model: jbxai	{ "phishing_score":1, "brands":"www.twint.ch", "legit_domain":"twint.ch", "classification":"known", "reasons":["The URL matches the brand name exactly.", "The domain extension (.ch) is appropriate for a Swiss brand.", "No suspicious elements such as misspellings, extra characters, or unusual domain extensions are present."], "brand_matches":[true], "url_match":true, "brand_input":"www.twint.ch", "input_fields":"unknown"}

URL: https://www.twint.ch/privatkunden/funktionen/versicherung/velo/ Model: jbxai	{ "brand":["twint"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"download twint", "text_input_field_labels":["veloversicherung mit twint abschliessen"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.twint.ch/privatkunden/funktionen/versicherung/velo/ Model: jbxai	{ "brand":["twint"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"download twint", "text_input_field_labels":["veloversicherung", "abschliessen"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.twint.ch/privatkunden/funktionen/versicherung/velo/ Model: jbxai	{ "brand":["twint"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"download twint", "text_input_field_labels":["veloversicherung", "abschliessen"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	414625
Entropy (8bit):	5.355901836166498
Encrypted:	false
SSDEEP:	6144:Uvm4OU/xiO9qbYUo6ULWgWAG9wE7qAHHoaS/R8DwP33cA0s:wZ/xiO42WwE7qP/Rie
MD5:	0A3BF4C4852FC9D4E0C2CFFF73F161D2
SHA1:	1EE8B1E15B3F5544F92696745AE068F5C451D7D5
SHA-256:	71D07479F4B2B809E5769A352F4F55B84690289026ACE7ED5395230002551A11
SHA-512:	838CA2B5ECFA64ABDDE59164C2157066076DDEAE630C35B4B315D5D415D1C5EE1B711C25232722D246BF5101746203FB60CC62169B87779F9F684568130F6E54
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202307.1.0/otBannerSdk.js
Preview:	/** . * onetrust-banner-sdk. * v202307.1.0. * by OneTrust LLC. * Copyright 2023 . */.!function(){"use strict";var A=function(e,t){return(A=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in t)Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o])}))(e,t)};function I(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function o(){this.constructor=e}A(e,t),e.prototype=null===t?Object.create(t):(o.prototype=t.prototype,new o)}var L,_=function(){return(_=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function d(e,s,a,l){return new(a=a\|\|Promise)(function(o,t){function n(e){try{i(l.next(e))}catch(e){t(e)}}function r(e){try{i(l.throw(e))}catch(e){t(e)}}function i(e){var t;e.done?o(e.value):((t=e.value)instanceof a?t:new a(fun

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://ade.googlesyndication.com/ddm/activity/src=14196387;dc_pre=CIGW_-Ce4ogDFZFnHgIdLssudA;type=sm-co0;cat=twint0;ord=7730732390502;npa=1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=denied;frm=0;user_data_mode=a;gtm=45fe49p0v9190789414za200;gcs=G100;gcd=13p3p3p3p5l1;dma_cps=-;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fgoogle-play%2F?
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1238)
Category:	dropped
Size (bytes):	1239
Entropy (8bit):	5.068464054671174
Encrypted:	false
SSDEEP:	24:ch63Cf5W8QPIHRZ3hwVFS39bYGwNef1yTZsNUkQ1sZmSuLqNWRco5Jcn5IKM6cuY:C6SQnw/x+SR8ZZkQbp1RZ5JwiKMm7Zc
MD5:	9E8F56E8E1806253BA01A95CFC3D392C
SHA1:	A8AF90D7482E1E99D03DE6BF88FED2315C5DD728
SHA-256:	2595496FE48DF6FCF9B1BC57C29A744C121EB4DD11566466BC13D2E52E6BBCC8
SHA-512:	63F0F6F94FBABADC3F774CCAA6A401696E8A7651A074BC077D214F91DA080B36714FD799EB40FED64154972008E34FC733D6EE314AC675727B37B58FFBEBEBEE
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href")\|\|""}function r(e,t){var r=e.substr(t,2);return parseInt(r,16)}function n(n,c){for(var o="",a=r(n,c),i=c+2;i<n.length;i+=2){var l=r(n,i)^a;o+=String.fromCharCode(l)}try{o=decodeURIComponent(escape(o))}catch(u){e(u)}return t(o)}function c(t){for(var r=t.querySelectorAll("a"),c=0;c<r.length;c++)try{var o=r[c],a=o.href.indexOf(l);a>-1&&(o.href="mailto:"+n(o.href,a+l.length))}catch(i){e(i)}}function o(t){for(var r=t.querySelectorAll(u),c=0;c<r.length;c++)try{var o=r[c],a=o.parentNode,i=o.getAttribute(f);if(i){var l=n(i,0),d=document.createTextNode(l);a.replaceChild(d,o)}}catch(h){e(h)}}function a(t){for(var r=t.querySelectorAll("template"),n=0;n<r.length;n++)try{i(r[n].content)}catch(c){e(c)}}function i(t){try{c(t),o(t),a(t)}catch(r){e(r

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65241)
Category:	downloaded
Size (bytes):	70264
Entropy (8bit):	5.264597962069758
Encrypted:	false
SSDEEP:	1536:AFUREURoe6xGT031BsGBjrg2l49E92BxjBxu/HG60QVRyPy4IQ47GK7:f6nsGBjRwBBuHzmvIQ47GK7
MD5:	AF73DD50819A5FC22DFF8B0ED2229D6C
SHA1:	8B1D5DBD114B9C92F4A20139E1ACA3196D94814B
SHA-256:	9261EFB3407E3A9096E4654750D8EFF6B3A663422F48845C7FBCC65034C340CF
SHA-512:	B0DCA576E87D7EAA5850AE4E61759C065786CDB6489D68FCC82240539EEBD5DA522BDB4FDA085FFD245808C8FE2ACB2516408EB774EF26B5F6015FC6737C0EA8
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.7.1.slim.min.js
Preview:	/! jQuery v3.7.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-deprecated/ajax-event-alias,-effects,-effects/animatedSelector,-effects/Tween \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},m=ie.document,u={type:!0,src:!0,nonce:

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (501)
Category:	downloaded
Size (bytes):	993
Entropy (8bit):	5.2946732421267315
Encrypted:	false
SSDEEP:	24:E1tXIbtEHvIYWwmqAK/HJ2cNAXzk5vuHM8aJLtMCRWZ4FhQ:E1tXmtEPT6cLAXzk5kaJL+CwYhQ
MD5:	BB54A4724507795586291E5D583C861A
SHA1:	B4383DFADD4B7EDF30DD830F07D1C91E717235CB
SHA-256:	35C3162B611C3AAA72C002B914BE112F207E0F3BCE58A033EC0437D9AAD814E9
SHA-512:	AB2A3015BA3EB4AC1951848EB8F4215DE67D1ECBEE99A3E96B913CDBE2E617110580D9A46F47E071A80F7691C696D41D48A79CE45759B8D1599584432A6E2D4B
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/iframe_api
Preview:	var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/b0557ce3\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"};.if(!YT.loading){YT.loading=1;(function(){var l=[];YT.ready=function(f){if(YT.loaded)f();else l.push(f)};window.onYTReady=function(){YT.loaded=1;var i=0;for(;i<l.length;i++)try{l[i]()}catch(e){}};YT.setConfig=function(c){var k;for(k in c)if(c.hasOwnProperty(k))YTConfig[k]=c[k]};var a=document.createElement("script");a.type="text/javascript";a.id="www-widgetapi-script";a.src=scriptUrl;a.async=true;var c=document.currentScript;if(c){var n=c.nonce\|\|c.getAttribute("nonce");if(n)a.setAttribute("nonce",.n)}var b=document.getElementsByTagName("script")[0];b.parentNode.insertBefore(a,b)})()};.

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2634)
Category:	dropped
Size (bytes):	214942
Entropy (8bit):	5.57026355280019
Encrypted:	false
SSDEEP:	3072:id6IltCXPUaRDWeRUuxdGBC9VDJHJbYNFwju/9aQjecZmlB3I:uLcBdVHJctPN
MD5:	AAB26FCBE8CE85DC8CE162E7277AB62D
SHA1:	B5FE182DB0C4EABA2EAA16E1A2876D29C672E56E
SHA-256:	FEC5A7C59E81464204416AFBD90C4AC14821C31D1286E907B829BD1A73BCEED4
SHA-512:	27B230E9C0C519828A0089B7B3A2D450C6B629E53E50401979473A7AC8A0114BB20DD34E7D3F100E0DECC2F2CE9358C5937C814438EED89B569CAFBACADC3979
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_tr=this.default_tr\|\|{};(function(_){var window=this;.try{.var Mh,Nh,Oh,Xh,ci,di,ji,ki,li,mi,qi,pi,Th;Mh=function(a){return _.$a?_.ab?_.ab.brands.some(function(b){return(b=b.brand)&&b.indexOf(a)!=-1}):!1:!1};Nh=function(){return _.v("Firefox")\|\|_.v("FxiOS")};Oh=function(){return _.bb()?Mh("Chromium"):(_.v("Chrome")\|\|_.v("CriOS"))&&!(_.bb()?0:_.v("Edge"))\|\|_.v("Silk")};._.Ph=function(){return _.v("Safari")&&!(Oh()\|\|(_.bb()?0:_.v("Coast"))\|\|_.cb()\|\|(_.bb()?0:_.v("Edge"))\|\|(_.bb()?Mh("Microsoft Edge"):_.v("Edg/"))\|\|(_.bb()?Mh("Opera"):_.v("OPR"))\|\|Nh()\|\|_.v("Silk")\|\|_.v("Android"))};_.Qh=function(){return _.v("Android")&&!(Oh()\|\|Nh()\|\|_.cb()\|\|_.v("Silk"))};_.Rh=function(a){return a instanceof _.cc};_.Sh=function(a){if(_.Rh(a))return a.g;throw Error("t");};_.Uh=function(a){if(Th.test(a))return a};_.Vh=function(a){return a instanceof _.cc?_.Sh(a):_.Uh(a)};_.Wh=function(a){return Array.prototype.slice.call(a)};.Xh=function(a){return typeof Symbol==="function"&&typeof

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=5853074&time=1727409757600&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fnetflix%2F
Preview:	{}

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.180365114215879
Encrypted:	false
SSDEEP:	3:YGKhIWANmq6LFHYn:YGKhCNU4
MD5:	64E1C1EB9F4CAF0CF0E7484D7AFCEDB9
SHA1:	69E40D8C48A866A84046FD8BD17AF47FF02B79A4
SHA-256:	8ACAC48BC106C4EAE580C08071597F9DAFAB96D959DEFF65BEC44514DA907B1D
SHA-512:	F109767D57E85127D18B1AD2030A48C0EAD69F79A15C4008712407B1F62691654B74C9D6E225FFDC4A922847EABB928DC7520A656C7081B585124CF678B54E59
Malicious:	false
Reputation:	low
Preview:	{"code":1,"message":"Session ID unknown"}

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=5853074&time=1727409736709&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2Fvelo%2F
Preview:	{}

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4979), with no line terminators
Category:	dropped
Size (bytes):	4979
Entropy (8bit):	5.842055691284163
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUq8hR4Rjl:1DY0hf1bT47OIqWb1r8Hcx
MD5:	28DA12C4D6CE4C77CDA7EC9299C4B0D3
SHA1:	202BF63F0ABB67C87756619D8AEA3EE426334358
SHA-256:	BC12C385D2B5D8B162DFBE1144AB503E583FE569C97DC76409145688DD09B8BC
SHA-512:	88096895C4F89A80C9EA9363E42C436EBBE625D5C435C7B8599BEA252D320D109128D5E2202062FB2FDC9F203918AFF6645FC05621250931BBBB1EB09279B433
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	702
Entropy (8bit):	6.58442013519738
Encrypted:	false
SSDEEP:	12:fM1SZ4Jk6V7lSQClJFM5xWHkbwzQJO1aZxKl1hD3:fx4WklklTM5xWHkqWKt3
MD5:	EEFAA072B284A305C12C06608333ABC2
SHA1:	58272721CCC1EFDA26EAA22354022C7C793EDBB6
SHA-256:	FB6B7BCC1AB09F27DB17BCBDF5239CE1D52AF34F1FC5125B3FC8528A07848D21
SHA-512:	C5CCFDCD9CE76DE85F043A1733C9F0B620E15BABBAF2A5639684C7B2BB8E5A66473C9A83F14CB48D9CB6C6A1C6B36F2C5A28E25ABAF131FB85EC5EEDECBAE4AC
Malicious:	false
Reputation:	low
Preview:	GIF89a................BBB...bbb......!..NETSCAPE2.0.....!..Built with GIF Movie Gear 4.0.!..Made by AjaxLoad.info.!.......,..........3....0.Ik.c.:....N.f.E.1......`..q.-[.9..9...Jk.H..!.......,..........4....N.! ......DqBQT`1. `LE[..\|..u..a... ...C..%$*..!.......,..........6..2#+.A..V/..c....N.IBa..p.......+.Y.......2.d.....!.......,..........3..b%+.2...V_.....!..1D.a...F.....bR].=.08,...r9L..!.......,..........2..r'+J.d....L..&v.`\bT.....hYB)..@....<..&,...R...!.......,..........3.. .9..t..0....!.B...W..1....sa..5....0.....m)J..!.......,..........2........U]....qp.`..a..4..AF.0..`......@..1......!.......,..........2....0.I.eB.)..... ..q..10...P..a..V.. ub...[....;..........

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5552)
Category:	downloaded
Size (bytes):	92330
Entropy (8bit):	5.407411394902756
Encrypted:	false
SSDEEP:	1536:R76HXhpwNCHM9ZK0BK01QcnYaKTZ02LKVsdmpyKcicBj5K:R7OXDs9ZKAKBKYaKj8wKcHW
MD5:	5466451B93F778E73EA5E29ED2E56BF1
SHA1:	1949C18A4D31790630AAFB964D3CF4E77136C35C
SHA-256:	224333AB7D29F775DDB8839BD0926D8195B5E8F7DC670EB6E2864AEC6D959E1A
SHA-512:	F1C2746E4D076BFE7ED820D68FC86B031041F8769F681CCC7F4D817C414037DF18EFEFF32CD41F7EAB32019553A51F6FC522E9F564E952D533B092B1A3B2E57A
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/979879722096658?v=2.9.168&r=stable&domain=www.twint.ch&hme=3ba426d944c98eb3ce406a0f93fc097d0320a486b65b445a33b2eda3a5aa3429&ex_m=70%2C119%2C105%2C109%2C61%2C4%2C98%2C69%2C16%2C95%2C87%2C51%2C54%2C170%2C173%2C185%2C181%2C182%2C184%2C29%2C99%2C53%2C76%2C183%2C165%2C168%2C178%2C179%2C186%2C129%2C41%2C34%2C141%2C15%2C50%2C192%2C191%2C131%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C91%2C17%2C14%2C94%2C90%2C89%2C106%2C52%2C108%2C39%2C107%2C30%2C92%2C26%2C166%2C169%2C138%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C74%2C100%2C27%2C75%2C9%2C8%2C79%2C48%2C21%2C102%2C101%2C103%2C96%2C10%2C20%2C3%2C38%2C19%2C84%2C56%2C82%2C33%2C73%2C0%2C93%2C32%2C81%2C86%2C47%2C46%2C85%2C37%2C5%2C88%2C80%2C44%2C35%2C83%2C2%2C36%2C63%2C42%2C104%2C45%2C78%2C68%2C110%2C60%2C59%2C31%2C97%2C58%2C55%2C49%2C77%2C72%2C24%2C111
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x400, components 3
Category:	downloaded
Size (bytes):	19554
Entropy (8bit):	7.922741175485456
Encrypted:	false
SSDEEP:	384:rpvALOsBqe0opuuRoYBIXwsqgwfb3fyQU1TSIJwDJ+N5k5JWEB:lveOsr0opuIhBIAngiaQUtODINE
MD5:	C18DCD22DD5D05A6173D8345D1BF3C08
SHA1:	11BEF49373D3CEE9EF492B794B8F662B80B49880
SHA-256:	FC5FAD5957DA6860C8E677CAAF498FBFBFEFC84C93F8AC346B561F7ACCC039C7
SHA-512:	EB2F09899AA8368E8ADDAA15BA30E138ACB41C8CE85383582BB66D36CFAB2201AA041D994013530CC7486A557B633CEC65E70FFED7FBD2320187DFDA6105DEE9
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/content/uploads/2022/04/charity-bild-1200x800_2-600x400.jpg
Preview:	......JFIF.........................................".##!. %5-%'2( .?/279<<<$-BFA:F5;<9...........9& &99999999999999999999999999999999999999999999999999........X.............4.................................................................V...`. .....(:....+@....J. F.%.D(G,V.....g.,o...'N.D..i..."..%.O.. ..` ....C.+.!..@...b...X.....H5[..\|&...+..t,e.s.w..Bj.uVk..Z.BZ._^.\|0`!.. ..(.@.26...........@....%..\|tK[.9..bq..-.........7.......85V..Q...>............+X.!S.........0..;.......Z^....N.....3..-Y.#=2.r.FH.e.R.b.?.}~H..!.C...@......@.. .......R.z...Y./).Mp..r.k.t......5rN..U=8..V....k1....}........C#..........h .....d@...^v.-L....3.+}>..k.l.3=h-..t:.&u.mM.o.f.Q...Y..X-.g.\|...@1..H..p......(T.. ...*8.V.j.......2....e3.j...x.,%.&.....6./\.qe.Y.e......o..y.........!....P...... .+............J.K\`Nj.zu.j.4d......L.n:.g2.%.M..g.;..........1.............C..............s...9...0.....7..iq#-<..3............n..$.C:...x....@.......T.. T:......._=(r.y.>....7.y.

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	497
Entropy (8bit):	4.684891921463926
Encrypted:	false
SSDEEP:	12:t4O6aVCd3luZsgbfFTLE+C1ydL0ZQ9jXcaggOCedJI5iNtcME:t4O6aUdVmLCwdL0u/OTJAOtcME
MD5:	B57C99C9D1E3C50B2114C6DB053D7FF0
SHA1:	ADA8ABFED92BA8A545BBD9D299D74D5972CC4AE8
SHA-256:	691DCDB24853A0F5CE4E6597E5713DEA66799B57FFE2C2A10F28F98E0B569B19
SHA-512:	0DAB6D06F386D922FB28F70F2590D4F9C361E7F4E5D5E581B98E59AAC12B266CBA596FFCCD87203B4330673EE4EC1D459A1ABDFC4B066D243A43B2BF7909F0EE
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/static/ot_guard_logo.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path class="ot-floating-button__svg-fill" d="M14.588 0l.445.328c1.807 1.303 3.961 2.533 6.461 3.688 2.015.93 4.576 1.746 7.682 2.446 0 14.178-4.73 24.133-14.19 29.864l-.398.236C4.863 30.87 0 20.837 0 6.462c3.107-.7 5.668-1.516 7.682-2.446 2.709-1.251 5.01-2.59 6.906-4.016zm5.87 13.88a.75.75 0 00-.974.159l-5.475 6.625-3.005-2.997-.077-.067a.75.75 0 00-.983 1.13l4.172 4.16 6.525-7.895.06-.083a.75.75 0 00-.16-.973z" fill="#FFF" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4978), with no line terminators
Category:	dropped
Size (bytes):	4978
Entropy (8bit):	5.842346517856135
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRU+8zR+RA3Co:1DY0hf1bT47OIqWb1z8tWYCo
MD5:	21FDE63DA63F274218C2F769B1452E57
SHA1:	B12EB0BECADFBA1781A4B91C26C948FD9BFF810E
SHA-256:	9C9A5B8EB6545925C1302249039C3A5707FC4B0DD4A5870894D9D22DF331EA81
SHA-512:	296804739FC31C66E41C51A5E32AE09479292E28000C92E14F7722A82B1FA40C6C5A1242048CDD0461A99097C90EBBE4AFB46C2334C9DE9D70B77304BDEEBF81
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	914
Entropy (8bit):	7.746184740375907
Encrypted:	false
SSDEEP:	24:CQC1BSQm3cUooAT2g/7Yr2cNcmf9DVtSSYz/P:b35hAT7/7I7e8DVkSYrP
MD5:	A2774DFCDCC90736F250EAF31406ACC6
SHA1:	7B1A71835C4EADA2AB235B72F8F37F252C453908
SHA-256:	691B380648E3C85C7B977E80D21B855DB3DD2F4C74B531F9AD52B92A97791100
SHA-512:	B866EE4AC61A4701FF32E0875C0A874546A1E8687B36DE426E6246E2AD9669E5BA536646931CC008711C158E8F2B66158DEBBB3E62BD82C9C9335E8C5172762D
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/favicon-32x32.png
Preview:	RIFF....WEBPVP8L~.../......9.$ERU..13.N..../.Puwe...9.$E......:..X...#..".F..ww"...B..av....m.2.........H............. d ...H.$..Dz..@."...4..h.d ........4..7.,~".1-.....k.Zg.B...c.%..B..Z.4..u@.o....M..B.b.B.B.Ka../.o...!V+U..B..Z.4.....u`..\|#..S..RV...ay.1M...\..z...k....>}....&..yPZ...=y...T........'.&.W+..$.``......:..".\..oN......8:...zC.I.L.P... .H..D``......(.R3..,.L...2...1..~....u...........P.s....d..6......o).CN.z..,..VN...#...M]#7.].q.b..I..,.....R.i}.......l8.un...->-T..^.U....S.k .mco../.m.S.qm.m+.m.....D....I.7.......N@.........3TR....2.....c....@.1..O.$..5....<...hp.\|...k..."..x.r...%..e.........Z.....q....v.Uqa...`..u=.'..D.q.SvL.F..\|......{..N.3C....G...3gO.7w.p.....9`..y..}..56....G.o._./Y...+.*.).O.8k.K.....5..)\{........!..#.....?_..B.W...J\~.\|..f.5......x...0T.~...............vi.C...R..!F.....%.R....D.2J$....-.f.....Y^.Sz......d...f

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.180365114215879
Encrypted:	false
SSDEEP:	3:YGKhIWANmq6LFHYn:YGKhCNU4
MD5:	64E1C1EB9F4CAF0CF0E7484D7AFCEDB9
SHA1:	69E40D8C48A866A84046FD8BD17AF47FF02B79A4
SHA-256:	8ACAC48BC106C4EAE580C08071597F9DAFAB96D959DEFF65BEC44514DA907B1D
SHA-512:	F109767D57E85127D18B1AD2030A48C0EAD69F79A15C4008712407B1F62691654B74C9D6E225FFDC4A922847EABB928DC7520A656C7081B585124CF678B54E59
Malicious:	false
Reputation:	low
Preview:	{"code":1,"message":"Session ID unknown"}

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 68 x 28, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1597
Entropy (8bit):	7.848005717819246
Encrypted:	false
SSDEEP:	24:NJEhoArtzCXsk4UHUCtVVn1DL7v157z9iVBgOUy1ko/bbCVjwOoj84z4g:NyhocFd/U0kTLdTkUy68bbiU8K7
MD5:	C4A931D597DECD2553AAC6634B766CF2
SHA1:	6EC84FB4A2745B4B71520241BE77DB1FD1013830
SHA-256:	F56402B127698DB4B4DC611A97A6F081D04C4691C60522C5912D189E37C94A9E
SHA-512:	4932E0F7F38085A7C52539BDD5C7F470740E560A4471BEA30D12EF9E3EFE77F6BBFAC28D26C62A245C43D98EBF74C824B2B414843080A27EDF1563A5F874AC84
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...D............(....IDATX..Y]l.U....V#../..R......vfv.b...j.?/<@...!.FW....!..X.B...C.b....K.y.?..`...v;3.....3wvg....&...d2.g...s...[.Zj.7.'t./.wl<.]. .TY+..(].E...WJ.z.............<..7...-/.#......ZQ.I.a.H...\.....n.b.O!.......S...>.5+...W.s{..!m.Oy...k.r.5....4.>..j.....=..Z~...yc+k..U..Q..e..:8/@ ....p{......P.#u..0.n.p.DQ...O.,Y=.g.0.W.........>W..RM.'v.?...-,0..y..c..............@..........<cf.5`k..XF..6.y,......y#..4..4.[`........\.......SD.-(...GwM8.U....2.[..._.\|...n.....t.&;..z_...4~w.....W.-..W...wf.9e...+..o* Y...r.@......l.A.N...o..T.....7.SJ96..c.V#.{..h.....].....q._u.cg.B.Z..ol4,>E....j........k....$...r.....s.r'h.o.......`...}.!.ze......v..`.2.?.....+J..:..Q..w....L8.s..{<y:.x. .K...........,..T.!...Mi......]...MM.......5k..,......C..)..L.q.K]W.3...d.~R..BNG....i.&eN...l..M.a.]..".2@\|4...IC......6.=. ....Dp...>..K4Q.;...S........#.2.~\`....m..H..j.b3...62...QbPKQe..L9P. z4p.$..(o.4.^..~f.....*

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.180365114215879
Encrypted:	false
SSDEEP:	3:YGKhIWANmq6LFHYn:YGKhCNU4
MD5:	64E1C1EB9F4CAF0CF0E7484D7AFCEDB9
SHA1:	69E40D8C48A866A84046FD8BD17AF47FF02B79A4
SHA-256:	8ACAC48BC106C4EAE580C08071597F9DAFAB96D959DEFF65BEC44514DA907B1D
SHA-512:	F109767D57E85127D18B1AD2030A48C0EAD69F79A15C4008712407B1F62691654B74C9D6E225FFDC4A922847EABB928DC7520A656C7081B585124CF678B54E59
Malicious:	false
Reputation:	low
Preview:	{"code":1,"message":"Session ID unknown"}

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1709), with no line terminators
Category:	downloaded
Size (bytes):	1709
Entropy (8bit):	5.485005809732268
Encrypted:	false
SSDEEP:	48:icqtWfQWqK68UaB/hFf1xLaDcuHRdVSmv/IxQZSvrY:0kLvvffOQ24mvg+svE
MD5:	BF19F30862065E2F0708CB77772B0E73
SHA1:	B29FD6495C744117037F8AD252AB1F79C423981B
SHA-256:	BA8209BD23A38E53CBE4BABEC1D779CC78D312562A33FD2C2F4EB5D6D1EF0B4F
SHA-512:	16123B4D11154CA076E74B0368DF9B848E5C91B9EB30A48C69E56B77C3788BA1AA6A026FD07D6873D749386F7E31C171C6F376BFBC9E01BD97699D99D8EE7400
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/content/themes/twint/assets/js/search-toggle-component.dbc424fd0d05cf4a.js
Preview:	"use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[534],{4888:(t,e,n)=>{n.r(e),n.d(e,{default:()=>s});const l={props:{translations:{type:Object,default:function(){return window.GlobalVars.translations.search}},locale:String},data:function(){return{open:!1}},methods:{toggle:function(){this.open=!this.open;!function(t){for(var e=arguments.length,n=new Array(e>1?e-1:0),l=1;l<e;l++)n[l-1]=arguments[l];n.map((function(e){return t.classList.toggle(e)}))}(document.documentElement,"hide-scrollbar","sticky-header","search-active");var t=document.getElementById("search-input");!0===this.open?t.focus():t.blur()}}};const s=(0,n(4486).A)(l,(function(){var t=this.$createElement,e=this._self._c\|\|t;return e("div",{staticClass:"search-toggle"},[e("button",{class:{active:this.open},attrs:{title:"Toggle Search"},on:{click:this.toggle}},[[e("svg",{attrs:{fill:"none",height:"20",viewBox:"0 0 20 20",width:"20",xmlns:"http://www.w3.org/2000/svg","xmlns:xlink":"http://www.w3.org/1999/xlink"}},[e("c

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15406
Entropy (8bit):	2.793946588797448
Encrypted:	false
SSDEEP:	192:WkJtwGIOPAGsv6uPW6NCfjmprDrx3yUVeYSduKXWZ:WkJWJ/lpgW
MD5:	9C34D87AFDC92B0B8EB5BEDBC4659590
SHA1:	6F12A94661500D5F81126E562DEC1B900FBDF79B
SHA-256:	309621FCE9B5DCD0FF6B36C7A89E6D37355B0A1BDDF8F63AD4A8439EE01CA271
SHA-512:	76965C6209C4CC72CEEE43537614E900AB04D84E7D910FEB84C90450F3845590B496AECB706B5793F24381E16353472FDAC547426E8D7A4B6568C2D1E7962865
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/favicon.ico
Preview:	............ .h...6... .... .(.......00.... .h&......(....... ..... .....................................................000.444.............................................................................................................ttt.........................yyy.........................LLL.........................................RRR.............bbb..................wC.........??..................lll.........www..............e..d....U.__......BB..........................www...........................................................www....................o...Z..................................www.......h...I.....c...L...n...=...............................www.......9........3...........................................www.............{.............................................ddd.................................................nnn.............PPP.........................................VVV.........................xxx.........................~~~...........................

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53030)
Category:	dropped
Size (bytes):	54308
Entropy (8bit):	5.731647926760164
Encrypted:	false
SSDEEP:	768:jqjtNP5aMOM8HX5i7tTbrMzzOb/4Ss5BRvO7LKvadUDjFpMNYzvae2wHJowr1H:jetV5aMVKX5AtjX/GFvO6vStwWwrF
MD5:	F9FDA7AE47BD6EEB2E8C6A2D4EBFB68A
SHA1:	F1F799BF28C4FD2939B9D224507514B79554ECAE
SHA-256:	299F6A05FBF616F8FCFBEB611778E4AEA9A31485F0C557E8746CB9C2FADC8AB4
SHA-512:	BB965DCC501F66A95480325799DEEC7DE1CD3900269925E5D8ED1D11F209E038CC7AD9E146C48129672151A0B81CA83880CA8F790A67D0C2C4337004F071D663
Malicious:	false
Reputation:	low
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function D(W){return W}var S=function(W){return D.call(this,W)},T=this\|\|self,a=function(W,r,P,Q,p,R,X,g,d,E,M,H){for(H=(E=9,P);;)try{if(E==52)break;else if(E==W)H=P,E=8;else if(E==62)E=d&&d.createPolicy?Q:36;else{if(E==36)return g;if(E==13)return H=P,g;E==Q?(H=52,g=d.createPolicy(p,{createHTML:S,createScript:S,createScriptURL:S}),E=13):E==9?(g=R,d=T.trustedTypes,E=62):E==8?E=T.console?r:13:E==r&&(T.console[X](M.message),E=13)}}catch(y){if(H==P)throw y;H==52&&(M=y,E=W)}};(0,eval)(function(W,r){return(r=a(26,16,69,19,"ad",null,"error"))&&W.eval(r.createScript("1"))===1?function(P){return r.createScript(P)}:function(P){return""+P}}(T)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/json;charset=utf-8;base6

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	62243
Entropy (8bit):	5.409074162276717
Encrypted:	false
SSDEEP:	768:/i2VpDUAE3q7h7snQpWWzlj18nQJHoQqhF:s/3IgGDzlj18nQ5SF
MD5:	F33A5BE5D1C907880A3F58E0C138C52C
SHA1:	74786CACEF5DC987299E34CBCF30AB66BBA1DFC5
SHA-256:	D55AD3BC35664E6CE9DC3E6A71BB6D3A4C8FDDEB6AF1A195727C0361DDD92A2E
SHA-512:	ABA2A1B4BC1A1535C205979325495415D4A20BBE9D4BFE07DB3FC7859DFE21ADB30ADEEB126C4ABB295B651535B491F83E7733AC8CC4FC7ACA4CD55F51DEEA95
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202307.1.0/assets/v2/otPcCenter.json
Preview:	. {. "name": "otPcCenter",. "html": "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

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=5853074&time=1727409748621&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fspenden%2F
Preview:	{}

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/946203707?random=1727409744002&cv=11&fst=1727409744002&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465z876304729za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fspenden%2F&ref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fspenden%2F%3F__cf_chl_tk%3D8Ylek.WKI04G6TXvVTCL_69k6NRX5ocFRXcdiigbSf8-1727409721-0.0.1.1-4670&hn=www.googleadservices.com&frm=0&tiba=Sicher%20und%20schnell%20Spenden%20direkt%20in%20der%20TWINT%20App&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (568)
Category:	dropped
Size (bytes):	2441635
Entropy (8bit):	5.606117513640613
Encrypted:	false
SSDEEP:	24576:1E4S8aGQ+5ULgOVJ4uIsZ9ouA1mXb0Do1QAKQ:i4S8a+5eVJNIsZ9Q1mXD
MD5:	62727FA83183431062CD87C2ED9D26EC
SHA1:	FEDD174111222776D78DE97EE624FCD19D170200
SHA-256:	6331E4536BB13101EB1A3546B8395BE20933FD13F4116855B96C15680B1316BA
SHA-512:	6ED7F2B847D7C1BD6859DBF7EF7814C0AE4D8A62719526AEA15AE57DD24262AC4B2324F84DE6E3A4D3AA9EEA92DE4A786E462FBFC95FA0FF83C5FAAE4A746D43
Malicious:	false
Reputation:	low
Preview:	var _yt_player={};(function(g){var window=this;/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC All Rights Reserved... Use of this source code is governed by an MIT-style license that can be. found in the LICENSE file at https://angular.dev/license././*.. (The MIT License).. Copyright (C) 2014 by Vitaly Puzrin.. Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restriction, including without limitation the rights. to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. copies of the Software, and to permit persons to whom the Software is. furnished to do so, subject to the following conditions:.. The above copyright notice and this permission notice shall be included in. all copies or substantial portions of the

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.180365114215879
Encrypted:	false
SSDEEP:	3:YGKhIWANmq6LFHYn:YGKhCNU4
MD5:	64E1C1EB9F4CAF0CF0E7484D7AFCEDB9
SHA1:	69E40D8C48A866A84046FD8BD17AF47FF02B79A4
SHA-256:	8ACAC48BC106C4EAE580C08071597F9DAFAB96D959DEFF65BEC44514DA907B1D
SHA-512:	F109767D57E85127D18B1AD2030A48C0EAD69F79A15C4008712407B1F62691654B74C9D6E225FFDC4A922847EABB928DC7520A656C7081B585124CF678B54E59
Malicious:	false
Reputation:	low
Preview:	{"code":1,"message":"Session ID unknown"}

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1372
Entropy (8bit):	5.041163558104251
Encrypted:	false
SSDEEP:	24:2dk1WNwYO/oM37lB+xHXHi7vJKfkn/MgE4HtLLRXOBNGDOX5FCuhRk/xPwAhywoR:c0Idszc3mvJKMnG4FcPGDu54uoZP/Iw2
MD5:	A5C45D57109512A44C9E0764384705D4
SHA1:	673F94253A9A62D0691B2230D547A8C81C8FC98F
SHA-256:	ACC369B5A80F780E51C0F57296484FF3CCB2ABEFF7876A1782E83030C0A64393
SHA-512:	FE2A155C836B3AC1C85D8D81DC9F86DA251668FA0D36E177643E9DD18E8E4A7B47ED1010D584559B85FA76FCAF2D1B863B5261FB0FD5415691190091BF70892C
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/content/uploads/2023/06/Versicherung_Reise.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Ebene_1" data-name="Ebene 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100">. <defs>. <style>. .cls-1 {. stroke: #222;. stroke-linecap: round;. stroke-linejoin: round;. stroke-width: 3.2px;. }.. .cls-1, .cls-2 {. fill: none;. }.. .cls-2 {. stroke: #262626;. stroke-miterlimit: 10;. stroke-width: 3.2px;. }. </style>. </defs>. <circle class="cls-2" cx="50" cy="50" r="43.1"/>. <g id="twint_icons_icn_Reiseschutz_paket_40x40pt" data-name="twint+/icons/icn_Reiseschutz_paket_40x40pt">. <path id="Stroke-1" class="cls-1" d="m47.79,50.48l-4.61,9.1c-.2.31.02.73.39.73h2.45c.56,0,1.1-.22,1.5-.6l6.56-7.28c.21-.2.49-.3.78-.3,6.35-.01,11.91-.02,12.52-.02,1.49,0,1.67-.57,1.67-1.27,0-.51-4.35-4.76-8.7-4.75-1.69,0-3.56,0-5.47,0-.28,0-.55-.11-.75-.29l-6.58-7.26c-.41-.38-.95-.59-1.5-.59h-2.45c-.37,0-.59.42-.39.73l3.37,7.05c.1.16-.02.36-.21.36-3.18,0-5.7

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4978), with no line terminators
Category:	downloaded
Size (bytes):	4978
Entropy (8bit):	5.8439183913359365
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRU+8zR+RA3j:1DY0hf1bT47OIqWb1z8tWYj
MD5:	E6D61C665B024A50B21BA1B112031E12
SHA1:	CCD0D8E30AE9065898565803DD70A69A43736125
SHA-256:	1A4DB47CE74EF3DD4C43E6195E84459A92AE6F64D6DA82B471497021F455792F
SHA-512:	9ACF58E42BD331C6178CDDAB49C86D93164903EFD5B38987DB39D80FA8C05EEB02CFDA912DAA36E63B8CA27AF79EE1577C1C12C73BC7A726374B5A50DD993DC0
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/946203707/?random=1727409752296&cv=11&fst=1727409752296&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465z876304729za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2F&ref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2F%3F__cf_chl_tk%3D5A09ioEQ0UuE6kMF8J70tFRZFy1rLN1KfmGgecubOiU-1727409728-0.0.1.1-4692&hn=www.googleadservices.com&frm=0&tiba=Versicherung%20mit%20TWINT%20abschliessen%20%7C%20TWINT&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1200
Entropy (8bit):	4.761874169396685
Encrypted:	false
SSDEEP:	24:2dk1WNnKRTHXHi7vJKfkn/rU1dP6yqlIVeYos02lhJ7KGPqOVyEJb2:c0Gwz3mvJKMnA73KIYYos02lX7gA2
MD5:	814E78BB1211698A91650D77396827AA
SHA1:	CCBACB4286E847722F18E44238693F3A7ABDE7AE
SHA-256:	F29909F9A82764978DBF80714CE17BE0BCFB9FC8B872B09148645C4E7889D2DB
SHA-512:	08259DDCB6C33FAC6425115FB9162E9C0683ED426118FC37439CDF6D1B303684A59E87BB05C245B41C5F7C866BA0FF9A2FE4F09E005745578A8B6EC2D94D9F10
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/content/uploads/2022/10/How-To-3-1.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Ebene_1" data-name="Ebene 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100">. <defs>. <style>. .cls-1 {. fill: #262626;. }.. .cls-2 {. fill: none;. stroke: #262626;. stroke-miterlimit: 10;. stroke-width: 3.2px;. }. </style>. </defs>. <circle class="cls-2" cx="50" cy="50" r="43.1"/>. <path class="cls-1" d="M45.4,48.03h3.75c2.08,0,3.9-.37,5.45-1.1,1.55-.74,2.74-1.75,3.56-3.03,.82-1.28,1.23-2.76,1.23-4.44,0-2.83-.8-5.04-2.39-6.63-1.59-1.59-3.88-2.39-6.87-2.39-2.83,0-5.14,.83-6.95,2.5-1.81,1.67-2.71,3.86-2.71,6.58h-3.63c0-2.28,.58-4.36,1.73-6.25,1.15-1.89,2.74-3.35,4.78-4.37,2.04-1.03,4.3-1.54,6.78-1.54,4,0,7.14,1.09,9.45,3.27s3.45,5.17,3.45,8.96c0,2.12-.67,4.07-2.01,5.86-1.34,1.79-3.18,3.12-5.53,4.01,2.75,.77,4.82,2.08,6.24,3.95,1.41,1.87,2.12,4.09,2.12,6.68,0,3.77-1.23,6.81-3.69,9.11s-5.75,3.45-9.87,3.45c-2.62,0-5.03-.52-7.22-1.57-2.19-1.05-3.89-2.52-5.09-4.4-1.2-1.8

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1682
Entropy (8bit):	4.584070839185385
Encrypted:	false
SSDEEP:	24:2dk1INyT0qoMHiaJKUf39i0771L3sYuFeGzfg8GR1uW6mRLyquQlwN/JAI+X9ywx:c0ZITMLJKmNzdLcYkcXzTRLuQ2pGJ93
MD5:	9AD152C10077B319E86A5DD27EEA5A99
SHA1:	70B2B183D833E15A46259DADFB01DB8421FCD518
SHA-256:	E0D500D7B8D24F6C2D421CAC0E032FED1789706BB6E3ED578E95E06C0FB88100
SHA-512:	B96792A8341B0195AB63D58DB45FDB3D8A0D826026E296328651F4D28A6308928F95E14DBD8C11D4B19A1EC18961959EF46B694EB4C0619266784AA9626D056F
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/content/uploads/2022/12/Velo_Beschaedigung.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Ebene_1" data-name="Ebene 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1080 1080">. <defs>. <style>. .cls-1 {. fill: none;. stroke: #000;. stroke-linecap: round;. stroke-miterlimit: 10;. stroke-width: 20px;. }. </style>. </defs>. <path class="cls-1" d="M422.15,339.97l44.28,142.15c.87,2.79-1.35,5.58-4.27,5.35l-71.14-5.56c-3.58-.28-5.79,3.82-3.59,6.65l43.34,55.88c1.31,1.69,1.11,4.11-.46,5.57l-97.09,89.9c-2.97,2.75-.63,7.68,3.38,7.13l128.13-17.8c2.54-.35,4.79,1.67,4.7,4.24l-3.43,99.33c-.14,4.07,5.06,5.87,7.46,2.59l63.44-86.51c1.55-2.11,4.64-2.27,6.4-.33l90.48,100c2.72,3.01,7.69,.71,7.16-3.31l-16.64-127.21c-.31-2.36,1.43-4.49,3.8-4.66l111.07-8.02c4.24-.31,5.31-6.05,1.47-7.86l-100.41-47.38c-2.69-1.27-3.2-4.87-.97-6.84l88.08-77.78c3.15-2.78,.62-7.95-3.51-7.16l-114.1,21.9c-2.55,.49-4.91-1.46-4.91-4.06v-91.54c0-3.89-4.88-5.63-7.34-2.61l-54.59,67.1c-1.57,1.93-4.49,2.05-6.21,.24l-107.57-11

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21215)
Category:	dropped
Size (bytes):	21216
Entropy (8bit):	5.306175166588735
Encrypted:	false
SSDEEP:	384:TRFZRwWtdbD5ABwXwLrekrff8eTr+x5RxMcKn9LuJ4vV/:T7wAD5ABwXw+krfflyxzxin9D/
MD5:	A3E7570799838F456EA59051EDF9B177
SHA1:	714E869857B96DDEEF2578B26F7151A494254BE3
SHA-256:	91B0809D8B9DC57EAA09CB0E13C210B24EDFAEADB94A8CFF0FEE02751C1B0B5F
SHA-512:	05C30ADB56D3D9F0AB84E4E5D0BFFFEADD2FEAA815EE7700E7A5806D01173AEB548BBE390E8487E0E541B27E08663F156F8AD49B7C5D3F6A4202A3FC4CE475FF
Malicious:	false
Reputation:	low
Preview:	var OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIABCookieName="eupubconsent",this.oneTrustIsIABCrossConsentEnableParam="isIABGlobal",this.isStubReady=!0,this.geolocationCookiesParam="geolocation",this.EUCOUNTRIES=["BE","BG","CZ","DK","DE","EE","IE","GR","ES","FR","IT","CY","LV","LT","LU","HU","MT","NL","AT","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",this.userLocation={country:"",state:""}};(m=g=g\|\|{})[m.Days=1]="Days",m[m.Weeks=7]="Weeks",m[m.Months=30]="Months",m[m.Years=365]="Years",(m=i=i\|\|{}).Name="OTGPPConsent",m[m.ChunkSize=4e3]="ChunkSize

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2160 x 2160, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	268909
Entropy (8bit):	7.9411625902895375
Encrypted:	false
SSDEEP:	6144:DP95RgPcj9+b6D7qg9ZWD2U0HyAdM4vBZSJIAyRGSgyaqUy/Lx/:BPgEjs+v8DhayAdYJ1WaqUy/Ll
MD5:	38B6C19E38EC3D5ABA715CD04931E816
SHA1:	6CB5A29AF5C074C41748FEA23CE7226B4FCE034A
SHA-256:	BFEE9804D926EF98BDA80388EE2BD73821DBE8102825A193FBCD809347057DB7
SHA-512:	02741FED28263046600647233C596A3D8382BF960F18C4B0C9D44DDFC67F77DA17B15E1D03C21E78D2150779A952964333B382AC81AC4450E8C5A577A91BEAC1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...p...p.....O.[i....pHYs...%...%.IR$... .IDATx...Kv.G.&.7uzN.cB.@....i.]E.UyS2zT.B.$.))/U...J..i........\.z..D.7.`an..<..t'.......................5........................8........&&.........01............p........LL.........`b...................................8........&&.........01............p........LL.........`b...................................8........&&.........01............p........LL.........`b...................................8........&&.........01............p........LL.........`b...................................8........&&.........01............p........LL.........`b...................................8........&&.........01............p........LL.........`b...................................8........&&.........01............p........LL.........`b...................................8........&&.........01............p........LL.........`b...................................8........&&.........01............p........LL.........`b.....................

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3537)
Category:	dropped
Size (bytes):	52603
Entropy (8bit):	5.316331138717284
Encrypted:	false
SSDEEP:	1536:yYrF+dXpn0e+99D7FPUzHhbtjFnmFRbdwWRI32nB7PXAlnuhPisfq3ECoe5EzpGS:yYrF+d5n0e+99DJPUzHhbtjFnmFRbdwM
MD5:	F0A9F2F65F95B61810777606051EE17D
SHA1:	872BF131CB4BEFD0242339F072F2F9B9FBF8019F
SHA-256:	9CDF2602AC04F7E2BED582D4299C73D464FC4AB069E3AD5A20EE2B6635A015B8
SHA-512:	6823914507BA31E0F61B95CC53F09543C3C14E5530E9EF1B00338FBBD7C25D2E398F5F628DF4ED25D6FF88E0F8BEE506EFE62BA704778BA7CFF09AEC9579D9F0
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var f,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},h="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},ca=ba(this),da=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&h(c,a,{configurable:!0,writable:!0,value:b})}};.da("Symbol",function(a){if(a)return a;var b=function(g,k){this.g=g;h(this,"description",{configurable:!0,writable:!0,value:k})};b.prototype.toStri

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=5853074&time=1727409743106&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fgoogle-play%2F
Preview:	{}

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.408694969562841
Encrypted:	false
SSDEEP:	3:mSOoMuohkPqaY:mSOo9ohkPqaY
MD5:	AB80E9D93A612C46F6994117D07E4DAE
SHA1:	580FB27D4418229FA5E3450A3015CF786D03EC61
SHA-256:	CF36865D9E0402693C1DCA5F02971692285E3FC53563AC86D804FCCF750E9682
SHA-512:	DB92A1A480B67AC5A19DA0C6916CD61D175A8903D655E3CCCAB9DF415B1CB0F66C7549CB8A46837CFBAA53416C5FF8205B01CDCB4BAF0F43A5C9C0D8B839EC2E
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgmdNDkAY6Fn0RIFDWlWtG0SBQ29hYMPEgUNpZM2JA==?alt=proto
Preview:	ChsKBw1pVrRtGgAKBw29hYMPGgAKBw2lkzYkGgA=

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1603
Entropy (8bit):	5.2727801090429285
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8x/S8f:3qD+2+pUAew85zsaA
MD5:	78FD7C1A980B9162702E6F984A25B7A6
SHA1:	E832ABE897CDAA5E36131733AF619F174AD0F9C5
SHA-256:	1C5A3539A6FBE5420A519540FF6662EFEACB0BB1B9B8314C74064694A0D52C0B
SHA-512:	06B0C9A98D1F6B5BCF81D81574258B7D479579CD80FC51105C58B99263D802EFD64ECF6B5A9A3105C1046FB7EE3F776547E1593436AFC3E6C0820D149C0913BA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x400, components 3
Category:	downloaded
Size (bytes):	10478
Entropy (8bit):	7.778039033405794
Encrypted:	false
SSDEEP:	192:fJZxms3peXaNsxNYhfDcRtFauKKsriQCCCCqiVBG9crWp:x6sZKaNsshgRtFreBGWr2
MD5:	1C08DDAA905CE56341DE2883B9FD3B00
SHA1:	5B2EB7C4874C35C72868CA7A897DE8FD53C26D7A
SHA-256:	81481DD11F0B83E6961697657CC4295D6D89FCD1479CC01A3B51EAEECAE56768
SHA-512:	438BBFE1D31537C36891BAF991D90DE33D2639CE2409996F5A2BC2E5ACCDA889611797161249F38DF80532B383494F53F52AAFBC23CC96CA8D9FFFF360C6B6FD
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/content/uploads/2023/07/Digital-Goods_Netflix_LP-600x400.jpg
Preview:	......JFIF.........................................$ &%# #"(-90(*6+"#2D26;=@@@&0FKE>J9?@=...........=)#)==================================================........X.............5..................................................................j..D..!(B.....J.... H@BP..A............!` .....D..!(B.....J.... H@BP..A............!` .....D..!(B.....J.... H@BP..A............!` .....D..!(B.....J.... H@BP..A............!` .....D..!(B.....J.... H@BP..A............!` .....D..!(B.....J.... H@BP..A............!` .....D..!(B.....J.... H@BP..A......... ...)......v. ...B..$$.BP.....B......@@.@...C.>.C...mHB.@.....!.BP....... !..@.....$.....$...syy0x.J.m.....X.. 6{... .J...! B... ..... ..B..B....FK/6.+U...........`.......g.a.B........!(@B...!..B.I. . H..9..=..?..Nn.<..} .....g.a.B........!(@B...!..B.I. . H.."...=v.i.M..,....=....D%.@@...}.g....... ........>#.1.c1..6w.0..\|.....@l.l".A..!..BK....<.]..u...;..9..........8H}..l..e.s........d..W...z.T.....g.a.B.......6<.......1&x.1.9.70...

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4345)
Category:	dropped
Size (bytes):	279234
Entropy (8bit):	5.550205953650126
Encrypted:	false
SSDEEP:	3072:JNV8ax8eulMYeip6n/008lvol0FQbQwM87uYL0pSN0LlspmsOemtJeNvaH:KpmFubli0kd7ihJsEsOemveRS
MD5:	C6B386CE99B6A11F7484C3F3EC90D50F
SHA1:	25A3501DE2F51A6BC5F0414AE6C7DB46A6986329
SHA-256:	24A49C25FCA2FF623D4E9823A5AC52B8322E387FB9B58BFD419FD4E91791B2E0
SHA-512:	95B052205A13F4D2F8AE49756AE699C45BEDAE2A73158B2021F5A86B7000360A85D8F8D181DABF96486EC5FFCCBB36FB7DA8540675E16A2E162C29B63982B300
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_cross_domain","priority":16,"vtp_rules":["list","twint\\.ch"],"tag_id":10},{"function":"__ogt_ads_datatos","priority":16,"vtp_instanceDestinationId":"AW-946203707","tag_id":19},{"function":"__ogt_dma","priority":6,"vtp_delegationMode":"OFF","vtp_dmaDefault":"GRANTED","tag_id":12},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_a

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1427
Entropy (8bit):	4.98544560973613
Encrypted:	false
SSDEEP:	24:2dk1INsBHXoM36RWJKCXPAbWD1PglYBu0pRauzvc0pRsDNbOQPlsaUb6rtM3fUbG:c0d4JWJK0eG1PgYu6wivc6CDZzPw6rto
MD5:	D99E28480F52743DD8818AC5C83BCE8C
SHA1:	60A5C060F2B9515BD18B20040333079C0ADC1658
SHA-256:	851641D296B182C391736B45D990019DDFBCA2BB56D5997841A3967B93BE16AE
SHA-512:	377BE7C32A60D6F70D434A42C9B191F9EC2EB195DBBF8CD0E71CD231B1D1610C8760D653B0AC47F1E21BB3ADB9F23DE41033AC08D65109A13EF8098EF5FB82E1
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/content/uploads/2022/12/Velo_Assistance.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Ebene_1" data-name="Ebene 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1080 1080">. <defs>. <style>. .cls-1 {. fill: #fff;. }.. .cls-1, .cls-2 {. stroke: #262626;. stroke-linecap: round;. stroke-linejoin: round;. stroke-width: 20px;. }.. .cls-2 {. fill: none;. }. </style>. </defs>. <g>. <circle class="cls-2" cx="347.21" cy="601.99" r="89.13"/>. <path class="cls-2" d="M628.66,665.52c-16.43-16.17-26.62-38.66-26.62-63.53,0-49.23,39.91-89.13,89.13-89.13,3.25,0,6.46,.17,9.61,.51"/>. <polyline class="cls-2" points="575.42 385.36 637.98 385.36 682.9 556.06"/>. <polyline class="cls-2" points="400.5 427.06 460.74 427.06 507.15 591.59"/>. <path class="cls-2" d="M507.2,591.47l147.6-127.34c-4.63,1.16-182.59,4.85-182.59,4.85l-119.21,122.58h154.07"/>. <circle class="cls-1" cx="511.24" cy="590.75" r="31.95"/>. </g>. <g>. <path class="cls-2" d="M

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4345)
Category:	downloaded
Size (bytes):	279234
Entropy (8bit):	5.550248563486545
Encrypted:	false
SSDEEP:	3072:JNV8ax8eulMYeip6H/008lvol0FQbQwM87uYL0pSN0LlspmsOemtJeNvaH:KpmFu7li0kd7ihJsEsOemveRS
MD5:	EBC9F4C8A5651A66DFF6299DC5302051
SHA1:	A162434BA72C84FE1D32538417686C23CC614435
SHA-256:	C24B0FE78F1E7BF31D906304E106AD8F50E573DC5FD3EF170EFDC8720F41CB55
SHA-512:	B9621D072B04AE3F00073B66EE7AD688DFB2AB34C028A967D8A568EFF50B8C88E77E239C9C3A0B0F6A51EB2300A872F9F7FCA5AA8109AFCD8301C7A82307A0A1
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=AW-946203707&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_cross_domain","priority":16,"vtp_rules":["list","twint\\.ch"],"tag_id":10},{"function":"__ogt_ads_datatos","priority":16,"vtp_instanceDestinationId":"AW-946203707","tag_id":19},{"function":"__ogt_dma","priority":6,"vtp_delegationMode":"OFF","vtp_dmaDefault":"GRANTED","tag_id":12},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_a

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.577819531114783
Encrypted:	false
SSDEEP:	3:HAOfaY:gOfaY
MD5:	4C8A26E14EDABDD7D6BFBF1472AFC853
SHA1:	F268C3DB54608F753ED9320CB2411B00A40C8D65
SHA-256:	B9224CA870B658AB694ECED1FBB07A971FCE7D0C990E50046929E9968BAF435C
SHA-512:	820B85A739953E8A71E89FEB45BBFB01E2D2F8977D30B0AB11BED28A7CA2B0365595AA7074A3A9780C8DE95E0C8DE839B5C390519F5238E8435F44736CDD497F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAn8IPGzWBLCvRIFDaWTNiQ=?alt=proto
Preview:	CgkKBw2lkzYkGgA=

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4840), with no line terminators
Category:	dropped
Size (bytes):	4840
Entropy (8bit):	5.820792186416331
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUOa85R6H:1DY0hf1bT47OIqWb1/a8P6H
MD5:	5D223D9319339B10DF4967EBC472752B
SHA1:	7ECDFFF88482305C21FE001CF7BF9FD81679AB97
SHA-256:	FD5F61C0D25FB7F11ADF61CC12D12F405C9CCCC2F0C94DF5E16C8E6CD36695E3
SHA-512:	CAB49698799FEC7AA79B176E171A5F745809CD46F6CAD2FD9A54FDAE7675E8CAED1D06C204D49F024121D3EBB0DF06D80F91145E5BD291ED4672976F2FEE8B7A
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 94 x 41, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPlzWt/zs/xl/k4E08up:6v/lhPYto/7Tp
MD5:	CD36A5304E19367D3BE78C05C9EC7253
SHA1:	B703C9971C1D7960E6A23C45B072E8A641ED30C0
SHA-256:	F1F6180B619A877CCB8F23E46E378AE3FFDE5792B45C2D54141429C6E7031F8B
SHA-512:	A009887D20E36F8D3C63393B623E74C71AC71E18C8B8E8E4130609099FE9A2FAD7FBABABF355392B100CB0251E8FB0CB3C6E27AA56E720EAA159BBDB5CCF7E3C
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8c9898691a4b42b5/1727409719721/QRnLOEdUTmV-wSC
Preview:	.PNG........IHDR...^...).....3..@....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	5244
Entropy (8bit):	7.963365043051895
Encrypted:	false
SSDEEP:	96:50NyS9lmmI4AFCMG4ZTplC280JZiKnuIhNzXmpP4DZueXb+NJ6yz9t2:gytmI4AFbGKlcwMIhNXmWC+
MD5:	5DB9C5503B52850F19A2F26C78928C0C
SHA1:	E5DEF885E690F061EFC4FE08098CB631F47C5048
SHA-256:	6017670AA080469C80D7DC1365742CFA6B833CDD489C100466664BFBB90C7C80
SHA-512:	85D5EEDABD7E608E4C9FF11AA0B6A9C56D9B1320AFEC3F353A0DEC00E05B883FFCB811F2F1CD0E71B01090F557DCB6BFF295A1C3C3AAE280E3C0AADC82AD629C
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/content/uploads/2017/05/app-icon-twint-prepaid@2x.png
Preview:	RIFFt...WEBPVP8Lg.../..?..';.m.....n.76.....9.HCvl.m.k.......p...{s.5'..UU.........\|.\...h.@P...m........=....=.}Mu.........P.....T......T.W.E.s...d.1I....n.t.#.....f[iq..._....d.b.b...q.8O.y5M.4..u..t.:T.#0..?....\|...}.. ..`..f...P..7...+.D.oQV[.....G.0..d6 ..J.........P.....!...._..J......5L.O&...d@..6L.w&..\|..Z.>..T..&Yw.uo...-../.............\|.&1...0.IaRo.7c...0..{.....0..R.J.L...F#m[..V@.k hI..n.d!.$.$....@..$..Y2.I...T6.e......7`...WcO:.LDmk.V..:...5....fg.&...uUh."k."..O\..`B...'\c.P.e..2m.(a..\K..U.dvy6s.......5...l..,G.......f.g~...<......f...-.I.....y..w}..M.fn..:..;.lo~.;W....ph.......~.....o.....`..m.....~..1...dh[.....r.I...!...y.......D.."..8f.n.0....1.d$..hn.i.`..}.g.3'\U6..5..9... Ij.^G.@.9.)M..mL.5..^.k..D'.n..I..UF C.R\..P\..j.t+G.....?...h..F...xyI..I....+.5C......k.m..v...X..."F1+../.....$..d<{...s. ..,-...-vm:,...Z.C.z.[..X......1~..5.. ..P...>.<.G.5..b.....~.7.j3.e..L.?.....T.....`...Dd.TD....9.~..

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	848
Entropy (8bit):	4.957643201983407
Encrypted:	false
SSDEEP:	24:2dk1WNnKRTHXHi7vJKfkn/7RuHhJ5ZLq0gSOrW:c0Gwz3mvJKMn8HhJLxO6
MD5:	16804DC3DA7391AF9E1605B1677A907B
SHA1:	7605FA0A077D5357B17D101418C5E09C1552720B
SHA-256:	228A152AA8214C2501E5CEE68A9187788173EF7A9D46B23466FF9940CE4CCDEC
SHA-512:	4D446A600238D5CADAD8BBAC9B2D98904DBF2878B8323B8D1875E8015720E8AC56B15065F4C63811FB00D9D2E0F02C8A39F2730F7509D0D39822DB34C6EC2D54
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/content/uploads/2022/10/How-To-2-1.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Ebene_1" data-name="Ebene 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100">. <defs>. <style>. .cls-1 {. fill: #262626;. }.. .cls-2 {. fill: none;. stroke: #262626;. stroke-miterlimit: 10;. stroke-width: 3.2px;. }. </style>. </defs>. <circle class="cls-2" cx="50" cy="50" r="43.1"/>. <path class="cls-1" d="M64.29,72.34h-27.61v-2.79l15.11-17.13c2.5-2.89,4.24-5.27,5.21-7.14s1.45-3.7,1.45-5.48c0-2.79-.82-4.99-2.45-6.61-1.63-1.62-3.89-2.44-6.75-2.44s-5.36,.95-7.19,2.85c-1.83,1.9-2.74,4.36-2.74,7.39h-3.6c0-2.48,.56-4.74,1.68-6.78,1.12-2.04,2.71-3.64,4.78-4.8,2.07-1.16,4.42-1.74,7.07-1.74,4.04,0,7.19,1.06,9.46,3.18s3.41,5.01,3.41,8.66c0,2.06-.64,4.31-1.92,6.75-1.28,2.44-3.54,5.49-6.77,9.14l-12.29,13.9h23.16v3.06Z"/>.</svg>

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53030)
Category:	downloaded
Size (bytes):	54308
Entropy (8bit):	5.731647926760164
Encrypted:	false
SSDEEP:	768:jqjtNP5aMOM8HX5i7tTbrMzzOb/4Ss5BRvO7LKvadUDjFpMNYzvae2wHJowr1H:jetV5aMVKX5AtjX/GFvO6vStwWwrF
MD5:	F9FDA7AE47BD6EEB2E8C6A2D4EBFB68A
SHA1:	F1F799BF28C4FD2939B9D224507514B79554ECAE
SHA-256:	299F6A05FBF616F8FCFBEB611778E4AEA9A31485F0C557E8746CB9C2FADC8AB4
SHA-512:	BB965DCC501F66A95480325799DEEC7DE1CD3900269925E5D8ED1D11F209E038CC7AD9E146C48129672151A0B81CA83880CA8F790A67D0C2C4337004F071D663
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/th/KZ9qBfv2Fvj8--thF3jkrqmjFIXwxVfodGy5wvrcirQ.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function D(W){return W}var S=function(W){return D.call(this,W)},T=this\|\|self,a=function(W,r,P,Q,p,R,X,g,d,E,M,H){for(H=(E=9,P);;)try{if(E==52)break;else if(E==W)H=P,E=8;else if(E==62)E=d&&d.createPolicy?Q:36;else{if(E==36)return g;if(E==13)return H=P,g;E==Q?(H=52,g=d.createPolicy(p,{createHTML:S,createScript:S,createScriptURL:S}),E=13):E==9?(g=R,d=T.trustedTypes,E=62):E==8?E=T.console?r:13:E==r&&(T.console[X](M.message),E=13)}}catch(y){if(H==P)throw y;H==52&&(M=y,E=W)}};(0,eval)(function(W,r){return(r=a(26,16,69,19,"ad",null,"error"))&&W.eval(r.createScript("1"))===1?function(P){return r.createScript(P)}:function(P){return""+P}}(T)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/json;charset=utf-8;base6

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	651
Entropy (8bit):	4.3413895961447135
Encrypted:	false
SSDEEP:	12:t4HnOWLHGfCd/QYlZpUai7FSr6cPJUpA3ie0zQcozjS50J0JZRjTToEksiU4pyCp:t4HOsGqdQYlHU46mqpOumzjCvTozsiUW
MD5:	A5C5D6146A6E55E4A0FE3567602B1E46
SHA1:	C75FF1B713378AEC779FB248E22DAA513ACA725B
SHA-256:	901BB0E03B8C3C0A1CF4C487A177417328BB7D8C94106ECEFCEEDD7D7F6C4DDC
SHA-512:	D21D979974542243A4D70036F87BFC0549B6793B809ED09044946BE2A25C47811A99E20FDB1F3044082A5509664101D4BCA241A1CA7B09FE80084CEAFA092368
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="348.333" height="348.333" viewBox="0 0 348.333 348.334"><path fill="#565656" d="M336.559 68.611L231.016 174.165l105.543 105.549c15.699 15.705 15.699 41.145 0 56.85-7.844 7.844-18.128 11.769-28.407 11.769-10.296 0-20.581-3.919-28.419-11.769L174.167 231.003 68.609 336.563c-7.843 7.844-18.128 11.769-28.416 11.769-10.285 0-20.563-3.919-28.413-11.769-15.699-15.698-15.699-41.139 0-56.85l105.54-105.549L11.774 68.611c-15.699-15.699-15.699-41.145 0-56.844 15.696-15.687 41.127-15.687 56.829 0l105.563 105.554L279.721 11.767c15.705-15.687 41.139-15.687 56.832 0 15.705 15.699 15.705 41.145.006 56.844z"/></svg>

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6182)
Category:	downloaded
Size (bytes):	314923
Entropy (8bit):	5.609982278170089
Encrypted:	false
SSDEEP:	6144:e4Z5pmFU7ali04d7z3KsOemveqNeX0fxnPd:nZCW7a4nhDkl
MD5:	09C7C9D6343B153CBD52B542C69D2008
SHA1:	58C6F2BBF672EE1ED6125DBB3699631D9921BFFF
SHA-256:	AFDDCCABA388FADF5C84FC2E2A44200B4A44C5732CBFEAB2473A48736C0BF888
SHA-512:	E522FD28963F0F72563226D26B21CF2BAB3A1359D73E33CAF4B799FE15316E819CE6A9E2EB175DE979FA4983B6222BD846A55E7CB54EBE47E3CB8915C5CD33AA
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-KRHB9QGGXV&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_referral_exclusion","priority":13,"vtp_includeConditions":["list","urlumbrella\\.com"],"tag_id":106},{"function":"__ogt_dma","priority":13,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":108},{"function":"__ogt_1p_data_v2","priority":13,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhone

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4345)
Category:	downloaded
Size (bytes):	230274
Entropy (8bit):	5.54757180509692
Encrypted:	false
SSDEEP:	3072:Bccax8eulMYeiD6Y/00elXol0FQbQwM87uY1YuklDNsEemtJeNTnVG8:NpmF2Alq0kd7KvBsEemvexVd
MD5:	DAE368A89AAF2A17F988AB1D89C69387
SHA1:	93913AFE1CFA1B48FE4474BE19DCE21B4D5B95B9
SHA-256:	D28344D0AB2ADD8CF3199F91D75E200B8BBD95E0B03FCD11A75D7DF996460410
SHA-512:	115A6794AD363304C25E741EA551DDB842A1CB9B4FD03CEA33DCAB1D99EF1D1D7024AC08AFF2A402AEE2F44655AFF75AD194A946208D1AB1FFD0FB975D66979E
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=DC-14196387
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_dma","priority":1,"vtp_delegationMode":"OFF","vtp_dmaDefault":"GRANTED","tag_id":9},{"function":"__ogt_1p_data_v2","priority":1,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_reg

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x480, components 3
Category:	dropped
Size (bytes):	13864
Entropy (8bit):	7.430392222485379
Encrypted:	false
SSDEEP:	192:VRRRttQbysQ9qCxUf1Rufr0cOKs2Zyj1YWhmPEx2XG7c4CbMJeZKKKKN:VRRRkbysgqgU9RNKVZyxYWoVf4CbMgL
MD5:	FC1B9FF80F78985FEFF0D7EEF398498F
SHA1:	8B789D1690CEBF5E6C43A37A130C3763479EDC31
SHA-256:	23FE7DC7F470FC2E1BC310375F819532943B021CBFA879ECE1212D98B31A4E3A
SHA-512:	9BC861D3466D73F5F42A1E6FA2A240B89CC9B0A53D0DA145A857DE747CF6E93A4E74ACD1F1BBFA7C9962D933A17B2F8BFB2865506B2584C251256B92E89BFB33
Malicious:	false
Reputation:	low
Preview:	......JFIF...................................................... ...(5 //(.'9=1+0"+0...........3.. 2.&&(&2&&&&-&'(&-&(22(&''&&&'&&&&&&23&22&-&&&&&/..........."........................................Z...........................!f...."1AQas...245q....#3BSTr......RUb...D......$CVc....t.%de..............................,.....................Q....!12.3Aa.."q..#..............?.....................................................................................................................................................................................................................................................A..V....&..!........ .I.m.A..V..M......}$.. .I.m.&.M.yG.c.>.j.a.}$..k&.......I5m..>.j.a..~.Q.X......d.I5m....o(.,y..M[l2.....rmd..p.<..&.....M[l96.o..8..A..V....&....Y7..... .I.m.A..V..M......}$.. .I.m.&.M.yG.c.>.j.a.}$..k&.......I5m..>.j.a..~.Q.X......d.I5m....o(.,y..M[l2.....rmd..p.<..&.....M[l96.o..8..A..V....&....Y7..... .I.m.A..V..M......}$.. .I.m

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	80
Entropy (8bit):	4.33221219626569
Encrypted:	false
SSDEEP:	3:LUfQ2pHWiR8HopHW4OE9HsuXU9WyRHfHyI:x2pHD5YEl5k9zyI
MD5:	1AE6B27EBA211F4CFCD99B904DA88BB7
SHA1:	53CA38F083C4A21F2EDA633EC304CB4582EDEDA2
SHA-256:	961635B4E9661208EC118D285B3AC1DBF9F3CC96CDDC97F30E55CD2C6566448C
SHA-512:	7DD325AB05B1A419614C2C39224C11E1388F09BCA5EA0F56811E6842B4FB243BCB53AA2BDDE00A94FBC324222B47924152C183337EB390F58C59AC80E89593B6
Malicious:	false
Reputation:	low
Preview:	jsonFeed({"country":"US","state":"NY","stateName":"New York","continent":"NA"});

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4345)
Category:	dropped
Size (bytes):	222565
Entropy (8bit):	5.544837309168653
Encrypted:	false
SSDEEP:	3072:o9ax8eulMYeHDH+/008lvol0FQbQwM87uY1YuklDNsEemtJeNynd5E:SpmFj3li0kd7KvBsEemveMda
MD5:	480D40BD08443D6319AEF8021CDFFA26
SHA1:	F111A480DFA6C2482774CE134152AEE7B98AB6A5
SHA-256:	C43ACD61C5EC30AB11A5189DC97B1CF6C5EA3AA6EE2ECD600DAD5512B38C37B9
SHA-512:	937EE3B2DDE66EF6DD902A7E9E307E396B64950DEAF42527B221A6DBF0437F23EA5A94C1A5681A2814B17C31134D3E203AD486856170B6B988B4FC4E393CDEBF
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__rep","vtp_containerId":"DC-9818618","vtp_remoteConfig":["map"],"tag_id":1},{"function":"__ogt_1p_data_v2","priority":0,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"",

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (493), with no line terminators
Category:	downloaded
Size (bytes):	493
Entropy (8bit):	5.074766054167068
Encrypted:	false
SSDEEP:	12:+dcYJ0oJsIRFFGHIkgflySX56SbjtXCx1LvIRRF6ameKBB:icYJ0vIRFUHIlflySXPVc17I3F1mpB
MD5:	6946B3DC8D6D1D6280313E9697F629CB
SHA1:	C137DDC5E44E285593F23D8E67F5D9FCED94DCA5
SHA-256:	23FD05E2E59A0FFA74057269E07A2E5CC53FF3382B3D8B765A985ED004C981E6
SHA-512:	45951E13F26E4C8B86B948F5AAC1B9A2E97D4061AAFC45BFDD8E0A24CA50F44D8AD87E2A28E09466BD4B8805EB80C87A4EF829C7DA36556F3DCCC3CE3163C7A4
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/content/themes/twint/assets/js/on-click-outside-component.93f8b14ea3202ab7.js
Preview:	"use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[835],{5222:(e,n,t)=>{t.r(n),t.d(n,{default:()=>l});const c={props:["callback"],mounted:function(){var e=this,n=function(n){n.target===e.$el\|\|e.$el.contains(n.target)\|\|e.callback()};document.addEventListener("click",n),this.$once("hook:beforeDestroy",(function(){document.removeEventListener("click",n)}))},render:function(){return this.$slots.default[0]}};const l=(0,t(4486).A)(c,undefined,undefined,!1,null,null,null).exports}}]);

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	62243
Entropy (8bit):	5.409074162276717
Encrypted:	false
SSDEEP:	768:/i2VpDUAE3q7h7snQpWWzlj18nQJHoQqhF:s/3IgGDzlj18nQ5SF
MD5:	F33A5BE5D1C907880A3F58E0C138C52C
SHA1:	74786CACEF5DC987299E34CBCF30AB66BBA1DFC5
SHA-256:	D55AD3BC35664E6CE9DC3E6A71BB6D3A4C8FDDEB6AF1A195727C0361DDD92A2E
SHA-512:	ABA2A1B4BC1A1535C205979325495415D4A20BBE9D4BFE07DB3FC7859DFE21ADB30ADEEB126C4ABB295B651535B491F83E7733AC8CC4FC7ACA4CD55F51DEEA95
Malicious:	false
Reputation:	low
Preview:	. {. "name": "otPcCenter",. "html": "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

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 37, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.035372245524405
Encrypted:	false
SSDEEP:	3:yionv//thPlteCY5pBxl/k4E08up:6v/lhPGCcB7Tp
MD5:	9519C5C86B3BC91B3D6623DC2213B2C5
SHA1:	FA4E2E348FE6CD3B27412E85BD55399D7799A1B5
SHA-256:	581C47F1C63C215848867F3B9B725F71D8870695723CCC0DD9D80C99B8187C3C
SHA-512:	4F315374CDE2BDF219CAF4F32F344B15013D06FF7DBD8B2BCD6A2A89242AD80C31624B22A2ED349A403E46C835F0C8212B3E68385C9B6D30B64289D8ED1ABA7C
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8c98989bea707d00/1727409729545/yrXd159Ts3jd8Vz
Preview:	.PNG........IHDR.......%......}......IDAT.....$.....IEND.B`.

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/946203707?random=1727409736078&cv=11&fst=1727409736078&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465z876304729za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fgoogle-play%2F&ref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fgoogle-play%2F%3F__cf_chl_tk%3DvPDafy5u7fTr24UoQidgupFmfFsp3K2ZYE8LkGIqA1g-1727409712-0.0.1.1-4734&hn=www.googleadservices.com&frm=0&tiba=Kaufe%20Google%20Play%20Guthaben%20direkt%20in%20der%20TWINT%20App%20%C2%BB%20TWINT&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4345)
Category:	downloaded
Size (bytes):	279208
Entropy (8bit):	5.550150258607263
Encrypted:	false
SSDEEP:	3072:JNV8ax8eulMYeip6n/008lXol0FQbQwM87uYL0pSN0LlspmsOemtJeNSa8:KpmFublq0kd7ihJsEsOemveMh
MD5:	33B90FCFF423DBCA277A741452419C54
SHA1:	0032AFE3F2E6A9DA76BF7EC977006BB8E9BBEF16
SHA-256:	16C3BD953279CCCBAF69A57EFC6CE151D27A260DEEC26ABB0C67C3F921F29A0E
SHA-512:	9C39A0E395E269144F3B939667389B0593331BE4F3F0DD3D8CDE527C37BC49408FD918F11A5978C8E7E6F13D9836C8F95DAA5FAA73CE5589B37CE9D95C3CBFD7
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=AW-946203707
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_cross_domain","priority":16,"vtp_rules":["list","twint\\.ch"],"tag_id":10},{"function":"__ogt_ads_datatos","priority":16,"vtp_instanceDestinationId":"AW-946203707","tag_id":19},{"function":"__ogt_dma","priority":6,"vtp_delegationMode":"OFF","vtp_dmaDefault":"GRANTED","tag_id":12},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_a

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (51633)
Category:	dropped
Size (bytes):	432448
Entropy (8bit):	5.56655256900868
Encrypted:	false
SSDEEP:	6144:jW62U27psFr+lq0kd7+hJsLsEemvedymV:jW62UJ9+Q/h4JsyJ
MD5:	8142AAA9CF87351FDE7F0B94A02896F5
SHA1:	8E2C48F697C449ECFD99CD38AAA7BBF589ADF012
SHA-256:	5C8FC24229D429B9C3B9EB2C1724CBEC9F69534BC7730660D6AC319DC3949FEE
SHA-512:	84604B77D98BF84F1062980634860BE18FE622A4D2A94A8537DE0F673A23A45F8D904E8205097A42DC5C56AC50616E824B7E426321721E2B431D3DDF548918D5
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"195",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"UA-57807947-1"},{"function":"__jsm","vtp_javascript":["template","(function(){try{var b=ga.getAll(),c;var a=0;for(c=b.length;a\u003Cc;a+=1)if(b[a].get(\"trackingId\")===",["escape",["macro",1],8,16],")return b[a].get(\"clientId\")}catch(d){}return\"false\"})();"]},{"function":"__v","vtp_name":"gtm.newUrlFragment","vtp_dataLayerVersion":1},{"function":"__f","vtp_component":"URL"},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__jsm","vtp_javascript":["template","(function(){for(var c=",["escape",["macro",5],8,16],",d=void 0,b=[[\".\\\\.ubs\\\\.com.\",\"U

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/946203707?random=1727409752296&cv=11&fst=1727409752296&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465z876304729za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2F&ref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2F%3F__cf_chl_tk%3D5A09ioEQ0UuE6kMF8J70tFRZFy1rLN1KfmGgecubOiU-1727409728-0.0.1.1-4692&hn=www.googleadservices.com&frm=0&tiba=Versicherung%20mit%20TWINT%20abschliessen%20%7C%20TWINT&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x930, components 3
Category:	downloaded
Size (bytes):	43921
Entropy (8bit):	7.8827883777729895
Encrypted:	false
SSDEEP:	768:cvsng9yuUsFstJgVabPmhumtXEPkQyWg6/B1x+1EBafRmpmnhRj2IMVbI/CSn:cZhFMWVabPGVXF5Wdvg1EWXXMkCS
MD5:	382C905EB71444BAAF26E7597EBED08E
SHA1:	E82BBF0F2D6738BBDCACBB19976EF99B84A3F941
SHA-256:	45D3B20B40778F6913316E4CB5D87C10B84DC8F30ADE7BD9FF7C8DCD61800BF3
SHA-512:	8110EC9B739F7C8695F2536320D1A9CECFF06D515FA80CB28F45337AC49D81C591FA8EE35CEF2BC6BBB4C1442C36DA4620B86AA949E1E785E3D735F6F71A2DA7
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/content/uploads/2023/07/Digital-Goods_Netflix_Header_DE-800x930.jpg
Preview:	......JFIF.........................................$ &%# #"(-90(6+"#2D26;=@@@&0FKE>J9?@=...........=)#)==================================================........ .............4.................................................................e.0.....(.B....B..B.@..... ....H... ...." ....... ...@. 6y....B@%..B."..@BH@..........A). @......D.P@.. ...@.....:.B .H..!.R.B...I... ".....H% ..........J.. ............X.D.....!.@.@!..!. ...@B...I........@B...A......... ...<....! ...!H... !$ ......B.@I ... B.@..R".( ....... ....g.`!..$.P..).!...$........@..$.....@....D@%......@.....@l.."...J... D ...... @@@!. ....@" . ....""BPD. ............X.D.....!.@.@!..">P.......(H...P. @.... ..H"I..@@.........u..@...@B.......N8Ky....[.. .......................}.x. ...@.....:.B .H..!.R.B.......o:..................*r5.3t..#H................(.B.....O>...ug".t........2..........]9$....\I..<.v<...t................(.B....0.4....,.7c0....]>~............m@....I....l...f: ...@.....:.B .H..!.R.q....]I.......2

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	134766
Entropy (8bit):	4.575984635773353
Encrypted:	false
SSDEEP:	3072:/ZTygmbpoIynKg10q8aWAo5rhPWv8oNmE+umo/Soohq:hTy9JynKgj8aWAo5rhPWv8oNmE+umo/h
MD5:	25A9F3E47DE9C5BD6A3BAFCB0E807161
SHA1:	727EC879EC65130814206EA8FAB11DCA6F1F099E
SHA-256:	A219B96D0BA8E32441C99ACEDC91641E7531A1BD04B2E70ABF34C0E19510F3B8
SHA-512:	CE825746F5B6802F19D17A379416DAA39F804B783A616AF9CED2AA6A272E6B5D711E8F80BC4D5BD254FD38382B1D398D531782C34472E011916197D7BBBD307A
Malicious:	false
Reputation:	low
URL:	https://datechf.cc/socket.io/socket.io.js
Preview:	/!. Socket.IO v4.7.2. * (c) 2014-2023 Guillermo Rauch. * Released under the MIT License.. */.(function (global, factory) {. typeof exports === 'object' && typeof module !== 'undefined' ? module.exports = factory() :. typeof define === 'function' && define.amd ? define(factory) :. (global = typeof globalThis !== 'undefined' ? globalThis : global \|\| self, global.io = factory());.})(this, (function () { 'use strict';.. function _typeof(obj) {. "@babel/helpers - typeof";.. return _typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function (obj) {. return typeof obj;. } : function (obj) {. return obj && "function" == typeof Symbol && obj.constructor === Symbol && obj !== Symbol.prototype ? "symbol" : typeof obj;. }, _typeof(obj);. }. function _classCallCheck(instance, Constructor) {. if (!(instance instanceof Constructor)) {. throw new TypeError("Cannot call a class as a function");. }. }. function _defineProperties(targ

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3391)
Category:	dropped
Size (bytes):	68468
Entropy (8bit):	5.597063427359037
Encrypted:	false
SSDEEP:	768:tSx+1QK2AEU2AEWWHZjyDD+Y66riwUyb+/8Fo6aM9dFDZvKa:YOEfgq/8ea
MD5:	853383CEE0C7AD876D409ADCDE0D12E3
SHA1:	3F633067AFB665F5B2621625E4836F44F24FC5DF
SHA-256:	86FB08163A30352733E67B1B7A107818CCC4C8B632D914421AB84075D6A17730
SHA-512:	4516945D51B81FB447AB18212F3C7051989738CADA658CCC54C8459E630978B5767C7793FE8517FB89E573DE814759E8B27EC1F88933C65E672DDF9F043C1156
Malicious:	false
Reputation:	low
Preview:	(function(g){var window=this;/. SPDX-License-Identifier: Apache-2.0././.. Copyright 2017 Google LLC. SPDX-License-Identifier: BSD-3-Clause./.'use strict';var Ehb=function(a){a.mutedAutoplay=!1;a.endSeconds=NaN;a.limitedPlaybackDurationInSeconds=NaN;g.AQ(a)},Fhb=function(a){g.Po(a);.for(var b=0;b<a.eg.length;b++){var c=a.eg[b],d=a.Ry[b];if(d!==c.version)return!0;if(!g.No(c)\|\|c.Pm)if(c.Pm\|\|c.s_!==g.So)(c.P1(c)\|\|Fhb(c))&&c.Q1(c),c.Pm=!1,c.s_=g.So;if(d!==c.version)return!0}return!1},b4=function(a){var b=g.Lo(a);.a={};return a[Symbol.dispose]=function(){g.Lo(b)},a},Ghb=function(){return{I:"svg",.X:{height:"100%",version:"1.1",viewBox:"0 0 110 26",width:"100%"},V:[{I:"path",Fc:!0,S:"ytp-svg-fill",X:{d:"M 16.68,.99 C 13.55,1.03 7.02,1.16 4.99,1.68 c -1.49,.4 -2.59,1.6 -2.99,3 -0.69,2.7 -0.68,8.31 -0.68,8.31 0,0 -0.01,5.61 .68,8.31 .39,1.5 1.59,2.6 2.99,3 2.69,.7 13.40,.68 13.40,.68 0,0 10.70,.01 13.40,-0.68 1.5,-0.4 2.59,-1.6 2.99,-3 .69,-2.7 .68,-8.31 .68,-8.31 0,0 .11,-5.61 -0.68,-8.31

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.413909765557392
Encrypted:	false
SSDEEP:	3:H1iaKth6G+:av+
MD5:	DA1C821C7C8625C9733A148BB6C81FCB
SHA1:	D4F3DE0F8219322D95BB3BE9330A275933E3D510
SHA-256:	569194658C90797920623870DC06ABC2EB7B2E5066D313D63FCCE21D63796CA4
SHA-512:	69BD8AC68712341D09ED7A21A08FA045C0CFD9E8B9294318EF05177287EA2E01F9BC63B5C2C9B6683E110D907EAF1C1CDDFE3694102285D15ED482CCF1AB1AFF
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkdAEu4Vw1pGRIFDXsS_EESEAk5V_yAMKrP-xIFDaWTNiQ=?alt=proto
Preview:	CgkKBw17EvxBGgAKCQoHDaWTNiQaAA==

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	10932
Entropy (8bit):	7.975312264397133
Encrypted:	false
SSDEEP:	192:6Ohf5JLQ2Aho7KRt8F6C7Lbye/c0NAFNWyA61Lna0ZLYRaqDlBHe1pJucPUZ:6Ef5JLQNho+Rw62H7kttLn/3+HWtUZ
MD5:	8AE849B1ECDB0CC4CADD708993B5717D
SHA1:	652FEC043A4E1043F76922B45D1ED2348383209D
SHA-256:	ABDCB9209346AE9935E8BA305359C0D4F2B3A93E8EDAF060A64E55B0D36C919A
SHA-512:	206246563362223ACEF18E0B4FFBF925CD232BF02A5C0CB632B72B71A41DCFED931DA2706FE19949557E7E7FEA62FF3B7E8BA28942976F116CB1DD048F859598
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/content/uploads/2023/09/QR-Code-2.0_Teaser-Geschaeftskunden_DE_1@2x-500x750.png
Preview:	RIFF...WEBPVP8L.../.A..7.;.$..z....'..5_OOu...."......q..,..f...9..8.$G..]4<...`.>.........m.0...;&XvA..Lq.6..sL..9f...1..&...".]@.cr.p._.D...t q.1. I..$.d..IXLr...MR.!..yI..)1)&.z... .I1)&!.I..d...8.d_.}M.5...{dC.........<.....j.n..V..ig.?.n...P...`.m......P.....Pw].....A#.~m...q...D..."...."...K.....\W'...q1..M%4....5B......i:M.i..`.u........&.!....h.B.~.{W..sN.....=<.e.........u.....3.Y_.. "&..w.<.VKv......L...dn......`..$.u.....+..e..v......#..[.k..-...]..[..rf.}..X......'....O.. }.".?..#.V.D.I.A..h...L.c.Z)....}...ic......../.F ...1.Sl..M.`:.4.\.&{J.u....M.qv...KN?..]...}...#H@.y&.F.M.fF.jF.w...O..o...................................................................})$a.M.OG..J....Zh.M;...3...3W....!.5S1..u...E...J.-...I.Q..Z.....^T..&k&.]X<VC`..9.5....(..%eU........Z.......+6G`.R......'0[.I?o .Y..G`.RM).k.n.........U.f..L..L..Rc...lz...-.w2...Jg7..=..E/._Xv.....~\|............}....6v..Ss[.=.,........)..........?..w...C.7.5A..}..o..m.....[.~

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (543)
Category:	dropped
Size (bytes):	120870
Entropy (8bit):	5.4575471164937355
Encrypted:	false
SSDEEP:	3072:LQK1aO3dKplMGqy2ETMoojAZ1TiEyurrkQ0Fuf:0SF3dKp+GqyHTMoojAZ1TiEyurrkQ0FK
MD5:	A08CCAE580D68E61749A4F108AF246D7
SHA1:	52D8EA25808764F8BB0023D05172CE68659C92F4
SHA-256:	F3811A81A2BBF1513B652DED3FD2E4BD00457536238C5F47185C81FE57C06D16
SHA-512:	DA9DFDCDBBA510AC71F13A3B33C8B06C71725FF5C5C6448F481BB217F31132CEE6E97CEB3A42F9A3173C4521853FBD6D31580FBF466A5598C58EEDBE982D9D0E
Malicious:	false
Reputation:	low
Preview:	(function(g){var window=this;'use strict';var d7=function(a){g.xk(a,"zx",Math.floor(Math.random()2147483648).toString(36)+Math.abs(Math.floor(Math.random()2147483648)^g.Ya()).toString(36));return a},e7=function(a,b,c){Array.isArray(c)\|\|(c=[String(c)]);.g.iha(a.D,b,c)},Erb=function(a){if(a instanceof g.jn)return a;.if(typeof a.Im=="function")return a.Im(!1);if(g.Ra(a)){var b=0,c=new g.jn;c.next=function(){for(;;){if(b>=a.length)return g.p1;if(b in a)return g.kn(a[b++]);b++}};.return c}throw Error("Not implemented");},Frb=function(a,b,c){if(g.Ra(a))g.kc(a,b,c);.else for(a=Erb(a);;){var d=a.next();if(d.done)break;b.call(c,d.value,void 0,a)}},Grb=function(a,b){var c=[];.Frb(b,function(d){try{var e=g.Jp.prototype.B.call(this,d,!0)}catch(f){if(f=="Storage: Invalid value was encountered")return;throw f;}e===void 0?c.push(d):g.mma(e)&&c.push(d)},a);.return c},Hrb=function(a,b){Grb(a,b).forEach(function(c){g.Jp.prototype.remove.call(this,c)},a)},Irb=function(a){if(a.oa){if(a.oa.locationOverri

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x800, components 3
Category:	downloaded
Size (bytes):	41714
Entropy (8bit):	7.984637369615237
Encrypted:	false
SSDEEP:	768:0xR88wVmLfopgysFI6nvhDBWKZa00BZiRSdaxpUKUp1BZOPQRKHa+vm:0dAg/XRBWKOZAzUKUpLwPyKHrvm
MD5:	9E79702E4B376CDC505D8BA3998B33FB
SHA1:	9FC2DCECA5C2C7C3778426D86FD07205C5EF8FED
SHA-256:	92A7A030E11D1D606F86A9FFEBB739C9549A0CB90917D0EC9A6695888343FF6A
SHA-512:	9588F05406D9A45C12F1E9B164A0F1DEE706C743393D9F0D4DE14AA3F7DCDE298B03B64EBC0C276244DF2FC35AEA314980EAD5AAD8E0DD5DA7F6E85F169BC280
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/content/uploads/2021/05/website-donation-800x800.jpg
Preview:	......JFIF.........................................$ &%# #"(-90(6+"#2D26;=@@@&0FKE>J9?@=...........=)#)==================================================...... . .."..........2................................................................{.s..\S\|9..L..r.;#X..e..Y.Za...u..4.[..'R.Uu..mt..M.....p..l.rV.1M.....k.c....)9m.s.f[f]....J..:pX.{...s.D2..2....Y..\L.{.;...[..&....1.N.Nf.+B1.-..\u.#.....MW..=>~\.H..VK.I...r+...;....^=.l..X..7...H.].9A.....8..G..0.Whk....P..w..-.....K,.V.o<.I.'h5.\.....I.._F..}{..R....qO...].^D..q..a.gL..}..3.q......C3.r.\|Y....JHJ.....G..d[.......:a.i.i...DT[.A4.Q....e.u..........VEk.nr...-j.3.j..9..)...4.s.....L..(5.Y..g4...z,.o.#.&8.$.E....9h.m....3D...QE..rHI Pd].<....".....2.F@a..p.d.Y...Ud@YX..............3.n...{^.yA.....=........-....9......9.d..m,.:....\%2.U..#)." l....l.6P.p.d..$....!$...I.....$...........+...t0.0...U..EU....[l.p..O..`.......Lz7.B.....o=..=.N..:....z..F........{<...F.~...:YU...,...WqE,+.d....HIp.qj.$

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5194
Entropy (8bit):	3.976628767895142
Encrypted:	false
SSDEEP:	96:mD6VAMcWnVRSNUrN3Sky4gNeLSYiJ7iFsAkl2+heNm7iprXbep5DkoG23b+WYYY:p9bSNURZyNNnRJqsAehheImprmDkozYV
MD5:	63E737D3544164D2B7F4FBCA416AC807
SHA1:	030370AA38715E4C41589633F69D0BFE8255D46C
SHA-256:	5FA00D047ACD959697B9D7772C31DCD37BEC33C70C6FBF80AB8316205D1D286D
SHA-512:	31EE1BB536C0E50F5568A415EA3308367BFCFD11D2A6F7DFF1C8E3A982F7BE790C240A603CD4C6E187672824B8E5D07646049A28C6A88A7B001EB9A0142F312B
Malicious:	false
Reputation:	low
Preview:	<svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83 0 01.74.77 2.25 2.25 0 01.25 1.07 2.26 2.26 0 01-.25 1.08 1.77 1.77 0 01-.74.77 2.55 2.55 0 01-1.28.29H.66v-.72h1.59a1.81 1.81 0 00.87-.19 1.1 1.1 0 00.48-.5 1.73 1.73 0 00.15-.73A1.66 1.66 0 003.6 7a1.1 1.1 0 00-.48-.5 1.86 1.86 0 00-.88-.18H.81v6zm7.74.1a2.29 2.29 0 01-1.2-.32 2.29 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0 00-.16-.94 1.67 1.67 0 00-.5-.71 1.37 1.37 0 00-.85-.26 1.35 1.35 0 00-.85.26 1.67 1.67 0 00-.5.71 2.85 2.85 0 00-.16.94 2.9 2.9 0 00.16.94 1.6 1.6 0 00.5.69 1.29 1.29 0 00.85.27zm4.43.59l-1.54-5h.82l1.08 3

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4345)
Category:	dropped
Size (bytes):	279208
Entropy (8bit):	5.550150258607263
Encrypted:	false
SSDEEP:	3072:JNV8ax8eulMYeip6n/008lXol0FQbQwM87uYL0pSN0LlspmsOemtJeNSa8:KpmFublq0kd7ihJsEsOemveMh
MD5:	33B90FCFF423DBCA277A741452419C54
SHA1:	0032AFE3F2E6A9DA76BF7EC977006BB8E9BBEF16
SHA-256:	16C3BD953279CCCBAF69A57EFC6CE151D27A260DEEC26ABB0C67C3F921F29A0E
SHA-512:	9C39A0E395E269144F3B939667389B0593331BE4F3F0DD3D8CDE527C37BC49408FD918F11A5978C8E7E6F13D9836C8F95DAA5FAA73CE5589B37CE9D95C3CBFD7
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_cross_domain","priority":16,"vtp_rules":["list","twint\\.ch"],"tag_id":10},{"function":"__ogt_ads_datatos","priority":16,"vtp_instanceDestinationId":"AW-946203707","tag_id":19},{"function":"__ogt_dma","priority":6,"vtp_delegationMode":"OFF","vtp_dmaDefault":"GRANTED","tag_id":12},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_a

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1599
Entropy (8bit):	5.267838660635414
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8xZS8f:3qD+2+pUAew85zssA
MD5:	5EDBA73F30F0D3A342CECCB3A34BFE45
SHA1:	3F39E4C8EF00408D327260F5328162AB3E5D3CAF
SHA-256:	F768529B209DB7EDF38AA0DA2A69C1C1DBE5A760D457FE74080D3AD76F14A0C2
SHA-512:	C302E3CCC2D9F2E12133ED07082A78260613F1B8C756D9EB2CF0A7AF63C425D4A8956B01EAE3FC3DFAB506DACF6416B0B53929D535CFA2AD81951183A6526FE7
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6182)
Category:	dropped
Size (bytes):	314922
Entropy (8bit):	5.609993364340169
Encrypted:	false
SSDEEP:	6144:e4Z5pmFU72li04d7z3KsOemveqNeX0fxnPo:nZCW724nhDkA
MD5:	4C55F0DBB5FA530FACAB06FD2C9C7FC3
SHA1:	C4F15B1EBDC25D58DCFE3AB9BA60E5945ED73246
SHA-256:	EFC93F5EEDEE717242AC61C1E34068BCFC970391B8EF7E7F37C471DAD8BB9921
SHA-512:	D3BC825C6406360AD932083DE1C4E10ECADBC29381149A011A7F023B0AD0FF50ECA872090E2F4A9E1E3B2DE6C0AD532614B76A769ACA9DE3C356958114854737
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_referral_exclusion","priority":13,"vtp_includeConditions":["list","urlumbrella\\.com"],"tag_id":106},{"function":"__ogt_dma","priority":13,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":108},{"function":"__ogt_1p_data_v2","priority":13,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhone

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 400, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	33907
Entropy (8bit):	7.9892571696327455
Encrypted:	false
SSDEEP:	768:U3HqDEKiGwKaQtYm7d1AItZOK8BCxss7fnPXhve9:UaDriG96mTPFF3RvS
MD5:	37F5C3377BC924D6E11741A159A26BD4
SHA1:	411E9A5D87BC6E597E218D02238AE3F84F8BCDF3
SHA-256:	3E655A8D762A81ADC0A00154612C3EFABF86ED9E413E5AD008105D2AA23A6B60
SHA-512:	380F5C09C01FF875B7604E0416A3B78ECC58EFAFC905CBB930342F75B7A3A52F966E75DDD1AE639DC2471147626AA3F2A48B5C7A938F7186B4365600ECB74565
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/content/uploads/2021/09/grey_DE_v2@2x-600x400.png
Preview:	.PNG........IHDR...X.........E......PLTE..................}..ONSLKP...\..x.._.....j..z..n..g..f..s......u..o......b.....v......d..)(-Z..111...i..`.....!!!]....).r..m....q.....X..c..V.....Q............[..Y..T....l.."!$.........217kjnf..gfi..M..S.....U..........\|\|~O.....EDH.....^^_...mmn...ppr...........xxx668Sv..................bacOpyTSU......GGK...@@B...W..........ttt[Z]...;<=..._..dde.........c..\...........r........k..Sz.hhh...Y.....{....^..&%(v...........w..Kjr......XWZ..1........U..h..l..Gag.................>RV...k..AX`JJK.......f..Q.....9Ue...Henfff...N..}..d.....s............l..h..p..N..Gv.7DH............K..........<_u.......j..Do.o..5M\......C.....a..}..Ah.......z..i..Z.....u...v].K......w.bf..b..q..g.T.....m}.h,.....&@n.Z9..g...........:5g...Q......7IDATx.....!..P..?m.r=.......Qg.$M.C..u..k....... ..M....}..n. ................HR.E\|......d.....Uc.#.34.......{+.-.9..'u..S..b..e.fSY..j.(..F........SS/(..AI".'F...n1mJ..n[)...K..J1...

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1159)
Category:	dropped
Size (bytes):	338712
Entropy (8bit):	5.61633684161754
Encrypted:	false
SSDEEP:	3072:o7Ay2hxnVV2GDbjq5ZfFMinfgbYeVjJ4gVp+6I7w7MyE9at9idYEH:okyo/2GHjq5ZfSbHVd42u7w7rEYtUSS
MD5:	91680884EED37B5ED4A53094296D6527
SHA1:	F3DF67A86E7B4C75F3C47F8E4EEF569CB2CE080F
SHA-256:	7B423B08E9EB0B19D9CE4B1E1F40B4EF0C00F40499FFFCE239FCA160BB07CFCF
SHA-512:	C3C0149DF32C9E40CF09DD0A37240935F26353A8402C6BCC6EDA3304FDE962A4E3D7B41F40CA3DE929AAF4F8B20F4812D97D2027E274284E84206E80F3BDECCD
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';var p;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var da=ca(this);function u(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}.function c(f,g){this.h=f;ba(this,"description",{configurable:!0,writable:!0,va

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1317
Entropy (8bit):	5.008137850957209
Encrypted:	false
SSDEEP:	24:2dk1WNwYO/oM37lB+xHXHi7vJKfkn/2XV1aNgPU0pw3BE0pw21mhN0205TYrET00:c0Idszc3mvJKMnQV1FU6w3C6w21mhNd8
MD5:	E488BF65115B931C164A51F0EDE6DB8C
SHA1:	B368AC27AF09965B52EBFA7E0C2AF00FE157EE5A
SHA-256:	E8910854B68E19E27C35AFD1CB19EF9244B2BC20E4EFA3322F2C0843913E6D6B
SHA-512:	C6FA602AB176085998D00784C150A07B31BFD164802699FD4859AE6D4E0DA64914F86950EDE736ECB8262BC15F048DA200A435EBE59C4AB63AFB914198AD1EE0
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/content/uploads/2023/06/Versicherung_Velo.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Ebene_1" data-name="Ebene 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100">. <defs>. <style>. .cls-1 {. stroke: #222;. stroke-linecap: round;. stroke-linejoin: round;. stroke-width: 3.2px;. }.. .cls-1, .cls-2 {. fill: none;. }.. .cls-2 {. stroke: #262626;. stroke-miterlimit: 10;. stroke-width: 3.2px;. }. </style>. </defs>. <circle class="cls-2" cx="50" cy="50" r="43.1"/>. <g>. <circle class="cls-1" cx="30.26" cy="52.95" r="10.23"/>. <path class="cls-1" d="m59.56,51.98c.57-5.62,5.59-9.71,11.21-9.14,5.62.57,9.71,5.59,9.14,11.21-.28,2.72-1.63,5.22-3.77,6.94"/>. <polyline class="cls-1" points="56.46 28.08 63.65 28.08 70.29 53.35"/>. <polyline class="cls-1" points="36.38 32.87 43.3 32.87 47.53 47.89"/>. <path class="cls-1" d="m52.3,48.67l13.27-11.45c-.52.13-20.96.56-20.96.56l-13.69,14.08h14.41"/>. <circle class="cls-1" c

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4345)
Category:	dropped
Size (bytes):	230274
Entropy (8bit):	5.54747851595575
Encrypted:	false
SSDEEP:	3072:Bccax8eulMYeiD6h/00elXol0FQbQwM87uY1YuklDNsEemtJeNTnVG8:NpmF2Dlq0kd7KvBsEemvexVd
MD5:	C029C782907E328DB7D89EE0B064FFE8
SHA1:	2C602C812334D7E61BA33A47CEA942F17FAD8561
SHA-256:	0BFC9E78B3C1248B80FA768A5EA6C650F3FE4B01FE398F6AC1EB973A26186C4A
SHA-512:	5CB77A9DCFDF7BE307964AFA1EE69BFC6C4061678C1D7A379845383CDB3B17DE7EC3D9FF59C3336AE511261377E12E2B003966B6CB4E968F2DCECF2E303CBBDE
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_dma","priority":1,"vtp_delegationMode":"OFF","vtp_dmaDefault":"GRANTED","tag_id":9},{"function":"__ogt_1p_data_v2","priority":1,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_reg

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2160 x 2160, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	268909
Entropy (8bit):	7.9411625902895375
Encrypted:	false
SSDEEP:	6144:DP95RgPcj9+b6D7qg9ZWD2U0HyAdM4vBZSJIAyRGSgyaqUy/Lx/:BPgEjs+v8DhayAdYJ1WaqUy/Ll
MD5:	38B6C19E38EC3D5ABA715CD04931E816
SHA1:	6CB5A29AF5C074C41748FEA23CE7226B4FCE034A
SHA-256:	BFEE9804D926EF98BDA80388EE2BD73821DBE8102825A193FBCD809347057DB7
SHA-512:	02741FED28263046600647233C596A3D8382BF960F18C4B0C9D44DDFC67F77DA17B15E1D03C21E78D2150779A952964333B382AC81AC4450E8C5A577A91BEAC1
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/c6763161-a85e-4d6f-9902-c9d4575334af/209d2df7-c2dd-4023-807a-b382cfc1c6a0/f8ae775d-1572-46f6-ab4d-b468dd952de8/MicrosoftTeams-image_(53).png
Preview:	.PNG........IHDR...p...p.....O.[i....pHYs...%...%.IR$... .IDATx...Kv.G.&.7uzN.cB.@....i.]E.UyS2zT.B.$.))/U...J..i........\.z..D.7.`an..<..t'.......................5........................8........&&.........01............p........LL.........`b...................................8........&&.........01............p........LL.........`b...................................8........&&.........01............p........LL.........`b...................................8........&&.........01............p........LL.........`b...................................8........&&.........01............p........LL.........`b...................................8........&&.........01............p........LL.........`b...................................8........&&.........01............p........LL.........`b...................................8........&&.........01............p........LL.........`b...................................8........&&.........01............p........LL.........`b.....................

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Picasa], baseline, precision 8, 68x68, components 3
Category:	dropped
Size (bytes):	1938
Entropy (8bit):	7.615373741278526
Encrypted:	false
SSDEEP:	48:UFy/L14NejBa5VIZL6BWVxikft+9SWUhi3:0y/L14N/5TwVxxE/N
MD5:	63A072673C66FA54AD13780FE4C52234
SHA1:	E90830D0C97D52F75886266351BAE35CEB744A96
SHA-256:	4FFC4D726691682AAFD30F9E05257BE48178C23DCC2DC3BADBB6953B4D3ECB94
SHA-512:	3F3A01762797375861468A0B41F88E40C060D636DB356F8B0DD466B6AD60125B66BDD37BF860672C730EAF458644BB2C977ACB7578FC3072F682BC6B94CCD482
Malicious:	false
Reputation:	low
Preview:	......JFIF.............Exif..II.......1...............Picasa..............................................................................................................................................D.D............................................,..............................!"..#13$ABQa...............................1.........................!1A.."Qa...2BRq.....#3............?..V.`..`..`..`..`..`...c.g6..X+.z,...h...WP..n.I.....H..../s...+)...l.%MZ..#....@T$.......EP.X.1.e...O..$n....dV...+..... ............2...NO.....u.9.v..IZ..<.$...^c..{r.BlX.%....8,.XK........Z.).&.e.[/....E<R..W..Ue.%.K.].p$fe.\|.Q......k.....Pw..i.UK3i..../[\|c.-.,.^..z.n.xC....%.\|yog\|..RYyJ..y...m.....t..=...@$.......].....ES.....e.\|.m\|oK2.{.i.....5Y.T..3M.Y./.$Q..f.Vq...a,,G.4.....b...D.)'.H.~L@F;....`..`..`..znt......(%k..Mto6r....X.........w..+%..?...s5;...U....Q.......q.).PI=I..+^.XW..]".b.Kh.$.....G!..".g..7.N.U.o.(...t..5...9.{.f/..q[..Z.Q.l......Z>..M..\|JwE}e.C{;..Z*.x..:

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 63496, version 1.0
Category:	downloaded
Size (bytes):	63496
Entropy (8bit):	7.996654613408155
Encrypted:	true
SSDEEP:	1536:HUyzJv8hCupUDyzKhxBQAZK8YwgkHuXLXv+QNGZ:HUydviUmzLyK8YcHuXLv+QNw
MD5:	94FC196EAC4286C5C82C3492EC6DE10B
SHA1:	274020734A2D8E19E3E71CC508CBBD57E386CFF1
SHA-256:	C5FBB89399A794FABE5AA2D19A6EF8EC6F7C9B2BB1C5E36DB55504F728B5248F
SHA-512:	BC3BA4D0DF7E46C6F3AE6E994626387356A0CA32368357E1549124454FAAF320345C661E9DD1E6D54595D0E5F42DAC7DBA02C46AE7FB8A2CA6879971CF5734C9
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/content/themes/twint/fonts/Roboto-Regular.woff2
Preview:	wOF2..............................................b...L....`....T..<.....$..s........6.$..8. .... ..I[sZ..U..n.H/.@.!@.....!j..............@w.............$_.....-.l...n..!0.........X..!.up.(:.C.K.a...v.Os\..9.X.0DV...)...!O.n....!Ht..q.pp....:.......vDt......(#..0..../V..b...:..t..N..../I....c......p......_.....'..d..!.......'..R.....;P.]....o...m...('...J..'..).J<.8?v../.$.\w!..FZ..h.n..K...`..5.Dj..~.'.h..,%.OB.........J..gX....\..a......Be./w/..W;...pb...T......'6....\|...%..;... ..+.../T..\|..1.J......3....L._<[.......=g(.hD..P%....B..h......-..%0....1UU...W<........}.y........R...hd.L...s.s.{.(........1ZG......`\|?QR#..b.XA\|.6...YEm.s...4..H..X...-.@M.l.Qj..#.^w..M....r]...}d..7-y. /.!d.Nmw.M..~..%b3...y... .K;.SM..x....{..1,...J,.FlT.F{.h.w^...2...S..M..F....x.......0...5....i.%/-..-@....O............V..ko..c..?...q.2 .P[..2v.,....k..@...l.0...z.F...d.%..S.......K..%...6.&..._z..-I........@Q.V"G.E..u.b..cT..J......r.}.}.^y...

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65241)
Category:	dropped
Size (bytes):	70264
Entropy (8bit):	5.264597962069758
Encrypted:	false
SSDEEP:	1536:AFUREURoe6xGT031BsGBjrg2l49E92BxjBxu/HG60QVRyPy4IQ47GK7:f6nsGBjRwBBuHzmvIQ47GK7
MD5:	AF73DD50819A5FC22DFF8B0ED2229D6C
SHA1:	8B1D5DBD114B9C92F4A20139E1ACA3196D94814B
SHA-256:	9261EFB3407E3A9096E4654750D8EFF6B3A663422F48845C7FBCC65034C340CF
SHA-512:	B0DCA576E87D7EAA5850AE4E61759C065786CDB6489D68FCC82240539EEBD5DA522BDB4FDA085FFD245808C8FE2ACB2516408EB774EF26B5F6015FC6737C0EA8
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.7.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-deprecated/ajax-event-alias,-effects,-effects/animatedSelector,-effects/Tween \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},m=ie.document,u={type:!0,src:!0,nonce:

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2389), with no line terminators
Category:	downloaded
Size (bytes):	2389
Entropy (8bit):	5.460612645519975
Encrypted:	false
SSDEEP:	48:iceVCx5dwIptwrh6FqjOtnOo/p+cYeLas1YXE2J2qr3Jj9u1M:+C8r8qUOeY9pXuqrz
MD5:	D2720FAAFB72899E02F79D574623F117
SHA1:	5B277FE9F04E0DAE1C0AAF08639D9F8B5AA24335
SHA-256:	B646A12A852578FE58BA5141FD36911F0C679C61690BC946ABCFD19CB53D9470
SHA-512:	0AD3BB4848A33F257D3AE497CBB9337AFA08880BB04CEE88CC6DCB6A4C921064D703E186341F14332679A118219A4C56AE68A07924E49FDE89292D00801E8EBB
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/content/themes/twint/assets/js/back-to-top-component.cfb7a90efd2c8009.js
Preview:	"use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[400],{8129:(t,s,l)=>{l.r(s),l.d(s,{default:()=>r});const e={props:{screenReaderText:{type:String,required:!1}},data:function(){return{lastScrollTop:0}},mounted:function(){var t=this;window.addEventListener("scroll",(function(){t.showOnScrollUp()}))},methods:{showOnScrollUp:function(){var t=window.scrollY\|\|window.scrollTop\|\|document.getElementsByTagName("html")[0].scrollTop;if(t<100)return this.$el.classList.remove("is-visible");Math.abs(this.lastScrollTop-t)>=5&&(t<this.lastScrollTop+5?this.$el.classList.add("is-visible"):this.$el.classList.remove("is-visible")),this.lastScrollTop=t}}};const r=(0,l(4486).A)(e,(function(){var t=this,s=t.$createElement,l=t._self._c\|\|s;return l("a",{staticClass:"btn-top",attrs:{href:"#top"}},[l("svg",{staticClass:"arrow",attrs:{height:"10",viewBox:"0 0 18 10",width:"18",xmlns:"http://www.w3.org/2000/svg"}},[l("path",{attrs:{d:"m1.61979958 9.7206603c-.37055156.3724529-.97133435.3724529-1.3418859

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	116116
Entropy (8bit):	7.994801792131328
Encrypted:	true
SSDEEP:	3072:O275bq81q+ZbhFHCJ+59Q22epmLxZr23z1a5g+AaUUmMsDCwl7f:15ZHZjCwi22P2zY5AajQCwlb
MD5:	F1BF79892A320A81C5143E38464E4DDD
SHA1:	FD5A9D1BAD2F6F0CEBA4D410B6BFFCFC398ED513
SHA-256:	78C4AB10D77D02C5EBBB23D639ABAA066B3B2FDA98C698CA5F202A12A71A7435
SHA-512:	D95DB3AEEFE5B3F4F192EC2C7520E7184A6CC6335FD7B61F4F1EC7E2EFDD445FD504989CC5AE97C85DCCE98284DD7EC091EEFE3A21DE45709B48D6563B66D360
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/content/uploads/2024/09/Webseite_Teaser-1.png
Preview:	RIFF....WEBPVP8L..../.A....9.m..{.....9dM&?.......4 ..JyI..V.m...bt.....v.[.G....H..w....h....3wx....B...HpI.&(J..,....YQ.(.....F...A....(...V..J....S..&..%...6.s.eu.b.@.\|...D.J..-.Wd.r..........+s.........Gh_@.T...H?y.....Z#....q......=..."...L..T...\.._.g4.....W..hd#"c.+] .h..l....X."K.P..M<...?{...L..t.8.TFF.f...]O.=J.....v.F...3..o....HR....F._.....^h.Q..<.. ..Ii@J.5.....jc.;4\...3....PI..L....;:.UD.T...........5Q..0.$J..s.uP...Uo.....wR\z...[..127...Co..I._.+r.7.L..J...a..cvyb.kj.N}......."..`k../.D....vW..q......#^....+Uf.'&..k.>..^.R........E..y.%Hv.<.HK+..!..8..^.u.y.o...V......r)._......t.qt_..<.Zp...x....k.?.\|.S...T].....U..!............8l.6..8...w.?ADL....y........x..,:v.Jb..Ub:I.........Y].3.z....pp..&.(.:...(..z..........E.P.8Yr..)....Q.B..#r...E.H&TQ ..(@R....j.Q..C3{.<9..Z...c.....>.}?......<OD.i...m0.w.&")... ...m..?i...8.vR\|...0..0&L. .!s......).... .BH...p....$$DtM.\.\...U*...nk.........<..........?,.

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/946203707?random=1727409754779&cv=11&fst=1727409754779&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465z876304729za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fnetflix%2F&hn=www.googleadservices.com&frm=0&tiba=Kaufe%20Netflix%20Guthaben%20direkt%20in%20der%20TWINT%20App%20%C2%BB%20TWINT&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4849), with no line terminators
Category:	dropped
Size (bytes):	4849
Entropy (8bit):	5.828052696501827
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUp81R6U:1DY0hf1bT47OIqWb108L6U
MD5:	A31C838425D46F0E9E75054189293533
SHA1:	17E57982728E5E2DFEAC90BA0158376D86926D15
SHA-256:	0B22A41B2A7A064AF2ADCA5EA01E801871184BFAF86424FA4D1AD559CF6D9B9F
SHA-512:	989A41D30133533845736D51F84431F2BD33238C4DB52DDC8BEC16830CBCACEC7C2EBA2819B60D1E6F146984701D687F9258DD1DA511DA80650D3F027809B788
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H1iY:B
MD5:	FC0C2C1DABAAD47E9326246C9A79BE6C
SHA1:	1C9D79C5E158B02A0C8D8122D1A9046D0E5F4C8F
SHA-256:	3C7F396070A3D52A06E09E040DC01A0479FAF6D6EF96A645B559BB1B00BFA342
SHA-512:	319FAAAB00DDF3A5BCF057B50D7156E8B5B82FB48CC630A454B710F07623C7D04F48D0FD6D0CDB4E7FE5C64C297E03ADE3AC23134EBF329AC46B7166426AED8F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkdAEu4Vw1pGRIFDXsS_EE=?alt=proto
Preview:	CgkKBw17EvxBGgA=

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	37971
Entropy (8bit):	5.621316324298963
Encrypted:	false
SSDEEP:	768:/ER1y7XGdhVe38q109cJlU/GTudGd4dZINzR80rb2xteCC:/ERDhgSSlU/UwoeOzR8vXC
MD5:	8A021CB15F883AD45FF134A03B798A3D
SHA1:	82FBDBCBA85D2890C4B33087A5DAFC514AFD33E3
SHA-256:	DD8E4079BAB8A2542C35DD2919E6B3E86090EC13AC24960BF2801E4489977281
SHA-512:	14EE46DAA9FFED98D88511D58F085E921B0AF9C36C4BB7D33492FACDB804D7044274F5806A233A5B48BB1A32AAAFA9237891756C3CB5D54D359B106675131DCA
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/baf1656f-0c9f-4cd8-83fe-a5ce8d8c9eed/01921dfd-0535-7c88-9558-f9c8250e558c/de.json
Preview:	{"DomainData":{"pccloseButtonType":"Icon","pclifeSpanYr":"Jahr","pclifeSpanYrs":"Jahre","pclifeSpanSecs":"Einige Sekunden","pclifeSpanWk":"Woche","pclifeSpanWks":"Wochen","pccontinueWithoutAcceptText":"Fortfahren ohne Akzeptieren","MainText":"Datenschutz-Pr.ferenz-Center","MainInfoText":"Wenn Sie eine Website besuchen, kann diese Informationen .ber Ihren Browser abrufen oder speichern. Dies geschieht meist in Form von Cookies. Hierbei kann es sich um Informationen .ber Sie, Ihre Einstellungen oder Ihr Ger.t handeln. Meist werden die Informationen verwendet, um die erwartungsgem.sse Funktion der Website zu gew.hrleisten. Durch diese Informationen werden Sie normalerweise nicht direkt identifiziert. Dadurch kann Ihnen aber ein personalisierteres Web-Erlebnis geboten werden. Da wir Ihr Recht auf Datenschutz respektieren, k.nnen Sie sich entscheiden, bestimmte Arten von Cookies nicht zulassen. Klicken Sie auf die verschiedenen Kategorie.berschriften, um mehr zu erfahren und unsere

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (762), with no line terminators
Category:	downloaded
Size (bytes):	762
Entropy (8bit):	5.608204598641639
Encrypted:	false
SSDEEP:	12:hnMQbwuOaxyCkv4AEHaNtRf10XdzTiUMGT2IWaEu18DIkQBW+RXn2z/:hMiRO9nbf0NP8G9PX8CpRX2z/
MD5:	18CD099998B9957CA04B93BF655290CC
SHA1:	B787B66AFD212396315D47515617787E2A15E1EA
SHA-256:	72A6A75F7D1B9859C3804AE84F80DED8B15FDA1E15C8E545DC70B51FD5F025A6
SHA-512:	F180DECAF6FC616B8915FB2F3C2A7CF8A92CE7A888F322BD10BC51E382E6935481713333040441ED203A213ABAE07D0C23CEED7724336F93BD4CEA197ECEC7E8
Malicious:	false
Reputation:	low
URL:	https://9818618.fls.doubleclick.net/activityi;dc_pre=CMGggOKe4ogDFT2Igwcdeksm6g;src=9818618;type=twint000;cat=twint0;ord=2448675382325;npa=0;auiddc=1403402495.1727409735;ps=1;pcor=867644488;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fgoogle-play%2F?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CMGggOKe4ogDFT2Igwcdeksm6g;src=9818618;type=twint000;cat=twint0;ord=2448675382325;npa=0;auiddc=*;ps=1;pcor=867644488;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fgoogle-play%2F"/></body></html>

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4345)
Category:	downloaded
Size (bytes):	222549
Entropy (8bit):	5.5446073646550555
Encrypted:	false
SSDEEP:	3072:o9ax8eulMYeHD6+/008lvol0FQbQwM87uY1YuklDNsEemtJeNynd5H:SpmFjcli0kd7KvBsEemveMdN
MD5:	FB79B3CE6F22BC01BCB0774E541E437C
SHA1:	976A6935E32F6B21C446825C9008E18D3FB660E9
SHA-256:	DE7FDA8B193382069D9B238614099C12B79850CEA31F559ECA282AE839C3804F
SHA-512:	139AE33882B3AF72072F6D004EC600C18D6FF73C1431B4DADD489E5AF8C6E9A914EEA07A1559869221C6FD0511A273584887B80AB23F3CF53D9AA5DC8546679B
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=DC-9818618&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__rep","vtp_containerId":"DC-9818618","vtp_remoteConfig":["map"],"tag_id":1},{"function":"__ogt_1p_data_v2","priority":0,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"",

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (4965)
Category:	downloaded
Size (bytes):	68150
Entropy (8bit):	5.457153989778944
Encrypted:	false
SSDEEP:	1536:+I3pY8Wmr43+2ibxPMmE+xdNgKpJbpYHeDtNKjcqMaGtkSFnHZb0PaLJRhDiL6DK:+I3pY8WmLJMmE+xdNgKpJbpYcKGtkSF8
MD5:	D99D1EE1C13C0FF739A277A4E6FBCFE1
SHA1:	6CEF490A405D7F7C1D267A42F2300E78390F19E3
SHA-256:	E76064F1DF9F7076D5B3DF805686CA65DDDE53E2FADDBF8B38DF7A9579B1BB0F
SHA-512:	DA14B7E8E7AA20ED696D027667ABD669335DD5D77F07B81B09CB51A21746E69B9E14569BD9EA672F498FBF17C6B2F742EDF663A5254D6153C2925D51F7FD8DD3
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/privatkunden/funktionen/digitale-gutscheine/google-play/
Preview:	<!DOCTYPE html>.<html lang="de-CH">.<head>.<meta charset="UTF-8">.<meta http-equiv="X-UA-Compatible" content="IE=edge">.<title>Kaufe Google Play Guthaben direkt in der TWINT App » TWINT</title>.<meta name="viewport" content="width=device-width, initial-scale=1.0">.<script type="text/javascript" src="https://cdn.cookielaw.org/consent/baf1656f-0c9f-4cd8-83fe-a5ce8d8c9eed/OtAutoBlock.js"></script>.<script src="https://cdn.cookielaw.org/scripttemplates/otSDKStub.js" type="text/javascript" data-document-language="true" charset="UTF-8" data-domain-script="baf1656f-0c9f-4cd8-83fe-a5ce8d8c9eed"></script>.<script type="text/javascript">. function OptanonWrapper() { }. </script>.<script>. // Define dataLayer and the gtag function.. window.dataLayer = window.dataLayer \|\| [];. function gtag(){dataLayer.push(arguments);}.. // Default ad_storage to 'denied'.. gtag('consent', 'default', {. ad_storage: 'denied',.

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	57
Entropy (8bit):	4.177091059645377
Encrypted:	false
SSDEEP:	3:YGKXdZOJ9WHEseRx9RY:YGK3w0ej9+
MD5:	471AD8674B65AE0302F71602143789CA
SHA1:	8CBB927FFA584A95AF053F00149B47D8295719F3
SHA-256:	1E3F60D29DE08E299AA39AADEE4C5C47414C0E6108298DEB9EC78D14D62ED238
SHA-512:	717B067945C9B8D6FED624F98C70D1E534D76801934DB5975CC13EBD86B1F1B592FB4E7F377E996893B4A7E78CD111044F49990A427BC5C42F2EBCE6FA6BF7A9
Malicious:	false
Reputation:	low
URL:	https://bootstrap.smartsuppchat.com/widget/2c2a729197af9ea70bef8e5db0c0d79373d6af7d.json
Preview:	{"code":"account_blocked","message":"Account is blocked"}

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=5853074&time=1727409759385&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2F
Preview:	{}

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3983
Entropy (8bit):	4.778303013354589
Encrypted:	false
SSDEEP:	48:BAlwBFxiSLEhBGaUODn6gwFwIIOYQupHPFZwb0aI3Gq2XxkWpI2NMYs4a2+rhhjZ:elsvwfs0X3GbKfCsh7rPjZF+jdFyOBg
MD5:	0741B2B74A522802C1010A22F4665082
SHA1:	F64C9FE968A6FBD769FE5B80B98E426BCF58D82B
SHA-256:	E06B87DBCE97B5E510613AB3B4711C3FB0C16483317F3EE58A4A9C6B20D0C2F2
SHA-512:	89D7ED27FF8503463B291D33FC00FB1C55E08E61C46F51F18267448D7B0567886AB778AAAA934952C88C4EE2ADC7DBCE3A3787D1C3CC44AE77B0E66B3FB5E095
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/content/themes/twint/images/twint-logo.svg
Preview:	<svg height="58" viewBox="0 0 153 58" width="153" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><radialGradient id="a" cx="22.357%" cy="8.811%" gradientTransform="matrix(1 0 0 .91756 0 .007)" r="113.202%"><stop offset="0" stop-color="#fc0"/><stop offset=".09157" stop-color="#ffc800"/><stop offset=".1739" stop-color="#ffbd00"/><stop offset=".2528" stop-color="#ffab00"/><stop offset=".3295" stop-color="#ff9100"/><stop offset=".4046" stop-color="#ff7000"/><stop offset=".4786" stop-color="#ff4700"/><stop offset=".5503" stop-color="#ff1800"/><stop offset=".5822" stop-color="#f00"/><stop offset="1" stop-color="#f00"/></radialGradient><radialGradient id="b" cx="2.552%" cy="14.432%" gradientTransform="matrix(1 0 0 .68117 0 .046)" r="139.457%"><stop offset="0" stop-color="#00b4e6"/><stop offset=".201" stop-color="#00b0e3"/><stop offset=".3898" stop-color="#01a5db"/><stop offset=".5737" stop-color="#0292cd"/><stop offset=".7546" stop-color="#0377ba"/><stop offset=

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1143)
Category:	downloaded
Size (bytes):	4272
Entropy (8bit):	5.407649241930215
Encrypted:	false
SSDEEP:	96:bVcC0LhyRs71268NYZOAx/rfuNfnAZe5PwGNHW:B3qhpRByNPx54GN2
MD5:	B427175FA1078775EB792756E7B6D1E7
SHA1:	4C55C0233D3D9002B3449C025F97821F8BB8900D
SHA-256:	EE147E859AD0F09AA50367974E38AB53E7C7054C4A51D400A7F45B0EB251454F
SHA-512:	AF8D384188363378BC99C2E51523E74E1D18BA77D51BFF7647A377A117499421F9E94477E09907925E46DAD0A908B799A616D0B4855FFFF064BA6350815063D3
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var l=function(){var a=h,b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},m=this\|\|self,n=/^[\w+/_-]+[=]{0,2}$/,p=null,q=function(a){return(a=a.querySelector&&a.querySelector("script[nonce]"))&&(a=a.nonce\|\|a.getAttribute("nonce"))&&n.test(a)?a:""},r=function(a,b){function e(){}e.prototype=b.prototype;a.i=b.prototype;a.prototype=new e;a.prototype.constructor=a;a.h=function(c,g,k){for(var f=Array(arguments.length-2),d=2;d<arguments.length;d++)f[d-2]=arguments[d];.return b.prototype[g].apply(c,f)}},t=function(a){return a};function u(a){if(Error.captureStackTrace)Error.captureStackTrace(this,u);else{var b=Error().stack;b&&(this.stack=b)}a&&(this.message=String(a))}r(u,Error);u.prototype.name="CustomError";var v=function(a,b){a=a.split("%s");for(var e="",c=a.length-1,g=0;g<c;g++)e+=a[g]+(g<b.length?b[g]:"%s");u.call(this,e+a[c])};r(v,u);v.prototype.name="Asse

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	12666
Entropy (8bit):	7.977399947196566
Encrypted:	false
SSDEEP:	384:q4yoqvOMDGGe4LteFQp8MrvLDtjxFoS0hwh:fqGWe6teFQpNzDveS0s
MD5:	7D75C438CBECAA6AF83F1B0A7D78C9F8
SHA1:	29CA7353855BC32A8D065DE699269B7981B911CB
SHA-256:	313E168D819245BAEC90EF1B775E5BB56F00FC011F7D3FAB58EBC71EAB3B0CDE
SHA-512:	793DA49C875C202D45C1E446C3EA8CF48143D1E54C498136E6DDC1AA236109B55D5D2BB149152C261C3FF379B177DFC336A3397CA7820112FBC4690459481C35
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/content/uploads/2022/05/Versicherungen_inkl_Velo@2x-600x400.png
Preview:	RIFFr1..WEBPVP8Le1../W.c..0h.HR....w."b...1a#ehC..B..b.bh..=.m..m.f.t.m.l...b;t...m.q......6.>...\....Z...m..2.b+...H..f.<..;.m.f0...F#.H#..F...!.t..!."."..F(.(.FQ..B.iD..B."J.!..0.!... ...6.mK...."./........L:...b..r......d......g..$G..0..0V.x...'.{......T.7..,t..r..@.CK...%.jDP.A".u.q.BAb.)!Z{."..[...)j.u...I..."[.7......OlI......;x.`........w.a.g..h........@.....\.6.....h&....J...,..6..,...k.F..Y%N.-[...ce..m.6...Q.....0.4......!\Z.,)..<$.$#B...I.4:.(..d.`2.%W..h.S~.k8"......S\.4...b...J(.G..D..I.,!...a.0.kB..I..x..],>.....[..`s8X.Q6.H.........dp'.C....$;Chkfl..`^.6.....#a.]..Y.I..R.2..h..T^.dx....J.`C.{.!&....dlR.k...5.....9.[....&w.u.E.U0..\...k.>z....>..S%H..G.H.@._H.t.t.B.%j_s6b.d.......PZ..!...0..N.Y..0.j3U4.0W.....hK..N.v.(..u..Y....B..Cm....&W91.jL.-6_GJ.bB.2.f.g.E.......vJ.Y.D.D.Tl0k...C...."..U..H..k.a.kTb.T{.2t..>&..`..:..`3.i.a.E.1..r..". 6-F.T..p.._[t.J...j...'.E......,*&...t....g.0..%.^Go...wP....EH\|..z...4....4..m.ah.t.

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CMGggOKe4ogDFT2Igwcdeksm6g;src=9818618;type=twint000;cat=twint0;ord=2448675382325;npa=0;auiddc=*;ps=1;pcor=867644488;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fgoogle-play%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4584
Entropy (8bit):	4.919067379495034
Encrypted:	false
SSDEEP:	96:npyIb40w0+aOiJ5GKxYa6AySNRzIvjJ9jL1jJjFZZ2uRJj88A:F20hOiJf6vSNhILnZJpPJpA
MD5:	7A56CA43FC5D48FD879250F4E9A19911
SHA1:	5F79CC2A316C099E12DE5D2438F75D77BCC6EAE2
SHA-256:	00158C3108D8A3EA1AFD7CF81823635B2199EFEDC64ACA10F7663945B6E8EAD3
SHA-512:	882F5B34FBD1C9CBA81B3794B253D060EEE09DC9CBF57EE1D992B01180BFA71EC0627E36A47EEDB9E0F153E105AE93EC7091C9169C64A9A6651139BAC85CF938
Malicious:	false
Reputation:	low
Preview:	{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202307.1.0","OptanonDataJSON":"baf1656f-0c9f-4cd8-83fe-a5ce8d8c9eed","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"01921dfd-0535-7c88-9558-f9c8250e558c","Name":"Global Audience","Countries":["pr","ps","pw","py","qa","ad","ae","af","ag","ai","al","am","ao","aq","ar","as","au","aw","az","ba","bb","rs","bd","ru","bf","rw","bh","bi","bj","bl","bm","bn","bo","sa","bq","sb","br","sc","sd","bs","bt","bv","sg","bw","sh","sj","by","bz","sl","sn","so","ca","sr","ss","cc","cd","st","sv","cf","cg","sx","ch","sy","ci","sz","ck","cl","cm","cn","co","cr","tc","td","cu","tf","cv","tg","th","cw","cx","tj","tk","tl","tm","tn","to","tr","tt","tv","tw","d

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17513)
Category:	dropped
Size (bytes):	17586
Entropy (8bit):	5.173781360332769
Encrypted:	false
SSDEEP:	384:o3ryMUOikMsxTYdvOIlfESQDgdvOnrI0vCSI/a4mUpK:o3ryMUTkekc8BDgkvJeaTN
MD5:	ACE8D66332E7C00BD36B860C680CA922
SHA1:	C584514B5A08E6630DA717699F6DE419BE8BFB34
SHA-256:	14512CB82DFB1E86304DD3EBD041C994E3B8FC1F11537691970F4FE0B556FF3E
SHA-512:	60501DABD767305436E6F02572DDF4D29FADE41AD793520C3303DACB8A60024A06E85294677D34921E04781318D6261E1C9418641AB849A0F6D4B065163897C0
Malicious:	false
Reputation:	low
Preview:	/! For license information please see loader.template.js.LICENSE.txt /.(()=>{var t={228:t=>{t.exports=function(){var t=!1;-1!==navigator.appVersion.indexOf("MSIE 10")&&(t=!0);var e,n=[],r="object"==typeof document&&document,o=t?r.documentElement.doScroll("left"):r.documentElement.doScroll,i="DOMContentLoaded",s=r&&(o?/^loaded\|^c/:/^loaded\|^i\|^c/).test(r.readyState);return!s&&r&&r.addEventListener(i,e=function(){for(r.removeEventListener(i,e),s=1;e=n.shift();)e()}),function(t){s?setTimeout(t,0):n.push(t)}}()},412:(t,e,n)=>{"use strict";n.r(e);const r=function(t){var e=this.constructor;return this.then((function(n){return e.resolve(t()).then((function(){return n}))}),(function(n){return e.resolve(t()).then((function(){return e.reject(n)}))}))},o=function(t){return new this((function(e,n){if(!t\|\|void 0===t.length)return n(new TypeError(typeof t+" "+t+" is not iterable(cannot read property Symbol(Symbol.iterator))"));var r=Array.prototype.slice.call(t);if(0===r.length)return e([]);var o=

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	56
Entropy (8bit):	4.746924958035209
Encrypted:	false
SSDEEP:	3:6E+1hyp0Kthez1Gc/:7+1hEBqMc/
MD5:	CE2447190D5C02E6642301DA361B2B49
SHA1:	8DF5019BFAE9DC7F87369BF6C59DD43F7F39F163
SHA-256:	CC25248D2B54BA4755E088B11B854CCB4A5301D2CBD859EACAC0A6694BEF67BD
SHA-512:	563C1E21B66A81E96A58CFD277D766292BD4A49DD6FEC1F5C10BFCF32861DB11B3B4F0C76E92E610C43C99E88D1F9B872C47ABE6C6D0423CC9D4192F0B9AB6AA
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwnzcGoafWeoZBIFDU98_AISBQ2BkPF8EhAJ2zJdtKy3V9kSBQ17EvxBEhAJ_CDxs1gSwr0SBQ2lkzYk?alt=proto
Preview:	ChIKBw1PfPwCGgAKBw2BkPF8GgAKCQoHDXsS/EEaAAoJCgcNpZM2JBoA

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1600
Entropy (8bit):	7.859432798666668
Encrypted:	false
SSDEEP:	24:8CQKFrUlfi8ZDnvI2CQ1V8NfE+aUBGvxES7w5wmsnZXq5CbR8beckX3PpwBbn:8CQQocgvaq+fMaS05wmsZa5CabCX3PWb
MD5:	81404715B177B56C64C1DA7A639456B7
SHA1:	333560E0F7317F948CF29506CBADA29E08CD8093
SHA-256:	033D1A0D8CBE5D5A0F52AA4E0205D9EE91EA1502C024442860E3E755FBD4826E
SHA-512:	C32FB28E71A4B959116CE7ED31C480E9AB3EF5E6BDE5347BF77E89302BFD2E8A769A4995950B45326404040794E7A34CE8315499297BA88A3BA585DC453CE032
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/content/uploads/2019/09/Icon_Checkmarrk-150x150.png
Preview:	RIFF8...WEBPVP8L,.../.@%.. In.I..?{.....kw."......_.e.V...um.2.nYX.Aw.N:..;...{.N.x+0.`X...232...#R..!8...!wa........@....o....&...c.U0.6i.mD...8J ..S....EJl..1..pVacB.5.+.....\i,..f>...v:....TZ.#.].d..T\..D1..._......5..-..M.X..oy.8..X.Pv..cK....\g......Q..U.m....~..4.G..............+..}r).4.).h./../....G....... ,!.q...Vh...7'.B.R@[f..1...].'....i..O.&5...an@.u.".F..w.mi.........Q..8.r.89B..{<.H.5.......S.$o..U.!.[.....H.........S.....1...Iw".Y.m.5.G..4>.#L>...C7&NS...Q...d.&....l...=..`..K9.....m.u...>.../H.QN.m..Cn@..o..Y@{..{e.{.`...4.0b..m.....j.1.........@.Tp.mI^L..Lr.....1....w..7...QsV.6.........b@E-.R..5...j$..C.P;..J...'...%..$q6u..o..W&E7.(.Et.x.k\|.mIV;.U..{.U.[.\|...g....f...~.UD<.m/.UN;#...m..q.1{." nv..)(`l..S.y.m.%...G..\..7s......h....6y.....V-.Xd..#jYF.y..a..qV.O..o..syMGa..>hC. ..0.8....X=hS..=..8.1.t.[Z....6.o.......?..V...xjG\.xQ...4...Q4../.z...B.T..k.n...."V..P.R.....v.!.G.....Q4..Gf.L.q.m>.]*.q.

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.180365114215879
Encrypted:	false
SSDEEP:	3:YGKhIWANmq6LFHYn:YGKhCNU4
MD5:	64E1C1EB9F4CAF0CF0E7484D7AFCEDB9
SHA1:	69E40D8C48A866A84046FD8BD17AF47FF02B79A4
SHA-256:	8ACAC48BC106C4EAE580C08071597F9DAFAB96D959DEFF65BEC44514DA907B1D
SHA-512:	F109767D57E85127D18B1AD2030A48C0EAD69F79A15C4008712407B1F62691654B74C9D6E225FFDC4A922847EABB928DC7520A656C7081B585124CF678B54E59
Malicious:	false
Reputation:	low
Preview:	{"code":1,"message":"Session ID unknown"}

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4839), with no line terminators
Category:	downloaded
Size (bytes):	4839
Entropy (8bit):	5.817124013568807
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUOa85R6Sd:1DY0hf1bT47OIqWb1/a8P6A
MD5:	52522EC1D5DE091D66E91430032CB2FD
SHA1:	44683E0121667C7686B9C588A48C235CD7FE717F
SHA-256:	76E69D6705A6EF79CDCBE0D075F5F5EA1BC3E04956B35EF6BBBB19CD7DEE8A59
SHA-512:	61D2FB31D7D790EAA808130DDC05469B345A6A50E7F94E83A8E2BABD9A7C9F5D85D0363949AC2305224D4336DAD77A20B60198779E56F6DF46C90C424A0144EB
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/946203707/?random=1727409754803&cv=11&fst=1727409754803&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fnetflix%2F&hn=www.googleadservices.com&frm=0&tiba=Kaufe%20Netflix%20Guthaben%20direkt%20in%20der%20TWINT%20App%20%C2%BB%20TWINT&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 68 x 28, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1597
Entropy (8bit):	7.848005717819246
Encrypted:	false
SSDEEP:	24:NJEhoArtzCXsk4UHUCtVVn1DL7v157z9iVBgOUy1ko/bbCVjwOoj84z4g:NyhocFd/U0kTLdTkUy68bbiU8K7
MD5:	C4A931D597DECD2553AAC6634B766CF2
SHA1:	6EC84FB4A2745B4B71520241BE77DB1FD1013830
SHA-256:	F56402B127698DB4B4DC611A97A6F081D04C4691C60522C5912D189E37C94A9E
SHA-512:	4932E0F7F38085A7C52539BDD5C7F470740E560A4471BEA30D12EF9E3EFE77F6BBFAC28D26C62A245C43D98EBF74C824B2B414843080A27EDF1563A5F874AC84
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_68x28dp.png
Preview:	.PNG........IHDR...D............(....IDATX..Y]l.U....V#../..R......vfv.b...j.?/<@...!.FW....!..X.B...C.b....K.y.?..`...v;3.....3wvg....&...d2.g...s...[.Zj.7.'t./.wl<.]. .TY+..(].E...WJ.z.............<..7...-/.#......ZQ.I.a.H...\.....n.b.O!.......S...>.5+...W.s{..!m.Oy...k.r.5....4.>..j.....=..Z~...yc+k..U..Q..e..:8/@ ....p{......P.#u..0.n.p.DQ...O.,Y=.g.0.W.........>W..RM.'v.?...-,0..y..c..............@..........<cf.5`k..XF..6.y,......y#..4..4.[`........\.......SD.-(...GwM8.U....2.[..._.\|...n.....t.&;..z_...4~w.....W.-..W...wf.9e...+..o* Y...r.@......l.A.N...o..T.....7.SJ96..c.V#.{..h.....].....q._u.cg.B.Z..ol4,>E....j........k....$...r.....s.r'h.o.......`...}.!.ze......v..`.2.?.....+J..:..Q..w....L8.s..{<y:.x. .K...........,..T.!...Mi......]...MM.......5k..,......C..)..L.q.K]W.3...d.~R..BNG....i.&eN...l..M.a.]..".2@\|4...IC......6.=. ....Dp...>..K4Q.;...S........#.2.~\`....m..H..j.b3...62...QbPKQe..L9P. z4p.$..(o.4.^..~f.....*

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x480, components 3
Category:	downloaded
Size (bytes):	13864
Entropy (8bit):	7.430392222485379
Encrypted:	false
SSDEEP:	192:VRRRttQbysQ9qCxUf1Rufr0cOKs2Zyj1YWhmPEx2XG7c4CbMJeZKKKKN:VRRRkbysgqgU9RNKVZyxYWoVf4CbMgL
MD5:	FC1B9FF80F78985FEFF0D7EEF398498F
SHA1:	8B789D1690CEBF5E6C43A37A130C3763479EDC31
SHA-256:	23FE7DC7F470FC2E1BC310375F819532943B021CBFA879ECE1212D98B31A4E3A
SHA-512:	9BC861D3466D73F5F42A1E6FA2A240B89CC9B0A53D0DA145A857DE747CF6E93A4E74ACD1F1BBFA7C9962D933A17B2F8BFB2865506B2584C251256B92E89BFB33
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/rrdmkY1xtjg/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGEsgZShDMA8=&rs=AOn4CLD0Sj8pWlWnPKIRxnXk58RdyoG3-g
Preview:	......JFIF...................................................... ...(5 //(.'9=1+0"+0...........3.. 2.&&(&2&&&&-&'(&-&(22(&''&&&'&&&&&&23&22&-&&&&&/..........."........................................Z...........................!f...."1AQas...245q....#3BSTr......RUb...D......$CVc....t.%de..............................,.....................Q....!12.3Aa.."q..#..............?.....................................................................................................................................................................................................................................................A..V....&..!........ .I.m.A..V..M......}$.. .I.m.&.M.yG.c.>.j.a.}$..k&.......I5m..>.j.a..~.Q.X......d.I5m....o(.,y..M[l2.....rmd..p.<..&.....M[l96.o..8..A..V....&....Y7..... .I.m.A..V..M......}$.. .I.m.&.M.yG.c.>.j.a.}$..k&.......I5m..>.j.a..~.Q.X......d.I5m....o(.,y..M[l2.....rmd..p.<..&.....M[l96.o..8..A..V....&....Y7..... .I.m.A..V..M......}$.. .I.m

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 63636, version 1.0
Category:	downloaded
Size (bytes):	63636
Entropy (8bit):	7.996972259181246
Encrypted:	true
SSDEEP:	1536:5pHdNwefcPsCJDte6cLTMr1eKsBFzLPKSecmOSLW7t1oV2OQS:fHdNwefcUCPe5Qr0KsBp2JWtyV2I
MD5:	2BF9AC0C4BC55DB3E0696F717D95A097
SHA1:	B228E365867EE1930B33E01CD2D9E10F799D1C40
SHA-256:	8ED8B1167EC0B84E9724010180A1C4E7568B442538CF330C0A23F308C120AFD5
SHA-512:	490305DC45A58CE422077816C40343815F1F7508DDB59C8123918EA3C8AA6FF67E9FDE65F1D2FBFAAE92C7488B2F2DA082228F8497C851BA0CB8662FE6C64BA1
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/content/themes/twint/fonts/Roboto-Bold.woff2
Preview:	wOF2...................,..........................b........`....H..<........E........6.$..8. .... ..)[.T....f.........mfV.KX".[.cg..;.4....m)?4..$..w.f.......J&...6..6x..(..Uj.....yD...v.....N...S-..1...}..i..9R>.tT...'$.8a.Y.E9-.......#..jD.3.X.\.aB.M./....Xt.Y.Fg.....6. ..\|K.;.}oP....w...)..)-.I..p..Clu.....K..r>K...Il..{..7.....CBR....[.......4Fe.@Kq.0JNf..)I..ig7...w.u.)..Yz...^.....(...$..,.+p..N}W....B..Y.....+...q'._P.....p.p.cQ.82f.I..x].yRS.m.N..K..H....Y........(.AL;..+.].).u..D.^..Y...'.,.XB"..o..o...)r.......+.:A.2..!...{.z....S.ED.G.D..;j...6!+..K.O.s..0K"..R...)%..B&.}2.L...$(CP..p.<?.?........Na.5D..H..#..1;.W.._.L....I#.....&.d.x...y...n.5.....!.'.C.m....0.....y.`_..^....x..Y..J.V.(H>DNG..<?..3......:4....e.D..F.@@r...f.........H.........X....f.@..w..o...6n..)a"&.`a.R].kE0...vk...4{.\|..7../d..C..9...g.vc..y]..J.e...*)..gs#7K3.b....m......h.....A...M...7o.\.rMUC...@H.......o.].!...Z.h..!......8.....S..N(pZ.t.``.m...q".D.pBD.T).10i.F.....

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	41
Entropy (8bit):	4.180365114215879
Encrypted:	false
SSDEEP:	3:YGKhIWANmq6LFHYn:YGKhCNU4
MD5:	64E1C1EB9F4CAF0CF0E7484D7AFCEDB9
SHA1:	69E40D8C48A866A84046FD8BD17AF47FF02B79A4
SHA-256:	8ACAC48BC106C4EAE580C08071597F9DAFAB96D959DEFF65BEC44514DA907B1D
SHA-512:	F109767D57E85127D18B1AD2030A48C0EAD69F79A15C4008712407B1F62691654B74C9D6E225FFDC4A922847EABB928DC7520A656C7081B585124CF678B54E59
Malicious:	false
Reputation:	low
URL:	https://datechf.cc/socket.io/?EIO=4&transport=polling&t=P8nf6ny&sid=9y9cewKasiXpUlx9ADHm
Preview:	{"code":1,"message":"Session ID unknown"}

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3537)
Category:	downloaded
Size (bytes):	52603
Entropy (8bit):	5.316331138717284
Encrypted:	false
SSDEEP:	1536:yYrF+dXpn0e+99D7FPUzHhbtjFnmFRbdwWRI32nB7PXAlnuhPisfq3ECoe5EzpGS:yYrF+d5n0e+99DJPUzHhbtjFnmFRbdwM
MD5:	F0A9F2F65F95B61810777606051EE17D
SHA1:	872BF131CB4BEFD0242339F072F2F9B9FBF8019F
SHA-256:	9CDF2602AC04F7E2BED582D4299C73D464FC4AB069E3AD5A20EE2B6635A015B8
SHA-512:	6823914507BA31E0F61B95CC53F09543C3C14E5530E9EF1B00338FBBD7C25D2E398F5F628DF4ED25D6FF88E0F8BEE506EFE62BA704778BA7CFF09AEC9579D9F0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/eureka/clank/117/cast_sender.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var f,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},h="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},ca=ba(this),da=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&h(c,a,{configurable:!0,writable:!0,value:b})}};.da("Symbol",function(a){if(a)return a;var b=function(g,k){this.g=g;h(this,"description",{configurable:!0,writable:!0,value:k})};b.prototype.toStri

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22367), with no line terminators
Category:	downloaded
Size (bytes):	22367
Entropy (8bit):	5.542626302580642
Encrypted:	false
SSDEEP:	384:gM78SUevMTjuFzouWaqWAlpTpdHjPtcnG:p7oevMX5HjPwG
MD5:	B0B46B807EEE39AF0AAD8F5FEFC9B3A2
SHA1:	0FB04F15599BC0844063A6AB776C86E73CB9FBFC
SHA-256:	71CA2652E2B3FFD3C0EC966958604714CE6C7AF01D961B44ADC438518EB58CB3
SHA-512:	4EEC49904A5480940124A1C1B9C9DAE764EBB115829CBCE4356E66A1D7F077DFD204A4634B0622FFB14CC6EBFF7062D7F30502BF0BC7D998A1A55FC8C876DA8E
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.26tY-h6gH9w.L.W.O/am=QDA/d=0/rs=AN8SPfrycRFEIstD_ODMax_0dvnH_HM3_Q/m=el_main_css
Preview:	.VIpgJd-ZVi9od-ORHb-OEVmcd{left:0;top:0;height:39px;width:100%;z-index:10000001;position:fixed;border:none;border-bottom:1px solid #6B90DA;margin:0;box-shadow:0 0 8px 1px #999}.VIpgJd-ZVi9od-xl07Ob-OEVmcd{z-index:10000002;border:none;position:fixed;box-shadow:0 3px 8px 2px #999}.VIpgJd-ZVi9od-SmfZ-OEVmcd{z-index:10000000;border:none;margin:0}.goog-te-gadget{font-family:arial;font-size:11px;color:#666;white-space:nowrap}.goog-te-gadget img{vertical-align:middle;border:none}.goog-te-gadget-simple{background-color:#FFF;border-left:1px solid #D5D5D5;border-top:1px solid #9B9B9B;border-bottom:1px solid #E8E8E8;border-right:1px solid #D5D5D5;font-size:10pt;display:inline-block;padding-top:1px;padding-bottom:2px;cursor:pointer}.goog-te-gadget-icon{margin-left:2px;margin-right:2px;width:19px;height:19px;border:none;vertical-align:middle}.goog-te-combo{margin-left:4px;margin-right:4px;vertical-align:baseline}.goog-te-gadget .goog-te-combo{margin:4px 0}.VIpgJd-ZVi9od-l4eHX-hSRGPd,.VIpgJd-ZVi9od-

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47261)
Category:	dropped
Size (bytes):	47262
Entropy (8bit):	5.3974731018213795
Encrypted:	false
SSDEEP:	768:+CWIsQ06lHHhw+r9sygguSwodvdq3VE3XYdze9Ddre9eom1CQWpKexThupcubvCR:uQflHBN9sygg1WViPreEM
MD5:	E07E7ED6F75A7D48B3DF3C153EB687EB
SHA1:	4601D83C67CC128D1E75D3E035FB8A3BDFA1EE34
SHA-256:	96BD1C81D59D6AC2EC9F8EBE4937A315E85443667C5728A7CD9053848DD8D3D7
SHA-512:	A0BAF8B8DF121DC9563C5C2E7B6EEE00923A1E684A6C57E3F2A4C73E0D6DD59D7E9952DF5E3CFFFB08195C8475B6ED261769AFB5581F4AB0C0A4CC342EC577C9
Malicious:	false
Reputation:	low
Preview:	"use strict";(function(){function Vt(e,r,a,o,c,l,g){try{var f=e[l](g),p=f.value}catch(s){a(s);return}f.done?r(p):Promise.resolve(p).then(o,c)}function Wt(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var l=e.apply(r,a);function g(p){Vt(l,o,c,g,f,"next",p)}function f(p){Vt(l,o,c,g,f,"throw",p)}g(void 0)})}}function U(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):U(e,r)}function Me(e,r,a){return r in e?Object.defineProperty(e,r,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[r]=a,e}function Fe(e){for(var r=1;r<arguments.length;r++){var a=arguments[r]!=null?arguments[r]:{},o=Object.keys(a);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(a).filter(function(c){return Object.getOwnPropertyDescriptor(a,c).enumerable}))),o.forEach(function(c){Me(e,c,a[c])})}return e}function Rr(e,r){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/946203707?random=1727409754803&cv=11&fst=1727409754803&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fnetflix%2F&hn=www.googleadservices.com&frm=0&tiba=Kaufe%20Netflix%20Guthaben%20direkt%20in%20der%20TWINT%20App%20%C2%BB%20TWINT&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2373 x 899, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	54603
Entropy (8bit):	7.601367067864842
Encrypted:	false
SSDEEP:	1536:kjuEvsrDUbgwpgcBUCDAHEmRf440oCU8L+o:XXDugwLU9H9w40oCUUR
MD5:	3CDE00959322DF0E1912DD133AEACA7E
SHA1:	8067199688530556CB23BF70EA8E165D8B743452
SHA-256:	AACFB9AB8AFC42453B189685DE5556048FC893DA4FE47B000A0770AD9D2BA82E
SHA-512:	C0D15E2ADBE660691FE8322D556E537D948AEF95EE6F105A3DEABF00EFA3444E4BF7FF74BFC57796FA942472F7A01BBAF49ADD7755374853EC6967A4C75A69F4
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/c6763161-a85e-4d6f-9902-c9d4575334af/3c138d7e-9ef4-4168-8713-9b0f422d7140/328b026b-df30-40ce-be3e-cf9ec7a8cf13/twint_logo_q_pos_bg.png
Preview:	.PNG........IHDR...E................pHYs...#...#.x.?v.. .IDATx....r.Y~..?.mw...dG.{"<.9...w..W@...+......y...;S;..yW....b.c;..q.....Y.JU..T...@.y".....~`(..o.3.....4...."b..."N.........8....E.:"........}..f.Y..g....(..........^F.eD\.........(j6..ED.............\|........;.E.f.eD..F.........'XED..q...E.f.ED.p2.........p7^FD....\|.'x.O..f%">..(..........F.z6..O...}R..C..q.?........p.V.qv{{...'}.IQ...,".0..........._..N.Z\|.>....l....:..........l.....v.!...N.2............<">.r......(.(........`O\|.Q..E.f....;-.........=..w..f.."".xu.............F....v......}.D............W...z.(j6...8...........S...,...\...y.i..........1".7..{.IQE+............-{.o..5....B+................W..yRT..........80....>)j6..E...............E}...........p.^.f...1..............8P...m...IQg...........l>..."..E-5...........YD.,"...7=..............m.DD..........0..l6k.D.B.........`".N...........d.$"...........X<...............f.q..........0.[.(........`R.H.........L.Q.........0)FQ...........E....

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (539)
Category:	downloaded
Size (bytes):	4425
Entropy (8bit):	5.270008555797259
Encrypted:	false
SSDEEP:	96:1GInbH6vTKvmYDDaLVsB6g3HDf/HKQSHG+vylylqntDy1ju1jai:kIn7+TKVDUsdHDf/7a6clqntDy1uGi
MD5:	E8D7EB2650EF6581D436ECB812C6F87C
SHA1:	C58C2E203D7F78189DFCDD3FF8A05FFBB89E9397
SHA-256:	ADF960923CBD6B577ACF69253BF64D2AE8831198E3BE5A6E89A7507BC5629B3A
SHA-512:	4F3E368F6BA10E82FFB79CDDD51B67F4ED4EB197D7712A0C223F8CDACC5463E15272E2185DFCFAE3C9C17FFBA240652DFA0AAF4215652C12E2EC780BABCD7FCF
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/baf1656f-0c9f-4cd8-83fe-a5ce8d8c9eed/OtAutoBlock.js
Preview:	!function(){function q(a){var c=[],b=[],e=function(f){for(var g={},h=0;h<u.length;h++){var d=u[h];if(d.Tag===f){g=d;break}var l=void 0,k=d.Tag;var C=(k=-1!==k.indexOf("http:")?k.replace("http:",""):k.replace("https:",""),-1!==(l=k.indexOf("?"))?k.replace(k.substring(l),""):k);if(f&&(-1!==f.indexOf(C)\|\|-1!==d.Tag.indexOf(f))){g=d;break}}return g}(a);return e.CategoryId&&(c=e.CategoryId),e.Vendor&&(b=e.Vendor.split(":")),!e.Tag&&D&&(b=c=function(f){var g=[],h=function(d){var l=document.createElement("a");.return l.href=d,-1!==(d=l.hostname.split(".")).indexOf("www")\|\|2<d.length?d.slice(1).join("."):l.hostname}(f);v.some(function(d){return d===h})&&(g=["C0004"]);return g}(a)),{categoryIds:c,vsCatIds:b}}function w(a){return!a\|\|!a.length\|\|(a&&window.OptanonActiveGroups?a.every(function(c){return-1!==window.OptanonActiveGroups.indexOf(","+c+",")}):void 0)}function m(a,c){void 0===c&&(c=null);var b=window,e=b.OneTrust&&b.OneTrust.IsVendorServiceEnabled;b=e&&b.OneTrust.IsVendorServiceEnabled()

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (543)
Category:	downloaded
Size (bytes):	120870
Entropy (8bit):	5.4575471164937355
Encrypted:	false
SSDEEP:	3072:LQK1aO3dKplMGqy2ETMoojAZ1TiEyurrkQ0Fuf:0SF3dKp+GqyHTMoojAZ1TiEyurrkQ0FK
MD5:	A08CCAE580D68E61749A4F108AF246D7
SHA1:	52D8EA25808764F8BB0023D05172CE68659C92F4
SHA-256:	F3811A81A2BBF1513B652DED3FD2E4BD00457536238C5F47185C81FE57C06D16
SHA-512:	DA9DFDCDBBA510AC71F13A3B33C8B06C71725FF5C5C6448F481BB217F31132CEE6E97CEB3A42F9A3173C4521853FBD6D31580FBF466A5598C58EEDBE982D9D0E
Malicious:	false
Reputation:	low
URL:	https://www.youtube-nocookie.com/s/player/26636eff/player_ias.vflset/en_US/remote.js
Preview:	(function(g){var window=this;'use strict';var d7=function(a){g.xk(a,"zx",Math.floor(Math.random()2147483648).toString(36)+Math.abs(Math.floor(Math.random()2147483648)^g.Ya()).toString(36));return a},e7=function(a,b,c){Array.isArray(c)\|\|(c=[String(c)]);.g.iha(a.D,b,c)},Erb=function(a){if(a instanceof g.jn)return a;.if(typeof a.Im=="function")return a.Im(!1);if(g.Ra(a)){var b=0,c=new g.jn;c.next=function(){for(;;){if(b>=a.length)return g.p1;if(b in a)return g.kn(a[b++]);b++}};.return c}throw Error("Not implemented");},Frb=function(a,b,c){if(g.Ra(a))g.kc(a,b,c);.else for(a=Erb(a);;){var d=a.next();if(d.done)break;b.call(c,d.value,void 0,a)}},Grb=function(a,b){var c=[];.Frb(b,function(d){try{var e=g.Jp.prototype.B.call(this,d,!0)}catch(f){if(f=="Storage: Invalid value was encountered")return;throw f;}e===void 0?c.push(d):g.mma(e)&&c.push(d)},a);.return c},Hrb=function(a,b){Grb(a,b).forEach(function(c){g.Jp.prototype.remove.call(this,c)},a)},Irb=function(a){if(a.oa){if(a.oa.locationOverri

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	3050
Entropy (8bit):	7.9119351293073255
Encrypted:	false
SSDEEP:	48:dGh2sqWSU0oXbtLkl8plvYpH/1ajLdRTq7iYTmcR2/CvDQygjrhYKSuQStK7kVR:dbsqfU3Lkl8pWf+bqm8gq8prTrtb
MD5:	923F183A8303CE4BBF3C24A60E81797C
SHA1:	EF91B6D3D1FC65F3CE4AA1F50043D320F9C59A38
SHA-256:	0287E0BC745310030AED182EA6F02CCF88C25B865BFC516D61E2067494E6F8DA
SHA-512:	676DE28624D1EE7AC93012F7FEB98B07824C0E73C63417EAF014F0C2FC6EC3C9165B0FA94E456134F42B140065329C765FCE5FB513CA9A499A05F2AE7778A63D
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/content/uploads/2020/08/Smartphone-Spenden-Hand@3x-150x150.png
Preview:	RIFF....WEBPVP8L..../.@%.G...$..._/.P.m.....m.ft..o..m.Hw...o...#...=_.,..(..0.A...a.@P...........}...A!0.......hP..._!B1s.3O..<..z.."..C.!...@.....cB...c..a.}...w...(H.i.......@.0N..6Ij.m[TQ....a....-@.mH.h...{.^....@^...Q..bD.!.m.H...M.9W..0s..lm{.(.......A.9..%9.....%8r....;p.6.&.9..]4=.._...Q..r..<eZ.N\|f( .......2pr..bd..2q981L.M.....@.O.......w..d.....[.LJ..gd_.%f~.R?.......(1..\.[....a...Z.q.......~...@}aN..B.......)G4..N..U.h..y...[...b\.s...E...........v.X[ .B....].."..].,....$;.BO1..N.....y..'h....%+.(j.GH..3.hm.#..g.,.....YV5.L-.s5....%D.d..q!.d.\.CSC..v60.3.......8.^.".(...p.T..@.....k..pL...)..q.q\|...X.!.1..!^._..V..)YQ}........J;..(dw..}.c.S.C..9p..B.La....,.Q....jsiqs...N..P......Y.p......R.-...m},9.,.<...IL..)......Q2E..c.).G......0U..$<Lv..e............w5z..S`.&..CpR.X=6........,P4..ZXD...F.["x;...b.#.....~..t]..!....=......&(h.....n..c.wE;..SX...Z%......n....K.T....A}?......m..p.-n.......X...92..f.......5......[9%.wsr.-F....W.

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	41
Entropy (8bit):	4.180365114215879
Encrypted:	false
SSDEEP:	3:YGKhIWANmq6LFHYn:YGKhCNU4
MD5:	64E1C1EB9F4CAF0CF0E7484D7AFCEDB9
SHA1:	69E40D8C48A866A84046FD8BD17AF47FF02B79A4
SHA-256:	8ACAC48BC106C4EAE580C08071597F9DAFAB96D959DEFF65BEC44514DA907B1D
SHA-512:	F109767D57E85127D18B1AD2030A48C0EAD69F79A15C4008712407B1F62691654B74C9D6E225FFDC4A922847EABB928DC7520A656C7081B585124CF678B54E59
Malicious:	false
Reputation:	low
URL:	https://datechf.cc/socket.io/?EIO=4&transport=polling&t=P8nfAEk&sid=rK5nYzdFNB7SnldaADHs
Preview:	{"code":1,"message":"Session ID unknown"}

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4825), with no line terminators
Category:	dropped
Size (bytes):	4825
Entropy (8bit):	5.819652948833647
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUG85R9Wy:1DY0hf1bT47OIqWb1j8P9Wy
MD5:	CAEF03D85F22BB63D1B83642D6D8E14E
SHA1:	BA056AA4F279667778DF3CAFE600A5841D68418D
SHA-256:	1DB7411EBA26C7A93352813945413C3624C0463DFDD18BA12F976595C0045356
SHA-512:	E95030D1B65144FACFA8BBC46AFC9DC7BD58BBBA799FB07C570F81BFE0CD1E391C436B759978881623DC9B6B2291B84A52242285D91B1FF3A7167B78CF4270BE
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5194
Entropy (8bit):	3.976628767895142
Encrypted:	false
SSDEEP:	96:mD6VAMcWnVRSNUrN3Sky4gNeLSYiJ7iFsAkl2+heNm7iprXbep5DkoG23b+WYYY:p9bSNURZyNNnRJqsAehheImprmDkozYV
MD5:	63E737D3544164D2B7F4FBCA416AC807
SHA1:	030370AA38715E4C41589633F69D0BFE8255D46C
SHA-256:	5FA00D047ACD959697B9D7772C31DCD37BEC33C70C6FBF80AB8316205D1D286D
SHA-512:	31EE1BB536C0E50F5568A415EA3308367BFCFD11D2A6F7DFF1C8E3A982F7BE790C240A603CD4C6E187672824B8E5D07646049A28C6A88A7B001EB9A0142F312B
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/static/powered_by_logo.svg
Preview:	<svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83 0 01.74.77 2.25 2.25 0 01.25 1.07 2.26 2.26 0 01-.25 1.08 1.77 1.77 0 01-.74.77 2.55 2.55 0 01-1.28.29H.66v-.72h1.59a1.81 1.81 0 00.87-.19 1.1 1.1 0 00.48-.5 1.73 1.73 0 00.15-.73A1.66 1.66 0 003.6 7a1.1 1.1 0 00-.48-.5 1.86 1.86 0 00-.88-.18H.81v6zm7.74.1a2.29 2.29 0 01-1.2-.32 2.29 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0 00-.16-.94 1.67 1.67 0 00-.5-.71 1.37 1.37 0 00-.85-.26 1.35 1.35 0 00-.85.26 1.67 1.67 0 00-.5.71 2.85 2.85 0 00-.16.94 2.9 2.9 0 00.16.94 1.6 1.6 0 00.5.69 1.29 1.29 0 00.85.27zm4.43.59l-1.54-5h.82l1.08 3

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.180365114215879
Encrypted:	false
SSDEEP:	3:YGKhIWANmq6LFHYn:YGKhCNU4
MD5:	64E1C1EB9F4CAF0CF0E7484D7AFCEDB9
SHA1:	69E40D8C48A866A84046FD8BD17AF47FF02B79A4
SHA-256:	8ACAC48BC106C4EAE580C08071597F9DAFAB96D959DEFF65BEC44514DA907B1D
SHA-512:	F109767D57E85127D18B1AD2030A48C0EAD69F79A15C4008712407B1F62691654B74C9D6E225FFDC4A922847EABB928DC7520A656C7081B585124CF678B54E59
Malicious:	false
Reputation:	low
Preview:	{"code":1,"message":"Session ID unknown"}

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7721), with no line terminators
Category:	downloaded
Size (bytes):	7721
Entropy (8bit):	5.129885796843391
Encrypted:	false
SSDEEP:	192:Xg57EvPPjsPio/j4sO1gUo3XJ7PmDFuIJ0H3lIWhFS:Xg57sQ/j4DiUFUIOc
MD5:	A858E617E605401943437731136DCAF5
SHA1:	08AA85516BC90F0D0A117867ACD8EB77A38127CE
SHA-256:	F6340DBA594D655A939914EFB023D97F55C3E09EB5E2B8BA21D005B5FE490655
SHA-512:	F558A93562E1C052C696264BE2B718B183728D873F4FA94D2CBA5502508D1345E7951DAA8C73DF8EB1C869A04710492712B8B4A93B9EE3E8F9EB62EBA71181EA
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/content/themes/twint/assets/js/bank-qr-component.8a0310c08841c1c7.js
Preview:	"use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[845],{6222:(t,e,s)=>{s.r(e),s.d(e,{default:()=>l});const i={props:{initial_headline:{type:String,default:null},initial_subline:{type:String,default:null},initial_badge:{type:String,default:null},initial_placeholder:{type:String,default:null},initial_disclaimer:{type:String,default:null},initial_banks:{type:Object,default:function(){return{}}},initial_bank:{type:String,default:""},compact_mode:{type:Boolean,default:!1}},data:function(){return{banks:this.initial_banks,selected:null,is_preselected:!1}},mounted:function(){this.initial_bank&&this.banks[this.initial_bank]&&(this.selected=this.initial_bank,this.is_preselected=!0)}};const l=(0,s(4486).A)(i,(function(){var t=this,e=t.$createElement,s=t._self._c\|\|e;return s("div",{staticClass:"download-app-qr-code container-fluid"},[s("div",{staticClass:"row align-items-center justify-conent-center justify-content-xl-start"},[s("div",{staticClass:"col-sm-10 offset-sm-1 offset-xl-0 col

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4850), with no line terminators
Category:	downloaded
Size (bytes):	4850
Entropy (8bit):	5.82651812744686
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUp81R6p:1DY0hf1bT47OIqWb108L6p
MD5:	7B9E0AEAD5D2AD9CCEC841B70D80A4A0
SHA1:	672E1D4B3CC458F0DAEC091E42FA9A5418D541DC
SHA-256:	DABA885384D76628840B26FBA0B6D04C13F0C0E1DB52EC68FC386C7FF20FA0C2
SHA-512:	5A94C9CD046351FD55201890F33CB415173FE6A2CD39F4C73F5C57856E21D018A6960D6EA693B911538E34C92928FB980CFD577E1AB207EAEF4736488F4F7992
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/946203707/?random=1727409754779&cv=11&fst=1727409754779&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465z876304729za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fnetflix%2F&hn=www.googleadservices.com&frm=0&tiba=Kaufe%20Netflix%20Guthaben%20direkt%20in%20der%20TWINT%20App%20%C2%BB%20TWINT&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	23942
Entropy (8bit):	7.9852977879069655
Encrypted:	false
SSDEEP:	384:iMDLBG6UQ2w10ttFbCBDu096Y6N8PC/5S+ZpfDD/2jZ4DTxhXNlvYJV/TYDmZ8he:rDLkhw1E4DL6t8PgS+ZpfDD08nXvYJVf
MD5:	CFE93F3C57557BA25B154B47675060B3
SHA1:	38A69E4BB2963195DE8ADA22F4CED91464E94066
SHA-256:	C76D4BC64F27133DE15FA6616160C1A5AB4E040E2EC0FB63A60BD5B6A2FE1F40
SHA-512:	3AE87D3703F104386518855CD1A5749E01AECE54705A4B4E4E7174CD413DC6FF6BD083D5D349FB300ABF911DC210A09B9ECDB74E70623D09C41A7B98993863CD
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/content/uploads/2024/09/Donation-Campaign_Emergency@2x-1024x427.png
Preview:	RIFF~]..WEBPVP8Lr]../..j..';.$E......N....=% G..H...=....I..M.K...E.\.Y...l....$.`....u...o7.....p.W..t79.a....#y.2.AU.i.R).V"5m...C.}....c.X......hEe..M...A...\|.[.~......e.DX..A.....Q.$.."q..I7'.Uw..Yu...d..;wq.h..8...cuV...(4`P....T....Ph...P.B.YD.6E.H.:.4..p R.)......\@tD..L.M.B4.`6QJfD..Ph..A..T..xN&1..H.ID...D8.....2`2.].N......d.t.g1..\&.e.....+..`..6.7{...\|.a.q.........:....6.X.EY....0...........H9..~..=....v..m.+.....k.....@Y..,.....(.....@....Q.n....G..t...0h.FP.....?.......2.....8.....Cy.\|<....KJ.@@..6..@..o.. 8......z.2......ku. ....>...~....k...%..s...}...{.....N.J....1.5P..d5...@B."c.@.`+q..\|z?!>...^.9.s...kn..3... .....d. ...^k...){}.l[..af....n..0._.C6......g..k=o...l7l..w.......H.y....%....c.n.....t5Hs.....ir?\|....#b.V1..f.c.'...q..lL.W...9..4(x.......j.g=kU.....7.V....."....?...!........c...z..j.....n{.......~....@.N(.-.....>....L.A..q^.".F......O.^.G?}..t_._....q^.............0>_.~. ...zg....+..Q.......l..K.

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1084
Entropy (8bit):	7.7926028748434595
Encrypted:	false
SSDEEP:	24:EgVx9VAkkbn2OR8eBUnnTYxRL3rZu2Vo4LL/fvQZeN:b9VpYn2ORiT2HJQs
MD5:	D84E263879F812CDC6A8BD1BC97AE5E4
SHA1:	BA38448BAFC6E62F5641B8DA2E9C55D38196C622
SHA-256:	7C3D9F3E71B31225D5591C7A1D4028352B431EE2524E64FA3E2A4F7A2918A6DE
SHA-512:	FD264F373D3673342B8AF37559AD603201148EFB8A256E987383C89A3C8A7F8A7125DC6C39938D62DC081BF647712C885A69AFB8D7F3C95154AC25C19CF8176D
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/content/uploads/2019/09/Einkauf-mitnehmen-150x150.png
Preview:	RIFF4...WEBPVP8L(.../.@%.. Ir.F..g.......nDH........._...)TE.w...C.Ynd.....xE5.b.R..._......,KXkz....Z.........9Am...hI..b.6.&....;...M...PGV.)....Tg..l/ZG...n6.@.u..[.a.X..,.....Dg...5.{..].XF.v..K...R,%5..2.XN..g.El@....I....\:.7..z.(k.y..p...'B.x2M."C..X.6.'.I.......~wS6.o....yy;o.f.;.......<y'..)...RY.-..U..A8Oo.._..)......(...+x"a_.B.....R.T..#E.-6..YJH.nh.)..A......t[P'O9.p....p....B...@.w...H.<....z.}$..z........(q..)<..A...t.E..#J..ro..#.;/N......).UNP......#.{(s.O1.A.!j.B.<.......0K.....7.y.H0y'.S=.`.^.=.PO...O...`2l.9A..\|V...".d..j."....K......IJe.C..gP.Dtr}.Q..l.v.]...>.<.U...ev.e..6.+....G..".....=a.}.......1..@t..v;AY.,.l..\.,R...U4..z.+O...um...".+.U.>....^2.x.g..l........G....FTX..q..l..8.S6...B.U...e..a..).M.e.8.Z?.\...).e.>.S.g.e>....s{?..OIF7O...Qo.).Pu..dIZzJ...W<.7oK.[.C..Q.)...Iot.>..)Z.K....S..ln."{...%.O.N..%nR.....6A..R...[P....d.\DDa7O...w...z7....ko.......".T.d..}3.t: .. ..s.....8h.-...I;..g.K{V...j.%..-N.y.!J..I..I..

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	80
Entropy (8bit):	4.728212945841
Encrypted:	false
SSDEEP:	3:InEwpCkoSySv6yukbbkpBth6G+:wpoSySv6yF8pbv+
MD5:	38D17E9A6B363E5DFCDCC25EE9D4D40A
SHA1:	FE867740363BE896BF7B02BA2C02DB63038CF995
SHA-256:	F5173DBF403B24D5A3FEACE472CDA077E072A837408461089AFCAD4EB50A60D4
SHA-512:	83D40475E4ED79CE7BA1E0A9222A397D10AB81FE5B324AF124505E0BAFEB5A3EDE0DFF198D5C1672F82E741978F32D3DE111749C44B8FAF35895AEE962CE780E
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISLAn9uqUg1dGU6RIFDRVQj_4SBQ1a3e0uEgUNUopJoxIFDUC-9V0SBQ1AWQ9bEhAJ_CDxs1gSwr0SBQ2lkzYk?alt=proto
Preview:	Ci0KBw0VUI/+GgAKBw1a3e0uGgAKBw1SikmjGgAKBw1AvvVdGgAKBw1AWQ9bGgAKCQoHDaWTNiQaAA==

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	954
Entropy (8bit):	4.916925492028956
Encrypted:	false
SSDEEP:	24:2dk1WNwHi7lBTHKxoM37vJKBn/2XPaH0pRWpbWx1UacPLP5l0pRTO2:c03mzzfsvJKBnQe6yoUaczhl6xT
MD5:	1DAB9D3AD83749D0F176F454B7C8360F
SHA1:	F29A244EAA5D81E35B8807BE7122E1D08FDBA08A
SHA-256:	C8C6CFACFB9BAAD77EE165740F0CEB21EADA37FCBBA1B7BC0E6E1EE86E56BAC1
SHA-512:	7EDBD4777A09A9955A05AA4CD37745CB9EB450AE3CEC5466BD0BD84CED20F9CFA1401E1A4E560F0C68CB83A2DE328CEC066DB6C17A47906D3D7A1331AF0AA4C1
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/content/uploads/2022/12/Velo_Icon_Boxout.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Ebene_1" data-name="Ebene 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100">. <defs>. <style>. .cls-1 {. stroke-miterlimit: 10;. stroke-width: 3.2px;. }.. .cls-1, .cls-2 {. fill: none;. stroke: #262626;. }.. .cls-2 {. stroke-linecap: round;. stroke-linejoin: round;. stroke-width: 3.2px;. }. </style>. </defs>. <circle class="cls-1" cx="50" cy="50" r="43.1"/>. <g>. <circle class="cls-2" cx="27.05" cy="58.32" r="11.63"/>. <polyline class="cls-2" points="34 35.49 41.86 35.49 46.65 52.47"/>. <path class="cls-2" d="M51.67,53.72l15.52-13.39c-.6,.15-23.83,.63-23.83,.63l-15.56,16,16.48-.11"/>. <circle class="cls-2" cx="48.45" cy="56.85" r="4.17"/>. <circle class="cls-2" cx="72.95" cy="58.32" r="11.63"/>. <polyline class="cls-2" points="56.83 30.05 64.99 30.05 70.86 52.33"/>. </g>.</svg>

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	41
Entropy (8bit):	4.180365114215879
Encrypted:	false
SSDEEP:	3:YGKhIWANmq6LFHYn:YGKhCNU4
MD5:	64E1C1EB9F4CAF0CF0E7484D7AFCEDB9
SHA1:	69E40D8C48A866A84046FD8BD17AF47FF02B79A4
SHA-256:	8ACAC48BC106C4EAE580C08071597F9DAFAB96D959DEFF65BEC44514DA907B1D
SHA-512:	F109767D57E85127D18B1AD2030A48C0EAD69F79A15C4008712407B1F62691654B74C9D6E225FFDC4A922847EABB928DC7520A656C7081B585124CF678B54E59
Malicious:	false
Reputation:	low
URL:	https://datechf.cc/socket.io/?EIO=4&transport=polling&t=P8nfK9r&sid=3r9bDDVSXbEFGIhqADH1
Preview:	{"code":1,"message":"Session ID unknown"}

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41442)
Category:	dropped
Size (bytes):	41481
Entropy (8bit):	5.31009549751899
Encrypted:	false
SSDEEP:	768:9pQ6+qD0M+7+/kmCACM3aem6eWQi79xpQXQVqQU+h3ghJskJFAn:9pQTsCI9XSMqTXg
MD5:	3B5B3D36FDE8FFE8ED76B1EFBFC65410
SHA1:	D63107D0912FDB387530D5CE2D512C928D73D122
SHA-256:	29D600462A30694EFD15B9848B4CA42D178CD067009275C35A30580121114304
SHA-512:	3C96B7A1048B59107BC0767B190FE0FAACAFEABE266EE8668836FC06348567C359D9AE36A13B40AB99F4B9C580C1C403962900B64B9BFAD3D50B0E27A76ED60A
Malicious:	false
Reputation:	low
Preview:	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).axios=t()}(this,(function(){"use strict";function e(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function t(t){for(var r=1;r<arguments.length;r++){var n=null!=arguments[r]?arguments[r]:{};r%2?e(Object(n),!0).forEach((function(e){c(t,e,n[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(n)):e(Object(n)).forEach((function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(n,e))}))}return t}function r(){r=function(){return t};var e,t={},n=Object.prototype,o=n.hasOwnProperty,i=Object.defineProperty\|\|function(e,t,r){e[t]=r.value},a="function"==typeof Symbol?Symbol:{},s=a.iterator\|\|"@@

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	388748
Entropy (8bit):	5.182833267031374
Encrypted:	false
SSDEEP:	1536:Mfi8ZHMCbS/mgV2B8ILJPptpJKztM6oyi+MOn4y6Ox5juDEnXrDJc7MsByDn+TEn:Mfi8Zimg0BtSoy9uf7LcSQoYN
MD5:	6BC73BD4E74E8993220F45682B0B7388
SHA1:	B55A53124024B3DDE36AAAB12B5C7DDA75C891F9
SHA-256:	716369DC2BA3761FAAABC317E82A604CFD41BB687251C981A267D4AE96A9C71D
SHA-512:	AD9E315D5762581CA2EAA4123CB6934D3E43861E0C22AE553C6AEB053B1823BA4CC57CB98ABFFDD5268B3089C38BFEF8B76F014B70512D72146ACD106826A73C
Malicious:	false
Reputation:	low
URL:	https://www.youtube-nocookie.com/s/player/26636eff/www-player.css
Preview:	@charset "UTF-8";.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-font-smoothing:antialiased;-webkit-tap-highlight-color:rgba(0,0,0,0);touch-action:manipulation}.html5-video-player,.ytp-contextmenu{-ms-high-contrast-adjust:none;forced-color-adjust:none}.html5-video-player:not(.ytp-transparent),.html5-video-player.unstarted-mode,.html5-video-player.ad-showing,.html5-video-player.ended-mode{background-color:#000}.ytd-video-masthead-ad-primary-video-renderer .html5-video-player:not(.ytp-transparent),.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.unstarted-mode,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ad-showing,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ended-mode{background-color:transparent}.ytp-big-mode{font-size:17px}.ytp-autohide{cu

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (509), with no line terminators
Category:	downloaded
Size (bytes):	509
Entropy (8bit):	5.072716637642847
Encrypted:	false
SSDEEP:	12:+dcYJqoxAZDRFDPID7IN0IqkIH+jns849N0hXGKRFKSeKBB:icYJ+ZDRFLID7IN0IqkIeTf49N+tFKCB
MD5:	1E3BF3933B83D0988755E45D2770E415
SHA1:	4A8EE0DEC9E0CCAB474579F04B839D1A0B130E6A
SHA-256:	6451908232BD01CE4A0AAF16DC71CE63EDE695758FFF1F1C75B5E8760B35A34B
SHA-512:	0EA9676915487DF11E0BA80DA35D8422B2402A2650F3E7F275C0EB0B64AE65B58512DE724BBF40A5FE71022CA71395C424D20C06A82C1BE5EAA70D2721FA51A2
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/content/themes/twint/assets/js/navigation-footer-component.858975e6ed7c11aa.js
Preview:	"use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[981],{496:(n,e,t)=>{t.r(e),t.d(e,{default:()=>u});const o={data:function(){return{open:!1}},render:function(){return this.$scopedSlots.default({})},mounted:function(){this.subnavToggle()},methods:{subnavToggle:function(){var n=$$(".nav-footer .subnav-toggle");n.forEach((function(n){n.addEventListener("click",(function(){n.closest("li").classList.toggle("open")}))}))}}};const u=(0,t(4486).A)(o,undefined,undefined,!1,null,null,null).exports}}]);

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.577819531114783
Encrypted:	false
SSDEEP:	3:HAOfaY:gOfaY
MD5:	4C8A26E14EDABDD7D6BFBF1472AFC853
SHA1:	F268C3DB54608F753ED9320CB2411B00A40C8D65
SHA-256:	B9224CA870B658AB694ECED1FBB07A971FCE7D0C990E50046929E9968BAF435C
SHA-512:	820B85A739953E8A71E89FEB45BBFB01E2D2F8977D30B0AB11BED28A7CA2B0365595AA7074A3A9780C8DE95E0C8DE839B5C390519F5238E8435F44736CDD497F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAk5V_yAMKrP-xIFDaWTNiQ=?alt=proto
Preview:	CgkKBw2lkzYkGgA=

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9818618;type=twint000;cat=twint0;ord=2448675382325;npa=0;auiddc=1403402495.1727409735;ps=1;pcor=867644488;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fgoogle-play%2F?
Preview:	<html></html>

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 33 x 48, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPla9p1TBxl/k4E08up:6v/lhPW7Tp
MD5:	CEE4550C6BD60652CBAF4A37EA619ED8
SHA1:	DF888EF8B53C6786E1F820319EEC569B062A6119
SHA-256:	F4995DFB1C25A6B8D5DD7DAC0AAC62EC5C07672FC59DB85A37A712B530EBDBFE
SHA-512:	34168E7FC8AA102F9957CA97A01A1BF7D65925962FA7F6BDE2A3633200124FCCA646DD3BFCDE6A6FFFB07AFCAF2C8FBDA253F12FE24019F3661F26429997B0C6
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8c9898c28eda4378/1727409733188/7Hf4hPCc6PpUz1G
Preview:	.PNG........IHDR...!...0.............IDAT.....$.....IEND.B`.

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	134766
Entropy (8bit):	4.575984635773353
Encrypted:	false
SSDEEP:	3072:/ZTygmbpoIynKg10q8aWAo5rhPWv8oNmE+umo/Soohq:hTy9JynKgj8aWAo5rhPWv8oNmE+umo/h
MD5:	25A9F3E47DE9C5BD6A3BAFCB0E807161
SHA1:	727EC879EC65130814206EA8FAB11DCA6F1F099E
SHA-256:	A219B96D0BA8E32441C99ACEDC91641E7531A1BD04B2E70ABF34C0E19510F3B8
SHA-512:	CE825746F5B6802F19D17A379416DAA39F804B783A616AF9CED2AA6A272E6B5D711E8F80BC4D5BD254FD38382B1D398D531782C34472E011916197D7BBBD307A
Malicious:	false
Reputation:	low
Preview:	/!. Socket.IO v4.7.2. * (c) 2014-2023 Guillermo Rauch. * Released under the MIT License.. */.(function (global, factory) {. typeof exports === 'object' && typeof module !== 'undefined' ? module.exports = factory() :. typeof define === 'function' && define.amd ? define(factory) :. (global = typeof globalThis !== 'undefined' ? globalThis : global \|\| self, global.io = factory());.})(this, (function () { 'use strict';.. function _typeof(obj) {. "@babel/helpers - typeof";.. return _typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function (obj) {. return typeof obj;. } : function (obj) {. return obj && "function" == typeof Symbol && obj.constructor === Symbol && obj !== Symbol.prototype ? "symbol" : typeof obj;. }, _typeof(obj);. }. function _classCallCheck(instance, Constructor) {. if (!(instance instanceof Constructor)) {. throw new TypeError("Cannot call a class as a function");. }. }. function _defineProperties(targ

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/946203707?random=1727409735110&cv=11&fst=1727409735110&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465z876304729za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2Fvelo%2F&hn=www.googleadservices.com&frm=0&tiba=Veloversicherung%20mit%20TWINT%20abschliessen%20%C2%BB%20TWINT&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	22192
Entropy (8bit):	5.018246398830784
Encrypted:	false
SSDEEP:	384:jTTBll5rdPoDcyz5IHgh5hNRxR1BRttk6oTFu8WrAZ0aFTD9wqPQW/Ltk6oTFu81:vTBll5rdPosR4AnJ56
MD5:	297083C40883F30ED7EB51E19FF53DEC
SHA1:	45032E3AC2C1C98FE473B8DA5809D743E2E85463
SHA-256:	4903A0343597069B0F147F04336F34CF39B95B9BC0564EFA0DF4E889BA0CCB74
SHA-512:	01AB9835EE64A6E9BCEE72DECB9A691E21C7B066572856BC4EEAE10D0F217C534028706FE6F83F1B33786DEB4D60A72C1E2EF39D9AB02590848AFF76AF5840EC
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/content/uploads/2023/08/Tierversicherung_30x30mm_mitKreis.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 27.7.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{display:none;}....st1{display:inline;}....st2{fill:none;stroke:#262626;stroke-miterlimit:10;}....st3{display:inline;fill:#FFFFFF;stroke:#FFFFFF;stroke-width:2.5;stroke-miterlimit:10;}....st4{display:inline;fill:none;stroke:#262626;stroke-width:1.5;stroke-miterlimit:10;}....st5{display:inline;fill:#FFFFFF;}....st6{fill:#262626;}....st7{display:inline;fill:#262626;}....st8{display:inline;fill:none;stroke:#262626;stroke-miterlimit:10;}....st9{display:inline;fill:#262626;stroke:#262626;stroke-width:1.5;stroke-miterlimit:10;}....st10{display:inline;fill:none;stroke:#FFFFFF;stroke-width:3;stroke-miterlimit:10;}....st11{display:

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1159)
Category:	downloaded
Size (bytes):	338712
Entropy (8bit):	5.61633684161754
Encrypted:	false
SSDEEP:	3072:o7Ay2hxnVV2GDbjq5ZfFMinfgbYeVjJ4gVp+6I7w7MyE9at9idYEH:okyo/2GHjq5ZfSbHVd42u7w7rEYtUSS
MD5:	91680884EED37B5ED4A53094296D6527
SHA1:	F3DF67A86E7B4C75F3C47F8E4EEF569CB2CE080F
SHA-256:	7B423B08E9EB0B19D9CE4B1E1F40B4EF0C00F40499FFFCE239FCA160BB07CFCF
SHA-512:	C3C0149DF32C9E40CF09DD0A37240935F26353A8402C6BCC6EDA3304FDE962A4E3D7B41F40CA3DE929AAF4F8B20F4812D97D2027E274284E84206E80F3BDECCD
Malicious:	false
Reputation:	low
URL:	https://www.youtube-nocookie.com/s/player/26636eff/www-embed-player.vflset/www-embed-player.js
Preview:	(function(){'use strict';var p;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var da=ca(this);function u(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}.function c(f,g){this.h=f;ba(this,"description",{configurable:!0,writable:!0,va

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (748), with no line terminators
Category:	downloaded
Size (bytes):	748
Entropy (8bit):	5.616610925010753
Encrypted:	false
SSDEEP:	12:hnMQbwuOaxyCkv4AEHeOnCf1XLojZdxTiUMGT2IWaEu18DIkQBW+RXYf:hMiRO9KnAXUz58G9PX8CpRXI
MD5:	E27C6FF3190302C6F143AD7116E531ED
SHA1:	E1465A4EB4500118F8C5B0695F74F1C9E434EF51
SHA-256:	78351568F8C8DD21B87DB7134A23C6312E27EA4113456551F1A1AF556536D508
SHA-512:	D31481896DE450EB49FDA4DB77FA335443DFBB5E4C4142559C9E435C6FFC2EC10AB926E287FA3AC4E3A84846DD149B757050AE53C1C8DC7CEB683488BA446B34
Malicious:	false
Reputation:	low
URL:	https://9818618.fls.doubleclick.net/activityi;dc_pre=CIDIkN-e4ogDFcSHgwcdx90GEg;src=9818618;type=twint002;cat=twint0;ord=1895166089217;npa=0;auiddc=1403402495.1727409735;ps=1;pcor=137932440;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2Fvelo%2F?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CIDIkN-e4ogDFcSHgwcdx90GEg;src=9818618;type=twint002;cat=twint0;ord=1895166089217;npa=0;auiddc=*;ps=1;pcor=137932440;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2Fvelo%2F"/></body></html>

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (51633)
Category:	downloaded
Size (bytes):	432465
Entropy (8bit):	5.566663246691594
Encrypted:	false
SSDEEP:	6144:jW62U27psFrXlq0kd7+hJsLsEemvedym3:jW62UJ9XQ/h4Jsyz
MD5:	DBD9972A4E82740901E32EC0F46B53FB
SHA1:	08FAADA205A24E06A02CC543C9A3A5C5BBE14E42
SHA-256:	E7FD5077028DF62BB834A442B7954FC8C2FD7E2719F6B99FF3FD36478C4F905F
SHA-512:	74A44649AE0C6DFE1A51C198E5A323BAB68B9AF6181ED52F81FF374ABDBD30C409336F32918A8475D7D85A7783B036DA01EDB37ACC5DB04E761B751892EA09D1
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-MCR5GXQ
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"195",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"UA-57807947-1"},{"function":"__jsm","vtp_javascript":["template","(function(){try{var b=ga.getAll(),c;var a=0;for(c=b.length;a\u003Cc;a+=1)if(b[a].get(\"trackingId\")===",["escape",["macro",1],8,16],")return b[a].get(\"clientId\")}catch(d){}return\"false\"})();"]},{"function":"__v","vtp_name":"gtm.newUrlFragment","vtp_dataLayerVersion":1},{"function":"__f","vtp_component":"URL"},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__jsm","vtp_javascript":["template","(function(){for(var c=",["escape",["macro",5],8,16],",d=void 0,b=[[\".\\\\.ubs\\\\.com.\",\"U

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	371
Entropy (8bit):	4.600540137157355
Encrypted:	false
SSDEEP:	6:2LGaUImyCp0GlYM1wBJPyQK5DrIt6xfeGYqX3ofWLGJw47Jsr4z+LAltEsVsVsVo:2ffmyCkMwykgIaoO4nsrqH9yyyv
MD5:	97CF0FE353C517CEA6CB3E1F2E7EDFC9
SHA1:	58D8EB24BFD5CA347B6A0A72894E6C8B6EAE198F
SHA-256:	0E0C8CEDB72A7E5A3080203509132486E267E5D1B0C5C6EAE78AC16F7928FF01
SHA-512:	F3D33FE997DC8FDFF9B122C208321F1DB35B2A6C2650C8EAC119A2A20FAE74874691340C3419283AE0914E5405D51E40BF787469B3A7A2B66A81A68B6E2009EB
Malicious:	false
Reputation:	low
Preview:	(function(w,d,c,k,a,b,t,e) {.. var cs = d.currentScript;.. if (cs) {.. var uo = cs.getAttribute('data-ueto');.. if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') {.. w[uo].setUserSignals({'co': c, 'kc': k, 'at': a, 'bi': b, 'dt': t, 'ec': e});.. }.. }..})(window, document, 'us', false, false, false, false, false);..

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://ade.googlesyndication.com/ddm/activity/src=14196387;dc_pre=CMPi0t2e4ogDFTJOHgIdTgIYew;type=sm-co0;cat=twint0;ord=6198269861858;npa=1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=denied;frm=0;user_data_mode=a;gtm=45fe49p0v9190789414za200;gcs=G100;gcd=13p3p3p3p5l1;dma_cps=-;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2Fvelo%2F?
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47261)
Category:	downloaded
Size (bytes):	47262
Entropy (8bit):	5.3974731018213795
Encrypted:	false
SSDEEP:	768:+CWIsQ06lHHhw+r9sygguSwodvdq3VE3XYdze9Ddre9eom1CQWpKexThupcubvCR:uQflHBN9sygg1WViPreEM
MD5:	E07E7ED6F75A7D48B3DF3C153EB687EB
SHA1:	4601D83C67CC128D1E75D3E035FB8A3BDFA1EE34
SHA-256:	96BD1C81D59D6AC2EC9F8EBE4937A315E85443667C5728A7CD9053848DD8D3D7
SHA-512:	A0BAF8B8DF121DC9563C5C2E7B6EEE00923A1E684A6C57E3F2A4C73E0D6DD59D7E9952DF5E3CFFFB08195C8475B6ED261769AFB5581F4AB0C0A4CC342EC577C9
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/g/ec4b873d446c/api.js?onload=Jeuhg1&render=explicit
Preview:	"use strict";(function(){function Vt(e,r,a,o,c,l,g){try{var f=e[l](g),p=f.value}catch(s){a(s);return}f.done?r(p):Promise.resolve(p).then(o,c)}function Wt(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var l=e.apply(r,a);function g(p){Vt(l,o,c,g,f,"next",p)}function f(p){Vt(l,o,c,g,f,"throw",p)}g(void 0)})}}function U(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):U(e,r)}function Me(e,r,a){return r in e?Object.defineProperty(e,r,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[r]=a,e}function Fe(e){for(var r=1;r<arguments.length;r++){var a=arguments[r]!=null?arguments[r]:{},o=Object.keys(a);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(a).filter(function(c){return Object.getOwnPropertyDescriptor(a,c).enumerable}))),o.forEach(function(c){Me(e,c,a[c])})}return e}function Rr(e,r){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41169)
Category:	downloaded
Size (bytes):	41172
Entropy (8bit):	5.505998162296305
Encrypted:	false
SSDEEP:	768:j21xCdwV69Odf9dk1fV8iWUwcb9x8cvgBhpU9yC8IEVDlbth3Ia8DdEN:iP3kr8V8vShi98Iiph3IbC
MD5:	0AA5002702487976D570A640C408EBA5
SHA1:	48930F22A2396DF313CCDFCB91CAC20E38F2B06B
SHA-256:	4E8276AEA0A3C7FE3600E6718C7F484D49C347C8D5763D89BE95900D526A14DA
SHA-512:	37A9D609DB21EE1E696CB437C02F0F6410925EB10B6353C0CDF95DB265E342F0BC3D2AE1851D209E4517D978B7CCBE8AD56F98247FA865AE405FAFD4D2E62CDA
Malicious:	false
Reputation:	low
URL:	https://snap.licdn.com/li.lms-analytics/insight.min.js
Preview:	!function(){"use strict";function n(n,t,e){return t in n?Object.defineProperty(n,t,{value:e,enumerable:!0,configurable:!0,writable:!0}):n[t]=e,n}var t,e,r,i,o={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,d=2,s=(n(t={},a,"li_gc"),n(t,u,"li_mc"),t),f=function vr(){var n=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,t=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var i in function(n,t){if(!(n instanceof t))throw new TypeError("Cannot call a class as a function")}(this,vr),n=n\|\|{},this.consentAvailable=!1,this.issuedAt=t,this.userMode=e,this.optedInConsentMap={},o)n[i]=n[i]\|\|c,n[i]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[i]=n[i]===l\|\|n[i]===c&&r===l},v=(e=[o.ADVERTISING,o.ANALYTICS_AND_RESEARCH,o.FUNCTIONAL],r=[c,l,d,c],i=new R

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2281)
Category:	downloaded
Size (bytes):	632970
Entropy (8bit):	5.460518478423583
Encrypted:	false
SSDEEP:	3072:eI3pY8WmOwJMmE+xdNgKpJbp2xOxYjPKpaXOIWHk9P1s+YiB+tFHmBBrqL357Tpd:IdxOxYjPKpaXOGdky6
MD5:	D5EA2049BE0EC7A5099BAA37F901EFDD
SHA1:	DC307CE0871717FDA83F16238E1AD06C5EAE6608
SHA-256:	5A28354394042343FAC9C5DFF3AED5810EE22E832557C82089B89C7FCDBAB5AD
SHA-512:	0CDFE626255AB71929CE3EA27DA0E4C4B275D3E322AA8F5EE5E55E515710EB5F89C36CCF44315FA254970B361027A149920EE2C60C00779FAFB7DCD6F27D32E4
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/privatkunden/funktionen/spenden/
Preview:	<!DOCTYPE html>.<html lang="de-CH">.<head>.<meta charset="UTF-8">.<meta http-equiv="X-UA-Compatible" content="IE=edge">.<title>Sicher und schnell Spenden direkt in der TWINT App</title>.<meta name="viewport" content="width=device-width, initial-scale=1.0">.<script type="text/javascript" src="https://cdn.cookielaw.org/consent/baf1656f-0c9f-4cd8-83fe-a5ce8d8c9eed/OtAutoBlock.js"></script>.<script src="https://cdn.cookielaw.org/scripttemplates/otSDKStub.js" type="text/javascript" data-document-language="true" charset="UTF-8" data-domain-script="baf1656f-0c9f-4cd8-83fe-a5ce8d8c9eed"></script>.<script type="text/javascript">. function OptanonWrapper() { }. </script>.<script>. // Define dataLayer and the gtag function.. window.dataLayer = window.dataLayer \|\| [];. function gtag(){dataLayer.push(arguments);}.. // Default ad_storage to 'denied'.. gtag('consent', 'default', {. ad_storage: 'denied',. an

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 37, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.035372245524405
Encrypted:	false
SSDEEP:	3:yionv//thPlteCY5pBxl/k4E08up:6v/lhPGCcB7Tp
MD5:	9519C5C86B3BC91B3D6623DC2213B2C5
SHA1:	FA4E2E348FE6CD3B27412E85BD55399D7799A1B5
SHA-256:	581C47F1C63C215848867F3B9B725F71D8870695723CCC0DD9D80C99B8187C3C
SHA-512:	4F315374CDE2BDF219CAF4F32F344B15013D06FF7DBD8B2BCD6A2A89242AD80C31624B22A2ED349A403E46C835F0C8212B3E68385C9B6D30B64289D8ED1ABA7C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......%......}......IDAT.....$.....IEND.B`.

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4978), with no line terminators
Category:	downloaded
Size (bytes):	4978
Entropy (8bit):	5.840714173163076
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUq8hR4Rj/:1DY0hf1bT47OIqWb1r8HcD
MD5:	4C032E75931364C282360CFD8D4F6D4D
SHA1:	002F97050E368A88A5DB11FE27B06AF0A4856AFD
SHA-256:	D1B14AAE1D7F1759DDCCD649C6175B4138493A30A04C473FF95C2E487A35191F
SHA-512:	30D5E828227307F90895654D80ED8B292E6A3D7D9F3218C382F66CC9C1F7AF0C91450933DFE57E1948CD146D5B9AFF7CEF45C38FF208935750A9FE0914740585
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/946203707/?random=1727409744002&cv=11&fst=1727409744002&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465z876304729za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fspenden%2F&ref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fspenden%2F%3F__cf_chl_tk%3D8Ylek.WKI04G6TXvVTCL_69k6NRX5ocFRXcdiigbSf8-1727409721-0.0.1.1-4670&hn=www.googleadservices.com&frm=0&tiba=Sicher%20und%20schnell%20Spenden%20direkt%20in%20der%20TWINT%20App&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x400, components 3
Category:	downloaded
Size (bytes):	26875
Entropy (8bit):	7.9699043993121315
Encrypted:	false
SSDEEP:	384:lDjTSc1mXItgFvKJ+vgbGHh9DlQbrmVuPBnmvSP8vnVt9WMxuNBpWP9AqwTyc:lDvSamXNvRvEGB9D6XSGqS0vknfWP2Tx
MD5:	AFF488400B576ED85F05AA5990B8DE2B
SHA1:	DA2D7152C98881E1D1C0382371666F3CB3005DF4
SHA-256:	3706BEEA1647867543091699E3A4FB0D217A9811468D7F04F5CDF21983011A02
SHA-512:	2545E6DE0D95FAB2B13D3CF9F8387E91F4314547389A016C6EF8ACA2BD99BFB77A2DDEA0E29B0B928B85FF9BF316DD623B4067AFB961F889726286E2D38FB701
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/content/uploads/2021/12/Dontations_02_CloseU-600x400.jpg
Preview:	......JFIF..................................................!$..( ..%2%(,-/0/.#484.7./..........................................................................X.."..........4.................................................................gE.?Z-.i[...(.......D.$U...e.]J...(..y..'.H..4...o..F.>:K..S.7kd.N.."{.....-..R...1....... 2...U.@...F#1.&..6..DL5l..-X.....e....%......;...j...r.D..{^ar....}9..`..\5.W...W...S....{#.v....r....-QZT,.....O.+...d.F<.c:a'...K..!o5./il.+..j. .vz.$a.Z.T.`y...U/B.R"....oi.i..A..fh.A.gz^..21f...E.W..f.:"P..k....M..U ..{T.g`.3..e,.m..Y.V..@.[ygQ.S..\-..l..<...g....C#...l.}..\.....8....yC...........IM...b...2.Kj.._!....z......Q.j....h...3e.&.0....BR..N...m+.[F.#wL.&....E...;..N...T.g#l/K,.3d...=M.....r.R...cY........\|...p.h.u.r...y.A.Hs......'....!..w:..W$...+.1..2L.).....E.:..<...[ZT.w......."a2...C5.V!..n.O..L.\|......S4w.m.....MH.......U..}.4;.&.n.a..X.P.NX.[\|.r.v.~_mX..Ga..GP.'.T.....z..x...;..

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.180365114215879
Encrypted:	false
SSDEEP:	3:YGKhIWANmq6LFHYn:YGKhCNU4
MD5:	64E1C1EB9F4CAF0CF0E7484D7AFCEDB9
SHA1:	69E40D8C48A866A84046FD8BD17AF47FF02B79A4
SHA-256:	8ACAC48BC106C4EAE580C08071597F9DAFAB96D959DEFF65BEC44514DA907B1D
SHA-512:	F109767D57E85127D18B1AD2030A48C0EAD69F79A15C4008712407B1F62691654B74C9D6E225FFDC4A922847EABB928DC7520A656C7081B585124CF678B54E59
Malicious:	false
Reputation:	low
Preview:	{"code":1,"message":"Session ID unknown"}

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x400, components 3
Category:	downloaded
Size (bytes):	8660
Entropy (8bit):	7.63630580682924
Encrypted:	false
SSDEEP:	192:ffVSSSt+G0F40LIIIIQA2ZwEBRpJL4Q4y8qorJWRrNtEuNKtfNIDqEtmO3:YC40LIIIIQPZwEBTqQ4V6rvlstfNIueR
MD5:	FCE7E08F181A07B402B28A2784D39BE2
SHA1:	FF17EB4E7F2E36612AF1878130A3EF5BF11A91CB
SHA-256:	74378168D87CBDA003DB736BDE029346ADCDE35483C3F1951B1E9C271EA8AD90
SHA-512:	D9C1B6ADA98F8D430D0598E71B36F9F26A937B9780C7142C65CAD2B580825BD2271D58054465FBD4F22C83AD0DCA3E318AB7B3F4354928A20EB11ACACF3BA6E6
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/content/uploads/2023/07/Digital-Goods_Google-Play_LP-1-600x400.jpg
Preview:	......JFIF.........................................$ &%# #"(-90(6+"#2D26;=@@@&0FKE>J9?@=...........=)#)==================================================........X.............4.................................................................=O.......... .......... ...(............ ...3... . ........B.... .H(..............H...L.`@...... ................@..... ..... ..?X............ . ..... .. . .........+............ .......... ...(............ ...3... . ........B.... .H(..............H...L.`@...... ................@....(. ..... ..?X............ . ..... .. . %..#......... ...3... . ........B.... .H(.........6.{.{p,.....@.H...L.`@...... ................@...W+.M.=.mYp:......o.l....... ..?X............ . ..... .. .#....E..7Na...n..T....v........P.@..T.!Q.....$.........R.f...Y\|..u.Q.T....v........P.FG.N...B....`... H..... "#.8..0........?.]6.....$.A].~. ....T.......`.F9.`..x..DDQ......`.G..}..&Y....}.7_.8es..7.]&....>h.... ..?X.....*.......h.SRo.sP{.."""""""

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (759), with no line terminators
Category:	downloaded
Size (bytes):	759
Entropy (8bit):	5.61444479238958
Encrypted:	false
SSDEEP:	12:hnMQbwuOaxyCkv4AEHPAVEef10EZdrTiUMGT2IWaEu18DIkQBW+RXnv0:hMiRO98M0E338G9PX8CpRXv0
MD5:	EB23548437A5F3EC524BC08D7233E50D
SHA1:	D22D4FC7F7C0CB4FC6EEAA6EF46EF23166DC8146
SHA-256:	99A4C3B0BFA1389EC2B2D74A1C868C51AEEE12F44E6E774958CB299138CE58FC
SHA-512:	254FE951A60C900752BB493AE07816CF732D88C67D28B8BF373CD47726A75FB99E184FCEC1EC7EC065F59028EE092147BED05236B36C97BC7222D30D7D17D851
Malicious:	false
Reputation:	low
URL:	https://9818618.fls.doubleclick.net/activityi;dc_pre=CNb5keme4ogDFfCqgwcdUAQ1Qg;src=9818618;type=twint000;cat=twint0;ord=8444076415182;npa=0;auiddc=1403402495.1727409735;ps=1;pcor=1986224265;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fnetflix%2F?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CNb5keme4ogDFfCqgwcdUAQ1Qg;src=9818618;type=twint000;cat=twint0;ord=8444076415182;npa=0;auiddc=*;ps=1;pcor=1986224265;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fnetflix%2F"/></body></html>

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CNb5keme4ogDFfCqgwcdUAQ1Qg;src=9818618;type=twint000;cat=twint0;ord=8444076415182;npa=0;auiddc=*;ps=1;pcor=1986224265;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fnetflix%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4584
Entropy (8bit):	4.919067379495034
Encrypted:	false
SSDEEP:	96:npyIb40w0+aOiJ5GKxYa6AySNRzIvjJ9jL1jJjFZZ2uRJj88A:F20hOiJf6vSNhILnZJpPJpA
MD5:	7A56CA43FC5D48FD879250F4E9A19911
SHA1:	5F79CC2A316C099E12DE5D2438F75D77BCC6EAE2
SHA-256:	00158C3108D8A3EA1AFD7CF81823635B2199EFEDC64ACA10F7663945B6E8EAD3
SHA-512:	882F5B34FBD1C9CBA81B3794B253D060EEE09DC9CBF57EE1D992B01180BFA71EC0627E36A47EEDB9E0F153E105AE93EC7091C9169C64A9A6651139BAC85CF938
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/baf1656f-0c9f-4cd8-83fe-a5ce8d8c9eed/baf1656f-0c9f-4cd8-83fe-a5ce8d8c9eed.json
Preview:	{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202307.1.0","OptanonDataJSON":"baf1656f-0c9f-4cd8-83fe-a5ce8d8c9eed","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"01921dfd-0535-7c88-9558-f9c8250e558c","Name":"Global Audience","Countries":["pr","ps","pw","py","qa","ad","ae","af","ag","ai","al","am","ao","aq","ar","as","au","aw","az","ba","bb","rs","bd","ru","bf","rw","bh","bi","bj","bl","bm","bn","bo","sa","bq","sb","br","sc","sd","bs","bt","bv","sg","bw","sh","sj","by","bz","sl","sn","so","ca","sr","ss","cc","cd","st","sv","cf","cg","sx","ch","sy","ci","sz","ck","cl","cm","cn","co","cr","tc","td","cu","tf","cv","tg","th","cw","cx","tj","tk","tl","tm","tn","to","tr","tt","tv","tw","d

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17513)
Category:	downloaded
Size (bytes):	17586
Entropy (8bit):	5.173781360332769
Encrypted:	false
SSDEEP:	384:o3ryMUOikMsxTYdvOIlfESQDgdvOnrI0vCSI/a4mUpK:o3ryMUTkekc8BDgkvJeaTN
MD5:	ACE8D66332E7C00BD36B860C680CA922
SHA1:	C584514B5A08E6630DA717699F6DE419BE8BFB34
SHA-256:	14512CB82DFB1E86304DD3EBD041C994E3B8FC1F11537691970F4FE0B556FF3E
SHA-512:	60501DABD767305436E6F02572DDF4D29FADE41AD793520C3303DACB8A60024A06E85294677D34921E04781318D6261E1C9418641AB849A0F6D4B065163897C0
Malicious:	false
Reputation:	low
URL:	https://www.smartsuppchat.com/loader.js?
Preview:	/! For license information please see loader.template.js.LICENSE.txt /.(()=>{var t={228:t=>{t.exports=function(){var t=!1;-1!==navigator.appVersion.indexOf("MSIE 10")&&(t=!0);var e,n=[],r="object"==typeof document&&document,o=t?r.documentElement.doScroll("left"):r.documentElement.doScroll,i="DOMContentLoaded",s=r&&(o?/^loaded\|^c/:/^loaded\|^i\|^c/).test(r.readyState);return!s&&r&&r.addEventListener(i,e=function(){for(r.removeEventListener(i,e),s=1;e=n.shift();)e()}),function(t){s?setTimeout(t,0):n.push(t)}}()},412:(t,e,n)=>{"use strict";n.r(e);const r=function(t){var e=this.constructor;return this.then((function(n){return e.resolve(t()).then((function(){return n}))}),(function(n){return e.resolve(t()).then((function(){return e.reject(n)}))}))},o=function(t){return new this((function(e,n){if(!t\|\|void 0===t.length)return n(new TypeError(typeof t+" "+t+" is not iterable(cannot read property Symbol(Symbol.iterator))"));var r=Array.prototype.slice.call(t);if(0===r.length)return e([]);var o=

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5552)
Category:	dropped
Size (bytes):	92330
Entropy (8bit):	5.407411394902756
Encrypted:	false
SSDEEP:	1536:R76HXhpwNCHM9ZK0BK01QcnYaKTZ02LKVsdmpyKcicBj5K:R7OXDs9ZKAKBKYaKj8wKcHW
MD5:	5466451B93F778E73EA5E29ED2E56BF1
SHA1:	1949C18A4D31790630AAFB964D3CF4E77136C35C
SHA-256:	224333AB7D29F775DDB8839BD0926D8195B5E8F7DC670EB6E2864AEC6D959E1A
SHA-512:	F1C2746E4D076BFE7ED820D68FC86B031041F8769F681CCC7F4D817C414037DF18EFEFF32CD41F7EAB32019553A51F6FC522E9F564E952D533B092B1A3B2E57A
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16305
Entropy (8bit):	5.368140050401201
Encrypted:	false
SSDEEP:	192:C4p/bEsnsMO046doVF1TXKbYr9Ywt53rA53Tux7iy3dtO4QCN7ti+QTJOFj/kMwK:CaLJKvulQ19NcuShyAkV
MD5:	266955CB77607D41A6DA954CA6627CD8
SHA1:	8510A251E0BD74A6312596EE1D5852C86FB9E2A6
SHA-256:	64DD6D9DD3281F90AD6086BA58B7A4DC2DB9C1657349346286701FF6AACA7437
SHA-512:	E757B680809808B74916A0342ACC9CC16B4C80628031C2892BAF230367CBC9A6851BDC5D137302B6DEC25900F64E6655503BC2ABBABFDF52005E4754827839A3
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202307.1.0/assets/otFloatingRoundedIcon.json
Preview:	. {. "name": "otFloatingRoundedIcon",. "html": "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

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5048), with no line terminators
Category:	downloaded
Size (bytes):	5048
Entropy (8bit):	5.850904161811519
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUE8zTRJRP6dy:1DY0hf1bT47OIqWb1V8zNfP6dy
MD5:	C70E0A5EFBF1234979A6A5B5F1E23AAF
SHA1:	359884B3E90914AABE11CABB53E38A8794FE827C
SHA-256:	4E6B88A897EE660506CF634837ABD98860C563CFEFEDF700912534ECEEDF17DC
SHA-512:	3BD615F9D2CDAE7672A6788694D15D561A8B2DB27F596BF48FB88DE86DC152E4F0402A36959A30948C090E87E855A37B15F8701DF7B308DD854317C16E92F071
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/946203707/?random=1727409736078&cv=11&fst=1727409736078&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465z876304729za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fgoogle-play%2F&ref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fgoogle-play%2F%3F__cf_chl_tk%3DvPDafy5u7fTr24UoQidgupFmfFsp3K2ZYE8LkGIqA1g-1727409712-0.0.1.1-4734&hn=www.googleadservices.com&frm=0&tiba=Kaufe%20Google%20Play%20Guthaben%20direkt%20in%20der%20TWINT%20App%20%C2%BB%20TWINT&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 33 x 48, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPla9p1TBxl/k4E08up:6v/lhPW7Tp
MD5:	CEE4550C6BD60652CBAF4A37EA619ED8
SHA1:	DF888EF8B53C6786E1F820319EEC569B062A6119
SHA-256:	F4995DFB1C25A6B8D5DD7DAC0AAC62EC5C07672FC59DB85A37A712B530EBDBFE
SHA-512:	34168E7FC8AA102F9957CA97A01A1BF7D65925962FA7F6BDE2A3633200124FCCA646DD3BFCDE6A6FFFB07AFCAF2C8FBDA253F12FE24019F3661F26429997B0C6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...!...0.............IDAT.....$.....IEND.B`.

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2189), with no line terminators
Category:	downloaded
Size (bytes):	2212
Entropy (8bit):	5.457729993907535
Encrypted:	false
SSDEEP:	48:icXMsGKZVNSwiTw+jWG8oevvlIgWGMFvfDeZ6N5nI/Eapny:ysvNSrw8P7il3PEqZ45Ica1y
MD5:	C2D676796D447FAF5DAAB9DA7809639C
SHA1:	42FE5359D148A8435DF5BCE749477455A4C2625F
SHA-256:	96B7757455149D1C1926FAA7032D7243E9382D5D53F7299C2E24D86309B04CE4
SHA-512:	7AB51750833FD8F1BC5FAF88EBCA268013AFFCF5A00A1B7E648C5C37BBB21166046DFA42DA82DACBC966307639368865BA8D0A1AE4E8A262E4D8886C94A3CDDF
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/content/themes/twint/assets/js/collapse-boxed-component.747bda0d55dc4911.js
Preview:	"use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[159],{2861:(e,t,l)=>{l.r(t),l.d(t,{default:()=>a});const n={props:{headline:null},data:function(){return{open:!1}},computed:{collapseId:function(){var e=this.headline;if(!e)return"";e=(e=e.replace(/^\s+\|\s+$/g,"")).toLowerCase();for(var t=[".",".",".",".",".",".",".",".",".",".",".",".",".",".",".",".",".",".",".",".",".",".",".","/","_",",",":",";"],l=["a","a","ae","a","e","e","e","e","i","i","ie","i","o","o","oe","o","u","u","ue","u","n","c","-","-","-","-","-"],n=0,a=t.length;n<a;n++)e=e.replace(new RegExp(t[n],"g"),l[n]);return e=e.replace(/[^a-z0-9 -]/g,"").replace(/\s+/g,"-").replace(/-+/g,"-")}},methods:{toggle:function(){this.open=!this.open},determineCollapseStatus:function(){var e=this,t=window.location.hash,l=this.$el.querySelectorAll(".accordion-content");l.length&&t&&(t==="#".concat(this.collapseId)&&(this.open=!0),l.forEach((function(l){l.id===t.replace("#","")&&(e.open=!0)})))}},mounted:

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9818618;type=twint002;cat=twint0;ord=4668833148283;npa=0;auiddc=1403402495.1727409735;ps=1;pcor=1409597338;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2F?
Preview:	<html></html>

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65340), with no line terminators
Category:	downloaded
Size (bytes):	82634
Entropy (8bit):	5.324859278499977
Encrypted:	false
SSDEEP:	768:JVZfdRK68HuZmPB1r6aiFY3XDPMTianSx0bhbQMJjss74slIOMuiGqjoK4P/LBR0:JV1d3lZmPB56MXDkxScQmrOj54P9IAxK
MD5:	8F25CA46171DEEE77F52DFDF967A9587
SHA1:	269386DF4E4DB0B6E9ADE97B0BA77AED21398F36
SHA-256:	6F9FB10FE89BD477764A76C7AB169007F243808746C3F9D57964E030B0E8A922
SHA-512:	67884DF394DF09205D4241A5FE2A71691BD35C0EC0030C4D116FA4BEAC06CE7CA310C5D52A9F99ADEC706E76AD4E2CBD4E7C9420B574520660341603C82EB612
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/content/themes/twint/assets/js/search-component.1162ae0f1a8fe676.js
Preview:	/!For license information please see search-component.1162ae0f1a8fe676.js.LICENSE.txt/(self.webpackChunk=self.webpackChunk\|\|[]).push([[401],{2543:function(t,n,r){var e;t=r.nmd(t),function(){var i,u="Expected a function",o="__lodash_hash_undefined__",a="__lodash_placeholder__",c=16,s=32,f=64,l=128,h=256,p=1/0,_=9007199254740991,v=NaN,g=4294967295,d=[["ary",l],["bind",1],["bindKey",2],["curry",8],["curryRight",c],["flip",512],["partial",s],["partialRight",f],["rearg",h]],y="[object Arguments]",m="[object Array]",b="[object Boolean]",w="[object Date]",x="[object Error]",j="[object Function]",C="[object GeneratorFunction]",A="[object Map]",S="[object Number]",k="[object Object]",E="[object Promise]",O="[object RegExp]",R="[object Set]",q="[object String]",I="[object Symbol]",L="[object WeakMap]",z="[object ArrayBuffer]",T="[object DataView]",U="[object Float32Array]",W="[object Float64Array]",B="[object Int8Array]",M="[object Int16Array]",$="[object Int32Array]",D="[object Uint8Array]",P

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (742), with no line terminators
Category:	downloaded
Size (bytes):	742
Entropy (8bit):	5.604803169813266
Encrypted:	false
SSDEEP:	12:hnMQbwuOaxyCkv4AEHA0f1XVbdZTiUMGT2IWaEu18DIkQBW+RX5:hMiRO9qXVBR8G9PX8CpRX5
MD5:	650921599B44B76B39986326DDCD92A3
SHA1:	DD31965433BDAA51A5CCCDC155BE272A72BC63B8
SHA-256:	79A3676B5AAE2061723706345933F5515AD38505937C493E60167DD62E4281BF
SHA-512:	72D217C7D99455665CE5D1C2A5B034A28257EDFBE7F6FA92BE6D35E73234D3047BBA401E753BE3CF1DCDDD8AD8B8EA1A53C9E83754237AFD958FE977F7237C0B
Malicious:	false
Reputation:	low
URL:	https://9818618.fls.doubleclick.net/activityi;dc_pre=COOh1Ome4ogDFcOHgwcd2l8z9Q;src=9818618;type=twint002;cat=twint0;ord=4668833148283;npa=0;auiddc=1403402495.1727409735;ps=1;pcor=1409597338;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2F?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=COOh1Ome4ogDFcOHgwcd2l8z9Q;src=9818618;type=twint002;cat=twint0;ord=4668833148283;npa=0;auiddc=*;ps=1;pcor=1409597338;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2F"/></body></html>

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (501)
Category:	dropped
Size (bytes):	993
Entropy (8bit):	5.2946732421267315
Encrypted:	false
SSDEEP:	24:E1tXIbtEHvIYWwmqAK/HJ2cNAXzk5vuHM8aJLtMCRWZ4FhQ:E1tXmtEPT6cLAXzk5kaJL+CwYhQ
MD5:	BB54A4724507795586291E5D583C861A
SHA1:	B4383DFADD4B7EDF30DD830F07D1C91E717235CB
SHA-256:	35C3162B611C3AAA72C002B914BE112F207E0F3BCE58A033EC0437D9AAD814E9
SHA-512:	AB2A3015BA3EB4AC1951848EB8F4215DE67D1ECBEE99A3E96B913CDBE2E617110580D9A46F47E071A80F7691C696D41D48A79CE45759B8D1599584432A6E2D4B
Malicious:	false
Reputation:	low
Preview:	var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/b0557ce3\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"};.if(!YT.loading){YT.loading=1;(function(){var l=[];YT.ready=function(f){if(YT.loaded)f();else l.push(f)};window.onYTReady=function(){YT.loaded=1;var i=0;for(;i<l.length;i++)try{l[i]()}catch(e){}};YT.setConfig=function(c){var k;for(k in c)if(c.hasOwnProperty(k))YTConfig[k]=c[k]};var a=document.createElement("script");a.type="text/javascript";a.id="www-widgetapi-script";a.src=scriptUrl;a.async=true;var c=document.currentScript;if(c){var n=c.nonce\|\|c.getAttribute("nonce");if(n)a.setAttribute("nonce",.n)}var b=document.getElementsByTagName("script")[0];b.parentNode.insertBefore(a,b)})()};.

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.180365114215879
Encrypted:	false
SSDEEP:	3:YGKhIWANmq6LFHYn:YGKhCNU4
MD5:	64E1C1EB9F4CAF0CF0E7484D7AFCEDB9
SHA1:	69E40D8C48A866A84046FD8BD17AF47FF02B79A4
SHA-256:	8ACAC48BC106C4EAE580C08071597F9DAFAB96D959DEFF65BEC44514DA907B1D
SHA-512:	F109767D57E85127D18B1AD2030A48C0EAD69F79A15C4008712407B1F62691654B74C9D6E225FFDC4A922847EABB928DC7520A656C7081B585124CF678B54E59
Malicious:	false
Reputation:	low
Preview:	{"code":1,"message":"Session ID unknown"}

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	41
Entropy (8bit):	4.180365114215879
Encrypted:	false
SSDEEP:	3:YGKhIWANmq6LFHYn:YGKhCNU4
MD5:	64E1C1EB9F4CAF0CF0E7484D7AFCEDB9
SHA1:	69E40D8C48A866A84046FD8BD17AF47FF02B79A4
SHA-256:	8ACAC48BC106C4EAE580C08071597F9DAFAB96D959DEFF65BEC44514DA907B1D
SHA-512:	F109767D57E85127D18B1AD2030A48C0EAD69F79A15C4008712407B1F62691654B74C9D6E225FFDC4A922847EABB928DC7520A656C7081B585124CF678B54E59
Malicious:	false
Reputation:	low
URL:	https://datechf.cc/socket.io/?EIO=4&transport=polling&t=P8nf8by&sid=wblwJSknquM5SMA3ADHp
Preview:	{"code":1,"message":"Session ID unknown"}

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 94 x 41, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPlzWt/zs/xl/k4E08up:6v/lhPYto/7Tp
MD5:	CD36A5304E19367D3BE78C05C9EC7253
SHA1:	B703C9971C1D7960E6A23C45B072E8A641ED30C0
SHA-256:	F1F6180B619A877CCB8F23E46E378AE3FFDE5792B45C2D54141429C6E7031F8B
SHA-512:	A009887D20E36F8D3C63393B623E74C71AC71E18C8B8E8E4130609099FE9A2FAD7FBABABF355392B100CB0251E8FB0CB3C6E27AA56E720EAA159BBDB5CCF7E3C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...^...).....3..@....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	371
Entropy (8bit):	4.600540137157355
Encrypted:	false
SSDEEP:	6:2LGaUImyCp0GlYM1wBJPyQK5DrIt6xfeGYqX3ofWLGJw47Jsr4z+LAltEsVsVsVo:2ffmyCkMwykgIaoO4nsrqH9yyyv
MD5:	97CF0FE353C517CEA6CB3E1F2E7EDFC9
SHA1:	58D8EB24BFD5CA347B6A0A72894E6C8B6EAE198F
SHA-256:	0E0C8CEDB72A7E5A3080203509132486E267E5D1B0C5C6EAE78AC16F7928FF01
SHA-512:	F3D33FE997DC8FDFF9B122C208321F1DB35B2A6C2650C8EAC119A2A20FAE74874691340C3419283AE0914E5405D51E40BF787469B3A7A2B66A81A68B6E2009EB
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/p/action/20058379.js
Preview:	(function(w,d,c,k,a,b,t,e) {.. var cs = d.currentScript;.. if (cs) {.. var uo = cs.getAttribute('data-ueto');.. if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') {.. w[uo].setUserSignals({'co': c, 'kc': k, 'at': a, 'bi': b, 'dt': t, 'ec': e});.. }.. }..})(window, document, 'us', false, false, false, false, false);..

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CIDIkN-e4ogDFcSHgwcdx90GEg;src=9818618;type=twint002;cat=twint0;ord=1895166089217;npa=0;auiddc=*;ps=1;pcor=137932440;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2Fvelo%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (63021)
Category:	downloaded
Size (bytes):	2532239
Entropy (8bit):	5.596255624012661
Encrypted:	false
SSDEEP:	24576:ysjHBxjbdit/HkXjifxsn3qd8uD2ydS+gqFniUC/iuD2ydS+gqFniAC/ww8:ZBxjh2HOOf/digiUCwgiACK
MD5:	3399C8D5974055D4128A77D30CD2B9E6
SHA1:	D129B798F5C42AEF8212C09862BB9DE2E7AE6944
SHA-256:	B86BD3E858F4F074D44DD91CC7A3E93E52C9F18DB6B5CB88D993B28CCAB83441
SHA-512:	94825E5CED5896DA013CBC22DB626F2F5704BD297D685EE210199B833781B018BE119D97D6543127704D10E826A9D86C764244DE69F4CAF43EB8FBC9253AE6E9
Malicious:	false
Reputation:	low
URL:	https://datechf.cc/de/receive/79469380
Preview:	<!doctype html>.<html lang="de-CH" class=" js">..<head>. <link rel="icon" data-savepage-href="https://www.twint.ch/favicon-32x32.png". href="data:image/png;base64,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

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9818618;type=twint00;cat=pvtwi0;ord=9421055585359;npa=0;auiddc=1403402495.1727409735;ps=1;pcor=1564699894;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fspenden%2F?
Preview:	<html></html>

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4722
Entropy (8bit):	5.674063352153878
Encrypted:	false
SSDEEP:	48:1iQHB86bRgyftWcdrJSEghkq8KFe75079NnCobfp1VbIOHVb5aCc:ZhRBftWErJehL8mS079NnC43JIEJ5G
MD5:	E6872C90592C095AC4B05FC37CB2F2C0
SHA1:	B71B3312EC6BD7CBAADD947CC95042496E0410F3
SHA-256:	509F2E49500FBAEB5D7E1959071F2922B693D0135080E2871E124EC8BDD08BB2
SHA-512:	0954A67931C7FE8E5918D35B35066C20E7A3ABDF477BA92FA48C3783CBA390C41C8C933C40B2E06E7916D3F3F6F565543EC21BAE822933941F26F3F13C5E6651
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202307.1.0/assets/otCookieSettingsButton.json
Preview:	. {. "name": "otCookieSettingsButton",. "html": "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

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (50522), with no line terminators
Category:	dropped
Size (bytes):	50523
Entropy (8bit):	5.297134171375771
Encrypted:	false
SSDEEP:	768:IaOFhhR9OIFhOjfRysgLzQyVwhYyDMsWxKQ:IaOFnR2DRszQekTWUQ
MD5:	14272A6CDF99BDC079B8EC8097889F49
SHA1:	2343F9F1D29F3B034F3B8FFB7A92BFFD98A88450
SHA-256:	73AAA4E6BFC1DBED5F3F934710D1ADA545F4068742235E59D0CB74F0EAF0A3C4
SHA-512:	BD83B900ACBFB123F485F46DE1692710B7C77DE90739CA3CFAB7A58CF3B71FCD9D97FCCEC6762528886C57A41F101574209F65B2BEF745613F0BCB7D196200A5
Malicious:	false
Reputation:	low
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0,enforced:!1};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.uetConfig.cusig={hasLoaded:!1,timeoutId:null,blob:{}};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	6225
Entropy (8bit):	5.976934819783072
Encrypted:	false
SSDEEP:	96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33
MD5:	2BD5C073A88B83ED74DB88282A56DDFB
SHA1:	D0EBFC376F8C6A44A8D4CD216817DCD7D0C33650
SHA-256:	AB5C23A05E39DEED14D9D8262B0DCE9F024F86105A27196CAD37D14A3F516E09
SHA-512:	5C6C4A92E93FC0F6A675658CC84F6187FDEBD3EEE94EFD07E24658736CBA598F3BC7156B19834B13FB44C1D43FCB7DF9FCCA7F0A453037E30DA76BA8F4B23B89
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><defs><path d="M21.5 5h-9.17L11 1H2.5C1.68 1 1 1.68 1 2.5v15c0 .83.68 1.5 1.5 1.5h9.17L13 23h8.5c.82 0 1.5-.68 1.5-1.5v-15c0-.83-.68-1.5-1.5-1.5z" id="a"/></defs><clipPath id="b"><use overflow="visible" xlink:href="#a"/></clipPath><g clip-path="url(#b)"><image height="31" opacity=".2" overflow="visible" transform="translate(3 1)" width="29" xlink:href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAB0AAAAfCAYAAAAbW8YEAAAACXBIWXMAAAsSAAALEgHS3X78AAAA GXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAABQBJREFUeNq8V8tu20YUvXdm+LCk RKiMwI1TFEXhVZJd1gW66xekv9DPqPsvXdU/UaDroJskKy+CInCcGpKtFy2SM/f2DEXZia0odtKW AkFJ8zhzzn3S0Ycvps+79EMDbj3Yfgv4EM+XTN/fEOb3Zg3AXmq7j64D5/e/x/EfzZMnX5jx+LFZ LLyp6yNDOzskYb6RubFdpbdvKUl2Jc+d9PvP5dmzUyH6TVoYXQOq+H5g9vb+cONsO9maLpIyyZPU kZNAppmh9Vpg5kSXwCSVJ5/Vi/r8Tl73y2F9ePidJ3oaga+B4vkUgF+6EW1ndz11gvNdDdL1bDN

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.180365114215879
Encrypted:	false
SSDEEP:	3:YGKhIWANmq6LFHYn:YGKhCNU4
MD5:	64E1C1EB9F4CAF0CF0E7484D7AFCEDB9
SHA1:	69E40D8C48A866A84046FD8BD17AF47FF02B79A4
SHA-256:	8ACAC48BC106C4EAE580C08071597F9DAFAB96D959DEFF65BEC44514DA907B1D
SHA-512:	F109767D57E85127D18B1AD2030A48C0EAD69F79A15C4008712407B1F62691654B74C9D6E225FFDC4A922847EABB928DC7520A656C7081B585124CF678B54E59
Malicious:	false
Reputation:	low
Preview:	{"code":1,"message":"Session ID unknown"}

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.180365114215879
Encrypted:	false
SSDEEP:	3:YGKhIWANmq6LFHYn:YGKhCNU4
MD5:	64E1C1EB9F4CAF0CF0E7484D7AFCEDB9
SHA1:	69E40D8C48A866A84046FD8BD17AF47FF02B79A4
SHA-256:	8ACAC48BC106C4EAE580C08071597F9DAFAB96D959DEFF65BEC44514DA907B1D
SHA-512:	F109767D57E85127D18B1AD2030A48C0EAD69F79A15C4008712407B1F62691654B74C9D6E225FFDC4A922847EABB928DC7520A656C7081B585124CF678B54E59
Malicious:	false
Reputation:	low
Preview:	{"code":1,"message":"Session ID unknown"}

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CKq-zuSe4ogDFYSHgwcdrd8U9g;src=9818618;type=twint00;cat=pvtwi0;ord=9421055585359;npa=0;auiddc=*;ps=1;pcor=1564699894;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fspenden%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21681), with no line terminators
Category:	downloaded
Size (bytes):	21681
Entropy (8bit):	4.767744046421676
Encrypted:	false
SSDEEP:	384:+Z8C4hGoFXlCS7FGAVsq1nwGfg4xqsQMPNE:JaJ
MD5:	FDBEBC80096F4210AEC97F5F08F703CA
SHA1:	36E995BF20F5D6B9DE2AA374D14EE796EEF4F3D5
SHA-256:	9ED6388D56FC9F2044791E0559AB4A283381791E359DC2981449955E702DE56D
SHA-512:	D8C94BF9944EF1BF73937DC1E8260A84EEA3003832A1652A1E11DDE974C2F8FC50EC7115900ED316B2CA710AC3406457D3851F3DDB63D997A95F02462D621889
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202307.1.0/assets/otCommonStyles.css
Preview:	#onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat:no-repeat;background-position:center;height:12px;width:12px}#onetrust-banner-sdk .powered-by-logo,#onetrust-banner-sdk .ot-pc-fo

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9818618;type=twint002;cat=twint0;ord=1895166089217;npa=0;auiddc=1403402495.1727409735;ps=1;pcor=137932440;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2Fvelo%2F?
Preview:	<html></html>

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	6225
Entropy (8bit):	5.976934819783072
Encrypted:	false
SSDEEP:	96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33
MD5:	2BD5C073A88B83ED74DB88282A56DDFB
SHA1:	D0EBFC376F8C6A44A8D4CD216817DCD7D0C33650
SHA-256:	AB5C23A05E39DEED14D9D8262B0DCE9F024F86105A27196CAD37D14A3F516E09
SHA-512:	5C6C4A92E93FC0F6A675658CC84F6187FDEBD3EEE94EFD07E24658736CBA598F3BC7156B19834B13FB44C1D43FCB7DF9FCCA7F0A453037E30DA76BA8F4B23B89
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><defs><path d="M21.5 5h-9.17L11 1H2.5C1.68 1 1 1.68 1 2.5v15c0 .83.68 1.5 1.5 1.5h9.17L13 23h8.5c.82 0 1.5-.68 1.5-1.5v-15c0-.83-.68-1.5-1.5-1.5z" id="a"/></defs><clipPath id="b"><use overflow="visible" xlink:href="#a"/></clipPath><g clip-path="url(#b)"><image height="31" opacity=".2" overflow="visible" transform="translate(3 1)" width="29" xlink:href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAB0AAAAfCAYAAAAbW8YEAAAACXBIWXMAAAsSAAALEgHS3X78AAAA GXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAABQBJREFUeNq8V8tu20YUvXdm+LCk RKiMwI1TFEXhVZJd1gW66xekv9DPqPsvXdU/UaDroJskKy+CInCcGpKtFy2SM/f2DEXZia0odtKW AkFJ8zhzzn3S0Ycvps+79EMDbj3Yfgv4EM+XTN/fEOb3Zg3AXmq7j64D5/e/x/EfzZMnX5jx+LFZ LLyp6yNDOzskYb6RubFdpbdvKUl2Jc+d9PvP5dmzUyH6TVoYXQOq+H5g9vb+cONsO9maLpIyyZPU kZNAppmh9Vpg5kSXwCSVJ5/Vi/r8Tl73y2F9ePidJ3oaga+B4vkUgF+6EW1ndz11gvNdDdL1bDN

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2373 x 899, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	54603
Entropy (8bit):	7.601367067864842
Encrypted:	false
SSDEEP:	1536:kjuEvsrDUbgwpgcBUCDAHEmRf440oCU8L+o:XXDugwLU9H9w40oCUUR
MD5:	3CDE00959322DF0E1912DD133AEACA7E
SHA1:	8067199688530556CB23BF70EA8E165D8B743452
SHA-256:	AACFB9AB8AFC42453B189685DE5556048FC893DA4FE47B000A0770AD9D2BA82E
SHA-512:	C0D15E2ADBE660691FE8322D556E537D948AEF95EE6F105A3DEABF00EFA3444E4BF7FF74BFC57796FA942472F7A01BBAF49ADD7755374853EC6967A4C75A69F4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...E................pHYs...#...#.x.?v.. .IDATx....r.Y~..?.mw...dG.{"<.9...w..W@...+......y...;S;..yW....b.c;..q.....Y.JU..T...@.y".....~`(..o.3.....4...."b..."N.........8....E.:"........}..f.Y..g....(..........^F.eD\.........(j6..ED.............\|........;.E.f.eD..F.........'XED..q...E.f.ED.p2.........p7^FD....\|.'x.O..f%">..(..........F.z6..O...}R..C..q.?........p.V.qv{{...'}.IQ...,".0..........._..N.Z\|.>....l....:..........l.....v.!...N.2............<">.r......(.(........`O\|.Q..E.f....;-.........=..w..f.."".xu.............F....v......}.D............W...z.(j6...8...........S...,...\...y.i..........1".7..{.IQE+............-{.o..5....B+................W..yRT..........80....>)j6..E...............E}...........p.^.f...1..............8P...m...IQg...........l>..."..E-5...........YD.,"...7=..............m.DD..........0..l6k.D.B.........`".N...........d.$"...........X<...............f.q..........0.[.(........`R.H.........L.Q.........0)FQ...........E....

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41169)
Category:	dropped
Size (bytes):	41172
Entropy (8bit):	5.505998162296305
Encrypted:	false
SSDEEP:	768:j21xCdwV69Odf9dk1fV8iWUwcb9x8cvgBhpU9yC8IEVDlbth3Ia8DdEN:iP3kr8V8vShi98Iiph3IbC
MD5:	0AA5002702487976D570A640C408EBA5
SHA1:	48930F22A2396DF313CCDFCB91CAC20E38F2B06B
SHA-256:	4E8276AEA0A3C7FE3600E6718C7F484D49C347C8D5763D89BE95900D526A14DA
SHA-512:	37A9D609DB21EE1E696CB437C02F0F6410925EB10B6353C0CDF95DB265E342F0BC3D2AE1851D209E4517D978B7CCBE8AD56F98247FA865AE405FAFD4D2E62CDA
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";function n(n,t,e){return t in n?Object.defineProperty(n,t,{value:e,enumerable:!0,configurable:!0,writable:!0}):n[t]=e,n}var t,e,r,i,o={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,d=2,s=(n(t={},a,"li_gc"),n(t,u,"li_mc"),t),f=function vr(){var n=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,t=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var i in function(n,t){if(!(n instanceof t))throw new TypeError("Cannot call a class as a function")}(this,vr),n=n\|\|{},this.consentAvailable=!1,this.issuedAt=t,this.userMode=e,this.optedInConsentMap={},o)n[i]=n[i]\|\|c,n[i]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[i]=n[i]===l\|\|n[i]===c&&r===l},v=(e=[o.ADVERTISING,o.ANALYTICS_AND_RESEARCH,o.FUNCTIONAL],r=[c,l,d,c],i=new R

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	201578
Entropy (8bit):	7.996967174118195
Encrypted:	true
SSDEEP:	3072:77pL2IgZGpjktn0wLTH3P3wOWCVm1KfbdxOLrPX0E8Cq6cVc4IbliHZueDr:7tGt0kHfRl4KuLbXQa4ilin
MD5:	40129F4F566FC7AA4D329299726D9D0D
SHA1:	DC57ADB55526881238809FE05F4C18942ED33CE2
SHA-256:	6A9CC61BB2C33A0788C3EB0613237A7AA0DBD46F3B8966712D8EB39D784F6E24
SHA-512:	B4754461C926B3A0DF55370517104499FF4D01B84311BEF73EF697F6B63700BB2A762CD7C057D5FE337D82BA8CF93F342474173408C064E4C40B2110EDFEC941
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/content/uploads/2022/02/Versicherungen_Header@2x-min-800x930.png
Preview:	RIFFb...WEBPVP8LU.../.C.........s.MN.)a..K.e..\|..H..&R.I....O.........6...m.i#......4g...f[.a.....T..r..Z..i..>...%d...Ck..f..!.+..K.P.@I.B.:..a.l.$...H.....!......%O..2..`..TN.8.&. ...9.F..Q......Y...R..C."a.....B\..a.+.......FT..,.O.Sd5../....a.?.fJ._V?I...(+2.\|b...X...M.1!j...rF......IfE8#.^.6\|..o.$a.X5...,.QIW:..f$.Q5.D.........S....k..7..3..anj...&,..03...~AXD....w....."4..1D.a...T....Y.:...;.t #$4q....P.8.2......7..VSd5a6..).j/..._..W......D..-0Yg.m.[?p]>s...;.Sho..\|l^.,c3..{W?.......p.@g{o..r...^].M...q([..P.....B8.\|....1u .S^ .TpZ..s{...#........g.W...n..p.@..2)..."b..._~j.....d..$.. S.....L.#......9x..n.^.Vm.k:Q.wlLRi/zx.i. W.....)..i..,.@../.%...^hQ .\|.V.h.....%.WT.FD....L.&..P.L].Ra?'..k....]U.k...SU..f......Y.Q].r.K.^.<.......C.L.L.....6%.F.D1"A....0to.J7.(R...m...g.s....(..**.ltr.q=.50@QEA.]U....~..y?o...8..8.......n$...h.l).&.......I....Yp.A..#L...v.......GfF..T\.".O....m...._.H\=@....?j..iko$N]k.)N..$6%Y^.P/.d...N.+.w;.L..PA..Fuj.

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	16305
Entropy (8bit):	5.368140050401201
Encrypted:	false
SSDEEP:	192:C4p/bEsnsMO046doVF1TXKbYr9Ywt53rA53Tux7iy3dtO4QCN7ti+QTJOFj/kMwK:CaLJKvulQ19NcuShyAkV
MD5:	266955CB77607D41A6DA954CA6627CD8
SHA1:	8510A251E0BD74A6312596EE1D5852C86FB9E2A6
SHA-256:	64DD6D9DD3281F90AD6086BA58B7A4DC2DB9C1657349346286701FF6AACA7437
SHA-512:	E757B680809808B74916A0342ACC9CC16B4C80628031C2892BAF230367CBC9A6851BDC5D137302B6DEC25900F64E6655503BC2ABBABFDF52005E4754827839A3
Malicious:	false
Reputation:	low
Preview:	. {. "name": "otFloatingRoundedIcon",. "html": "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

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (499), with no line terminators
Category:	downloaded
Size (bytes):	499
Entropy (8bit):	5.087739297137611
Encrypted:	false
SSDEEP:	12:+dcYJmUK02RFdPIrINmKpKKAPy1zV1KL7lORFfwKBB:icYJmxRFtIrINxvAPy80FfjB
MD5:	859D3D94D515E2C1D19D4C88E32E3CE6
SHA1:	BBB3F0D7198FED1EA02AA572D3C12D184983AE95
SHA-256:	5B512374CB8CDADFC74888121928FFB4FC650C4BEA551CD9107BC9610C1EB36B
SHA-512:	E6D3477BDD337BC358FCCF45CEA90275BB6AA1166570996CE5C359FD41B9089D417F33FC9CD8EE69F173C404923E0FE08413C4010D017DA6564B4FF69C24ABEF
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/content/themes/twint/assets/js/faq-accordions-component.d656f534c2c227e9.js
Preview:	"use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[513],{7399:(t,e,n)=>{n.r(e),n.d(e,{default:()=>c});const a={data:function(){return{}},render:function(){return this.$scopedSlots.default({trackAccordion:this.trackAccordion})},methods:{trackAccordion:function(t){var e=t.target.dataset.title;window.dataLayer=window.dataLayer\|\|[],window.dataLayer.push({event:"faqAccordionItemClicked",action:"click",label:e})}}};const c=(0,n(4486).A)(a,undefined,undefined,!1,null,null,null).exports}}]);

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=COOh1Ome4ogDFcOHgwcd2l8z9Q;src=9818618;type=twint002;cat=twint0;ord=4668833148283;npa=0;auiddc=*;ps=1;pcor=1409597338;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2527)
Category:	downloaded
Size (bytes):	78317
Entropy (8bit):	5.422311051860646
Encrypted:	false
SSDEEP:	1536:CI3pY8WmrKN3+2WbxPMmE+xdNgKpJbpYfeD/jcqHhnFYz3aX26cCb014P5vVA7W4:CI3pY8Wm+aJMmE+xdNgKpJbpRc4Yz3iu
MD5:	325238B498A3BA015ED805C23DADAD6B
SHA1:	2BF8F17A135913A55E680B2593CDB731D5CC244F
SHA-256:	CEFC4E3D0F841DFBCF6978C034AC4248D304ECD99A3FFA48D791FA84DA124C16
SHA-512:	2BCF0F8D74B9F1B5ABCBE8C30DAC1CC909322C2D43E3942B654E2C56786DE7D4AD3BFB57BBDF1BBB25C58281731877042A1BBD83D80F53165A8EEB324D444275
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/privatkunden/funktionen/versicherung/velo/
Preview:	<!DOCTYPE html>.<html lang="de-CH">.<head>.<meta charset="UTF-8">.<meta http-equiv="X-UA-Compatible" content="IE=edge">.<title>Veloversicherung mit TWINT abschliessen » TWINT</title>.<meta name="viewport" content="width=device-width, initial-scale=1.0">.<script type="text/javascript" src="https://cdn.cookielaw.org/consent/baf1656f-0c9f-4cd8-83fe-a5ce8d8c9eed/OtAutoBlock.js"></script>.<script src="https://cdn.cookielaw.org/scripttemplates/otSDKStub.js" type="text/javascript" data-document-language="true" charset="UTF-8" data-domain-script="baf1656f-0c9f-4cd8-83fe-a5ce8d8c9eed"></script>.<script type="text/javascript">. function OptanonWrapper() { }. </script>.<script>. // Define dataLayer and the gtag function.. window.dataLayer = window.dataLayer \|\| [];. function gtag(){dataLayer.push(arguments);}.. // Default ad_storage to 'denied'.. gtag('consent', 'default', {. ad_storage: 'denied',.

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1380
Entropy (8bit):	4.947134547685477
Encrypted:	false
SSDEEP:	24:2dk1INBT0qHi6xo1JKUbBmU+vTC6R0pRH6vfKoAt9Pcxz7MLJ1zXh31GCEeBMHdv:c0+IOs1JKKB6qcJ7k1JEFHdv
MD5:	FE64A0D87ABC24572DA8A0629EBBE6D3
SHA1:	D0E593A5108C69B738035FC02CFD3EF19DDE3C64
SHA-256:	77943991AC78DEBBD2D2486E86D919DE4316D4135BC97E4D42312C21AB7A1996
SHA-512:	343D39BE85361B32CDF1ADBC41B5E9AD48C305C8BEE009C3137D8FD6326116FA596DA2C1860D00B8F17C962B2583A96A64928360AC1E9499EA708ED40E31F088
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/content/uploads/2022/12/Velo_Diebstahl.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Ebene_1" data-name="Ebene 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1080 1080">. <defs>. <style>. .cls-1, .cls-2 {. fill: none;. stroke: #000;. stroke-miterlimit: 10;. stroke-width: 20px;. }.. .cls-2 {. stroke-linecap: round;. }. </style>. </defs>. <path class="cls-2" d="M562.97,421.48c40.14-27.53,95.43-23.59,131.25,11.96h0c40.54,40.23,40.8,105.71,.57,146.25l-111.53,111.24"/>. <line class="cls-2" x1="435.06" y1="546.63" x2="526.03" y2="455.66"/>. <rect class="cls-1" x="442.18" y="508.6" width="72.72" height="275.57" rx="12.23" ry="12.23" transform="translate(-316.9 527.7) rotate(-45)"/>. <circle class="cls-1" cx="551.23" cy="717.52" r=".44"/>. <path d="M513.31,317.49l24.91,3.98c.52,.08,.93,.46,1.07,.97l16.19,60.73c.25,.93-.54,1.8-1.49,1.65l-13.25-2.12c-.88-.14-1.64,.61-1.52,1.49l6.09,43.75c.2,1.44-1.74,2.1-2.46,.84l-36.99-65.02c-.56-.99,.3-2.17,1.41-1.95l23.79,4.

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21215)
Category:	downloaded
Size (bytes):	21216
Entropy (8bit):	5.306175166588735
Encrypted:	false
SSDEEP:	384:TRFZRwWtdbD5ABwXwLrekrff8eTr+x5RxMcKn9LuJ4vV/:T7wAD5ABwXw+krfflyxzxin9D/
MD5:	A3E7570799838F456EA59051EDF9B177
SHA1:	714E869857B96DDEEF2578B26F7151A494254BE3
SHA-256:	91B0809D8B9DC57EAA09CB0E13C210B24EDFAEADB94A8CFF0FEE02751C1B0B5F
SHA-512:	05C30ADB56D3D9F0AB84E4E5D0BFFFEADD2FEAA815EE7700E7A5806D01173AEB548BBE390E8487E0E541B27E08663F156F8AD49B7C5D3F6A4202A3FC4CE475FF
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/otSDKStub.js
Preview:	var OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIABCookieName="eupubconsent",this.oneTrustIsIABCrossConsentEnableParam="isIABGlobal",this.isStubReady=!0,this.geolocationCookiesParam="geolocation",this.EUCOUNTRIES=["BE","BG","CZ","DK","DE","EE","IE","GR","ES","FR","IT","CY","LV","LT","LU","HU","MT","NL","AT","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",this.userLocation={country:"",state:""}};(m=g=g\|\|{})[m.Days=1]="Days",m[m.Weeks=7]="Weeks",m[m.Months=30]="Months",m[m.Years=365]="Years",(m=i=i\|\|{}).Name="OTGPPConsent",m[m.ChunkSize=4e3]="ChunkSize

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3391)
Category:	downloaded
Size (bytes):	68468
Entropy (8bit):	5.597063427359037
Encrypted:	false
SSDEEP:	768:tSx+1QK2AEU2AEWWHZjyDD+Y66riwUyb+/8Fo6aM9dFDZvKa:YOEfgq/8ea
MD5:	853383CEE0C7AD876D409ADCDE0D12E3
SHA1:	3F633067AFB665F5B2621625E4836F44F24FC5DF
SHA-256:	86FB08163A30352733E67B1B7A107818CCC4C8B632D914421AB84075D6A17730
SHA-512:	4516945D51B81FB447AB18212F3C7051989738CADA658CCC54C8459E630978B5767C7793FE8517FB89E573DE814759E8B27EC1F88933C65E672DDF9F043C1156
Malicious:	false
Reputation:	low
URL:	https://www.youtube-nocookie.com/s/player/26636eff/player_ias.vflset/en_US/embed.js
Preview:	(function(g){var window=this;/. SPDX-License-Identifier: Apache-2.0././.. Copyright 2017 Google LLC. SPDX-License-Identifier: BSD-3-Clause./.'use strict';var Ehb=function(a){a.mutedAutoplay=!1;a.endSeconds=NaN;a.limitedPlaybackDurationInSeconds=NaN;g.AQ(a)},Fhb=function(a){g.Po(a);.for(var b=0;b<a.eg.length;b++){var c=a.eg[b],d=a.Ry[b];if(d!==c.version)return!0;if(!g.No(c)\|\|c.Pm)if(c.Pm\|\|c.s_!==g.So)(c.P1(c)\|\|Fhb(c))&&c.Q1(c),c.Pm=!1,c.s_=g.So;if(d!==c.version)return!0}return!1},b4=function(a){var b=g.Lo(a);.a={};return a[Symbol.dispose]=function(){g.Lo(b)},a},Ghb=function(){return{I:"svg",.X:{height:"100%",version:"1.1",viewBox:"0 0 110 26",width:"100%"},V:[{I:"path",Fc:!0,S:"ytp-svg-fill",X:{d:"M 16.68,.99 C 13.55,1.03 7.02,1.16 4.99,1.68 c -1.49,.4 -2.59,1.6 -2.99,3 -0.69,2.7 -0.68,8.31 -0.68,8.31 0,0 -0.01,5.61 .68,8.31 .39,1.5 1.59,2.6 2.99,3 2.69,.7 13.40,.68 13.40,.68 0,0 10.70,.01 13.40,-0.68 1.5,-0.4 2.59,-1.6 2.99,-3 .69,-2.7 .68,-8.31 .68,-8.31 0,0 .11,-5.61 -0.68,-8.31

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5048), with no line terminators
Category:	dropped
Size (bytes):	5048
Entropy (8bit):	5.844894017486628
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUE8zTRJRP6m:1DY0hf1bT47OIqWb1V8zNfP6m
MD5:	3112140268EF122CAAB3746A24511487
SHA1:	005460096D6B0AD13F484DB11E25CDD1A5DBBB2B
SHA-256:	730415C771D24B758DC5A05A9387DEE3B0D6DA3227CBEF725925A13FFD573B0C
SHA-512:	100FBAA0F7D90B7C891577745F85CB8AC659D6422BF6E9CDD73C1D5E708F675A5D2D3836971B33B90AD238365D1A58553E6FF6750AD056DF149A880B95DCB39D
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1238)
Category:	downloaded
Size (bytes):	1239
Entropy (8bit):	5.068464054671174
Encrypted:	false
SSDEEP:	24:ch63Cf5W8QPIHRZ3hwVFS39bYGwNef1yTZsNUkQ1sZmSuLqNWRco5Jcn5IKM6cuY:C6SQnw/x+SR8ZZkQbp1RZ5JwiKMm7Zc
MD5:	9E8F56E8E1806253BA01A95CFC3D392C
SHA1:	A8AF90D7482E1E99D03DE6BF88FED2315C5DD728
SHA-256:	2595496FE48DF6FCF9B1BC57C29A744C121EB4DD11566466BC13D2E52E6BBCC8
SHA-512:	63F0F6F94FBABADC3F774CCAA6A401696E8A7651A074BC077D214F91DA080B36714FD799EB40FED64154972008E34FC733D6EE314AC675727B37B58FFBEBEBEE
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
Preview:	!function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href")\|\|""}function r(e,t){var r=e.substr(t,2);return parseInt(r,16)}function n(n,c){for(var o="",a=r(n,c),i=c+2;i<n.length;i+=2){var l=r(n,i)^a;o+=String.fromCharCode(l)}try{o=decodeURIComponent(escape(o))}catch(u){e(u)}return t(o)}function c(t){for(var r=t.querySelectorAll("a"),c=0;c<r.length;c++)try{var o=r[c],a=o.href.indexOf(l);a>-1&&(o.href="mailto:"+n(o.href,a+l.length))}catch(i){e(i)}}function o(t){for(var r=t.querySelectorAll(u),c=0;c<r.length;c++)try{var o=r[c],a=o.parentNode,i=o.getAttribute(f);if(i){var l=n(i,0),d=document.createTextNode(l);a.replaceChild(d,o)}}catch(h){e(h)}}function a(t){for(var r=t.querySelectorAll("template"),n=0;n<r.length;n++)try{i(r[n].content)}catch(c){e(c)}}function i(t){try{c(t),o(t),a(t)}catch(r){e(r

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21681), with no line terminators
Category:	dropped
Size (bytes):	21681
Entropy (8bit):	4.767744046421676
Encrypted:	false
SSDEEP:	384:+Z8C4hGoFXlCS7FGAVsq1nwGfg4xqsQMPNE:JaJ
MD5:	FDBEBC80096F4210AEC97F5F08F703CA
SHA1:	36E995BF20F5D6B9DE2AA374D14EE796EEF4F3D5
SHA-256:	9ED6388D56FC9F2044791E0559AB4A283381791E359DC2981449955E702DE56D
SHA-512:	D8C94BF9944EF1BF73937DC1E8260A84EEA3003832A1652A1E11DDE974C2F8FC50EC7115900ED316B2CA710AC3406457D3851F3DDB63D997A95F02462D621889
Malicious:	false
Reputation:	low
Preview:	#onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat:no-repeat;background-position:center;height:12px;width:12px}#onetrust-banner-sdk .powered-by-logo,#onetrust-banner-sdk .ot-pc-fo

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	651
Entropy (8bit):	4.3413895961447135
Encrypted:	false
SSDEEP:	12:t4HnOWLHGfCd/QYlZpUai7FSr6cPJUpA3ie0zQcozjS50J0JZRjTToEksiU4pyCp:t4HOsGqdQYlHU46mqpOumzjCvTozsiUW
MD5:	A5C5D6146A6E55E4A0FE3567602B1E46
SHA1:	C75FF1B713378AEC779FB248E22DAA513ACA725B
SHA-256:	901BB0E03B8C3C0A1CF4C487A177417328BB7D8C94106ECEFCEEDD7D7F6C4DDC
SHA-512:	D21D979974542243A4D70036F87BFC0549B6793B809ED09044946BE2A25C47811A99E20FDB1F3044082A5509664101D4BCA241A1CA7B09FE80084CEAFA092368
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/static/ot_close.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="348.333" height="348.333" viewBox="0 0 348.333 348.334"><path fill="#565656" d="M336.559 68.611L231.016 174.165l105.543 105.549c15.699 15.705 15.699 41.145 0 56.85-7.844 7.844-18.128 11.769-28.407 11.769-10.296 0-20.581-3.919-28.419-11.769L174.167 231.003 68.609 336.563c-7.843 7.844-18.128 11.769-28.416 11.769-10.285 0-20.563-3.919-28.413-11.769-15.699-15.698-15.699-41.139 0-56.85l105.54-105.549L11.774 68.611c-15.699-15.699-15.699-41.145 0-56.844 15.696-15.687 41.127-15.687 56.829 0l105.563 105.554L279.721 11.767c15.705-15.687 41.139-15.687 56.832 0 15.705 15.699 15.705 41.145.006 56.844z"/></svg>

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4807), with no line terminators
Category:	downloaded
Size (bytes):	4807
Entropy (8bit):	5.816002175599055
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUG85R9OLFp:1DY0hf1bT47OIqWb1j8P9OLH
MD5:	B37E1571DAAE9D968B46A72C9288C278
SHA1:	56C8D2998E715ECF4B6271AB3D5719BCC43AD35D
SHA-256:	E6829D4144BA33A3A54136F7D14CDA1312C7C5D1E8328CC38020694D4826D5FC
SHA-512:	3641DCF5CFD1C385CA2C57B056D5D7303BAB411E12E65B3FB7C6BA80D068DC1A1764AA12B3B28B965E5648571D38A874C55C7B43917D02E1FFF59C203E9B1050
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/946203707/?random=1727409735110&cv=11&fst=1727409735110&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465z876304729za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2Fvelo%2F&hn=www.googleadservices.com&frm=0&tiba=Veloversicherung%20mit%20TWINT%20abschliessen%20%C2%BB%20TWINT&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34722), with no line terminators
Category:	downloaded
Size (bytes):	34722
Entropy (8bit):	5.351581529928612
Encrypted:	false
SSDEEP:	768:AHM4IlAB/AV/2kzdmCfM+G5FGeoVYmmUhWnpbjfEs:6B4kgmCfM+kFaYmmEWnVjfb
MD5:	734B6C87D88487C2DF672A21536E4CA4
SHA1:	C90FA8D09859EDD6AB8D6E9F6FBA2DB690FD10F0
SHA-256:	09BA6C2B09DE669D307CAE6ACEE22100FAA8D09059B7BEE3BFAD20EEB5876959
SHA-512:	AE8DAA7648D8BEBC4A11853A881FCF564662456EA2F8B4C1FEA5990753B1035BE7BE71AE7A138E993CE60F677CE19F9A7FB775087F7625A3D5E27DA0BA8F243D
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/content/themes/twint/assets/js/more-banks-component.d13d53fa523527f2.js
Preview:	(self.webpackChunk=self.webpackChunk\|\|[]).push([[808],{7845:(e,t,o)=>{"use strict";o.d(t,{A:()=>i});var n=o(6314),s=o.n(n)()((function(e){return e[1]}));s.push([e.id,":root{--vs-colors--lightest:rgba(60,60,60,.26);--vs-colors--light:rgba(60,60,60,.5);--vs-colors--dark:#333;--vs-colors--darkest:rgba(0,0,0,.15);--vs-search-input-color:inherit;--vs-search-input-placeholder-color:inherit;--vs-font-size:1rem;--vs-line-height:1.4;--vs-state-disabled-bg:#f8f8f8;--vs-state-disabled-color:var(--vs-colors--light);--vs-state-disabled-controls-color:var(--vs-colors--light);--vs-state-disabled-cursor:not-allowed;--vs-border-color:var(--vs-colors--lightest);--vs-border-width:1px;--vs-border-style:solid;--vs-border-radius:4px;--vs-actions-padding:4px 6px 0 3px;--vs-controls-color:var(--vs-colors--light);--vs-controls-size:1;--vs-controls--deselect-text-shadow:0 1px 0 #fff;--vs-selected-bg:#f0f0f0;--vs-selected-color:var(--vs-colors--dark);--vs-selected-border-color:var(--vs-border-color);--vs-selecte

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1609
Entropy (8bit):	5.268171846580519
Encrypted:	false
SSDEEP:	24:hY6sv7zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5zF5cUehk2:3q3+pUAew85zvc/hk2
MD5:	20D444971B8254AC39C8145D99D6CA4C
SHA1:	72E41F2A340F4A6E3A748CB57D293631390B733A
SHA-256:	A04F41837D317573EA61EA29ABBA7C4FF4E38C9177DA68F4706B9C13921A8D82
SHA-512:	BEA16497D014481EE10EB80A129846B7B184AB1ECA242FA38B84255C6461C748A62F1BD6C15D1807F8B5E926E550C30AB47F8A40AE43BE229E6AB857C4EA6F6F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 405 (Method Not Allowed)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:u

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	downloaded
Size (bytes):	702
Entropy (8bit):	6.58442013519738
Encrypted:	false
SSDEEP:	12:fM1SZ4Jk6V7lSQClJFM5xWHkbwzQJO1aZxKl1hD3:fx4WklklTM5xWHkqWKt3
MD5:	EEFAA072B284A305C12C06608333ABC2
SHA1:	58272721CCC1EFDA26EAA22354022C7C793EDBB6
SHA-256:	FB6B7BCC1AB09F27DB17BCBDF5239CE1D52AF34F1FC5125B3FC8528A07848D21
SHA-512:	C5CCFDCD9CE76DE85F043A1733C9F0B620E15BABBAF2A5639684C7B2BB8E5A66473C9A83F14CB48D9CB6C6A1C6B36F2C5A28E25ABAF131FB85EC5EEDECBAE4AC
Malicious:	false
Reputation:	low
URL:	https://translate.googleapis.com/translate_static/img/loading.gif
Preview:	GIF89a................BBB...bbb......!..NETSCAPE2.0.....!..Built with GIF Movie Gear 4.0.!..Made by AjaxLoad.info.!.......,..........3....0.Ik.c.:....N.f.E.1......`..q.-[.9..9...Jk.H..!.......,..........4....N.! ......DqBQT`1. `LE[..\|..u..a... ...C..%$*..!.......,..........6..2#+.A..V/..c....N.IBa..p.......+.Y.......2.d.....!.......,..........3..b%+.2...V_.....!..1D.a...F.....bR].=.08,...r9L..!.......,..........2..r'+J.d....L..&v.`\bT.....hYB)..@....<..&,...R...!.......,..........3.. .9..t..0....!.B...W..1....sa..5....0.....m)J..!.......,..........2........U]....qp.`..a..4..AF.0..`......@..1......!.......,..........2....0.I.eB.)..... ..q..10...P..a..V.. ub...[....;..........

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (736), with no line terminators
Category:	downloaded
Size (bytes):	736
Entropy (8bit):	5.630961627742203
Encrypted:	false
SSDEEP:	12:hnMQbwuOaxyCkv4AEHsQDUf1N1/idZFBTiUMGT2IWaEu18DIkQBW+RXeI:hMiRO9r4KjeZr8G9PX8CpRXL
MD5:	6A494E997EA8B5FE1A4654065D121321
SHA1:	CB1E30D6E7403D8DBACDD2649897AAC38C58B154
SHA-256:	FB391B0F8DD78118FCBB3A8DB3BDBB605A3283828F0E08AD6CB38C03DF9651E8
SHA-512:	CD7C836592D40CFE9A786B89BF9710DF4148F44600ACBBAE930FCBF6A5FB9A9308BCA66F1F8E992C2767414938E082C8D06DE90506FE3ADECEC94210972B1A10
Malicious:	false
Reputation:	low
URL:	https://9818618.fls.doubleclick.net/activityi;dc_pre=CKq-zuSe4ogDFYSHgwcdrd8U9g;src=9818618;type=twint00;cat=pvtwi0;ord=9421055585359;npa=0;auiddc=1403402495.1727409735;ps=1;pcor=1564699894;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fspenden%2F?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CKq-zuSe4ogDFYSHgwcdrd8U9g;src=9818618;type=twint00;cat=pvtwi0;ord=9421055585359;npa=0;auiddc=*;ps=1;pcor=1564699894;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fspenden%2F"/></body></html>

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Picasa], baseline, precision 8, 68x68, components 3
Category:	downloaded
Size (bytes):	1938
Entropy (8bit):	7.615373741278526
Encrypted:	false
SSDEEP:	48:UFy/L14NejBa5VIZL6BWVxikft+9SWUhi3:0y/L14N/5TwVxxE/N
MD5:	63A072673C66FA54AD13780FE4C52234
SHA1:	E90830D0C97D52F75886266351BAE35CEB744A96
SHA-256:	4FFC4D726691682AAFD30F9E05257BE48178C23DCC2DC3BADBB6953B4D3ECB94
SHA-512:	3F3A01762797375861468A0B41F88E40C060D636DB356F8B0DD466B6AD60125B66BDD37BF860672C730EAF458644BB2C977ACB7578FC3072F682BC6B94CCD482
Malicious:	false
Reputation:	low
URL:	https://yt3.ggpht.com/ytc/AIdro_nsnpDHndRIgw_D137nMXybt_A9C6gggxF9A7gF4rjCOvU=s68-c-k-c0x00ffffff-no-rj
Preview:	......JFIF.............Exif..II.......1...............Picasa..............................................................................................................................................D.D............................................,..............................!"..#13$ABQa...............................1.........................!1A.."Qa...2BRq.....#3............?..V.`..`..`..`..`..`...c.g6..X+.z,...h...WP..n.I.....H..../s...+)...l.%MZ..#....@T$.......EP.X.1.e...O..$n....dV...+..... ............2...NO.....u.9.v..IZ..<.$...^c..{r.BlX.%....8,.XK........Z.).&.e.[/....E<R..W..Ue.%.K.].p$fe.\|.Q......k.....Pw..i.UK3i..../[\|c.-.,.^..z.n.xC....%.\|yog\|..RYyJ..y...m.....t..=...@$.......].....ES.....e.\|.m\|oK2.{.i.....5Y.T..3M.Y./.$Q..f.Vq...a,,G.4.....b...D.)'.H.~L@F;....`..`..`..znt......(%k..Mto6r....X.........w..+%..?...s5;...U....Q.......q.).PI=I..+^.XW..]".b.Kh.$.....G!..".g..7.N.U.o.(...t..5...9.{.f/..q[..Z.Q.l......Z>..M..\|JwE}e.C{;..Z*.x..:

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (561)
Category:	downloaded
Size (bytes):	31666
Entropy (8bit):	5.397564672661937
Encrypted:	false
SSDEEP:	384:npzjVkjElIVonxb6qOq+WZT8HjiyUv5aYe9hiVw6rCRNbzgM/BwNwgmx/tXTxw4k:nxjNl3x8XBHa4iVwmytzimx/hcg6/K3w
MD5:	B0A74586B183DB7082EA48B6EA43EDE3
SHA1:	5CEC77CD9C2A7EC472327533B0E32D2D5DA8634D
SHA-256:	36CB859BE5A639C678F317D76C5C589DA1B5E08820FCCE41D67C38B517EFA959
SHA-512:	88A1BA500A6CA668014C54D442DCA1487C1FFBE0E57BAA53A4F4E9C0038F12B981F3A1FC38B598EA4822EB0E086FAF0A4C5DC8601C9BB91C2B6B6BFC3E0945A2
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/b0557ce3/www-widgetapi.vflset/www-widgetapi.js
Preview:	(function(){'use strict';var q;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var r=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var t=ba(this);function u(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var g=a[d];if(!(g in c))break a;c=c[g]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&r(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(k){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(k\|\|"")+"_"+g++,k)}.function c(k,e){this.g=k;r(this,"description",{configurable:!0,writable:!0,value:e

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	503
Entropy (8bit):	4.986619645301428
Encrypted:	false
SSDEEP:	12:TMHdNm1u1NnnKhoyTcwXHi7vJKAAPkn/uGs:2dk1WNnKRTHXHi7vJKfkn/hs
MD5:	E03C0376A958612864BA1099E670DA9E
SHA1:	A34387242AC692B06F1A8C14D14608962A962B35
SHA-256:	3D9A504DE9E278A24338C956E79ED4BDA8B3823F6581BD26346C1C1BB893454A
SHA-512:	E48F5280B2188A659C8705B892B8F0F3C46A6BD748569616FFF9BF6ADBE7F579D59C48DF74003D197DD530013F1B29770FDD4B2DA98973C30F2F825A9A2B5750
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/content/uploads/2022/10/How-To-1-1.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Ebene_1" data-name="Ebene 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100">. <defs>. <style>. .cls-1 {. fill: #262626;. }.. .cls-2 {. fill: none;. stroke: #262626;. stroke-miterlimit: 10;. stroke-width: 3.2px;. }. </style>. </defs>. <circle class="cls-2" cx="50" cy="50" r="43.1"/>. <path class="cls-1" d="M52.07,72.11h-3.63V32.4l-11.99,4.45v-3.39l15.02-5.57h.61v44.23Z"/>.</svg>

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x930, components 3
Category:	downloaded
Size (bytes):	51876
Entropy (8bit):	7.981729963199769
Encrypted:	false
SSDEEP:	1536:Y32Dv3knbmX2OUnWB7lZY4LB9oNXKaPbji:y2zqKX2OUq7lZY499o19Pbji
MD5:	B25BFD1C791A76677E4566FB8B5822F1
SHA1:	4BC5C37A1CBAD752A8E4938B960F904ED060C694
SHA-256:	2889F70714A5D2C1B00C8BB96356D85FF4A7A86E0AF410C5F0248450E03C967E
SHA-512:	05A131A0A74EF021C0AADE2F7BE5C32A82D9FA4940610FD44E554D0D89A00968F573B581A636195BA47F6FBA1CDE3E490919084300E2CF1F159AEC4C289F64BE
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/content/uploads/2022/12/Veloversicherung_Header_DE-1-800x930.jpg
Preview:	......JFIF.........................................".##!. %5-%'2( .?/279<<<$-BFA:F5;<9...........9& &99999999999999999999999999999999999999999999999999........ .."..........4....................................................................$.3.1.FN.3..!.L2NF3D]=2v"..0.wi.....'....S.;:.;.i.-8...H....y.[...cJ6..vV.....FU..V=g...~i.F.n6K..4.2..A.q...h..vn....LR..+/w7W.]L."@.:8Y...ftE:.:".a....d.I.E:.$5vB.:.....F...d..q.!.C.C...H..E.@QtWe..7.Lg.R&E..V=..aZ..)..o=Y+g(B.f8.@jf..vM.?.....j.@A....~.E.-Mr....{s....qr....k......8.&T.......L2L&v.U.d....3b..'Ht.........i....R..J3..L..H.g...W.9.^ee.Q...,].np...7(..2.O.?.J...r.3....Qus.fg.l..o=h.{.C.\f....8.@nXfYQ.Fqy.U<...v@.0..t.#(.i..].'".P....T..:.$$.$.3;...;B..Q....y.t(.$SH.1.I....:..,}q..O?B..>4..C."..<z....s.cA.44q...34.l...8.#&V~.;...MgH....+8.l.id8z.i......9Q..nI..V.\|..2.r373(..;..8..xfv.;..53:"..i9.$3.".DT.E..$.I.iF.(...d.Z..[.h.E;.....{l..m1.#3x..E...>.u.@%f...@..l...g4....vI.....mV......?l....

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1294
Entropy (8bit):	5.063069531313211
Encrypted:	false
SSDEEP:	24:2dk1WNwqa+uo/BYO/7lxHXHi7vJKfkn/TOmAUyEN0201rrYRQP1f+p2:c07WW833mvJKMnLOzENd01Ye7
MD5:	2C908E36444356CFCCB49480EE3E3AB4
SHA1:	EEF1A82B99C51FB19C27A90B01A2EA11E55BABD2
SHA-256:	73985DFA5E2A67BA090D38EFF2172D44C62D9ABB9AE6BCB4E8DE73A5C619CD4D
SHA-512:	D60609787830F7BF3E15CE211A80FC2903C3FA53E77B14BA70D7A7DFCCCCC3135EC5ED0379D591A4EE65212BBA890D667A273587F2B27A84875FFE48EC35BB44
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/content/uploads/2023/08/Versicherung_Handy-1.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Ebene_1" data-name="Ebene 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100">. <defs>. <style>. .cls-1 {. stroke-linejoin: round;. }.. .cls-1, .cls-2, .cls-3, .cls-4 {. fill: none;. }.. .cls-1, .cls-3 {. stroke-linecap: round;. }.. .cls-1, .cls-3, .cls-4 {. stroke: #222;. stroke-width: 3.2px;. }.. .cls-2 {. stroke: #262626;. stroke-miterlimit: 10;. stroke-width: 3.2px;. }. </style>. </defs>. <circle class="cls-2" cx="50" cy="50" r="43.1"/>. <g id="twint_icons_icn_Handyversicherung_40x40pt" data-name="twint+/icons/icn_Handyversicherung_40x40pt">. <rect id="Rectangle" class="cls-4" x="33.33" y="20.51" width="33.33" height="58.97" rx="6.84" ry="6.84"/>. <polyline id="Path" class="cls-1" points="45.73 47.74 49.23 52.26 54.96 44.87"/>. <path id="Stroke-1-Copy" class="cls-1" d="m60.88,42.01v-2.8c-3.05,0-9.92-2.96

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	4.510012584300539
Encrypted:	false
SSDEEP:	3:6E+1hyp0Kth6G+:7+1hEBv+
MD5:	70BB111AC5AC0E99794A471F55BFD350
SHA1:	B9887ECCCA381205435EACEE5157056245F5618B
SHA-256:	DECFF9FF8BAC019E9A34FF7C9E0B9DFB87EFCA8E0DFE0B7B83463EEA37B2CEAA
SHA-512:	3E1D421D51F74D217A553FF2E29557EBA5148DE2E2D3CEB658BF0DC510E6DA26F4BF50B05A9F697586EDDC45C2D24350C68D5213F2B96484AB70E969958E6815
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwnzcGoafWeoZBIFDU98_AISBQ2BkPF8EhAJ_CDxs1gSwr0SBQ2lkzYk?alt=proto
Preview:	ChIKBw1PfPwCGgAKBw2BkPF8GgAKCQoHDaWTNiQaAA==

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2634)
Category:	downloaded
Size (bytes):	214942
Entropy (8bit):	5.57026355280019
Encrypted:	false
SSDEEP:	3072:id6IltCXPUaRDWeRUuxdGBC9VDJHJbYNFwju/9aQjecZmlB3I:uLcBdVHJctPN
MD5:	AAB26FCBE8CE85DC8CE162E7277AB62D
SHA1:	B5FE182DB0C4EABA2EAA16E1A2876D29C672E56E
SHA-256:	FEC5A7C59E81464204416AFBD90C4AC14821C31D1286E907B829BD1A73BCEED4
SHA-512:	27B230E9C0C519828A0089B7B3A2D450C6B629E53E50401979473A7AC8A0114BB20DD34E7D3F100E0DECC2F2CE9358C5937C814438EED89B569CAFBACADC3979
Malicious:	false
Reputation:	low
URL:	https://translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.en_US.a5m_SbWhj08.O/am=AAAB/d=1/exm=el_conf/ed=1/rs=AN8SPfpk_mrE7XiX4HymgNevivesFIf9og/m=el_main
Preview:	"use strict";this.default_tr=this.default_tr\|\|{};(function(_){var window=this;.try{.var Mh,Nh,Oh,Xh,ci,di,ji,ki,li,mi,qi,pi,Th;Mh=function(a){return _.$a?_.ab?_.ab.brands.some(function(b){return(b=b.brand)&&b.indexOf(a)!=-1}):!1:!1};Nh=function(){return _.v("Firefox")\|\|_.v("FxiOS")};Oh=function(){return _.bb()?Mh("Chromium"):(_.v("Chrome")\|\|_.v("CriOS"))&&!(_.bb()?0:_.v("Edge"))\|\|_.v("Silk")};._.Ph=function(){return _.v("Safari")&&!(Oh()\|\|(_.bb()?0:_.v("Coast"))\|\|_.cb()\|\|(_.bb()?0:_.v("Edge"))\|\|(_.bb()?Mh("Microsoft Edge"):_.v("Edg/"))\|\|(_.bb()?Mh("Opera"):_.v("OPR"))\|\|Nh()\|\|_.v("Silk")\|\|_.v("Android"))};_.Qh=function(){return _.v("Android")&&!(Oh()\|\|Nh()\|\|_.cb()\|\|_.v("Silk"))};_.Rh=function(a){return a instanceof _.cc};_.Sh=function(a){if(_.Rh(a))return a.g;throw Error("t");};_.Uh=function(a){if(Th.test(a))return a};_.Vh=function(a){return a instanceof _.cc?_.Sh(a):_.Uh(a)};_.Wh=function(a){return Array.prototype.slice.call(a)};.Xh=function(a){return typeof Symbol==="function"&&typeof

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	69
Entropy (8bit):	4.057426088150192
Encrypted:	false
SSDEEP:	3:YGKeMfQ2pHWiR8HopHW4OE9HsuXU9WyRHfHyY:YGKed2pHD5YEl5k9zyY
MD5:	B04CD3F8043EF04F417D4B0E4BCBBC03
SHA1:	88F259A4AE3045409B3657E7D7A791D321BA9DCE
SHA-256:	59E58524340CD7AD353BE010374B124C242FDDE10A0ED41047FE2FD4BB9E5A2E
SHA-512:	A285C493B939D2A165D80F87FC830F5D02AFCC7A8EA1C5CAF9CAA87ABD286F1C98598FFD83023044BDB23D344C60EEF6A6C4BFEDEDD42A4297A0AC09E22FA5B2
Malicious:	false
Reputation:	low
URL:	https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
Preview:	{"country":"US","state":"NY","stateName":"New York","continent":"NA"}

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (4965)
Category:	downloaded
Size (bytes):	67136
Entropy (8bit):	5.4543004035032645
Encrypted:	false
SSDEEP:	1536:NI3pY8Wmrn3+2CbxPMmE+xdNgKpJbpY3eDAKjcqMFGJA0zv0PaLJRhDiL6DeN5y6:NI3pY8WmwJMmE+xdNgKpJbp9c1GJA0zO
MD5:	EAD398BF4C88B72EFBA3BFE68B6C8601
SHA1:	BDCABB9723B8ECC3E5165C9CD2B23C17781830DE
SHA-256:	9E227976EAA05D183C5B9D9DB4E1EB37169743ABAA4CC0C62C89DE7E236F4E81
SHA-512:	5AF6A2F2466C985869225B324BA12E0A6DA39BB7E670BD51784975EC55E3D0A0377C179629BA46DC7EAB225EEF76539B852602A736E443B046930DE47830F17E
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/privatkunden/funktionen/digitale-gutscheine/netflix/
Preview:	<!DOCTYPE html>.<html lang="de-CH">.<head>.<meta charset="UTF-8">.<meta http-equiv="X-UA-Compatible" content="IE=edge">.<title>Kaufe Netflix Guthaben direkt in der TWINT App » TWINT</title>.<meta name="viewport" content="width=device-width, initial-scale=1.0">.<script type="text/javascript" src="https://cdn.cookielaw.org/consent/baf1656f-0c9f-4cd8-83fe-a5ce8d8c9eed/OtAutoBlock.js"></script>.<script src="https://cdn.cookielaw.org/scripttemplates/otSDKStub.js" type="text/javascript" data-document-language="true" charset="UTF-8" data-domain-script="baf1656f-0c9f-4cd8-83fe-a5ce8d8c9eed"></script>.<script type="text/javascript">. function OptanonWrapper() { }. </script>.<script>. // Define dataLayer and the gtag function.. window.dataLayer = window.dataLayer \|\| [];. function gtag(){dataLayer.push(arguments);}.. // Default ad_storage to 'denied'.. gtag('consent', 'default', {. ad_storage: 'denied',.

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	dropped
Size (bytes):	30328
Entropy (8bit):	3.663461882867988
Encrypted:	false
SSDEEP:	192:STvohNZo/O8HniPVcLUcizrTvoUNZo/O8HniPVcLUciT:Goh/8CPCLYznoU/8CPCLYT
MD5:	C03E1DA7F3C40AF33A117DC869FBB1AF
SHA1:	97CA127397C88DBEFE5859452311BF28E90ADE5D
SHA-256:	301F62F5421CC8F7AD0CFD70C257D4A7983BFC49C0CE8CDD99204BBA72B2F79D
SHA-512:	29B4A178B69370FA420132BD0720BAE52D7BFC6F0706F08CB03A2D6FE823DC7E3A673141CC17CA4CC0C3809354D155F5844F23AA57FFE281047EEFFB52BE791D
Malicious:	false
Reputation:	low
Preview:	// API callback.callback({. "sourceLanguages": [. {. "language": "auto",. "name": "Detect language". },. {. "language": "ab",. "name": "Abkhaz". },. {. "language": "ace",. "name": "Acehnese". },. {. "language": "ach",. "name": "Acholi". },. {. "language": "aa",. "name": "Afar". },. {. "language": "af",. "name": "Afrikaans". },. {. "language": "sq",. "name": "Albanian". },. {. "language": "alz",. "name": "Alur". },. {. "language": "am",. "name": "Amharic". },. {. "language": "ar",. "name": "Arabic". },. {. "language": "hy",. "name": "Armenian". },. {. "language": "as",. "name": "Assamese". },. {. "language": "av",. "name": "Avar". },. {. "language": "awa",. "name": "Awadhi". },. {. "language": "ay",. "name": "Aymara". },. {. "language": "az",

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.180365114215879
Encrypted:	false
SSDEEP:	3:YGKhIWANmq6LFHYn:YGKhCNU4
MD5:	64E1C1EB9F4CAF0CF0E7484D7AFCEDB9
SHA1:	69E40D8C48A866A84046FD8BD17AF47FF02B79A4
SHA-256:	8ACAC48BC106C4EAE580C08071597F9DAFAB96D959DEFF65BEC44514DA907B1D
SHA-512:	F109767D57E85127D18B1AD2030A48C0EAD69F79A15C4008712407B1F62691654B74C9D6E225FFDC4A922847EABB928DC7520A656C7081B585124CF678B54E59
Malicious:	false
Reputation:	low
Preview:	{"code":1,"message":"Session ID unknown"}

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41442)
Category:	downloaded
Size (bytes):	41481
Entropy (8bit):	5.31009549751899
Encrypted:	false
SSDEEP:	768:9pQ6+qD0M+7+/kmCACM3aem6eWQi79xpQXQVqQU+h3ghJskJFAn:9pQTsCI9XSMqTXg
MD5:	3B5B3D36FDE8FFE8ED76B1EFBFC65410
SHA1:	D63107D0912FDB387530D5CE2D512C928D73D122
SHA-256:	29D600462A30694EFD15B9848B4CA42D178CD067009275C35A30580121114304
SHA-512:	3C96B7A1048B59107BC0767B190FE0FAACAFEABE266EE8668836FC06348567C359D9AE36A13B40AB99F4B9C580C1C403962900B64B9BFAD3D50B0E27A76ED60A
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/axios/1.6.8/axios.min.js
Preview:	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).axios=t()}(this,(function(){"use strict";function e(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function t(t){for(var r=1;r<arguments.length;r++){var n=null!=arguments[r]?arguments[r]:{};r%2?e(Object(n),!0).forEach((function(e){c(t,e,n[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(n)):e(Object(n)).forEach((function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(n,e))}))}return t}function r(){r=function(){return t};var e,t={},n=Object.prototype,o=n.hasOwnProperty,i=Object.defineProperty\|\|function(e,t,r){e[t]=r.value},a="function"==typeof Symbol?Symbol:{},s=a.iterator\|\|"@@

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4722
Entropy (8bit):	5.674063352153878
Encrypted:	false
SSDEEP:	48:1iQHB86bRgyftWcdrJSEghkq8KFe75079NnCobfp1VbIOHVb5aCc:ZhRBftWErJehL8mS079NnC43JIEJ5G
MD5:	E6872C90592C095AC4B05FC37CB2F2C0
SHA1:	B71B3312EC6BD7CBAADD947CC95042496E0410F3
SHA-256:	509F2E49500FBAEB5D7E1959071F2922B693D0135080E2871E124EC8BDD08BB2
SHA-512:	0954A67931C7FE8E5918D35B35066C20E7A3ABDF477BA92FA48C3783CBA390C41C8C933C40B2E06E7916D3F3F6F565543EC21BAE822933941F26F3F13C5E6651
Malicious:	false
Reputation:	low
Preview:	. {. "name": "otCookieSettingsButton",. "html": "PGRpdiBpZD0ib3Qtc2RrLWJ0bi1mbG9hdGluZyIgdGl0bGU9Ik1hbmFnZSBQcml2YWN5IFByZWZlcmVuY2VzIiBjbGFzcz0ib3QtZmxvYXRpbmctYnV0dG9uIG90LWhpZGUiPjxkaXYgY2xhc3M9Im90LWZsb2F0aW5nLWJ1dHRvbl9fZnJvbnQiPjxidXR0b24gdHlwZT0iYnV0dG9uIiBjbGFzcz0ib3QtZmxvYXRpbmctYnV0dG9uX19vcGVuIj48L2J1dHRvbj48L2Rpdj48ZGl2IGNsYXNzPSJvdC1mbG9hdGluZy1idXR0b25fX2JhY2siPjxidXR0b24gdHlwZT0iYnV0dG9uIiBjbGFzcz0ib3QtZmxvYXRpbmctYnV0dG9uX19jbG9zZSI+PCEtLT94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPy0tPiA8c3ZnIHJvbGU9InByZXNlbnRhdGlvbiIgdmlld0JveD0iMCAwIDI0IDI0IiB2ZXJzaW9uPSIxLjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyI+PGcgaWQ9IlBhZ2UtMSIgc3Ryb2tlPSJub25lIiBzdHJva2Utd2lkdGg9IjEiIGZpbGw9Im5vbmUiIGZpbGwtcnVsZT0iZXZlbm9kZCI+PGcgaWQ9IkJhbm5lcl8wMiIgY2xhc3M9Im90LWZsb2F0aW5nLWJ1dHRvbl9fc3ZnLWZpbGwiIHRyYW5zZm9ybT0idHJhbnNsYXRlKC0zMTguMDAwMDAwLCAtNzI1LjAwMDAwMCkiIGZpbGw9IiNmZmZmZmYiIGZpbGwtcnVsZT0ibm9uemVybyI+PGcgaWQ9Ikdyb3VwLTIiIHRyYW5zZm9ybT

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	497
Entropy (8bit):	4.684891921463926
Encrypted:	false
SSDEEP:	12:t4O6aVCd3luZsgbfFTLE+C1ydL0ZQ9jXcaggOCedJI5iNtcME:t4O6aUdVmLCwdL0u/OTJAOtcME
MD5:	B57C99C9D1E3C50B2114C6DB053D7FF0
SHA1:	ADA8ABFED92BA8A545BBD9D299D74D5972CC4AE8
SHA-256:	691DCDB24853A0F5CE4E6597E5713DEA66799B57FFE2C2A10F28F98E0B569B19
SHA-512:	0DAB6D06F386D922FB28F70F2590D4F9C361E7F4E5D5E581B98E59AAC12B266CBA596FFCCD87203B4330673EE4EC1D459A1ABDFC4B066D243A43B2BF7909F0EE
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path class="ot-floating-button__svg-fill" d="M14.588 0l.445.328c1.807 1.303 3.961 2.533 6.461 3.688 2.015.93 4.576 1.746 7.682 2.446 0 14.178-4.73 24.133-14.19 29.864l-.398.236C4.863 30.87 0 20.837 0 6.462c3.107-.7 5.668-1.516 7.682-2.446 2.709-1.251 5.01-2.59 6.906-4.016zm5.87 13.88a.75.75 0 00-.974.159l-5.475 6.625-3.005-2.997-.077-.067a.75.75 0 00-.983 1.13l4.172 4.16 6.525-7.895.06-.083a.75.75 0 00-.16-.973z" fill="#FFF" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (561)
Category:	dropped
Size (bytes):	31666
Entropy (8bit):	5.397564672661937
Encrypted:	false
SSDEEP:	384:npzjVkjElIVonxb6qOq+WZT8HjiyUv5aYe9hiVw6rCRNbzgM/BwNwgmx/tXTxw4k:nxjNl3x8XBHa4iVwmytzimx/hcg6/K3w
MD5:	B0A74586B183DB7082EA48B6EA43EDE3
SHA1:	5CEC77CD9C2A7EC472327533B0E32D2D5DA8634D
SHA-256:	36CB859BE5A639C678F317D76C5C589DA1B5E08820FCCE41D67C38B517EFA959
SHA-512:	88A1BA500A6CA668014C54D442DCA1487C1FFBE0E57BAA53A4F4E9C0038F12B981F3A1FC38B598EA4822EB0E086FAF0A4C5DC8601C9BB91C2B6B6BFC3E0945A2
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';var q;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var r=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var t=ba(this);function u(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var g=a[d];if(!(g in c))break a;c=c[g]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&r(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(k){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(k\|\|"")+"_"+g++,k)}.function c(k,e){this.g=k;r(this,"description",{configurable:!0,writable:!0,value:e

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	87966
Entropy (8bit):	5.318751814209712
Encrypted:	false
SSDEEP:	1536:hYxBGURifGT6R0NBKKZ3guuCUhOholgdxHeUtGzlIjA/RWTXffm:hYH1ZXzHm
MD5:	1B299BDDCC838DB1C407EAACF061B046
SHA1:	567CCD2744F37F67DC7CFD9128ED12D375A5F1B7
SHA-256:	66C7FCD302EEF50FF710C28AD54CAA92225993F0C3D9FD01A3857D2103C27D73
SHA-512:	35CA4B1F9B14B1DB21008BD07119E8FB464B4EC6DB5D65526ECB697A4C59E02419B9A2E080DFC92D543514082BB4C5FFDAA1625B367B0714BD1BE932EE2A26E2
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/content/themes/twint/assets/js/navigation-anchors-component.f7d8a69e2f64469f.js
Preview:	"use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[14],{6110:(e,t,s)=>{s.d(t,{A:()=>r});var i=s(6314),n=s.n(i)()((function(e){return e[1]}));n.push([e.id,'@font-face{font-family:swiper-icons;font-style:normal;font-weight:400;src:url("data:application/font-woff;charset=utf-8;base64, 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

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	dropped
Size (bytes):	414625
Entropy (8bit):	5.355901836166498
Encrypted:	false
SSDEEP:	6144:Uvm4OU/xiO9qbYUo6ULWgWAG9wE7qAHHoaS/R8DwP33cA0s:wZ/xiO42WwE7qP/Rie
MD5:	0A3BF4C4852FC9D4E0C2CFFF73F161D2
SHA1:	1EE8B1E15B3F5544F92696745AE068F5C451D7D5
SHA-256:	71D07479F4B2B809E5769A352F4F55B84690289026ACE7ED5395230002551A11
SHA-512:	838CA2B5ECFA64ABDDE59164C2157066076DDEAE630C35B4B315D5D415D1C5EE1B711C25232722D246BF5101746203FB60CC62169B87779F9F684568130F6E54
Malicious:	false
Reputation:	low
Preview:	/** . * onetrust-banner-sdk. * v202307.1.0. * by OneTrust LLC. * Copyright 2023 . */.!function(){"use strict";var A=function(e,t){return(A=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in t)Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o])}))(e,t)};function I(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function o(){this.constructor=e}A(e,t),e.prototype=null===t?Object.create(t):(o.prototype=t.prototype,new o)}var L,_=function(){return(_=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function d(e,s,a,l){return new(a=a\|\|Promise)(function(o,t){function n(e){try{i(l.next(e))}catch(e){t(e)}}function r(e){try{i(l.throw(e))}catch(e){t(e)}}function i(e){var t;e.done?o(e.value):((t=e.value)instanceof a?t:new a(fun

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (539)
Category:	dropped
Size (bytes):	4425
Entropy (8bit):	5.270008555797259
Encrypted:	false
SSDEEP:	96:1GInbH6vTKvmYDDaLVsB6g3HDf/HKQSHG+vylylqntDy1ju1jai:kIn7+TKVDUsdHDf/7a6clqntDy1uGi
MD5:	E8D7EB2650EF6581D436ECB812C6F87C
SHA1:	C58C2E203D7F78189DFCDD3FF8A05FFBB89E9397
SHA-256:	ADF960923CBD6B577ACF69253BF64D2AE8831198E3BE5A6E89A7507BC5629B3A
SHA-512:	4F3E368F6BA10E82FFB79CDDD51B67F4ED4EB197D7712A0C223F8CDACC5463E15272E2185DFCFAE3C9C17FFBA240652DFA0AAF4215652C12E2EC780BABCD7FCF
Malicious:	false
Reputation:	low
Preview:	!function(){function q(a){var c=[],b=[],e=function(f){for(var g={},h=0;h<u.length;h++){var d=u[h];if(d.Tag===f){g=d;break}var l=void 0,k=d.Tag;var C=(k=-1!==k.indexOf("http:")?k.replace("http:",""):k.replace("https:",""),-1!==(l=k.indexOf("?"))?k.replace(k.substring(l),""):k);if(f&&(-1!==f.indexOf(C)\|\|-1!==d.Tag.indexOf(f))){g=d;break}}return g}(a);return e.CategoryId&&(c=e.CategoryId),e.Vendor&&(b=e.Vendor.split(":")),!e.Tag&&D&&(b=c=function(f){var g=[],h=function(d){var l=document.createElement("a");.return l.href=d,-1!==(d=l.hostname.split(".")).indexOf("www")\|\|2<d.length?d.slice(1).join("."):l.hostname}(f);v.some(function(d){return d===h})&&(g=["C0004"]);return g}(a)),{categoryIds:c,vsCatIds:b}}function w(a){return!a\|\|!a.length\|\|(a&&window.OptanonActiveGroups?a.every(function(c){return-1!==window.OptanonActiveGroups.indexOf(","+c+",")}):void 0)}function m(a,c){void 0===c&&(c=null);var b=window,e=b.OneTrust&&b.OneTrust.IsVendorServiceEnabled;b=e&&b.OneTrust.IsVendorServiceEnabled()

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	4.513757971491005
Encrypted:	false
SSDEEP:	3:H1ibAy8Ek9lY:mMEt
MD5:	A41B2438D20F0004CF5846932B97AA02
SHA1:	30C45121E36208876727EB1F494D38FB21B520BC
SHA-256:	FF60615CAB4AC07078929A684FE0053261557EF71A465E66F1B1AD718477F4FD
SHA-512:	B0283E16C84B7CC63F45B3A578053A9D741B8772A30D4A38FF7DF7E6AAEF6991CB94574A0981F1565661B3B4DD30E6E7424AE82EA11918830D4AB44357396C28
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkdAEu4Vw1pGRIFDXsS_EESFwkrUV77Btm7ixIFDWlWtG0SBQ29hYMP?alt=proto
Preview:	CgkKBw17EvxBGgAKEgoHDWlWtG0aAAoHDb2Fgw8aAA==

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9217)
Category:	downloaded
Size (bytes):	231356
Entropy (8bit):	5.458115913562013
Encrypted:	false
SSDEEP:	3072:MfLeYq8At6Jc37OeR8NteGvQ+AMPpgArl0xYu5s713d+:MfLeYZ+6JEH8N7QQGArHu5s713M
MD5:	B7DBAB5C73AE17725BCE0368460F1366
SHA1:	84C6B0316DDC3CC17897FD95F18BA6059166113D
SHA-256:	979D977217C7032B1CD864C0B65CE5D4FF834AA9CA116198873299B5A60CFC9A
SHA-512:	570718F92E8DCB94F348C9162D5CA0619C1CC902D5336B3D702DEFC47AB12C0F4C722D471880F6DF2CA4BFF2539F1A2DC0B71B874CDF13D75A5D8C32F5283750
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	37971
Entropy (8bit):	5.621316324298963
Encrypted:	false
SSDEEP:	768:/ER1y7XGdhVe38q109cJlU/GTudGd4dZINzR80rb2xteCC:/ERDhgSSlU/UwoeOzR8vXC
MD5:	8A021CB15F883AD45FF134A03B798A3D
SHA1:	82FBDBCBA85D2890C4B33087A5DAFC514AFD33E3
SHA-256:	DD8E4079BAB8A2542C35DD2919E6B3E86090EC13AC24960BF2801E4489977281
SHA-512:	14EE46DAA9FFED98D88511D58F085E921B0AF9C36C4BB7D33492FACDB804D7044274F5806A233A5B48BB1A32AAAFA9237891756C3CB5D54D359B106675131DCA
Malicious:	false
Reputation:	low
Preview:	{"DomainData":{"pccloseButtonType":"Icon","pclifeSpanYr":"Jahr","pclifeSpanYrs":"Jahre","pclifeSpanSecs":"Einige Sekunden","pclifeSpanWk":"Woche","pclifeSpanWks":"Wochen","pccontinueWithoutAcceptText":"Fortfahren ohne Akzeptieren","MainText":"Datenschutz-Pr.ferenz-Center","MainInfoText":"Wenn Sie eine Website besuchen, kann diese Informationen .ber Ihren Browser abrufen oder speichern. Dies geschieht meist in Form von Cookies. Hierbei kann es sich um Informationen .ber Sie, Ihre Einstellungen oder Ihr Ger.t handeln. Meist werden die Informationen verwendet, um die erwartungsgem.sse Funktion der Website zu gew.hrleisten. Durch diese Informationen werden Sie normalerweise nicht direkt identifiziert. Dadurch kann Ihnen aber ein personalisierteres Web-Erlebnis geboten werden. Da wir Ihr Recht auf Datenschutz respektieren, k.nnen Sie sich entscheiden, bestimmte Arten von Cookies nicht zulassen. Klicken Sie auf die verschiedenen Kategorie.berschriften, um mehr zu erfahren und unsere

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9217)
Category:	dropped
Size (bytes):	231356
Entropy (8bit):	5.458115913562013
Encrypted:	false
SSDEEP:	3072:MfLeYq8At6Jc37OeR8NteGvQ+AMPpgArl0xYu5s713d+:MfLeYZ+6JEH8N7QQGArHu5s713M
MD5:	B7DBAB5C73AE17725BCE0368460F1366
SHA1:	84C6B0316DDC3CC17897FD95F18BA6059166113D
SHA-256:	979D977217C7032B1CD864C0B65CE5D4FF834AA9CA116198873299B5A60CFC9A
SHA-512:	570718F92E8DCB94F348C9162D5CA0619C1CC902D5336B3D702DEFC47AB12C0F4C722D471880F6DF2CA4BFF2539F1A2DC0B71B874CDF13D75A5D8C32F5283750
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1143)
Category:	dropped
Size (bytes):	4272
Entropy (8bit):	5.407649241930215
Encrypted:	false
SSDEEP:	96:bVcC0LhyRs71268NYZOAx/rfuNfnAZe5PwGNHW:B3qhpRByNPx54GN2
MD5:	B427175FA1078775EB792756E7B6D1E7
SHA1:	4C55C0233D3D9002B3449C025F97821F8BB8900D
SHA-256:	EE147E859AD0F09AA50367974E38AB53E7C7054C4A51D400A7F45B0EB251454F
SHA-512:	AF8D384188363378BC99C2E51523E74E1D18BA77D51BFF7647A377A117499421F9E94477E09907925E46DAD0A908B799A616D0B4855FFFF064BA6350815063D3
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var l=function(){var a=h,b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},m=this\|\|self,n=/^[\w+/_-]+[=]{0,2}$/,p=null,q=function(a){return(a=a.querySelector&&a.querySelector("script[nonce]"))&&(a=a.nonce\|\|a.getAttribute("nonce"))&&n.test(a)?a:""},r=function(a,b){function e(){}e.prototype=b.prototype;a.i=b.prototype;a.prototype=new e;a.prototype.constructor=a;a.h=function(c,g,k){for(var f=Array(arguments.length-2),d=2;d<arguments.length;d++)f[d-2]=arguments[d];.return b.prototype[g].apply(c,f)}},t=function(a){return a};function u(a){if(Error.captureStackTrace)Error.captureStackTrace(this,u);else{var b=Error().stack;b&&(this.stack=b)}a&&(this.message=String(a))}r(u,Error);u.prototype.name="CustomError";var v=function(a,b){a=a.split("%s");for(var e="",c=a.length-1,g=0;g<c;g++)e+=a[g]+(g<b.length?b[g]:"%s");u.call(this,e+a[c])};r(v,u);v.prototype.name="Asse

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (50522), with no line terminators
Category:	downloaded
Size (bytes):	50523
Entropy (8bit):	5.297134171375771
Encrypted:	false
SSDEEP:	768:IaOFhhR9OIFhOjfRysgLzQyVwhYyDMsWxKQ:IaOFnR2DRszQekTWUQ
MD5:	14272A6CDF99BDC079B8EC8097889F49
SHA1:	2343F9F1D29F3B034F3B8FFB7A92BFFD98A88450
SHA-256:	73AAA4E6BFC1DBED5F3F934710D1ADA545F4068742235E59D0CB74F0EAF0A3C4
SHA-512:	BD83B900ACBFB123F485F46DE1692710B7C77DE90739CA3CFAB7A58CF3B71FCD9D97FCCEC6762528886C57A41F101574209F65B2BEF745613F0BCB7D196200A5
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0,enforced:!1};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.uetConfig.cusig={hasLoaded:!1,timeoutId:null,blob:{}};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	279569
Entropy (8bit):	5.282828986349904
Encrypted:	false
SSDEEP:	6144:VaxeYu0Lbs+HjKqx/r1e1U+nwE0botLsR:rKLQ+dOl8
MD5:	952ECAFEF7C8C3FA1D168691EB575007
SHA1:	63E18A35C6DC403DC77212A6FF89934FA2E0141B
SHA-256:	F1ACBEE3756E2304FE5F850F32229E551C1BC249D4C5181C391F3D7B0E030314
SHA-512:	FED332440EA520712D9990021BB32CA4C4795944CCFC4CD0A448F7220873BF9B7A37B17BC4A45C14129485217ED03D4C86F7226297EBA54B61B2554900D63747
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/content/themes/twint/assets/js/frontend.js?ver=1727271305
Preview:	(()=>{var t,e,n={2207:(t,e,n)=>{t.exports=n(7452)},7779:(t,e,n)=>{"use strict";const r={};var i=n(5072),o=n.n(i),a=n(9609),s={insert:"head",singleton:!1};o()(a.A,s);a.A.locals;var c=n(4486);(0,c.A)(r,undefined,undefined,!1,null,"11971dc3",null).exports;const l={data:function(){return{open:!1,htmlElement:document.documentElement,activeItem:null}},render:function(){return this.$scopedSlots.default({toggle:this.toggle,toggleItem:this.toggleItem,toggleOverlay:this.toggleOverlay,closeNavigation:this.closeNavigation,open:this.open,activeItem:this.activeItem,toggleSubnav:this.toggleSubnav})},methods:{toggle:function(){this.open=!this.open;!function(t){for(var e=arguments.length,n=new Array(e>1?e-1:0),r=1;r<e;r++)n[r-1]=arguments[r];n.map((function(e){return t.classList.toggle(e)}))}(this.htmlElement,"hide-scrollbar-mobile","nav-active"),this.htmlElement.classList.contains("search-active")&&this.htmlElement.classList.remove("hide-scrollbar","sticky-header","search-active")},toggleItem:function

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (568)
Category:	downloaded
Size (bytes):	2441635
Entropy (8bit):	5.606117513640613
Encrypted:	false
SSDEEP:	24576:1E4S8aGQ+5ULgOVJ4uIsZ9ouA1mXb0Do1QAKQ:i4S8a+5eVJNIsZ9Q1mXD
MD5:	62727FA83183431062CD87C2ED9D26EC
SHA1:	FEDD174111222776D78DE97EE624FCD19D170200
SHA-256:	6331E4536BB13101EB1A3546B8395BE20933FD13F4116855B96C15680B1316BA
SHA-512:	6ED7F2B847D7C1BD6859DBF7EF7814C0AE4D8A62719526AEA15AE57DD24262AC4B2324F84DE6E3A4D3AA9EEA92DE4A786E462FBFC95FA0FF83C5FAAE4A746D43
Malicious:	false
Reputation:	low
URL:	https://www.youtube-nocookie.com/s/player/26636eff/player_ias.vflset/en_US/base.js
Preview:	var _yt_player={};(function(g){var window=this;/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC All Rights Reserved... Use of this source code is governed by an MIT-style license that can be. found in the LICENSE file at https://angular.dev/license././*.. (The MIT License).. Copyright (C) 2014 by Vitaly Puzrin.. Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restriction, including without limitation the rights. to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. copies of the Software, and to permit persons to whom the Software is. furnished to do so, subject to the following conditions:.. The above copyright notice and this permission notice shall be included in. all copies or substantial portions of the

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2400)
Category:	downloaded
Size (bytes):	627829
Entropy (8bit):	5.455573023075848
Encrypted:	false
SSDEEP:	3072:OI3pY8WmCbJMmE+xdNgKpJbpQIGse06oTa7ZivVdjWHk9P1s+YiB+tFHmBBrqL35:0qpse06oTa7ZivVdpdAy6
MD5:	62443B6240F377C3E1E80F30F17C6147
SHA1:	688F5D76D1F5D9CCEECA8139E5EBF53D81A2E25F
SHA-256:	C031E123DE2A6104A19D2FE6E3EE61108437039B9B527DB9937D7AA96B8436B9
SHA-512:	C5582E779ABBF99061092AC65FFC6C591BDE3D281774170042F141D51BFDF7B04DF5F9B8BB180C7343FAFB4CF345C6CF172516DAAD73B638CEF43558369D3990
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/privatkunden/funktionen/versicherung/
Preview:	<!DOCTYPE html>.<html lang="de-CH">.<head>.<meta charset="UTF-8">.<meta http-equiv="X-UA-Compatible" content="IE=edge">.<title>Versicherung mit TWINT abschliessen \| TWINT</title>.<meta name="viewport" content="width=device-width, initial-scale=1.0">.<script type="text/javascript" src="https://cdn.cookielaw.org/consent/baf1656f-0c9f-4cd8-83fe-a5ce8d8c9eed/OtAutoBlock.js"></script>.<script src="https://cdn.cookielaw.org/scripttemplates/otSDKStub.js" type="text/javascript" data-document-language="true" charset="UTF-8" data-domain-script="baf1656f-0c9f-4cd8-83fe-a5ce8d8c9eed"></script>.<script type="text/javascript">. function OptanonWrapper() { }. </script>.<script>. // Define dataLayer and the gtag function.. window.dataLayer = window.dataLayer \|\| [];. function gtag(){dataLayer.push(arguments);}.. // Default ad_storage to 'denied'.. gtag('consent', 'default', {. ad_storage: 'denied',. analytics

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://ade.googlesyndication.com/ddm/activity/src=14196387;dc_pre=CP-exume4ogDFWxpHgId-FcJgQ;type=sm-co0;cat=twint0;ord=2133826160533;npa=1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=denied;frm=0;user_data_mode=a;gtm=45fe49p0v9190789414za200;gcs=G100;gcd=13p3p3p3p5l1;dma_cps=-;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2F?
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65109)
Category:	downloaded
Size (bytes):	359288
Entropy (8bit):	5.29465596918961
Encrypted:	false
SSDEEP:	3072:/d1AhU+3SYi2ENM6HN26DVwQVZJwcMJks:/d1OU+3SYi2ENM6HN26DVwQ3JwcMJks
MD5:	062401B14D9237F575EF94FE621C3F49
SHA1:	9E1FBC1D92EB17CEE73228CA2AB5D8301F41FE43
SHA-256:	87ADD1FC31B6F12D8DE3185A35BE31E729C9751A89EF30A86D5A5AA9FEF1E281
SHA-512:	B3F8839BEE521B621A54787AC4AE00F5015608E538F078DF35C1A62E6B96EC70C5E5EE927074BA0A14A7A8EDB81C6E1FA334A29D69FAB4D1379F7171BD31A919
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/content/themes/twint/assets/css/frontend.css?ver=1727271305
Preview:	@charset "UTF-8";@font-face{font-display:swap;font-family:Roboto;font-style:normal;font-weight:400;src:url(../../fonts/Roboto-Regular.woff2) format("woff2")}@font-face{font-display:swap;font-family:Roboto;font-style:normal;font-weight:700;src:url(../../fonts/Roboto-Bold.woff2) format("woff2")}/! Bootstrap v4.1.3 (https://getbootstrap.com/).* Copyright 2011-2018 The Bootstrap Authors.* Copyright 2011-2018 Twitter, Inc..* Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE)*/:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#fecf6d;--green:#a0d988;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#868e96;--gray-dark:#676767;--primary:#eb4367;--secondary:#6bb3dd;--success:#a0d988;--info:#17a2b8;--warning:#fecf6d;--danger:#dc3545;--light:#c8c8c8;--dark:#777;--lighter:#f3f3f3;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--breakpoint-2xl:1440px;--b

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x930, components 3
Category:	downloaded
Size (bytes):	43098
Entropy (8bit):	7.904138897016273
Encrypted:	false
SSDEEP:	768:lWO+3ab9ER8/IVQfgc0IVnYzvb1qHL12AnCqIGIGIGIGz1GIGIzE35ms3dN4ws:lMqb9ERGS80unYLbEHL1/CH3DtN4ws
MD5:	CF64AA1CC4A74A2DD6F149D9B282FE0E
SHA1:	65C3C41737D55FA373151398FF0E22E2D6BF3015
SHA-256:	6AB5D1D1FFE96788B06BBD45C8AF99257B9966E3964CFCC485D9093F04EB63FB
SHA-512:	BB45EC7AB8434D4F122091FF3747E93FCD50A2E406F20A8EBD543F8EF218788D6627AE8EBD450D5915DEA75E7CCEB42D37212D0EF1FD1AC487A2C6757064171A
Malicious:	false
Reputation:	low
URL:	https://www.twint.ch/content/uploads/2023/07/Digital-Goods_Google-Play_Header_DE-800x930.jpg
Preview:	......JFIF.........................................$ &%# #"(-90(6+"#2D26;=@@@&0FKE>J9?@=...........=)#)==================================================........ .............4.................................................................=O.D.R.@@..@J.......D..T. .. H.... "EY.........(@@BR%@..!(n..DHE ............QDH..@B.@B..`A...$U.............%"T.Q.....D.R.@@..@J.......D..T. .. H.... "EY.........(@@BR%@..!(n..DHE ............QDH..@B.@B..`A...$U.............%"T.Q.....D.R.@@..@J.......D..T. .. H.... "EY.........(@@BR%@..!(n..DHE ............QDH..@B.@B..`A...$U.............%"T.Q.....D.R.@@..@J..........@B.@J. . !..............%"T.Q.....D.R.@@..@J....XIa...T....@B......!IP..D.PD....(@@BR%@..!(n..DHE ...........f......>)`...............).g{f.....O'sf...(@@BR%@..!(n..DHE .........h<...?L........................p......(@@BR%@..!(n..DHE .......,.j..^.?^.;.X...:\(.........3&F...........\|.<..(....%"T.Q.....D.R.@@..@J.;^.$.....3F.f......~............@....4..b^\../O.

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9818618;type=twint000;cat=twint0;ord=8444076415182;npa=0;auiddc=1403402495.1727409735;ps=1;pcor=1986224265;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fnetflix%2F?
Preview:	<html></html>

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 27, 2024 06:01:34.925513029 CEST	49675	443	192.168.2.4	173.222.162.32
Sep 27, 2024 06:01:37.608077049 CEST	49735	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:37.608131886 CEST	443	49735	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:37.608194113 CEST	49735	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:37.608500004 CEST	49735	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:37.608514071 CEST	443	49735	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:38.147128105 CEST	443	49735	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:38.147470951 CEST	49735	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:38.147495031 CEST	443	49735	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:38.148446083 CEST	443	49735	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:38.148508072 CEST	49735	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:38.149543047 CEST	49735	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:38.149588108 CEST	49735	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:38.149605036 CEST	443	49735	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:38.149699926 CEST	49735	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:38.149709940 CEST	443	49735	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:38.149724960 CEST	49735	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:38.149745941 CEST	49735	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:38.150116920 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:38.150155067 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:38.150219917 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:38.150437117 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:38.150446892 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:38.697921991 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:38.698580980 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:38.698642969 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:38.699738026 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:38.699805975 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:38.703277111 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:38.703356028 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:38.703877926 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:38.703887939 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:38.754698038 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.415762901 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.415822029 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.415863991 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.415903091 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.415918112 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.415957928 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.415972948 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.416229963 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.416323900 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.416332006 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.416373014 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.416404963 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.416428089 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.416434050 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.416486025 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.416491032 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.420495987 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.420542002 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.420563936 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.468274117 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.506215096 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.506370068 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.506423950 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.506469011 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.525285006 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.525342941 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.525377035 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.525459051 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.525501013 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.525507927 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.525587082 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.525643110 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.525650024 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.526184082 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.526231050 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.526238918 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.526396036 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.526443005 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.526448011 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.526535034 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.526586056 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.526591063 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.527156115 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.527206898 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.527211905 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.527308941 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.527354956 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.527359962 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.527467966 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.527523994 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.527529001 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.528112888 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.528162003 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.528167009 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.528263092 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.528317928 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.528322935 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.528899908 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.528948069 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.528954029 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.578243017 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.602184057 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.602338076 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.602392912 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.602428913 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.615622044 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.615695000 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.615732908 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.616486073 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.635775089 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.635798931 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.635834932 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.636050940 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.636101007 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.636116028 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.636152029 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.636449099 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.636508942 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.636554003 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.636604071 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.637069941 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.637126923 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.637214899 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.637267113 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.637307882 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.637355089 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.637943029 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.638006926 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.638114929 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.638163090 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.638235092 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.638289928 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.638930082 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.638988018 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.639050007 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.639102936 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.639796972 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.639862061 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.639957905 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.640006065 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.640085936 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.640150070 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.640687943 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.640748024 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.692893982 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.693183899 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.725975990 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.726037025 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.726072073 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.726250887 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.726296902 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.726305008 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.726416111 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.726455927 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.726461887 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.726504087 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.746485949 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.746535063 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.746646881 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.746646881 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.746685028 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.746763945 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.746812105 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.746857882 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.746997118 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.747037888 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.747044086 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.747087002 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.747420073 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.747457981 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.747462988 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.747500896 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.747546911 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.747589111 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.747592926 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.748229980 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.748312950 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.748320103 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.748538971 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.748581886 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.748586893 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.748661041 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.748698950 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.748703003 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.748742104 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.748779058 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.748783112 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.748794079 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.748836040 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.748841047 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.749398947 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.749444008 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.749452114 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.749466896 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.749502897 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.749584913 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.749625921 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.750579119 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.750602007 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.750663042 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.750677109 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.750761032 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.751419067 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.751442909 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.751480103 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.751485109 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.751509905 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.751523972 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.751527071 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.791400909 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.816560984 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.816585064 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.816658020 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.816695929 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.816999912 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.817020893 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.817056894 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.817065954 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.817080021 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.817105055 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.842478991 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.848195076 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.848231077 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.848265886 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.848284960 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.848315954 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.848331928 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.848618984 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.848639965 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.848668098 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.848675013 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.848706961 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.850378036 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.850394011 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.850444078 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.850455046 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.850478888 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.850493908 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.850588083 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.850634098 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.853082895 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.853097916 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.853152037 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.853167057 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.853571892 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.853590012 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.853624105 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.853632927 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.853650093 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.893146038 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.893191099 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.893244028 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.893287897 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.893304110 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.907351017 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.907373905 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.907432079 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.907459974 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.907475948 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.938973904 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.938990116 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.939157009 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.939183950 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.939228058 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.939449072 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.939466000 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.939508915 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.939517021 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.939555883 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.941274881 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.941291094 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.941354036 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.941364050 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.941775084 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.941781044 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.941792965 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.941817045 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.941822052 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.941850901 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.941858053 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.941869974 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.941875935 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.941888094 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.941893101 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.941916943 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.941921949 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.941939116 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.941942930 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.941967964 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.941989899 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.942665100 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.942678928 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.942732096 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.942739964 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.943417072 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.972362995 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.973149061 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.983550072 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.983567953 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.983649015 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.983678102 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.983900070 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.985203981 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.998055935 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.998070955 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.998123884 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:39.998152018 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:39.998209953 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.029685020 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.029706955 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.029786110 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.029813051 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.029856920 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.030100107 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.030121088 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.030164957 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.030170918 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.030216932 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.031419039 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.031438112 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.031508923 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.031514883 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.031615019 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.032135010 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.032150984 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.032223940 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.032229900 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.032488108 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.032682896 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.032701015 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.032741070 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.032747030 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.032777071 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.033272028 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.033282995 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.033341885 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.033346891 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.033381939 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.074199915 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.074228048 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.074256897 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.074290037 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.074301958 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.074350119 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.088799953 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.088816881 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.088851929 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.088884115 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.088886976 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.088921070 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.120569944 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.120588064 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.120632887 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.120661020 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.120678902 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.120846033 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.120985031 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.121001959 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.121037006 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.121043921 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.121068001 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.121099949 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.122267962 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.122282982 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.122332096 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.122350931 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.122402906 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.123568058 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.123584032 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.123625994 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.123634100 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.123653889 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.123667955 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.124145985 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.124162912 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.124196053 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.124202013 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.124222040 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.124238014 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.124596119 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.124610901 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.124645948 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.124650955 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.124686003 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.124701023 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.164871931 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.164891005 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.164947987 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.164988041 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.165054083 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.179301977 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.179317951 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.179361105 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.179399967 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.179420948 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.179440022 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.189517021 CEST	49739	443	192.168.2.4	142.250.186.132
Sep 27, 2024 06:01:40.189546108 CEST	443	49739	142.250.186.132	192.168.2.4
Sep 27, 2024 06:01:40.189608097 CEST	49739	443	192.168.2.4	142.250.186.132
Sep 27, 2024 06:01:40.191106081 CEST	49739	443	192.168.2.4	142.250.186.132
Sep 27, 2024 06:01:40.191117048 CEST	443	49739	142.250.186.132	192.168.2.4
Sep 27, 2024 06:01:40.211019039 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.211050987 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.211081982 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.211107969 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.211127996 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.211148977 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.211504936 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.211524963 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.211551905 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.211559057 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.211579084 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.211595058 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.213551998 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.213599920 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.213635921 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.213654041 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.213706970 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.213706970 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.214952946 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.214983940 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.215012074 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.215018988 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.215051889 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.215068102 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.215090990 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.215137005 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.215697050 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.215729952 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.215756893 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.215764999 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.215801001 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.215854883 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.216109037 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.216115952 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.216276884 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.216320992 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.216336012 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.216342926 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.216386080 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.269669056 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.269696951 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.269742012 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.269771099 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.269792080 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.269814968 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.269953966 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.269998074 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.270004034 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.270010948 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.270046949 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.304229975 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.304261923 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.304300070 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.304330111 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.304344893 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.304366112 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.304620981 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.304683924 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.304696083 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.304725885 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.304749966 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.304764986 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.311209917 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.311254025 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.311280012 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.311304092 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.311321020 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.311455965 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.311501026 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.311506987 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.311553955 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.311561108 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.311584949 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.311630964 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.311635971 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.311674118 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.311680079 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.311691999 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.311718941 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.312097073 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.312138081 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.312155008 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.312161922 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.312184095 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.312197924 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.312345982 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.312367916 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.312392950 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.312398911 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.312419891 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.312433958 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.312618971 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.312658072 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.362951040 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.362973928 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.363043070 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.363068104 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.363183022 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.363217115 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.363224983 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.363231897 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.363256931 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.363284111 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.379168987 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.392544031 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.392637968 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.392690897 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.392748117 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.392761946 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.392812967 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.392826080 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.392873049 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.393030882 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.393085957 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.393182039 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.393239975 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.401397943 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.401438951 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.401492119 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.401515961 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.401614904 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.401741028 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.401782036 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.401813030 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.401820898 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.401874065 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.401905060 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.401953936 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.402024031 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.402072906 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.402077913 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.402122021 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.402153969 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.402199984 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.402266979 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.402318954 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.402416945 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.402467012 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.402483940 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.402498960 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.402523041 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.402673960 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.402760029 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.402765989 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.403009892 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.403059006 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.403063059 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.403093100 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.403120041 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.443733931 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.446799040 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.446902990 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.453541040 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.453588963 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.453604937 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.453632116 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.453654051 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.453927040 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.453943014 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.453980923 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.453989983 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.454014063 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.460618973 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.483488083 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.483519077 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.483563900 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.483592033 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.483613014 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.483792067 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.483825922 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.483836889 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.483844995 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.483869076 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.492217064 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.492240906 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.492270947 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.492290974 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.492315054 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.492732048 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.492765903 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.492779970 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.492788076 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.492815971 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.493191957 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.493206024 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.493243933 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.493257046 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.493268013 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.493514061 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.493532896 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.493563890 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.493571043 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.493590117 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.493752956 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.534954071 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.544086933 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.544116020 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.544156075 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.544183969 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.544203043 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.544220924 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.544501066 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.544526100 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.544568062 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.544574022 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.544601917 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.544615030 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.574179888 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.574223995 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.574259996 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.574290037 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.574307919 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.574326992 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.574587107 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.574632883 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.574640989 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.574659109 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.574681044 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.574704885 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.574759007 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.583463907 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.583504915 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.583530903 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.583553076 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.583571911 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.583971977 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.584038973 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.584042072 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.584069014 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.584095001 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.584184885 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.584223032 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.584235907 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.584260941 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.584280014 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.584543943 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.584595919 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.584611893 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.584636927 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.584664106 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.634861946 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.634885073 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.634924889 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.634949923 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.634965897 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.635205984 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.635229111 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.635260105 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.635265112 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.635289907 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.664697886 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.664720058 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.664769888 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.664799929 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.664818048 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.669039011 CEST	49740	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.669070959 CEST	443	49740	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.669198036 CEST	49740	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.669934988 CEST	49740	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.669945955 CEST	443	49740	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.670419931 CEST	49741	443	192.168.2.4	151.101.66.137
Sep 27, 2024 06:01:40.670444012 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:40.670547962 CEST	49741	443	192.168.2.4	151.101.66.137
Sep 27, 2024 06:01:40.670942068 CEST	49741	443	192.168.2.4	151.101.66.137
Sep 27, 2024 06:01:40.670953989 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:40.672869921 CEST	49742	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:40.672911882 CEST	443	49742	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:40.673019886 CEST	49742	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:40.673294067 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.673321962 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.673336029 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.673346996 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.673369884 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.673588037 CEST	49742	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:40.673594952 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.673598051 CEST	443	49742	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:40.673612118 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.673645020 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.673650980 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.673667908 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.673963070 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.673984051 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.674015045 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.674021006 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.674034119 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.674315929 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.674334049 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.674424887 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.674432039 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.674648046 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.674665928 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.674696922 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.674702883 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.674724102 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.677664995 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:40.677691936 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:40.678045988 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:40.678412914 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:40.678423882 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:40.719177961 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.725359917 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.725373030 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.725400925 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.725420952 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.725449085 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.725462914 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.725483894 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.755001068 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.755012035 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.755072117 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.755098104 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.755147934 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.755317926 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.755348921 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.755372047 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.755378962 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.755402088 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.755415916 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.764118910 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.764143944 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.764187098 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.764199018 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.764210939 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.764238119 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.764256954 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.764503002 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.764520884 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.764564991 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.764575958 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.764596939 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.764611959 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.765054941 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.765077114 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.765105009 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.765110970 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.765141010 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.765396118 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.765415907 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.765450954 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.765455961 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.765472889 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.765492916 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.815774918 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.815783024 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.815867901 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.815897942 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.815992117 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.816134930 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.816159964 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.816191912 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.816198111 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.816225052 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.816241980 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.835164070 CEST	443	49739	142.250.186.132	192.168.2.4
Sep 27, 2024 06:01:40.836849928 CEST	49739	443	192.168.2.4	142.250.186.132
Sep 27, 2024 06:01:40.836864948 CEST	443	49739	142.250.186.132	192.168.2.4
Sep 27, 2024 06:01:40.838296890 CEST	443	49739	142.250.186.132	192.168.2.4
Sep 27, 2024 06:01:40.838362932 CEST	49739	443	192.168.2.4	142.250.186.132
Sep 27, 2024 06:01:40.845860004 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.845894098 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.845937967 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.845973015 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.845988989 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.846184969 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.846191883 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.846371889 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.846404076 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.846431971 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.846437931 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.846472025 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.850974083 CEST	49739	443	192.168.2.4	142.250.186.132
Sep 27, 2024 06:01:40.851174116 CEST	443	49739	142.250.186.132	192.168.2.4
Sep 27, 2024 06:01:40.854732037 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.854758024 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.854803085 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.854830980 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.854846954 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.855148077 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.855168104 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.855205059 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.855212927 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.855225086 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.855626106 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.855642080 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.855676889 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.855684996 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.855701923 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.856092930 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.856117010 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.856146097 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.856152058 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.856177092 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.893961906 CEST	49739	443	192.168.2.4	142.250.186.132
Sep 27, 2024 06:01:40.893978119 CEST	443	49739	142.250.186.132	192.168.2.4
Sep 27, 2024 06:01:40.906651020 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.906709909 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.906730890 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.906766891 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.906781912 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.906955004 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.907006979 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.907010078 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.907038927 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.907068014 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.907195091 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.907246113 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.907253981 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.907481909 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.935156107 CEST	49744	443	192.168.2.4	184.28.90.27
Sep 27, 2024 06:01:40.935192108 CEST	443	49744	184.28.90.27	192.168.2.4
Sep 27, 2024 06:01:40.935426950 CEST	49744	443	192.168.2.4	184.28.90.27
Sep 27, 2024 06:01:40.936606884 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.936626911 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.936702967 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.936728954 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.936805010 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.937197924 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.937213898 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.937258959 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.937268019 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.937380075 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.937380075 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.940418005 CEST	49739	443	192.168.2.4	142.250.186.132
Sep 27, 2024 06:01:40.951159954 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.951190948 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.951232910 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.951256990 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.951273918 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.951289892 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.951682091 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.951720953 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.951744080 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.951750040 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.951773882 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.951788902 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.951798916 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.952290058 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.952326059 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.952351093 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.952356100 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.952380896 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.952406883 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.952502966 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.952508926 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.952663898 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.952694893 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.952714920 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:40.952719927 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:40.952742100 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.000680923 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.000721931 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.000778913 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.000807047 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.000819921 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.000825882 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.000870943 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.000876904 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.000938892 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.006315947 CEST	49744	443	192.168.2.4	184.28.90.27
Sep 27, 2024 06:01:41.006336927 CEST	443	49744	184.28.90.27	192.168.2.4
Sep 27, 2024 06:01:41.007179022 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.027364016 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.027406931 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.027431011 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.027453899 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.027509928 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.027585983 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.027770996 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.027806044 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.027827024 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.027832031 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.027857065 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.027879953 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.041898012 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.041928053 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.041960001 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.041985035 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.042000055 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.042016983 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.042306900 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.042339087 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.042367935 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.042372942 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.042396069 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.042711973 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.042720079 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.042749882 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.042790890 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.042803049 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.042809010 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.042845964 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.043150902 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.043184042 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.043203115 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.043209076 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.043234110 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.043589115 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.043623924 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.043644905 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.043652058 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.043675900 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.047144890 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.091017962 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.091037035 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.091089964 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.091114998 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.091129065 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.118114948 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.118133068 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.118174076 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.118204117 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.118217945 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.118546009 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.118560076 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.119072914 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.119085073 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.122303009 CEST	443	49740	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.132215977 CEST	49740	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.132235050 CEST	443	49740	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.132384062 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.132405043 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.132437944 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.132462025 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.132492065 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.132864952 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.132879972 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.132905960 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.132914066 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.132941008 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.133328915 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.133347034 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.133388042 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.133397102 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.133409023 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.133553982 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.133584023 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.133591890 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.133898020 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.133923054 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.133935928 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.133966923 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.133971930 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.133996010 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.134082079 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.135016918 CEST	443	49740	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.135107994 CEST	49740	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.139800072 CEST	443	49742	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:41.141925097 CEST	49740	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.142046928 CEST	443	49740	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.142273903 CEST	49740	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.142455101 CEST	49740	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.142455101 CEST	49740	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.142467976 CEST	443	49740	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.143101931 CEST	49740	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.143589020 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.143630028 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.143750906 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.144114017 CEST	49742	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:41.144140005 CEST	443	49742	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:41.144751072 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.144764900 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.145152092 CEST	443	49742	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:41.145211935 CEST	49742	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:41.147793055 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.157506943 CEST	49741	443	192.168.2.4	151.101.66.137
Sep 27, 2024 06:01:41.157517910 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.157974005 CEST	49742	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:41.158103943 CEST	443	49742	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:41.159038067 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.159095049 CEST	49741	443	192.168.2.4	151.101.66.137
Sep 27, 2024 06:01:41.160641909 CEST	49742	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:41.160670996 CEST	443	49742	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:41.162652016 CEST	49741	443	192.168.2.4	151.101.66.137
Sep 27, 2024 06:01:41.162736893 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.163260937 CEST	49741	443	192.168.2.4	151.101.66.137
Sep 27, 2024 06:01:41.163271904 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.178378105 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.178396940 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.178464890 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.178493977 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.178505898 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.178529024 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.205445051 CEST	49741	443	192.168.2.4	151.101.66.137
Sep 27, 2024 06:01:41.205446005 CEST	49742	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:41.208738089 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.208807945 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.208842993 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.208867073 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.208878040 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.208923101 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.209074020 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.209131956 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.209142923 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.209161997 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.209184885 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.209208965 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.209269047 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.209482908 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.209523916 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.209537983 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.209559917 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.209563971 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.209579945 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.223278046 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.223332882 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.223361015 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.223395109 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.223412037 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.223737955 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.223778009 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.223803043 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.223814011 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.223839998 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.224203110 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.224225998 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.224268913 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.224277020 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.224291086 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.224639893 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.224688053 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.224705935 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.224713087 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.224739075 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.261471987 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.262674093 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.262713909 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.262747049 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.262783051 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.262788057 CEST	49741	443	192.168.2.4	151.101.66.137
Sep 27, 2024 06:01:41.262815952 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.262835979 CEST	49741	443	192.168.2.4	151.101.66.137
Sep 27, 2024 06:01:41.262880087 CEST	49741	443	192.168.2.4	151.101.66.137
Sep 27, 2024 06:01:41.262885094 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.263329983 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.263361931 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.263402939 CEST	49741	443	192.168.2.4	151.101.66.137
Sep 27, 2024 06:01:41.263406038 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.263417006 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.263499022 CEST	49741	443	192.168.2.4	151.101.66.137
Sep 27, 2024 06:01:41.266108036 CEST	443	49742	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:41.266148090 CEST	443	49742	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:41.266174078 CEST	443	49742	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:41.266200066 CEST	443	49742	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:41.266221046 CEST	49742	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:41.266223907 CEST	443	49742	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:41.266251087 CEST	443	49742	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:41.266267061 CEST	49742	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:41.266284943 CEST	443	49742	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:41.266311884 CEST	443	49742	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:41.266320944 CEST	49742	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:41.266329050 CEST	443	49742	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:41.266345024 CEST	49742	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:41.266968012 CEST	443	49742	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:41.267009974 CEST	49742	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:41.267023087 CEST	443	49742	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:41.267728090 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.269332886 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.269351006 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.269443035 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.269452095 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.269560099 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.277523994 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.277853966 CEST	49741	443	192.168.2.4	151.101.66.137
Sep 27, 2024 06:01:41.277863026 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.299448013 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.299470901 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.299537897 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.299565077 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.299582958 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.299608946 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.299832106 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.299846888 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.299874067 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.299881935 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.299910069 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.299936056 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.300276041 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.300292969 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.300339937 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.300348043 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.300513029 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.309699059 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:41.309961081 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:41.309976101 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:41.310353041 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:41.310417891 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:41.311075926 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:41.311136007 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:41.313415051 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.313479900 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.313893080 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.313909054 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.313935995 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.313955069 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.313967943 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.313996077 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.314344883 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.314368010 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.314466000 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.314466000 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.314476013 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.314814091 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.314829111 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.314862967 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.314871073 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.314891100 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.316350937 CEST	49742	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:41.316363096 CEST	443	49742	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:41.332448959 CEST	49741	443	192.168.2.4	151.101.66.137
Sep 27, 2024 06:01:41.353317022 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.353444099 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.353482008 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.353519917 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.353557110 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.353562117 CEST	49741	443	192.168.2.4	151.101.66.137
Sep 27, 2024 06:01:41.353562117 CEST	49741	443	192.168.2.4	151.101.66.137
Sep 27, 2024 06:01:41.353579998 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.353622913 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.353631973 CEST	49741	443	192.168.2.4	151.101.66.137
Sep 27, 2024 06:01:41.353638887 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.353842020 CEST	443	49742	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:41.353883028 CEST	443	49742	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:41.353910923 CEST	443	49742	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:41.353924990 CEST	49742	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:41.353938103 CEST	443	49742	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:41.353950024 CEST	443	49742	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:41.353974104 CEST	49742	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:41.353990078 CEST	49742	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:41.354126930 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.354216099 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.354243994 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.354281902 CEST	49741	443	192.168.2.4	151.101.66.137
Sep 27, 2024 06:01:41.354281902 CEST	49741	443	192.168.2.4	151.101.66.137
Sep 27, 2024 06:01:41.354289055 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.354302883 CEST	443	49742	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:41.354348898 CEST	443	49742	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:41.354374886 CEST	443	49742	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:41.354383945 CEST	49742	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:41.354388952 CEST	49741	443	192.168.2.4	151.101.66.137
Sep 27, 2024 06:01:41.354398012 CEST	443	49742	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:41.354435921 CEST	49742	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:41.354443073 CEST	443	49742	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:41.354737997 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.354809999 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.354842901 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.354887009 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.354897976 CEST	49741	443	192.168.2.4	151.101.66.137
Sep 27, 2024 06:01:41.354904890 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.354935884 CEST	49741	443	192.168.2.4	151.101.66.137
Sep 27, 2024 06:01:41.354954958 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.355096102 CEST	49741	443	192.168.2.4	151.101.66.137
Sep 27, 2024 06:01:41.355102062 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.355225086 CEST	443	49742	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:41.355257034 CEST	443	49742	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:41.355285883 CEST	443	49742	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:41.355303049 CEST	49742	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:41.355314970 CEST	443	49742	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:41.355328083 CEST	49742	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:41.355349064 CEST	443	49742	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:41.355696917 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.355732918 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.355740070 CEST	49742	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:41.355747938 CEST	443	49742	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:41.355765104 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.355803967 CEST	49741	443	192.168.2.4	151.101.66.137
Sep 27, 2024 06:01:41.355803967 CEST	49741	443	192.168.2.4	151.101.66.137
Sep 27, 2024 06:01:41.355811119 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.356127977 CEST	443	49742	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:41.356169939 CEST	443	49742	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:41.356179953 CEST	49742	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:41.356190920 CEST	443	49742	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:41.356288910 CEST	49742	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:41.356296062 CEST	443	49742	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:41.356414080 CEST	443	49742	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:41.356455088 CEST	49742	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:41.356488943 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.356522083 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.356554985 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.356563091 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.356595993 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.359603882 CEST	49742	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:41.359633923 CEST	443	49742	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:41.362931967 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.362946987 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.363022089 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.363044977 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.390285969 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.390310049 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.390347958 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.390372992 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.390387058 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.390697956 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.390712976 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.390763044 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.390772104 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.390784979 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.404156923 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.404176950 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.404211998 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.404233932 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.404249907 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.404544115 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.404558897 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.404607058 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.404613972 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.404658079 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.404715061 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.405639887 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.405653954 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.410269022 CEST	49741	443	192.168.2.4	151.101.66.137
Sep 27, 2024 06:01:41.410280943 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.444434881 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.444446087 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.444469929 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.444478989 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.444485903 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.444509029 CEST	49741	443	192.168.2.4	151.101.66.137
Sep 27, 2024 06:01:41.444523096 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.444562912 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.444565058 CEST	49741	443	192.168.2.4	151.101.66.137
Sep 27, 2024 06:01:41.444602966 CEST	49741	443	192.168.2.4	151.101.66.137
Sep 27, 2024 06:01:41.444786072 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.444859028 CEST	49741	443	192.168.2.4	151.101.66.137
Sep 27, 2024 06:01:41.444859028 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.444899082 CEST	49741	443	192.168.2.4	151.101.66.137
Sep 27, 2024 06:01:41.445173979 CEST	49741	443	192.168.2.4	151.101.66.137
Sep 27, 2024 06:01:41.445192099 CEST	443	49741	151.101.66.137	192.168.2.4
Sep 27, 2024 06:01:41.601032972 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.601383924 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.601406097 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.601838112 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.602313042 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.602375984 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.602490902 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.643394947 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.665544033 CEST	443	49744	184.28.90.27	192.168.2.4
Sep 27, 2024 06:01:41.665613890 CEST	49744	443	192.168.2.4	184.28.90.27
Sep 27, 2024 06:01:41.669215918 CEST	49744	443	192.168.2.4	184.28.90.27
Sep 27, 2024 06:01:41.669229984 CEST	443	49744	184.28.90.27	192.168.2.4
Sep 27, 2024 06:01:41.669461012 CEST	443	49744	184.28.90.27	192.168.2.4
Sep 27, 2024 06:01:41.710027933 CEST	49744	443	192.168.2.4	184.28.90.27
Sep 27, 2024 06:01:41.713888884 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:41.714031935 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:41.714040041 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:41.714071035 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:41.741985083 CEST	49746	443	192.168.2.4	150.171.27.10
Sep 27, 2024 06:01:41.742021084 CEST	443	49746	150.171.27.10	192.168.2.4
Sep 27, 2024 06:01:41.742115021 CEST	49746	443	192.168.2.4	150.171.27.10
Sep 27, 2024 06:01:41.742743969 CEST	49746	443	192.168.2.4	150.171.27.10
Sep 27, 2024 06:01:41.742755890 CEST	443	49746	150.171.27.10	192.168.2.4
Sep 27, 2024 06:01:41.765727997 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:41.765737057 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:41.779705048 CEST	49744	443	192.168.2.4	184.28.90.27
Sep 27, 2024 06:01:41.819396019 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:41.823410034 CEST	443	49744	184.28.90.27	192.168.2.4
Sep 27, 2024 06:01:41.843066931 CEST	49747	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:41.843106985 CEST	443	49747	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:41.843163967 CEST	49747	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:41.843878031 CEST	49747	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:41.843889952 CEST	443	49747	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:41.921884060 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:41.921922922 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:41.922070980 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:41.922297001 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:41.922312975 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:41.928004980 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:41.930742025 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:41.930749893 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:41.934401035 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:41.934593916 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:41.934600115 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:41.938237906 CEST	49748	443	192.168.2.4	151.101.2.137
Sep 27, 2024 06:01:41.938276052 CEST	443	49748	151.101.2.137	192.168.2.4
Sep 27, 2024 06:01:41.938401937 CEST	49748	443	192.168.2.4	151.101.2.137
Sep 27, 2024 06:01:41.940526009 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:41.940871954 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:41.940880060 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:41.951663971 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:41.951884985 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:41.951894045 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:41.953074932 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:41.954749107 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:41.954765081 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:41.956341028 CEST	49748	443	192.168.2.4	151.101.2.137
Sep 27, 2024 06:01:41.956360102 CEST	443	49748	151.101.2.137	192.168.2.4
Sep 27, 2024 06:01:41.965573072 CEST	443	49744	184.28.90.27	192.168.2.4
Sep 27, 2024 06:01:41.965640068 CEST	443	49744	184.28.90.27	192.168.2.4
Sep 27, 2024 06:01:41.965698004 CEST	49744	443	192.168.2.4	184.28.90.27
Sep 27, 2024 06:01:41.970310926 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.970381975 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.970428944 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.970438004 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.970462084 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.970503092 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.970536947 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.970541954 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.970555067 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.970577955 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.970885038 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.970930099 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.970935106 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.971218109 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.971374035 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.971378088 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.975045919 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:41.975251913 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:41.975263119 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.002131939 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:42.008266926 CEST	49744	443	192.168.2.4	184.28.90.27
Sep 27, 2024 06:01:42.008302927 CEST	443	49744	184.28.90.27	192.168.2.4
Sep 27, 2024 06:01:42.009217024 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.011182070 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.011230946 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.011248112 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:42.011269093 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.011310101 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:42.017570972 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.019825935 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.023847103 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.023894072 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.023904085 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:42.023926973 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.023997068 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:42.030185938 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.036657095 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.036787987 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:42.036806107 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.042835951 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.042922020 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.042992115 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:42.043001890 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.045047045 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:42.049119949 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.055444956 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.055530071 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.055572033 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:42.055583000 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.055665016 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:42.056962967 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.057061911 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.057109118 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.057109118 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.057122946 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.057180882 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.057190895 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.057795048 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.057842016 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.057846069 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.057893038 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.057962894 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.057965994 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.058509111 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.058569908 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.058578014 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.058583021 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.058614969 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.058621883 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.059267998 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.059318066 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.059320927 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.059333086 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.059396982 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.059401035 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.059464931 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.059503078 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.059504032 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.059514046 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.059545994 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.060158968 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.061048031 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.066540003 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.066611052 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:42.066618919 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.072267056 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.072315931 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.072410107 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:42.072431087 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.072525024 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:42.078047991 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.083743095 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.083767891 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.083806992 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:42.083822012 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.083901882 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:42.090977907 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.097609997 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.097645044 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.097649097 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:42.097660065 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.097754002 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:42.101181984 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.101188898 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.103766918 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.103844881 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.103851080 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.107326031 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.107372999 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.107574940 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:42.107589960 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.120930910 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.120984077 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:42.120991945 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.127821922 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.127888918 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:42.127901077 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.135624886 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.135716915 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:42.135723114 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.144680023 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.144733906 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.144764900 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:42.144772053 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.147974968 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.148070097 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:42.148077011 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.152453899 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.152551889 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:42.152556896 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.156184912 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.156287909 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:42.156307936 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.160281897 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.160340071 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:42.160346985 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.161720037 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.161860943 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.161909103 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.161919117 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.161937952 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.162033081 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.162050962 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.162353992 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.162408113 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.162414074 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.162425995 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.162450075 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.162455082 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.162481070 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.163016081 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.163069010 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.163073063 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.163086891 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.163125038 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.163136005 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.163141012 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.163152933 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.163182020 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:42.163187981 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.163204908 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.163222075 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:42.163438082 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.163491011 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.163913012 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.163938999 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:42.163985968 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.164016008 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.164076090 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.164108992 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.164165974 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.164828062 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.164896011 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.164948940 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.165004969 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.165016890 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.165069103 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.165895939 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.165967941 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.165992975 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.166044950 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.184225082 CEST	49743	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:42.184266090 CEST	443	49743	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:42.190433025 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.190542936 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.248745918 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.248874903 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.248922110 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.248946905 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.248970985 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.248991966 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.248992920 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.249001026 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.249030113 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.249068022 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.249118090 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.249124050 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.249170065 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.249174118 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.249202013 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.249218941 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.249340057 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.249388933 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.249393940 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.249453068 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.249456882 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.249625921 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.250817060 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.325546980 CEST	443	49747	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:42.330427885 CEST	49747	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:42.330461979 CEST	443	49747	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:42.332063913 CEST	443	49747	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:42.332144976 CEST	49747	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:42.340727091 CEST	49747	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:42.340816975 CEST	443	49747	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:42.343857050 CEST	49747	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:42.343869925 CEST	443	49747	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:42.379692078 CEST	443	49746	150.171.27.10	192.168.2.4
Sep 27, 2024 06:01:42.385812998 CEST	49747	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:42.427623034 CEST	49746	443	192.168.2.4	150.171.27.10
Sep 27, 2024 06:01:42.463718891 CEST	443	49748	151.101.2.137	192.168.2.4
Sep 27, 2024 06:01:42.470521927 CEST	49748	443	192.168.2.4	151.101.2.137
Sep 27, 2024 06:01:42.470546961 CEST	443	49748	151.101.2.137	192.168.2.4
Sep 27, 2024 06:01:42.470736980 CEST	49746	443	192.168.2.4	150.171.27.10
Sep 27, 2024 06:01:42.470750093 CEST	443	49746	150.171.27.10	192.168.2.4
Sep 27, 2024 06:01:42.472143888 CEST	443	49746	150.171.27.10	192.168.2.4
Sep 27, 2024 06:01:42.472167969 CEST	443	49748	151.101.2.137	192.168.2.4
Sep 27, 2024 06:01:42.472235918 CEST	49746	443	192.168.2.4	150.171.27.10
Sep 27, 2024 06:01:42.472356081 CEST	49748	443	192.168.2.4	151.101.2.137
Sep 27, 2024 06:01:42.472811937 CEST	49748	443	192.168.2.4	151.101.2.137
Sep 27, 2024 06:01:42.472907066 CEST	443	49748	151.101.2.137	192.168.2.4
Sep 27, 2024 06:01:42.473486900 CEST	49748	443	192.168.2.4	151.101.2.137
Sep 27, 2024 06:01:42.473495007 CEST	443	49748	151.101.2.137	192.168.2.4
Sep 27, 2024 06:01:42.474627972 CEST	443	49746	150.171.27.10	192.168.2.4
Sep 27, 2024 06:01:42.474746943 CEST	49746	443	192.168.2.4	150.171.27.10
Sep 27, 2024 06:01:42.479619026 CEST	49746	443	192.168.2.4	150.171.27.10
Sep 27, 2024 06:01:42.479700089 CEST	443	49746	150.171.27.10	192.168.2.4
Sep 27, 2024 06:01:42.479981899 CEST	49746	443	192.168.2.4	150.171.27.10
Sep 27, 2024 06:01:42.479994059 CEST	443	49746	150.171.27.10	192.168.2.4
Sep 27, 2024 06:01:42.497767925 CEST	443	49747	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:42.497826099 CEST	443	49747	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:42.497864008 CEST	443	49747	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:42.497911930 CEST	443	49747	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:42.497919083 CEST	49747	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:42.497946978 CEST	443	49747	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:42.497965097 CEST	49747	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:42.498033047 CEST	443	49747	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:42.498114109 CEST	49747	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:42.498122931 CEST	443	49747	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:42.498627901 CEST	443	49747	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:42.498665094 CEST	443	49747	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:42.498676062 CEST	49747	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:42.498682976 CEST	443	49747	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:42.498718023 CEST	49747	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:42.502372026 CEST	443	49747	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:42.502429008 CEST	443	49747	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:42.502502918 CEST	49747	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:42.502517939 CEST	443	49747	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:42.516918898 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.520134926 CEST	49748	443	192.168.2.4	151.101.2.137
Sep 27, 2024 06:01:42.520155907 CEST	49746	443	192.168.2.4	150.171.27.10
Sep 27, 2024 06:01:42.525793076 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.525810957 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.550234079 CEST	49747	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:42.569705963 CEST	443	49748	151.101.2.137	192.168.2.4
Sep 27, 2024 06:01:42.580943108 CEST	443	49748	151.101.2.137	192.168.2.4
Sep 27, 2024 06:01:42.580959082 CEST	443	49748	151.101.2.137	192.168.2.4
Sep 27, 2024 06:01:42.580979109 CEST	443	49748	151.101.2.137	192.168.2.4
Sep 27, 2024 06:01:42.580990076 CEST	443	49748	151.101.2.137	192.168.2.4
Sep 27, 2024 06:01:42.580993891 CEST	443	49748	151.101.2.137	192.168.2.4
Sep 27, 2024 06:01:42.581002951 CEST	49748	443	192.168.2.4	151.101.2.137
Sep 27, 2024 06:01:42.581021070 CEST	443	49748	151.101.2.137	192.168.2.4
Sep 27, 2024 06:01:42.581048965 CEST	49748	443	192.168.2.4	151.101.2.137
Sep 27, 2024 06:01:42.581073999 CEST	49748	443	192.168.2.4	151.101.2.137
Sep 27, 2024 06:01:42.584933043 CEST	443	49747	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:42.585134029 CEST	443	49747	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:42.585172892 CEST	443	49747	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:42.585186958 CEST	49747	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:42.585212946 CEST	443	49747	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:42.585252047 CEST	443	49747	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:42.585282087 CEST	49747	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:42.585285902 CEST	443	49747	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:42.585325003 CEST	443	49747	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:42.585352898 CEST	49747	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:42.585920095 CEST	443	49747	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:42.585961103 CEST	443	49747	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:42.585968018 CEST	49747	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:42.585973024 CEST	443	49747	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:42.586009026 CEST	49747	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:42.586230993 CEST	443	49747	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:42.586288929 CEST	443	49747	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:42.586338997 CEST	49747	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:42.586344004 CEST	443	49747	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:42.586385012 CEST	443	49747	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:42.586417913 CEST	443	49747	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:42.586426020 CEST	49747	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:42.586430073 CEST	443	49747	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:42.586467981 CEST	49747	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:42.586472988 CEST	443	49747	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:42.587163925 CEST	443	49747	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:42.587198019 CEST	443	49747	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:42.587202072 CEST	49747	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:42.587208986 CEST	443	49747	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:42.587245941 CEST	49747	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:42.587249994 CEST	443	49747	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:42.587327957 CEST	443	49747	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:42.587440968 CEST	49747	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:42.641625881 CEST	443	49746	150.171.27.10	192.168.2.4
Sep 27, 2024 06:01:42.641848087 CEST	443	49746	150.171.27.10	192.168.2.4
Sep 27, 2024 06:01:42.642008066 CEST	49746	443	192.168.2.4	150.171.27.10
Sep 27, 2024 06:01:42.660784006 CEST	49751	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.660830975 CEST	443	49751	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.661483049 CEST	443	49748	151.101.2.137	192.168.2.4
Sep 27, 2024 06:01:42.661506891 CEST	443	49748	151.101.2.137	192.168.2.4
Sep 27, 2024 06:01:42.661595106 CEST	49751	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.661781073 CEST	49748	443	192.168.2.4	151.101.2.137
Sep 27, 2024 06:01:42.661792994 CEST	443	49748	151.101.2.137	192.168.2.4
Sep 27, 2024 06:01:42.661947966 CEST	49748	443	192.168.2.4	151.101.2.137
Sep 27, 2024 06:01:42.662276983 CEST	49751	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:42.662293911 CEST	443	49751	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:42.662600994 CEST	49747	443	192.168.2.4	104.17.24.14
Sep 27, 2024 06:01:42.662611008 CEST	443	49747	104.17.24.14	192.168.2.4
Sep 27, 2024 06:01:42.663851023 CEST	49746	443	192.168.2.4	150.171.27.10
Sep 27, 2024 06:01:42.663881063 CEST	443	49746	150.171.27.10	192.168.2.4
Sep 27, 2024 06:01:42.669506073 CEST	443	49748	151.101.2.137	192.168.2.4
Sep 27, 2024 06:01:42.669527054 CEST	443	49748	151.101.2.137	192.168.2.4
Sep 27, 2024 06:01:42.669585943 CEST	49748	443	192.168.2.4	151.101.2.137
Sep 27, 2024 06:01:42.669595003 CEST	443	49748	151.101.2.137	192.168.2.4
Sep 27, 2024 06:01:42.669631958 CEST	49748	443	192.168.2.4	151.101.2.137
Sep 27, 2024 06:01:42.758474112 CEST	49752	443	192.168.2.4	212.102.56.179
Sep 27, 2024 06:01:42.758512020 CEST	443	49752	212.102.56.179	192.168.2.4
Sep 27, 2024 06:01:42.758747101 CEST	49752	443	192.168.2.4	212.102.56.179
Sep 27, 2024 06:01:42.759830952 CEST	443	49748	151.101.2.137	192.168.2.4
Sep 27, 2024 06:01:42.759856939 CEST	443	49748	151.101.2.137	192.168.2.4
Sep 27, 2024 06:01:42.759932041 CEST	49748	443	192.168.2.4	151.101.2.137
Sep 27, 2024 06:01:42.759946108 CEST	443	49748	151.101.2.137	192.168.2.4
Sep 27, 2024 06:01:42.759960890 CEST	443	49748	151.101.2.137	192.168.2.4
Sep 27, 2024 06:01:42.759984970 CEST	49748	443	192.168.2.4	151.101.2.137
Sep 27, 2024 06:01:42.759993076 CEST	49748	443	192.168.2.4	151.101.2.137
Sep 27, 2024 06:01:42.760027885 CEST	49748	443	192.168.2.4	151.101.2.137
Sep 27, 2024 06:01:42.760026932 CEST	443	49748	151.101.2.137	192.168.2.4
Sep 27, 2024 06:01:42.760077000 CEST	49748	443	192.168.2.4	151.101.2.137
Sep 27, 2024 06:01:42.760093927 CEST	443	49748	151.101.2.137	192.168.2.4
Sep 27, 2024 06:01:42.760147095 CEST	443	49748	151.101.2.137	192.168.2.4
Sep 27, 2024 06:01:42.760226965 CEST	49748	443	192.168.2.4	151.101.2.137
Sep 27, 2024 06:01:42.827434063 CEST	49752	443	192.168.2.4	212.102.56.179
Sep 27, 2024 06:01:42.827455044 CEST	443	49752	212.102.56.179	192.168.2.4
Sep 27, 2024 06:01:42.992434025 CEST	49748	443	192.168.2.4	151.101.2.137
Sep 27, 2024 06:01:42.992468119 CEST	443	49748	151.101.2.137	192.168.2.4
Sep 27, 2024 06:01:43.074170113 CEST	49754	443	192.168.2.4	184.28.90.27
Sep 27, 2024 06:01:43.074199915 CEST	443	49754	184.28.90.27	192.168.2.4
Sep 27, 2024 06:01:43.074273109 CEST	49754	443	192.168.2.4	184.28.90.27
Sep 27, 2024 06:01:43.075237989 CEST	49754	443	192.168.2.4	184.28.90.27
Sep 27, 2024 06:01:43.075248957 CEST	443	49754	184.28.90.27	192.168.2.4
Sep 27, 2024 06:01:43.142776012 CEST	443	49751	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:43.189590931 CEST	49751	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:43.204941034 CEST	49751	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:43.204952955 CEST	443	49751	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:43.208328962 CEST	443	49751	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:43.208359957 CEST	443	49751	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:43.208395004 CEST	49751	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:43.220326900 CEST	49751	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:43.220350027 CEST	49751	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:43.220464945 CEST	443	49751	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:43.220611095 CEST	49751	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:43.220623970 CEST	443	49751	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:43.220633030 CEST	49751	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:43.220768929 CEST	49751	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:43.220889091 CEST	49755	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:43.220930099 CEST	443	49755	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:43.221112967 CEST	49755	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:43.221191883 CEST	49755	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:43.221201897 CEST	443	49755	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:43.527204037 CEST	443	49752	212.102.56.179	192.168.2.4
Sep 27, 2024 06:01:43.527481079 CEST	49752	443	192.168.2.4	212.102.56.179
Sep 27, 2024 06:01:43.527497053 CEST	443	49752	212.102.56.179	192.168.2.4
Sep 27, 2024 06:01:43.528923988 CEST	443	49752	212.102.56.179	192.168.2.4
Sep 27, 2024 06:01:43.528994083 CEST	49752	443	192.168.2.4	212.102.56.179
Sep 27, 2024 06:01:43.672873974 CEST	49752	443	192.168.2.4	212.102.56.179
Sep 27, 2024 06:01:43.673058987 CEST	443	49752	212.102.56.179	192.168.2.4
Sep 27, 2024 06:01:43.673650026 CEST	49752	443	192.168.2.4	212.102.56.179
Sep 27, 2024 06:01:43.673664093 CEST	443	49752	212.102.56.179	192.168.2.4
Sep 27, 2024 06:01:43.690404892 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:43.690457106 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:43.690576077 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:43.691580057 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:43.691611052 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:43.727941036 CEST	49752	443	192.168.2.4	212.102.56.179
Sep 27, 2024 06:01:43.757848024 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:43.757884979 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:43.757992983 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:43.758383036 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:43.758395910 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:43.811423063 CEST	443	49754	184.28.90.27	192.168.2.4
Sep 27, 2024 06:01:43.811522961 CEST	49754	443	192.168.2.4	184.28.90.27
Sep 27, 2024 06:01:43.812722921 CEST	49754	443	192.168.2.4	184.28.90.27
Sep 27, 2024 06:01:43.812731028 CEST	443	49754	184.28.90.27	192.168.2.4
Sep 27, 2024 06:01:43.813024998 CEST	443	49754	184.28.90.27	192.168.2.4
Sep 27, 2024 06:01:43.817327023 CEST	49754	443	192.168.2.4	184.28.90.27
Sep 27, 2024 06:01:43.830686092 CEST	443	49755	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:43.849517107 CEST	49755	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:43.849533081 CEST	443	49755	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:43.853079081 CEST	443	49755	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:43.853173971 CEST	49755	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:43.853745937 CEST	49755	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:43.853916883 CEST	443	49755	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:43.854187965 CEST	49755	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:43.854195118 CEST	443	49755	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:43.863409996 CEST	443	49754	184.28.90.27	192.168.2.4
Sep 27, 2024 06:01:43.895893097 CEST	49755	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:43.951545000 CEST	443	49752	212.102.56.179	192.168.2.4
Sep 27, 2024 06:01:43.951613903 CEST	443	49752	212.102.56.179	192.168.2.4
Sep 27, 2024 06:01:43.951621056 CEST	443	49752	212.102.56.179	192.168.2.4
Sep 27, 2024 06:01:43.951646090 CEST	443	49752	212.102.56.179	192.168.2.4
Sep 27, 2024 06:01:43.951657057 CEST	443	49752	212.102.56.179	192.168.2.4
Sep 27, 2024 06:01:43.951666117 CEST	443	49752	212.102.56.179	192.168.2.4
Sep 27, 2024 06:01:43.951674938 CEST	49752	443	192.168.2.4	212.102.56.179
Sep 27, 2024 06:01:43.951690912 CEST	443	49752	212.102.56.179	192.168.2.4
Sep 27, 2024 06:01:43.951711893 CEST	49752	443	192.168.2.4	212.102.56.179
Sep 27, 2024 06:01:43.951730013 CEST	443	49752	212.102.56.179	192.168.2.4
Sep 27, 2024 06:01:43.951740980 CEST	49752	443	192.168.2.4	212.102.56.179
Sep 27, 2024 06:01:43.951745987 CEST	443	49752	212.102.56.179	192.168.2.4
Sep 27, 2024 06:01:43.951792955 CEST	49752	443	192.168.2.4	212.102.56.179
Sep 27, 2024 06:01:43.951867104 CEST	443	49752	212.102.56.179	192.168.2.4
Sep 27, 2024 06:01:43.951936960 CEST	49752	443	192.168.2.4	212.102.56.179
Sep 27, 2024 06:01:43.952315092 CEST	49752	443	192.168.2.4	212.102.56.179
Sep 27, 2024 06:01:43.952331066 CEST	443	49752	212.102.56.179	192.168.2.4
Sep 27, 2024 06:01:44.025399923 CEST	49763	443	192.168.2.4	195.181.170.18
Sep 27, 2024 06:01:44.025435925 CEST	443	49763	195.181.170.18	192.168.2.4
Sep 27, 2024 06:01:44.025584936 CEST	49763	443	192.168.2.4	195.181.170.18
Sep 27, 2024 06:01:44.025965929 CEST	49763	443	192.168.2.4	195.181.170.18
Sep 27, 2024 06:01:44.025979996 CEST	443	49763	195.181.170.18	192.168.2.4
Sep 27, 2024 06:01:44.027637959 CEST	49764	443	192.168.2.4	18.158.199.82
Sep 27, 2024 06:01:44.027663946 CEST	443	49764	18.158.199.82	192.168.2.4
Sep 27, 2024 06:01:44.028757095 CEST	49764	443	192.168.2.4	18.158.199.82
Sep 27, 2024 06:01:44.029074907 CEST	49764	443	192.168.2.4	18.158.199.82
Sep 27, 2024 06:01:44.029087067 CEST	443	49764	18.158.199.82	192.168.2.4
Sep 27, 2024 06:01:44.090827942 CEST	443	49754	184.28.90.27	192.168.2.4
Sep 27, 2024 06:01:44.090881109 CEST	443	49754	184.28.90.27	192.168.2.4
Sep 27, 2024 06:01:44.090936899 CEST	49754	443	192.168.2.4	184.28.90.27
Sep 27, 2024 06:01:44.092093945 CEST	49754	443	192.168.2.4	184.28.90.27
Sep 27, 2024 06:01:44.092106104 CEST	443	49754	184.28.90.27	192.168.2.4
Sep 27, 2024 06:01:44.218940973 CEST	443	49755	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:44.219072104 CEST	443	49755	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:44.219131947 CEST	49755	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:44.226013899 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.274935007 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.288220882 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.288247108 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.288656950 CEST	49755	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:44.288697958 CEST	443	49755	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:44.289433956 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.289496899 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.290030956 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.290096998 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.290209055 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.292948008 CEST	49765	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:44.292990923 CEST	443	49765	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:44.293076038 CEST	49765	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:44.293411016 CEST	49765	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:44.293422937 CEST	443	49765	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:44.294790030 CEST	49766	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:44.294799089 CEST	443	49766	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:44.294868946 CEST	49766	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:44.295217991 CEST	49766	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:44.295224905 CEST	443	49766	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:44.299045086 CEST	49767	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:44.299069881 CEST	443	49767	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:44.299201012 CEST	49767	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:44.306473970 CEST	49767	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:44.306488991 CEST	443	49767	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:44.314107895 CEST	49768	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.314155102 CEST	443	49768	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.314238071 CEST	49768	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.315077066 CEST	49768	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.315100908 CEST	443	49768	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.333775043 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.333786964 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.365747929 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.370768070 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:44.370789051 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.371260881 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.371323109 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:44.371997118 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.372045040 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:44.372421026 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:44.372484922 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.372611046 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:44.382970095 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.397447109 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.397485971 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.397511005 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.397547960 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.397555113 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.397564888 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.397598028 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.397800922 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.397826910 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.397847891 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.397850037 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.397861004 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.397900105 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.402106047 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.402146101 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.402149916 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.402158976 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.402200937 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.402324915 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.419409037 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.423527956 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:44.423540115 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.443795919 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.471793890 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:44.485735893 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.485805035 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.485862970 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.485869884 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.485881090 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.485910892 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.485924006 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.485932112 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.485964060 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.486300945 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.486402035 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.486454964 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.486463070 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.486777067 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.486815929 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.486844063 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.486857891 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.486865997 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.486881018 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.487355947 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.487381935 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.487409115 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.487416983 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.487461090 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.487468004 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.487508059 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.487926960 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.488059998 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.488080025 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.488102913 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.488121986 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.488123894 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.488132000 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.488143921 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.488173008 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.574428082 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.574469090 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.574491024 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.574512005 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.574520111 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.574529886 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.574559927 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.574779034 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.574826002 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.574834108 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.575035095 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.575081110 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.575089931 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.575155020 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.575195074 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.575201035 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.575589895 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.575644970 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.575651884 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.575728893 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.575772047 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.575779915 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.575891972 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.575942993 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.575949907 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.576528072 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.576571941 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.576580048 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.576666117 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.576685905 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.576709986 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.576716900 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.576729059 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.576751947 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.576816082 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.576859951 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.577517986 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.577565908 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.577599049 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.577637911 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.577721119 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.577766895 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.579286098 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.579332113 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.587959051 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.824829102 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.824954987 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.825001955 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.825032949 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.825032949 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.825053930 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.825067997 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.825067997 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.825119972 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.825128078 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.825150013 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.825193882 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.825196028 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.825232983 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:44.825289011 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.825318098 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.825366974 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.825367928 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.825386047 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:44.825390100 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.825417995 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.825432062 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.825438976 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.825464010 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.825481892 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.825510025 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.825535059 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:44.825548887 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.825788975 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.825823069 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.825855970 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.825872898 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:44.825894117 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.825918913 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:44.833096027 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.833277941 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.833349943 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:44.833354950 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.833370924 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.833396912 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:44.833513021 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.833544970 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.833576918 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.833609104 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:44.833610058 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.833610058 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:44.833627939 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.833676100 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.833722115 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:44.833735943 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.833782911 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:44.834539890 CEST	443	49767	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:44.834806919 CEST	443	49768	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:44.835014105 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.835073948 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.835108995 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.835163116 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:44.835175991 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.835217953 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:44.835227966 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.835335970 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.835376978 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.835378885 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:44.835380077 CEST	443	49766	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:44.835407972 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.835454941 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:44.835511923 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.835576057 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.835623026 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:44.835639954 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.836422920 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.836477995 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:44.836489916 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.836539984 CEST	443	49765	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:44.836625099 CEST	443	49763	195.181.170.18	192.168.2.4
Sep 27, 2024 06:01:44.838362932 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.838401079 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.838423014 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:44.838437080 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.838500023 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.838570118 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:44.838577986 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.838588953 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.838707924 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:44.839066029 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.839258909 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.839303970 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.839307070 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:44.839319944 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.839420080 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:44.839822054 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.839891911 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.839927912 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.839952946 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:44.839965105 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.839993000 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:44.840316057 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.840379000 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:44.840389967 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.840404987 CEST	443	49764	18.158.199.82	192.168.2.4
Sep 27, 2024 06:01:44.842358112 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.842392921 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.842444897 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:44.842458010 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.842803001 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:44.847219944 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.851495028 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.851536989 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.851598024 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:44.851613998 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.854892969 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:44.856477976 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.864758968 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.864799976 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.864865065 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:44.864881992 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.866801977 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:44.867199898 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.867794037 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.867825985 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.867851973 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:44.867865086 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.869124889 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:44.872148037 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.876004934 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.876276016 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:44.876334906 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:44.881484985 CEST	49767	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:44.881625891 CEST	49763	443	192.168.2.4	195.181.170.18
Sep 27, 2024 06:01:44.881629944 CEST	49768	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:44.881658077 CEST	49764	443	192.168.2.4	18.158.199.82
Sep 27, 2024 06:01:44.881659031 CEST	49766	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:44.881659031 CEST	49765	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:45.172766924 CEST	49764	443	192.168.2.4	18.158.199.82
Sep 27, 2024 06:01:45.172790051 CEST	443	49764	18.158.199.82	192.168.2.4
Sep 27, 2024 06:01:45.172859907 CEST	49763	443	192.168.2.4	195.181.170.18
Sep 27, 2024 06:01:45.172879934 CEST	443	49763	195.181.170.18	192.168.2.4
Sep 27, 2024 06:01:45.173021078 CEST	49765	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:45.173038960 CEST	443	49765	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:45.173203945 CEST	49766	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:45.173219919 CEST	443	49766	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:45.173295975 CEST	49768	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:45.173309088 CEST	443	49768	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:45.173393965 CEST	49767	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:45.173407078 CEST	443	49767	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:45.173438072 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:45.173842907 CEST	443	49768	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:45.174540043 CEST	443	49767	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:45.174597025 CEST	49767	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:45.174839973 CEST	443	49766	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:45.174885035 CEST	49766	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:45.176459074 CEST	49768	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:45.176556110 CEST	443	49768	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:45.176815987 CEST	443	49763	195.181.170.18	192.168.2.4
Sep 27, 2024 06:01:45.176819086 CEST	443	49765	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:45.176898956 CEST	49765	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:45.177133083 CEST	49763	443	192.168.2.4	195.181.170.18
Sep 27, 2024 06:01:45.177284002 CEST	443	49764	18.158.199.82	192.168.2.4
Sep 27, 2024 06:01:45.177370071 CEST	49764	443	192.168.2.4	18.158.199.82
Sep 27, 2024 06:01:45.177504063 CEST	49767	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:45.177529097 CEST	49767	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:45.177572012 CEST	443	49767	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:45.177573919 CEST	49767	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:45.177700996 CEST	49767	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:45.177921057 CEST	49773	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:45.177953959 CEST	443	49773	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:45.178201914 CEST	49773	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:45.178508997 CEST	49766	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:45.178508997 CEST	49766	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:45.178574085 CEST	49766	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:45.178594112 CEST	443	49766	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:45.178644896 CEST	49766	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:45.179120064 CEST	49763	443	192.168.2.4	195.181.170.18
Sep 27, 2024 06:01:45.179389000 CEST	443	49763	195.181.170.18	192.168.2.4
Sep 27, 2024 06:01:45.179402113 CEST	49765	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:45.179402113 CEST	49765	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:45.179450035 CEST	49765	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:45.179598093 CEST	443	49765	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:45.179631948 CEST	49774	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:45.179640055 CEST	443	49774	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:45.179672956 CEST	49765	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:45.179702044 CEST	49774	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:45.180347919 CEST	49773	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:45.180361032 CEST	443	49773	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:45.180681944 CEST	49768	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:45.180726051 CEST	49761	443	192.168.2.4	142.250.185.238
Sep 27, 2024 06:01:45.180771112 CEST	443	49761	142.250.185.238	192.168.2.4
Sep 27, 2024 06:01:45.181293011 CEST	49774	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:45.181305885 CEST	443	49774	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:45.181694031 CEST	49763	443	192.168.2.4	195.181.170.18
Sep 27, 2024 06:01:45.181701899 CEST	443	49763	195.181.170.18	192.168.2.4
Sep 27, 2024 06:01:45.201070070 CEST	49775	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:45.201138020 CEST	443	49775	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:45.201215029 CEST	49775	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:45.203531027 CEST	49764	443	192.168.2.4	18.158.199.82
Sep 27, 2024 06:01:45.203805923 CEST	443	49764	18.158.199.82	192.168.2.4
Sep 27, 2024 06:01:45.204438925 CEST	49764	443	192.168.2.4	18.158.199.82
Sep 27, 2024 06:01:45.204456091 CEST	443	49764	18.158.199.82	192.168.2.4
Sep 27, 2024 06:01:45.205082893 CEST	49775	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:45.205120087 CEST	443	49775	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:45.223114014 CEST	49763	443	192.168.2.4	195.181.170.18
Sep 27, 2024 06:01:45.226212978 CEST	49762	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:45.226232052 CEST	443	49762	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:45.227405071 CEST	443	49768	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:45.246269941 CEST	49764	443	192.168.2.4	18.158.199.82
Sep 27, 2024 06:01:45.390729904 CEST	443	49764	18.158.199.82	192.168.2.4
Sep 27, 2024 06:01:45.391731024 CEST	443	49764	18.158.199.82	192.168.2.4
Sep 27, 2024 06:01:45.391792059 CEST	49764	443	192.168.2.4	18.158.199.82
Sep 27, 2024 06:01:45.393412113 CEST	443	49763	195.181.170.18	192.168.2.4
Sep 27, 2024 06:01:45.393429041 CEST	443	49763	195.181.170.18	192.168.2.4
Sep 27, 2024 06:01:45.393435001 CEST	443	49763	195.181.170.18	192.168.2.4
Sep 27, 2024 06:01:45.393449068 CEST	443	49763	195.181.170.18	192.168.2.4
Sep 27, 2024 06:01:45.393455029 CEST	443	49763	195.181.170.18	192.168.2.4
Sep 27, 2024 06:01:45.393462896 CEST	443	49763	195.181.170.18	192.168.2.4
Sep 27, 2024 06:01:45.393508911 CEST	49763	443	192.168.2.4	195.181.170.18
Sep 27, 2024 06:01:45.393533945 CEST	443	49763	195.181.170.18	192.168.2.4
Sep 27, 2024 06:01:45.393579006 CEST	49763	443	192.168.2.4	195.181.170.18
Sep 27, 2024 06:01:45.395303965 CEST	49764	443	192.168.2.4	18.158.199.82
Sep 27, 2024 06:01:45.395318985 CEST	443	49764	18.158.199.82	192.168.2.4
Sep 27, 2024 06:01:45.398530006 CEST	443	49763	195.181.170.18	192.168.2.4
Sep 27, 2024 06:01:45.398580074 CEST	49763	443	192.168.2.4	195.181.170.18
Sep 27, 2024 06:01:45.398587942 CEST	443	49763	195.181.170.18	192.168.2.4
Sep 27, 2024 06:01:45.398600101 CEST	443	49763	195.181.170.18	192.168.2.4
Sep 27, 2024 06:01:45.398631096 CEST	49763	443	192.168.2.4	195.181.170.18
Sep 27, 2024 06:01:45.406121016 CEST	49763	443	192.168.2.4	195.181.170.18
Sep 27, 2024 06:01:45.406136990 CEST	443	49763	195.181.170.18	192.168.2.4
Sep 27, 2024 06:01:45.518157005 CEST	443	49768	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:45.518259048 CEST	443	49768	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:45.518296957 CEST	49768	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:45.519078016 CEST	49768	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:45.519084930 CEST	443	49768	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:45.561760902 CEST	49779	443	192.168.2.4	142.250.184.196
Sep 27, 2024 06:01:45.561770916 CEST	443	49779	142.250.184.196	192.168.2.4
Sep 27, 2024 06:01:45.561913013 CEST	49779	443	192.168.2.4	142.250.184.196
Sep 27, 2024 06:01:45.562161922 CEST	49779	443	192.168.2.4	142.250.184.196
Sep 27, 2024 06:01:45.562172890 CEST	443	49779	142.250.184.196	192.168.2.4
Sep 27, 2024 06:01:45.642229080 CEST	443	49773	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:45.642417908 CEST	49773	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:45.642430067 CEST	443	49773	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:45.643450022 CEST	443	49773	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:45.643515110 CEST	49773	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:45.644076109 CEST	49773	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:45.644145966 CEST	443	49773	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:45.644396067 CEST	49773	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:45.644403934 CEST	443	49773	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:45.662874937 CEST	443	49774	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:45.663083076 CEST	49774	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:45.663094044 CEST	443	49774	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:45.664247036 CEST	443	49774	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:45.664308071 CEST	49774	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:45.664730072 CEST	49774	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:45.664784908 CEST	443	49774	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:45.664891958 CEST	49774	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:45.664896965 CEST	443	49774	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:45.683160067 CEST	443	49775	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:45.683330059 CEST	49775	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:45.683377028 CEST	443	49775	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:45.684839964 CEST	443	49775	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:45.684909105 CEST	49775	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:45.686297894 CEST	49773	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:45.689713955 CEST	49775	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:45.689872026 CEST	443	49775	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:45.697269917 CEST	49775	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:45.697297096 CEST	443	49775	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:45.720547915 CEST	49774	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:45.738523960 CEST	49775	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:45.991348028 CEST	443	49773	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:45.991736889 CEST	443	49773	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:45.991781950 CEST	49773	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:46.013940096 CEST	49773	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:46.013956070 CEST	443	49773	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:46.032716990 CEST	443	49774	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:46.032984018 CEST	443	49774	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:46.033030987 CEST	49774	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:46.049479008 CEST	49774	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:46.049498081 CEST	443	49774	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:46.104073048 CEST	443	49775	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:46.104214907 CEST	443	49775	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:46.104270935 CEST	49775	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:46.182284117 CEST	49782	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:46.182390928 CEST	443	49782	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:46.182468891 CEST	49782	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:46.182907104 CEST	49775	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:46.182988882 CEST	443	49775	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:46.183590889 CEST	49782	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:46.183621883 CEST	443	49782	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:46.191380978 CEST	443	49779	142.250.184.196	192.168.2.4
Sep 27, 2024 06:01:46.194535971 CEST	49779	443	192.168.2.4	142.250.184.196
Sep 27, 2024 06:01:46.194549084 CEST	443	49779	142.250.184.196	192.168.2.4
Sep 27, 2024 06:01:46.195995092 CEST	443	49779	142.250.184.196	192.168.2.4
Sep 27, 2024 06:01:46.196114063 CEST	49779	443	192.168.2.4	142.250.184.196
Sep 27, 2024 06:01:46.197381020 CEST	49779	443	192.168.2.4	142.250.184.196
Sep 27, 2024 06:01:46.197464943 CEST	443	49779	142.250.184.196	192.168.2.4
Sep 27, 2024 06:01:46.197912931 CEST	49779	443	192.168.2.4	142.250.184.196
Sep 27, 2024 06:01:46.197920084 CEST	443	49779	142.250.184.196	192.168.2.4
Sep 27, 2024 06:01:46.204336882 CEST	49783	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:46.204377890 CEST	443	49783	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:46.204477072 CEST	49783	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:46.207428932 CEST	49783	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:46.207449913 CEST	443	49783	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:46.237262964 CEST	49779	443	192.168.2.4	142.250.184.196
Sep 27, 2024 06:01:46.471945047 CEST	443	49779	142.250.184.196	192.168.2.4
Sep 27, 2024 06:01:46.472049952 CEST	443	49779	142.250.184.196	192.168.2.4
Sep 27, 2024 06:01:46.472162962 CEST	49779	443	192.168.2.4	142.250.184.196
Sep 27, 2024 06:01:46.472769022 CEST	49779	443	192.168.2.4	142.250.184.196
Sep 27, 2024 06:01:46.472795010 CEST	443	49779	142.250.184.196	192.168.2.4
Sep 27, 2024 06:01:46.506195068 CEST	49785	443	192.168.2.4	142.250.184.196
Sep 27, 2024 06:01:46.506249905 CEST	443	49785	142.250.184.196	192.168.2.4
Sep 27, 2024 06:01:46.506380081 CEST	49785	443	192.168.2.4	142.250.184.196
Sep 27, 2024 06:01:46.506638050 CEST	49785	443	192.168.2.4	142.250.184.196
Sep 27, 2024 06:01:46.506659031 CEST	443	49785	142.250.184.196	192.168.2.4
Sep 27, 2024 06:01:46.651864052 CEST	443	49782	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:46.663141012 CEST	49782	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:46.663181067 CEST	443	49782	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:46.666538954 CEST	443	49782	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:46.666620016 CEST	49782	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:46.666953087 CEST	49782	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:46.666985989 CEST	49782	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:46.667012930 CEST	49782	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:46.667150974 CEST	443	49782	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:46.667215109 CEST	49792	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:46.667273045 CEST	443	49792	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:46.667295933 CEST	49782	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:46.667409897 CEST	49792	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:46.667565107 CEST	49792	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:46.667594910 CEST	443	49792	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:46.687707901 CEST	443	49783	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:46.687958002 CEST	49783	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:46.687968016 CEST	443	49783	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:46.688963890 CEST	443	49783	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:46.689039946 CEST	49783	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:46.689308882 CEST	49783	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:46.689373016 CEST	443	49783	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:46.689460039 CEST	49783	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:46.689460039 CEST	49783	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:46.689460039 CEST	49783	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:46.689599037 CEST	49793	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:46.689620972 CEST	443	49793	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:46.689678907 CEST	49793	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:46.690046072 CEST	49793	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:46.690064907 CEST	443	49793	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:46.789021969 CEST	49794	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:46.789083004 CEST	443	49794	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:46.789330006 CEST	49794	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:46.789535046 CEST	49794	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:46.789555073 CEST	443	49794	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:46.791929960 CEST	49795	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:46.791970968 CEST	443	49795	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:46.792058945 CEST	49795	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:46.792318106 CEST	49795	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:46.792330027 CEST	443	49795	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:46.804215908 CEST	49797	443	192.168.2.4	216.58.206.68
Sep 27, 2024 06:01:46.804233074 CEST	443	49797	216.58.206.68	192.168.2.4
Sep 27, 2024 06:01:46.804366112 CEST	49797	443	192.168.2.4	216.58.206.68
Sep 27, 2024 06:01:46.804567099 CEST	49797	443	192.168.2.4	216.58.206.68
Sep 27, 2024 06:01:46.804577112 CEST	443	49797	216.58.206.68	192.168.2.4
Sep 27, 2024 06:01:47.139250040 CEST	443	49785	142.250.184.196	192.168.2.4
Sep 27, 2024 06:01:47.139425039 CEST	443	49792	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:47.139641047 CEST	49785	443	192.168.2.4	142.250.184.196
Sep 27, 2024 06:01:47.139671087 CEST	443	49785	142.250.184.196	192.168.2.4
Sep 27, 2024 06:01:47.139800072 CEST	49792	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:47.139832020 CEST	443	49792	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:47.140034914 CEST	443	49785	142.250.184.196	192.168.2.4
Sep 27, 2024 06:01:47.140691042 CEST	49785	443	192.168.2.4	142.250.184.196
Sep 27, 2024 06:01:47.140768051 CEST	443	49785	142.250.184.196	192.168.2.4
Sep 27, 2024 06:01:47.140881062 CEST	443	49792	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:47.140902996 CEST	49785	443	192.168.2.4	142.250.184.196
Sep 27, 2024 06:01:47.140938044 CEST	49792	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:47.141216993 CEST	49792	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:47.141324043 CEST	443	49792	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:47.141665936 CEST	49792	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:47.141676903 CEST	443	49792	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:47.178294897 CEST	443	49793	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:47.178627014 CEST	49793	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:47.178642988 CEST	443	49793	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:47.182231903 CEST	443	49793	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:47.182353020 CEST	49793	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:47.186135054 CEST	49793	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:47.186239004 CEST	443	49793	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:47.186250925 CEST	49793	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:47.187407970 CEST	443	49785	142.250.184.196	192.168.2.4
Sep 27, 2024 06:01:47.224474907 CEST	49785	443	192.168.2.4	142.250.184.196
Sep 27, 2024 06:01:47.231412888 CEST	443	49793	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:47.269649982 CEST	443	49794	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:47.270997047 CEST	49794	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:47.271014929 CEST	443	49794	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:47.271354914 CEST	443	49794	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:47.272569895 CEST	49794	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:47.272741079 CEST	49794	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:47.273571014 CEST	443	49795	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:47.273643017 CEST	443	49794	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:47.273986101 CEST	49795	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:47.273998976 CEST	443	49795	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:47.274331093 CEST	443	49795	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:47.275743008 CEST	49795	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:47.275799990 CEST	443	49795	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:47.276321888 CEST	49795	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:47.286351919 CEST	49792	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:47.323394060 CEST	443	49795	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:47.331768036 CEST	49793	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:47.331779957 CEST	443	49793	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:47.331811905 CEST	49794	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:47.418437004 CEST	443	49785	142.250.184.196	192.168.2.4
Sep 27, 2024 06:01:47.418673038 CEST	443	49785	142.250.184.196	192.168.2.4
Sep 27, 2024 06:01:47.418752909 CEST	49785	443	192.168.2.4	142.250.184.196
Sep 27, 2024 06:01:47.435857058 CEST	49793	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:47.444230080 CEST	443	49797	216.58.206.68	192.168.2.4
Sep 27, 2024 06:01:47.516918898 CEST	443	49792	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:47.517035961 CEST	443	49792	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:47.517103910 CEST	49792	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:47.632206917 CEST	49797	443	192.168.2.4	216.58.206.68
Sep 27, 2024 06:01:47.635421991 CEST	443	49793	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:47.635508060 CEST	443	49793	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:47.635678053 CEST	49793	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:47.636058092 CEST	443	49794	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:47.636145115 CEST	443	49794	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:47.637003899 CEST	49794	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:47.653702021 CEST	443	49795	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:47.653784037 CEST	443	49795	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:47.653846979 CEST	49795	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:47.950984955 CEST	49797	443	192.168.2.4	216.58.206.68
Sep 27, 2024 06:01:47.951000929 CEST	443	49797	216.58.206.68	192.168.2.4
Sep 27, 2024 06:01:47.952250957 CEST	443	49797	216.58.206.68	192.168.2.4
Sep 27, 2024 06:01:47.952260971 CEST	443	49797	216.58.206.68	192.168.2.4
Sep 27, 2024 06:01:47.952311039 CEST	49797	443	192.168.2.4	216.58.206.68
Sep 27, 2024 06:01:47.962230921 CEST	49792	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:47.962270021 CEST	443	49792	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:47.962584019 CEST	49785	443	192.168.2.4	142.250.184.196
Sep 27, 2024 06:01:47.962591887 CEST	443	49785	142.250.184.196	192.168.2.4
Sep 27, 2024 06:01:47.963141918 CEST	49797	443	192.168.2.4	216.58.206.68
Sep 27, 2024 06:01:47.963216066 CEST	443	49797	216.58.206.68	192.168.2.4
Sep 27, 2024 06:01:47.963979006 CEST	49793	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:47.963989973 CEST	443	49793	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:47.968787909 CEST	49805	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:47.968800068 CEST	443	49805	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:47.968985081 CEST	49805	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:47.971530914 CEST	49806	443	192.168.2.4	35.190.80.1
Sep 27, 2024 06:01:47.971543074 CEST	443	49806	35.190.80.1	192.168.2.4
Sep 27, 2024 06:01:47.971951008 CEST	49806	443	192.168.2.4	35.190.80.1
Sep 27, 2024 06:01:47.973537922 CEST	49805	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:47.973557949 CEST	443	49805	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:47.973715067 CEST	49797	443	192.168.2.4	216.58.206.68
Sep 27, 2024 06:01:47.973722935 CEST	443	49797	216.58.206.68	192.168.2.4
Sep 27, 2024 06:01:47.974351883 CEST	49806	443	192.168.2.4	35.190.80.1
Sep 27, 2024 06:01:47.974360943 CEST	443	49806	35.190.80.1	192.168.2.4
Sep 27, 2024 06:01:47.974838972 CEST	49794	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:47.974859953 CEST	443	49794	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:47.977747917 CEST	49795	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:47.977762938 CEST	443	49795	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:48.034255028 CEST	49797	443	192.168.2.4	216.58.206.68
Sep 27, 2024 06:01:48.100450039 CEST	49807	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:48.100495100 CEST	443	49807	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:48.100567102 CEST	49807	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:48.100760937 CEST	49807	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:48.100778103 CEST	443	49807	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:48.103228092 CEST	49808	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:48.103272915 CEST	443	49808	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:48.103332043 CEST	49808	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:48.103509903 CEST	49808	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:48.103528976 CEST	443	49808	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:48.150217056 CEST	49672	443	192.168.2.4	173.222.162.32
Sep 27, 2024 06:01:48.150249958 CEST	443	49672	173.222.162.32	192.168.2.4
Sep 27, 2024 06:01:48.179186106 CEST	443	49797	216.58.206.68	192.168.2.4
Sep 27, 2024 06:01:48.179375887 CEST	443	49797	216.58.206.68	192.168.2.4
Sep 27, 2024 06:01:48.179493904 CEST	49797	443	192.168.2.4	216.58.206.68
Sep 27, 2024 06:01:48.180197954 CEST	49797	443	192.168.2.4	216.58.206.68
Sep 27, 2024 06:01:48.180216074 CEST	443	49797	216.58.206.68	192.168.2.4
Sep 27, 2024 06:01:48.182037115 CEST	49809	443	192.168.2.4	216.58.206.68
Sep 27, 2024 06:01:48.182081938 CEST	443	49809	216.58.206.68	192.168.2.4
Sep 27, 2024 06:01:48.182598114 CEST	49809	443	192.168.2.4	216.58.206.68
Sep 27, 2024 06:01:48.182961941 CEST	49809	443	192.168.2.4	216.58.206.68
Sep 27, 2024 06:01:48.182975054 CEST	443	49809	216.58.206.68	192.168.2.4
Sep 27, 2024 06:01:48.470429897 CEST	443	49805	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:48.472481012 CEST	443	49806	35.190.80.1	192.168.2.4
Sep 27, 2024 06:01:48.490783930 CEST	49805	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:48.490822077 CEST	443	49805	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:48.490907907 CEST	49806	443	192.168.2.4	35.190.80.1
Sep 27, 2024 06:01:48.490972042 CEST	443	49806	35.190.80.1	192.168.2.4
Sep 27, 2024 06:01:48.491888046 CEST	443	49805	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:48.491949081 CEST	49805	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:48.492013931 CEST	443	49806	35.190.80.1	192.168.2.4
Sep 27, 2024 06:01:48.492074013 CEST	49806	443	192.168.2.4	35.190.80.1
Sep 27, 2024 06:01:48.498080969 CEST	49805	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:48.498117924 CEST	49805	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:48.498142004 CEST	49805	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:48.498214006 CEST	443	49805	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:48.498260021 CEST	49805	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:48.498402119 CEST	49810	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:48.498439074 CEST	443	49810	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:48.498549938 CEST	49810	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:48.499953032 CEST	49806	443	192.168.2.4	35.190.80.1
Sep 27, 2024 06:01:48.500017881 CEST	443	49806	35.190.80.1	192.168.2.4
Sep 27, 2024 06:01:48.500276089 CEST	49810	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:48.500289917 CEST	443	49810	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:48.500509977 CEST	49806	443	192.168.2.4	35.190.80.1
Sep 27, 2024 06:01:48.500516891 CEST	443	49806	35.190.80.1	192.168.2.4
Sep 27, 2024 06:01:48.597923994 CEST	443	49808	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:48.600028992 CEST	443	49807	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:48.630749941 CEST	443	49806	35.190.80.1	192.168.2.4
Sep 27, 2024 06:01:48.630934954 CEST	49806	443	192.168.2.4	35.190.80.1
Sep 27, 2024 06:01:48.729115963 CEST	49808	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:48.729135036 CEST	49807	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:48.770629883 CEST	49807	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:48.770648956 CEST	443	49807	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:48.770770073 CEST	49808	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:48.770812035 CEST	443	49808	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:48.771228075 CEST	443	49807	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:48.771476984 CEST	443	49808	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:48.771557093 CEST	49806	443	192.168.2.4	35.190.80.1
Sep 27, 2024 06:01:48.771591902 CEST	443	49806	35.190.80.1	192.168.2.4
Sep 27, 2024 06:01:48.772244930 CEST	49811	443	192.168.2.4	35.190.80.1
Sep 27, 2024 06:01:48.772291899 CEST	443	49811	35.190.80.1	192.168.2.4
Sep 27, 2024 06:01:48.772408009 CEST	49811	443	192.168.2.4	35.190.80.1
Sep 27, 2024 06:01:48.773163080 CEST	49807	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:48.773238897 CEST	443	49807	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:48.773528099 CEST	49808	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:48.773650885 CEST	443	49808	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:48.830956936 CEST	49807	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:48.830980062 CEST	49808	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:48.926120996 CEST	443	49809	216.58.206.68	192.168.2.4
Sep 27, 2024 06:01:49.033941984 CEST	49809	443	192.168.2.4	216.58.206.68
Sep 27, 2024 06:01:49.075431108 CEST	49811	443	192.168.2.4	35.190.80.1
Sep 27, 2024 06:01:49.075452089 CEST	443	49811	35.190.80.1	192.168.2.4
Sep 27, 2024 06:01:49.115243912 CEST	443	49810	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:49.194099903 CEST	49810	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:49.240072012 CEST	49809	443	192.168.2.4	216.58.206.68
Sep 27, 2024 06:01:49.240093946 CEST	443	49809	216.58.206.68	192.168.2.4
Sep 27, 2024 06:01:49.241487026 CEST	443	49809	216.58.206.68	192.168.2.4
Sep 27, 2024 06:01:49.242275000 CEST	49810	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:49.242280960 CEST	443	49810	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:49.242728949 CEST	443	49810	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:49.249695063 CEST	49810	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:49.249752998 CEST	443	49810	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:49.250694036 CEST	49807	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:49.250993967 CEST	49808	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:49.256575108 CEST	49809	443	192.168.2.4	216.58.206.68
Sep 27, 2024 06:01:49.256804943 CEST	443	49809	216.58.206.68	192.168.2.4
Sep 27, 2024 06:01:49.257107973 CEST	49810	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:49.257508039 CEST	49809	443	192.168.2.4	216.58.206.68
Sep 27, 2024 06:01:49.295409918 CEST	443	49807	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:49.295435905 CEST	443	49808	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:49.299403906 CEST	443	49810	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:49.299413919 CEST	443	49809	216.58.206.68	192.168.2.4
Sep 27, 2024 06:01:49.473036051 CEST	443	49809	216.58.206.68	192.168.2.4
Sep 27, 2024 06:01:49.473262072 CEST	443	49809	216.58.206.68	192.168.2.4
Sep 27, 2024 06:01:49.473395109 CEST	49809	443	192.168.2.4	216.58.206.68
Sep 27, 2024 06:01:49.539834976 CEST	49809	443	192.168.2.4	216.58.206.68
Sep 27, 2024 06:01:49.539854050 CEST	443	49809	216.58.206.68	192.168.2.4
Sep 27, 2024 06:01:49.598489046 CEST	443	49808	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:49.598627090 CEST	443	49808	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:49.598799944 CEST	49808	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:49.604773998 CEST	443	49810	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:49.605037928 CEST	443	49810	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:49.605086088 CEST	49810	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:49.606152058 CEST	49810	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:49.606172085 CEST	443	49810	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:49.611771107 CEST	443	49811	35.190.80.1	192.168.2.4
Sep 27, 2024 06:01:49.620611906 CEST	443	49807	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:49.620698929 CEST	443	49807	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:49.620769978 CEST	49807	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:49.655596972 CEST	49811	443	192.168.2.4	35.190.80.1
Sep 27, 2024 06:01:49.655605078 CEST	443	49811	35.190.80.1	192.168.2.4
Sep 27, 2024 06:01:49.656208038 CEST	443	49811	35.190.80.1	192.168.2.4
Sep 27, 2024 06:01:49.807687998 CEST	49811	443	192.168.2.4	35.190.80.1
Sep 27, 2024 06:01:49.853257895 CEST	49811	443	192.168.2.4	35.190.80.1
Sep 27, 2024 06:01:49.853446007 CEST	443	49811	35.190.80.1	192.168.2.4
Sep 27, 2024 06:01:49.853955984 CEST	49811	443	192.168.2.4	35.190.80.1
Sep 27, 2024 06:01:49.899394035 CEST	443	49811	35.190.80.1	192.168.2.4
Sep 27, 2024 06:01:50.004998922 CEST	443	49811	35.190.80.1	192.168.2.4
Sep 27, 2024 06:01:50.005975008 CEST	443	49811	35.190.80.1	192.168.2.4
Sep 27, 2024 06:01:50.006042004 CEST	49811	443	192.168.2.4	35.190.80.1
Sep 27, 2024 06:01:50.179764032 CEST	49811	443	192.168.2.4	35.190.80.1
Sep 27, 2024 06:01:50.179788113 CEST	443	49811	35.190.80.1	192.168.2.4
Sep 27, 2024 06:01:50.732567072 CEST	443	49739	142.250.186.132	192.168.2.4
Sep 27, 2024 06:01:50.732634068 CEST	443	49739	142.250.186.132	192.168.2.4
Sep 27, 2024 06:01:50.732692003 CEST	49739	443	192.168.2.4	142.250.186.132
Sep 27, 2024 06:01:50.802289009 CEST	49739	443	192.168.2.4	142.250.186.132
Sep 27, 2024 06:01:50.802314043 CEST	443	49739	142.250.186.132	192.168.2.4
Sep 27, 2024 06:01:50.803020000 CEST	49812	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:50.803044081 CEST	443	49812	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:50.803087950 CEST	49812	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:50.803536892 CEST	49813	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:50.803580999 CEST	443	49813	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:50.803627968 CEST	49813	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:50.804701090 CEST	49812	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:50.804713964 CEST	443	49812	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:50.805457115 CEST	49813	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:50.805474997 CEST	443	49813	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:50.820385933 CEST	49808	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:50.820403099 CEST	443	49808	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:50.820920944 CEST	49807	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:50.820950031 CEST	443	49807	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:51.300441980 CEST	443	49812	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:51.300705910 CEST	49812	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:51.300734043 CEST	443	49812	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:51.302198887 CEST	443	49812	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:51.302263975 CEST	49812	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:51.303787947 CEST	49812	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:51.303833008 CEST	49812	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:51.303879976 CEST	49812	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:51.303879976 CEST	443	49812	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:51.303936005 CEST	49812	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:51.304827929 CEST	49816	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:51.304878950 CEST	443	49816	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:51.304944038 CEST	49816	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:51.305397034 CEST	49816	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:51.305412054 CEST	443	49816	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:51.485515118 CEST	443	49813	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:51.489300013 CEST	49813	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:51.489332914 CEST	443	49813	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:51.490570068 CEST	443	49813	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:51.493271112 CEST	49813	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:51.493447065 CEST	49813	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:51.493453979 CEST	443	49813	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:51.539407015 CEST	443	49813	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:51.699439049 CEST	443	49813	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:51.699598074 CEST	49813	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:51.789196014 CEST	443	49813	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:51.789390087 CEST	443	49813	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:51.789446115 CEST	49813	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:51.789854050 CEST	49813	443	192.168.2.4	142.250.186.46
Sep 27, 2024 06:01:51.789892912 CEST	443	49813	142.250.186.46	192.168.2.4
Sep 27, 2024 06:01:51.801189899 CEST	443	49816	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:51.801394939 CEST	49816	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:51.801424026 CEST	443	49816	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:51.802840948 CEST	443	49816	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:51.802892923 CEST	49816	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:51.803282976 CEST	49816	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:51.803355932 CEST	443	49816	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:51.803411961 CEST	49816	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:51.851408005 CEST	443	49816	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:52.011409044 CEST	443	49816	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:52.011584997 CEST	49816	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:52.067162037 CEST	443	49816	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:52.067413092 CEST	443	49816	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:52.067467928 CEST	49816	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:52.067828894 CEST	49816	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:52.067846060 CEST	443	49816	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:52.205703020 CEST	49822	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:52.205729961 CEST	443	49822	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:52.205822945 CEST	49822	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:52.206159115 CEST	49822	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:52.206170082 CEST	443	49822	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:52.209305048 CEST	49823	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:52.209343910 CEST	443	49823	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:52.209644079 CEST	49823	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:52.209924936 CEST	49823	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:52.209932089 CEST	443	49823	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:52.213519096 CEST	49824	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:52.213531017 CEST	443	49824	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:52.213701010 CEST	49824	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:52.215132952 CEST	49824	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:52.215143919 CEST	443	49824	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:52.255209923 CEST	49825	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:52.255244017 CEST	443	49825	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:52.255409002 CEST	49825	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:52.256289959 CEST	49825	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:52.256308079 CEST	443	49825	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:52.580079079 CEST	49723	80	192.168.2.4	93.184.221.240
Sep 27, 2024 06:01:52.585133076 CEST	80	49723	93.184.221.240	192.168.2.4
Sep 27, 2024 06:01:52.585200071 CEST	49723	80	192.168.2.4	93.184.221.240
Sep 27, 2024 06:01:52.712085962 CEST	443	49822	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:52.712357998 CEST	49822	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:52.712385893 CEST	443	49822	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:52.713852882 CEST	443	49822	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:52.713924885 CEST	49822	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:52.714390993 CEST	49822	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:52.714468956 CEST	49822	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:52.714472055 CEST	443	49822	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:52.714521885 CEST	49822	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:52.714554071 CEST	49822	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:52.714876890 CEST	49828	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:52.714922905 CEST	443	49828	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:52.715095043 CEST	49828	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:52.715423107 CEST	49828	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:52.715454102 CEST	443	49828	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:52.724347115 CEST	443	49824	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:52.724549055 CEST	49824	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:52.724581957 CEST	443	49824	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:52.724950075 CEST	443	49825	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:52.725138903 CEST	49825	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:52.725152016 CEST	443	49825	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:52.725466967 CEST	443	49825	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:52.725960016 CEST	49825	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:52.726035118 CEST	443	49825	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:52.726223946 CEST	49825	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:52.726250887 CEST	443	49824	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:52.726309061 CEST	49824	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:52.726602077 CEST	49824	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:52.726619005 CEST	49824	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:52.726665974 CEST	443	49824	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:52.726689100 CEST	49824	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:52.726707935 CEST	49824	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:52.726933002 CEST	49829	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:52.727024078 CEST	443	49829	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:52.727097988 CEST	49829	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:52.727256060 CEST	49829	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:52.727291107 CEST	443	49829	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:52.732001066 CEST	443	49823	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:52.732186079 CEST	49823	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:52.732197046 CEST	443	49823	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:52.734582901 CEST	443	49823	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:52.734636068 CEST	49823	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:52.735174894 CEST	49823	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:52.735194921 CEST	49823	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:52.735232115 CEST	49823	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:52.735240936 CEST	443	49823	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:52.735681057 CEST	443	49823	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:52.735696077 CEST	49823	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:52.735723019 CEST	49823	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:52.750669003 CEST	49830	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:52.750731945 CEST	443	49830	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:52.750797033 CEST	49830	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:52.751019955 CEST	49830	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:52.751039982 CEST	443	49830	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:52.771393061 CEST	443	49825	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:53.104476929 CEST	443	49825	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:53.104571104 CEST	443	49825	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:53.104644060 CEST	49825	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:53.109453917 CEST	49825	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:53.109478951 CEST	443	49825	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:53.185050011 CEST	443	49828	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:53.192768097 CEST	49828	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:53.192786932 CEST	443	49828	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:53.194253922 CEST	443	49828	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:53.194314003 CEST	49828	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:53.195102930 CEST	49828	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:53.195192099 CEST	443	49828	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:53.195436954 CEST	49828	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:53.195446014 CEST	443	49828	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:53.205661058 CEST	443	49829	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:53.206921101 CEST	443	49830	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:53.206943035 CEST	49829	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:53.206959009 CEST	443	49829	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:53.207206011 CEST	49830	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:53.207216978 CEST	443	49830	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:53.208282948 CEST	443	49830	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:53.208344936 CEST	49830	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:53.209117889 CEST	443	49829	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:53.209172964 CEST	49829	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:53.210181952 CEST	49830	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:53.210278034 CEST	443	49830	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:53.211318970 CEST	49829	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:53.211499929 CEST	443	49829	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:53.211725950 CEST	49830	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:53.211740017 CEST	443	49830	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:53.211833954 CEST	49829	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:53.211842060 CEST	443	49829	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:53.235821962 CEST	49828	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:53.394620895 CEST	49829	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:53.394653082 CEST	49830	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:53.553746939 CEST	443	49828	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:53.553967953 CEST	443	49828	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:53.554019928 CEST	49828	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:53.555135012 CEST	49828	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:53.555160046 CEST	443	49828	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:53.572828054 CEST	49834	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:53.572875977 CEST	443	49834	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:53.572942972 CEST	49834	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:53.573622942 CEST	49834	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:53.573633909 CEST	443	49834	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:53.605184078 CEST	443	49829	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:53.605283022 CEST	443	49829	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:53.605504990 CEST	49829	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:53.606384039 CEST	49829	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:53.606414080 CEST	443	49829	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:53.610842943 CEST	443	49830	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:53.610981941 CEST	443	49830	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:53.611031055 CEST	49830	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:53.611324072 CEST	49830	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:53.611336946 CEST	443	49830	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:53.644788027 CEST	49835	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:53.644839048 CEST	443	49835	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:53.644889116 CEST	49835	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:53.655841112 CEST	49835	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:53.655874968 CEST	443	49835	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:53.660944939 CEST	49836	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:53.660993099 CEST	443	49836	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:53.661092997 CEST	49836	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:53.661978006 CEST	49836	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:53.662000895 CEST	443	49836	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:53.668142080 CEST	49837	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:53.668186903 CEST	443	49837	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:53.668250084 CEST	49837	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:53.668818951 CEST	49837	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:53.668833017 CEST	443	49837	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:54.095897913 CEST	443	49834	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:54.096193075 CEST	49834	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:54.096210003 CEST	443	49834	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:54.097970963 CEST	443	49834	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:54.100553989 CEST	49834	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:54.100812912 CEST	443	49834	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:54.100985050 CEST	49834	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:54.143425941 CEST	443	49834	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:54.182261944 CEST	443	49835	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:54.202594042 CEST	443	49837	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:54.206768990 CEST	443	49836	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:54.212847948 CEST	49835	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:54.212873936 CEST	443	49835	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:54.213424921 CEST	49837	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:54.213434935 CEST	443	49837	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:54.213783026 CEST	443	49837	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:54.217032909 CEST	443	49835	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:54.217111111 CEST	49835	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:54.223769903 CEST	49836	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:54.223787069 CEST	443	49836	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:54.224586964 CEST	49837	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:54.224714994 CEST	443	49837	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:54.224919081 CEST	443	49836	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:54.225012064 CEST	49836	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:54.225600004 CEST	49835	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:54.225620985 CEST	49835	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:54.225660086 CEST	49835	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:54.225840092 CEST	443	49835	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:54.225950956 CEST	49835	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:54.226084948 CEST	49839	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:54.226114988 CEST	443	49839	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:54.226377010 CEST	49836	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:54.226397038 CEST	49836	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:54.226397038 CEST	49839	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:54.226454973 CEST	443	49836	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:54.226466894 CEST	49836	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:54.226506948 CEST	49836	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:54.226780891 CEST	49840	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:54.226841927 CEST	443	49840	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:54.226912022 CEST	49840	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:54.226944923 CEST	49837	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:54.227106094 CEST	49839	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:54.227119923 CEST	443	49839	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:54.227277040 CEST	49840	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:54.227309942 CEST	443	49840	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:54.267411947 CEST	443	49837	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:54.479367018 CEST	443	49837	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:54.479454041 CEST	443	49837	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:54.479528904 CEST	49837	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:54.484421015 CEST	49837	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:54.484447002 CEST	443	49837	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:54.490974903 CEST	443	49834	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:54.491158962 CEST	443	49834	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:54.491411924 CEST	49834	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:54.492152929 CEST	49834	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:54.492166996 CEST	443	49834	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:54.730071068 CEST	443	49840	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:54.747678041 CEST	443	49839	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:54.830909967 CEST	49840	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:54.830964088 CEST	49839	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:54.861834049 CEST	49839	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:54.861848116 CEST	443	49839	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:54.862426043 CEST	49840	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:54.862454891 CEST	443	49840	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:54.863605976 CEST	443	49839	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:54.863620996 CEST	443	49839	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:54.863657951 CEST	49839	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:54.863754034 CEST	443	49840	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:54.863770962 CEST	443	49840	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:54.863807917 CEST	49840	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:54.865103006 CEST	49844	443	192.168.2.4	104.18.94.41
Sep 27, 2024 06:01:54.865149021 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:54.865221024 CEST	49844	443	192.168.2.4	104.18.94.41
Sep 27, 2024 06:01:54.865931034 CEST	49840	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:54.866008043 CEST	443	49840	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:54.866592884 CEST	49839	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:54.866740942 CEST	443	49839	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:54.866833925 CEST	49844	443	192.168.2.4	104.18.94.41
Sep 27, 2024 06:01:54.866856098 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:54.866993904 CEST	49840	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:54.867017984 CEST	443	49840	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:54.867373943 CEST	49839	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:54.867389917 CEST	443	49839	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:55.035026073 CEST	49839	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:55.035049915 CEST	49840	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:55.222167015 CEST	443	49840	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:55.222275972 CEST	443	49840	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:55.222471952 CEST	49840	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:55.249392986 CEST	443	49839	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:55.249634981 CEST	443	49839	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:55.250401020 CEST	49839	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:55.250931978 CEST	49839	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:55.250948906 CEST	443	49839	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:55.413463116 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:55.444900990 CEST	49844	443	192.168.2.4	104.18.94.41
Sep 27, 2024 06:01:55.444937944 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:55.446157932 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:55.446213007 CEST	49844	443	192.168.2.4	104.18.94.41
Sep 27, 2024 06:01:55.631628990 CEST	49844	443	192.168.2.4	104.18.94.41
Sep 27, 2024 06:01:55.631820917 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:55.633093119 CEST	49844	443	192.168.2.4	104.18.94.41
Sep 27, 2024 06:01:55.633110046 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:55.671397924 CEST	49840	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:55.671436071 CEST	443	49840	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:55.705202103 CEST	49844	443	192.168.2.4	104.18.94.41
Sep 27, 2024 06:01:55.741765976 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:55.741869926 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:55.741902113 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:55.741926908 CEST	49844	443	192.168.2.4	104.18.94.41
Sep 27, 2024 06:01:55.741931915 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:55.741942883 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:55.741964102 CEST	49844	443	192.168.2.4	104.18.94.41
Sep 27, 2024 06:01:55.743026972 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:55.743078947 CEST	49844	443	192.168.2.4	104.18.94.41
Sep 27, 2024 06:01:55.743088007 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:55.743500948 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:55.743535995 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:55.743542910 CEST	49844	443	192.168.2.4	104.18.94.41
Sep 27, 2024 06:01:55.743547916 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:55.743585110 CEST	49844	443	192.168.2.4	104.18.94.41
Sep 27, 2024 06:01:55.746886969 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:55.747073889 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:55.747114897 CEST	49844	443	192.168.2.4	104.18.94.41
Sep 27, 2024 06:01:55.747121096 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:55.851151943 CEST	49844	443	192.168.2.4	104.18.94.41
Sep 27, 2024 06:01:55.857973099 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:55.858525038 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:55.858557940 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:55.858562946 CEST	49844	443	192.168.2.4	104.18.94.41
Sep 27, 2024 06:01:55.858568907 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:55.858601093 CEST	49844	443	192.168.2.4	104.18.94.41
Sep 27, 2024 06:01:55.859206915 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:55.859950066 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:55.859980106 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:55.860006094 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:55.860013962 CEST	49844	443	192.168.2.4	104.18.94.41
Sep 27, 2024 06:01:55.860018969 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:55.860050917 CEST	49844	443	192.168.2.4	104.18.94.41
Sep 27, 2024 06:01:55.860879898 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:55.860924006 CEST	49844	443	192.168.2.4	104.18.94.41
Sep 27, 2024 06:01:55.860929966 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:55.861982107 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:55.862015963 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:55.862040997 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:55.862062931 CEST	49844	443	192.168.2.4	104.18.94.41
Sep 27, 2024 06:01:55.862070084 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:55.862093925 CEST	49844	443	192.168.2.4	104.18.94.41
Sep 27, 2024 06:01:55.862792969 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:55.862837076 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:55.862890005 CEST	49844	443	192.168.2.4	104.18.94.41
Sep 27, 2024 06:01:55.862895966 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:55.862962961 CEST	49844	443	192.168.2.4	104.18.94.41
Sep 27, 2024 06:01:55.863728046 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:55.864667892 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:55.864701986 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:55.864737988 CEST	49844	443	192.168.2.4	104.18.94.41
Sep 27, 2024 06:01:55.864743948 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:55.864782095 CEST	49844	443	192.168.2.4	104.18.94.41
Sep 27, 2024 06:01:55.864787102 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:55.864825010 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:55.864954948 CEST	49844	443	192.168.2.4	104.18.94.41
Sep 27, 2024 06:01:55.865976095 CEST	49844	443	192.168.2.4	104.18.94.41
Sep 27, 2024 06:01:55.865987062 CEST	443	49844	104.18.94.41	192.168.2.4
Sep 27, 2024 06:01:56.000994921 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.001029015 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.001159906 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.001508951 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.001521111 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.309022903 CEST	49850	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.309078932 CEST	443	49850	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.309145927 CEST	49850	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.309782028 CEST	49850	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.309798002 CEST	443	49850	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.543236017 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.543466091 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.543482065 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.545236111 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.545317888 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.545660019 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.545734882 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.545805931 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.545815945 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.712037086 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.712090015 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.712126017 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.712146044 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.712157965 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.712193012 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.712472916 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.712529898 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.712661982 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.713712931 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.713751078 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.713777065 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.713783979 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.713816881 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.714610100 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.717674017 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.717725039 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.717736959 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.797996998 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.798053980 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.798074007 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.798429012 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.798490047 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.798542976 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.798552036 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.798585892 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.799001932 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.799242973 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.799292088 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.799299002 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.799974918 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.800018072 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.800025940 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.800236940 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.800283909 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.800291061 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.800884962 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.800930023 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.800935030 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.800944090 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.800981998 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.800988913 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.801661015 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.801702976 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.801711082 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.801717043 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.801769018 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.802129030 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.802685976 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.802731991 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.802736998 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.802927971 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.803018093 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.803023100 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.857772112 CEST	443	49850	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.858027935 CEST	49850	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.858053923 CEST	443	49850	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.859100103 CEST	443	49850	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.859164000 CEST	49850	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.859483957 CEST	49850	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.859549046 CEST	443	49850	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.859663010 CEST	49850	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.885150909 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.885195971 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.885198116 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.885210037 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.885354996 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.885473013 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.886073112 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.886082888 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.886123896 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.886135101 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.886147022 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.886194944 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.886202097 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.886236906 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.886908054 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.886946917 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.886993885 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.887000084 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.887034893 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.887664080 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.887672901 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.887711048 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.887717962 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.887763023 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.887768030 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.887841940 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.888653994 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.888700962 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.888704062 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.888714075 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.888746023 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.888756990 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.889465094 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.889499903 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.889518976 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.889524937 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.889553070 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.889566898 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.890387058 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.890425920 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.890443087 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.890448093 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.890489101 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.890506029 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.891279936 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.891324043 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.891339064 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.891343117 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.891407967 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.904978037 CEST	49850	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.904988050 CEST	443	49850	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.920078993 CEST	49852	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:56.920130968 CEST	443	49852	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:56.920341015 CEST	49852	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:56.924576044 CEST	49852	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:56.924608946 CEST	443	49852	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:56.972047091 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.972105980 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.972121000 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.972163916 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.972517967 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.972559929 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.972570896 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.972579002 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.972609997 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.972621918 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.973371983 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.973406076 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.973437071 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.973443031 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.973478079 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.973495960 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.974287033 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.974328041 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.974339962 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.974344015 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.974384069 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.975344896 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.975393057 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.975820065 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.975867033 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.975871086 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.975882053 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.975910902 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.979507923 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.979561090 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.979562044 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.979574919 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.979605913 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.979626894 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.979676962 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.979681969 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.979732037 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.979774952 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.982460976 CEST	443	49850	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.982498884 CEST	443	49850	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.982525110 CEST	443	49850	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.982553005 CEST	49850	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.982564926 CEST	443	49850	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.982575893 CEST	49850	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.983165026 CEST	443	49850	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.983211040 CEST	49850	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.983217955 CEST	443	49850	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.983342886 CEST	49846	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.983359098 CEST	443	49846	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.983867884 CEST	443	49850	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.983962059 CEST	49850	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.983968019 CEST	443	49850	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.984591961 CEST	443	49850	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.984628916 CEST	49850	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.984635115 CEST	443	49850	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.987445116 CEST	443	49850	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:56.987509966 CEST	49850	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:56.987517118 CEST	443	49850	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.010116100 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.010154009 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.010317087 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.010951996 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.010967970 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.072948933 CEST	443	49850	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.073007107 CEST	49850	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.073044062 CEST	443	49850	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.073435068 CEST	443	49850	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.073462009 CEST	443	49850	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.073487997 CEST	49850	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.073492050 CEST	443	49850	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.073504925 CEST	443	49850	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.073545933 CEST	49850	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.073548079 CEST	443	49850	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.073558092 CEST	443	49850	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.073586941 CEST	49850	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.074254990 CEST	443	49850	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.074278116 CEST	443	49850	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.074305058 CEST	49850	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.074353933 CEST	443	49850	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.074409008 CEST	49850	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.074588060 CEST	443	49850	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.074639082 CEST	443	49850	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.074676037 CEST	443	49850	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.074695110 CEST	49850	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.074714899 CEST	443	49850	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.074794054 CEST	49850	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.075083971 CEST	443	49850	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.075261116 CEST	443	49850	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.075318098 CEST	49850	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.075337887 CEST	443	49850	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.075556993 CEST	443	49850	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.075582981 CEST	443	49850	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.075623989 CEST	49850	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.075640917 CEST	443	49850	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.075803041 CEST	49850	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.075969934 CEST	443	49850	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.076210022 CEST	443	49850	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.076252937 CEST	49850	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.076442957 CEST	49850	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.076481104 CEST	443	49850	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.081064939 CEST	49854	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.081100941 CEST	443	49854	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.081183910 CEST	49854	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.081425905 CEST	49854	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.081439972 CEST	443	49854	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.399230957 CEST	443	49852	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:57.399660110 CEST	49852	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:57.399739981 CEST	443	49852	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:57.400957108 CEST	443	49852	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:57.401029110 CEST	49852	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:57.401741982 CEST	49852	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:57.401783943 CEST	49852	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:57.401803017 CEST	49852	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:57.401849031 CEST	443	49852	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:57.401910067 CEST	49852	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:57.402283907 CEST	49855	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:57.402349949 CEST	443	49855	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:57.402462006 CEST	49855	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:57.402746916 CEST	49855	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:57.402792931 CEST	443	49855	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:57.474191904 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.474644899 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.474670887 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.475203037 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.475611925 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.475713968 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.475975037 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.519419909 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.550856113 CEST	443	49854	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.615632057 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.615689993 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.615737915 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.615761995 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.615978956 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.616017103 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.616022110 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.616029978 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.616066933 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.616072893 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.616137981 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.616173983 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.616209984 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.616213083 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.616230011 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.616246939 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.620676994 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.620739937 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.620748043 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.645489931 CEST	49854	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.645504951 CEST	443	49854	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.646029949 CEST	443	49854	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.646641970 CEST	49854	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.646699905 CEST	443	49854	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.647344112 CEST	49854	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.654761076 CEST	49856	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:57.654795885 CEST	443	49856	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:57.654886007 CEST	49856	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:57.687393904 CEST	443	49854	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.701642990 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.701689005 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.701723099 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.701730013 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.701744080 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.701770067 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.702224970 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.702261925 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.702270031 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.702526093 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.702791929 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.702797890 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.702954054 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.702989101 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.702991962 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.703000069 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.703037977 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.703227043 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.703782082 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.703819036 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.703819036 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.703831911 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.703867912 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.704009056 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.704510927 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.704646111 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.704684973 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.704694033 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.704727888 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.704734087 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.706394911 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.706542969 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.706582069 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.706588030 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.706620932 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.758810997 CEST	443	49854	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.758887053 CEST	443	49854	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.758969069 CEST	49854	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.790203094 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.790343046 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.790390015 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.790427923 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.790508986 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.790529966 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.790566921 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.791069031 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.791129112 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.791137934 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.791457891 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.791506052 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.791511059 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.791527987 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.791548967 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.792068958 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.792110920 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.792115927 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.792124033 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.792167902 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.792820930 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.792865992 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.792880058 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.792886972 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.792917967 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.793494940 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.793535948 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.793545961 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.793553114 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.793586969 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.794409037 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.794445038 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.794461012 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.794467926 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.794498920 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.795103073 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.795146942 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.795150042 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.795160055 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.795197964 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.795887947 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.795942068 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.836606979 CEST	49856	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:57.836632967 CEST	443	49856	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:57.836873055 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.841170073 CEST	49854	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.841192961 CEST	443	49854	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.874448061 CEST	443	49855	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:57.876256943 CEST	49855	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:57.876296043 CEST	443	49855	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:57.876704931 CEST	443	49855	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:57.881083965 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.881155968 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.882390022 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.882437944 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.882445097 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.882455111 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.882483959 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.882488966 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.882535934 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.882548094 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.882587910 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.882595062 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.882631063 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.891004086 CEST	49855	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:57.891180038 CEST	443	49855	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:57.891473055 CEST	49855	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:57.892571926 CEST	49853	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:57.892594099 CEST	443	49853	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:57.935411930 CEST	443	49855	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:58.254431009 CEST	443	49855	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:58.254508972 CEST	443	49855	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:58.254575014 CEST	49855	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:58.322711945 CEST	443	49856	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:58.393805027 CEST	49856	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:58.462390900 CEST	49856	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:58.462404013 CEST	443	49856	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:58.464040995 CEST	443	49856	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:58.464060068 CEST	443	49856	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:58.464103937 CEST	49856	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:58.479137897 CEST	49856	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:58.479212999 CEST	443	49856	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:58.479288101 CEST	49856	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:58.479294062 CEST	443	49856	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:58.479420900 CEST	49856	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:58.479495049 CEST	443	49856	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:58.479499102 CEST	49856	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:58.479552031 CEST	49856	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:58.480073929 CEST	49857	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:58.480119944 CEST	443	49857	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:58.480170965 CEST	49857	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:58.480652094 CEST	49855	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:58.480679989 CEST	443	49855	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:58.481637001 CEST	49857	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:58.481647015 CEST	443	49857	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:59.014431000 CEST	443	49857	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:59.025717020 CEST	49857	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:59.025733948 CEST	443	49857	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:59.026547909 CEST	443	49857	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:59.027482986 CEST	49857	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:59.027631044 CEST	443	49857	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:59.027730942 CEST	49857	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:59.036669970 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.036726952 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.036789894 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.037193060 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.037213087 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.037581921 CEST	49861	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.037619114 CEST	443	49861	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.037672997 CEST	49861	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.038455963 CEST	49861	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.038469076 CEST	443	49861	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.075407982 CEST	443	49857	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:59.132952929 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.132994890 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.133045912 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.133485079 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.133497953 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.298706055 CEST	443	49857	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:59.298990965 CEST	443	49857	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:59.299048901 CEST	49857	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:59.300522089 CEST	49857	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:59.300544024 CEST	443	49857	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:59.307579994 CEST	49863	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:59.307626963 CEST	443	49863	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:59.307687044 CEST	49863	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:59.308731079 CEST	49863	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:59.308746099 CEST	443	49863	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:59.311007023 CEST	49864	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:59.311059952 CEST	443	49864	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:59.311114073 CEST	49864	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:59.311544895 CEST	49864	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:59.311561108 CEST	443	49864	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:59.314718962 CEST	49865	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:59.314753056 CEST	443	49865	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:59.314842939 CEST	49865	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:59.315754890 CEST	49865	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:59.315774918 CEST	443	49865	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:59.321186066 CEST	49866	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:59.321233034 CEST	443	49866	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:59.321295977 CEST	49866	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:59.321748972 CEST	49866	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:59.321767092 CEST	443	49866	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:59.514394045 CEST	443	49861	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.515044928 CEST	49861	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.515069008 CEST	443	49861	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.515404940 CEST	443	49861	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.516625881 CEST	49861	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.516690969 CEST	443	49861	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.517173052 CEST	49861	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.529195070 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.529470921 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.529498100 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.530694008 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.531838894 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.532008886 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.532315969 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.563404083 CEST	443	49861	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.579402924 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.613322973 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.614999056 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.615020037 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.615336895 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.615637064 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.615701914 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.615792990 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.615827084 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.615864038 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.653620958 CEST	443	49861	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.653698921 CEST	443	49861	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.653989077 CEST	49861	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.658458948 CEST	49861	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.658485889 CEST	443	49861	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.700742006 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.700850964 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.700936079 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.700993061 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.701025963 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.701080084 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.701087952 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.701164961 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.701246977 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.701262951 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.701276064 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.701323032 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.701351881 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.705720901 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.705790997 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.705800056 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.705873966 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.705950022 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.705957890 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.785609007 CEST	443	49865	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:59.785891056 CEST	49865	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:59.785913944 CEST	443	49865	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:59.787241936 CEST	443	49865	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:59.787313938 CEST	49865	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:59.787776947 CEST	49865	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:59.787837982 CEST	443	49865	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:59.787890911 CEST	49865	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:59.787899971 CEST	443	49865	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:59.787945986 CEST	49865	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:59.788006067 CEST	49865	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:59.788275003 CEST	49867	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:59.788327932 CEST	443	49867	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:59.788388968 CEST	49867	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:59.788593054 CEST	49867	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:59.788605928 CEST	443	49867	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:59.790051937 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.790079117 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.790107965 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.790129900 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.790172100 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.790486097 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.790533066 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.790556908 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.790599108 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.790607929 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.790646076 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.790858030 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.790906906 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.790935040 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.790957928 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.790970087 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.790978909 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.791001081 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.791404963 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.791428089 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.791465998 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.791474104 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.791511059 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.791587114 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.791629076 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.791666985 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.791675091 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.791723013 CEST	443	49866	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:59.791950941 CEST	49866	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:59.792011023 CEST	443	49866	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:59.792361975 CEST	443	49866	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:59.792524099 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.792551041 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.792572975 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.792601109 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.792612076 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.792630911 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.793102026 CEST	49866	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:59.793198109 CEST	443	49866	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:59.793226957 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.793268919 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.793277025 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.793483973 CEST	49866	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:01:59.794588089 CEST	443	49864	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:59.794864893 CEST	49864	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:59.794878960 CEST	443	49864	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:59.795923948 CEST	443	49864	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:59.795986891 CEST	49864	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:59.796526909 CEST	49864	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:59.796545982 CEST	49864	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:59.796586990 CEST	443	49864	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:59.796731949 CEST	443	49864	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:59.796782017 CEST	49864	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:59.796827078 CEST	49864	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:59.796840906 CEST	443	49864	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:59.796859026 CEST	49864	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:59.796890020 CEST	49864	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:59.803400993 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.803459883 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.803491116 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.803520918 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.803529024 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.803540945 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.803581953 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.803591013 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.803673029 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.803678989 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.804117918 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.804151058 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.804161072 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.804169893 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.804205894 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.804300070 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.811511040 CEST	443	49863	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:59.811867952 CEST	49863	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:59.811897039 CEST	443	49863	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:59.812201977 CEST	49868	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:59.812273026 CEST	443	49868	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:59.812345982 CEST	49868	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:59.812542915 CEST	49868	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:59.812572002 CEST	443	49868	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:59.813338041 CEST	443	49863	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:59.813395023 CEST	49863	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:59.813822031 CEST	49863	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:59.813846111 CEST	49863	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:59.813903093 CEST	443	49863	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:59.813924074 CEST	49863	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:59.813942909 CEST	49863	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:59.814162970 CEST	49869	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:59.814203978 CEST	443	49869	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:59.814258099 CEST	49869	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:59.814682961 CEST	49869	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:01:59.814698935 CEST	443	49869	188.114.96.3	192.168.2.4
Sep 27, 2024 06:01:59.839399099 CEST	443	49866	188.114.97.3	192.168.2.4
Sep 27, 2024 06:01:59.881565094 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.881649971 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.881655931 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.881685019 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.881736994 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.881766081 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.882206917 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.882226944 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.882285118 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.882309914 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.882325888 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.882330894 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.882380009 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.882390976 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.882431984 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.882438898 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.882610083 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.882658958 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.882668018 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.882707119 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.882977009 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.883033991 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.883332968 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.883415937 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.883925915 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.883981943 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.884001970 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.884057045 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.884346008 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.884398937 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.885102034 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.885163069 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.885288954 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.885339975 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.885576963 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.885638952 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.885688066 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.885746956 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.886605024 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.886682987 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.892899990 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.892950058 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.892970085 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.892991066 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.893002033 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.893039942 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.893053055 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.893091917 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.893098116 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.893737078 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.893775940 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.893789053 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.893800020 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.893834114 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.893845081 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.893857956 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.893937111 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.893943071 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.894952059 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.894973993 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.895030022 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.895039082 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.895076036 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.895708084 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.896338940 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.896370888 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.896399975 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.896411896 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.896446943 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.896450996 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.896459103 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.896497965 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.896505117 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.897444963 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.897485018 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.897516966 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.897526026 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.897562027 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.900341988 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.972512007 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.972615004 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.972623110 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.972651958 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.972675085 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.972826958 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.972886086 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.973082066 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.973109961 CEST	443	49860	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.973124027 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.973160982 CEST	49860	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.981416941 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.981457949 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.981488943 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.981512070 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.981542110 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.981553078 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.981585979 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.981594086 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.981635094 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.981643915 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.981868982 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.981895924 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.981914043 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.981920958 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.981940985 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.981942892 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.981986046 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.981992960 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.982122898 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.982419014 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.982448101 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.982471943 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.982480049 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.982502937 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.982521057 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.982645035 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.982692957 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.982693911 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.982703924 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.982733011 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.982754946 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.982760906 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.982774973 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.983155012 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.983186960 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.983201981 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.983212948 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.983234882 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.983242989 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.983248949 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.983275890 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.983283997 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.983304024 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.983717918 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.983763933 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:01:59.983772039 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:01:59.983827114 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:00.068669081 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:00.068741083 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:00.068768024 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:00.068815947 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:00.069363117 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:00.069396973 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:00.069426060 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:00.069427013 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:00.069438934 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:00.069444895 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:00.069474936 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:00.069920063 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:00.069957972 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:00.069971085 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:00.069976091 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:00.069999933 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:00.070323944 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:00.070368052 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:00.070377111 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:00.070482969 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:00.070770979 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:00.070795059 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:00.070817947 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:00.070826054 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:00.070837021 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:00.070863962 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:00.070880890 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:00.070884943 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:00.070916891 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:00.070969105 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:00.071011066 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:00.071011066 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:00.071029902 CEST	443	49862	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:00.071100950 CEST	49862	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:00.137279034 CEST	49870	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:00.137322903 CEST	443	49870	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:00.139015913 CEST	49870	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:00.139193058 CEST	49870	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:00.139203072 CEST	443	49870	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:00.140544891 CEST	443	49866	188.114.97.3	192.168.2.4
Sep 27, 2024 06:02:00.140645027 CEST	443	49866	188.114.97.3	192.168.2.4
Sep 27, 2024 06:02:00.140700102 CEST	49866	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:02:00.141258001 CEST	49866	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:02:00.141273975 CEST	443	49866	188.114.97.3	192.168.2.4
Sep 27, 2024 06:02:00.253038883 CEST	443	49867	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:00.253427982 CEST	49867	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:00.253458977 CEST	443	49867	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:00.255007982 CEST	443	49867	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:00.255078077 CEST	49867	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:00.255625010 CEST	49867	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:00.255702972 CEST	443	49867	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:00.255887032 CEST	49867	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:00.255894899 CEST	443	49867	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:00.280576944 CEST	443	49869	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:00.280905008 CEST	49869	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:00.280971050 CEST	443	49869	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:00.282526016 CEST	443	49869	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:00.282613993 CEST	49869	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:00.283490896 CEST	49869	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:00.283593893 CEST	443	49869	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:00.284435034 CEST	49869	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:00.284452915 CEST	443	49869	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:00.297239065 CEST	443	49868	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:00.297492981 CEST	49868	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:00.297521114 CEST	443	49868	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:00.298518896 CEST	443	49868	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:00.298605919 CEST	49868	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:00.299727917 CEST	49868	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:00.299802065 CEST	443	49868	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:00.300359964 CEST	49868	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:00.300374031 CEST	443	49868	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:00.379409075 CEST	49867	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:00.379645109 CEST	49869	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:00.511416912 CEST	443	49868	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:00.511485100 CEST	49868	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:00.565819025 CEST	443	49868	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:00.565938950 CEST	443	49868	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:00.566051006 CEST	49868	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:00.593789101 CEST	443	49870	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:00.617132902 CEST	49870	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:00.617156029 CEST	443	49870	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:00.617273092 CEST	49868	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:00.617320061 CEST	443	49868	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:00.617655993 CEST	443	49870	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:00.618921041 CEST	49870	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:00.618989944 CEST	443	49870	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:00.619281054 CEST	49870	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:00.646496058 CEST	443	49867	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:00.646614075 CEST	443	49867	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:00.646677017 CEST	49867	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:00.647840023 CEST	49867	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:00.647862911 CEST	443	49867	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:00.648211002 CEST	443	49869	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:00.648457050 CEST	443	49869	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:00.648828983 CEST	49869	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:00.649837017 CEST	49869	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:00.649854898 CEST	443	49869	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:00.663403988 CEST	443	49870	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:00.752681017 CEST	443	49870	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:00.752753019 CEST	443	49870	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:00.752887011 CEST	49870	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:00.871860027 CEST	49870	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:00.871902943 CEST	443	49870	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:00.978899956 CEST	49871	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:00.978956938 CEST	443	49871	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:00.979070902 CEST	49871	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:00.979238987 CEST	49871	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:00.979252100 CEST	443	49871	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:01.039928913 CEST	49872	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:01.039994001 CEST	443	49872	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:01.040060997 CEST	49872	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:01.040430069 CEST	49872	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:01.040443897 CEST	443	49872	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:01.042145014 CEST	49873	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:01.042253971 CEST	443	49873	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:01.042325974 CEST	49873	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:01.042618036 CEST	49873	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:01.042651892 CEST	443	49873	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:01.046086073 CEST	49874	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:02:01.046123028 CEST	443	49874	188.114.97.3	192.168.2.4
Sep 27, 2024 06:02:01.046360970 CEST	49874	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:02:01.046545982 CEST	49874	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:02:01.046556950 CEST	443	49874	188.114.97.3	192.168.2.4
Sep 27, 2024 06:02:01.047914982 CEST	49875	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:02:01.047945976 CEST	443	49875	188.114.97.3	192.168.2.4
Sep 27, 2024 06:02:01.048139095 CEST	49875	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:02:01.048412085 CEST	49875	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:02:01.048424959 CEST	443	49875	188.114.97.3	192.168.2.4
Sep 27, 2024 06:02:01.493465900 CEST	443	49871	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:01.501019001 CEST	49871	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:01.501038074 CEST	443	49871	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:01.501513958 CEST	443	49871	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:01.501827955 CEST	49871	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:01.501909018 CEST	443	49871	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:01.501976967 CEST	49871	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:01.543411970 CEST	443	49871	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:01.543473005 CEST	443	49872	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:01.543741941 CEST	49872	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:01.543780088 CEST	443	49872	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:01.544826984 CEST	443	49872	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:01.544891119 CEST	49872	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:01.545348883 CEST	49872	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:01.545397043 CEST	49872	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:01.545403004 CEST	443	49872	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:01.545485973 CEST	49872	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:01.545502901 CEST	443	49872	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:01.545542002 CEST	49872	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:01.545561075 CEST	49872	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:01.545835018 CEST	49878	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:01.545878887 CEST	443	49878	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:01.545952082 CEST	49878	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:01.546153069 CEST	49878	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:01.546168089 CEST	443	49878	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:01.549736023 CEST	443	49873	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:01.549941063 CEST	49873	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:01.549976110 CEST	443	49873	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:01.551032066 CEST	443	49873	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:01.551091909 CEST	49873	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:01.551389933 CEST	49873	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:01.551407099 CEST	49873	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:01.551434994 CEST	49873	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:01.551462889 CEST	443	49873	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:01.551584005 CEST	49873	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:01.551733971 CEST	49879	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:01.551768064 CEST	443	49879	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:01.551824093 CEST	49879	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:01.552014112 CEST	49879	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:01.552026987 CEST	443	49879	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:01.552310944 CEST	443	49874	188.114.97.3	192.168.2.4
Sep 27, 2024 06:02:01.552635908 CEST	49874	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:02:01.552644014 CEST	443	49874	188.114.97.3	192.168.2.4
Sep 27, 2024 06:02:01.552972078 CEST	443	49874	188.114.97.3	192.168.2.4
Sep 27, 2024 06:02:01.553272963 CEST	49874	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:02:01.553359985 CEST	443	49874	188.114.97.3	192.168.2.4
Sep 27, 2024 06:02:01.553395033 CEST	49874	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:02:01.563034058 CEST	443	49875	188.114.97.3	192.168.2.4
Sep 27, 2024 06:02:01.563267946 CEST	49875	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:02:01.563283920 CEST	443	49875	188.114.97.3	192.168.2.4
Sep 27, 2024 06:02:01.563640118 CEST	443	49875	188.114.97.3	192.168.2.4
Sep 27, 2024 06:02:01.563945055 CEST	49875	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:02:01.564003944 CEST	443	49875	188.114.97.3	192.168.2.4
Sep 27, 2024 06:02:01.564188957 CEST	49875	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:02:01.599414110 CEST	443	49874	188.114.97.3	192.168.2.4
Sep 27, 2024 06:02:01.611403942 CEST	443	49875	188.114.97.3	192.168.2.4
Sep 27, 2024 06:02:01.634573936 CEST	49871	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:01.674952984 CEST	443	49871	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:01.675153971 CEST	443	49871	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:01.675241947 CEST	49871	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:01.675262928 CEST	443	49871	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:01.675322056 CEST	443	49871	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:01.675368071 CEST	49871	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:01.675955057 CEST	49871	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:01.675978899 CEST	443	49871	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:01.705642939 CEST	49874	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:02:01.935924053 CEST	443	49874	188.114.97.3	192.168.2.4
Sep 27, 2024 06:02:01.936002016 CEST	443	49874	188.114.97.3	192.168.2.4
Sep 27, 2024 06:02:01.936265945 CEST	49874	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:02:01.936772108 CEST	49874	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:02:01.936800003 CEST	443	49874	188.114.97.3	192.168.2.4
Sep 27, 2024 06:02:01.939678907 CEST	443	49875	188.114.97.3	192.168.2.4
Sep 27, 2024 06:02:01.939754009 CEST	443	49875	188.114.97.3	192.168.2.4
Sep 27, 2024 06:02:01.940010071 CEST	49875	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:02:01.941788912 CEST	49875	443	192.168.2.4	188.114.97.3
Sep 27, 2024 06:02:01.941807985 CEST	443	49875	188.114.97.3	192.168.2.4
Sep 27, 2024 06:02:02.035542011 CEST	443	49878	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:02.036108971 CEST	49878	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:02.036128044 CEST	443	49878	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:02.037168026 CEST	443	49878	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:02.037267923 CEST	49878	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:02.038249969 CEST	49878	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:02.038320065 CEST	443	49878	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:02.038506031 CEST	49878	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:02.038515091 CEST	443	49878	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:02.116826057 CEST	443	49879	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:02.229279995 CEST	49878	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:02.232261896 CEST	49879	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:02.232280016 CEST	443	49879	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:02.233462095 CEST	443	49879	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:02.233479023 CEST	443	49879	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:02.233597040 CEST	49879	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:02.234922886 CEST	49879	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:02.235021114 CEST	443	49879	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:02.235158920 CEST	49879	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:02.235167980 CEST	443	49879	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:02.301604986 CEST	49879	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:02.406088114 CEST	443	49878	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:02.406810045 CEST	443	49878	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:02.407118082 CEST	49878	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:02.614063978 CEST	443	49879	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:02.614180088 CEST	443	49879	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:02.614239931 CEST	49879	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:02.615463972 CEST	49879	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:02.615489006 CEST	443	49879	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:02.632426977 CEST	49878	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:02.632453918 CEST	443	49878	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:03.880354881 CEST	49882	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:03.880408049 CEST	443	49882	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:03.880482912 CEST	49882	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:03.880748987 CEST	49882	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:03.880759954 CEST	443	49882	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:04.077528000 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:04.077574968 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:04.077631950 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:04.078140974 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:04.078160048 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:04.379829884 CEST	49887	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:04.379880905 CEST	443	49887	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:04.379940033 CEST	49887	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:04.419090986 CEST	49887	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:04.419123888 CEST	443	49887	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:04.472129107 CEST	443	49882	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:04.475224018 CEST	49882	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:04.475251913 CEST	443	49882	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:04.476699114 CEST	443	49882	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:04.476778030 CEST	49882	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:04.477312088 CEST	49882	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:04.477327108 CEST	49882	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:04.477389097 CEST	443	49882	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:04.477524996 CEST	49882	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:04.477543116 CEST	443	49882	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:04.477600098 CEST	443	49882	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:04.477612019 CEST	49882	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:04.477639914 CEST	49882	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:04.478307009 CEST	49888	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:04.478342056 CEST	443	49888	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:04.478483915 CEST	49888	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:04.478930950 CEST	49888	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:04.478940010 CEST	443	49888	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:04.696239948 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:04.696909904 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:04.696937084 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:04.697320938 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:04.698270082 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:04.698364973 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:04.698470116 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:04.743413925 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:04.845649958 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:04.845726967 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:04.845752954 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:04.845777035 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:04.845801115 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:04.845830917 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:04.845844984 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:04.846354008 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:04.846415997 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:04.846422911 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:04.846613884 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:04.846656084 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:04.846663952 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:04.846744061 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:04.846808910 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:04.846815109 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:04.850402117 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:04.850475073 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:04.850485086 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:04.933964968 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:04.934010029 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:04.934020042 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:04.934046030 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:04.934086084 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:04.934154034 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:04.934474945 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:04.934497118 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:04.934521914 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:04.934530973 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:04.934772015 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:04.934787035 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:04.934884071 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:04.934921980 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:04.934930086 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:04.935172081 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:04.935270071 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:04.935276031 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:04.935554981 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:04.935581923 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:04.935597897 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:04.935604095 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:04.935637951 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:04.935796976 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:04.935863018 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:04.935888052 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:04.935925961 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:04.935935020 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:04.936094999 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:04.936463118 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:04.936568022 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:04.936624050 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:04.936630011 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:04.936856985 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:04.936896086 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:04.936909914 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:04.953640938 CEST	443	49887	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:04.957372904 CEST	443	49888	188.114.96.3	192.168.2.4
Sep 27, 2024 06:02:04.984435081 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:05.022444963 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:05.022527933 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:05.022558928 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:05.022574902 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:05.022592068 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:05.022660017 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:05.022783995 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:05.023148060 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:05.023200035 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:05.023206949 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:05.023260117 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:05.023478031 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:05.023531914 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:05.023539066 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:05.023808002 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:05.023914099 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:05.023957968 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:05.023963928 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:05.023974895 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:05.024003983 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:05.024697065 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:05.024748087 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:05.024971008 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:05.025012970 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:05.025489092 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:05.025544882 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:05.025686979 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:05.025732994 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:05.026349068 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:05.026393890 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:05.026398897 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:05.026407003 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:05.026432037 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:05.026447058 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:05.026918888 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:05.026977062 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:05.027296066 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:05.027339935 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:05.027512074 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:05.027568102 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:05.094209909 CEST	49887	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:05.094209909 CEST	49888	443	192.168.2.4	188.114.96.3
Sep 27, 2024 06:02:05.110810041 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:05.110868931 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:05.111112118 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:05.111125946 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:05.111185074 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:05.111371040 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:05.111423016 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:05.111816883 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:05.111871958 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:05.111999989 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:05.112034082 CEST	443	49884	104.18.95.41	192.168.2.4
Sep 27, 2024 06:02:05.112039089 CEST	49884	443	192.168.2.4	104.18.95.41
Sep 27, 2024 06:02:05.112051964 CEST	443	49884	104.18.95.41	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 27, 2024 06:01:37.558753014 CEST	192.168.2.4	1.1.1.1	0xccb3	Standard query (0)	datechf.cc	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:37.558893919 CEST	192.168.2.4	1.1.1.1	0xdfb8	Standard query (0)	datechf.cc	65	IN (0x0001)	false
Sep 27, 2024 06:01:37.587112904 CEST	192.168.2.4	1.1.1.1	0xc73c	Standard query (0)	datechf.cc	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:37.587244034 CEST	192.168.2.4	1.1.1.1	0x44a0	Standard query (0)	datechf.cc	65	IN (0x0001)	false
Sep 27, 2024 06:01:40.178864002 CEST	192.168.2.4	1.1.1.1	0xb78	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:40.179195881 CEST	192.168.2.4	1.1.1.1	0x5f0a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 27, 2024 06:01:40.662489891 CEST	192.168.2.4	1.1.1.1	0x4c85	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:40.662698984 CEST	192.168.2.4	1.1.1.1	0x1721	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 27, 2024 06:01:40.663572073 CEST	192.168.2.4	1.1.1.1	0x4b0	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:40.665693045 CEST	192.168.2.4	1.1.1.1	0x206a	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 27, 2024 06:01:40.667551994 CEST	192.168.2.4	1.1.1.1	0xbe0f	Standard query (0)	translate.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:40.667836905 CEST	192.168.2.4	1.1.1.1	0x46aa	Standard query (0)	translate.google.com	65	IN (0x0001)	false
Sep 27, 2024 06:01:41.832161903 CEST	192.168.2.4	1.1.1.1	0xca51	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:41.832726955 CEST	192.168.2.4	1.1.1.1	0x374d	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 27, 2024 06:01:41.856054068 CEST	192.168.2.4	1.1.1.1	0xe5c3	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:41.856848955 CEST	192.168.2.4	1.1.1.1	0xd13a	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 27, 2024 06:01:42.730635881 CEST	192.168.2.4	1.1.1.1	0x3ed6	Standard query (0)	www.smartsuppchat.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:42.731200933 CEST	192.168.2.4	1.1.1.1	0xa5a7	Standard query (0)	www.smartsuppchat.com	65	IN (0x0001)	false
Sep 27, 2024 06:01:43.679255962 CEST	192.168.2.4	1.1.1.1	0x8845	Standard query (0)	translate.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:43.681205988 CEST	192.168.2.4	1.1.1.1	0xf6ef	Standard query (0)	translate.google.com	65	IN (0x0001)	false
Sep 27, 2024 06:01:43.733359098 CEST	192.168.2.4	1.1.1.1	0xdd9d	Standard query (0)	datechf.cc	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:43.733742952 CEST	192.168.2.4	1.1.1.1	0xae58	Standard query (0)	datechf.cc	65	IN (0x0001)	false
Sep 27, 2024 06:01:44.009157896 CEST	192.168.2.4	1.1.1.1	0x3dbe	Standard query (0)	bootstrap.smartsuppchat.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:44.009622097 CEST	192.168.2.4	1.1.1.1	0x3a73	Standard query (0)	bootstrap.smartsuppchat.com	65	IN (0x0001)	false
Sep 27, 2024 06:01:44.013673067 CEST	192.168.2.4	1.1.1.1	0xf543	Standard query (0)	www.smartsuppchat.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:44.014087915 CEST	192.168.2.4	1.1.1.1	0xb1fa	Standard query (0)	www.smartsuppchat.com	65	IN (0x0001)	false
Sep 27, 2024 06:01:45.420494080 CEST	192.168.2.4	1.1.1.1	0xf521	Standard query (0)	www.twint.ch	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:45.420640945 CEST	192.168.2.4	1.1.1.1	0xa70e	Standard query (0)	www.twint.ch	65	IN (0x0001)	false
Sep 27, 2024 06:01:45.554321051 CEST	192.168.2.4	1.1.1.1	0x3370	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:45.554460049 CEST	192.168.2.4	1.1.1.1	0xe071	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 27, 2024 06:01:46.797089100 CEST	192.168.2.4	1.1.1.1	0xa8fa	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:46.797228098 CEST	192.168.2.4	1.1.1.1	0x7dd1	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 27, 2024 06:01:47.957952976 CEST	192.168.2.4	1.1.1.1	0x213d	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:47.958161116 CEST	192.168.2.4	1.1.1.1	0xaec7	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Sep 27, 2024 06:01:51.375633955 CEST	192.168.2.4	1.1.1.1	0xe01f	Standard query (0)	www.twint.ch	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:51.375926018 CEST	192.168.2.4	1.1.1.1	0x10ca	Standard query (0)	www.twint.ch	65	IN (0x0001)	false
Sep 27, 2024 06:01:54.701986074 CEST	192.168.2.4	1.1.1.1	0x3771	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:54.706283092 CEST	192.168.2.4	1.1.1.1	0x95da	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Sep 27, 2024 06:01:55.988498926 CEST	192.168.2.4	1.1.1.1	0xa599	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:55.992002964 CEST	192.168.2.4	1.1.1.1	0xebe4	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Sep 27, 2024 06:01:56.139966011 CEST	192.168.2.4	1.1.1.1	0xee05	Standard query (0)	www.twint.ch	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:56.140446901 CEST	192.168.2.4	1.1.1.1	0xe0ce	Standard query (0)	www.twint.ch	65	IN (0x0001)	false
Sep 27, 2024 06:01:56.168740034 CEST	192.168.2.4	1.1.1.1	0x60ad	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:56.169070005 CEST	192.168.2.4	1.1.1.1	0x565b	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Sep 27, 2024 06:02:11.597963095 CEST	192.168.2.4	1.1.1.1	0x93b9	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:11.598179102 CEST	192.168.2.4	1.1.1.1	0xd973	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
Sep 27, 2024 06:02:12.398539066 CEST	192.168.2.4	1.1.1.1	0x8d1	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:12.398823023 CEST	192.168.2.4	1.1.1.1	0x3899	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
Sep 27, 2024 06:02:13.043312073 CEST	192.168.2.4	1.1.1.1	0x3622	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:13.043530941 CEST	192.168.2.4	1.1.1.1	0x3a09	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Sep 27, 2024 06:02:13.874061108 CEST	192.168.2.4	1.1.1.1	0xe0d1	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:13.874176979 CEST	192.168.2.4	1.1.1.1	0x85c3	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Sep 27, 2024 06:02:16.617633104 CEST	192.168.2.4	1.1.1.1	0xbbe9	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:16.618141890 CEST	192.168.2.4	1.1.1.1	0x73d4	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Sep 27, 2024 06:02:16.622790098 CEST	192.168.2.4	1.1.1.1	0xd9b	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:16.623013020 CEST	192.168.2.4	1.1.1.1	0xdfac	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Sep 27, 2024 06:02:16.786134958 CEST	192.168.2.4	1.1.1.1	0x828d	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:16.786427021 CEST	192.168.2.4	1.1.1.1	0xccb5	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Sep 27, 2024 06:02:17.283444881 CEST	192.168.2.4	1.1.1.1	0x5472	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:17.283633947 CEST	192.168.2.4	1.1.1.1	0x1f87	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Sep 27, 2024 06:02:18.085779905 CEST	192.168.2.4	1.1.1.1	0xcab0	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:18.086015940 CEST	192.168.2.4	1.1.1.1	0x99ae	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Sep 27, 2024 06:02:18.300272942 CEST	192.168.2.4	1.1.1.1	0x6376	Standard query (0)	9818618.fls.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:18.300795078 CEST	192.168.2.4	1.1.1.1	0xa738	Standard query (0)	9818618.fls.doubleclick.net	65	IN (0x0001)	false
Sep 27, 2024 06:02:18.303558111 CEST	192.168.2.4	1.1.1.1	0xe8d4	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:18.304001093 CEST	192.168.2.4	1.1.1.1	0x9889	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Sep 27, 2024 06:02:18.371479034 CEST	192.168.2.4	1.1.1.1	0x333e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:18.371902943 CEST	192.168.2.4	1.1.1.1	0xa125	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 27, 2024 06:02:20.466738939 CEST	192.168.2.4	1.1.1.1	0x1920	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:20.467003107 CEST	192.168.2.4	1.1.1.1	0xa1c4	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Sep 27, 2024 06:02:20.680522919 CEST	192.168.2.4	1.1.1.1	0x85f	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:20.680860043 CEST	192.168.2.4	1.1.1.1	0x39dd	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Sep 27, 2024 06:02:20.719625950 CEST	192.168.2.4	1.1.1.1	0xe7fa	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:20.720226049 CEST	192.168.2.4	1.1.1.1	0x50fb	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Sep 27, 2024 06:02:21.820002079 CEST	192.168.2.4	1.1.1.1	0x344	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:21.820187092 CEST	192.168.2.4	1.1.1.1	0xe2f	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Sep 27, 2024 06:02:21.821923018 CEST	192.168.2.4	1.1.1.1	0x6d2	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:21.822228909 CEST	192.168.2.4	1.1.1.1	0x21c0	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Sep 27, 2024 06:02:24.829803944 CEST	192.168.2.4	1.1.1.1	0x3aa9	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:24.830224991 CEST	192.168.2.4	1.1.1.1	0x1c71	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Sep 27, 2024 06:02:24.836117029 CEST	192.168.2.4	1.1.1.1	0x5253	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:24.836417913 CEST	192.168.2.4	1.1.1.1	0xbae6	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Sep 27, 2024 06:02:24.838695049 CEST	192.168.2.4	1.1.1.1	0x5bd6	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:24.839051962 CEST	192.168.2.4	1.1.1.1	0x9bf4	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Sep 27, 2024 06:02:26.015811920 CEST	192.168.2.4	1.1.1.1	0x622a	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:26.015811920 CEST	192.168.2.4	1.1.1.1	0xa0a1	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Sep 27, 2024 06:02:26.020327091 CEST	192.168.2.4	1.1.1.1	0xa02d	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Sep 27, 2024 06:02:26.020327091 CEST	192.168.2.4	1.1.1.1	0x3e87	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:30.495156050 CEST	192.168.2.4	1.1.1.1	0x910f	Standard query (0)	www.youtube-nocookie.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:30.495353937 CEST	192.168.2.4	1.1.1.1	0x3efa	Standard query (0)	www.youtube-nocookie.com	65	IN (0x0001)	false
Sep 27, 2024 06:02:34.382159948 CEST	192.168.2.4	1.1.1.1	0x8a91	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:34.382159948 CEST	192.168.2.4	1.1.1.1	0xd385	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Sep 27, 2024 06:02:40.742404938 CEST	192.168.2.4	1.1.1.1	0x8b1f	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:40.742646933 CEST	192.168.2.4	1.1.1.1	0xe3ca	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Sep 27, 2024 06:02:40.928200960 CEST	192.168.2.4	1.1.1.1	0x2645	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:40.928580046 CEST	192.168.2.4	1.1.1.1	0x21b3	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Sep 27, 2024 06:02:43.668796062 CEST	192.168.2.4	1.1.1.1	0xeb9b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:43.668958902 CEST	192.168.2.4	1.1.1.1	0x6538	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 27, 2024 06:02:44.922363043 CEST	192.168.2.4	1.1.1.1	0xdb02	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:44.922499895 CEST	192.168.2.4	1.1.1.1	0x4194	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Sep 27, 2024 06:02:46.750811100 CEST	192.168.2.4	1.1.1.1	0x3337	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:46.751024008 CEST	192.168.2.4	1.1.1.1	0x8a4c	Standard query (0)	play.google.com	65	IN (0x0001)	false
Sep 27, 2024 06:02:47.147730112 CEST	192.168.2.4	1.1.1.1	0x68fa	Standard query (0)	www.youtube-nocookie.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:47.147918940 CEST	192.168.2.4	1.1.1.1	0x2239	Standard query (0)	www.youtube-nocookie.com	65	IN (0x0001)	false
Sep 27, 2024 06:02:47.169487953 CEST	192.168.2.4	1.1.1.1	0x8b4b	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:47.170591116 CEST	192.168.2.4	1.1.1.1	0xd11c	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Sep 27, 2024 06:02:47.958619118 CEST	192.168.2.4	1.1.1.1	0x5980	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:47.958889961 CEST	192.168.2.4	1.1.1.1	0xfa17	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Sep 27, 2024 06:02:49.055490971 CEST	192.168.2.4	1.1.1.1	0xd1ca	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:49.055857897 CEST	192.168.2.4	1.1.1.1	0xc552	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Sep 27, 2024 06:02:49.203758001 CEST	192.168.2.4	1.1.1.1	0xc256	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:49.204577923 CEST	192.168.2.4	1.1.1.1	0x876d	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Sep 27, 2024 06:02:51.055088997 CEST	192.168.2.4	1.1.1.1	0xaa07	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:51.055511951 CEST	192.168.2.4	1.1.1.1	0x5ecf	Standard query (0)	play.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 27, 2024 06:01:37.570250034 CEST	1.1.1.1	192.168.2.4	0xccb3	No error (0)	datechf.cc		188.114.96.3	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:37.570250034 CEST	1.1.1.1	192.168.2.4	0xccb3	No error (0)	datechf.cc		188.114.97.3	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:37.573360920 CEST	1.1.1.1	192.168.2.4	0xdfb8	No error (0)	datechf.cc			65	IN (0x0001)	false
Sep 27, 2024 06:01:37.607494116 CEST	1.1.1.1	192.168.2.4	0x44a0	No error (0)	datechf.cc			65	IN (0x0001)	false
Sep 27, 2024 06:01:37.607624054 CEST	1.1.1.1	192.168.2.4	0xc73c	No error (0)	datechf.cc		188.114.96.3	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:37.607624054 CEST	1.1.1.1	192.168.2.4	0xc73c	No error (0)	datechf.cc		188.114.97.3	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:40.187072039 CEST	1.1.1.1	192.168.2.4	0xb78	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:40.187947035 CEST	1.1.1.1	192.168.2.4	0x5f0a	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 27, 2024 06:01:40.669174910 CEST	1.1.1.1	192.168.2.4	0x4c85	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:40.669174910 CEST	1.1.1.1	192.168.2.4	0x4c85	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:40.669174910 CEST	1.1.1.1	192.168.2.4	0x4c85	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:40.669174910 CEST	1.1.1.1	192.168.2.4	0x4c85	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:40.670146942 CEST	1.1.1.1	192.168.2.4	0x4b0	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:40.670146942 CEST	1.1.1.1	192.168.2.4	0x4b0	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:40.672312021 CEST	1.1.1.1	192.168.2.4	0x206a	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Sep 27, 2024 06:01:40.674280882 CEST	1.1.1.1	192.168.2.4	0xbe0f	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:01:40.674280882 CEST	1.1.1.1	192.168.2.4	0xbe0f	No error (0)	www3.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:40.675272942 CEST	1.1.1.1	192.168.2.4	0x46aa	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:01:41.740230083 CEST	1.1.1.1	192.168.2.4	0x63a3	No error (0)	bat-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:01:41.740230083 CEST	1.1.1.1	192.168.2.4	0x63a3	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:41.740230083 CEST	1.1.1.1	192.168.2.4	0x63a3	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:41.838713884 CEST	1.1.1.1	192.168.2.4	0xca51	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:41.838713884 CEST	1.1.1.1	192.168.2.4	0xca51	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:41.839184999 CEST	1.1.1.1	192.168.2.4	0x374d	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Sep 27, 2024 06:01:41.862921953 CEST	1.1.1.1	192.168.2.4	0xe5c3	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:41.862921953 CEST	1.1.1.1	192.168.2.4	0xe5c3	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:41.862921953 CEST	1.1.1.1	192.168.2.4	0xe5c3	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:41.862921953 CEST	1.1.1.1	192.168.2.4	0xe5c3	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:42.739061117 CEST	1.1.1.1	192.168.2.4	0x3ed6	No error (0)	www.smartsuppchat.com	1161431244.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:01:42.739061117 CEST	1.1.1.1	192.168.2.4	0x3ed6	No error (0)	1161431244.rsc.cdn77.org		212.102.56.179	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:42.739061117 CEST	1.1.1.1	192.168.2.4	0x3ed6	No error (0)	1161431244.rsc.cdn77.org		195.181.170.19	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:42.739061117 CEST	1.1.1.1	192.168.2.4	0x3ed6	No error (0)	1161431244.rsc.cdn77.org		195.181.175.41	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:42.739061117 CEST	1.1.1.1	192.168.2.4	0x3ed6	No error (0)	1161431244.rsc.cdn77.org		169.150.255.183	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:42.739061117 CEST	1.1.1.1	192.168.2.4	0x3ed6	No error (0)	1161431244.rsc.cdn77.org		207.211.211.26	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:42.739061117 CEST	1.1.1.1	192.168.2.4	0x3ed6	No error (0)	1161431244.rsc.cdn77.org		37.19.194.80	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:42.739061117 CEST	1.1.1.1	192.168.2.4	0x3ed6	No error (0)	1161431244.rsc.cdn77.org		169.150.255.180	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:42.750298977 CEST	1.1.1.1	192.168.2.4	0xa5a7	No error (0)	www.smartsuppchat.com	1161431244.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:01:43.685900927 CEST	1.1.1.1	192.168.2.4	0x8845	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:01:43.685900927 CEST	1.1.1.1	192.168.2.4	0x8845	No error (0)	www3.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:43.688986063 CEST	1.1.1.1	192.168.2.4	0xf6ef	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:01:43.745253086 CEST	1.1.1.1	192.168.2.4	0xdd9d	No error (0)	datechf.cc		188.114.97.3	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:43.745253086 CEST	1.1.1.1	192.168.2.4	0xdd9d	No error (0)	datechf.cc		188.114.96.3	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:43.753890991 CEST	1.1.1.1	192.168.2.4	0xae58	No error (0)	datechf.cc			65	IN (0x0001)	false
Sep 27, 2024 06:01:44.021202087 CEST	1.1.1.1	192.168.2.4	0xb1fa	No error (0)	www.smartsuppchat.com	1161431244.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:01:44.022161007 CEST	1.1.1.1	192.168.2.4	0xf543	No error (0)	www.smartsuppchat.com	1161431244.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:01:44.022161007 CEST	1.1.1.1	192.168.2.4	0xf543	No error (0)	1161431244.rsc.cdn77.org		195.181.170.18	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:44.022161007 CEST	1.1.1.1	192.168.2.4	0xf543	No error (0)	1161431244.rsc.cdn77.org		37.19.194.81	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:44.022161007 CEST	1.1.1.1	192.168.2.4	0xf543	No error (0)	1161431244.rsc.cdn77.org		169.150.255.180	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:44.022161007 CEST	1.1.1.1	192.168.2.4	0xf543	No error (0)	1161431244.rsc.cdn77.org		169.150.255.183	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:44.022161007 CEST	1.1.1.1	192.168.2.4	0xf543	No error (0)	1161431244.rsc.cdn77.org		207.211.211.26	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:44.022161007 CEST	1.1.1.1	192.168.2.4	0xf543	No error (0)	1161431244.rsc.cdn77.org		212.102.56.179	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:44.022161007 CEST	1.1.1.1	192.168.2.4	0xf543	No error (0)	1161431244.rsc.cdn77.org		195.181.175.40	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:44.026632071 CEST	1.1.1.1	192.168.2.4	0x3dbe	No error (0)	bootstrap.smartsuppchat.com		18.158.199.82	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:44.026632071 CEST	1.1.1.1	192.168.2.4	0x3dbe	No error (0)	bootstrap.smartsuppchat.com		52.58.243.136	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:44.026632071 CEST	1.1.1.1	192.168.2.4	0x3dbe	No error (0)	bootstrap.smartsuppchat.com		18.194.181.105	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:45.450747013 CEST	1.1.1.1	192.168.2.4	0xa70e	No error (0)	www.twint.ch	www.twint.ch.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:01:45.462738991 CEST	1.1.1.1	192.168.2.4	0xf521	No error (0)	www.twint.ch	www.twint.ch.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:01:45.561176062 CEST	1.1.1.1	192.168.2.4	0x3370	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:45.561444044 CEST	1.1.1.1	192.168.2.4	0xe071	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 27, 2024 06:01:46.803638935 CEST	1.1.1.1	192.168.2.4	0x7dd1	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 27, 2024 06:01:46.803666115 CEST	1.1.1.1	192.168.2.4	0xa8fa	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:47.966296911 CEST	1.1.1.1	192.168.2.4	0x213d	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:51.421948910 CEST	1.1.1.1	192.168.2.4	0x10ca	No error (0)	www.twint.ch	www.twint.ch.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:01:51.423260927 CEST	1.1.1.1	192.168.2.4	0xe01f	No error (0)	www.twint.ch	www.twint.ch.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:01:51.899123907 CEST	1.1.1.1	192.168.2.4	0xe994	No error (0)	edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:01:51.899123907 CEST	1.1.1.1	192.168.2.4	0xe994	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.34	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:51.899123907 CEST	1.1.1.1	192.168.2.4	0xe994	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.18	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:54.164192915 CEST	1.1.1.1	192.168.2.4	0xb0d3	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:01:54.164192915 CEST	1.1.1.1	192.168.2.4	0xb0d3	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:54.720920086 CEST	1.1.1.1	192.168.2.4	0x3771	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:54.720920086 CEST	1.1.1.1	192.168.2.4	0x3771	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:54.728198051 CEST	1.1.1.1	192.168.2.4	0x95da	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Sep 27, 2024 06:01:55.997230053 CEST	1.1.1.1	192.168.2.4	0xa599	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:55.997230053 CEST	1.1.1.1	192.168.2.4	0xa599	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:56.000298023 CEST	1.1.1.1	192.168.2.4	0xebe4	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Sep 27, 2024 06:01:56.174588919 CEST	1.1.1.1	192.168.2.4	0xee05	No error (0)	www.twint.ch	www.twint.ch.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:01:56.212318897 CEST	1.1.1.1	192.168.2.4	0x60ad	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:56.212318897 CEST	1.1.1.1	192.168.2.4	0x60ad	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:01:56.212809086 CEST	1.1.1.1	192.168.2.4	0x565b	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Sep 27, 2024 06:01:56.315166950 CEST	1.1.1.1	192.168.2.4	0xe0ce	No error (0)	www.twint.ch	www.twint.ch.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:06.515091896 CEST	1.1.1.1	192.168.2.4	0xc296	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:06.515091896 CEST	1.1.1.1	192.168.2.4	0xc296	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:11.604511976 CEST	1.1.1.1	192.168.2.4	0x93b9	No error (0)	cdn.cookielaw.org		104.18.86.42	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:11.604511976 CEST	1.1.1.1	192.168.2.4	0x93b9	No error (0)	cdn.cookielaw.org		104.18.87.42	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:11.605351925 CEST	1.1.1.1	192.168.2.4	0xd973	No error (0)	cdn.cookielaw.org			65	IN (0x0001)	false
Sep 27, 2024 06:02:12.405376911 CEST	1.1.1.1	192.168.2.4	0x3899	No error (0)	cdn.cookielaw.org			65	IN (0x0001)	false
Sep 27, 2024 06:02:12.405394077 CEST	1.1.1.1	192.168.2.4	0x8d1	No error (0)	cdn.cookielaw.org		104.18.86.42	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:12.405394077 CEST	1.1.1.1	192.168.2.4	0x8d1	No error (0)	cdn.cookielaw.org		104.18.87.42	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:13.049937010 CEST	1.1.1.1	192.168.2.4	0x3622	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:13.049937010 CEST	1.1.1.1	192.168.2.4	0x3622	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:13.050653934 CEST	1.1.1.1	192.168.2.4	0x3a09	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
Sep 27, 2024 06:02:13.880964041 CEST	1.1.1.1	192.168.2.4	0x85c3	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
Sep 27, 2024 06:02:13.880975962 CEST	1.1.1.1	192.168.2.4	0xe0d1	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:13.880975962 CEST	1.1.1.1	192.168.2.4	0xe0d1	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:16.624381065 CEST	1.1.1.1	192.168.2.4	0xbbe9	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:16.624381065 CEST	1.1.1.1	192.168.2.4	0xbbe9	No error (0)	scontent.xx.fbcdn.net		157.240.0.6	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:16.624821901 CEST	1.1.1.1	192.168.2.4	0x73d4	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:16.624821901 CEST	1.1.1.1	192.168.2.4	0x73d4	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Sep 27, 2024 06:02:16.624821901 CEST	1.1.1.1	192.168.2.4	0x73d4	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Sep 27, 2024 06:02:16.629709005 CEST	1.1.1.1	192.168.2.4	0xd9b	No error (0)	td.doubleclick.net		142.250.186.98	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:16.758536100 CEST	1.1.1.1	192.168.2.4	0x127a	No error (0)	bat-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:16.758536100 CEST	1.1.1.1	192.168.2.4	0x127a	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:16.758536100 CEST	1.1.1.1	192.168.2.4	0x127a	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:16.793741941 CEST	1.1.1.1	192.168.2.4	0xccb5	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:16.795216084 CEST	1.1.1.1	192.168.2.4	0x828d	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:17.290191889 CEST	1.1.1.1	192.168.2.4	0x1f87	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Sep 27, 2024 06:02:17.290319920 CEST	1.1.1.1	192.168.2.4	0x5472	No error (0)	googleads.g.doubleclick.net		142.250.186.34	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:18.092370987 CEST	1.1.1.1	192.168.2.4	0xcab0	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:18.092370987 CEST	1.1.1.1	192.168.2.4	0xcab0	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:18.093425989 CEST	1.1.1.1	192.168.2.4	0x99ae	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:18.093425989 CEST	1.1.1.1	192.168.2.4	0x99ae	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:18.311595917 CEST	1.1.1.1	192.168.2.4	0xe8d4	No error (0)	ad.doubleclick.net		142.250.186.134	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:18.312381983 CEST	1.1.1.1	192.168.2.4	0x9889	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Sep 27, 2024 06:02:18.312787056 CEST	1.1.1.1	192.168.2.4	0x6376	No error (0)	9818618.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:18.312787056 CEST	1.1.1.1	192.168.2.4	0x6376	No error (0)	dart.l.doubleclick.net		172.217.16.198	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:18.312874079 CEST	1.1.1.1	192.168.2.4	0xa738	No error (0)	9818618.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:18.378777981 CEST	1.1.1.1	192.168.2.4	0x333e	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:18.380767107 CEST	1.1.1.1	192.168.2.4	0xa125	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 27, 2024 06:02:20.473460913 CEST	1.1.1.1	192.168.2.4	0xa1c4	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:20.473913908 CEST	1.1.1.1	192.168.2.4	0x1920	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:20.473913908 CEST	1.1.1.1	192.168.2.4	0x1920	No error (0)	star-mini.c10r.facebook.com		157.240.0.35	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:20.687805891 CEST	1.1.1.1	192.168.2.4	0x85f	No error (0)	www.linkedin.com	cf-afd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:20.687805891 CEST	1.1.1.1	192.168.2.4	0x85f	No error (0)	cf-afd.www.linkedin.com	www.linkedin.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:20.687818050 CEST	1.1.1.1	192.168.2.4	0x39dd	No error (0)	www.linkedin.com	cf-afd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:20.687818050 CEST	1.1.1.1	192.168.2.4	0x39dd	No error (0)	cf-afd.www.linkedin.com	www.linkedin.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:20.726850033 CEST	1.1.1.1	192.168.2.4	0xe7fa	No error (0)	adservice.google.com		142.250.186.66	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:20.727093935 CEST	1.1.1.1	192.168.2.4	0x50fb	No error (0)	adservice.google.com			65	IN (0x0001)	false
Sep 27, 2024 06:02:21.825583935 CEST	1.1.1.1	192.168.2.4	0x33eb	No error (0)	bat-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:21.825583935 CEST	1.1.1.1	192.168.2.4	0x33eb	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:21.825583935 CEST	1.1.1.1	192.168.2.4	0x33eb	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:21.826886892 CEST	1.1.1.1	192.168.2.4	0xe2f	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:21.827105999 CEST	1.1.1.1	192.168.2.4	0x344	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:21.828615904 CEST	1.1.1.1	192.168.2.4	0x6d2	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:21.828615904 CEST	1.1.1.1	192.168.2.4	0x6d2	No error (0)	scontent.xx.fbcdn.net		157.240.252.13	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:21.828841925 CEST	1.1.1.1	192.168.2.4	0x21c0	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:21.828841925 CEST	1.1.1.1	192.168.2.4	0x21c0	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Sep 27, 2024 06:02:21.828841925 CEST	1.1.1.1	192.168.2.4	0x21c0	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Sep 27, 2024 06:02:24.836519003 CEST	1.1.1.1	192.168.2.4	0x3aa9	No error (0)	googleads.g.doubleclick.net		142.250.181.226	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:24.836718082 CEST	1.1.1.1	192.168.2.4	0x1c71	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Sep 27, 2024 06:02:24.844563007 CEST	1.1.1.1	192.168.2.4	0x5253	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:24.844563007 CEST	1.1.1.1	192.168.2.4	0x5253	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:24.844575882 CEST	1.1.1.1	192.168.2.4	0xbae6	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:24.844575882 CEST	1.1.1.1	192.168.2.4	0xbae6	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:24.845303059 CEST	1.1.1.1	192.168.2.4	0x5bd6	No error (0)	ad.doubleclick.net		172.217.18.6	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:24.845973969 CEST	1.1.1.1	192.168.2.4	0x9bf4	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Sep 27, 2024 06:02:26.022424936 CEST	1.1.1.1	192.168.2.4	0x622a	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:26.022424936 CEST	1.1.1.1	192.168.2.4	0x622a	No error (0)	star-mini.c10r.facebook.com		157.240.251.35	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:26.022730112 CEST	1.1.1.1	192.168.2.4	0xa0a1	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:26.026931047 CEST	1.1.1.1	192.168.2.4	0xa02d	No error (0)	adservice.google.com			65	IN (0x0001)	false
Sep 27, 2024 06:02:26.027182102 CEST	1.1.1.1	192.168.2.4	0x3e87	No error (0)	adservice.google.com		216.58.206.34	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:28.435111046 CEST	1.1.1.1	192.168.2.4	0xb0c8	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:28.435111046 CEST	1.1.1.1	192.168.2.4	0xb0c8	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:30.502021074 CEST	1.1.1.1	192.168.2.4	0x910f	No error (0)	www.youtube-nocookie.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:30.502021074 CEST	1.1.1.1	192.168.2.4	0x910f	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:30.502021074 CEST	1.1.1.1	192.168.2.4	0x910f	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:30.502021074 CEST	1.1.1.1	192.168.2.4	0x910f	No error (0)	youtube-ui.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:30.502021074 CEST	1.1.1.1	192.168.2.4	0x910f	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:30.502021074 CEST	1.1.1.1	192.168.2.4	0x910f	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:30.502021074 CEST	1.1.1.1	192.168.2.4	0x910f	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:30.502021074 CEST	1.1.1.1	192.168.2.4	0x910f	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:30.502021074 CEST	1.1.1.1	192.168.2.4	0x910f	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:30.502021074 CEST	1.1.1.1	192.168.2.4	0x910f	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:30.502021074 CEST	1.1.1.1	192.168.2.4	0x910f	No error (0)	youtube-ui.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:30.502021074 CEST	1.1.1.1	192.168.2.4	0x910f	No error (0)	youtube-ui.l.google.com		172.217.16.142	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:30.502021074 CEST	1.1.1.1	192.168.2.4	0x910f	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:30.502021074 CEST	1.1.1.1	192.168.2.4	0x910f	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:30.502021074 CEST	1.1.1.1	192.168.2.4	0x910f	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:30.502021074 CEST	1.1.1.1	192.168.2.4	0x910f	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:30.502021074 CEST	1.1.1.1	192.168.2.4	0x910f	No error (0)	youtube-ui.l.google.com		216.58.212.142	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:30.502126932 CEST	1.1.1.1	192.168.2.4	0x3efa	No error (0)	www.youtube-nocookie.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:30.502126932 CEST	1.1.1.1	192.168.2.4	0x3efa	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Sep 27, 2024 06:02:34.388776064 CEST	1.1.1.1	192.168.2.4	0x8a91	No error (0)	i.ytimg.com		172.217.16.214	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:34.388776064 CEST	1.1.1.1	192.168.2.4	0x8a91	No error (0)	i.ytimg.com		142.250.186.86	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:34.388776064 CEST	1.1.1.1	192.168.2.4	0x8a91	No error (0)	i.ytimg.com		142.250.186.150	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:34.388776064 CEST	1.1.1.1	192.168.2.4	0x8a91	No error (0)	i.ytimg.com		142.250.185.246	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:34.388776064 CEST	1.1.1.1	192.168.2.4	0x8a91	No error (0)	i.ytimg.com		142.250.186.182	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:34.388776064 CEST	1.1.1.1	192.168.2.4	0x8a91	No error (0)	i.ytimg.com		142.250.185.214	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:34.388776064 CEST	1.1.1.1	192.168.2.4	0x8a91	No error (0)	i.ytimg.com		142.250.184.246	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:34.388776064 CEST	1.1.1.1	192.168.2.4	0x8a91	No error (0)	i.ytimg.com		142.250.185.150	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:34.388776064 CEST	1.1.1.1	192.168.2.4	0x8a91	No error (0)	i.ytimg.com		142.250.185.86	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:34.388776064 CEST	1.1.1.1	192.168.2.4	0x8a91	No error (0)	i.ytimg.com		142.250.185.118	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:34.388776064 CEST	1.1.1.1	192.168.2.4	0x8a91	No error (0)	i.ytimg.com		142.250.181.246	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:34.388776064 CEST	1.1.1.1	192.168.2.4	0x8a91	No error (0)	i.ytimg.com		142.250.185.182	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:34.388776064 CEST	1.1.1.1	192.168.2.4	0x8a91	No error (0)	i.ytimg.com		142.250.184.214	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:34.388776064 CEST	1.1.1.1	192.168.2.4	0x8a91	No error (0)	i.ytimg.com		172.217.18.118	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:34.388776064 CEST	1.1.1.1	192.168.2.4	0x8a91	No error (0)	i.ytimg.com		216.58.212.150	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:34.388776064 CEST	1.1.1.1	192.168.2.4	0x8a91	No error (0)	i.ytimg.com		172.217.23.118	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:40.762234926 CEST	1.1.1.1	192.168.2.4	0xe3ca	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:40.762234926 CEST	1.1.1.1	192.168.2.4	0xe3ca	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Sep 27, 2024 06:02:40.762249947 CEST	1.1.1.1	192.168.2.4	0x8b1f	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:40.762249947 CEST	1.1.1.1	192.168.2.4	0x8b1f	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:40.762249947 CEST	1.1.1.1	192.168.2.4	0x8b1f	No error (0)	youtube-ui.l.google.com		172.217.16.142	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:40.762249947 CEST	1.1.1.1	192.168.2.4	0x8b1f	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:40.762249947 CEST	1.1.1.1	192.168.2.4	0x8b1f	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:40.762249947 CEST	1.1.1.1	192.168.2.4	0x8b1f	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:40.762249947 CEST	1.1.1.1	192.168.2.4	0x8b1f	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:40.762249947 CEST	1.1.1.1	192.168.2.4	0x8b1f	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:40.762249947 CEST	1.1.1.1	192.168.2.4	0x8b1f	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:40.762249947 CEST	1.1.1.1	192.168.2.4	0x8b1f	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:40.762249947 CEST	1.1.1.1	192.168.2.4	0x8b1f	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:40.762249947 CEST	1.1.1.1	192.168.2.4	0x8b1f	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:40.762249947 CEST	1.1.1.1	192.168.2.4	0x8b1f	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:40.762249947 CEST	1.1.1.1	192.168.2.4	0x8b1f	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:40.762249947 CEST	1.1.1.1	192.168.2.4	0x8b1f	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:40.762249947 CEST	1.1.1.1	192.168.2.4	0x8b1f	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:40.762249947 CEST	1.1.1.1	192.168.2.4	0x8b1f	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:40.939724922 CEST	1.1.1.1	192.168.2.4	0x2645	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:40.939724922 CEST	1.1.1.1	192.168.2.4	0x2645	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:40.939724922 CEST	1.1.1.1	192.168.2.4	0x2645	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:40.939724922 CEST	1.1.1.1	192.168.2.4	0x2645	No error (0)	youtube-ui.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:40.939724922 CEST	1.1.1.1	192.168.2.4	0x2645	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:40.939724922 CEST	1.1.1.1	192.168.2.4	0x2645	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:40.939724922 CEST	1.1.1.1	192.168.2.4	0x2645	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:40.939724922 CEST	1.1.1.1	192.168.2.4	0x2645	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:40.939724922 CEST	1.1.1.1	192.168.2.4	0x2645	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:40.939724922 CEST	1.1.1.1	192.168.2.4	0x2645	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:40.939724922 CEST	1.1.1.1	192.168.2.4	0x2645	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:40.939724922 CEST	1.1.1.1	192.168.2.4	0x2645	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:40.939724922 CEST	1.1.1.1	192.168.2.4	0x2645	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:40.939724922 CEST	1.1.1.1	192.168.2.4	0x2645	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:40.939724922 CEST	1.1.1.1	192.168.2.4	0x2645	No error (0)	youtube-ui.l.google.com		172.217.16.142	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:40.939724922 CEST	1.1.1.1	192.168.2.4	0x2645	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:40.939724922 CEST	1.1.1.1	192.168.2.4	0x2645	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:40.939971924 CEST	1.1.1.1	192.168.2.4	0x21b3	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:40.939971924 CEST	1.1.1.1	192.168.2.4	0x21b3	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Sep 27, 2024 06:02:43.675478935 CEST	1.1.1.1	192.168.2.4	0x6538	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 27, 2024 06:02:43.675729036 CEST	1.1.1.1	192.168.2.4	0xeb9b	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:44.929191113 CEST	1.1.1.1	192.168.2.4	0xdb02	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:44.929191113 CEST	1.1.1.1	192.168.2.4	0xdb02	No error (0)	photos-ugc.l.googleusercontent.com		142.250.184.193	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:44.929657936 CEST	1.1.1.1	192.168.2.4	0x4194	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:46.758263111 CEST	1.1.1.1	192.168.2.4	0x3337	No error (0)	play.google.com		172.217.16.142	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:47.154426098 CEST	1.1.1.1	192.168.2.4	0x68fa	No error (0)	www.youtube-nocookie.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:47.154426098 CEST	1.1.1.1	192.168.2.4	0x68fa	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:47.154426098 CEST	1.1.1.1	192.168.2.4	0x68fa	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:47.154426098 CEST	1.1.1.1	192.168.2.4	0x68fa	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:47.154426098 CEST	1.1.1.1	192.168.2.4	0x68fa	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:47.154426098 CEST	1.1.1.1	192.168.2.4	0x68fa	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:47.154426098 CEST	1.1.1.1	192.168.2.4	0x68fa	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:47.154426098 CEST	1.1.1.1	192.168.2.4	0x68fa	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:47.154426098 CEST	1.1.1.1	192.168.2.4	0x68fa	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:47.154426098 CEST	1.1.1.1	192.168.2.4	0x68fa	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:47.154426098 CEST	1.1.1.1	192.168.2.4	0x68fa	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:47.154426098 CEST	1.1.1.1	192.168.2.4	0x68fa	No error (0)	youtube-ui.l.google.com		172.217.16.142	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:47.154426098 CEST	1.1.1.1	192.168.2.4	0x68fa	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:47.154426098 CEST	1.1.1.1	192.168.2.4	0x68fa	No error (0)	youtube-ui.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:47.154426098 CEST	1.1.1.1	192.168.2.4	0x68fa	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:47.154426098 CEST	1.1.1.1	192.168.2.4	0x68fa	No error (0)	youtube-ui.l.google.com		216.58.212.142	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:47.154426098 CEST	1.1.1.1	192.168.2.4	0x68fa	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:47.154839993 CEST	1.1.1.1	192.168.2.4	0x2239	No error (0)	www.youtube-nocookie.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:47.154839993 CEST	1.1.1.1	192.168.2.4	0x2239	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Sep 27, 2024 06:02:47.176237106 CEST	1.1.1.1	192.168.2.4	0x8b4b	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:47.176237106 CEST	1.1.1.1	192.168.2.4	0x8b4b	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:47.176237106 CEST	1.1.1.1	192.168.2.4	0x8b4b	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:47.176237106 CEST	1.1.1.1	192.168.2.4	0x8b4b	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:47.176237106 CEST	1.1.1.1	192.168.2.4	0x8b4b	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:47.176237106 CEST	1.1.1.1	192.168.2.4	0x8b4b	No error (0)	youtube-ui.l.google.com		216.58.212.142	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:47.176237106 CEST	1.1.1.1	192.168.2.4	0x8b4b	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:47.176237106 CEST	1.1.1.1	192.168.2.4	0x8b4b	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:47.176237106 CEST	1.1.1.1	192.168.2.4	0x8b4b	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:47.176237106 CEST	1.1.1.1	192.168.2.4	0x8b4b	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:47.176237106 CEST	1.1.1.1	192.168.2.4	0x8b4b	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:47.176237106 CEST	1.1.1.1	192.168.2.4	0x8b4b	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:47.176237106 CEST	1.1.1.1	192.168.2.4	0x8b4b	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:47.176237106 CEST	1.1.1.1	192.168.2.4	0x8b4b	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:47.176237106 CEST	1.1.1.1	192.168.2.4	0x8b4b	No error (0)	youtube-ui.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:47.176237106 CEST	1.1.1.1	192.168.2.4	0x8b4b	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:47.176237106 CEST	1.1.1.1	192.168.2.4	0x8b4b	No error (0)	youtube-ui.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:47.177217960 CEST	1.1.1.1	192.168.2.4	0xd11c	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:47.177217960 CEST	1.1.1.1	192.168.2.4	0xd11c	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Sep 27, 2024 06:02:47.965579987 CEST	1.1.1.1	192.168.2.4	0x5980	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:49.062203884 CEST	1.1.1.1	192.168.2.4	0xd1ca	No error (0)	i.ytimg.com		172.217.23.118	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:49.062203884 CEST	1.1.1.1	192.168.2.4	0xd1ca	No error (0)	i.ytimg.com		172.217.18.22	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:49.062203884 CEST	1.1.1.1	192.168.2.4	0xd1ca	No error (0)	i.ytimg.com		142.250.184.214	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:49.062203884 CEST	1.1.1.1	192.168.2.4	0xd1ca	No error (0)	i.ytimg.com		142.250.186.54	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:49.062203884 CEST	1.1.1.1	192.168.2.4	0xd1ca	No error (0)	i.ytimg.com		142.250.185.246	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:49.062203884 CEST	1.1.1.1	192.168.2.4	0xd1ca	No error (0)	i.ytimg.com		142.250.186.86	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:49.062203884 CEST	1.1.1.1	192.168.2.4	0xd1ca	No error (0)	i.ytimg.com		172.217.16.150	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:49.062203884 CEST	1.1.1.1	192.168.2.4	0xd1ca	No error (0)	i.ytimg.com		142.250.186.118	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:49.062203884 CEST	1.1.1.1	192.168.2.4	0xd1ca	No error (0)	i.ytimg.com		142.250.186.150	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:49.062203884 CEST	1.1.1.1	192.168.2.4	0xd1ca	No error (0)	i.ytimg.com		142.250.181.246	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:49.062203884 CEST	1.1.1.1	192.168.2.4	0xd1ca	No error (0)	i.ytimg.com		172.217.16.214	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:49.062203884 CEST	1.1.1.1	192.168.2.4	0xd1ca	No error (0)	i.ytimg.com		216.58.212.150	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:49.062203884 CEST	1.1.1.1	192.168.2.4	0xd1ca	No error (0)	i.ytimg.com		142.250.184.246	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:49.062203884 CEST	1.1.1.1	192.168.2.4	0xd1ca	No error (0)	i.ytimg.com		216.58.206.86	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:49.062203884 CEST	1.1.1.1	192.168.2.4	0xd1ca	No error (0)	i.ytimg.com		142.250.186.182	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:49.062203884 CEST	1.1.1.1	192.168.2.4	0xd1ca	No error (0)	i.ytimg.com		216.58.206.54	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:49.210844994 CEST	1.1.1.1	192.168.2.4	0xc256	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:49.210844994 CEST	1.1.1.1	192.168.2.4	0xc256	No error (0)	photos-ugc.l.googleusercontent.com		142.250.185.65	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:49.211550951 CEST	1.1.1.1	192.168.2.4	0x876d	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:50.079921961 CEST	1.1.1.1	192.168.2.4	0x10d5	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:02:50.079921961 CEST	1.1.1.1	192.168.2.4	0x10d5	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:02:51.065452099 CEST	1.1.1.1	192.168.2.4	0xaa07	No error (0)	play.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49738	188.114.96.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:38 UTC	672	OUT	GET /de/receive/79469380 HTTP/1.1 Host: datechf.cc Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:01:39 UTC	828	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:01:39 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Express X-Robots-Tag: noindex, nofollow, noarchive Set-Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; Path=/; Expires=Sat, 28 Sep 2024 04:01:39 GMT; HttpOnly CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7fRa78C0wPQ%2FzEHOj63dkuqV0dBUJkFzAWOKERXV1oMVvOLrrU6JU0WFMrG6IsaXUhGj1aN%2B%2F%2Fyrdauiqf%2B9u%2FKAVAgXLfKHPI8G0x07DYQXmQsnpRBzfiCuTXEy"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8c9897f95be00cb4-EWR alt-svc: h3=":443"; ma=86400
2024-09-27 04:01:39 UTC	541	IN	Data Raw: 34 30 34 31 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 2d 43 48 22 20 63 6c 61 73 73 3d 22 20 6a 73 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 64 61 74 61 2d 73 61 76 65 70 61 67 65 2d 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 77 69 6e 74 2e 63 68 2f 66 61 76 69 63 6f 6e 2d 33 32 78 33 32 2e 70 6e 67 22 0a 20 20 20 20 20 20 20 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 43 41 41 41 41 41 67 43 41 4d 41 41 41 42 45 70 49 72 47 41 41 41 41 41 58 4e 53 52 30 49 41 72 73 34 63 36 51 41 41 41 74 42 51 54 46 52 46 41 41 41 41 Data Ascii: 4041<!doctype html><html lang="de-CH" class=" js"><head> <link rel="icon" data-savepage-href="https://www.twint.ch/favicon-32x32.png" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAMAAABEpIrGAAAAAXNSR0IArs4c6QAAAtBQTFRFAAAA
2024-09-27 04:01:39 UTC	1369	IN	Data Raw: 65 4b 2f 39 42 62 6f 74 37 79 7a 73 37 4f 6e 39 37 79 2f 37 69 34 7a 4d 7a 4d 2b 4c 69 36 2f 38 56 57 2f 38 34 6d 2f 38 77 71 2f 38 30 58 6a 39 76 79 2f 38 77 50 78 63 58 46 6b 64 54 73 2f 38 6b 41 2f 38 67 41 67 64 6a 79 2f 38 59 41 2f 38 51 49 2f 37 30 43 2f 37 30 41 2f 37 73 41 2f 36 31 47 74 72 61 32 2f 36 6f 7a 2f 37 45 41 2f 36 59 78 73 72 4b 79 2f 35 47 52 2f 36 6f 4c 59 73 37 74 2f 36 77 41 6d 37 58 56 2f 35 64 6b 73 4c 43 77 72 71 36 75 61 38 58 6d 2f 36 59 41 2f 34 75 4c 2f 35 46 67 2f 36 41 41 2f 35 51 37 2f 34 57 46 71 61 6d 70 2f 34 53 45 55 63 6a 72 71 4b 69 6f 70 36 65 6e 2f 35 6b 41 2f 35 51 5a 2f 33 39 2f 54 63 50 6f 63 72 50 5a 6f 36 4f 6a 63 62 4c 59 68 61 6e 4f 2f 33 6c 35 6f 61 47 68 2f 34 77 52 2f 34 34 41 6e 70 36 65 2f 34 63 41 6d Data Ascii: eK/9Bbot7yzs7On97y/7i4zMzM+Li6/8VW/84m/8wq/80Xj9vy/8wPxcXFkdTs/8kA/8gAgdjy/8YA/8QI/70C/70A/7sA/61Gtra2/6oz/7EA/6YxsrKy/5GR/6oLYs7t/6wAm7XV/5dksLCwrq6ua8Xm/6YA/4uL/5Fg/6AA/5Q7/4WFqamp/4SEUcjrqKiop6en/5kA/5QZ/39/TcPocrPZo6OjcbLYhanO/3l5oaGh/4wR/44Anp6e/4cAm
2024-09-27 04:01:39 UTC	1369	IN	Data Raw: 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 54 57 49 4e 54 3a 20 44 69 65 20 42 65 7a 61 68 6c 2d 41 70 70 20 64 65 72 20 53 63 68 77 65 69 7a 20 2d 20 42 65 7a 61 68 6c 65 6e 2c 20 47 65 6c 64 20 76 65 72 73 65 6e 64 65 6e 20 26 61 6d 70 3b 20 76 69 65 6c 65 73 20 6d 65 68 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 64 61 74 61 2d 73 61 76 65 70 61 67 65 2d 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 77 69 6e 74 2e Data Ascii: A-Compatible" content="IE=edge"> <title>TWINT: Die Bezahl-App der Schweiz - Bezahlen, Geld versenden & vieles mehr</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <style data-savepage-href="https://www.twint.
2024-09-27 04:01:39 UTC	1369	IN	Data Raw: 45 6c 58 79 75 7a 7a 48 73 53 67 77 66 35 39 37 45 45 7a 50 62 2b 75 4e 2f 54 42 46 66 50 46 75 68 47 77 4c 31 7a 4a 73 59 45 7a 31 6e 4b 4c 74 6f 52 4c 79 4a 55 43 55 53 66 36 6e 57 51 67 54 56 61 4b 77 46 32 62 4b 50 6e 4d 4f 61 4c 52 58 76 4a 54 41 47 6c 77 30 4d 4d 56 56 56 31 62 4c 46 45 56 63 38 38 65 58 35 2f 39 2f 76 2b 63 31 39 31 6e 6e 66 33 4c 4b 6f 6f 4e 6f 4a 6a 64 47 39 55 68 4b 65 78 5a 70 6f 5a 4a 42 4d 37 73 2f 7a 63 2f 74 7a 33 33 76 62 69 43 67 48 6a 49 30 59 67 38 47 6f 47 6a 46 61 52 35 55 66 45 4d 51 66 47 47 42 38 50 31 46 53 49 36 58 54 59 68 68 59 51 58 79 2f 4e 76 72 46 37 46 6c 46 62 66 35 7a 73 2f 49 54 4e 4a 67 48 53 48 2b 43 57 41 53 74 41 43 32 70 51 45 33 66 62 4b 68 52 61 73 71 59 70 69 50 47 69 6c 35 33 44 74 64 4e 75 36 Data Ascii: ElXyuzzHsSgwf597EEzPb+uN/TBFfPFuhGwL1zJsYEz1nKLtoRLyJUCUSf6nWQgTVaKwF2bKPnMOaLRXvJTAGlw0MMVVV1bLFEVc88eX5/9/v+c191nnf3LKooNoJjdG9UhKexZpoZJBM7s/zc/tz33vbiCgHjI0Yg8GoGjFaR5UfEMQfGGB8P1FSI6XTYhhYQXy/NvrF7FlFbf5zs/ITNJgHSH+CWAStAC2pQE3fbKhRasqYpiPGil53DtdNu6
2024-09-27 04:01:39 UTC	1369	IN	Data Raw: 78 75 74 75 4e 4c 6f 62 49 45 47 41 31 49 69 67 4f 45 73 5a 4f 2b 74 49 61 59 32 30 6a 67 43 70 50 5a 4b 61 2f 30 76 53 37 44 6c 6e 70 48 50 47 5a 31 65 35 39 58 46 32 59 58 7a 70 4a 58 6c 36 50 41 2f 65 76 32 72 33 2b 63 56 75 36 4f 41 41 39 39 77 53 43 7a 59 46 65 6a 72 72 78 7a 71 58 41 6d 34 32 4c 42 61 34 50 45 2b 2f 39 2f 74 6d 7a 35 72 34 44 69 6b 72 71 67 2f 35 75 62 37 43 45 59 56 48 79 66 64 76 2f 31 39 39 39 37 38 54 2b 70 4a 37 6d 68 54 65 4b 64 52 4d 66 6f 53 51 48 45 4c 69 4b 63 38 6c 50 78 54 4e 43 45 57 4e 49 69 6b 30 35 5a 46 49 52 36 45 64 2f 32 75 71 72 73 44 39 44 35 74 48 38 4e 34 54 6a 74 49 6a 75 66 6e 6b 4d 4c 58 4e 7a 75 61 52 32 79 69 44 2b 41 46 50 77 4a 63 69 55 6e 51 35 52 6a 6d 33 6e 6c 72 4a 4e 43 70 56 6f 35 39 48 54 31 74 Data Ascii: xutuNLobIEGA1IigOEsZO+tIaY20jgCpPZKa/0vS7DlnpHPGZ1e59XF2YXzpJXl6PA/ev2r3+cVu6OAA99wSCzYFejrrxzqXAm42LBa4PE+/9/tmz5r4Dikrqg/5ub7CEYVHyfdv/199978T+pJ7mhTeKdRMfoSQHELiKc8lPxTNCEWNIik05ZFIR6Ed/2uqrsD9D5tH8N4TjtIjufnkMLXNzuaR2yiD+AFPwJciUnQ5Rjm3nlrJNCpVo59HT1t
2024-09-27 04:01:39 UTC	1369	IN	Data Raw: 43 48 44 62 72 76 6a 72 6e 76 75 65 2b 43 68 52 78 4a 47 6a 43 6f 79 52 42 38 49 50 58 34 52 4b 46 78 75 58 6d 46 52 66 39 34 56 37 41 41 43 68 53 4e 52 61 41 77 57 68 79 63 51 53 57 51 4b 6c 55 5a 6e 4d 46 6c 73 44 70 66 48 46 77 68 46 59 6b 64 6e 56 33 64 50 62 31 6c 35 52 57 55 56 4e 51 30 74 4d 6c 56 48 7a 38 44 49 68 4d 35 6b 67 52 79 49 6a 77 67 78 4b 52 6b 35 42 53 55 56 30 51 67 77 46 49 36 4b 6a 6f 6d 54 6c 5a 32 54 47 38 47 48 42 4e 47 43 51 69 4a 69 45 6c 67 50 69 43 51 79 68 55 70 6a 4d 46 6c 73 44 70 66 48 46 77 68 46 59 6f 6c 55 4a 72 65 77 74 4c 4b 32 73 62 57 7a 64 33 42 30 63 6e 5a 78 64 58 50 33 38 50 54 79 6c 70 47 6c 30 48 54 31 42 61 69 51 66 57 34 4b 49 55 73 6f 39 7a 39 64 30 45 6c 44 53 35 49 45 44 41 43 44 31 48 49 76 41 50 4c 50 Data Ascii: CHDbrvjrnvue+ChRxJGjCoyRB8IPX4RKFxuXmFRf94V7AAChSNRaAwWhycQSWQKlUZnMFlsDpfHFwhFYkdnV3dPb1l5RWUVNQ0tMlVHz8DIhM5kgRyIjwgxKRk5BSUV0QgwFI6KjomTlZ2TG8GHBNGCQiJiElgPiCQyhUpjMFlsDpfHFwhFYolUJrewtLK2sbWzd3B0cnZxdXP38PTylpGl0HT1BaiQfW4KIUso9z9d0ElDS5IEDACD1HIvAPLP
2024-09-27 04:01:39 UTC	1369	IN	Data Raw: 56 66 37 6d 64 51 6b 42 6e 64 35 63 47 65 56 71 4c 77 45 61 58 2f 67 56 48 4a 34 2f 56 46 4f 34 49 4e 4a 79 4c 44 6b 79 63 32 69 6a 31 50 58 4e 53 32 4a 69 6b 54 53 45 6f 30 64 35 62 55 54 47 38 75 61 5a 6e 66 2b 32 52 47 4f 32 33 79 73 7a 68 64 43 72 4b 38 6a 30 6e 4c 36 68 61 53 6e 6f 4f 4a 57 39 54 38 51 65 68 68 64 50 75 77 4d 58 63 4e 42 33 66 58 43 61 6b 55 52 34 64 4f 39 66 52 59 31 4d 43 47 54 57 53 2b 67 75 6f 52 4c 44 69 71 74 30 51 30 65 50 68 62 47 2f 5a 42 58 68 76 78 73 54 54 6d 30 35 73 33 37 6a 64 46 54 66 67 48 76 6c 6e 2f 4b 57 33 4f 58 4f 58 4e 57 36 69 6d 42 55 76 56 74 57 79 35 70 6c 5a 49 53 4b 31 61 6f 37 55 31 36 35 42 62 74 38 33 30 52 75 71 58 37 63 6b 71 42 70 53 56 51 79 71 71 65 5a 6f 6d 54 42 62 52 55 32 43 73 6b 43 76 4b 53 Data Ascii: Vf7mdQkBnd5cGeVqLwEaX/gVHJ4/VFO4INJyLDkyc2ij1PXNS2JikTSEo0d5bUTG8uaZnf+2RGO23yszhdCrK8j0nL6haSnoOJW9T8QehhdPuwMXcNB3fXCakUR4dO9fRY1MCGTWS+guoRLDiqt0Q0ePhbG/ZBXhvxsTTm05s37jdFTfgHvln/KW3OXOXNW6imBUvVtWy5plZISK1ao7U165Bbt830RuqX7ckqBpSVQyqqeZomTBbRU2CskCvKS
2024-09-27 04:01:39 UTC	1369	IN	Data Raw: 55 4c 4b 73 77 54 34 47 68 2b 68 68 64 78 33 44 4c 44 2b 58 48 73 36 32 48 59 52 69 47 59 52 69 47 59 52 69 47 59 52 68 2b 41 57 62 6c 4a 6e 36 44 31 69 79 69 6a 57 30 76 45 4b 4a 39 59 66 57 30 57 43 4f 31 36 6b 72 39 47 32 52 41 46 46 36 74 69 79 34 4b 61 6a 4e 74 46 75 2b 63 2b 65 67 6f 61 38 75 73 59 41 4f 70 56 4c 6c 4b 6b 69 49 62 38 4a 67 4e 52 57 79 78 78 7a 36 66 2b 74 55 46 58 55 4e 76 68 47 36 52 4a 6d 7a 5a 63 65 44 6b 6d 4d 42 79 73 34 59 6f 52 4a 68 77 44 44 2f 35 32 53 39 2b 39 5a 73 6e 6e 68 49 53 65 30 48 74 48 35 4f 32 37 4a 53 39 32 76 4e 75 2b 52 4f 66 30 46 4a 5a 72 6a 4e 6a 34 59 67 49 55 61 4c 46 69 70 4d 67 53 59 6f 30 47 54 4a 6c 75 31 32 47 42 6a 7a 65 68 6d 79 32 32 47 4f 66 54 2f 33 71 67 71 36 6e 58 70 50 46 47 36 57 62 52 52 Data Ascii: ULKswT4Gh+hhdx3DLD+XHs62HYRiGYRiGYRiGYRh+AWblJn6D1iyijW0vEKJ9YfW0WCO16kr9G2RAFF6tiy4KajNtFu+c+egoa8usYAOpVLlKkiIb8JgNRWyxxz6f+tUFXUNvhG6RJmzZceDkmMBys4YoRJhwDD/52S9+9ZsnnhISe0HtH5O27JS92vNu+ROf0FJZrjNj4YgIUaLFipMgSYo0GTJlu12GBjzehmy22GOfT/3qgq6nXpPFG6WbRR
2024-09-27 04:01:39 UTC	1369	IN	Data Raw: 4e 31 44 52 46 4b 66 30 6c 58 4a 55 68 6b 30 6b 6e 6d 51 61 38 45 51 61 44 6c 6f 36 42 6b 5a 6e 6d 46 6a 47 2f 55 31 51 43 61 6c 6b 71 78 43 4f 4d 49 4a 6b 79 79 6e 55 6d 6e 59 73 48 64 67 36 38 51 6d 49 53 4d 6a 49 4b 53 69 4e 47 71 4d 79 62 71 4a 6f 61 74 74 49 6a 56 44 53 30 6c 73 70 51 42 32 59 45 52 67 48 6e 6e 43 38 2b 66 49 58 69 49 41 6f 56 54 71 4b 48 43 32 36 43 2b 66 61 69 4c 45 38 65 41 47 43 5a 63 50 44 30 6d 44 51 39 75 39 72 6f 4e 67 67 65 78 67 63 68 4a 4e 66 39 44 2b 47 64 70 4b 48 73 54 63 48 74 63 57 58 55 65 42 74 32 38 56 58 49 50 6a 50 69 66 42 44 62 44 67 56 2f 6e 79 52 50 4e 46 42 4f 6f 54 44 34 66 42 64 74 76 47 49 54 52 36 66 69 74 77 30 34 53 7a 73 53 38 51 46 64 35 33 55 39 4a 55 6c 73 76 36 4b 51 53 64 62 6b 51 65 2b 4f 55 65 Data Ascii: N1DRFKf0lXJUhk0knmQa8EQaDlo6BkZnmFjG/U1QCalkqxCOMIJkyynUmnYsHdg68QmISMjIKSiNGqMybqJoattIjVDS0lspQB2YERgHnnC8+fIXiIAoVTqKHC26C+faiLE8eAGCZcPD0mDQ9u9roNggexgchJNf9D+GdpKHsTcHtcWXUeBt28VXIPjPifBDbDgV/nyRPNFBOoTD4fBdtvGITR6fitw04SzsS8QFd53U9JUlsv6KQSdbkQe+OUe
2024-09-27 04:01:39 UTC	1369	IN	Data Raw: 51 67 58 67 64 52 6a 6f 30 62 4f 79 78 52 49 44 35 2b 61 62 2b 4c 56 6e 70 76 37 46 4e 4b 4b 63 49 75 6e 6b 74 77 36 52 4f 6c 31 68 47 6e 52 6f 64 75 69 41 54 61 58 47 4c 48 69 78 45 75 51 6d 4b 52 58 73 70 45 6a 56 35 37 38 6a 76 76 2f 45 4f 73 6b 33 53 43 6e 46 2f 30 6f 42 76 4d 53 43 35 61 73 2b 4f 46 58 2b 62 4f 46 73 2f 7a 66 77 64 6c 77 4e 4c 48 2f 32 37 68 45 62 6b 77 39 43 57 42 7a 54 56 50 53 65 7a 49 4c 52 6d 48 77 36 4e 51 58 53 6f 54 36 78 57 72 65 33 48 6c 58 2b 55 69 2b 68 4b 39 2b 37 48 2b 42 32 4e 77 59 57 51 6a 6d 78 44 6f 71 74 76 50 2f 33 79 47 45 70 6f 69 49 47 41 6c 53 4c 72 76 71 75 70 74 75 6b 79 48 58 39 50 34 66 45 66 6f 30 59 73 69 59 43 54 4f 50 50 66 48 55 63 39 61 7a 37 54 59 42 6d 47 30 43 4c 77 78 72 72 37 4d 45 57 47 50 55 Data Ascii: QgXgdRjo0bOyxRID5+ab+LVnpv7FNKKcIunktw6ROl1hGnRoduiATaXGLHixEuQmKRXspEjV578jvv/EOsk3SCnF/0oBvMSC5as+OFX+bOFs/zfwdlwNLH/27hEbkw9CWBzTVPSezILRmHw6NQXSoT6xWre3HlX+Ui+hK9+7H+B2NwYWQjmxDoqtvP/3yGEpoiIGAlSLrvquptukyHX9P4fEfo0YsiYCTOPPfHUc9az7TYBmG0CLwxrr7MEWGPU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49742	104.17.24.14	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:41 UTC	543	OUT	GET /ajax/libs/axios/1.6.8/axios.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://datechf.cc sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:01:41 UTC	926	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:01:41 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"65f4b028-3aab" Last-Modified: Fri, 15 Mar 2024 20:31:36 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 302417 Expires: Wed, 17 Sep 2025 04:01:41 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ip4wiJCBBi8muu4Kzl0SbXbXeqEjtSJcJDuOdC7u92zpLzs0JqNQD7icRENmj6WTZJ9ujzLbpsYGjRAGbK9b2UA6xR%2FeBL2gIvZrrjpnw03qi02m7FluAKApve%2FMtHIKJrfauMVq"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8c9898089dfa8cca-EWR
2024-09-27 04:01:41 UTC	443	IN	Data Raw: 37 63 30 31 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 74 29 3a 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 65 7c 7c 73 65 6c 66 29 2e 61 78 69 6f 73 3d 74 28 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 76 61 72 Data Ascii: 7c01!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).axios=t()}(this,(function(){"use strict";function e(e,t){var
2024-09-27 04:01:41 UTC	1369	IN	Data Raw: 28 72 2c 6e 29 7d 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 31 3b 72 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3a 7b 7d 3b 72 25 32 3f 65 28 4f 62 6a 65 63 74 28 6e 29 2c 21 30 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 28 74 2c 65 2c 6e 5b 65 5d 29 7d 29 29 3a 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 74 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 6e Data Ascii: (r,n)}return r}function t(t){for(var r=1;r<arguments.length;r++){var n=null!=arguments[r]?arguments[r]:{};r%2?e(Object(n),!0).forEach((function(e){c(t,e,n[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(n
2024-09-27 04:01:41 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 74 29 7b 66 28 65 2c 74 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 6e 76 6f 6b 65 28 74 2c 65 29 7d 29 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 52 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 2c 69 2c 61 2c 73 29 7b 76 61 72 20 75 3d 68 28 65 5b 6e 5d 2c 65 2c 69 29 3b 69 66 28 22 74 68 72 6f 77 22 21 3d 3d 75 2e 74 79 70 65 29 7b 76 61 72 20 63 3d 75 2e 61 72 67 2c 66 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 66 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 66 26 26 6f 2e 63 61 6c 6c 28 66 2c 22 5f 5f 61 77 61 69 74 22 29 3f 74 2e 72 65 73 6f 6c 76 65 28 66 2e 5f 5f 61 77 61 69 74 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 28 22 6e 65 78 74 22 2c 65 Data Ascii: ction(t){f(e,t,(function(e){return this._invoke(t,e)}))}))}function R(e,t){function r(n,i,a,s){var u=h(e[n],e,i);if("throw"!==u.type){var c=u.arg,f=c.value;return f&&"object"==typeof f&&o.call(f,"__await")?t.resolve(f.__await).then((function(e){r("next",e
2024-09-27 04:01:41 UTC	1369	IN	Data Raw: 20 70 72 6f 76 69 64 65 20 61 20 27 22 2b 6e 2b 22 27 20 6d 65 74 68 6f 64 22 29 29 2c 76 3b 76 61 72 20 69 3d 68 28 6f 2c 74 2e 69 74 65 72 61 74 6f 72 2c 72 2e 61 72 67 29 3b 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 69 2e 74 79 70 65 29 72 65 74 75 72 6e 20 72 2e 6d 65 74 68 6f 64 3d 22 74 68 72 6f 77 22 2c 72 2e 61 72 67 3d 69 2e 61 72 67 2c 72 2e 64 65 6c 65 67 61 74 65 3d 6e 75 6c 6c 2c 76 3b 76 61 72 20 61 3d 69 2e 61 72 67 3b 72 65 74 75 72 6e 20 61 3f 61 2e 64 6f 6e 65 3f 28 72 5b 74 2e 72 65 73 75 6c 74 4e 61 6d 65 5d 3d 61 2e 76 61 6c 75 65 2c 72 2e 6e 65 78 74 3d 74 2e 6e 65 78 74 4c 6f 63 2c 22 72 65 74 75 72 6e 22 21 3d 3d 72 2e 6d 65 74 68 6f 64 26 26 28 72 2e 6d 65 74 68 6f 64 3d 22 6e 65 78 74 22 2c 72 2e 61 72 67 3d 65 29 2c 72 2e 64 65 6c Data Ascii: provide a '"+n+"' method")),v;var i=h(o,t.iterator,r.arg);if("throw"===i.type)return r.method="throw",r.arg=i.arg,r.delegate=null,v;var a=i.arg;return a?a.done?(r[t.resultName]=a.value,r.next=t.nextLoc,"return"!==r.method&&(r.method="next",r.arg=e),r.del
2024-09-27 04:01:41 UTC	1369	IN	Data Raw: 22 29 29 2c 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 53 29 2c 65 7d 2c 74 2e 61 77 72 61 70 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 7b 5f 5f 61 77 61 69 74 3a 65 7d 7d 2c 6a 28 52 2e 70 72 6f 74 6f 74 79 70 65 29 2c 66 28 52 2e 70 72 6f 74 6f 74 79 70 65 2c 75 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 29 29 2c 74 2e 41 73 79 6e 63 49 74 65 72 61 74 6f 72 3d 52 2c 74 2e 61 73 79 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 6e 2c 6f 2c 69 29 7b 76 6f 69 64 20 30 3d 3d 3d 69 26 26 28 69 3d 50 72 6f 6d 69 73 65 29 3b 76 61 72 20 61 3d 6e 65 77 20 52 28 6c 28 65 2c 72 2c 6e 2c 6f 29 2c 69 29 3b 72 65 74 75 72 6e 20 74 2e 69 73 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 Data Ascii: ")),e.prototype=Object.create(S),e},t.awrap=function(e){return{__await:e}},j(R.prototype),f(R.prototype,u,(function(){return this})),t.AsyncIterator=R,t.async=function(e,r,n,o,i){void 0===i&&(i=Promise);var a=new R(l(e,r,n,o),i);return t.isGeneratorFuncti
2024-09-27 04:01:41 UTC	1369	IN	Data Raw: 6f 63 22 29 3b 69 66 28 75 26 26 63 29 7b 69 66 28 74 68 69 73 2e 70 72 65 76 3c 61 2e 63 61 74 63 68 4c 6f 63 29 72 65 74 75 72 6e 20 6e 28 61 2e 63 61 74 63 68 4c 6f 63 2c 21 30 29 3b 69 66 28 74 68 69 73 2e 70 72 65 76 3c 61 2e 66 69 6e 61 6c 6c 79 4c 6f 63 29 72 65 74 75 72 6e 20 6e 28 61 2e 66 69 6e 61 6c 6c 79 4c 6f 63 29 7d 65 6c 73 65 20 69 66 28 75 29 7b 69 66 28 74 68 69 73 2e 70 72 65 76 3c 61 2e 63 61 74 63 68 4c 6f 63 29 72 65 74 75 72 6e 20 6e 28 61 2e 63 61 74 63 68 4c 6f 63 2c 21 30 29 7d 65 6c 73 65 7b 69 66 28 21 63 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 74 72 79 20 73 74 61 74 65 6d 65 6e 74 20 77 69 74 68 6f 75 74 20 63 61 74 63 68 20 6f 72 20 66 69 6e 61 6c 6c 79 22 29 3b 69 66 28 74 68 69 73 2e 70 72 65 76 3c 61 2e 66 Data Ascii: oc");if(u&&c){if(this.prev<a.catchLoc)return n(a.catchLoc,!0);if(this.prev<a.finallyLoc)return n(a.finallyLoc)}else if(u){if(this.prev<a.catchLoc)return n(a.catchLoc,!0)}else{if(!c)throw new Error("try statement without catch or finally");if(this.prev<a.f
2024-09-27 04:01:41 UTC	1369	IN	Data Raw: 3d 74 68 69 73 2e 6d 65 74 68 6f 64 26 26 28 74 68 69 73 2e 61 72 67 3d 65 29 2c 76 7d 7d 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 65 7c 7c 21 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 72 3d 65 5b 53 79 6d 62 6f 6c 2e 74 6f 50 72 69 6d 69 74 69 76 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 29 7b 76 61 72 20 6e 3d 72 2e 63 61 6c 6c 28 65 2c 74 7c 7c 22 64 65 66 61 75 6c 74 22 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 6e 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 40 40 74 6f 50 72 69 6d 69 74 69 76 65 20 6d 75 73 74 20 72 65 74 75 72 6e 20 61 20 70 Data Ascii: =this.method&&(this.arg=e),v}},t}function n(e){var t=function(e,t){if("object"!=typeof e\|\|!e)return e;var r=e[Symbol.toPrimitive];if(void 0!==r){var n=r.call(e,t\|\|"default");if("object"!=typeof n)return n;throw new TypeError("@@toPrimitive must return a p
2024-09-27 04:01:41 UTC	1369	IN	Data Raw: 3d 21 31 3b 74 72 79 7b 69 66 28 69 3d 28 72 3d 72 2e 63 61 6c 6c 28 65 29 29 2e 6e 65 78 74 2c 30 3d 3d 3d 74 29 7b 69 66 28 4f 62 6a 65 63 74 28 72 29 21 3d 3d 72 29 72 65 74 75 72 6e 3b 75 3d 21 31 7d 65 6c 73 65 20 66 6f 72 28 3b 21 28 75 3d 28 6e 3d 69 2e 63 61 6c 6c 28 72 29 29 2e 64 6f 6e 65 29 26 26 28 73 2e 70 75 73 68 28 6e 2e 76 61 6c 75 65 29 2c 73 2e 6c 65 6e 67 74 68 21 3d 3d 74 29 3b 75 3d 21 30 29 3b 7d 63 61 74 63 68 28 65 29 7b 63 3d 21 30 2c 6f 3d 65 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 69 66 28 21 75 26 26 6e 75 6c 6c 21 3d 72 2e 72 65 74 75 72 6e 26 26 28 61 3d 72 2e 72 65 74 75 72 6e 28 29 2c 4f 62 6a 65 63 74 28 61 29 21 3d 3d 61 29 29 72 65 74 75 72 6e 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 63 29 74 68 72 6f 77 20 6f 7d 7d 72 65 74 Data Ascii: =!1;try{if(i=(r=r.call(e)).next,0===t){if(Object(r)!==r)return;u=!1}else for(;!(u=(n=i.call(r)).done)&&(s.push(n.value),s.length!==t);u=!0);}catch(e){c=!0,o=e}finally{try{if(!u&&null!=r.return&&(a=r.return(),Object(a)!==a))return}finally{if(c)throw o}}ret
2024-09-27 04:01:41 UTC	1369	IN	Data Raw: 6f 74 79 70 65 4f 66 2c 45 3d 28 67 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 62 2e 63 61 6c 6c 28 65 29 3b 72 65 74 75 72 6e 20 67 5b 74 5d 7c 7c 28 67 5b 74 5d 3d 74 2e 73 6c 69 63 65 28 38 2c 2d 31 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 29 2c 4f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 45 28 74 29 3d 3d 3d 65 7d 7d 2c 53 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6f 28 74 29 3d 3d 3d 65 7d 7d 2c 6a 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 2c 52 3d 53 28 22 75 6e 64 Data Ascii: otypeOf,E=(g=Object.create(null),function(e){var t=b.call(e);return g[t]\|\|(g[t]=t.slice(8,-1).toLowerCase())}),O=function(e){return e=e.toLowerCase(),function(t){return E(t)===e}},S=function(e){return function(t){return o(t)===e}},j=Array.isArray,R=S("und
2024-09-27 04:01:41 UTC	1369	IN	Data Raw: 6e 28 65 29 7b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 65 2c 72 29 7d 7d 28 29 2c 47 3d 4f 28 22 52 65 67 45 78 70 22 29 2c 57 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 65 29 2c 6e 3d 7b 7d 3b 44 28 72 2c 28 66 75 6e 63 74 69 6f 6e 28 72 2c 6f 29 7b 76 61 72 20 69 3b 21 31 21 3d 3d 28 69 3d 74 28 72 2c 6f 2c 65 29 29 26 26 28 6e 5b 6f 5d 3d 69 7c 7c 72 29 7d 29 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 65 2c 6e 29 7d 2c 4b 3d Data Ascii: n(e){var t=Object.prototype.hasOwnProperty;return function(e,r){return t.call(e,r)}}(),G=O("RegExp"),W=function(e,t){var r=Object.getOwnPropertyDescriptors(e),n={};D(r,(function(r,o){var i;!1!==(i=t(r,o,e))&&(n[o]=i\|\|r)})),Object.defineProperties(e,n)},K=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49741	151.101.66.137	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:41 UTC	558	OUT	GET /jquery-3.7.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://datechf.cc sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://datechf.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:01:41 UTC	610	IN	HTTP/1.1 200 OK Connection: close Content-Length: 70264 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-11278" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 200222 Date: Fri, 27 Sep 2024 04:01:41 GMT X-Served-By: cache-lga21987-LGA, cache-ewr-kewr1740036-EWR X-Cache: HIT, HIT X-Cache-Hits: 48, 0 X-Timer: S1727409701.213041,VS0,VE1 Vary: Accept-Encoding
2024-09-27 04:01:41 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 64 65 70 72 65 63 61 74 65 64 2f 61 6a 61 78 2d 65 76 65 6e 74 2d 61 6c 69 61 73 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 Data Ascii: /*! jQuery v3.7.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-deprecated/ajax-event-alias,-effects,-effects/animatedSelector,-effects/Tween \| (c) OpenJS Foundation and oth
2024-09-27 04:01:41 UTC	1378	IN	Data Raw: 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 64 65 70 72 65 63 61 74 65 64 2f 61 6a 61 78 2d 65 76 65 6e 74 2d 61 6c 69 61 73 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 22 2c 6c 3d 2f 48 54 4d 4c 24 2f 69 2c 63 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 63 65 2e 66 6e 2e 69 6e 69 74 28 65 2c 74 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 76 61 72 20 74 3d 21 21 65 26 26 22 6c 65 6e 67 74 68 22 69 6e Data Ascii: ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-deprecated/ajax-event-alias,-effects,-effects/animatedSelector,-effects/Tween",l=/HTML$/i,ce=function(e,t){return new ce.fn.init(e,t)};function c(e){var t=!!e&&"length"in
2024-09-27 04:01:41 UTC	1378	IN	Data Raw: 7d 2c 73 3d 31 2c 75 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6c 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 28 6c 3d 61 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 73 5d 7c 7c 7b 7d 2c 73 2b 2b 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 76 28 61 29 7c 7c 28 61 3d 7b 7d 29 2c 73 3d 3d 3d 75 26 26 28 61 3d 74 68 69 73 2c 73 2d 2d 29 3b 73 3c 75 3b 73 2b 2b 29 69 66 28 6e 75 6c 6c 21 3d 28 65 3d 61 72 67 75 6d 65 6e 74 73 5b 73 5d 29 29 66 6f 72 28 74 20 69 6e 20 65 29 72 3d 65 5b 74 5d 2c 22 5f 5f 70 72 6f 74 6f 5f 5f 22 21 3d 3d 74 26 26 61 21 3d 3d 72 26 26 28 6c 26 26 72 26 26 28 63 65 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 72 29 7c 7c 28 69 3d 41 72 72 61 79 2e 69 73 41 72 Data Ascii: },s=1,u=arguments.length,l=!1;for("boolean"==typeof a&&(l=a,a=arguments[s]\|\|{},s++),"object"==typeof a\|\|v(a)\|\|(a={}),s===u&&(a=this,s--);s<u;s++)if(null!=(e=arguments[s]))for(t in e)r=e[t],"__proto__"!==t&&a!==r&&(l&&r&&(ce.isPlainObject(r)\|\|(i=Array.isAr
2024-09-27 04:01:41 UTC	1378	IN	Data Raw: 74 7c 7c 65 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 21 6c 2e 74 65 73 74 28 74 7c 7c 6e 26 26 6e 2e 6e 6f 64 65 4e 61 6d 65 7c 7c 22 48 54 4d 4c 22 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 65 5b 69 2b 2b 5d 3d 74 5b 72 5d 3b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3d 69 2c 65 7d 2c 67 72 65 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 5b 5d 2c 69 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 2c 61 3d 21 6e 3b 69 3c 6f 3b 69 2b 2b 29 21 74 28 65 5b 69 5d 2c 69 29 21 3d 3d 61 26 26 72 2e 70 75 73 68 28 65 5b 69 5d 29 3b 72 65 74 75 72 Data Ascii: t\|\|e).documentElement;return!l.test(t\|\|n&&n.nodeName\|\|"HTML")},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=t[r];return e.length=i,e},grep:function(e,t,n){for(var r=[],i=0,o=e.length,a=!n;i<o;i++)!t(e[i],i)!==a&&r.push(e[i]);retur
2024-09-27 04:01:41 UTC	1378	IN	Data Raw: 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 74 3d 22 28 3f 3a 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 67 65 2b 22 3f 7c 5c 5c 5c 5c 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 7c 5b 5c 5c 77 2d 5d 7c 5b 5e 5c 30 2d 5c 5c 78 37 66 5d 29 2b 22 2c 64 3d 22 5c 5c 5b 22 2b 67 65 2b 22 2a 28 22 2b 74 2b 22 29 28 3f 3a 22 2b 67 65 2b 22 2a 28 5b 2a 5e 24 7c 21 7e 5d 3f 3d 29 22 2b 67 65 2b 22 2a 28 3f 3a 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 7c 28 22 2b 74 2b 22 29 29 7c 29 22 2b Data Ascii: disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",t="(?:\\\\[\\da-fA-F]{1,6}"+ge+"?\|\\\\[^\\r\\n\\f]\|[\\w-]\|[^\0-\\x7f])+",d="\\["+ge+"("+t+")(?:"+ge+"([^$\|!~]?=)"+ge+"(?:'((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\"\|("+t+"))\|)"+
2024-09-27 04:01:41 UTC	1378	IN	Data Raw: 64 73 65 74 22 29 7d 2c 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 6e 65 78 74 3a 22 6c 65 67 65 6e 64 22 7d 29 3b 74 72 79 7b 45 2e 61 70 70 6c 79 28 6f 65 3d 61 65 2e 63 61 6c 6c 28 79 65 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 79 65 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 6f 65 5b 79 65 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 65 29 7b 45 3d 7b 61 70 70 6c 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6d 65 2e 61 70 70 6c 79 28 65 2c 61 65 2e 63 61 6c 6c 28 74 29 29 7d 2c 63 61 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6d 65 2e 61 70 70 6c 79 28 65 2c 61 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 28 74 2c 65 2c 6e 2c 72 Data Ascii: dset")},{dir:"parentNode",next:"legend"});try{E.apply(oe=ae.call(ye.childNodes),ye.childNodes),oe[ye.childNodes.length].nodeType}catch(e){E={apply:function(e,t){me.apply(e,ae.call(t))},call:function(e){me.apply(e,ae.call(arguments,1))}}}function I(t,e,n,r
2024-09-27 04:01:41 UTC	1378	IN	Data Raw: 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 24 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 65 28 65 2c 22 69 6e 70 75 74 22 29 26 26 65 2e 74 79 70 65 3d 3d 3d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 66 65 28 65 2c 22 69 6e 70 75 74 22 29 7c 7c 66 65 28 65 2c 22 62 75 74 74 6f 6e 22 29 29 26 26 65 2e 74 79 70 65 3d 3d 3d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 Data Ascii: eturn!1}finally{t.parentNode&&t.parentNode.removeChild(t),t=null}}function $(t){return function(e){return fe(e,"input")&&e.type===t}}function _(t){return function(e){return(fe(e,"input")\|\|fe(e,"button"))&&e.type===t}}function z(t){return function(e){retur
2024-09-27 04:01:41 UTC	1378	IN	Data Raw: 75 72 6e 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 74 7d 7d 2c 78 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 54 29 7b 76 61 72 20 6e 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 72 65 74 75 72 6e 20 6e 3f 5b 6e 5d 3a 5b 5d 7d 7d 29 3a 28 78 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 48 2c 71 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 Data Ascii: urn e.getAttribute("id")===t}},x.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&T){var n=t.getElementById(e);return n?[n]:[]}}):(x.filter.ID=function(e){var n=e.replace(H,q);return function(e){var t="undefined"!=typeof e.getAttributeNode&&
2024-09-27 04:01:41 UTC	1378	IN	Data Raw: 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 64 69 73 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 70 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 64 22 29 2c 28 74 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 27 27 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 70 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 67 65 2b 22 2a 6e 61 6d 65 22 2b 67 65 2b 22 2a 3d 22 2b 67 65 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 7d 29 2c 6c 65 2e 63 73 73 48 61 73 7c 7c 70 2e 70 75 73 68 28 22 Data Ascii: ==e.querySelectorAll(":disabled").length&&p.push(":enabled",":disabled"),(t=C.createElement("input")).setAttribute("name",""),e.appendChild(t),e.querySelectorAll("[name='']").length\|\|p.push("\\["+ge+"name"+ge+"="+ge+"*(?:''\|\"\")")}),le.cssHas\|\|p.push("
2024-09-27 04:01:41 UTC	1378	IN	Data Raw: 61 62 6c 65 26 26 61 65 2e 63 61 6c 6c 28 65 2c 30 29 2c 70 65 2e 63 61 6c 6c 28 65 2c 6c 29 2c 61 29 7b 77 68 69 6c 65 28 74 3d 65 5b 69 2b 2b 5d 29 74 3d 3d 3d 65 5b 69 5d 26 26 28 72 3d 6e 2e 70 75 73 68 28 69 29 29 3b 77 68 69 6c 65 28 72 2d 2d 29 68 65 2e 63 61 6c 6c 28 65 2c 6e 5b 72 5d 2c 31 29 7d 72 65 74 75 72 6e 20 6f 3d 6e 75 6c 6c 2c 65 7d 2c 63 65 2e 66 6e 2e 75 6e 69 71 75 65 53 6f 72 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 63 65 2e 75 6e 69 71 75 65 53 6f 72 74 28 61 65 2e 61 70 70 6c 79 28 74 68 69 73 29 29 29 7d 2c 28 78 3d 63 65 2e 65 78 70 72 3d 7b 63 61 63 68 65 4c 65 6e 67 74 68 3a 35 30 2c 63 72 65 61 74 65 50 73 65 75 64 6f 3a 42 2c 6d 61 74 63 68 3a 4e 2c 61 74 74 72 Data Ascii: able&&ae.call(e,0),pe.call(e,l),a){while(t=e[i++])t===e[i]&&(r=n.push(i));while(r--)he.call(e,n[r],1)}return o=null,e},ce.fn.uniqueSort=function(){return this.pushStack(ce.uniqueSort(ae.apply(this)))},(x=ce.expr={cacheLength:50,createPseudo:B,match:N,attr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49745	188.114.96.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:41 UTC	633	OUT	GET /socket.io/socket.io.js HTTP/1.1 Host: datechf.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://datechf.cc/de/receive/79469380 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w
2024-09-27 04:01:41 UTC	610	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:01:41 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=14400 ETag: W/"4.7.2" CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2ByJQ7BGXpIkMcl3FQUsF8K%2F4W8ECgkeoSubRBB%2F0khjAdgySZYRBgtB8T7qHstFNwHKh23qNndMG5ZjOO7nPnuX0zPh49%2BhDm2uMjUhTsUVW%2Fv1xMhaz9LG4DdmM"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c98980b7c16432b-EWR
2024-09-27 04:01:41 UTC	759	IN	Data Raw: 37 64 33 63 0d 0a 2f 2a 21 0a 20 2a 20 53 6f 63 6b 65 74 2e 49 4f 20 76 34 2e 37 2e 32 0a 20 2a 20 28 63 29 20 32 30 31 34 2d 32 30 32 33 20 47 75 69 6c 6c 65 72 6d 6f 20 52 61 75 63 68 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 2e 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 20 28 67 6c 6f 62 61 6c 2c 20 66 61 63 74 6f 72 79 29 20 7b 0a 20 20 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 20 3d 3d 3d 20 27 6f 62 6a 65 63 74 27 20 26 26 20 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3f 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3d 20 66 61 63 74 6f 72 79 28 29 20 3a 0a 20 20 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e Data Ascii: 7d3c/! Socket.IO v4.7.2 * (c) 2014-2023 Guillermo Rauch * Released under the MIT License. */(function (global, factory) { typeof exports === 'object' && typeof module !== 'undefined' ? module.exports = factory() : typeof define === 'function
2024-09-27 04:01:41 UTC	1369	IN	Data Raw: 6c 22 20 3a 20 74 79 70 65 6f 66 20 6f 62 6a 3b 0a 20 20 20 20 7d 2c 20 5f 74 79 70 65 6f 66 28 6f 62 6a 29 3b 0a 20 20 7d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 5f 63 6c 61 73 73 43 61 6c 6c 43 68 65 63 6b 28 69 6e 73 74 61 6e 63 65 2c 20 43 6f 6e 73 74 72 75 63 74 6f 72 29 20 7b 0a 20 20 20 20 69 66 20 28 21 28 69 6e 73 74 61 6e 63 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 43 6f 6e 73 74 72 75 63 74 6f 72 29 29 20 7b 0a 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 0a 20 20 20 20 7d 0a 20 20 7d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 5f 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 74 61 72 67 65 74 2c 20 70 72 6f 70 Data Ascii: l" : typeof obj; }, _typeof(obj); } function _classCallCheck(instance, Constructor) { if (!(instance instanceof Constructor)) { throw new TypeError("Cannot call a class as a function"); } } function _defineProperties(target, prop
2024-09-27 04:01:41 UTC	1369	IN	Data Raw: 70 65 72 43 6c 61 73 73 29 20 7b 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 73 75 70 65 72 43 6c 61 73 73 20 21 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 26 26 20 73 75 70 65 72 43 6c 61 73 73 20 21 3d 3d 20 6e 75 6c 6c 29 20 7b 0a 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 73 75 62 43 6c 61 73 73 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 73 75 70 65 72 43 6c 61 73 73 20 26 26 20 73 75 70 65 72 43 6c 61 73 73 2e 70 72 6f 74 6f 74 79 70 65 2c 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 74 72 Data Ascii: perClass) { if (typeof superClass !== "function" && superClass !== null) { throw new TypeError("Super expression must either be null or a function"); } subClass.prototype = Object.create(superClass && superClass.prototype, { constr
2024-09-27 04:01:41 UTC	1369	IN	Data Raw: 20 61 72 67 73 2c 20 43 6c 61 73 73 29 20 7b 0a 20 20 20 20 69 66 20 28 5f 69 73 4e 61 74 69 76 65 52 65 66 6c 65 63 74 43 6f 6e 73 74 72 75 63 74 28 29 29 20 7b 0a 20 20 20 20 20 20 5f 63 6f 6e 73 74 72 75 63 74 20 3d 20 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 2e 62 69 6e 64 28 29 3b 0a 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 5f 63 6f 6e 73 74 72 75 63 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 5f 63 6f 6e 73 74 72 75 63 74 28 50 61 72 65 6e 74 2c 20 61 72 67 73 2c 20 43 6c 61 73 73 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 61 20 3d 20 5b 6e 75 6c 6c 5d 3b 0a 20 20 20 20 20 20 20 20 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 20 61 72 67 73 29 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 43 6f 6e 73 74 72 75 63 74 6f 72 20 3d Data Ascii: args, Class) { if (_isNativeReflectConstruct()) { _construct = Reflect.construct.bind(); } else { _construct = function _construct(Parent, args, Class) { var a = [null]; a.push.apply(a, args); var Constructor =
2024-09-27 04:01:41 UTC	1369	IN	Data Raw: 6c 65 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 20 74 72 75 65 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 5f 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 57 72 61 70 70 65 72 2c 20 43 6c 61 73 73 29 3b 0a 20 20 20 20 7d 3b 0a 20 20 20 20 72 65 74 75 72 6e 20 5f 77 72 61 70 4e 61 74 69 76 65 53 75 70 65 72 28 43 6c 61 73 73 29 3b 0a 20 20 7d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 5f 61 73 73 65 72 74 54 68 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 28 73 65 6c 66 29 20 7b 0a 20 20 20 20 69 66 20 28 73 65 6c 66 20 3d 3d 3d 20 76 6f 69 64 20 30 29 20 7b 0a 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 Data Ascii: le: true, configurable: true } }); return _setPrototypeOf(Wrapper, Class); }; return _wrapNativeSuper(Class); } function _assertThisInitialized(self) { if (self === void 0) { throw new ReferenceError("th
2024-09-27 04:01:41 UTC	1369	IN	Data Raw: 6e 20 6f 62 6a 65 63 74 3b 0a 20 20 7d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 5f 67 65 74 28 29 20 7b 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 20 21 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 20 26 26 20 52 65 66 6c 65 63 74 2e 67 65 74 29 20 7b 0a 20 20 20 20 20 20 5f 67 65 74 20 3d 20 52 65 66 6c 65 63 74 2e 67 65 74 2e 62 69 6e 64 28 29 3b 0a 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 5f 67 65 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 5f 67 65 74 28 74 61 72 67 65 74 2c 20 70 72 6f 70 65 72 74 79 2c 20 72 65 63 65 69 76 65 72 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 62 61 73 65 20 3d 20 5f 73 75 70 65 72 50 72 6f 70 42 61 73 65 28 74 61 72 67 65 74 2c 20 70 72 6f 70 65 72 74 79 29 3b 0a 20 20 20 20 20 20 20 20 Data Ascii: n object; } function _get() { if (typeof Reflect !== "undefined" && Reflect.get) { _get = Reflect.get.bind(); } else { _get = function _get(target, property, receiver) { var base = _superPropBase(target, property);
2024-09-27 04:01:41 UTC	1369	IN	Data Raw: 20 3d 20 5f 75 6e 73 75 70 70 6f 72 74 65 64 49 74 65 72 61 62 6c 65 54 6f 41 72 72 61 79 28 6f 29 29 20 7c 7c 20 61 6c 6c 6f 77 41 72 72 61 79 4c 69 6b 65 20 26 26 20 6f 20 26 26 20 74 79 70 65 6f 66 20 6f 2e 6c 65 6e 67 74 68 20 3d 3d 3d 20 22 6e 75 6d 62 65 72 22 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 69 74 29 20 6f 20 3d 20 69 74 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 69 20 3d 20 30 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 46 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 73 3a 20 46 2c 0a 20 20 20 20 20 20 20 20 20 20 6e 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 69 20 3e 3d 20 6f 2e 6c 65 6e 67 Data Ascii: = _unsupportedIterableToArray(o)) \|\| allowArrayLike && o && typeof o.length === "number") { if (it) o = it; var i = 0; var F = function () {}; return { s: F, n: function () { if (i >= o.leng
2024-09-27 04:01:41 UTC	1369	IN	Data Raw: 20 7b 0a 20 20 20 20 20 20 76 61 72 20 72 65 73 20 3d 20 70 72 69 6d 2e 63 61 6c 6c 28 69 6e 70 75 74 2c 20 68 69 6e 74 20 7c 7c 20 22 64 65 66 61 75 6c 74 22 29 3b 0a 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 72 65 73 20 21 3d 3d 20 22 6f 62 6a 65 63 74 22 29 20 72 65 74 75 72 6e 20 72 65 73 3b 0a 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 40 40 74 6f 50 72 69 6d 69 74 69 76 65 20 6d 75 73 74 20 72 65 74 75 72 6e 20 61 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 2e 22 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 72 65 74 75 72 6e 20 28 68 69 6e 74 20 3d 3d 3d 20 22 73 74 72 69 6e 67 22 20 3f 20 53 74 72 69 6e 67 20 3a 20 4e 75 6d 62 65 72 29 28 69 6e 70 75 74 29 3b 0a 20 20 7d 0a 20 20 66 75 6e 63 74 69 6f 6e Data Ascii: { var res = prim.call(input, hint \|\| "default"); if (typeof res !== "object") return res; throw new TypeError("@@toPrimitive must return a primitive value."); } return (hint === "string" ? String : Number)(input); } function
2024-09-27 04:01:41 UTC	1369	IN	Data Raw: 6e 20 65 6e 63 6f 64 65 50 61 63 6b 65 74 28 5f 72 65 66 2c 20 73 75 70 70 6f 72 74 73 42 69 6e 61 72 79 2c 20 63 61 6c 6c 62 61 63 6b 29 20 7b 0a 20 20 20 20 76 61 72 20 74 79 70 65 20 3d 20 5f 72 65 66 2e 74 79 70 65 2c 0a 20 20 20 20 20 20 64 61 74 61 20 3d 20 5f 72 65 66 2e 64 61 74 61 3b 0a 20 20 20 20 69 66 20 28 77 69 74 68 4e 61 74 69 76 65 42 6c 6f 62 24 31 20 26 26 20 64 61 74 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 42 6c 6f 62 29 20 7b 0a 20 20 20 20 20 20 69 66 20 28 73 75 70 70 6f 72 74 73 42 69 6e 61 72 79 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 63 61 6c 6c 62 61 63 6b 28 64 61 74 61 29 3b 0a 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 65 6e 63 6f 64 65 42 6c 6f 62 41 73 42 61 73 Data Ascii: n encodePacket(_ref, supportsBinary, callback) { var type = _ref.type, data = _ref.data; if (withNativeBlob$1 && data instanceof Blob) { if (supportsBinary) { return callback(data); } else { return encodeBlobAsBas
2024-09-27 04:01:41 UTC	1369	IN	Data Raw: 0a 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 77 69 74 68 4e 61 74 69 76 65 41 72 72 61 79 42 75 66 66 65 72 24 32 20 26 26 20 28 70 61 63 6b 65 74 2e 64 61 74 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 20 7c 7c 20 69 73 56 69 65 77 24 31 28 70 61 63 6b 65 74 2e 64 61 74 61 29 29 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 63 61 6c 6c 62 61 63 6b 28 74 6f 41 72 72 61 79 28 70 61 63 6b 65 74 2e 64 61 74 61 29 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 65 6e 63 6f 64 65 50 61 63 6b 65 74 28 70 61 63 6b 65 74 2c 20 66 61 6c 73 65 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 6e 63 6f 64 65 64 29 20 7b 0a 20 20 20 20 20 20 69 66 20 28 21 54 45 58 54 5f 45 4e 43 4f 44 45 52 29 20 7b 0a 20 20 20 20 20 20 20 20 54 45 58 54 5f 45 4e 43 Data Ascii: } else if (withNativeArrayBuffer$2 && (packet.data instanceof ArrayBuffer \|\| isView$1(packet.data))) { return callback(toArray(packet.data)); } encodePacket(packet, false, function (encoded) { if (!TEXT_ENCODER) { TEXT_ENC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49743	142.250.186.46	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:41 UTC	663	OUT	GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1 Host: translate.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://datechf.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:01:41 UTC	745	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 27 Sep 2024 04:01:41 GMT Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Set-Cookie: __Secure-BUCKET=CO0B; Domain=.google.com; Expires=Wed, 26-Mar-2025 04:01:41 GMT; Path=/; Secure; HttpOnly; SameSite=lax Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-27 04:01:41 UTC	645	IN	Data Raw: 38 30 30 30 0d 0a 0a 20 20 20 20 2f 2f 20 67 6f 2f 6d 73 73 2d 73 65 74 75 70 23 37 2d 6c 6f 61 64 2d 74 68 65 2d 6a 73 2d 6f 72 2d 63 73 73 2d 66 72 6f 6d 2d 79 6f 75 72 2d 69 6e 69 74 69 61 6c 2d 70 61 67 65 0a 20 20 20 20 69 66 28 21 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 29 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 65 3b 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 3d 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 3b 0a 20 20 Data Ascii: 8000 // go/mss-setup#7-load-the-js-or-css-from-your-initial-page if(!window['_DumpException']) { const _DumpException = window['_DumpException'] \|\| function(e) { throw e; }; window['_DumpException'] = _DumpException;
2024-09-27 04:01:41 UTC	1390	IN	Data Raw: 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 62 61 2c 66 61 2c 6e 61 2c 71 61 2c 72 61 2c 74 61 2c 41 61 2c 52 61 2c 53 61 2c 56 61 2c 57 61 2c 64 62 2c 6a 62 2c 6b 62 2c 6c 62 2c 77 2c 6e 62 2c 6f 62 2c 71 62 2c 72 62 2c 73 62 2c 75 62 2c 79 62 3b 5f 2e 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 29 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 5f 2e 61 61 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 3b 63 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 63 29 7d 61 26 26 28 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 53 74 72 69 6e 67 28 61 29 29 3b 62 21 3d 3d 76 Data Ascii: Identifier: Apache-2.0*/var ba,fa,na,qa,ra,ta,Aa,Ra,Sa,Va,Wa,db,jb,kb,lb,w,nb,ob,qb,rb,sb,ub,yb;_.aa=function(a,b){if(Error.captureStackTrace)Error.captureStackTrace(this,_.aa);else{var c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));b!==v
2024-09-27 04:01:41 UTC	1390	IN	Data Raw: 7b 72 65 74 75 72 6e 20 63 7d 3b 61 3d 73 61 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 67 6f 6f 67 23 68 74 6d 6c 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 62 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 62 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 62 7d 29 7d 63 61 74 63 68 28 63 29 7b 7d 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 76 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 75 61 3d 3d 3d 76 6f 69 64 20 30 26 26 28 75 61 3d 74 61 28 29 29 3b 72 65 74 75 72 6e 20 75 61 7d 3b 5f 2e 78 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 76 61 28 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 5f 2e 77 61 28 62 3f 62 2e 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 28 61 29 3a 61 29 7d 3b 5f 2e 79 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 20 Data Ascii: {return c};a=sa.createPolicy("goog#html",{createHTML:b,createScript:b,createScriptURL:b})}catch(c){}return a};_.va=function(){ua===void 0&&(ua=ta());return ua};_.xa=function(a){var b=_.va();return new _.wa(b?b.createScriptURL(a):a)};_.ya=function(a){if(a
2024-09-27 04:01:41 UTC	1390	IN	Data Raw: 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 69 66 28 62 3d 3d 31 26 26 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 72 67 75 6d 65 6e 74 73 5b 30 5d 29 29 72 65 74 75 72 6e 20 57 61 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 5b 30 5d 29 3b 66 6f 72 28 76 61 72 20 63 3d 7b 7d 2c 64 3d 30 3b 64 3c 62 3b 64 2b 2b 29 63 5b 61 72 67 75 6d 65 6e 74 73 5b 64 5d 5d 3d 21 30 3b 72 65 74 75 72 6e 20 63 7d 3b 5f 2e 58 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3b 72 65 74 75 72 6e 28 62 3d 28 64 3d 28 63 3d 62 2e 64 6f 63 75 6d 65 6e 74 29 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 29 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 64 2e 63 61 6c 6c 28 63 2c 61 2b 22 5b 6e 6f 6e 63 65 5d 22 29 29 3f 62 2e 6e 6f 6e 63 65 7c 7c 62 2e 67 Data Ascii: ents.length;if(b==1&&Array.isArray(arguments[0]))return Wa.apply(null,arguments[0]);for(var c={},d=0;d<b;d++)c[arguments[d]]=!0;return c};_.Xa=function(a,b){var c,d;return(b=(d=(c=b.document).querySelector)==null?void 0:d.call(c,a+"[nonce]"))?b.nonce\|\|b.g
2024-09-27 04:01:41 UTC	1390	IN	Data Raw: 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 61 22 29 3b 7d 3b 5f 2e 6d 62 3d 6c 62 28 74 68 69 73 29 3b 77 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 5f 2e 6d 62 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d Data Ascii: obal&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.mb=lb(this);w=function(a,b){if(b)a:{var c=_.mb;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a]
2024-09-27 04:01:41 UTC	1390	IN	Data Raw: 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 6a 62 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 64 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b 5f 2e 70 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 5f 2e 79 28 61 29 3b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 3b 71 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 3b 0a 72 62 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 73 Data Ascii: )return{next:jb(a)};throw Error("d`"+String(a));};_.pb=function(a){if(!(a instanceof Array)){a=_.y(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a};qb=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)};rb=typeof Object.ass
2024-09-27 04:01:41 UTC	1390	IN	Data Raw: 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 63 2c 64 29 7d 65 6c 73 65 20 61 5b 63 5d 3d 62 5b 63 5d 3b 61 2e 4f 3d 62 2e 70 72 6f 74 6f 74 79 70 65 7d 3b 5f 2e 45 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 4e 75 6d 62 65 72 28 74 68 69 73 29 2c 62 3d 5b 5d 2c 63 3d 61 3b 63 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 62 5b 63 2d 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 72 65 74 75 72 6e 20 62 7d 3b 77 28 22 52 65 66 6c 65 63 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a Data Ascii: Properties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.defineProperty(a,c,d)}else a[c]=b[c];a.O=b.prototype};_.Ea=function(){for(var a=Number(this),b=[],c=a;c<arguments.length;c++)b[c-a]=arguments[c];return b};w("Reflect",function(a){return a?a:
2024-09-27 04:01:41 UTC	1390	IN	Data Raw: 61 3b 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 48 28 67 29 3a 74 68 69 73 2e 73 28 67 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 48 3d 0a 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6c 29 7b 74 68 69 73 2e 6f 28 6c 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 4a 28 68 2c 67 29 3a 74 68 69 73 2e 73 28 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 42 28 32 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 42 28 31 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 42 3d 66 Data Ascii: a;default:h=!1}h?this.H(g):this.s(g)}};e.prototype.H=function(g){var h=void 0;try{h=g.then}catch(l){this.o(l);return}typeof h=="function"?this.J(h,g):this.s(g)};e.prototype.o=function(g){this.B(2,g)};e.prototype.s=function(g){this.B(1,g)};e.prototype.B=f
2024-09-27 04:01:41 UTC	1390	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 73 77 69 74 63 68 28 6d 2e 67 29 7b 63 61 73 65 20 31 3a 67 28 6d 2e 6a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6d 2e 6a 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6a 60 22 2b 6d 2e 67 29 3b 7d 7d 76 61 72 20 6d 3d 74 68 69 73 3b 74 68 69 73 2e 68 3d 3d 0a 6e 75 6c 6c 3f 66 2e 68 28 6c 29 3a 74 68 69 73 2e 68 2e 70 75 73 68 28 6c 29 3b 74 68 69 73 2e 41 3d 21 30 7d 3b 65 2e 72 65 73 6f 6c 76 65 3d 63 3b 65 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 67 29 Data Ascii: unction(g){return this.then(void 0,g)};e.prototype.Nd=function(g,h){function l(){switch(m.g){case 1:g(m.j);break;case 2:h(m.j);break;default:throw Error("j`"+m.g);}}var m=this;this.h==null?f.h(l):this.h.push(l);this.A=!0};e.resolve=c;e.reject=function(g)
2024-09-27 04:01:41 UTC	1390	IN	Data Raw: 29 3b 72 65 74 75 72 6e 20 6d 28 6e 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6d 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6e 3d 6e 65 77 20 61 28 5b 5b 6c 2c 32 5d 2c 5b 6d 2c 33 5d 5d 29 3b 69 66 28 6e 2e 67 65 74 28 6c 29 21 3d 32 7c 7c 6e 2e 67 65 74 28 6d 29 21 3d 33 29 72 65 74 75 72 6e 21 31 3b 6e 2e 64 65 6c 65 74 65 28 6c 29 3b 6e 2e 73 65 74 28 6d 2c 34 29 3b 72 65 74 75 72 6e 21 6e 2e 68 61 73 28 6c 29 26 26 6e 2e 67 65 74 28 6d 29 3d 3d 34 7d 63 61 74 63 68 28 70 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 0a 76 61 72 20 66 3d 22 24 Data Ascii: );return m(n)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var l=Object.seal({}),m=Object.seal({}),n=new a([[l,2],[m,3]]);if(n.get(l)!=2\|\|n.get(m)!=3)return!1;n.delete(l);n.set(m,4);return!n.has(l)&&n.get(m)==4}catch(p){return!1}}())return a;var f="$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49744	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:41 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-27 04:01:41 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=45873 Date: Fri, 27 Sep 2024 04:01:41 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49747	104.17.24.14	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:42 UTC	378	OUT	GET /ajax/libs/axios/1.6.8/axios.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:01:42 UTC	932	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:01:42 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"65f4b028-3aab" Last-Modified: Fri, 15 Mar 2024 20:31:36 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 302418 Expires: Wed, 17 Sep 2025 04:01:42 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sxuV6O8IVUaBFHO1RIytxgbEeBOCR5ORMORN%2F736U8nJX%2FRRwczusd%2BQ8aprudOoYkslW8AAyhFpV%2FzgovHMdCbz5x4aKX4fv605%2BIhZX6cZ96BJPF8NOYEMwWzsbfuc41siUyjV"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8c9898104aa87c8a-EWR
2024-09-27 04:01:42 UTC	437	IN	Data Raw: 37 62 66 62 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 74 29 3a 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 65 7c 7c 73 65 6c 66 29 2e 61 78 69 6f 73 3d 74 28 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 76 61 72 Data Ascii: 7bfb!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).axios=t()}(this,(function(){"use strict";function e(e,t){var
2024-09-27 04:01:42 UTC	1369	IN	Data Raw: 2e 61 70 70 6c 79 28 72 2c 6e 29 7d 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 31 3b 72 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3a 7b 7d 3b 72 25 32 3f 65 28 4f 62 6a 65 63 74 28 6e 29 2c 21 30 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 28 74 2c 65 2c 6e 5b 65 5d 29 7d 29 29 3a 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 74 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 Data Ascii: .apply(r,n)}return r}function t(t){for(var r=1;r<arguments.length;r++){var n=null!=arguments[r]?arguments[r]:{};r%2?e(Object(n),!0).forEach((function(e){c(t,e,n[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescrip
2024-09-27 04:01:42 UTC	1369	IN	Data Raw: 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 28 65 2c 74 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 6e 76 6f 6b 65 28 74 2c 65 29 7d 29 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 52 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 2c 69 2c 61 2c 73 29 7b 76 61 72 20 75 3d 68 28 65 5b 6e 5d 2c 65 2c 69 29 3b 69 66 28 22 74 68 72 6f 77 22 21 3d 3d 75 2e 74 79 70 65 29 7b 76 61 72 20 63 3d 75 2e 61 72 67 2c 66 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 66 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 66 26 26 6f 2e 63 61 6c 6c 28 66 2c 22 5f 5f 61 77 61 69 74 22 29 3f 74 2e 72 65 73 6f 6c 76 65 28 66 2e 5f 5f 61 77 61 69 74 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 28 22 6e Data Ascii: h((function(t){f(e,t,(function(e){return this._invoke(t,e)}))}))}function R(e,t){function r(n,i,a,s){var u=h(e[n],e,i);if("throw"!==u.type){var c=u.arg,f=c.value;return f&&"object"==typeof f&&o.call(f,"__await")?t.resolve(f.__await).then((function(e){r("n
2024-09-27 04:01:42 UTC	1369	IN	Data Raw: 65 73 20 6e 6f 74 20 70 72 6f 76 69 64 65 20 61 20 27 22 2b 6e 2b 22 27 20 6d 65 74 68 6f 64 22 29 29 2c 76 3b 76 61 72 20 69 3d 68 28 6f 2c 74 2e 69 74 65 72 61 74 6f 72 2c 72 2e 61 72 67 29 3b 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 69 2e 74 79 70 65 29 72 65 74 75 72 6e 20 72 2e 6d 65 74 68 6f 64 3d 22 74 68 72 6f 77 22 2c 72 2e 61 72 67 3d 69 2e 61 72 67 2c 72 2e 64 65 6c 65 67 61 74 65 3d 6e 75 6c 6c 2c 76 3b 76 61 72 20 61 3d 69 2e 61 72 67 3b 72 65 74 75 72 6e 20 61 3f 61 2e 64 6f 6e 65 3f 28 72 5b 74 2e 72 65 73 75 6c 74 4e 61 6d 65 5d 3d 61 2e 76 61 6c 75 65 2c 72 2e 6e 65 78 74 3d 74 2e 6e 65 78 74 4c 6f 63 2c 22 72 65 74 75 72 6e 22 21 3d 3d 72 2e 6d 65 74 68 6f 64 26 26 28 72 2e 6d 65 74 68 6f 64 3d 22 6e 65 78 74 22 2c 72 2e 61 72 67 3d 65 29 Data Ascii: es not provide a '"+n+"' method")),v;var i=h(o,t.iterator,r.arg);if("throw"===i.type)return r.method="throw",r.arg=i.arg,r.delegate=null,v;var a=i.arg;return a?a.done?(r[t.resultName]=a.value,r.next=t.nextLoc,"return"!==r.method&&(r.method="next",r.arg=e)
2024-09-27 04:01:42 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 22 29 29 2c 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 53 29 2c 65 7d 2c 74 2e 61 77 72 61 70 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 7b 5f 5f 61 77 61 69 74 3a 65 7d 7d 2c 6a 28 52 2e 70 72 6f 74 6f 74 79 70 65 29 2c 66 28 52 2e 70 72 6f 74 6f 74 79 70 65 2c 75 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 29 29 2c 74 2e 41 73 79 6e 63 49 74 65 72 61 74 6f 72 3d 52 2c 74 2e 61 73 79 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 6e 2c 6f 2c 69 29 7b 76 6f 69 64 20 30 3d 3d 3d 69 26 26 28 69 3d 50 72 6f 6d 69 73 65 29 3b 76 61 72 20 61 3d 6e 65 77 20 52 28 6c 28 65 2c 72 2c 6e 2c 6f 29 2c 69 29 3b 72 65 74 75 72 6e 20 74 2e 69 73 47 65 6e 65 72 61 74 6f 72 Data Ascii: nction")),e.prototype=Object.create(S),e},t.awrap=function(e){return{__await:e}},j(R.prototype),f(R.prototype,u,(function(){return this})),t.AsyncIterator=R,t.async=function(e,r,n,o,i){void 0===i&&(i=Promise);var a=new R(l(e,r,n,o),i);return t.isGenerator
2024-09-27 04:01:42 UTC	1369	IN	Data Raw: 6e 61 6c 6c 79 4c 6f 63 22 29 3b 69 66 28 75 26 26 63 29 7b 69 66 28 74 68 69 73 2e 70 72 65 76 3c 61 2e 63 61 74 63 68 4c 6f 63 29 72 65 74 75 72 6e 20 6e 28 61 2e 63 61 74 63 68 4c 6f 63 2c 21 30 29 3b 69 66 28 74 68 69 73 2e 70 72 65 76 3c 61 2e 66 69 6e 61 6c 6c 79 4c 6f 63 29 72 65 74 75 72 6e 20 6e 28 61 2e 66 69 6e 61 6c 6c 79 4c 6f 63 29 7d 65 6c 73 65 20 69 66 28 75 29 7b 69 66 28 74 68 69 73 2e 70 72 65 76 3c 61 2e 63 61 74 63 68 4c 6f 63 29 72 65 74 75 72 6e 20 6e 28 61 2e 63 61 74 63 68 4c 6f 63 2c 21 30 29 7d 65 6c 73 65 7b 69 66 28 21 63 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 74 72 79 20 73 74 61 74 65 6d 65 6e 74 20 77 69 74 68 6f 75 74 20 63 61 74 63 68 20 6f 72 20 66 69 6e 61 6c 6c 79 22 29 3b 69 66 28 74 68 69 73 2e 70 72 Data Ascii: nallyLoc");if(u&&c){if(this.prev<a.catchLoc)return n(a.catchLoc,!0);if(this.prev<a.finallyLoc)return n(a.finallyLoc)}else if(u){if(this.prev<a.catchLoc)return n(a.catchLoc,!0)}else{if(!c)throw new Error("try statement without catch or finally");if(this.pr
2024-09-27 04:01:42 UTC	1369	IN	Data Raw: 65 78 74 22 3d 3d 3d 74 68 69 73 2e 6d 65 74 68 6f 64 26 26 28 74 68 69 73 2e 61 72 67 3d 65 29 2c 76 7d 7d 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 65 7c 7c 21 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 72 3d 65 5b 53 79 6d 62 6f 6c 2e 74 6f 50 72 69 6d 69 74 69 76 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 29 7b 76 61 72 20 6e 3d 72 2e 63 61 6c 6c 28 65 2c 74 7c 7c 22 64 65 66 61 75 6c 74 22 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 6e 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 40 40 74 6f 50 72 69 6d 69 74 69 76 65 20 6d 75 73 74 20 72 65 74 75 Data Ascii: ext"===this.method&&(this.arg=e),v}},t}function n(e){var t=function(e,t){if("object"!=typeof e\|\|!e)return e;var r=e[Symbol.toPrimitive];if(void 0!==r){var n=r.call(e,t\|\|"default");if("object"!=typeof n)return n;throw new TypeError("@@toPrimitive must retu
2024-09-27 04:01:42 UTC	1369	IN	Data Raw: 75 3d 21 30 2c 63 3d 21 31 3b 74 72 79 7b 69 66 28 69 3d 28 72 3d 72 2e 63 61 6c 6c 28 65 29 29 2e 6e 65 78 74 2c 30 3d 3d 3d 74 29 7b 69 66 28 4f 62 6a 65 63 74 28 72 29 21 3d 3d 72 29 72 65 74 75 72 6e 3b 75 3d 21 31 7d 65 6c 73 65 20 66 6f 72 28 3b 21 28 75 3d 28 6e 3d 69 2e 63 61 6c 6c 28 72 29 29 2e 64 6f 6e 65 29 26 26 28 73 2e 70 75 73 68 28 6e 2e 76 61 6c 75 65 29 2c 73 2e 6c 65 6e 67 74 68 21 3d 3d 74 29 3b 75 3d 21 30 29 3b 7d 63 61 74 63 68 28 65 29 7b 63 3d 21 30 2c 6f 3d 65 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 69 66 28 21 75 26 26 6e 75 6c 6c 21 3d 72 2e 72 65 74 75 72 6e 26 26 28 61 3d 72 2e 72 65 74 75 72 6e 28 29 2c 4f 62 6a 65 63 74 28 61 29 21 3d 3d 61 29 29 72 65 74 75 72 6e 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 63 29 74 68 72 6f 77 20 Data Ascii: u=!0,c=!1;try{if(i=(r=r.call(e)).next,0===t){if(Object(r)!==r)return;u=!1}else for(;!(u=(n=i.call(r)).done)&&(s.push(n.value),s.length!==t);u=!0);}catch(e){c=!0,o=e}finally{try{if(!u&&null!=r.return&&(a=r.return(),Object(a)!==a))return}finally{if(c)throw
2024-09-27 04:01:42 UTC	1369	IN	Data Raw: 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 45 3d 28 67 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 62 2e 63 61 6c 6c 28 65 29 3b 72 65 74 75 72 6e 20 67 5b 74 5d 7c 7c 28 67 5b 74 5d 3d 74 2e 73 6c 69 63 65 28 38 2c 2d 31 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 29 2c 4f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 45 28 74 29 3d 3d 3d 65 7d 7d 2c 53 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6f 28 74 29 3d 3d 3d 65 7d 7d 2c 6a 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 2c 52 3d Data Ascii: etPrototypeOf,E=(g=Object.create(null),function(e){var t=b.call(e);return g[t]\|\|(g[t]=t.slice(8,-1).toLowerCase())}),O=function(e){return e=e.toLowerCase(),function(t){return E(t)===e}},S=function(e){return function(t){return o(t)===e}},j=Array.isArray,R=
2024-09-27 04:01:42 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 65 2c 72 29 7d 7d 28 29 2c 47 3d 4f 28 22 52 65 67 45 78 70 22 29 2c 57 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 65 29 2c 6e 3d 7b 7d 3b 44 28 72 2c 28 66 75 6e 63 74 69 6f 6e 28 72 2c 6f 29 7b 76 61 72 20 69 3b 21 31 21 3d 3d 28 69 3d 74 28 72 2c 6f 2c 65 29 29 26 26 28 6e 5b 6f 5d 3d 69 7c 7c 72 29 7d 29 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 65 2c Data Ascii: unction(e){var t=Object.prototype.hasOwnProperty;return function(e,r){return t.call(e,r)}}(),G=O("RegExp"),W=function(e,t){var r=Object.getOwnPropertyDescriptors(e),n={};D(r,(function(r,o){var i;!1!==(i=t(r,o,e))&&(n[o]=i\|\|r)})),Object.defineProperties(e,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49748	151.101.2.137	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:42 UTC	363	OUT	GET /jquery-3.7.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:01:42 UTC	610	IN	HTTP/1.1 200 OK Connection: close Content-Length: 70264 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-11278" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 27 Sep 2024 04:01:42 GMT Age: 200223 X-Served-By: cache-lga21987-LGA, cache-ewr-kewr1740033-EWR X-Cache: HIT, HIT X-Cache-Hits: 48, 1 X-Timer: S1727409703.523252,VS0,VE1 Vary: Accept-Encoding
2024-09-27 04:01:42 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 64 65 70 72 65 63 61 74 65 64 2f 61 6a 61 78 2d 65 76 65 6e 74 2d 61 6c 69 61 73 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 Data Ascii: /*! jQuery v3.7.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-deprecated/ajax-event-alias,-effects,-effects/animatedSelector,-effects/Tween \| (c) OpenJS Foundation and oth
2024-09-27 04:01:42 UTC	16384	IN	Data Raw: 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 65 2e 6e 6f 64 65 54 79 70 65 3c 36 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 70 61 72 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 78 2e 70 73 65 75 64 6f 73 2e 65 6d 70 74 79 28 65 29 7d 2c 68 65 61 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6a 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7d 2c 69 6e 70 75 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4c 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7d 2c 62 75 74 74 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 65 28 65 2c 22 69 6e 70 75 74 22 29 26 26 22 62 75 74 74 6f 6e 22 3d 3d 3d 65 2e 74 79 70 65 7c 7c 66 65 28 65 2c 22 62 75 74 74 Data Ascii: .nextSibling)if(e.nodeType<6)return!1;return!0},parent:function(e){return!x.pseudos.empty(e)},header:function(e){return j.test(e.nodeName)},input:function(e){return L.test(e.nodeName)},button:function(e){return fe(e,"input")&&"button"===e.type\|\|fe(e,"butt
2024-09-27 04:01:42 UTC	16384	IN	Data Raw: 74 65 20 6f 2e 73 74 6f 70 2c 69 2e 63 61 6c 6c 28 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 63 65 2e 64 65 71 75 65 75 65 28 65 2c 74 29 7d 2c 6f 29 29 2c 21 72 26 26 6f 26 26 6f 2e 65 6d 70 74 79 2e 66 69 72 65 28 29 7d 2c 5f 71 75 65 75 65 48 6f 6f 6b 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 2b 22 71 75 65 75 65 48 6f 6f 6b 73 22 3b 72 65 74 75 72 6e 20 5f 2e 67 65 74 28 65 2c 6e 29 7c 7c 5f 2e 61 63 63 65 73 73 28 65 2c 6e 2c 7b 65 6d 70 74 79 3a 63 65 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6f 6e 63 65 20 6d 65 6d 6f 72 79 22 29 2e 61 64 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 2e 72 65 6d 6f 76 65 28 65 2c 5b 74 2b 22 71 75 65 75 65 22 2c 6e 5d 29 7d 29 7d 29 7d 7d 29 2c 63 65 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 71 75 65 75 65 Data Ascii: te o.stop,i.call(e,function(){ce.dequeue(e,t)},o)),!r&&o&&o.empty.fire()},_queueHooks:function(e,t){var n=t+"queueHooks";return _.get(e,n)\|\|_.access(e,n,{empty:ce.Callbacks("once memory").add(function(){_.remove(e,[t+"queue",n])})})}}),ce.fn.extend({queue
2024-09-27 04:01:42 UTC	16384	IN	Data Raw: 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 5b 5d 2c 72 3d 63 65 28 65 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 2d 31 2c 6f 3d 30 3b 6f 3c 3d 69 3b 6f 2b 2b 29 74 3d 6f 3d 3d 3d 69 3f 74 68 69 73 3a 74 68 69 73 2e 63 6c 6f 6e 65 28 21 30 29 2c 63 65 28 72 5b 6f 5d 29 5b 61 5d 28 74 29 2c 73 2e 61 70 70 6c 79 28 6e 2c 74 2e 67 65 74 28 29 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 6e 29 7d 7d 29 3b 76 61 72 20 24 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 51 2b 22 29 28 3f 21 70 78 29 5b 61 2d 7a 25 5d 2b 24 22 2c 22 69 22 29 2c 5f 65 3d 2f 5e 2d 2d 2f 2c 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3b 72 65 74 75 72 6e 20 74 Data Ascii: ){for(var t,n=[],r=ce(e),i=r.length-1,o=0;o<=i;o++)t=o===i?this:this.clone(!0),ce(r[o])[a](t),s.apply(n,t.get());return this.pushStack(n)}});var $e=new RegExp("^("+Q+")(?!px)[a-z%]+$","i"),_e=/^--/,ze=function(e){var t=e.ownerDocument.defaultView;return t
2024-09-27 04:01:42 UTC	4728	IN	Data Raw: 62 6f 64 79 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 65 28 74 68 69 73 29 2e 72 65 70 6c 61 63 65 57 69 74 68 28 74 68 69 73 2e 63 68 69 6c 64 4e 6f 64 65 73 29 7d 29 2c 74 68 69 73 7d 7d 29 2c 63 65 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 68 69 64 64 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 63 65 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 76 69 73 69 62 6c 65 28 65 29 7d 2c 63 65 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 76 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 28 65 2e 6f 66 66 73 65 74 57 69 64 74 68 7c 7c 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7c 7c 65 2e 67 65 74 43 6c 69 65 6e 74 52 65 63 74 73 28 29 2e 6c 65 6e 67 74 68 29 7d 2c 6c 65 2e 63 72 65 61 74 65 48 Data Ascii: body").each(function(){ce(this).replaceWith(this.childNodes)}),this}}),ce.expr.pseudos.hidden=function(e){return!ce.expr.pseudos.visible(e)},ce.expr.pseudos.visible=function(e){return!!(e.offsetWidth\|\|e.offsetHeight\|\|e.getClientRects().length)},le.createH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49746	150.171.27.10	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:42 UTC	999	OUT	GET /action/0?ti=20058379&tm=gtm002&Ver=2&mid=02a8a785-8918-43e2-b5d0-e92e6622cee3&sid=720096c0d19411eea29537e3b25514f1&vid=acb5f8f0164d11eeb349c77596053fd5&vids=0&msclkid=N&pi=918639831&lg=ru-RU&sw=1680&sh=1050&sc=30&tl=TWINT%3A%20Die%20Bezahl-App%20der%20Schweiz%20-%20Bezahlen,%20Geld%20versenden%20%26%20vieles%20mehr&p=https%3A%2F%2Fwww.twint.ch%2F&r=&lt=490&evt=pageLoad&sv=1&rn=879876 HTTP/1.1 Host: bat.bing.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://datechf.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE
2024-09-27 04:01:42 UTC	1028	IN	HTTP/1.1 204 No Content Cache-Control: no-cache, must-revalidate Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Set-Cookie: MSPTC=bnhCpW5vf7BvfH5AALb8QWtPH35s7-1saCvYXgPmUv4; domain=.bing.com; expires=Wed, 22-Oct-2025 04:01:42 GMT; path=/; Partitioned; secure; SameSite=None Set-Cookie: MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; domain=.bing.com; expires=Wed, 22-Oct-2025 04:01:42 GMT; path=/; SameSite=None; Secure; Priority=High; Set-Cookie: MR=0; domain=bat.bing.com; expires=Fri, 04-Oct-2024 04:01:42 GMT; path=/; SameSite=None; Secure; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Origin: * X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: AE50252B8CA54A878C008E2B726C1227 Ref B: EWR30EDGE1619 Ref C: 2024-09-27T04:01:42Z Date: Fri, 27 Sep 2024 04:01:42 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49752	212.102.56.179	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:43 UTC	525	OUT	GET /loader.js? HTTP/1.1 Host: www.smartsuppchat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://datechf.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:01:43 UTC	648	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:01:43 GMT Content-Type: application/javascript Content-Length: 17586 Connection: close Last-Modified: Thu, 27 Jun 2024 06:10:45 GMT ETag: "667d0265-44b2" Expires: Thu, 27 Jun 2024 06:18:07 GMT Cache-Control: max-age=300 Cache-Control: public, s-maxage=60 X-77-NZT: EgwB1GY4sQG2zzoAAAwBJRPCNAH3MQAAAA X-77-NZT-Ray: 1cb09c0e1ad9a9cc272ef666b96d1730 X-Accel-Expires: @1727409706 X-Accel-Date: 1727394648 X-77-Cache: HIT X-77-Age: 15055 Vary: Accept-Encoding Server: CDN77-Turbo X-Accel-Date-Max: 1722078715 X-Cache: REVALIDATED X-Age: 15055 X-77-POP: frankfurtDE Accept-Ranges: bytes
2024-09-27 04:01:43 UTC	15736	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6c 6f 61 64 65 72 2e 74 65 6d 70 6c 61 74 65 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 74 3d 7b 32 32 38 3a 74 3d 3e 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 21 31 3b 2d 31 21 3d 3d 6e 61 76 69 67 61 74 6f 72 2e 61 70 70 56 65 72 73 69 6f 6e 2e 69 6e 64 65 78 4f 66 28 22 4d 53 49 45 20 31 30 22 29 26 26 28 74 3d 21 30 29 3b 76 61 72 20 65 2c 6e 3d 5b 5d 2c 72 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2c 6f 3d 74 3f 72 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 64 6f 53 63 72 6f 6c Data Ascii: /! For license information please see loader.template.js.LICENSE.txt /(()=>{var t={228:t=>{t.exports=function(){var t=!1;-1!==navigator.appVersion.indexOf("MSIE 10")&&(t=!0);var e,n=[],r="object"==typeof document&&document,o=t?r.documentElement.doScrol
2024-09-27 04:01:43 UTC	1850	IN	Data Raw: 65 78 65 63 75 74 65 28 72 29 7d 63 61 74 63 68 28 74 29 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 74 29 7d 7d 29 29 2c 74 68 69 73 2e 5f 70 75 73 68 41 70 69 2e 70 75 73 68 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 72 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 6e 2c 30 29 3b 74 72 79 7b 65 2e 6f 70 74 69 6f 6e 73 2e 77 69 64 67 65 74 54 72 61 63 6b 65 72 45 6e 61 62 6c 65 64 26 26 28 30 2c 69 2e 74 72 61 63 6b 4f 70 65 72 61 74 69 6f 6e 29 28 65 2e 6f 70 74 69 6f 6e 73 2c 72 5b 30 5d 29 2c 74 2e 65 78 65 63 75 74 65 28 72 29 7d 63 61 74 63 68 28 74 29 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 74 29 7d 7d 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6f 6e 53 74 61 72 74 75 70 29 74 72 79 7b 74 68 69 73 2e 6f 70 Data Ascii: execute(r)}catch(t){console.log(t)}})),this._pushApi.push=function(n){var r=Array.prototype.slice.call(n,0);try{e.options.widgetTrackerEnabled&&(0,i.trackOperation)(e.options,r[0]),t.execute(r)}catch(t){console.log(t)}}),this.options.onStartup)try{this.op

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49754	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:43 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-27 04:01:44 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=45817 Date: Fri, 27 Sep 2024 04:01:43 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-27 04:01:44 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49755	188.114.96.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:43 UTC	651	OUT	GET /socket.io/?EIO=4&transport=polling&t=P8nf450 HTTP/1.1 Host: datechf.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://datechf.cc/de/receive/79469380 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w
2024-09-27 04:01:44 UTC	600	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:01:44 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: no-store CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8c%2FdmuOdsodm5JoTaC7%2Fwlja8X2ZFj5%2B%2BmYkT1EkSFVY0NO5Vk98x%2BohD%2Bdf73UmzpX82S95%2BjH%2FQ8fCBFCQiNNgltvx43Ht2QCbkRDeyYHpzkRl56A6OGVKBlkI"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c9898198f8243fa-EWR alt-svc: h3=":443"; ma=86400
2024-09-27 04:01:44 UTC	124	IN	Data Raw: 37 36 0d 0a 30 7b 22 73 69 64 22 3a 22 78 53 67 55 4a 38 34 4b 4d 67 50 4c 58 63 4a 32 41 44 48 6a 22 2c 22 75 70 67 72 61 64 65 73 22 3a 5b 22 77 65 62 73 6f 63 6b 65 74 22 5d 2c 22 70 69 6e 67 49 6e 74 65 72 76 61 6c 22 3a 32 35 30 30 30 2c 22 70 69 6e 67 54 69 6d 65 6f 75 74 22 3a 32 30 30 30 30 2c 22 6d 61 78 50 61 79 6c 6f 61 64 22 3a 31 30 30 30 30 30 30 7d 0d 0a Data Ascii: 760{"sid":"xSgUJ84KMgPLXcJ2ADHj","upgrades":["websocket"],"pingInterval":25000,"pingTimeout":20000,"maxPayload":1000000}
2024-09-27 04:01:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49762	188.114.97.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:44 UTC	443	OUT	GET /socket.io/socket.io.js HTTP/1.1 Host: datechf.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w
2024-09-27 04:01:44 UTC	618	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:01:44 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=14400 ETag: W/"4.7.2" CF-Cache-Status: HIT Age: 3 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pewmH6AVEFS5fKFBq6kwZiNaoDBDem2ZZaap4lDRBfFe9AG%2BLLTaN3DgvePPUEz05K%2FtrL7w%2BdNZkzojWA3%2FO9wD%2B9%2BFy1cm4sXZw1%2FKV%2FAZXi5F%2FUGntMAZfkSV"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c98981c2db04390-EWR
2024-09-27 04:01:44 UTC	751	IN	Data Raw: 37 64 33 34 0d 0a 2f 2a 21 0a 20 2a 20 53 6f 63 6b 65 74 2e 49 4f 20 76 34 2e 37 2e 32 0a 20 2a 20 28 63 29 20 32 30 31 34 2d 32 30 32 33 20 47 75 69 6c 6c 65 72 6d 6f 20 52 61 75 63 68 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 2e 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 20 28 67 6c 6f 62 61 6c 2c 20 66 61 63 74 6f 72 79 29 20 7b 0a 20 20 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 20 3d 3d 3d 20 27 6f 62 6a 65 63 74 27 20 26 26 20 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3f 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3d 20 66 61 63 74 6f 72 79 28 29 20 3a 0a 20 20 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e Data Ascii: 7d34/! Socket.IO v4.7.2 * (c) 2014-2023 Guillermo Rauch * Released under the MIT License. */(function (global, factory) { typeof exports === 'object' && typeof module !== 'undefined' ? module.exports = factory() : typeof define === 'function
2024-09-27 04:01:44 UTC	1369	IN	Data Raw: 3f 20 22 73 79 6d 62 6f 6c 22 20 3a 20 74 79 70 65 6f 66 20 6f 62 6a 3b 0a 20 20 20 20 7d 2c 20 5f 74 79 70 65 6f 66 28 6f 62 6a 29 3b 0a 20 20 7d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 5f 63 6c 61 73 73 43 61 6c 6c 43 68 65 63 6b 28 69 6e 73 74 61 6e 63 65 2c 20 43 6f 6e 73 74 72 75 63 74 6f 72 29 20 7b 0a 20 20 20 20 69 66 20 28 21 28 69 6e 73 74 61 6e 63 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 43 6f 6e 73 74 72 75 63 74 6f 72 29 29 20 7b 0a 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 0a 20 20 20 20 7d 0a 20 20 7d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 5f 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 74 61 72 67 Data Ascii: ? "symbol" : typeof obj; }, _typeof(obj); } function _classCallCheck(instance, Constructor) { if (!(instance instanceof Constructor)) { throw new TypeError("Cannot call a class as a function"); } } function _defineProperties(targ
2024-09-27 04:01:44 UTC	1369	IN	Data Raw: 6c 61 73 73 2c 20 73 75 70 65 72 43 6c 61 73 73 29 20 7b 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 73 75 70 65 72 43 6c 61 73 73 20 21 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 26 26 20 73 75 70 65 72 43 6c 61 73 73 20 21 3d 3d 20 6e 75 6c 6c 29 20 7b 0a 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 73 75 62 43 6c 61 73 73 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 73 75 70 65 72 43 6c 61 73 73 20 26 26 20 73 75 70 65 72 43 6c 61 73 73 2e 70 72 6f 74 6f 74 79 70 65 2c 20 7b 0a 20 20 20 20 Data Ascii: lass, superClass) { if (typeof superClass !== "function" && superClass !== null) { throw new TypeError("Super expression must either be null or a function"); } subClass.prototype = Object.create(superClass && superClass.prototype, {
2024-09-27 04:01:44 UTC	1369	IN	Data Raw: 28 50 61 72 65 6e 74 2c 20 61 72 67 73 2c 20 43 6c 61 73 73 29 20 7b 0a 20 20 20 20 69 66 20 28 5f 69 73 4e 61 74 69 76 65 52 65 66 6c 65 63 74 43 6f 6e 73 74 72 75 63 74 28 29 29 20 7b 0a 20 20 20 20 20 20 5f 63 6f 6e 73 74 72 75 63 74 20 3d 20 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 2e 62 69 6e 64 28 29 3b 0a 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 5f 63 6f 6e 73 74 72 75 63 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 5f 63 6f 6e 73 74 72 75 63 74 28 50 61 72 65 6e 74 2c 20 61 72 67 73 2c 20 43 6c 61 73 73 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 61 20 3d 20 5b 6e 75 6c 6c 5d 3b 0a 20 20 20 20 20 20 20 20 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 20 61 72 67 73 29 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 43 6f 6e 73 74 Data Ascii: (Parent, args, Class) { if (_isNativeReflectConstruct()) { _construct = Reflect.construct.bind(); } else { _construct = function _construct(Parent, args, Class) { var a = [null]; a.push.apply(a, args); var Const
2024-09-27 04:01:44 UTC	1369	IN	Data Raw: 20 20 77 72 69 74 61 62 6c 65 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 20 74 72 75 65 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 5f 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 57 72 61 70 70 65 72 2c 20 43 6c 61 73 73 29 3b 0a 20 20 20 20 7d 3b 0a 20 20 20 20 72 65 74 75 72 6e 20 5f 77 72 61 70 4e 61 74 69 76 65 53 75 70 65 72 28 43 6c 61 73 73 29 3b 0a 20 20 7d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 5f 61 73 73 65 72 74 54 68 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 28 73 65 6c 66 29 20 7b 0a 20 20 20 20 69 66 20 28 73 65 6c 66 20 3d 3d 3d 20 76 6f 69 64 20 30 29 20 7b 0a 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 Data Ascii: writable: true, configurable: true } }); return _setPrototypeOf(Wrapper, Class); }; return _wrapNativeSuper(Class); } function _assertThisInitialized(self) { if (self === void 0) { throw new ReferenceE
2024-09-27 04:01:44 UTC	1369	IN	Data Raw: 20 20 20 72 65 74 75 72 6e 20 6f 62 6a 65 63 74 3b 0a 20 20 7d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 5f 67 65 74 28 29 20 7b 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 20 21 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 20 26 26 20 52 65 66 6c 65 63 74 2e 67 65 74 29 20 7b 0a 20 20 20 20 20 20 5f 67 65 74 20 3d 20 52 65 66 6c 65 63 74 2e 67 65 74 2e 62 69 6e 64 28 29 3b 0a 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 5f 67 65 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 5f 67 65 74 28 74 61 72 67 65 74 2c 20 70 72 6f 70 65 72 74 79 2c 20 72 65 63 65 69 76 65 72 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 62 61 73 65 20 3d 20 5f 73 75 70 65 72 50 72 6f 70 42 61 73 65 28 74 61 72 67 65 74 2c 20 70 72 6f 70 65 72 74 79 29 3b 0a Data Ascii: return object; } function _get() { if (typeof Reflect !== "undefined" && Reflect.get) { _get = Reflect.get.bind(); } else { _get = function _get(target, property, receiver) { var base = _superPropBase(target, property);
2024-09-27 04:01:44 UTC	1369	IN	Data Raw: 29 20 7c 7c 20 28 69 74 20 3d 20 5f 75 6e 73 75 70 70 6f 72 74 65 64 49 74 65 72 61 62 6c 65 54 6f 41 72 72 61 79 28 6f 29 29 20 7c 7c 20 61 6c 6c 6f 77 41 72 72 61 79 4c 69 6b 65 20 26 26 20 6f 20 26 26 20 74 79 70 65 6f 66 20 6f 2e 6c 65 6e 67 74 68 20 3d 3d 3d 20 22 6e 75 6d 62 65 72 22 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 69 74 29 20 6f 20 3d 20 69 74 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 69 20 3d 20 30 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 46 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 73 3a 20 46 2c 0a 20 20 20 20 20 20 20 20 20 20 6e 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 69 20 3e Data Ascii: ) \|\| (it = _unsupportedIterableToArray(o)) \|\| allowArrayLike && o && typeof o.length === "number") { if (it) o = it; var i = 0; var F = function () {}; return { s: F, n: function () { if (i >
2024-09-27 04:01:44 UTC	1369	IN	Data Raw: 64 65 66 69 6e 65 64 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 72 65 73 20 3d 20 70 72 69 6d 2e 63 61 6c 6c 28 69 6e 70 75 74 2c 20 68 69 6e 74 20 7c 7c 20 22 64 65 66 61 75 6c 74 22 29 3b 0a 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 72 65 73 20 21 3d 3d 20 22 6f 62 6a 65 63 74 22 29 20 72 65 74 75 72 6e 20 72 65 73 3b 0a 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 40 40 74 6f 50 72 69 6d 69 74 69 76 65 20 6d 75 73 74 20 72 65 74 75 72 6e 20 61 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 2e 22 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 72 65 74 75 72 6e 20 28 68 69 6e 74 20 3d 3d 3d 20 22 73 74 72 69 6e 67 22 20 3f 20 53 74 72 69 6e 67 20 3a 20 4e 75 6d 62 65 72 29 28 69 6e 70 75 74 29 3b 0a 20 20 7d 0a 20 20 Data Ascii: defined) { var res = prim.call(input, hint \|\| "default"); if (typeof res !== "object") return res; throw new TypeError("@@toPrimitive must return a primitive value."); } return (hint === "string" ? String : Number)(input); }
2024-09-27 04:01:44 UTC	1369	IN	Data Raw: 20 66 75 6e 63 74 69 6f 6e 20 65 6e 63 6f 64 65 50 61 63 6b 65 74 28 5f 72 65 66 2c 20 73 75 70 70 6f 72 74 73 42 69 6e 61 72 79 2c 20 63 61 6c 6c 62 61 63 6b 29 20 7b 0a 20 20 20 20 76 61 72 20 74 79 70 65 20 3d 20 5f 72 65 66 2e 74 79 70 65 2c 0a 20 20 20 20 20 20 64 61 74 61 20 3d 20 5f 72 65 66 2e 64 61 74 61 3b 0a 20 20 20 20 69 66 20 28 77 69 74 68 4e 61 74 69 76 65 42 6c 6f 62 24 31 20 26 26 20 64 61 74 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 42 6c 6f 62 29 20 7b 0a 20 20 20 20 20 20 69 66 20 28 73 75 70 70 6f 72 74 73 42 69 6e 61 72 79 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 63 61 6c 6c 62 61 63 6b 28 64 61 74 61 29 3b 0a 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 65 6e 63 6f 64 65 42 Data Ascii: function encodePacket(_ref, supportsBinary, callback) { var type = _ref.type, data = _ref.data; if (withNativeBlob$1 && data instanceof Blob) { if (supportsBinary) { return callback(data); } else { return encodeB
2024-09-27 04:01:44 UTC	1369	IN	Data Raw: 6c 6c 62 61 63 6b 29 3b 0a 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 77 69 74 68 4e 61 74 69 76 65 41 72 72 61 79 42 75 66 66 65 72 24 32 20 26 26 20 28 70 61 63 6b 65 74 2e 64 61 74 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 20 7c 7c 20 69 73 56 69 65 77 24 31 28 70 61 63 6b 65 74 2e 64 61 74 61 29 29 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 63 61 6c 6c 62 61 63 6b 28 74 6f 41 72 72 61 79 28 70 61 63 6b 65 74 2e 64 61 74 61 29 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 65 6e 63 6f 64 65 50 61 63 6b 65 74 28 70 61 63 6b 65 74 2c 20 66 61 6c 73 65 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 6e 63 6f 64 65 64 29 20 7b 0a 20 20 20 20 20 20 69 66 20 28 21 54 45 58 54 5f 45 4e 43 4f 44 45 52 29 20 7b 0a 20 20 20 20 20 20 20 20 Data Ascii: llback); } else if (withNativeArrayBuffer$2 && (packet.data instanceof ArrayBuffer \|\| isView$1(packet.data))) { return callback(toArray(packet.data)); } encodePacket(packet, false, function (encoded) { if (!TEXT_ENCODER) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49761	142.250.185.238	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:44 UTC	493	OUT	GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1 Host: translate.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:01:44 UTC	745	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 27 Sep 2024 04:01:44 GMT Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Set-Cookie: __Secure-BUCKET=CMwD; Domain=.google.com; Expires=Wed, 26-Mar-2025 04:01:44 GMT; Path=/; Secure; HttpOnly; SameSite=lax Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-27 04:01:44 UTC	645	IN	Data Raw: 38 30 30 30 0d 0a 0a 20 20 20 20 2f 2f 20 67 6f 2f 6d 73 73 2d 73 65 74 75 70 23 37 2d 6c 6f 61 64 2d 74 68 65 2d 6a 73 2d 6f 72 2d 63 73 73 2d 66 72 6f 6d 2d 79 6f 75 72 2d 69 6e 69 74 69 61 6c 2d 70 61 67 65 0a 20 20 20 20 69 66 28 21 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 29 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 65 3b 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 3d 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 3b 0a 20 20 Data Ascii: 8000 // go/mss-setup#7-load-the-js-or-css-from-your-initial-page if(!window['_DumpException']) { const _DumpException = window['_DumpException'] \|\| function(e) { throw e; }; window['_DumpException'] = _DumpException;
2024-09-27 04:01:44 UTC	1390	IN	Data Raw: 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 62 61 2c 66 61 2c 6e 61 2c 71 61 2c 72 61 2c 74 61 2c 41 61 2c 52 61 2c 53 61 2c 56 61 2c 57 61 2c 64 62 2c 6a 62 2c 6b 62 2c 6c 62 2c 77 2c 6e 62 2c 6f 62 2c 71 62 2c 72 62 2c 73 62 2c 75 62 2c 79 62 3b 5f 2e 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 29 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 5f 2e 61 61 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 3b 63 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 63 29 7d 61 26 26 28 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 53 74 72 69 6e 67 28 61 29 29 3b 62 21 3d 3d 76 Data Ascii: Identifier: Apache-2.0*/var ba,fa,na,qa,ra,ta,Aa,Ra,Sa,Va,Wa,db,jb,kb,lb,w,nb,ob,qb,rb,sb,ub,yb;_.aa=function(a,b){if(Error.captureStackTrace)Error.captureStackTrace(this,_.aa);else{var c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));b!==v
2024-09-27 04:01:44 UTC	1390	IN	Data Raw: 7b 72 65 74 75 72 6e 20 63 7d 3b 61 3d 73 61 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 67 6f 6f 67 23 68 74 6d 6c 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 62 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 62 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 62 7d 29 7d 63 61 74 63 68 28 63 29 7b 7d 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 76 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 75 61 3d 3d 3d 76 6f 69 64 20 30 26 26 28 75 61 3d 74 61 28 29 29 3b 72 65 74 75 72 6e 20 75 61 7d 3b 5f 2e 78 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 76 61 28 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 5f 2e 77 61 28 62 3f 62 2e 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 28 61 29 3a 61 29 7d 3b 5f 2e 79 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 20 Data Ascii: {return c};a=sa.createPolicy("goog#html",{createHTML:b,createScript:b,createScriptURL:b})}catch(c){}return a};_.va=function(){ua===void 0&&(ua=ta());return ua};_.xa=function(a){var b=_.va();return new _.wa(b?b.createScriptURL(a):a)};_.ya=function(a){if(a
2024-09-27 04:01:44 UTC	1390	IN	Data Raw: 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 69 66 28 62 3d 3d 31 26 26 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 72 67 75 6d 65 6e 74 73 5b 30 5d 29 29 72 65 74 75 72 6e 20 57 61 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 5b 30 5d 29 3b 66 6f 72 28 76 61 72 20 63 3d 7b 7d 2c 64 3d 30 3b 64 3c 62 3b 64 2b 2b 29 63 5b 61 72 67 75 6d 65 6e 74 73 5b 64 5d 5d 3d 21 30 3b 72 65 74 75 72 6e 20 63 7d 3b 5f 2e 58 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3b 72 65 74 75 72 6e 28 62 3d 28 64 3d 28 63 3d 62 2e 64 6f 63 75 6d 65 6e 74 29 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 29 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 64 2e 63 61 6c 6c 28 63 2c 61 2b 22 5b 6e 6f 6e 63 65 5d 22 29 29 3f 62 2e 6e 6f 6e 63 65 7c 7c 62 2e 67 Data Ascii: ents.length;if(b==1&&Array.isArray(arguments[0]))return Wa.apply(null,arguments[0]);for(var c={},d=0;d<b;d++)c[arguments[d]]=!0;return c};_.Xa=function(a,b){var c,d;return(b=(d=(c=b.document).querySelector)==null?void 0:d.call(c,a+"[nonce]"))?b.nonce\|\|b.g
2024-09-27 04:01:44 UTC	1390	IN	Data Raw: 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 61 22 29 3b 7d 3b 5f 2e 6d 62 3d 6c 62 28 74 68 69 73 29 3b 77 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 5f 2e 6d 62 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d Data Ascii: obal&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.mb=lb(this);w=function(a,b){if(b)a:{var c=_.mb;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a]
2024-09-27 04:01:44 UTC	1390	IN	Data Raw: 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 6a 62 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 64 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b 5f 2e 70 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 5f 2e 79 28 61 29 3b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 3b 71 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 3b 0a 72 62 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 73 Data Ascii: )return{next:jb(a)};throw Error("d`"+String(a));};_.pb=function(a){if(!(a instanceof Array)){a=_.y(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a};qb=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)};rb=typeof Object.ass
2024-09-27 04:01:44 UTC	1390	IN	Data Raw: 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 63 2c 64 29 7d 65 6c 73 65 20 61 5b 63 5d 3d 62 5b 63 5d 3b 61 2e 4f 3d 62 2e 70 72 6f 74 6f 74 79 70 65 7d 3b 5f 2e 45 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 4e 75 6d 62 65 72 28 74 68 69 73 29 2c 62 3d 5b 5d 2c 63 3d 61 3b 63 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 62 5b 63 2d 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 72 65 74 75 72 6e 20 62 7d 3b 77 28 22 52 65 66 6c 65 63 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a Data Ascii: Properties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.defineProperty(a,c,d)}else a[c]=b[c];a.O=b.prototype};_.Ea=function(){for(var a=Number(this),b=[],c=a;c<arguments.length;c++)b[c-a]=arguments[c];return b};w("Reflect",function(a){return a?a:
2024-09-27 04:01:44 UTC	1390	IN	Data Raw: 61 3b 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 48 28 67 29 3a 74 68 69 73 2e 73 28 67 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 48 3d 0a 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6c 29 7b 74 68 69 73 2e 6f 28 6c 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 4a 28 68 2c 67 29 3a 74 68 69 73 2e 73 28 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 42 28 32 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 42 28 31 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 42 3d 66 Data Ascii: a;default:h=!1}h?this.H(g):this.s(g)}};e.prototype.H=function(g){var h=void 0;try{h=g.then}catch(l){this.o(l);return}typeof h=="function"?this.J(h,g):this.s(g)};e.prototype.o=function(g){this.B(2,g)};e.prototype.s=function(g){this.B(1,g)};e.prototype.B=f
2024-09-27 04:01:44 UTC	1390	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 73 77 69 74 63 68 28 6d 2e 67 29 7b 63 61 73 65 20 31 3a 67 28 6d 2e 6a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6d 2e 6a 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6a 60 22 2b 6d 2e 67 29 3b 7d 7d 76 61 72 20 6d 3d 74 68 69 73 3b 74 68 69 73 2e 68 3d 3d 0a 6e 75 6c 6c 3f 66 2e 68 28 6c 29 3a 74 68 69 73 2e 68 2e 70 75 73 68 28 6c 29 3b 74 68 69 73 2e 41 3d 21 30 7d 3b 65 2e 72 65 73 6f 6c 76 65 3d 63 3b 65 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 67 29 Data Ascii: unction(g){return this.then(void 0,g)};e.prototype.Nd=function(g,h){function l(){switch(m.g){case 1:g(m.j);break;case 2:h(m.j);break;default:throw Error("j`"+m.g);}}var m=this;this.h==null?f.h(l):this.h.push(l);this.A=!0};e.resolve=c;e.reject=function(g)
2024-09-27 04:01:44 UTC	1390	IN	Data Raw: 29 3b 72 65 74 75 72 6e 20 6d 28 6e 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6d 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6e 3d 6e 65 77 20 61 28 5b 5b 6c 2c 32 5d 2c 5b 6d 2c 33 5d 5d 29 3b 69 66 28 6e 2e 67 65 74 28 6c 29 21 3d 32 7c 7c 6e 2e 67 65 74 28 6d 29 21 3d 33 29 72 65 74 75 72 6e 21 31 3b 6e 2e 64 65 6c 65 74 65 28 6c 29 3b 6e 2e 73 65 74 28 6d 2c 34 29 3b 72 65 74 75 72 6e 21 6e 2e 68 61 73 28 6c 29 26 26 6e 2e 67 65 74 28 6d 29 3d 3d 34 7d 63 61 74 63 68 28 70 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 0a 76 61 72 20 66 3d 22 24 Data Ascii: );return m(n)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var l=Object.seal({}),m=Object.seal({}),n=new a([[l,2],[m,3]]);if(n.get(l)!=2\|\|n.get(m)!=3)return!1;n.delete(l);n.set(m,4);return!n.has(l)&&n.get(m)==4}catch(p){return!1}}())return a;var f="$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49768	188.114.97.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:45 UTC	465	OUT	GET /socket.io/?EIO=4&transport=polling&t=P8nf450 HTTP/1.1 Host: datechf.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w
2024-09-27 04:01:45 UTC	566	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:01:45 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: no-store CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8R3kCD4rhhN0Y1n4yZvnbGYVPi9ulwAuTd5EacLZiitBmq7x%2FKUM7TjATzrdjnmLdh7i3%2FZn3Eoo%2BNniWy%2B7C79h9aMV%2BCefWP674SeIFuknih%2FlpShJxks9GFYs"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c989821b87f7d1c-EWR
2024-09-27 04:01:45 UTC	124	IN	Data Raw: 37 36 0d 0a 30 7b 22 73 69 64 22 3a 22 69 73 68 67 4b 34 32 2d 4e 46 56 56 77 42 36 50 41 44 48 6b 22 2c 22 75 70 67 72 61 64 65 73 22 3a 5b 22 77 65 62 73 6f 63 6b 65 74 22 5d 2c 22 70 69 6e 67 49 6e 74 65 72 76 61 6c 22 3a 32 35 30 30 30 2c 22 70 69 6e 67 54 69 6d 65 6f 75 74 22 3a 32 30 30 30 30 2c 22 6d 61 78 50 61 79 6c 6f 61 64 22 3a 31 30 30 30 30 30 30 7d 0d 0a Data Ascii: 760{"sid":"ishgK42-NFVVwB6PADHk","upgrades":["websocket"],"pingInterval":25000,"pingTimeout":20000,"maxPayload":1000000}
2024-09-27 04:01:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49763	195.181.170.18	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:45 UTC	355	OUT	GET /loader.js? HTTP/1.1 Host: www.smartsuppchat.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:01:45 UTC	646	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:01:45 GMT Content-Type: application/javascript Content-Length: 17586 Connection: close Last-Modified: Thu, 27 Jun 2024 06:10:45 GMT ETag: "667d0265-44b2" Expires: Thu, 27 Jun 2024 06:18:07 GMT Cache-Control: max-age=300 Cache-Control: public, s-maxage=60 X-77-NZT: EgwBw7WqEQG2YgwAAAwBJRPCNAH3OQAAAA X-77-NZT-Ray: 4c1562243a1a8664292ef666c8097810 X-Accel-Expires: @1727409706 X-Accel-Date: 1727406535 X-77-Cache: HIT X-77-Age: 3170 Vary: Accept-Encoding Server: CDN77-Turbo X-Accel-Date-Max: 1721333858 X-Cache: REVALIDATED X-Age: 3170 X-77-POP: frankfurtDE Accept-Ranges: bytes
2024-09-27 04:01:45 UTC	15738	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6c 6f 61 64 65 72 2e 74 65 6d 70 6c 61 74 65 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 74 3d 7b 32 32 38 3a 74 3d 3e 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 21 31 3b 2d 31 21 3d 3d 6e 61 76 69 67 61 74 6f 72 2e 61 70 70 56 65 72 73 69 6f 6e 2e 69 6e 64 65 78 4f 66 28 22 4d 53 49 45 20 31 30 22 29 26 26 28 74 3d 21 30 29 3b 76 61 72 20 65 2c 6e 3d 5b 5d 2c 72 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2c 6f 3d 74 3f 72 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 64 6f 53 63 72 6f 6c Data Ascii: /! For license information please see loader.template.js.LICENSE.txt /(()=>{var t={228:t=>{t.exports=function(){var t=!1;-1!==navigator.appVersion.indexOf("MSIE 10")&&(t=!0);var e,n=[],r="object"==typeof document&&document,o=t?r.documentElement.doScrol
2024-09-27 04:01:45 UTC	1848	IN	Data Raw: 65 63 75 74 65 28 72 29 7d 63 61 74 63 68 28 74 29 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 74 29 7d 7d 29 29 2c 74 68 69 73 2e 5f 70 75 73 68 41 70 69 2e 70 75 73 68 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 72 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 6e 2c 30 29 3b 74 72 79 7b 65 2e 6f 70 74 69 6f 6e 73 2e 77 69 64 67 65 74 54 72 61 63 6b 65 72 45 6e 61 62 6c 65 64 26 26 28 30 2c 69 2e 74 72 61 63 6b 4f 70 65 72 61 74 69 6f 6e 29 28 65 2e 6f 70 74 69 6f 6e 73 2c 72 5b 30 5d 29 2c 74 2e 65 78 65 63 75 74 65 28 72 29 7d 63 61 74 63 68 28 74 29 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 74 29 7d 7d 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6f 6e 53 74 61 72 74 75 70 29 74 72 79 7b 74 68 69 73 2e 6f 70 74 69 Data Ascii: ecute(r)}catch(t){console.log(t)}})),this._pushApi.push=function(n){var r=Array.prototype.slice.call(n,0);try{e.options.widgetTrackerEnabled&&(0,i.trackOperation)(e.options,r[0]),t.execute(r)}catch(t){console.log(t)}}),this.options.onStartup)try{this.opti

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49764	18.158.199.82	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:45 UTC	623	OUT	GET /widget/2c2a729197af9ea70bef8e5db0c0d79373d6af7d.json HTTP/1.1 Host: bootstrap.smartsuppchat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://datechf.cc Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://datechf.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:01:45 UTC	323	IN	HTTP/1.1 403 Forbidden Date: Fri, 27 Sep 2024 04:01:45 GMT Content-Type: application/json; charset=utf-8 Content-Length: 57 Connection: close x-version: 8b3ca176698fc26311ade373172146d69a1a7c02 Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: private, max-age=0, must-revalidate X-Hit: redis
2024-09-27 04:01:45 UTC	57	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 22 61 63 63 6f 75 6e 74 5f 62 6c 6f 63 6b 65 64 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 41 63 63 6f 75 6e 74 20 69 73 20 62 6c 6f 63 6b 65 64 22 7d Data Ascii: {"code":"account_blocked","message":"Account is blocked"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49773	188.114.96.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:45 UTC	764	OUT	POST /socket.io/?EIO=4&transport=polling&t=P8nf4WI&sid=xSgUJ84KMgPLXcJ2ADHj HTTP/1.1 Host: datechf.cc Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://datechf.cc Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://datechf.cc/de/receive/79469380 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w
2024-09-27 04:01:45 UTC	2	OUT	Data Raw: 34 30 Data Ascii: 40
2024-09-27 04:01:45 UTC	540	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:01:45 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close cache-control: no-store CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SdTWeeNyRnmTX6QM7hsW8ifapB0q1YBKZivfdqt5zCJAsHftGmEHOOAe%2FBmnA1yX8AxVB2Yl72JrT8pRi6gWHcFOywLpGGnI5c59Jqypigl3rjej8mNb3rhnyHcK"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c989824aaa4438e-EWR
2024-09-27 04:01:45 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-09-27 04:01:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49774	188.114.96.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:45 UTC	676	OUT	GET /socket.io/?EIO=4&transport=polling&t=P8nf4WM&sid=xSgUJ84KMgPLXcJ2ADHj HTTP/1.1 Host: datechf.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://datechf.cc/de/receive/79469380 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w
2024-09-27 04:01:46 UTC	556	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:01:45 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: no-store CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZM8l80zpbd0OX9KTHYzzXcE7a6LoqSEvB7K2WbDxypehJo91sXdRtjphEAPvVFa0SDAFZJCA3N%2BHyeoDpXDL6dXxTt4Lpn5thA2pvWkxIIFKGsgYVLgjp1kTYWZA"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c989824deaa18cc-EWR
2024-09-27 04:01:46 UTC	38	IN	Data Raw: 32 30 0d 0a 34 30 7b 22 73 69 64 22 3a 22 4e 6c 54 6b 55 6d 6d 66 31 4a 74 46 61 75 77 58 41 44 48 6c 22 7d 0d 0a Data Ascii: 2040{"sid":"NlTkUmmf1JtFauwXADHl"}
2024-09-27 04:01:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49775	188.114.96.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:45 UTC	632	OUT	GET /socket.io/?EIO=4&transport=websocket&sid=xSgUJ84KMgPLXcJ2ADHj HTTP/1.1 Host: datechf.cc Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://datechf.cc Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w Sec-WebSocket-Key: unyc/2Yjs0iXPkC6FMVTpw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-09-27 04:01:46 UTC	547	IN	HTTP/1.1 400 Bad Request Date: Fri, 27 Sep 2024 04:01:46 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ENZHoBoscw9QMJgd%2F1%2FHGRmUs0FxoHU3u3rRG2O1ja1B%2FAT%2FUJgvaEAcPiTG%2BgX%2F%2FpJbKFvXBGxkgL8DxDAE3W3nUwppChlMF%2BMgl%2BsUATSnzNc0ncynC2UXyfJh"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c9898252c0343af-EWR
2024-09-27 04:01:46 UTC	40	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}
2024-09-27 04:01:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49779	142.250.184.196	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:46 UTC	684	OUT	GET /images/cleardot.gif HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://datechf.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:01:46 UTC	697	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/gif Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 43 Date: Fri, 27 Sep 2024 04:01:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 04:01:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49785	142.250.184.196	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:47 UTC	684	OUT	GET /images/cleardot.gif HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://datechf.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:01:47 UTC	697	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/gif Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 43 Date: Fri, 27 Sep 2024 04:01:47 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 04:01:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49792	188.114.96.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:47 UTC	765	OUT	POST /socket.io/?EIO=4&transport=polling&t=P8nf4zB&sid=xSgUJ84KMgPLXcJ2ADHj HTTP/1.1 Host: datechf.cc Connection: keep-alive Content-Length: 26 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://datechf.cc Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://datechf.cc/de/receive/79469380 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w
2024-09-27 04:01:47 UTC	26	OUT	Data Raw: 34 32 5b 22 6d 61 64 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 22 2c 22 30 22 5d Data Ascii: 42["madeNotification","0"]
2024-09-27 04:01:47 UTC	546	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:01:47 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close cache-control: no-store CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z7a9OLx2DQvphu2zBS8EfdQO%2FYy6ZJxXo%2FusZFiJcACLhr%2FvepHCcIn5rerAlNfkMZXUMaOS9aUtdcPEV2L1HcV%2Bx8mpcoLWyP1F6abApV31wTHXXQVAnuiR4waW"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c98982e3dbe9e16-EWR
2024-09-27 04:01:47 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-09-27 04:01:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49793	188.114.96.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:47 UTC	676	OUT	GET /socket.io/?EIO=4&transport=polling&t=P8nf4z9&sid=xSgUJ84KMgPLXcJ2ADHj HTTP/1.1 Host: datechf.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://datechf.cc/de/receive/79469380 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w
2024-09-27 04:01:47 UTC	557	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:01:47 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close cache-control: no-store CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RxETXR1M42yxvVTlQNVjlm04GtBRGP9lu%2FJBOqhWCrIZ%2Bpyu7sJWJAhYB3iQwrKjBnyDhlN8mAcpTKAo0S2g%2B7hGtT%2BcA3%2FBXS5FOalqVAEgIJLIhvWYLEC056%2BJ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c98982e6f717c7e-EWR
2024-09-27 04:01:47 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49794	188.114.97.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:47 UTC	530	OUT	GET /socket.io/?EIO=4&transport=polling&t=P8nf4WI&sid=xSgUJ84KMgPLXcJ2ADHj HTTP/1.1 Host: datechf.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
2024-09-27 04:01:47 UTC	509	IN	HTTP/1.1 400 Bad Request Date: Fri, 27 Sep 2024 04:01:47 GMT Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2dWzq%2F6uQr3gnTL0Bn44xpKbhN%2FJcrM%2FZFrcBVWPtkik%2BCaBW32pLi%2Fho1l8B40e6%2FEyoZxAkEw9pZF6X6sVkNQzcvSFFnXKgOOYguOkT2xCzKxgcooL4HYcx99q"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c98982eebe47d0e-EWR
2024-09-27 04:01:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49795	188.114.97.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:47 UTC	530	OUT	GET /socket.io/?EIO=4&transport=polling&t=P8nf4WM&sid=xSgUJ84KMgPLXcJ2ADHj HTTP/1.1 Host: datechf.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
2024-09-27 04:01:47 UTC	535	IN	HTTP/1.1 400 Bad Request Date: Fri, 27 Sep 2024 04:01:47 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S3sMQUVWpNyS4H7qhl9R0QMic8JD2Wr2SYUFM6OEPJeMwV6iQrHniX2v6CISpYocnSYZu50K6ZLl4KNVbOaD51mquAdMzPWFuGKVyMLn%2FlFSSZORBLx24zn%2B%2B8n7"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c98982f0ed5420b-EWR
2024-09-27 04:01:47 UTC	47	IN	Data Raw: 32 39 0d 0a 7b 22 63 6f 64 65 22 3a 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 53 65 73 73 69 6f 6e 20 49 44 20 75 6e 6b 6e 6f 77 6e 22 7d 0d 0a Data Ascii: 29{"code":1,"message":"Session ID unknown"}
2024-09-27 04:01:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49797	216.58.206.68	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:47 UTC	484	OUT	GET /images/cleardot.gif HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __Secure-BUCKET=CMwD
2024-09-27 04:01:48 UTC	697	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/gif Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 43 Date: Fri, 27 Sep 2024 04:01:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 04:01:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49806	35.190.80.1	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:48 UTC	521	OUT	OPTIONS /report/v4?s=S3sMQUVWpNyS4H7qhl9R0QMic8JD2Wr2SYUFM6OEPJeMwV6iQrHniX2v6CISpYocnSYZu50K6ZLl4KNVbOaD51mquAdMzPWFuGKVyMLn%2FlFSSZORBLx24zn%2B%2B8n7 HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://datechf.cc Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:01:48 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Fri, 27 Sep 2024 04:01:48 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49807	188.114.97.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:49 UTC	530	OUT	GET /socket.io/?EIO=4&transport=polling&t=P8nf4zB&sid=xSgUJ84KMgPLXcJ2ADHj HTTP/1.1 Host: datechf.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
2024-09-27 04:01:49 UTC	541	IN	HTTP/1.1 400 Bad Request Date: Fri, 27 Sep 2024 04:01:49 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m5ZxcDXcMnU8ob9wE94edm88biF8ar0ni%2FCKxuC1tCBBpJWi2MHa5yUT4MDBGQb%2FwDI92bbZFd%2FtihXfHWe6fB1qrDi%2FIJ4aE%2BQF%2BrpBf0TLYr9BEw0XavrlqnR8"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c98983b28354277-EWR
2024-09-27 04:01:49 UTC	47	IN	Data Raw: 32 39 0d 0a 7b 22 63 6f 64 65 22 3a 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 53 65 73 73 69 6f 6e 20 49 44 20 75 6e 6b 6e 6f 77 6e 22 7d 0d 0a Data Ascii: 29{"code":1,"message":"Session ID unknown"}
2024-09-27 04:01:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49808	188.114.97.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:49 UTC	530	OUT	GET /socket.io/?EIO=4&transport=polling&t=P8nf4z9&sid=xSgUJ84KMgPLXcJ2ADHj HTTP/1.1 Host: datechf.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
2024-09-27 04:01:49 UTC	533	IN	HTTP/1.1 400 Bad Request Date: Fri, 27 Sep 2024 04:01:49 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cWTsKAbdnXFFkUQaBsvjgIHEtPT7lzTdCSddZLYeQnOLDZw1ib6FBQAtBl%2BMRjvmzTxPNPpn8T2CBqkjoWSA21RjNzWpNKiQpuPwSd6%2Fh7ijKa3rEL5octVG8WWT"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c98983b2cf1c35b-EWR
2024-09-27 04:01:49 UTC	47	IN	Data Raw: 32 39 0d 0a 7b 22 63 6f 64 65 22 3a 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 53 65 73 73 69 6f 6e 20 49 44 20 75 6e 6b 6e 6f 77 6e 22 7d 0d 0a Data Ascii: 29{"code":1,"message":"Session ID unknown"}
2024-09-27 04:01:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49810	188.114.96.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:49 UTC	805	OUT	POST /socket.io/?EIO=4&transport=polling&t=P8nf5Pk&sid=xSgUJ84KMgPLXcJ2ADHj HTTP/1.1 Host: datechf.cc Connection: keep-alive Content-Length: 34 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://datechf.cc Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://datechf.cc/de/receive/79469380 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
2024-09-27 04:01:49 UTC	34	OUT	Data Raw: 34 32 5b 22 6c 69 6e 6b 53 74 61 74 75 73 43 68 65 63 6b 65 72 22 2c 22 37 39 34 36 39 33 38 30 22 5d Data Ascii: 42["linkStatusChecker","79469380"]
2024-09-27 04:01:49 UTC	539	IN	HTTP/1.1 400 Bad Request Date: Fri, 27 Sep 2024 04:01:49 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aIgl0cAWmu%2F2MZHuFeuyp4wODtUbn26sKXXGtCC10WBryI8d9sle%2Bk8pRuKtR6v%2B5%2BOKLNOm5KSh1cHLaH7XeAXklVXp%2FqzmzMdYn069jPGwyeTRzzxJPY0MAsP1"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c98983b2ae9c354-EWR
2024-09-27 04:01:49 UTC	47	IN	Data Raw: 32 39 0d 0a 7b 22 63 6f 64 65 22 3a 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 53 65 73 73 69 6f 6e 20 49 44 20 75 6e 6b 6e 6f 77 6e 22 7d 0d 0a Data Ascii: 29{"code":1,"message":"Session ID unknown"}
2024-09-27 04:01:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49809	216.58.206.68	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:49 UTC	484	OUT	GET /images/cleardot.gif HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __Secure-BUCKET=CMwD
2024-09-27 04:01:49 UTC	697	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/gif Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 43 Date: Fri, 27 Sep 2024 04:01:49 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 04:01:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49811	35.190.80.1	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:49 UTC	468	OUT	POST /report/v4?s=S3sMQUVWpNyS4H7qhl9R0QMic8JD2Wr2SYUFM6OEPJeMwV6iQrHniX2v6CISpYocnSYZu50K6ZLl4KNVbOaD51mquAdMzPWFuGKVyMLn%2FlFSSZORBLx24zn%2B%2B8n7 HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 449 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:01:49 UTC	449	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 33 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 31 36 33 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 38 38 2e 31 31 34 2e 39 37 2e 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 30 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 61 74 65 63 68 66 2e 63 63 2f 73 6f 63 6b 65 Data Ascii: [{"age":3,"body":{"elapsed_time":1163,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"188.114.97.3","status_code":400,"type":"http.error"},"type":"network-error","url":"https://datechf.cc/socke
2024-09-27 04:01:50 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Fri, 27 Sep 2024 04:01:49 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49813	142.250.186.46	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:51 UTC	774	OUT	GET /gen204?sl=auto&tl=de&textlen=1433&ctt=1&ttt=3111&ttl=2143&sr=1&nca=te_time&client=te&logld=vTE_20240925 HTTP/1.1 Host: translate.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://datechf.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:01:51 UTC	1751	IN	HTTP/1.1 204 No Content Content-Type: image/gif; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 27 Sep 2024 04:01:51 GMT Cross-Origin-Resource-Policy: cross-origin P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-PGKOi7KpeWnEiWyLryxvmw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* reporting-endpoints: default="/_/TranslateApiHttp/web-reports?context=eJzjktDikmLw05BicEqfwRoAxEsiLrIeSLzIKsTDsf7Oje1sAi_eLzvMpKSUlF8YX1KUmFeck1iSWpxaVJZaFG9kYGRiYGlkqmdgEV9gAADAORnS" Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Set-Cookie: NID=517=uHE3MPhWkkCAHJpDH1pishVOR2DYGb4VCGR8FWemchSsyuvuwmsiE1fPmcYb8cy-vat5744oZWk9lzdQx-eGkMtCG5oHkHJxpbmzc-IPDj-LYdAi_7nLYb4BOjEbMLc04Iw9jJ28d0aZ82FWxcJUVm6xZxGsIZdSvdTjN3etGqpmcJVcLA; expires=Sat, 29-Mar-2025 04:01:51 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49816	188.114.96.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:51 UTC	691	OUT	GET /socket.io/?EIO=4&transport=polling&t=P8nf5mn HTTP/1.1 Host: datechf.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://datechf.cc/de/receive/79469380 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
2024-09-27 04:01:52 UTC	592	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:01:52 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: no-store CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s5RTifl%2BwrlpgjClQrcs44ucaREe9sRuKlOSzF8MCP3rBLVLvwjd4OsLnpSXqsCK6adwcVGCU468gutJiDRM02NfFReIuAf5PGpghkgCYoo%2Fwpq%2F%2BXyzUHHpv0aL"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c98984b5c035e67-EWR alt-svc: h3=":443"; ma=86400
2024-09-27 04:01:52 UTC	124	IN	Data Raw: 37 36 0d 0a 30 7b 22 73 69 64 22 3a 22 39 79 39 63 65 77 4b 61 73 69 58 70 55 6c 78 39 41 44 48 6d 22 2c 22 75 70 67 72 61 64 65 73 22 3a 5b 22 77 65 62 73 6f 63 6b 65 74 22 5d 2c 22 70 69 6e 67 49 6e 74 65 72 76 61 6c 22 3a 32 35 30 30 30 2c 22 70 69 6e 67 54 69 6d 65 6f 75 74 22 3a 32 30 30 30 30 2c 22 6d 61 78 50 61 79 6c 6f 61 64 22 3a 31 30 30 30 30 30 30 7d 0d 0a Data Ascii: 760{"sid":"9y9cewKasiXpUlx9ADHm","upgrades":["websocket"],"pingInterval":25000,"pingTimeout":20000,"maxPayload":1000000}
2024-09-27 04:01:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49825	188.114.97.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:52 UTC	505	OUT	GET /socket.io/?EIO=4&transport=polling&t=P8nf5mn HTTP/1.1 Host: datechf.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
2024-09-27 04:01:53 UTC	562	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:01:53 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: no-store CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5q%2FpR0FlMaK70GOVO1D6ydQSkSsKo64AAFgwj2OKsMa1vbm2zJ8W%2BWC0Vjg3QImuyNph40j0ffllYp768x9n1w11azDVcu6jjSGbuh%2BgfPXvPoN%2BsWrsxhJL6cxn"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c9898511afc4366-EWR
2024-09-27 04:01:53 UTC	124	IN	Data Raw: 37 36 0d 0a 30 7b 22 73 69 64 22 3a 22 43 65 4e 42 4e 34 67 6f 77 5f 74 46 55 68 53 34 41 44 48 6e 22 2c 22 75 70 67 72 61 64 65 73 22 3a 5b 22 77 65 62 73 6f 63 6b 65 74 22 5d 2c 22 70 69 6e 67 49 6e 74 65 72 76 61 6c 22 3a 32 35 30 30 30 2c 22 70 69 6e 67 54 69 6d 65 6f 75 74 22 3a 32 30 30 30 30 2c 22 6d 61 78 50 61 79 6c 6f 61 64 22 3a 31 30 30 30 30 30 30 7d 0d 0a Data Ascii: 760{"sid":"CeNBN4gow_tFUhS4ADHn","upgrades":["websocket"],"pingInterval":25000,"pingTimeout":20000,"maxPayload":1000000}
2024-09-27 04:01:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49828	188.114.96.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:53 UTC	804	OUT	POST /socket.io/?EIO=4&transport=polling&t=P8nf6Ru&sid=9y9cewKasiXpUlx9ADHm HTTP/1.1 Host: datechf.cc Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://datechf.cc Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://datechf.cc/de/receive/79469380 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
2024-09-27 04:01:53 UTC	2	OUT	Data Raw: 34 30 Data Ascii: 40
2024-09-27 04:01:53 UTC	546	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:01:53 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close cache-control: no-store CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=scPr%2BOqc8DgOTKQtVCFkJFD7KmCJdeRaIKKXBMC4RZkjwcGEO6Hq8eOB50bV%2BGuOE%2BIfS38LkERf5z4Gui4rpsvl0Asqg%2BExjkjdfguxNS8wQnIMVjxFmc8gtIEB"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c989853fe3319e7-EWR
2024-09-27 04:01:53 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-09-27 04:01:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49830	188.114.96.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:53 UTC	672	OUT	GET /socket.io/?EIO=4&transport=websocket&sid=9y9cewKasiXpUlx9ADHm HTTP/1.1 Host: datechf.cc Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://datechf.cc Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de Sec-WebSocket-Key: T0fz0iYS4HrXrOD7vQoP3A== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-09-27 04:01:53 UTC	537	IN	HTTP/1.1 400 Bad Request Date: Fri, 27 Sep 2024 04:01:53 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7uP5dGTqkfC47Vs8WPKNXdtn2E6%2BtQ2qBtW0cHZsI9Y41GS8PEMatLXH9rZp9h16s%2BPwBZAaL9BaINwnR6s9sInNd3HCGKbwuT7ggBmzAsyXW%2FBsa%2B71HXf1o5jH"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c9898540e7443a0-EWR
2024-09-27 04:01:53 UTC	40	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}
2024-09-27 04:01:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49829	188.114.96.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:53 UTC	716	OUT	GET /socket.io/?EIO=4&transport=polling&t=P8nf6S0&sid=9y9cewKasiXpUlx9ADHm HTTP/1.1 Host: datechf.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://datechf.cc/de/receive/79469380 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
2024-09-27 04:01:53 UTC	562	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:01:53 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: no-store CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D9ZAFrW80Pccnb%2BFLuYAwhvyR3YL6wCHLvnF8DJjxh2vyNdY%2FSbwUQh0nchh%2FhtglhLj38iJjCCTASX29YbBlPBPtkDG0Myt456hZRzDLb%2BHnhTm7zKjt4EGuUKl"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c9898540c1742e3-EWR
2024-09-27 04:01:53 UTC	38	IN	Data Raw: 32 30 0d 0a 34 30 7b 22 73 69 64 22 3a 22 78 39 31 6a 74 6d 63 53 66 59 52 4f 46 33 6d 50 41 44 48 6f 22 7d 0d 0a Data Ascii: 2040{"sid":"x91jtmcSfYROF3mPADHo"}
2024-09-27 04:01:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49834	188.114.97.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:54 UTC	530	OUT	GET /socket.io/?EIO=4&transport=polling&t=P8nf6Ru&sid=9y9cewKasiXpUlx9ADHm HTTP/1.1 Host: datechf.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
2024-09-27 04:01:54 UTC	529	IN	HTTP/1.1 400 Bad Request Date: Fri, 27 Sep 2024 04:01:54 GMT Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TMXeKJdQhu3QRARVQC2irBZ2jz6KNnQfrJG%2BewEKgqTavSR4axg3AVhP5ouJtglvJFLUxCYtyWAnjGR560qZNsbXLnUPr0cIQFXIFj19AXMxN84iMybNilY3aM3T"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c989859a87041d2-EWR alt-svc: h3=":443"; ma=86400
2024-09-27 04:01:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49837	188.114.97.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:54 UTC	530	OUT	GET /socket.io/?EIO=4&transport=polling&t=P8nf6S0&sid=9y9cewKasiXpUlx9ADHm HTTP/1.1 Host: datechf.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
2024-09-27 04:01:54 UTC	553	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:01:54 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close cache-control: no-store CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xVXtyG5ydgsL08jw1aZTueV8%2BRDPOpJTPxIl2qc1Ia%2FF9keFyiaQ6fTayS1wjgYMlYrQVULhbHzbYV0gVOHmuEhbEZlaGPPPu7SfGeY439mFQ%2B4t85PDG%2FQcDFt2"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c98985a6b2e4268-EWR
2024-09-27 04:01:54 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49840	188.114.96.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:54 UTC	716	OUT	GET /socket.io/?EIO=4&transport=polling&t=P8nf6ny&sid=9y9cewKasiXpUlx9ADHm HTTP/1.1 Host: datechf.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://datechf.cc/de/receive/79469380 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
2024-09-27 04:01:55 UTC	535	IN	HTTP/1.1 400 Bad Request Date: Fri, 27 Sep 2024 04:01:55 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9ygmv24kNdpgckvDdHxDTKcgITYEk8QL1AoKT1kery%2BElC%2F1i9cKKmV0ptOcO4CGzJ%2FNlrEA9v1MTrTa50Bb8dOtK3nG6d8o72KhMqdPSSQBVYzUYGdgBJIsvvw9"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c98985e681b43ef-EWR
2024-09-27 04:01:55 UTC	47	IN	Data Raw: 32 39 0d 0a 7b 22 63 6f 64 65 22 3a 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 53 65 73 73 69 6f 6e 20 49 44 20 75 6e 6b 6e 6f 77 6e 22 7d 0d 0a Data Ascii: 29{"code":1,"message":"Session ID unknown"}
2024-09-27 04:01:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49839	188.114.96.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:54 UTC	805	OUT	POST /socket.io/?EIO=4&transport=polling&t=P8nf6of&sid=9y9cewKasiXpUlx9ADHm HTTP/1.1 Host: datechf.cc Connection: keep-alive Content-Length: 26 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://datechf.cc Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://datechf.cc/de/receive/79469380 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
2024-09-27 04:01:54 UTC	26	OUT	Data Raw: 34 32 5b 22 6d 61 64 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 22 2c 22 30 22 5d Data Ascii: 42["madeNotification","0"]
2024-09-27 04:01:55 UTC	533	IN	HTTP/1.1 400 Bad Request Date: Fri, 27 Sep 2024 04:01:55 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rPrUlp2euG83PrUZX6eWPi6eLv5d%2B65dfBQjAGgdM1UZs4UMcVwo0hcHpauLepoguKW%2F4AWzhv6h0bC8tQ9Z1HXM6yJw8D0Ab8LPH1S8qbKxNLFT9i9Qt4otDQsm"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c98985e6a3843a3-EWR
2024-09-27 04:01:55 UTC	47	IN	Data Raw: 32 39 0d 0a 7b 22 63 6f 64 65 22 3a 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 53 65 73 73 69 6f 6e 20 49 44 20 75 6e 6b 6e 6f 77 6e 22 7d 0d 0a Data Ascii: 29{"code":1,"message":"Session ID unknown"}
2024-09-27 04:01:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49844	104.18.94.41	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:55 UTC	580	OUT	GET /turnstile/v0/g/ec4b873d446c/api.js?onload=Jeuhg1&render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.twint.ch sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:01:55 UTC	441	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:01:55 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47262 Connection: close accept-ranges: bytes last-modified: Tue, 17 Sep 2024 16:06:37 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8c9898630d4d5590-EWR
2024-09-27 04:01:55 UTC	928	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 56 74 28 65 2c 72 2c 61 2c 6f 2c 63 2c 6c 2c 67 29 7b 74 72 79 7b 76 61 72 20 66 3d 65 5b 6c 5d 28 67 29 2c 70 3d 66 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 73 29 7b 61 28 73 29 3b 72 65 74 75 72 6e 7d 66 2e 64 6f 6e 65 3f 72 28 70 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 70 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 72 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Vt(e,r,a,o,c,l,g){try{var f=e[l](g),p=f.value}catch(s){a(s);return}f.done?r(p):Promise.resolve(p).then(o,c)}function Wt(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var l=e.apply(r,a);funct
2024-09-27 04:01:55 UTC	1369	IN	Data Raw: 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 74 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 6c 6c 3f 72 3a 7b 7d 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 Data Ascii: ct.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function tt(e,r){return r=r!=null?r:{},Object.getOwnPropertyD
2024-09-27 04:01:55 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 48 74 28 65 29 7c 7c 42 74 28 65 2c 72 29 7c 7c 71 74 28 65 2c 72 29 7c 7c 6a 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 50 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 44 65 28 65 2c 72 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 5d 26 31 29 74 68 72 6f 77 20 6c 5b 31 5d 3b 72 65 74 75 72 6e 20 6c 5b 31 5d 7d 2c 74 72 Data Ascii: function Ae(e,r){return Ht(e)\|\|Bt(e,r)\|\|qt(e,r)\|\|jt()}function P(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function De(e,r){var a={label:0,sent:function(){if(l[0]&1)throw l[1];return l[1]},tr
2024-09-27 04:01:55 UTC	1369	IN	Data Raw: 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 47 74 3d 33 30 30 30 32 30 3b 76 61 72 20 50 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4d 41 4e 41 47 45 44 3d 22 6d 61 6e 61 67 65 64 22 2c Data Ascii: oaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Gt=300020;var Pe=300030;var Ue=300031;var q;(function(e){e.MANAGED="managed",
2024-09-27 04:01:55 UTC	1369	IN	Data Raw: 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 45 4e 44 45 52 3d 22 72 65 6e 64 65 72 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 7d 29 28 70 65 7c 7c 28 70 65 3d 7b 7d 29 29 3b 76 61 72 20 6f 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 7d 29 Data Ascii: al",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(function(e){e.RENDER="render",e.EXECUTE="execute"})(pe\|\|(pe={}));var oe;(function(e){e.EXECUTE="execute"})
2024-09-27 04:01:55 UTC	1369	IN	Data Raw: 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e Data Ascii: archParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clearance_level!=="default"&&r.set("clearance_level",e.params.
2024-09-27 04:01:55 UTC	1369	IN	Data Raw: 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 6c 2c 67 3d 4c 28 43 72 2c 28 6c 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 6c 21 3d 3d 76 6f 69 64 20 30 3f 6c 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 66 2c 70 3d 4c 28 4e 72 2c 28 66 3d 28 61 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 61 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 66 21 3d 3d 76 6f 69 64 20 30 3f 66 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 Data Ascii: ===Se.FAILURE_HAVING_TROUBLES,l,g=L(Cr,(l=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&l!==void 0?l:"nonexistent"),f,p=L(Nr,(f=(a=e.displayLanguage)===null\|\|a===void 0?void 0:a.toLowerCase())!==null&&f!==void 0?f:"nonexistent")
2024-09-27 04:01:55 UTC	1369	IN	Data Raw: 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 67 29 7b 76 61 72 20 66 3d 5b 6e 75 6c 6c 5d 3b 66 2e 70 75 73 68 2e 61 70 70 6c 79 28 66 2c 6c 29 3b 76 61 72 20 70 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 66 29 2c 73 3d 6e 65 77 20 70 3b 72 65 74 75 72 6e 20 67 26 26 4a 28 73 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 73 7d 2c 49 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 Data Ascii: uct:Ie=function(c,l,g){var f=[null];f.push.apply(f,l);var p=Function.bind.apply(c,f),s=new p;return g&&J(s,g.prototype),s},Ie.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Object.getPrototypeOf:function(a){return a.__proto__\|\|Object
2024-09-27 04:01:55 UTC	1369	IN	Data Raw: 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 71 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 57 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 57 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 57 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 54 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 69 66 28 55 28 72 2c 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 72 Data Ascii: flare Turnstile] ".concat(e))}function qe(e){return e.startsWith(We)?e.substring(We.length):null}function K(e){return"".concat(We).concat(e)}function Tt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=document.currentScript;if(U(r,HTMLScriptElement)&&e.test(r
2024-09-27 04:01:55 UTC	1369	IN	Data Raw: 66 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b 76 61 72 20 73 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 73 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 66 65 65 64 62 61 63 6b 22 2c 73 2e 69 64 3d Data Ascii: f.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";var s=document.createElement("div");s.className="cf-turnstile-feedback",s.id=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49846	104.18.95.41	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:56 UTC	764	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/15pzp/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:01:56 UTC	1369	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:01:56 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 164860 Connection: close critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cross-origin-resource-policy: cross-origin accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cross-origin-opener-policy: same-origin document-policy: js-profiling referrer-policy: same-origin content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self' origin-agent-cluster: ?1 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() cross-origin-embedder-policy: require-corp cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
2024-09-27 04:01:56 UTC	52	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 63 39 38 39 38 36 39 31 61 34 62 34 32 62 35 2d 45 57 52 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8c9898691a4b42b5-EWR
2024-09-27 04:01:56 UTC	1317	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-09-27 04:01:56 UTC	1369	IN	Data Raw: 25 3b 6d 61 72 67 69 6e 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 Data Ascii: %;margin:0;overflow:hidden;padding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-web
2024-09-27 04:01:56 UTC	1369	IN	Data Raw: 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 7d 23 73 75 63 63 65 73 73 2d 70 72 65 2d 69 20 6c 69 6e 65 7b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 Data Ascii: ght:30px;width:30px}#success-pre-i line{stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;st
2024-09-27 04:01:56 UTC	1369	IN	Data Raw: 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e Data Ascii: allenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dark #challen
2024-09-27 04:01:56 UTC	1369	IN	Data Raw: 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 Data Ascii: dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-helper-loop
2024-09-27 04:01:56 UTC	1369	IN	Data Raw: 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 61 63 74 69 76 65 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 66 6f 63 75 73 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 31 36 36 33 37 39 7d 23 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 32 35 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 70 78 7d 2e 66 61 69 6c 75 72 65 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 Data Ascii: ,#challenge-overlay a:link,#challenge-overlay a:visited{color:#232323}#challenge-overlay a:active,#challenge-overlay a:focus,#challenge-overlay a:hover{color:#166379}#logo{height:25px;margin-bottom:1px}.failure-circle{stroke-dasharray:166;stroke-dashoffse
2024-09-27 04:01:56 UTC	1369	IN	Data Raw: 6e 3a 61 6c 6c 20 2e 31 73 20 65 61 73 65 2d 69 6e 3b 77 69 64 74 68 3a 32 34 70 78 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 38 7d 2e 63 62 2d 6c 62 20 2e 63 62 2d 69 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 63 62 2d 6c 62 20 2e 63 62 2d 6c 62 2d 74 7b 67 72 69 64 2d 63 6f 6c 75 6d 6e 3a 32 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 63 6f 6e 74 65 6e 74 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c Data Ascii: n:all .1s ease-in;width:24px;z-index:9998}.cb-lb .cb-i:after{border-radius:5px;content:"";position:absolute}.cb-lb .cb-lb-t{grid-column:2;margin-left:8px}.size-compact{font-size:14px}.size-compact #content{align-items:flex-start;display:flex;flex-flow:col
2024-09-27 04:01:56 UTC	1369	IN	Data Raw: 72 74 6c 7d 2e 72 74 6c 20 2e 63 62 2d 6c 62 2d 74 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 72 74 6c 20 23 65 78 70 69 72 65 64 2d 69 2c 2e 72 74 6c 20 23 66 61 69 6c 2d 69 2c 2e 72 74 6c 20 23 6f 76 65 72 72 75 6e 2d 69 2c 2e 72 74 6c 20 23 73 70 69 6e 6e 65 72 2d 69 2c 2e 72 74 6c 20 23 73 75 63 63 65 73 73 2d 69 2c 2e 72 74 6c 20 23 74 69 6d 65 6f 75 74 2d 69 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 Data Ascii: rtl}.rtl .cb-lb-t{margin-left:0;margin-right:8px;padding:0}.rtl #expired-i,.rtl #fail-i,.rtl #overrun-i,.rtl #spinner-i,.rtl #success-i,.rtl #timeout-i{left:255px}.rtl #fr-helper{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px
2024-09-27 04:01:56 UTC	1369	IN	Data Raw: 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 61 63 74 69 76 65 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 66 6f 63 75 73 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c Data Ascii: challenge-error-title a{color:#232323}#challenge-error-title a:active,#challenge-error-title a:focus,#challenge-error-title a:hover{color:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#chall

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49850	104.18.95.41	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:56 UTC	413	OUT	GET /turnstile/v0/g/ec4b873d446c/api.js?onload=Jeuhg1&render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:01:56 UTC	441	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:01:56 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47262 Connection: close accept-ranges: bytes last-modified: Tue, 17 Sep 2024 16:06:37 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8c98986aca558c3b-EWR
2024-09-27 04:01:56 UTC	928	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 56 74 28 65 2c 72 2c 61 2c 6f 2c 63 2c 6c 2c 67 29 7b 74 72 79 7b 76 61 72 20 66 3d 65 5b 6c 5d 28 67 29 2c 70 3d 66 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 73 29 7b 61 28 73 29 3b 72 65 74 75 72 6e 7d 66 2e 64 6f 6e 65 3f 72 28 70 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 70 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 72 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Vt(e,r,a,o,c,l,g){try{var f=e[l](g),p=f.value}catch(s){a(s);return}f.done?r(p):Promise.resolve(p).then(o,c)}function Wt(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var l=e.apply(r,a);funct
2024-09-27 04:01:56 UTC	1369	IN	Data Raw: 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 74 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 6c 6c 3f 72 3a 7b 7d 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 Data Ascii: ct.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function tt(e,r){return r=r!=null?r:{},Object.getOwnPropertyD
2024-09-27 04:01:56 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 48 74 28 65 29 7c 7c 42 74 28 65 2c 72 29 7c 7c 71 74 28 65 2c 72 29 7c 7c 6a 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 50 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 44 65 28 65 2c 72 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 5d 26 31 29 74 68 72 6f 77 20 6c 5b 31 5d 3b 72 65 74 75 72 6e 20 6c 5b 31 5d 7d 2c 74 72 Data Ascii: function Ae(e,r){return Ht(e)\|\|Bt(e,r)\|\|qt(e,r)\|\|jt()}function P(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function De(e,r){var a={label:0,sent:function(){if(l[0]&1)throw l[1];return l[1]},tr
2024-09-27 04:01:56 UTC	1369	IN	Data Raw: 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 47 74 3d 33 30 30 30 32 30 3b 76 61 72 20 50 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4d 41 4e 41 47 45 44 3d 22 6d 61 6e 61 67 65 64 22 2c Data Ascii: oaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Gt=300020;var Pe=300030;var Ue=300031;var q;(function(e){e.MANAGED="managed",
2024-09-27 04:01:56 UTC	1369	IN	Data Raw: 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 45 4e 44 45 52 3d 22 72 65 6e 64 65 72 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 7d 29 28 70 65 7c 7c 28 70 65 3d 7b 7d 29 29 3b 76 61 72 20 6f 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 7d 29 Data Ascii: al",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(function(e){e.RENDER="render",e.EXECUTE="execute"})(pe\|\|(pe={}));var oe;(function(e){e.EXECUTE="execute"})
2024-09-27 04:01:56 UTC	1369	IN	Data Raw: 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e Data Ascii: archParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clearance_level!=="default"&&r.set("clearance_level",e.params.
2024-09-27 04:01:56 UTC	1369	IN	Data Raw: 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 6c 2c 67 3d 4c 28 43 72 2c 28 6c 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 6c 21 3d 3d 76 6f 69 64 20 30 3f 6c 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 66 2c 70 3d 4c 28 4e 72 2c 28 66 3d 28 61 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 61 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 66 21 3d 3d 76 6f 69 64 20 30 3f 66 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 Data Ascii: ===Se.FAILURE_HAVING_TROUBLES,l,g=L(Cr,(l=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&l!==void 0?l:"nonexistent"),f,p=L(Nr,(f=(a=e.displayLanguage)===null\|\|a===void 0?void 0:a.toLowerCase())!==null&&f!==void 0?f:"nonexistent")
2024-09-27 04:01:56 UTC	1369	IN	Data Raw: 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 67 29 7b 76 61 72 20 66 3d 5b 6e 75 6c 6c 5d 3b 66 2e 70 75 73 68 2e 61 70 70 6c 79 28 66 2c 6c 29 3b 76 61 72 20 70 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 66 29 2c 73 3d 6e 65 77 20 70 3b 72 65 74 75 72 6e 20 67 26 26 4a 28 73 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 73 7d 2c 49 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 Data Ascii: uct:Ie=function(c,l,g){var f=[null];f.push.apply(f,l);var p=Function.bind.apply(c,f),s=new p;return g&&J(s,g.prototype),s},Ie.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Object.getPrototypeOf:function(a){return a.__proto__\|\|Object
2024-09-27 04:01:56 UTC	1369	IN	Data Raw: 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 71 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 57 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 57 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 57 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 54 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 69 66 28 55 28 72 2c 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 72 Data Ascii: flare Turnstile] ".concat(e))}function qe(e){return e.startsWith(We)?e.substring(We.length):null}function K(e){return"".concat(We).concat(e)}function Tt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=document.currentScript;if(U(r,HTMLScriptElement)&&e.test(r
2024-09-27 04:01:56 UTC	1369	IN	Data Raw: 66 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b 76 61 72 20 73 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 73 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 66 65 65 64 62 61 63 6b 22 2c 73 2e 69 64 3d Data Ascii: f.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";var s=document.createElement("div");s.className="cf-turnstile-feedback",s.id=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49853	104.18.95.41	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:57 UTC	731	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8c9898691a4b42b5&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/15pzp/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:01:57 UTC	301	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:01:57 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 127091 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8c98986ebdff5e60-EWR
2024-09-27 04:01:57 UTC	1068	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 71 5a 4a 79 54 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.qZJyT2={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fc
2024-09-27 04:01:57 UTC	1369	IN	Data Raw: 32 30 74 68 61 6e 25 32 30 65 78 70 65 63 74 65 64 2e 25 32 30 43 68 65 63 6b 25 32 30 79 6f 75 72 25 32 30 49 6e 74 65 72 6e 65 74 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 61 6e 64 25 32 30 25 33 43 61 25 32 30 63 6c 61 73 73 25 33 44 25 32 32 72 65 66 72 65 73 68 5f 6c 69 6e 6b 25 32 32 25 33 45 72 65 66 72 65 73 68 25 32 30 74 68 65 25 32 30 70 61 67 65 25 33 43 25 32 46 61 25 33 45 25 32 30 69 66 25 32 30 74 68 65 25 32 30 69 73 73 75 65 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 69 6e 76 61 6c 69 64 5f 64 6f 6d 61 69 6e 22 3a 22 49 6e 76 61 6c 69 64 25 32 30 64 6f 6d 61 69 6e 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 69 73 25 32 30 70 Data Ascii: 20than%20expected.%20Check%20your%20Internet%20connection%20and%20%3Ca%20class%3D%22refresh_link%22%3Erefresh%20the%20page%3C%2Fa%3E%20if%20the%20issue%20persists.","invalid_domain":"Invalid%20domain.%20Contact%20the%20Site%20Administrator%20if%20this%20p
2024-09-27 04:01:57 UTC	1369	IN	Data Raw: 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 39 36 38 36 32 34 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 49 28 36 33 30 29 5d 2c 65 4d 5b 67 49 28 31 38 35 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 4a 2c 64 2c 65 2c 66 2c 67 29 7b 67 4a 3d 67 49 2c 64 3d 7b 7d 2c 64 5b 67 4a 28 31 39 34 36 29 5d 3d 67 4a 28 31 39 33 39 29 2c 64 5b 67 4a 28 38 33 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 2a 68 7d 2c 65 3d 64 2c 66 3d 31 2c 67 3d 65 5b 67 4a 28 38 33 36 29 5d 28 31 65 33 2c 65 4d 5b 67 4a 28 31 35 34 39 29 5d 5b 67 4a 28 35 37 37 29 5d 28 32 3c 3c 66 2c 33 32 29 Data Ascii: break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,968624),eM=this\|\|self,eN=eM[gI(630)],eM[gI(1851)]=function(gJ,d,e,f,g){gJ=gI,d={},d[gJ(1946)]=gJ(1939),d[gJ(836)]=function(h,i){return i*h},e=d,f=1,g=e[gJ(836)](1e3,eM[gJ(1549)][gJ(577)](2<<f,32)
2024-09-27 04:01:57 UTC	1369	IN	Data Raw: 4c 28 36 33 38 29 5d 28 44 29 5b 67 4c 28 31 38 30 31 29 5d 28 27 2b 27 2c 67 4c 28 31 38 36 31 29 29 2c 78 5b 67 4c 28 37 39 33 29 5d 28 6b 5b 67 4c 28 31 30 38 31 29 5d 28 6b 5b 67 4c 28 31 30 38 31 29 5d 28 27 76 5f 27 2c 65 4d 5b 67 4c 28 37 37 34 29 5d 5b 67 4c 28 31 34 35 31 29 5d 29 2b 27 3d 27 2c 45 29 29 7d 63 61 74 63 68 28 46 29 7b 7d 7d 2c 65 4d 5b 67 49 28 32 30 32 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 2c 67 2c 68 2c 67 4d 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 28 67 4d 3d 67 49 2c 69 3d 7b 7d 2c 69 5b 67 4d 28 31 30 30 33 29 5d 3d 67 4d 28 31 34 37 31 29 2c 69 5b 67 4d 28 38 36 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 2b 6f 7d 2c 69 5b 67 4d 28 31 35 33 36 29 5d 3d 67 4d 28 31 30 31 34 29 2c Data Ascii: L(638)](D)[gL(1801)]('+',gL(1861)),x[gL(793)](k[gL(1081)](k[gL(1081)]('v_',eM[gL(774)][gL(1451)])+'=',E))}catch(F){}},eM[gI(2023)]=function(d,e,f,g,h,gM,i,j,k,l,m){(gM=gI,i={},i[gM(1003)]=gM(1471),i[gM(866)]=function(n,o){return n+o},i[gM(1536)]=gM(1014),
2024-09-27 04:01:57 UTC	1369	IN	Data Raw: 44 28 31 36 39 34 29 26 26 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 66 6e 29 7d 29 2c 66 70 3d 21 5b 5d 2c 21 65 53 28 67 49 28 31 32 39 35 29 29 26 26 28 66 51 28 29 2c 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 69 65 2c 63 2c 64 2c 65 29 7b 69 65 3d 67 49 2c 63 3d 7b 27 63 6f 64 78 56 27 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 28 29 7d 2c 27 78 55 67 64 4a 27 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 28 29 7d 2c 27 48 41 4f 57 4f 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 3e 67 7d 2c 27 78 42 6e 50 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 2d 67 7d 2c 27 64 68 55 5a 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e Data Ascii: D(1694)&&clearInterval(fn)}),fp=![],!eS(gI(1295))&&(fQ(),setInterval(function(ie,c,d,e){ie=gI,c={'codxV':function(f){return f()},'xUgdJ':function(f){return f()},'HAOWO':function(f,g){return f>g},'xBnPj':function(f,g){return f-g},'dhUZM':function(f){return
2024-09-27 04:01:57 UTC	1369	IN	Data Raw: 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 5e 68 7d 2c 27 59 61 48 4f 63 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 49 61 41 6a 4e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 5e 68 7d 2c 27 4a 63 45 57 43 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2b 69 7d 2c 27 41 41 6b 4c 45 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 77 6e 48 78 48 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 45 65 68 4c 42 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 59 6d 6a 6e 43 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 Data Ascii: ion(h,i){return i^h},'YaHOc':function(h,i){return h&i},'IaAjN':function(h,i){return i^h},'JcEWC':function(h,i){return h+i},'AAkLE':function(h,i){return h>i},'wnHxH':function(h,i){return h>i},'EehLB':function(h,i){return h<<i},'YmjnC':function(h,i){return
2024-09-27 04:01:57 UTC	1369	IN	Data Raw: 33 29 5d 28 69 52 28 31 31 32 33 29 2c 64 5b 69 52 28 31 32 31 35 29 5d 29 3f 69 52 28 31 30 38 38 29 3a 64 5b 69 52 28 36 31 38 29 5d 28 6e 75 6c 6c 2c 68 29 3f 27 27 3a 66 2e 67 28 68 2c 36 2c 66 75 6e 63 74 69 6f 6e 28 6c 2c 69 53 2c 6e 29 7b 69 66 28 69 53 3d 69 52 2c 64 5b 69 53 28 31 38 34 36 29 5d 3d 3d 3d 64 5b 69 53 28 31 31 31 32 29 5d 29 66 5b 6a 5b 69 53 28 31 32 38 36 29 5d 5d 26 26 28 6e 3d 7b 7d 2c 6e 5b 69 53 28 31 34 34 35 29 5d 3d 69 53 28 31 30 31 37 29 2c 6e 5b 69 53 28 31 32 36 35 29 5d 3d 6a 5b 69 53 28 37 37 34 29 5d 5b 69 53 28 39 37 38 29 5d 2c 6e 5b 69 53 28 31 35 38 32 29 5d 3d 69 53 28 31 30 36 35 29 2c 6e 5b 69 53 28 31 39 36 30 29 5d 3d 6a 5b 69 53 28 31 37 34 37 29 5d 2c 69 5b 69 53 28 31 39 33 39 29 5d 5b 69 53 28 31 31 33 Data Ascii: 3)](iR(1123),d[iR(1215)])?iR(1088):d[iR(618)](null,h)?'':f.g(h,6,function(l,iS,n){if(iS=iR,d[iS(1846)]===d[iS(1112)])f[j[iS(1286)]]&&(n={},n[iS(1445)]=iS(1017),n[iS(1265)]=j[iS(774)][iS(978)],n[iS(1582)]=iS(1065),n[iS(1960)]=j[iS(1747)],i[iS(1939)][iS(113
2024-09-27 04:01:57 UTC	1369	IN	Data Raw: 32 2c 46 29 2c 46 2b 2b 29 2c 78 5b 4c 5d 3d 45 2b 2b 2c 53 74 72 69 6e 67 28 4b 29 29 7d 69 66 28 64 5b 69 54 28 31 35 39 34 29 5d 28 27 27 2c 43 29 29 7b 69 66 28 64 5b 69 54 28 37 37 30 29 5d 28 69 54 28 31 33 36 33 29 2c 64 5b 69 54 28 31 37 35 38 29 5d 29 29 72 65 74 75 72 6e 20 47 5b 69 54 28 37 39 30 29 5d 28 6e 65 77 20 6a 28 43 29 29 5b 69 54 28 31 39 30 35 29 5d 28 4f 3d 3e 4f 5b 69 54 28 37 36 34 29 5d 28 31 36 29 5b 69 54 28 35 30 36 29 5d 28 32 2c 27 30 27 29 29 5b 69 54 28 37 37 32 29 5d 28 27 27 29 3b 65 6c 73 65 7b 69 66 28 4f 62 6a 65 63 74 5b 69 54 28 31 31 34 34 29 5d 5b 69 54 28 36 36 36 29 5d 5b 69 54 28 31 32 39 34 29 5d 28 42 2c 43 29 29 7b 69 66 28 69 54 28 31 39 32 39 29 3d 3d 3d 64 5b 69 54 28 31 32 39 31 29 5d 29 6f 5b 64 5b 69 Data Ascii: 2,F),F++),x[L]=E++,String(K))}if(d[iT(1594)]('',C)){if(d[iT(770)](iT(1363),d[iT(1758)]))return G[iT(790)](new j(C))[iT(1905)](O=>O[iT(764)](16)[iT(506)](2,'0'))[iT(772)]('');else{if(Object[iT(1144)][iT(666)][iT(1294)](B,C)){if(iT(1929)===d[iT(1291)])o[d[i
2024-09-27 04:01:57 UTC	1369	IN	Data Raw: 3d 31 2c 73 2b 2b 29 3b 66 6f 72 28 3b 3b 29 69 66 28 48 3c 3c 3d 31 2c 49 3d 3d 64 5b 69 54 28 31 34 36 31 29 5d 28 6a 2c 31 29 29 7b 69 66 28 69 54 28 31 38 33 32 29 3d 3d 3d 64 5b 69 54 28 32 30 31 38 29 5d 29 51 3d 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 39 36 2e 33 36 5d 5b 33 5d 5e 64 5b 69 54 28 37 38 37 29 5d 28 33 2b 74 68 69 73 2e 68 5b 64 5b 69 54 28 37 34 32 29 5d 28 39 36 2c 74 68 69 73 2e 67 29 5d 5b 31 5d 5b 69 54 28 31 34 38 34 29 5d 28 74 68 69 73 2e 68 5b 64 5b 69 54 28 37 34 32 29 5d 28 39 36 2c 74 68 69 73 2e 67 29 5d 5b 30 5d 2b 2b 29 2c 32 35 35 29 5e 32 30 2e 35 36 2c 52 3d 74 68 69 73 2e 68 5b 64 5b 69 54 28 35 30 33 29 5d 28 39 36 2c 74 68 69 73 2e 67 29 5d 5b 69 54 28 31 31 30 34 29 5d 28 29 2c 52 5b 30 5d 3d 64 5b 69 54 28 35 Data Ascii: =1,s++);for(;;)if(H<<=1,I==d[iT(1461)](j,1)){if(iT(1832)===d[iT(2018)])Q=this.h[this.g^96.36][3]^d[iT(787)](3+this.h[d[iT(742)](96,this.g)][1][iT(1484)](this.h[d[iT(742)](96,this.g)][0]++),255)^20.56,R=this.h[d[iT(503)](96,this.g)][iT(1104)](),R[0]=d[iT(5
2024-09-27 04:01:57 UTC	1369	IN	Data Raw: 27 33 27 3a 48 3e 3e 3d 31 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 34 27 3a 4e 3d 47 26 48 3b 63 6f 6e 74 69 6e 75 65 7d 62 72 65 61 6b 7d 73 77 69 74 63 68 28 4a 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 69 57 28 31 35 31 32 29 5d 28 32 2c 38 29 2c 46 3d 31 3b 4b 21 3d 46 3b 4e 3d 48 26 47 2c 48 3e 3e 3d 31 2c 64 5b 69 57 28 31 34 31 37 29 5d 28 30 2c 48 29 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 28 64 5b 69 57 28 31 37 36 33 29 5d 28 30 2c 4e 29 3f 31 3a 30 29 2a 46 2c 46 3c 3c 3d 31 29 3b 4f 3d 65 28 4a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 69 57 28 31 35 31 32 29 5d 28 32 2c 31 36 29 2c 46 3d 31 3b 64 5b 69 57 28 31 34 35 35 29 5d 28 46 2c 4b 29 Data Ascii: '3':H>>=1;continue;case'4':N=G&H;continue}break}switch(J){case 0:for(J=0,K=Math[iW(1512)](2,8),F=1;K!=F;N=H&G,H>>=1,d[iW(1417)](0,H)&&(H=j,G=o(I++)),J\|=(d[iW(1763)](0,N)?1:0)*F,F<<=1);O=e(J);break;case 1:for(J=0,K=Math[iW(1512)](2,16),F=1;d[iW(1455)](F,K)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49854	104.18.95.41	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:57 UTC	796	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/15pzp/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:01:57 UTC	210	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:01:57 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8c98986f9bcd7cac-EWR
2024-09-27 04:01:57 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49855	188.114.96.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:57 UTC	804	OUT	POST /socket.io/?EIO=4&transport=polling&t=P8nf7Y4&sid=9y9cewKasiXpUlx9ADHm HTTP/1.1 Host: datechf.cc Connection: keep-alive Content-Length: 1 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://datechf.cc Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://datechf.cc/de/receive/79469380 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
2024-09-27 04:01:57 UTC	1	OUT	Data Raw: 31 Data Ascii: 1
2024-09-27 04:01:58 UTC	541	IN	HTTP/1.1 400 Bad Request Date: Fri, 27 Sep 2024 04:01:58 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MzevoJAD98JUaTB8IDnwDRgBjr2ZNj5m2f9aHWZL0f%2F7tD%2BiqY%2FuSDPBUTPUrJxIsJTUn%2BnvrcyV21hePFr0EnS303uL2uK4pb%2BF8XwbuDkjBA2V8QF%2FHKtZnR5i"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c9898712c9bc407-EWR
2024-09-27 04:01:58 UTC	47	IN	Data Raw: 32 39 0d 0a 7b 22 63 6f 64 65 22 3a 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 53 65 73 73 69 6f 6e 20 49 44 20 75 6e 6b 6e 6f 77 6e 22 7d 0d 0a Data Ascii: 29{"code":1,"message":"Session ID unknown"}
2024-09-27 04:01:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49857	188.114.96.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:59 UTC	691	OUT	GET /socket.io/?EIO=4&transport=polling&t=P8nf7k6 HTTP/1.1 Host: datechf.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://datechf.cc/de/receive/79469380 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
2024-09-27 04:01:59 UTC	564	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:01:59 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: no-store CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kAkx0uzh49QPOdyjmdFgL7Yr580bcD5RIA1l8g5nsFkF8wQpfHULUwEEOIChM%2BHspsvVz9SsFRCL1DtEABOeiGeB3bsnJ%2F%2BpqmeLuK4huP%2BseuvN%2FqBmOYj1PKaF"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c9898785bea7c96-EWR
2024-09-27 04:01:59 UTC	124	IN	Data Raw: 37 36 0d 0a 30 7b 22 73 69 64 22 3a 22 77 62 6c 77 4a 53 6b 6e 71 75 4d 35 53 4d 41 33 41 44 48 70 22 2c 22 75 70 67 72 61 64 65 73 22 3a 5b 22 77 65 62 73 6f 63 6b 65 74 22 5d 2c 22 70 69 6e 67 49 6e 74 65 72 76 61 6c 22 3a 32 35 30 30 30 2c 22 70 69 6e 67 54 69 6d 65 6f 75 74 22 3a 32 30 30 30 30 2c 22 6d 61 78 50 61 79 6c 6f 61 64 22 3a 31 30 30 30 30 30 30 7d 0d 0a Data Ascii: 760{"sid":"wblwJSknquM5SMA3ADHp","upgrades":["websocket"],"pingInterval":25000,"pingTimeout":20000,"maxPayload":1000000}
2024-09-27 04:01:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49861	104.18.95.41	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:59 UTC	438	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:01:59 UTC	210	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:01:59 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8c98987b798c42f8-EWR
2024-09-27 04:01:59 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49860	104.18.95.41	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:59 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8c9898691a4b42b5&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:01:59 UTC	301	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:01:59 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 116700 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8c98987bc84a4270-EWR
2024-09-27 04:01:59 UTC	1068	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 71 5a 4a 79 54 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.qZJyT2={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.privacy_link":"htt
2024-09-27 04:01:59 UTC	1369	IN	Data Raw: 25 33 45 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 74 65 72 6d 73 22 3a 22 54 65 72 6d 73 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 70 72 69 76 61 63 79 22 3a 22 50 72 69 76 61 63 79 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 61 69 6c 75 72 65 22 3a 22 45 72 72 6f 72 22 2c 22 68 75 6d 61 6e 5f 62 75 74 74 6f 6e 5f 74 65 78 74 22 3a 22 56 65 72 69 66 79 25 32 30 79 6f 75 25 32 30 61 72 65 25 32 30 68 75 6d 61 6e 22 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 22 59 6f 75 72 20 66 65 65 64 62 61 63 6b 20 72 65 70 6f 72 74 20 68 61 73 20 62 65 65 6e 20 73 75 63 63 65 73 73 66 75 6c 6c 79 20 73 75 62 6d 69 74 74 65 64 22 2c 22 63 68 65 63 6b 5f 64 65 6c 61 79 73 22 Data Ascii: %3E","turnstile_footer_terms":"Terms","turnstile_footer_privacy":"Privacy","turnstile_failure":"Error","human_button_text":"Verify%20you%20are%20human","feedback_report_output_subtitle":"Your feedback report has been successfully submitted","check_delays"
2024-09-27 04:01:59 UTC	1369	IN	Data Raw: 3d 66 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 34 39 34 38 31 32 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 49 28 31 37 39 36 29 5d 2c 65 4f 3d 5b 5d 2c 65 50 3d 30 3b 32 35 36 3e 65 50 3b 65 4f 5b 65 50 5d 3d 53 74 72 69 6e 67 5b 67 49 28 31 35 36 39 29 5d 28 65 50 29 2c 65 50 2b 2b 29 3b 65 51 3d 28 30 2c 65 76 61 6c 29 28 67 49 28 31 36 31 32 29 29 2c 65 52 3d 61 74 6f 62 28 67 49 28 35 31 30 29 29 2c 65 4d 5b 67 49 28 34 35 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 68 2c 64 2c 65 2c 66 2c 67 29 7b 68 68 3d 67 49 2c 64 3d 7b 7d 2c 64 5b 68 68 28 31 34 36 38 29 5d 3d 68 68 28 31 37 34 36 Data Ascii: =f)break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,494812),eM=this\|\|self,eN=eM[gI(1796)],eO=[],eP=0;256>eP;eO[eP]=String[gI(1569)](eP),eP++);eQ=(0,eval)(gI(1612)),eR=atob(gI(510)),eM[gI(451)]=function(hh,d,e,f,g){hh=gI,d={},d[hh(1468)]=hh(1746
2024-09-27 04:01:59 UTC	1369	IN	Data Raw: 34 29 5d 2c 6f 5b 68 6a 28 31 33 38 37 29 5d 3d 65 4d 5b 68 6a 28 31 31 31 36 29 5d 5b 68 6a 28 31 33 38 37 29 5d 2c 6f 5b 68 6a 28 31 35 34 33 29 5d 3d 65 4d 5b 68 6a 28 31 31 31 36 29 5d 5b 68 6a 28 31 35 34 33 29 5d 2c 73 3d 6f 2c 78 3d 6e 65 77 20 65 4d 5b 28 68 6a 28 35 36 38 29 29 5d 28 29 2c 21 78 29 72 65 74 75 72 6e 3b 42 3d 68 6a 28 31 33 36 32 29 2c 78 5b 68 6a 28 33 39 30 29 5d 28 42 2c 6e 2c 21 21 5b 5d 29 2c 78 5b 68 6a 28 31 31 37 37 29 5d 3d 32 35 30 30 2c 78 5b 68 6a 28 31 38 32 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 78 5b 68 6a 28 37 37 31 29 5d 28 68 6a 28 34 31 37 29 2c 6b 5b 68 6a 28 39 34 37 29 5d 29 2c 43 3d 7b 7d 2c 43 5b 68 6a 28 34 33 37 29 5d 3d 67 2c 43 2e 63 63 3d 68 2c 43 5b 68 6a 28 31 32 33 32 29 5d 3d 6c 2c 43 Data Ascii: 4)],o[hj(1387)]=eM[hj(1116)][hj(1387)],o[hj(1543)]=eM[hj(1116)][hj(1543)],s=o,x=new eM[(hj(568))](),!x)return;B=hj(1362),x[hj(390)](B,n,!![]),x[hj(1177)]=2500,x[hj(1827)]=function(){},x[hj(771)](hj(417),k[hj(947)]),C={},C[hj(437)]=g,C.cc=h,C[hj(1232)]=l,C
2024-09-27 04:01:59 UTC	1369	IN	Data Raw: 35 31 30 29 5d 5b 68 6b 28 31 32 36 37 29 5d 28 68 6b 28 31 31 38 38 29 2c 6d 29 29 3b 72 65 74 75 72 6e 21 5b 5d 7d 2c 66 6b 3d 7b 7d 2c 66 6b 5b 67 49 28 31 30 34 36 29 5d 3d 66 6a 2c 65 4d 5b 67 49 28 39 36 37 29 5d 3d 66 6b 2c 66 6d 3d 65 4d 5b 67 49 28 31 31 31 36 29 5d 5b 67 49 28 34 34 37 29 5d 5b 67 49 28 39 31 35 29 5d 2c 66 6e 3d 65 4d 5b 67 49 28 31 31 31 36 29 5d 5b 67 49 28 34 34 37 29 5d 5b 67 49 28 38 38 32 29 5d 2c 66 79 3d 21 5b 5d 2c 66 4c 3d 75 6e 64 65 66 69 6e 65 64 2c 65 4d 5b 67 49 28 37 32 33 29 5d 28 67 49 28 31 34 31 39 29 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 69 38 2c 65 2c 66 2c 67 29 7b 69 66 28 69 38 3d 67 49 2c 65 3d 7b 7d 2c 65 5b 69 38 28 31 34 38 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 Data Ascii: 510)][hk(1267)](hk(1188),m));return![]},fk={},fk[gI(1046)]=fj,eM[gI(967)]=fk,fm=eM[gI(1116)][gI(447)][gI(915)],fn=eM[gI(1116)][gI(447)][gI(882)],fy=![],fL=undefined,eM[gI(723)](gI(1419),function(d,i8,e,f,g){if(i8=gI,e={},e[i8(1481)]=function(h,i){return i
2024-09-27 04:01:59 UTC	1369	IN	Data Raw: 2c 65 4e 5b 67 49 28 31 33 30 37 29 5d 3d 3d 3d 67 49 28 35 31 32 29 3f 65 4e 5b 67 49 28 37 32 33 29 5d 28 67 49 28 35 38 39 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 67 75 2c 30 29 7d 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 67 75 2c 30 29 2c 65 4d 5b 67 49 28 31 30 34 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6a 44 2c 65 29 7b 65 3d 28 6a 44 3d 67 49 2c 7b 27 50 49 49 54 6f 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 67 28 68 29 7d 7d 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 65 5b 6a 44 28 31 34 38 30 29 5d 28 67 78 2c 63 29 7d 63 61 74 63 68 28 67 29 7b 72 65 74 75 72 6e 20 67 76 28 65 5b 6a 44 28 31 34 38 30 29 5d 28 67 77 2c 63 29 29 7d 7d 2c 67 79 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6a 45 2c 66 Data Ascii: ,eN[gI(1307)]===gI(512)?eN[gI(723)](gI(589),function(){setTimeout(gu,0)}):setTimeout(gu,0),eM[gI(1040)]=function(c,jD,e){e=(jD=gI,{'PIITo':function(g,h){return g(h)}});try{return e[jD(1480)](gx,c)}catch(g){return gv(e[jD(1480)](gw,c))}},gy=function(c,jE,f
2024-09-27 04:01:59 UTC	1369	IN	Data Raw: 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 79 53 77 49 55 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 50 48 69 6b 42 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 4b 73 58 49 48 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 63 52 41 4d 42 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 21 3d 69 7d 2c 27 71 62 66 59 73 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 5a 48 50 52 47 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2a 69 7d 2c 27 69 4e 6c 6b 53 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 Data Ascii: (h,i){return h<i},'ySwIU':function(h,i){return h-i},'PHikB':function(h,i){return i==h},'KsXIH':function(h,i){return h(i)},'cRAMB':function(h,i){return h!=i},'qbfYs':function(h,i){return i&h},'ZHPRG':function(h,i){return h*i},'iNlkS':function(h,i){return i
2024-09-27 04:01:59 UTC	1369	IN	Data Raw: 5d 28 38 2c 73 29 3b 48 3d 64 5b 6a 4a 28 31 33 36 36 29 5d 28 48 2c 31 29 7c 4d 26 31 2e 34 2c 64 5b 6a 4a 28 36 32 32 29 5d 28 49 2c 64 5b 6a 4a 28 34 31 32 29 5d 28 6a 2c 31 29 29 3f 28 49 3d 30 2c 47 5b 6a 4a 28 31 30 31 37 29 5d 28 64 5b 6a 4a 28 38 35 31 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 4d 3d 31 2c 73 3d 30 3b 73 3c 46 3b 48 3d 4d 7c 48 3c 3c 31 2c 49 3d 3d 6a 2d 31 3f 28 49 3d 30 2c 47 5b 6a 4a 28 31 30 31 37 29 5d 28 64 5b 6a 4a 28 37 33 39 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3d 30 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 6a 4a 28 36 35 37 29 5d 28 30 29 2c 73 3d 30 3b 64 5b 6a 4a 28 37 35 33 29 5d 28 31 36 2c 73 29 3b 48 3d 64 5b 6a 4a 28 39 Data Ascii: ](8,s);H=d[jJ(1366)](H,1)\|M&1.4,d[jJ(622)](I,d[jJ(412)](j,1))?(I=0,G[jJ(1017)](d[jJ(851)](o,H)),H=0):I++,M>>=1,s++);}else{for(M=1,s=0;s<F;H=M\|H<<1,I==j-1?(I=0,G[jJ(1017)](d[jJ(739)](o,H)),H=0):I++,M=0,s++);for(M=C[jJ(657)](0),s=0;d[jJ(753)](16,s);H=d[jJ(9
2024-09-27 04:01:59 UTC	1369	IN	Data Raw: 4d 3d 32 2c 73 3d 30 3b 64 5b 6a 4a 28 31 33 33 37 29 5d 28 73 2c 46 29 3b 48 3d 31 2e 36 34 26 4d 7c 48 3c 3c 31 2c 6a 2d 31 3d 3d 49 3f 28 49 3d 30 2c 47 5b 6a 4a 28 31 30 31 37 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 66 6f 72 28 3b 3b 29 69 66 28 48 3c 3c 3d 31 2c 64 5b 6a 4a 28 31 31 32 31 29 5d 28 49 2c 6a 2d 31 29 29 7b 69 66 28 64 5b 6a 4a 28 31 35 35 38 29 5d 28 6a 4a 28 31 33 30 32 29 2c 6a 4a 28 36 39 38 29 29 29 7b 69 66 28 21 43 29 72 65 74 75 72 6e 3b 51 3d 69 5b 6a 4a 28 39 31 31 29 5d 28 64 5b 6a 4a 28 36 32 36 29 5d 29 2c 51 26 26 28 4b 5b 6a 4a 28 31 31 31 36 29 5d 5b 6a 4a 28 35 30 31 29 5d 3d 51 29 2c 52 3d 4a 5b 6a 4a 28 39 31 31 29 5d 28 64 5b 6a 4a 28 31 30 35 30 29 5d 29 2c 52 26 26 28 Data Ascii: M=2,s=0;d[jJ(1337)](s,F);H=1.64&M\|H<<1,j-1==I?(I=0,G[jJ(1017)](o(H)),H=0):I++,M>>=1,s++);for(;;)if(H<<=1,d[jJ(1121)](I,j-1)){if(d[jJ(1558)](jJ(1302),jJ(698))){if(!C)return;Q=i[jJ(911)](d[jJ(626)]),Q&&(K[jJ(1116)][jJ(501)]=Q),R=J[jJ(911)](d[jJ(1050)]),R&&(
2024-09-27 04:01:59 UTC	1369	IN	Data Raw: 73 2e 67 29 5d 5b 30 5d 2b 2b 29 2d 31 34 31 2c 32 35 36 29 26 32 35 35 2e 30 32 29 5e 32 33 36 5e 74 68 69 73 2e 67 5d 3d 7b 7d 3b 65 6c 73 65 7b 69 66 28 64 5b 6a 4d 28 37 35 33 29 5d 28 4c 2c 6a 29 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 4d 3d 30 2c 4e 3d 4d 61 74 68 5b 6a 4d 28 31 37 37 30 29 5d 28 32 2c 46 29 2c 49 3d 31 3b 49 21 3d 4e 3b 4f 3d 4a 26 4b 2c 4b 3e 3e 3d 31 2c 30 3d 3d 4b 26 26 28 4b 3d 6f 2c 4a 3d 73 28 4c 2b 2b 29 29 2c 4d 7c 3d 28 30 3c 4f 3f 31 3a 30 29 2a 49 2c 49 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 50 3d 4d 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 4d 3d 30 2c 4e 3d 4d 61 74 68 5b 6a 4d 28 31 37 37 30 29 5d 28 32 2c 38 29 2c 49 3d 31 3b 49 21 3d 4e 3b 4f 3d 64 5b 6a 4d 28 31 36 35 37 29 5d 28 4a 2c 4b 29 2c 4b 3e 3e 3d 31 2c 4b Data Ascii: s.g)][0]++)-141,256)&255.02)^236^this.g]={};else{if(d[jM(753)](L,j))return'';for(M=0,N=Math[jM(1770)](2,F),I=1;I!=N;O=J&K,K>>=1,0==K&&(K=o,J=s(L++)),M\|=(0<O?1:0)*I,I<<=1);switch(P=M){case 0:for(M=0,N=Math[jM(1770)](2,8),I=1;I!=N;O=d[jM(1657)](J,K),K>>=1,K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49862	104.18.95.41	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:59 UTC	927	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1747044856:1727406813:cYobLX1V0bNGFw4HsDfHR7tNyeWvFZHZq9lR0vUDSLA/8c9898691a4b42b5/154eb201ebda143 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3712 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 154eb201ebda143 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/15pzp/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:01:59 UTC	3712	OUT	Data Raw: 76 5f 38 63 39 38 39 38 36 39 31 61 34 62 34 32 62 35 3d 31 50 4c 39 24 39 33 39 50 39 70 39 74 5a 73 75 5a 73 68 39 5a 51 45 25 32 62 66 41 5a 30 73 66 73 53 48 51 4c 45 43 73 36 47 73 30 4a 45 51 47 47 73 4f 73 47 35 30 7a 76 2d 61 47 73 45 39 73 42 58 76 52 79 70 47 2b 73 75 73 79 4c 76 6e 73 30 51 55 4d 32 73 76 34 73 46 66 73 5a 31 64 53 57 38 35 77 4e 73 74 70 39 49 62 47 30 4e 6c 35 76 37 73 42 6f 56 6f 47 73 72 78 39 73 6d 53 69 51 5a 7a 6c 32 48 59 50 73 52 6f 33 6b 24 77 73 41 39 35 35 73 30 4c 73 43 65 48 4c 24 66 42 51 36 30 6d 68 32 33 68 59 32 38 35 73 2d 39 34 73 51 43 51 4c 31 38 35 73 47 2d 39 73 6e 2d 4e 73 61 39 79 4c 34 73 76 64 73 79 50 7a 64 45 24 41 36 5a 70 6b 73 56 42 4e 73 45 4c 73 6f 73 76 48 6f 7a 4e 73 6d 39 73 58 71 73 76 69 Data Ascii: v_8c9898691a4b42b5=1PL9$939P9p9tZsuZsh9ZQE%2bfAZ0sfsSHQLECs6Gs0JEQGGsOsG50zv-aGsE9sBXvRypG+susyLvns0QUM2sv4sFfsZ1dSW85wNstp9IbG0Nl5v7sBoVoGsrx9smSiQZzl2HYPsRo3k$wsA955s0LsCeHL$fBQ60mh23hY285s-94sQCQL185sG-9sn-Nsa9yL4svdsyPzdE$A6ZpksVBNsELsosvHozNsm9sXqsvi
2024-09-27 04:01:59 UTC	717	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:01:59 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 152108 Connection: close cf-chl-gen: ZjgQJt7eJl9bRhpr/XmKGKUI+h/NNRBI0BNUeSVN49p1X3HayVzxZF3VIQliFWpAizqEzvHu6r4zP9CHCxLqpBAqsCZ7fut074ghBM1OeGrOlQiOab+RLjYv+tTJ9pOu6n2mYIVx04319wx507uBVYCwv8I82Pr0hylZhetKrQ7uECuk4Oz4KTxIAMESp//CIBsr2yaS9V5kczwwNmkoKyontctdsVWQ3JYy8wr+NL9WT1sPAYJSMr+wgnRYakMZtz4KMzSeqcvhusiorCvyRBJyUi6azWBbwOLHofGHDK9IQBoNkNd32MTia13fzU2GYqO4r1NdczF1Vd1Rcbzi1gFHLablSEvuS3fp2wyMfEhbaMDNJxr5uReCup2dFnjuMOUICEyD/mQY92rsjKEQp7c6o0sri1vxu9z1erDind07yNbpoGs7z1SkiZ3Gm6JRqj+IOWWqvss+C9Zn7oj87sIvkEqnO/nBcnPHqdY7zgTLwOo=$kaegdOyE8akocbRP Server: cloudflare CF-RAY: 8c98987be8ac4261-EWR
2024-09-27 04:01:59 UTC	652	IN	Data Raw: 72 35 32 45 76 62 57 4b 76 4c 57 46 75 4a 69 6b 7a 61 75 71 6e 4c 4f 7a 79 71 36 35 70 4b 62 61 79 36 6a 4d 6e 4c 2b 39 6f 36 37 41 73 72 54 4a 36 72 58 6e 78 38 58 46 33 4d 71 71 78 73 48 6b 33 37 37 4a 37 65 57 73 30 73 75 33 30 73 6a 55 2f 4e 76 61 7a 4f 44 53 34 41 72 7a 2b 67 30 4c 2f 4e 6a 38 44 2b 2f 66 39 4e 33 30 34 75 51 44 39 4e 49 4c 37 78 2f 70 44 50 76 35 2b 4f 37 38 34 66 73 55 47 42 54 79 43 69 49 58 4c 50 37 39 4d 6a 41 44 41 6a 51 4c 45 7a 67 34 4a 69 30 6e 47 52 49 59 48 44 38 34 45 66 77 78 4f 78 55 42 4e 68 6b 4d 49 43 70 4a 4a 78 31 43 4b 51 6f 78 4b 42 51 54 4b 6a 46 4a 54 53 63 35 54 56 59 66 56 54 34 61 49 79 56 6b 50 79 51 71 57 44 38 2f 4c 47 73 71 5a 6c 35 6c 55 31 46 65 51 56 42 78 4e 55 70 5a 65 54 68 56 66 47 78 74 67 31 64 Data Ascii: r52EvbWKvLWFuJikzauqnLOzyq65pKbay6jMnL+9o67AsrTJ6rXnx8XF3MqqxsHk377J7eWs0su30sjU/NvazODS4Arz+g0L/Nj8D+/f9N304uQD9NIL7x/pDPv5+O784fsUGBTyCiIXLP79MjADAjQLEzg4Ji0nGRIYHD84EfwxOxUBNhkMICpJJx1CKQoxKBQTKjFJTSc5TVYfVT4aIyVkPyQqWD8/LGsqZl5lU1FeQVBxNUpZeThVfGxtg1d
2024-09-27 04:01:59 UTC	1369	IN	Data Raw: 6b 5a 47 41 72 49 68 2b 66 37 56 32 67 33 53 33 68 36 78 38 64 72 32 79 6d 4c 75 41 6c 4d 43 6f 68 6f 47 35 79 6f 53 39 76 63 53 74 7a 4a 2f 53 31 4a 58 54 7a 35 6a 43 74 37 72 4d 6e 62 53 73 6f 4c 6d 30 34 71 79 76 30 64 71 32 77 4d 4f 39 35 72 71 6b 77 36 37 42 37 75 6e 6a 39 63 6a 67 7a 4c 4c 6a 74 65 54 30 30 50 6d 32 31 74 71 39 78 50 7a 46 31 63 48 63 41 50 6a 2b 36 74 7a 69 78 38 33 50 37 63 62 78 30 67 6a 70 45 75 55 4c 39 76 44 34 48 50 58 71 42 4e 2f 37 47 4f 41 53 35 2f 73 5a 35 77 6f 69 44 6a 45 50 41 2f 72 39 43 43 76 77 4e 43 63 4e 4b 54 49 73 4d 52 34 50 45 78 51 4c 51 66 34 36 41 51 67 41 47 6a 6b 34 53 45 41 75 4b 53 63 6c 47 30 6b 70 56 53 42 50 4d 45 64 57 56 43 63 79 4e 79 74 56 59 55 31 65 57 56 30 32 50 54 4e 6f 50 31 5a 64 5a 45 42 Data Ascii: kZGArIh+f7V2g3S3h6x8dr2ymLuAlMCohoG5yoS9vcStzJ/S1JXTz5jCt7rMnbSsoLm04qyv0dq2wMO95rqkw67B7unj9cjgzLLjteT00Pm21tq9xPzF1cHcAPj+6tzix83P7cbx0gjpEuUL9vD4HPXqBN/7GOAS5/sZ5woiDjEPA/r9CCvwNCcNKTIsMR4PExQLQf46AQgAGjk4SEAuKSclG0kpVSBPMEdWVCcyNytVYU1eWV02PTNoP1ZdZEB
2024-09-27 04:01:59 UTC	1369	IN	Data Raw: 4b 75 4c 70 58 4f 33 65 61 6d 38 74 34 6d 4b 65 34 4f 6a 70 48 31 39 6b 4a 36 46 68 34 79 47 75 5a 36 62 6f 73 6a 53 6b 6f 36 2b 72 71 57 70 71 4c 6a 4d 6b 37 54 50 79 73 32 34 73 62 37 46 33 4f 54 6b 70 62 2b 39 36 73 37 74 33 71 33 65 78 2b 75 76 39 76 58 41 2b 4e 62 50 7a 66 71 39 2f 65 36 2b 32 64 2f 75 42 4d 50 42 42 51 71 2f 77 39 37 66 43 63 34 4c 34 65 66 68 46 4f 58 52 35 51 6a 6c 43 4f 73 4c 36 50 66 36 44 41 33 36 37 68 67 55 33 42 7a 34 47 65 55 68 2f 42 30 4b 48 51 51 4d 41 41 4c 39 38 41 6f 4c 4c 51 4d 53 4c 41 73 30 43 78 4d 54 2f 51 76 37 47 53 55 61 41 7a 51 7a 46 43 6c 4c 47 79 49 77 4a 30 30 63 44 41 39 4f 4b 53 6f 71 54 52 46 55 52 6c 6f 36 4d 53 73 72 4d 6a 31 68 56 69 4a 59 4e 6a 35 62 4a 6c 6c 71 4b 56 70 69 52 31 35 79 58 43 31 51 Data Ascii: KuLpXO3eam8t4mKe4OjpH19kJ6Fh4yGuZ6bosjSko6+rqWpqLjMk7TPys24sb7F3OTkpb+96s7t3q3ex+uv9vXA+NbPzfq9/e6+2d/uBMPBBQq/w97fCc4L4efhFOXR5QjlCOsL6Pf6DA367hgU3Bz4GeUh/B0KHQQMAAL98AoLLQMSLAs0CxMT/Qv7GSUaAzQzFClLGyIwJ00cDA9OKSoqTRFURlo6MSsrMj1hViJYNj5bJllqKVpiR15yXC1Q
2024-09-27 04:01:59 UTC	1369	IN	Data Raw: 4b 4e 63 58 32 30 6e 35 69 36 6f 38 61 30 78 37 32 44 74 4b 47 48 6f 49 47 6d 73 4c 33 43 73 63 71 57 7a 71 62 53 71 4a 4b 63 74 4b 79 57 79 70 65 36 34 73 37 6d 77 4f 69 6e 36 72 54 62 77 4d 43 38 37 74 71 6e 78 76 4c 66 77 4d 4c 34 74 2f 72 49 2b 74 72 6f 2f 62 37 30 76 37 2f 62 42 74 48 35 35 74 58 6e 34 50 66 4d 35 63 37 38 37 4d 72 4e 36 74 51 4e 42 75 6b 55 38 66 41 4b 42 39 6b 57 49 50 6b 4f 2f 68 49 64 4a 76 6b 56 4a 69 66 63 42 77 45 50 2f 43 30 6e 49 65 67 69 4b 68 45 53 4b 54 45 33 50 41 34 57 44 68 6b 35 48 79 37 34 2b 69 38 5a 4e 77 41 30 50 79 51 46 44 42 30 5a 4b 67 31 53 48 30 49 6b 4a 68 55 55 52 54 6b 35 4c 52 63 79 4b 68 78 50 4e 6b 52 42 58 79 38 7a 5a 30 68 44 5a 6d 6b 6c 61 79 68 43 57 6d 70 43 59 7a 46 51 52 6b 30 30 4f 45 39 4b 54 Data Ascii: KNcX20n5i6o8a0x72DtKGHoIGmsL3CscqWzqbSqJKctKyWype64s7mwOin6rTbwMC87tqnxvLfwML4t/rI+tro/b70v7/bBtH55tXn4PfM5c787MrN6tQNBukU8fAKB9kWIPkO/hIdJvkVJifcBwEP/C0nIegiKhESKTE3PA4WDhk5Hy74+i8ZNwA0PyQFDB0ZKg1SH0IkJhUURTk5LRcyKhxPNkRBXy8zZ0hDZmklayhCWmpCYzFQRk00OE9KT
2024-09-27 04:01:59 UTC	1369	IN	Data Raw: 2b 66 70 4b 34 76 70 2b 79 75 4c 54 48 68 5a 6d 6c 6e 35 32 71 76 64 47 73 6c 61 71 59 72 39 75 58 6a 35 53 74 74 37 2f 53 30 62 6e 43 77 4f 4f 6d 33 71 54 71 71 64 76 6b 75 63 36 75 37 75 54 77 35 4f 7a 51 2b 4c 58 32 31 38 62 74 39 50 4c 4d 30 76 72 79 33 64 54 46 33 4c 6f 41 30 38 58 62 44 67 50 63 2f 67 54 4d 35 64 2f 32 35 68 54 31 44 77 2f 53 32 74 59 52 33 78 48 70 41 68 63 6b 34 2b 41 44 42 66 6f 43 42 4f 4d 74 42 67 6f 69 37 51 59 4d 41 51 6b 6b 38 42 63 31 44 78 77 70 43 79 6b 76 4d 67 72 39 47 41 38 42 50 68 6b 61 50 51 5a 4c 53 55 63 36 50 56 45 4a 4a 43 6b 50 51 67 6b 6c 55 69 68 56 54 6a 41 73 58 46 64 5a 58 6c 55 30 54 6b 5a 53 57 54 30 67 54 45 6f 73 52 30 6b 75 51 44 34 76 62 33 55 7a 64 55 4e 4d 5a 32 64 77 56 58 64 31 65 45 70 50 57 6b Data Ascii: +fpK4vp+yuLTHhZmln52qvdGslaqYr9uXj5Stt7/S0bnCwOOm3qTqqdvkuc6u7uTw5OzQ+LX218bt9PLM0vry3dTF3LoA08XbDgPc/gTM5d/25hT1Dw/S2tYR3xHpAhck4+ADBfoCBOMtBgoi7QYMAQkk8Bc1DxwpCykvMgr9GA8BPhkaPQZLSUc6PVEJJCkPQgklUihVTjAsXFdZXlU0TkZSWT0gTEosR0kuQD4vb3UzdUNMZ2dwVXd1eEpPWk
2024-09-27 04:01:59 UTC	1369	IN	Data Raw: 71 38 47 69 75 72 65 38 6e 73 47 4a 31 63 44 46 31 4d 65 72 32 64 4c 45 78 64 79 56 6e 73 72 55 74 65 54 59 35 71 53 68 6e 36 58 43 6f 39 66 47 37 4f 79 75 33 36 58 68 74 4d 33 52 34 4b 2f 35 33 4e 58 37 31 66 71 2f 79 76 58 77 30 72 75 2f 43 41 62 6a 39 66 54 66 35 73 76 6c 34 41 4c 52 43 39 33 4f 37 42 44 79 37 74 72 53 30 74 63 62 46 78 6b 41 44 67 33 74 41 66 49 67 34 75 63 47 46 51 63 42 4b 2f 7a 73 4d 42 2f 7a 42 43 45 71 44 2f 45 44 4d 67 67 54 4f 2f 55 51 2f 50 63 2b 41 53 55 75 4a 7a 6f 69 4e 6a 73 6a 4c 51 55 4e 52 77 63 6e 4b 55 4d 67 53 46 63 75 57 6a 4a 4b 4d 54 30 65 4d 69 31 62 4b 6b 4a 65 5a 45 51 34 51 31 4e 48 61 30 46 61 5a 43 6c 6e 58 47 51 76 5a 46 35 55 59 6e 55 79 4d 6b 31 37 55 44 74 5a 56 7a 35 78 55 55 4b 46 56 46 4b 41 57 31 68 Data Ascii: q8Giure8nsGJ1cDF1Mer2dLExdyVnsrUteTY5qShn6XCo9fG7Oyu36XhtM3R4K/53NX71fq/yvXw0ru/CAbj9fTf5svl4ALRC93O7BDy7trS0tcbFxkADg3tAfIg4ucGFQcBK/zsMB/zBCEqD/EDMggTO/UQ/Pc+ASUuJzoiNjsjLQUNRwcnKUMgSFcuWjJKMT0eMi1bKkJeZEQ4Q1NHa0FaZClnXGQvZF5UYnUyMk17UDtZVz5xUUKFVFKAW1h
2024-09-27 04:01:59 UTC	1369	IN	Data Raw: 4d 61 65 79 70 4c 4f 31 36 6a 4a 32 38 69 62 30 36 61 58 34 62 6a 59 7a 4b 50 68 75 64 37 42 30 39 75 2f 36 37 66 62 34 2b 6a 50 38 37 2f 49 78 72 54 50 2b 62 6d 79 32 50 7a 4f 30 66 44 6f 37 4c 6e 54 74 74 33 6b 35 4f 6a 55 43 63 62 5a 41 73 6b 45 2b 63 63 54 36 77 45 48 30 65 33 68 41 77 51 5a 2b 51 73 51 46 74 72 67 49 4f 30 55 49 4e 34 58 35 67 50 71 4b 51 77 65 4a 67 54 35 38 43 34 42 4a 41 49 56 45 69 6b 51 43 44 55 78 2b 50 7a 35 43 67 44 38 4f 53 59 68 52 42 6f 65 47 43 52 4e 49 45 35 4a 4b 55 49 45 49 69 41 4f 53 78 51 52 4b 6b 52 4b 4f 31 77 51 52 30 77 72 4e 43 78 68 49 57 63 36 4a 44 45 7a 53 57 64 44 58 54 77 34 4b 57 74 49 4c 33 46 4f 4e 45 4a 30 55 57 64 4d 4c 7a 6c 65 62 6c 70 41 4f 6d 38 2b 59 6a 31 6f 56 33 78 6a 69 6d 31 64 66 45 35 73 Data Ascii: MaeypLO16jJ28ib06aX4bjYzKPhud7B09u/67fb4+jP87/IxrTP+bmy2PzO0fDo7LnTtt3k5OjUCcbZAskE+ccT6wEH0e3hAwQZ+QsQFtrgIO0UIN4X5gPqKQweJgT58C4BJAIVEikQCDUx+Pz5CgD8OSYhRBoeGCRNIE5JKUIEIiAOSxQRKkRKO1wQR0wrNCxhIWc6JDEzSWdDXTw4KWtIL3FONEJ0UWdMLzleblpAOm8+Yj1oV3xjim1dfE5s
2024-09-27 04:01:59 UTC	1369	IN	Data Raw: 54 42 31 5a 71 76 32 4d 6e 64 7a 70 37 64 32 4e 32 2f 34 62 44 54 76 73 61 69 75 65 37 64 34 65 37 63 72 39 75 30 36 75 62 51 32 63 48 34 74 76 43 35 35 75 6e 4f 79 73 32 35 77 4e 48 42 32 4f 6a 48 78 39 55 4d 33 77 2f 75 2f 66 41 50 45 2b 6b 43 35 39 63 4d 38 65 67 54 2b 76 48 5a 45 78 37 37 47 64 58 34 33 43 55 51 32 76 66 70 2f 75 63 49 2b 42 44 39 2b 79 41 68 48 52 45 57 39 79 51 59 4b 43 6b 65 2b 78 34 41 4c 43 77 65 45 66 6f 76 4a 42 41 71 50 44 34 6b 42 53 30 4d 49 69 45 4c 4d 55 55 52 52 69 52 4b 4e 46 51 37 55 78 6b 75 50 44 39 55 57 52 6c 6c 54 53 59 34 4d 57 67 2f 56 31 55 70 58 31 64 4d 53 58 4a 74 58 7a 55 73 62 54 46 79 4d 31 5a 46 56 6e 78 50 54 6c 52 34 65 47 31 2f 51 56 4e 36 58 49 70 68 65 59 56 64 65 6f 53 47 67 49 4f 43 66 6b 69 42 62 Data Ascii: TB1Zqv2Mndzp7d2N2/4bDTvsaiue7d4e7cr9u06ubQ2cH4tvC55unOys25wNHB2OjHx9UM3w/u/fAPE+kC59cM8egT+vHZEx77GdX43CUQ2vfp/ucI+BD9+yAhHREW9yQYKCke+x4ALCweEfovJBAqPD4kBS0MIiELMUURRiRKNFQ7UxkuPD9UWRllTSY4MWg/V1UpX1dMSXJtXzUsbTFyM1ZFVnxPTlR4eG1/QVN6XIpheYVdeoSGgIOCfkiBb
2024-09-27 04:01:59 UTC	1369	IN	Data Raw: 75 76 35 6e 41 6e 64 47 77 31 36 62 55 33 74 6d 70 77 38 44 72 78 37 6e 70 35 65 61 39 34 66 62 69 79 73 62 4e 31 2f 6e 4e 36 66 69 2b 39 63 37 32 2f 73 32 2b 77 66 7a 6b 41 2f 54 68 32 4f 4c 33 34 77 7a 78 43 4d 73 45 33 78 44 72 45 64 6e 5a 38 4f 76 75 46 76 66 70 33 74 55 6c 48 65 44 65 47 76 66 67 2f 64 34 75 2b 79 6b 61 41 67 50 73 45 77 38 78 49 79 34 62 4d 53 51 78 50 77 77 36 47 6b 44 2b 47 51 49 4f 41 44 34 6a 51 68 6f 57 4b 51 51 6e 4c 55 78 42 50 6c 55 4d 4e 6b 30 74 53 56 52 49 4e 55 67 65 4d 68 77 77 4d 56 30 2f 4e 6b 5a 55 4f 6a 49 68 58 30 46 74 52 45 42 59 50 47 4e 6b 53 56 4a 56 63 31 63 33 57 6c 6c 39 54 47 30 34 61 6d 42 50 51 47 56 46 63 34 68 67 57 48 2b 48 54 49 35 74 68 55 61 4b 68 48 53 54 69 49 56 78 67 46 4a 52 6b 4a 32 61 6d 56 Data Ascii: uv5nAndGw16bU3tmpw8Drx7np5ea94fbiysbN1/nN6fi+9c72/s2+wfzkA/Th2OL34wzxCMsE3xDrEdnZ8OvuFvfp3tUlHeDeGvfg/d4u+ykaAgPsEw8xIy4bMSQxPww6GkD+GQIOAD4jQhoWKQQnLUxBPlUMNk0tSVRINUgeMhwwMV0/NkZUOjIhX0FtREBYPGNkSVJVc1c3Wll9TG04amBPQGVFc4hgWH+HTI5thUaKhHSTiIVxgFJRkJ2amV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49866	188.114.97.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:01:59 UTC	505	OUT	GET /socket.io/?EIO=4&transport=polling&t=P8nf7k6 HTTP/1.1 Host: datechf.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
2024-09-27 04:02:00 UTC	564	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:00 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: no-store CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M7HZRAVW7tSqa%2BosQ0HlMIqP8wtXepu%2Bttmdp4%2FJ9%2Bs4w2Zyb91NNH6kpsvZm374RU9P%2B6sdVCrHPy5QoR2p6uCQDhxpliMR6Okr5zSBHbYbCk310kYookAUgzJV"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c98987d2e9c7c7e-EWR
2024-09-27 04:02:00 UTC	124	IN	Data Raw: 37 36 0d 0a 30 7b 22 73 69 64 22 3a 22 48 41 6b 44 4e 62 56 32 64 56 52 46 5a 34 63 57 41 44 48 71 22 2c 22 75 70 67 72 61 64 65 73 22 3a 5b 22 77 65 62 73 6f 63 6b 65 74 22 5d 2c 22 70 69 6e 67 49 6e 74 65 72 76 61 6c 22 3a 32 35 30 30 30 2c 22 70 69 6e 67 54 69 6d 65 6f 75 74 22 3a 32 30 30 30 30 2c 22 6d 61 78 50 61 79 6c 6f 61 64 22 3a 31 30 30 30 30 30 30 7d 0d 0a Data Ascii: 760{"sid":"HAkDNbV2dVRFZ4cWADHq","upgrades":["websocket"],"pingInterval":25000,"pingTimeout":20000,"maxPayload":1000000}
2024-09-27 04:02:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49867	188.114.96.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:00 UTC	804	OUT	POST /socket.io/?EIO=4&transport=polling&t=P8nf8Au&sid=wblwJSknquM5SMA3ADHp HTTP/1.1 Host: datechf.cc Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://datechf.cc Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://datechf.cc/de/receive/79469380 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
2024-09-27 04:02:00 UTC	2	OUT	Data Raw: 34 30 Data Ascii: 40
2024-09-27 04:02:00 UTC	540	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:00 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close cache-control: no-store CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TkkLa3Te8B8NgzvDD6Cwq7WRTY4oGVu56YcEB0dqX7Y5ue9pnG8EBoN9sFALfS%2BYkh6BAQgx5yxjrhquFFK08cR8pZLPX74Yl2dn2zMTLtRPAt6nzsUVSs3UIEjH"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c9898803fb17ca2-EWR
2024-09-27 04:02:00 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-09-27 04:02:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49869	188.114.96.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:00 UTC	716	OUT	GET /socket.io/?EIO=4&transport=polling&t=P8nf8A-&sid=wblwJSknquM5SMA3ADHp HTTP/1.1 Host: datechf.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://datechf.cc/de/receive/79469380 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
2024-09-27 04:02:00 UTC	568	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:00 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: no-store CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JRWWj7BYvpWY9gw4FTNRIILLmAqzR5PIiZM47CJB4%2B4uERuX6dXyd%2BDaDpuSaU%2BuEhXvEq1GQc7%2F%2BMR3EW7YaYzQgRHiDD53Qjk1eGtzf5GCxgmptcx%2BC%2BBhDVD1"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c98988049fc42ad-EWR
2024-09-27 04:02:00 UTC	38	IN	Data Raw: 32 30 0d 0a 34 30 7b 22 73 69 64 22 3a 22 4f 75 70 77 50 4e 62 5f 39 49 4e 75 7a 30 52 63 41 44 48 72 22 7d 0d 0a Data Ascii: 2040{"sid":"OupwPNb_9INuz0RcADHr"}
2024-09-27 04:02:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49868	188.114.96.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:00 UTC	672	OUT	GET /socket.io/?EIO=4&transport=websocket&sid=wblwJSknquM5SMA3ADHp HTTP/1.1 Host: datechf.cc Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://datechf.cc Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de Sec-WebSocket-Key: W3ST8xe3H3d9xA2PYCRWBA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-09-27 04:02:00 UTC	543	IN	HTTP/1.1 400 Bad Request Date: Fri, 27 Sep 2024 04:02:00 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8CA1j8oar7SjB1Zk%2Fxfcbo%2BhDkBY9FYLdXkKIEo6NPcZ9%2B9E83%2FzZWbuk8eUoDVt7Ng3zqT5OBdv2CAz3f9BueUw7BgTl3zR5Zz5M3MbAN%2Fv%2BCB9wWECOboU%2BTTf"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c9898806d6342ee-EWR
2024-09-27 04:02:00 UTC	40	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}
2024-09-27 04:02:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49870	104.18.95.41	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:00 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1747044856:1727406813:cYobLX1V0bNGFw4HsDfHR7tNyeWvFZHZq9lR0vUDSLA/8c9898691a4b42b5/154eb201ebda143 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:00 UTC	349	IN	HTTP/1.1 404 Not Found Date: Fri, 27 Sep 2024 04:02:00 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: Y99CckoNAXL9mcFCpmxoQngv0rtdpOyPQPg=$bsizApDkpiJDll5P Server: cloudflare CF-RAY: 8c9898825aa843c9-EWR
2024-09-27 04:02:00 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49871	104.18.95.41	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:01 UTC	815	OUT	GET /cdn-cgi/challenge-platform/h/g/pat/8c9898691a4b42b5/1727409719717/5b06ee5dbbd1b2452cb1acf6647d2475161453c780a73d0285d7d820c113f77a/uIY9KT1wjH83wWA HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/15pzp/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:01 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Fri, 27 Sep 2024 04:02:01 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-09-27 04:02:01 UTC	1985	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 57 77 62 75 58 62 76 52 73 6b 55 73 73 61 7a 32 5a 48 30 6b 64 52 59 55 55 38 65 41 70 7a 30 43 68 64 66 59 49 4d 45 54 39 33 6f 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gWwbuXbvRskUssaz2ZH0kdRYUU8eApz0ChdfYIMET93oAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-09-27 04:02:01 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49874	188.114.97.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:01 UTC	530	OUT	GET /socket.io/?EIO=4&transport=polling&t=P8nf8Au&sid=wblwJSknquM5SMA3ADHp HTTP/1.1 Host: datechf.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
2024-09-27 04:02:01 UTC	501	IN	HTTP/1.1 400 Bad Request Date: Fri, 27 Sep 2024 04:02:01 GMT Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UlbJUwfddcqjG1Ma1BKxnx0tCkW2E1VcAV7SuUKe1IuVXU3h%2B1YEFdEA1ZsfbmgRn7wKwe%2B1NzFH0BMT8NKrt5dLu8VzkqLbocuELAoEw5HFn1d5Vn3ShnA22ZPq"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c9898885a80159b-EWR
2024-09-27 04:02:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49875	188.114.97.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:01 UTC	530	OUT	GET /socket.io/?EIO=4&transport=polling&t=P8nf8A-&sid=wblwJSknquM5SMA3ADHp HTTP/1.1 Host: datechf.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
2024-09-27 04:02:01 UTC	559	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:01 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close cache-control: no-store CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fhg%2B2%2B8ZGD%2Fi%2BU4BLl0g2pxcadss4vJIwvR48hEPTxvBsUOI9LXOvZManzFSCXGlv9p%2BEgkDjRojS8OQf0oAz1SuNQNUNrmF3PpAMsII5alNoTCiPMn%2BW9nA77fl"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c9898884edb0cc0-EWR
2024-09-27 04:02:01 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49878	188.114.96.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:02 UTC	716	OUT	GET /socket.io/?EIO=4&transport=polling&t=P8nf8by&sid=wblwJSknquM5SMA3ADHp HTTP/1.1 Host: datechf.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://datechf.cc/de/receive/79469380 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
2024-09-27 04:02:02 UTC	533	IN	HTTP/1.1 400 Bad Request Date: Fri, 27 Sep 2024 04:02:02 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5ttt8cC43Ucy39%2BRFgypuJ9mCO9GJOMxhJQKCw0y52H5NLerUfsMWpchlq3VRLwtPd2t6KgY1HYCiP3hn97%2FmLSisorgH2gAEEDiqLsKYyiwym2Fz74Vqua3aHzB"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c98988b392bc35d-EWR
2024-09-27 04:02:02 UTC	47	IN	Data Raw: 32 39 0d 0a 7b 22 63 6f 64 65 22 3a 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 53 65 73 73 69 6f 6e 20 49 44 20 75 6e 6b 6e 6f 77 6e 22 7d 0d 0a Data Ascii: 29{"code":1,"message":"Session ID unknown"}
2024-09-27 04:02:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49879	188.114.96.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:02 UTC	805	OUT	POST /socket.io/?EIO=4&transport=polling&t=P8nf8b_&sid=wblwJSknquM5SMA3ADHp HTTP/1.1 Host: datechf.cc Connection: keep-alive Content-Length: 26 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://datechf.cc Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://datechf.cc/de/receive/79469380 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
2024-09-27 04:02:02 UTC	26	OUT	Data Raw: 34 32 5b 22 6d 61 64 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 22 2c 22 30 22 5d Data Ascii: 42["madeNotification","0"]
2024-09-27 04:02:02 UTC	533	IN	HTTP/1.1 400 Bad Request Date: Fri, 27 Sep 2024 04:02:02 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=np2Qry86DERCUqTkIkk7zR6MYVycl%2FPqy1HHVIcNJmeOVjdlQATh6BStfkJ8rd5wqeJG%2BIxEn9Ao7kVlCPfP1wicL2lTCd2kiZhuJoBnegjgqq0pp2aOF4wJeBox"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c98988c6e6b43c9-EWR
2024-09-27 04:02:02 UTC	47	IN	Data Raw: 32 39 0d 0a 7b 22 63 6f 64 65 22 3a 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 53 65 73 73 69 6f 6e 20 49 44 20 75 6e 6b 6e 6f 77 6e 22 7d 0d 0a Data Ascii: 29{"code":1,"message":"Session ID unknown"}
2024-09-27 04:02:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49884	104.18.95.41	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:04 UTC	764	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/z2exq/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:04 UTC	1369	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:04 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 164860 Connection: close cross-origin-embedder-policy: require-corp origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self' critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cross-origin-resource-policy: cross-origin document-policy: js-profiling permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() referrer-policy: same-origin cross-origin-opener-policy: same-origin
2024-09-27 04:02:04 UTC	52	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 63 39 38 39 38 39 62 65 61 37 30 37 64 30 30 2d 45 57 52 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8c98989bea707d00-EWR
2024-09-27 04:02:04 UTC	1317	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-09-27 04:02:04 UTC	1369	IN	Data Raw: 25 3b 6d 61 72 67 69 6e 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 Data Ascii: %;margin:0;overflow:hidden;padding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-web
2024-09-27 04:02:04 UTC	1369	IN	Data Raw: 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 7d 23 73 75 63 63 65 73 73 2d 70 72 65 2d 69 20 6c 69 6e 65 7b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 Data Ascii: ght:30px;width:30px}#success-pre-i line{stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;st
2024-09-27 04:02:04 UTC	1369	IN	Data Raw: 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e Data Ascii: allenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dark #challen
2024-09-27 04:02:04 UTC	1369	IN	Data Raw: 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 Data Ascii: dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-helper-loop
2024-09-27 04:02:04 UTC	1369	IN	Data Raw: 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 61 63 74 69 76 65 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 66 6f 63 75 73 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 31 36 36 33 37 39 7d 23 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 32 35 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 70 78 7d 2e 66 61 69 6c 75 72 65 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 Data Ascii: ,#challenge-overlay a:link,#challenge-overlay a:visited{color:#232323}#challenge-overlay a:active,#challenge-overlay a:focus,#challenge-overlay a:hover{color:#166379}#logo{height:25px;margin-bottom:1px}.failure-circle{stroke-dasharray:166;stroke-dashoffse
2024-09-27 04:02:04 UTC	1369	IN	Data Raw: 6e 3a 61 6c 6c 20 2e 31 73 20 65 61 73 65 2d 69 6e 3b 77 69 64 74 68 3a 32 34 70 78 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 38 7d 2e 63 62 2d 6c 62 20 2e 63 62 2d 69 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 63 62 2d 6c 62 20 2e 63 62 2d 6c 62 2d 74 7b 67 72 69 64 2d 63 6f 6c 75 6d 6e 3a 32 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 63 6f 6e 74 65 6e 74 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c Data Ascii: n:all .1s ease-in;width:24px;z-index:9998}.cb-lb .cb-i:after{border-radius:5px;content:"";position:absolute}.cb-lb .cb-lb-t{grid-column:2;margin-left:8px}.size-compact{font-size:14px}.size-compact #content{align-items:flex-start;display:flex;flex-flow:col
2024-09-27 04:02:04 UTC	1369	IN	Data Raw: 72 74 6c 7d 2e 72 74 6c 20 2e 63 62 2d 6c 62 2d 74 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 72 74 6c 20 23 65 78 70 69 72 65 64 2d 69 2c 2e 72 74 6c 20 23 66 61 69 6c 2d 69 2c 2e 72 74 6c 20 23 6f 76 65 72 72 75 6e 2d 69 2c 2e 72 74 6c 20 23 73 70 69 6e 6e 65 72 2d 69 2c 2e 72 74 6c 20 23 73 75 63 63 65 73 73 2d 69 2c 2e 72 74 6c 20 23 74 69 6d 65 6f 75 74 2d 69 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 Data Ascii: rtl}.rtl .cb-lb-t{margin-left:0;margin-right:8px;padding:0}.rtl #expired-i,.rtl #fail-i,.rtl #overrun-i,.rtl #spinner-i,.rtl #success-i,.rtl #timeout-i{left:255px}.rtl #fr-helper{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px
2024-09-27 04:02:04 UTC	1369	IN	Data Raw: 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 61 63 74 69 76 65 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 66 6f 63 75 73 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c Data Ascii: challenge-error-title a{color:#232323}#challenge-error-title a:active,#challenge-error-title a:focus,#challenge-error-title a:hover{color:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#chall

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49888	188.114.96.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:05 UTC	804	OUT	POST /socket.io/?EIO=4&transport=polling&t=P8nf9CP&sid=wblwJSknquM5SMA3ADHp HTTP/1.1 Host: datechf.cc Connection: keep-alive Content-Length: 1 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://datechf.cc Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://datechf.cc/de/receive/79469380 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
2024-09-27 04:02:05 UTC	1	OUT	Data Raw: 31 Data Ascii: 1
2024-09-27 04:02:05 UTC	549	IN	HTTP/1.1 400 Bad Request Date: Fri, 27 Sep 2024 04:02:05 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xhmDm9CN9%2FpVjya%2FQjnkVN8UfLPl1pUDAXYsPtL52Os%2BakkE2rnKXF2CR6Zy%2FN9ss0p%2FT5sfvxXW%2BsFH29mx%2BebF41t1S7IVDVsBSpT6%2FlebdIVlhM9NYxW%2F%2B4Wl"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c98989e8c0f7d16-EWR
2024-09-27 04:02:05 UTC	47	IN	Data Raw: 32 39 0d 0a 7b 22 63 6f 64 65 22 3a 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 53 65 73 73 69 6f 6e 20 49 44 20 75 6e 6b 6e 6f 77 6e 22 7d 0d 0a Data Ascii: 29{"code":1,"message":"Session ID unknown"}
2024-09-27 04:02:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49889	188.114.96.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:05 UTC	691	OUT	GET /socket.io/?EIO=4&transport=polling&t=P8nf9Q5 HTTP/1.1 Host: datechf.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://datechf.cc/de/receive/79469380 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
2024-09-27 04:02:06 UTC	564	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:06 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: no-store CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Tlt9TcUESgEBcELBxo6DRnd4VBbDPY2PF7llGVVItUhU3DrijM87BovjA9CvIlLUDYrm8J%2F7fPjvdg7DGR%2FhsajrZOGBASmHbAOrKEr%2F%2BEO4DFBlMoLOC4xZIzL%2B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c9898a3ccc2de95-EWR
2024-09-27 04:02:06 UTC	124	IN	Data Raw: 37 36 0d 0a 30 7b 22 73 69 64 22 3a 22 72 4b 35 6e 59 7a 64 46 4e 42 37 53 6e 6c 64 61 41 44 48 73 22 2c 22 75 70 67 72 61 64 65 73 22 3a 5b 22 77 65 62 73 6f 63 6b 65 74 22 5d 2c 22 70 69 6e 67 49 6e 74 65 72 76 61 6c 22 3a 32 35 30 30 30 2c 22 70 69 6e 67 54 69 6d 65 6f 75 74 22 3a 32 30 30 30 30 2c 22 6d 61 78 50 61 79 6c 6f 61 64 22 3a 31 30 30 30 30 30 30 7d 0d 0a Data Ascii: 760{"sid":"rK5nYzdFNB7SnldaADHs","upgrades":["websocket"],"pingInterval":25000,"pingTimeout":20000,"maxPayload":1000000}
2024-09-27 04:02:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49890	104.18.95.41	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:06 UTC	731	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8c98989bea707d00&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/z2exq/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:06 UTC	301	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:06 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 118832 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8c9898a728757292-EWR
2024-09-27 04:02:06 UTC	1068	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 71 5a 4a 79 54 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.qZJyT2={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconce
2024-09-27 04:02:06 UTC	1369	IN	Data Raw: 69 6e 67 25 32 30 74 72 6f 75 62 6c 65 25 33 46 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 76 65 72 69 66 79 69 6e 67 22 3a 22 56 65 72 69 66 79 69 6e 67 2e 2e 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 65 6e 64 25 32 30 46 65 65 64 62 61 63 6b 22 2c 22 6e 6f 74 5f 65 6d 62 65 64 64 65 64 22 3a 22 54 68 69 73 25 32 30 63 68 61 6c 6c 65 6e 67 65 25 32 30 6d 75 73 74 25 32 30 62 65 25 32 30 65 6d 62 65 64 64 65 64 25 32 30 69 6e 74 6f 25 32 30 61 25 32 30 70 61 72 65 6e 74 25 32 30 70 61 67 65 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 74 65 72 6d 73 22 3a 22 54 65 72 6d 73 22 2c 22 6f 75 74 64 61 74 65 64 5f 62 72 6f 77 73 65 72 22 3a 22 59 6f 75 72 25 32 30 62 72 6f 77 Data Ascii: ing%20trouble%3F","turnstile_verifying":"Verifying...","turnstile_feedback_description":"Send%20Feedback","not_embedded":"This%20challenge%20must%20be%20embedded%20into%20a%20parent%20page.","turnstile_footer_terms":"Terms","outdated_browser":"Your%20brow
2024-09-27 04:02:06 UTC	1369	IN	Data Raw: 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 39 36 37 30 36 34 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 49 28 31 31 39 33 29 5d 2c 65 4d 5b 67 49 28 33 34 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 67 57 2c 65 29 7b 65 3d 28 67 57 3d 67 49 2c 7b 27 69 79 70 68 78 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 67 28 68 29 7d 7d 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 65 51 28 63 29 7d 63 61 74 63 68 28 67 29 7b 72 65 74 75 72 6e 20 65 4f 28 65 5b 67 57 28 35 31 38 29 5d 28 65 50 2c 63 29 29 7d 7d 2c 65 4d 5b 67 49 28 33 35 35 29 5d 3d 21 5b 5d 2c 65 4d 5b 67 49 28 37 36 35 Data Ascii: break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,967064),eM=this\|\|self,eN=eM[gI(1193)],eM[gI(342)]=function(c,gW,e){e=(gW=gI,{'iyphx':function(g,h){return g(h)}});try{return eQ(c)}catch(g){return eO(e[gW(518)](eP,c))}},eM[gI(355)]=![],eM[gI(765
2024-09-27 04:02:06 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 20 69 21 3d 68 7d 2c 27 50 4a 53 43 69 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 64 6b 63 48 4b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 75 4b 4d 41 6f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 21 3d 69 7d 2c 27 4c 69 7a 57 69 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 66 5a 4d 4a 4b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 4f 6e 56 5a 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2b 69 7d 7d 2c 65 3d 53 74 72 69 6e 67 5b 68 74 28 38 32 33 29 5d 2c 66 3d 7b 27 68 27 3a 66 75 6e 63 74 69 6f Data Ascii: {return i!=h},'PJSCi':function(h,i){return i&h},'dkcHK':function(h,i){return h(i)},'uKMAo':function(h,i){return h!=i},'LizWi':function(h,i){return h(i)},'fZMJK':function(h,i){return h(i)},'OnVZk':function(h,i){return h+i}},e=String[ht(823)],f={'h':functio
2024-09-27 04:02:06 UTC	1369	IN	Data Raw: 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4f 3e 3e 3d 31 2c 73 2b 2b 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 33 27 3a 78 5b 4c 5d 3d 45 2b 2b 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 34 27 3a 64 5b 68 76 28 31 31 34 33 29 5d 28 30 2c 44 29 26 26 28 44 3d 4d 61 74 68 5b 68 76 28 34 32 35 29 5d 28 32 2c 46 29 2c 46 2b 2b 29 3b 63 6f 6e 74 69 6e 75 65 7d 62 72 65 61 6b 7d 7d 65 6c 73 65 20 4f 3d 68 76 28 31 33 39 36 29 3b 69 66 28 64 5b 68 76 28 31 37 30 36 29 5d 28 27 27 2c 43 29 29 7b 69 66 28 4f 62 6a 65 63 74 5b 68 76 28 31 36 36 39 29 5d 5b 68 76 28 36 36 36 29 5d 5b 68 76 28 39 36 33 29 5d 28 42 2c 43 29 29 7b 69 66 28 64 5b 68 76 28 39 39 39 29 5d 28 68 76 28 31 36 30 34 29 2c 68 76 28 31 36 30 34 29 29 29 7b 69 66 28 32 35 36 3e 43 5b 68 76 Data Ascii: H)),H=0):I++,O>>=1,s++);continue;case'3':x[L]=E++;continue;case'4':d[hv(1143)](0,D)&&(D=Math[hv(425)](2,F),F++);continue}break}}else O=hv(1396);if(d[hv(1706)]('',C)){if(Object[hv(1669)][hv(666)][hv(963)](B,C)){if(d[hv(999)](hv(1604),hv(1604))){if(256>C[hv
2024-09-27 04:02:06 UTC	1369	IN	Data Raw: 28 34 37 38 29 5d 2c 33 32 37 36 38 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 68 78 29 7b 72 65 74 75 72 6e 20 68 78 3d 68 77 2c 68 5b 68 78 28 31 35 34 35 29 5d 28 69 29 7d 29 7d 2c 27 69 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 68 79 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4d 2c 4c 29 7b 66 6f 72 28 68 79 3d 68 74 2c 73 3d 5b 5d 2c 78 3d 34 2c 42 3d 34 2c 43 3d 33 2c 44 3d 5b 5d 2c 47 3d 6f 28 30 29 2c 48 3d 6a 2c 49 3d 31 2c 45 3d 30 3b 64 5b 68 79 28 35 37 32 29 5d 28 33 2c 45 29 3b 73 5b 45 5d 3d 45 2c 45 2b 3d 31 29 3b 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 68 79 28 34 32 35 29 5d 28 32 2c 32 29 2c 46 3d 31 3b 64 5b 68 79 28 36 36 39 29 5d 28 46 2c 4b 29 3b 4c 3d 64 5b 68 79 28 31 30 34 30 29 5d 28 47 2c Data Ascii: (478)],32768,function(i,hx){return hx=hw,h[hx(1545)](i)})},'i':function(i,j,o,hy,s,x,B,C,D,E,F,G,H,I,J,K,M,L){for(hy=ht,s=[],x=4,B=4,C=3,D=[],G=o(0),H=j,I=1,E=0;d[hy(572)](3,E);s[E]=E,E+=1);for(J=0,K=Math[hy(425)](2,2),F=1;d[hy(669)](F,K);L=d[hy(1040)](G,
2024-09-27 04:02:06 UTC	1369	IN	Data Raw: 28 31 32 31 36 29 5d 3d 66 2e 68 2c 67 7d 28 29 2c 65 4d 5b 67 49 28 39 35 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 7a 2c 64 2c 65 2c 66 2c 67 29 7b 68 7a 3d 67 49 2c 64 3d 7b 7d 2c 64 5b 68 7a 28 31 36 39 31 29 5d 3d 68 7a 28 35 38 36 29 2c 64 5b 68 7a 28 31 35 38 35 29 5d 3d 68 7a 28 36 34 38 29 2c 64 5b 68 7a 28 32 39 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 65 3d 64 2c 66 3d 31 2c 67 3d 31 65 33 2a 65 4d 5b 68 7a 28 38 34 37 29 5d 5b 68 7a 28 31 33 39 34 29 5d 28 65 5b 68 7a 28 32 39 35 29 5d 28 32 2c 66 29 2c 33 32 29 2c 65 4d 5b 68 7a 28 31 32 31 38 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 41 29 7b 68 41 3d 68 7a 2c 65 5b 68 41 28 31 36 39 31 29 5d 21 3d 3d 68 41 28 35 38 36 29 3f 65 3d 66 5b 68 41 Data Ascii: (1216)]=f.h,g}(),eM[gI(958)]=function(hz,d,e,f,g){hz=gI,d={},d[hz(1691)]=hz(586),d[hz(1585)]=hz(648),d[hz(295)]=function(h,i){return h<<i},e=d,f=1,g=1e3*eM[hz(847)][hz(1394)](e[hz(295)](2,f),32),eM[hz(1218)](function(hA){hA=hz,e[hA(1691)]!==hA(586)?e=f[hA
2024-09-27 04:02:06 UTC	1369	IN	Data Raw: 39 29 5d 2c 78 5b 68 42 28 31 36 31 38 29 5d 3d 65 4d 5b 68 42 28 38 31 31 29 5d 5b 68 42 28 31 36 31 38 29 5d 2c 78 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 37 27 3a 45 5b 68 42 28 31 31 37 33 29 5d 3d 32 35 30 30 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 38 27 3a 44 3d 28 43 3d 7b 7d 2c 43 5b 68 42 28 31 30 31 39 29 5d 3d 67 2c 43 2e 63 63 3d 68 2c 43 5b 68 42 28 31 34 36 30 29 5d 3d 6e 2c 43 5b 68 42 28 39 34 36 29 5d 3d 42 2c 4a 53 4f 4e 5b 68 42 28 32 39 34 29 5d 28 43 29 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 39 27 3a 45 5b 68 42 28 33 32 35 29 5d 28 6b 5b 68 42 28 31 32 37 31 29 5d 2c 6b 5b 68 42 28 31 30 30 38 29 5d 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 30 27 3a 45 5b 68 42 28 36 35 37 29 5d 28 46 2c 73 2c 21 21 5b Data Ascii: 9)],x[hB(1618)]=eM[hB(811)][hB(1618)],x);continue;case'7':E[hB(1173)]=2500;continue;case'8':D=(C={},C[hB(1019)]=g,C.cc=h,C[hB(1460)]=n,C[hB(946)]=B,JSON[hB(294)](C));continue;case'9':E[hB(325)](k[hB(1271)],k[hB(1008)]);continue;case'10':E[hB(657)](F,s,!![
2024-09-27 04:02:06 UTC	1369	IN	Data Raw: 34 35 31 29 5d 3d 3d 3d 66 5b 69 76 28 39 32 35 29 5d 26 26 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 66 42 29 7d 29 2c 66 44 3d 21 5b 5d 2c 21 66 36 28 67 49 28 31 34 30 38 29 29 26 26 28 67 34 28 29 2c 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 6a 37 2c 63 2c 64 2c 65 29 7b 6a 37 3d 67 49 2c 63 3d 7b 27 6b 4b 4d 71 78 27 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 28 29 7d 2c 27 59 47 53 49 68 27 3a 6a 37 28 31 30 33 37 29 2c 27 47 70 62 67 76 27 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 28 29 7d 7d 2c 64 3d 65 4d 5b 6a 37 28 38 31 31 29 5d 5b 6a 37 28 31 36 39 32 29 5d 7c 7c 31 65 34 2c 65 3d 67 32 28 29 2c 21 65 4d 5b 6a 37 28 31 36 35 39 29 5d 26 26 21 63 5b 6a 37 28 31 35 35 36 29 5d 28 66 Data Ascii: 451)]===f[iv(925)]&&clearInterval(fB)}),fD=![],!f6(gI(1408))&&(g4(),setInterval(function(j7,c,d,e){j7=gI,c={'kKMqx':function(f){return f()},'YGSIh':j7(1037),'Gpbgv':function(f){return f()}},d=eM[j7(811)][j7(1692)]\|\|1e4,e=g2(),!eM[j7(1659)]&&!c[j7(1556)](f
2024-09-27 04:02:06 UTC	1369	IN	Data Raw: 5b 67 49 28 39 38 38 29 5d 3d 27 73 27 2c 67 41 5b 67 49 28 35 36 30 29 5d 3d 27 75 27 2c 67 41 5b 67 49 28 38 39 34 29 5d 3d 27 7a 27 2c 67 41 5b 67 49 28 33 32 36 29 5d 3d 27 6e 27 2c 67 41 5b 67 49 28 31 36 31 37 29 5d 3d 27 49 27 2c 67 42 3d 67 41 2c 65 4d 5b 67 49 28 31 31 37 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 2c 6a 4c 2c 6f 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 29 7b 69 66 28 6a 4c 3d 67 49 2c 6f 3d 7b 27 56 79 67 4d 46 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 48 3d 3d 3d 47 7d 2c 27 6d 6f 69 6f 62 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 28 48 29 7d 2c 27 65 79 6e 55 46 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 2c 49 2c 4a 29 7b 72 65 74 75 72 6e 20 47 28 48 2c 49 2c Data Ascii: [gI(988)]='s',gA[gI(560)]='u',gA[gI(894)]='z',gA[gI(326)]='n',gA[gI(1617)]='I',gB=gA,eM[gI(1176)]=function(g,h,i,j,jL,o,x,B,C,D,E,F){if(jL=gI,o={'VygMF':function(G,H){return H===G},'moiob':function(G,H){return G(H)},'eynUF':function(G,H,I,J){return G(H,I,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49894	188.114.96.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:07 UTC	804	OUT	POST /socket.io/?EIO=4&transport=polling&t=P8nf9v3&sid=rK5nYzdFNB7SnldaADHs HTTP/1.1 Host: datechf.cc Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://datechf.cc Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://datechf.cc/de/receive/79469380 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
2024-09-27 04:02:07 UTC	2	OUT	Data Raw: 34 30 Data Ascii: 40
2024-09-27 04:02:07 UTC	544	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:07 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close cache-control: no-store CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K3cTzhNFcM2IJMYveCC8mRXT6etoxWXX6SQGirEf%2BjddZbQKbLgbuUlpkkPAY0xSV63urkU83zqu4%2FT6WieZUtRvTqPAfFHfU73pQ%2BMhfqiu80jedA6um1ZHqLGc"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c9898ac5e500cc4-EWR
2024-09-27 04:02:07 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-09-27 04:02:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49896	188.114.96.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:07 UTC	716	OUT	GET /socket.io/?EIO=4&transport=polling&t=P8nf9vB&sid=rK5nYzdFNB7SnldaADHs HTTP/1.1 Host: datechf.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://datechf.cc/de/receive/79469380 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
2024-09-27 04:02:07 UTC	558	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:07 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: no-store CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lWD9tSYN3CwZ7KP3tQqcZEES3g9b0NBcdQrDdUPDDS5uhwcGozKPAEc%2BSZpMLpEiZnkoW2v8ZtwNOx25SvufOu5uT7Th60QydM6u7rXSL%2B0aHSrpzxszs10AORFO"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c9898ac5d6078d3-EWR
2024-09-27 04:02:07 UTC	38	IN	Data Raw: 32 30 0d 0a 34 30 7b 22 73 69 64 22 3a 22 43 6d 4c 5f 35 68 37 55 69 72 6e 69 2d 69 38 5f 41 44 48 74 22 7d 0d 0a Data Ascii: 2040{"sid":"CmL_5h7Uirni-i8_ADHt"}
2024-09-27 04:02:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49895	188.114.96.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:07 UTC	672	OUT	GET /socket.io/?EIO=4&transport=websocket&sid=rK5nYzdFNB7SnldaADHs HTTP/1.1 Host: datechf.cc Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://datechf.cc Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de Sec-WebSocket-Key: ERIjIkcgONXtsWcIdRuEwQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-09-27 04:02:07 UTC	539	IN	HTTP/1.1 400 Bad Request Date: Fri, 27 Sep 2024 04:02:07 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hx6gpakhVy4IAIs2TYnRJwXzGVltrZaeaE%2F%2Bc6f27EuI8EdwHRGdUsvry%2FP22pen6VcrnQtwrkWF5l6Ac4ug5CxiwcVQFh%2FbI5l7R9wAHgmZfEUuW%2Bsu5Cq87oRn"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c9898ac89834285-EWR
2024-09-27 04:02:07 UTC	40	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}
2024-09-27 04:02:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49899	104.18.95.41	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:08 UTC	786	OUT	GET /cdn-cgi/challenge-platform/h/g/i/8c9898691a4b42b5/1727409719721/QRnLOEdUTmV-wSC HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/15pzp/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:08 UTC	170	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:08 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8c9898b0d9d243c3-EWR
2024-09-27 04:02:08 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5e 00 00 00 29 08 02 00 00 00 33 97 09 40 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR^)3@IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49901	104.18.95.41	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:08 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8c98989bea707d00&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:08 UTC	301	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:08 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 122081 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8c9898b15dc3433e-EWR
2024-09-27 04:02:08 UTC	1068	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 71 5a 4a 79 54 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.qZJyT2={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.privacy_link":"htt
2024-09-27 04:02:08 UTC	1369	IN	Data Raw: 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 25 32 32 25 33 45 43 6c 69 63 6b 25 32 30 68 65 72 65 25 32 30 66 6f 72 25 32 30 6d 6f 72 65 25 32 30 69 6e 66 6f 72 6d 61 74 69 6f 6e 25 33 43 25 32 46 61 25 33 45 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 74 69 6d 65 6f 75 74 22 3a 22 54 69 6d 65 64 25 32 30 6f 75 74 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 6c 6f 6e 67 65 72 5f 74 68 61 6e 5f 65 78 70 65 63 74 65 64 22 3a 22 25 33 43 61 25 32 30 68 72 65 66 25 33 44 25 32 32 25 32 33 25 32 32 25 32 30 63 6c 61 73 73 25 33 44 25 32 32 72 65 66 72 65 73 68 5f 6c 69 6e 6b 25 32 32 25 33 45 52 65 66 72 65 73 Data Ascii: 2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support%22%3EClick%20here%20for%20more%20information%3C%2Fa%3E","turnstile_timeout":"Timed%20out","turnstile_longer_than_expected":"%3Ca%20href%3D%22%23%22%20class%3D%22refresh_link%22%3ERefres
2024-09-27 04:02:08 UTC	1369	IN	Data Raw: 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 37 32 37 31 34 36 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 49 28 39 31 30 29 5d 2c 65 4f 3d 66 75 6e 63 74 69 6f 6e 28 67 4a 2c 64 2c 65 2c 66 2c 67 29 7b 72 65 74 75 72 6e 20 67 4a 3d 67 49 2c 64 3d 7b 27 76 54 78 4a 6c 27 3a 67 4a 28 39 32 33 29 2c 27 47 57 41 75 48 27 3a 67 4a 28 31 35 38 34 29 2c 27 71 66 66 7a 6e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 52 4c 61 79 6c 27 3a 67 4a 28 31 30 31 37 29 2c 27 76 58 6f 4a 4c 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 3d 68 7d 2c 27 69 64 70 41 6f 27 3a 67 4a 28 37 30 30 29 2c 27 68 6e 78 72 4e 27 3a 66 75 Data Ascii: catch(g){e.push(e.shift())}}(a,727146),eM=this\|\|self,eN=eM[gI(910)],eO=function(gJ,d,e,f,g){return gJ=gI,d={'vTxJl':gJ(923),'GWAuH':gJ(1584),'qffzn':function(h,i){return i==h},'RLayl':gJ(1017),'vXoJL':function(h,i){return i===h},'idpAo':gJ(700),'hnxrN':fu
2024-09-27 04:02:08 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 69 2c 67 4c 29 7b 72 65 74 75 72 6e 20 67 4c 3d 67 4b 2c 64 5b 67 4c 28 31 33 31 31 29 5d 21 3d 3d 64 5b 67 4c 28 31 33 35 31 29 5d 3f 67 4c 28 34 31 37 29 5b 67 4c 28 31 35 35 32 29 5d 28 69 29 3a 67 4c 28 34 31 37 29 5b 67 4c 28 31 35 35 32 29 5d 28 64 29 7d 29 7d 2c 27 67 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 67 4d 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 2c 4f 29 7b 69 66 28 67 4d 3d 67 4a 2c 64 5b 67 4d 28 31 37 31 32 29 5d 28 6e 75 6c 6c 2c 69 29 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 78 3d 7b 7d 2c 42 3d 7b 7d 2c 43 3d 27 27 2c 44 3d 32 2c 45 3d 33 2c 46 3d 32 2c 47 3d 5b 5d 2c 48 3d 30 2c 49 3d 30 2c 4a 3d 30 3b 4a 3c 69 5b 67 4d 28 31 36 37 30 29 5d 3b 4a 2b 3d 31 29 Data Ascii: nction(i,gL){return gL=gK,d[gL(1311)]!==d[gL(1351)]?gL(417)[gL(1552)](i):gL(417)[gL(1552)](d)})},'g':function(i,j,o,gM,s,x,B,C,D,E,F,G,H,I,J,K,L,M,O){if(gM=gJ,d[gM(1712)](null,i))return'';for(x={},B={},C='',D=2,E=3,F=2,G=[],H=0,I=0,J=0;J<i[gM(1670)];J+=1)
2024-09-27 04:02:08 UTC	1369	IN	Data Raw: 64 5b 67 4d 28 31 32 38 36 29 5d 28 32 35 36 2c 43 5b 67 4d 28 31 37 34 34 29 5d 28 30 29 29 29 7b 66 6f 72 28 73 3d 30 3b 73 3c 46 3b 48 3c 3c 3d 31 2c 6a 2d 31 3d 3d 49 3f 28 49 3d 30 2c 47 5b 67 4d 28 31 32 39 33 29 5d 28 64 5b 67 4d 28 31 30 32 33 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 67 4d 28 31 37 34 34 29 5d 28 30 29 2c 73 3d 30 3b 38 3e 73 3b 48 3d 64 5b 67 4d 28 39 31 39 29 5d 28 48 2c 31 29 7c 4d 26 31 2e 30 34 2c 64 5b 67 4d 28 31 37 33 37 29 5d 28 49 2c 6a 2d 31 29 3f 28 49 3d 30 2c 47 5b 67 4d 28 31 32 39 33 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 4d 3d 31 2c 73 3d 30 3b 73 3c 46 3b 48 3d 64 5b 67 4d 28 31 36 36 Data Ascii: d[gM(1286)](256,C[gM(1744)](0))){for(s=0;s<F;H<<=1,j-1==I?(I=0,G[gM(1293)](d[gM(1023)](o,H)),H=0):I++,s++);for(M=C[gM(1744)](0),s=0;8>s;H=d[gM(919)](H,1)\|M&1.04,d[gM(1737)](I,j-1)?(I=0,G[gM(1293)](o(H)),H=0):I++,M>>=1,s++);}else{for(M=1,s=0;s<F;H=d[gM(166
2024-09-27 04:02:08 UTC	1369	IN	Data Raw: 74 69 6e 75 65 3b 63 61 73 65 27 31 27 3a 46 3c 3c 3d 31 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 32 27 3a 48 3e 3e 3d 31 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 33 27 3a 4e 3d 48 26 47 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 34 27 3a 4a 7c 3d 28 30 3c 4e 3f 31 3a 30 29 2a 46 3b 63 6f 6e 74 69 6e 75 65 7d 62 72 65 61 6b 7d 73 77 69 74 63 68 28 4a 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 67 50 28 31 35 34 36 29 5d 28 32 2c 38 29 2c 46 3d 31 3b 4b 21 3d 46 3b 4e 3d 48 26 47 2c 48 3e 3e 3d 31 2c 64 5b 67 50 28 36 31 36 29 5d 28 30 2c 48 29 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 64 5b 67 50 28 31 36 34 31 29 5d 28 30 3c 4e 3f 31 3a 30 2c 46 29 2c 46 3c 3c 3d 31 29 3b 4f 3d 65 28 4a 29 3b 62 72 Data Ascii: tinue;case'1':F<<=1;continue;case'2':H>>=1;continue;case'3':N=H&G;continue;case'4':J\|=(0<N?1:0)*F;continue}break}switch(J){case 0:for(J=0,K=Math[gP(1546)](2,8),F=1;K!=F;N=H&G,H>>=1,d[gP(616)](0,H)&&(H=j,G=o(I++)),J\|=d[gP(1641)](0<N?1:0,F),F<<=1);O=e(J);br
2024-09-27 04:02:08 UTC	1369	IN	Data Raw: 5b 68 6e 28 38 38 32 29 5d 28 73 65 74 54 69 6d 65 6f 75 74 2c 65 59 2c 30 29 7d 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 65 59 2c 30 29 2c 65 4d 5b 67 49 28 31 32 30 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 68 4c 2c 65 2c 68 2c 69 2c 6a 29 7b 65 3d 28 68 4c 3d 67 49 2c 7b 27 57 69 42 41 62 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 67 5e 68 7d 2c 27 51 44 6d 66 55 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 67 2b 68 7d 2c 27 59 65 66 61 44 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 67 5e 68 7d 2c 27 4b 68 6a 49 70 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 67 2d 68 7d 2c 27 75 5a 72 58 4b 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 Data Ascii: [hn(882)](setTimeout,eY,0)}):setTimeout(eY,0),eM[gI(1207)]=function(c,hL,e,h,i,j){e=(hL=gI,{'WiBAb':function(g,h){return g^h},'QDmfU':function(g,h){return g+h},'YefaD':function(g,h){return g^h},'KhjIp':function(g,h){return g-h},'uZrXK':function(g,h){retur
2024-09-27 04:02:08 UTC	1369	IN	Data Raw: 2c 68 2c 69 2c 69 6d 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 29 7b 6b 3d 28 69 6d 3d 67 49 2c 6a 3d 7b 7d 2c 6a 5b 69 6d 28 31 30 30 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 46 2c 47 29 7b 72 65 74 75 72 6e 20 46 7c 7c 47 7d 2c 6a 5b 69 6d 28 38 32 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 46 2c 47 29 7b 72 65 74 75 72 6e 20 46 2b 47 7d 2c 6a 5b 69 6d 28 36 38 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 46 2c 47 29 7b 72 65 74 75 72 6e 20 46 2b 47 7d 2c 6a 5b 69 6d 28 31 37 36 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 46 2c 47 29 7b 72 65 74 75 72 6e 20 46 2b 47 7d 2c 6a 5b 69 6d 28 39 38 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 46 2c 47 29 7b 72 65 74 75 72 6e 20 46 2b 47 7d 2c 6a 5b 69 6d 28 31 36 32 39 29 5d 3d 69 6d 28 32 39 34 29 2c Data Ascii: ,h,i,im,j,k,l,m,n,o,s,x,B,C,D,E){k=(im=gI,j={},j[im(1001)]=function(F,G){return F\|\|G},j[im(828)]=function(F,G){return F+G},j[im(689)]=function(F,G){return F+G},j[im(1767)]=function(F,G){return F+G},j[im(989)]=function(F,G){return F+G},j[im(1629)]=im(294),
2024-09-27 04:02:08 UTC	1369	IN	Data Raw: 31 33 32 38 29 5d 2b 66 2c 69 6f 28 31 35 30 30 29 2b 67 2c 6a 5b 69 6f 28 31 31 38 38 29 5d 28 6a 5b 69 6f 28 39 37 31 29 5d 2c 4a 53 4f 4e 5b 69 6f 28 31 32 35 30 29 5d 28 68 29 29 5d 5b 69 6f 28 31 32 39 31 29 5d 28 69 6f 28 31 35 35 30 29 29 2c 65 4d 5b 69 6f 28 31 34 37 39 29 5d 28 66 75 6e 63 74 69 6f 6e 28 69 71 29 7b 69 71 3d 69 6f 2c 65 4d 5b 69 71 28 39 34 34 29 5d 28 6d 2c 75 6e 64 65 66 69 6e 65 64 2c 69 71 28 31 36 31 35 29 29 7d 2c 31 30 29 2c 65 4d 5b 69 6f 28 31 34 37 39 29 5d 28 66 75 6e 63 74 69 6f 6e 28 69 72 29 7b 69 72 3d 69 6f 2c 65 4d 5b 69 72 28 35 32 35 29 5d 28 29 7d 2c 31 65 33 29 2c 65 4d 5b 69 6f 28 34 36 36 29 5d 5b 69 6f 28 33 38 37 29 5d 28 6a 5b 69 6f 28 31 34 35 35 29 5d 2c 6d 29 29 3b 72 65 74 75 72 6e 21 5b 5d 7d 2c 66 Data Ascii: 1328)]+f,io(1500)+g,j[io(1188)](j[io(971)],JSON[io(1250)](h))][io(1291)](io(1550)),eM[io(1479)](function(iq){iq=io,eM[iq(944)](m,undefined,iq(1615))},10),eM[io(1479)](function(ir){ir=io,eM[ir(525)]()},1e3),eM[io(466)][io(387)](j[io(1455)],m));return![]},f
2024-09-27 04:02:08 UTC	1369	IN	Data Raw: 5b 67 49 28 31 31 31 36 29 5d 3d 67 6d 2c 67 79 5b 67 49 28 31 32 34 33 29 5d 3d 67 72 2c 67 79 5b 67 49 28 39 34 37 29 5d 3d 67 73 2c 67 79 5b 67 49 28 36 32 39 29 5d 3d 67 6e 2c 67 79 5b 67 49 28 31 37 32 37 29 5d 3d 67 74 2c 67 79 5b 67 49 28 35 30 34 29 5d 3d 67 71 2c 67 79 5b 67 49 28 35 35 39 29 5d 3d 67 70 2c 67 79 5b 67 49 28 31 34 38 36 29 5d 3d 66 4c 2c 67 79 5b 67 49 28 31 35 35 37 29 5d 3d 67 6c 2c 67 79 5b 67 49 28 32 38 33 29 5d 3d 67 6b 2c 67 79 5b 67 49 28 31 31 37 33 29 5d 3d 66 44 2c 67 79 5b 67 49 28 31 30 38 36 29 5d 3d 67 30 2c 67 79 5b 67 49 28 31 35 32 31 29 5d 3d 67 31 2c 67 79 5b 67 49 28 31 34 32 31 29 5d 3d 67 62 2c 67 79 5b 67 49 28 31 35 35 33 29 5d 3d 67 61 2c 67 79 5b 67 49 28 33 32 38 29 5d 3d 67 39 2c 67 79 5b 67 49 28 31 Data Ascii: [gI(1116)]=gm,gy[gI(1243)]=gr,gy[gI(947)]=gs,gy[gI(629)]=gn,gy[gI(1727)]=gt,gy[gI(504)]=gq,gy[gI(559)]=gp,gy[gI(1486)]=fL,gy[gI(1557)]=gl,gy[gI(283)]=gk,gy[gI(1173)]=fD,gy[gI(1086)]=g0,gy[gI(1521)]=g1,gy[gI(1421)]=gb,gy[gI(1553)]=ga,gy[gI(328)]=g9,gy[gI(1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49900	188.114.97.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:08 UTC	505	OUT	GET /socket.io/?EIO=4&transport=polling&t=P8nf9Q5 HTTP/1.1 Host: datechf.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
2024-09-27 04:02:09 UTC	560	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:09 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: no-store CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P4dNBTABBerl%2F5ZY07UAhWAHnfVaOFLnGXEFfS9ZyNYmkjBsIbpFFbpZyW8S7t1q2gCw922JY3KOWDciacQBmSOYgWwj9NvWydv%2BJCXb%2BQGckA2nUyccI2Q2p0CA"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c9898b61a62c468-EWR
2024-09-27 04:02:09 UTC	124	IN	Data Raw: 37 36 0d 0a 30 7b 22 73 69 64 22 3a 22 36 44 68 73 78 6b 45 6f 68 31 55 4c 68 61 45 5a 41 44 48 75 22 2c 22 75 70 67 72 61 64 65 73 22 3a 5b 22 77 65 62 73 6f 63 6b 65 74 22 5d 2c 22 70 69 6e 67 49 6e 74 65 72 76 61 6c 22 3a 32 35 30 30 30 2c 22 70 69 6e 67 54 69 6d 65 6f 75 74 22 3a 32 30 30 30 30 2c 22 6d 61 78 50 61 79 6c 6f 61 64 22 3a 31 30 30 30 30 30 30 7d 0d 0a Data Ascii: 760{"sid":"6DhsxkEoh1ULhaEZADHu","upgrades":["websocket"],"pingInterval":25000,"pingTimeout":20000,"maxPayload":1000000}
2024-09-27 04:02:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49905	188.114.97.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:08 UTC	530	OUT	GET /socket.io/?EIO=4&transport=polling&t=P8nf9v3&sid=rK5nYzdFNB7SnldaADHs HTTP/1.1 Host: datechf.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
2024-09-27 04:02:09 UTC	549	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:09 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close cache-control: no-store CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4bFaw%2BMvEPU6TbxNCFh8DrRMrPDuNRSUUdUQMHcHPf9DwrTjuLFwUWukKx6aZdayG2xCRvk4QSflIbJWjeJIECl00EfBYLw6jOcIalPFzB6tlL%2F5Knyfmc1bbu5s"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c9898b63acb43a9-EWR
2024-09-27 04:02:09 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49902	188.114.97.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:08 UTC	530	OUT	GET /socket.io/?EIO=4&transport=polling&t=P8nf9vB&sid=rK5nYzdFNB7SnldaADHs HTTP/1.1 Host: datechf.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
2024-09-27 04:02:09 UTC	505	IN	HTTP/1.1 400 Bad Request Date: Fri, 27 Sep 2024 04:02:09 GMT Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4IBxK4Bsi9z9roCly6aGjJ6RF01sB8drDq9PusNfu5zM3woImCx7jXOMpjC%2FzBUQxTHGbq6wIHwG5pDDW4VwFZRwewfIZ%2Fwe%2F%2BMMMz38PPBYUqPipDxBGEIWeNCR"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c9898b638cdc335-EWR
2024-09-27 04:02:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49907	188.114.96.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:09 UTC	716	OUT	GET /socket.io/?EIO=4&transport=polling&t=P8nfAEk&sid=rK5nYzdFNB7SnldaADHs HTTP/1.1 Host: datechf.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://datechf.cc/de/receive/79469380 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
2024-09-27 04:02:09 UTC	535	IN	HTTP/1.1 400 Bad Request Date: Fri, 27 Sep 2024 04:02:09 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ml9WqIlffszZ70QYn6HNF5qIs1Y1LIek%2FJn9c0qE5vMX3UYLQzuaLQHezdMA4dE73JRFiCMtrg3y1Uf1GL7130MRmjl%2BX5Ujc7gO%2FpYOiVeC5EaI3DZTpOaGku0m"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c9898b93fb4425b-EWR
2024-09-27 04:02:09 UTC	47	IN	Data Raw: 32 39 0d 0a 7b 22 63 6f 64 65 22 3a 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 53 65 73 73 69 6f 6e 20 49 44 20 75 6e 6b 6e 6f 77 6e 22 7d 0d 0a Data Ascii: 29{"code":1,"message":"Session ID unknown"}
2024-09-27 04:02:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49906	188.114.96.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:09 UTC	805	OUT	POST /socket.io/?EIO=4&transport=polling&t=P8nfAEl&sid=rK5nYzdFNB7SnldaADHs HTTP/1.1 Host: datechf.cc Connection: keep-alive Content-Length: 26 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://datechf.cc Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://datechf.cc/de/receive/79469380 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
2024-09-27 04:02:09 UTC	26	OUT	Data Raw: 34 32 5b 22 6d 61 64 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 22 2c 22 30 22 5d Data Ascii: 42["madeNotification","0"]
2024-09-27 04:02:09 UTC	537	IN	HTTP/1.1 400 Bad Request Date: Fri, 27 Sep 2024 04:02:09 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kvNx%2Fwhdz66V6ON5TMcrtyt0yXX072eEXbuzPVjxiRqA9pYb4C6RKxooc5rsGhFRB%2BVsItu6Eo7qfRRVyBi7Ibv5cD%2BO1hhaKTDS04%2FezkXByxIxXeeHwsYOzqdy"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c9898b96a0b43f3-EWR
2024-09-27 04:02:09 UTC	47	IN	Data Raw: 32 39 0d 0a 7b 22 63 6f 64 65 22 3a 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 53 65 73 73 69 6f 6e 20 49 44 20 75 6e 6b 6e 6f 77 6e 22 7d 0d 0a Data Ascii: 29{"code":1,"message":"Session ID unknown"}
2024-09-27 04:02:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49908	104.18.95.41	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:09 UTC	927	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1013387493:1727406779:YeLLeSo_U6RZZGVQuSYB98sLFp2Tgq99RTAz7RsFCL0/8c98989bea707d00/b235806045ed28b HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3710 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: b235806045ed28b sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/z2exq/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:09 UTC	3710	OUT	Data Raw: 76 5f 38 63 39 38 39 38 39 62 65 61 37 30 37 64 30 30 3d 63 4f 25 32 62 51 74 51 57 51 4f 51 73 51 64 44 33 77 44 33 68 51 44 6e 4a 75 71 59 44 47 33 71 33 6f 43 6e 2b 4a 78 33 42 69 33 47 6b 4a 6e 69 69 33 32 33 69 5a 47 56 67 6c 48 69 33 58 51 67 75 33 6c 33 76 74 49 4d 5a 4e 33 44 4f 67 58 33 4c 2b 33 50 4a 46 50 36 33 63 33 33 36 4f 33 58 51 33 4f 55 33 67 6c 57 70 6f 33 2d 68 58 54 63 73 71 6f 31 36 33 45 33 62 57 77 66 73 77 46 36 67 59 79 37 32 65 6a 30 42 37 2d 52 50 36 67 57 33 6b 33 33 75 51 44 43 64 2b 4e 6f 4e 74 33 33 74 4a 47 68 78 72 65 38 65 31 64 6d 45 33 44 4b 6f 51 4a 44 35 33 73 2b 74 63 5a 33 69 6c 51 33 49 6b 55 33 48 55 70 2b 36 33 67 7a 33 70 4f 56 7a 4c 74 59 39 73 73 62 33 4c 66 55 33 4a 70 6d 33 71 70 24 38 5a 4a 38 33 67 64 62 Data Ascii: v_8c98989bea707d00=cO%2bQtQWQOQsQdD3wD3hQDnJuqYDG3q3oCn+Jx3Bi3GkJnii323iZGVglHi3XQgu3l3vtIMZN3DOgX3L+3PJFP63c336O3XQ3OU3glWpo3-hXTcsqo163E3bWwfswF6gYy72ej0B7-RP6gW3k33uQDCd+NoNt33tJGhxre8e1dmE3DKoQJD53s+tcZ3ilQ3IkU3HUp+63gz3pOVzLtY9ssb3LfU3Jpm3qp$8ZJ83gdb
2024-09-27 04:02:09 UTC	717	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:09 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 152064 Connection: close cf-chl-gen: xSVnte2pRt307jCwx9dt9jGhdREgWcFCca0zpu34nQNO0649QTyJD+Rco5uZ8zxKA7GC9XASqaZ7JwZ4hsywvuQoRNaAgdFEacKHz1MqDn9tDEplP6OAqi2VBqen4ELHqzyT5DD/MtrRlAGtPti0iAXUP7lqVM8ApOt9W+HE+Aie7mxBsCoxWtxDzQxvlkBqlpyEeoz0lCgUinF4kE4geOB/OiLySy+c2IAS+P0DhM8+Gcj3xtfPBc03C9FD5wPBZBVY7hS6D+nt/SYJMLoIbAn+czsmQQyGfsAqKf4x1UIz5iiYeWa87PeM8xamGu9WnIu4XzHFSmS/ip0XbQ+6cgX2rqnsvoiD0F2Q9NxuQWgPe+4R77bxp3cUwNnLP+aKuzQ0y1QN2kv4OyynxyuxFrg2SVo3xzpBS5+kM83SZiQWs230T4U0hL52kgUqbVWEOJd5lsTAXG4BBvCxcjqZlfOssZFspJSBqKx31Mx6FE/6b5U=$PpU5HOmaCa/VM782 Server: cloudflare CF-RAY: 8c9898b98ae50c9d-EWR
2024-09-27 04:02:09 UTC	652	IN	Data Raw: 69 58 53 49 5a 6f 39 7a 62 5a 46 62 6e 5a 5a 69 70 59 5a 2b 63 58 2b 45 59 6e 4f 57 6e 6e 2b 43 62 35 6c 78 6d 34 36 6e 6a 34 4b 4f 6c 59 75 4e 70 6f 2b 56 71 61 69 77 6c 72 32 59 74 48 32 47 6d 49 57 68 6f 71 4b 56 6c 72 6d 69 71 36 36 72 74 4b 37 57 7a 35 54 55 6d 4c 4c 64 72 63 66 51 30 62 57 69 73 4c 65 2f 70 64 65 36 77 37 72 69 77 62 65 6c 7a 37 79 2b 38 4e 33 73 37 75 2f 76 39 66 62 50 75 37 65 34 76 4e 62 5a 41 64 4c 76 30 67 58 57 38 39 6e 6a 31 75 58 63 2f 63 55 48 33 4e 34 4a 2f 51 33 70 30 50 44 50 37 4e 54 30 30 78 67 62 36 76 73 62 32 2b 49 56 34 51 4d 6d 39 75 41 71 2f 75 6f 49 39 2b 45 78 4c 6a 49 67 43 67 66 77 41 54 55 7a 4d 41 67 38 2b 7a 68 41 50 6a 76 34 49 51 4c 2b 4f 50 33 36 4b 77 63 47 54 53 35 42 52 6a 6c 4e 4a 53 64 47 52 56 5a Data Ascii: iXSIZo9zbZFbnZZipYZ+cX+EYnOWnn+Cb5lxm46nj4KOlYuNpo+Vqaiwlr2YtH2GmIWhoqKVlrmiq66rtK7Wz5TUmLLdrcfQ0bWisLe/pde6w7riwbelz7y+8N3s7u/v9fbPu7e4vNbZAdLv0gXW89nj1uXc/cUH3N4J/Q3p0PDP7NT00xgb6vsb2+IV4QMm9uAq/uoI9+ExLjIgCgfwATUzMAg8+zhAPjv4IQL+OP36KwcGTS5BRjlNJSdGRVZ
2024-09-27 04:02:09 UTC	1369	IN	Data Raw: 51 58 31 32 64 58 31 57 53 47 47 43 61 47 56 61 63 46 31 36 6b 30 6c 67 53 32 46 75 55 34 70 58 66 4a 6d 4c 5a 31 75 49 56 32 74 36 65 56 74 77 6c 48 78 79 58 4a 39 31 6e 4b 36 43 72 34 56 36 5a 59 36 6b 62 49 4f 47 67 34 69 59 69 49 36 2f 71 58 32 52 65 5a 6d 53 6d 73 61 33 6c 63 4b 38 66 5a 7a 49 6d 73 71 6f 6f 35 79 52 72 64 62 4e 73 4b 37 47 78 4a 4b 5a 73 38 6d 34 71 4c 72 41 32 2b 4b 6b 34 39 37 41 74 4d 75 36 76 63 37 50 70 61 4c 44 32 73 62 6e 73 64 58 44 37 4d 58 45 2b 74 69 30 38 39 48 65 75 4e 48 64 34 72 7a 56 39 2b 62 41 32 51 7a 71 78 4e 37 5a 37 73 6a 69 42 50 4c 4d 35 68 6a 32 30 4f 76 6c 2b 74 54 76 2b 66 37 59 38 79 51 44 33 50 67 45 36 50 45 46 49 69 48 35 34 43 62 69 41 53 4d 55 45 44 4d 73 4f 66 51 6e 42 50 66 34 2f 50 6f 2f 2b 78 77 Data Ascii: QX12dX1WSGGCaGVacF16k0lgS2FuU4pXfJmLZ1uIV2t6eVtwlHxyXJ91nK6Cr4V6ZY6kbIOGg4iYiI6/qX2ReZmSmsa3lcK8fZzImsqoo5yRrdbNsK7GxJKZs8m4qLrA2+Kk497AtMu6vc7PpaLD2sbnsdXD7MXE+ti089HeuNHd4rzV9+bA2QzqxN7Z7sjiBPLM5hj20Ovl+tTv+f7Y8yQD3PgE6PEFIiH54CbiASMUEDMsOfQnBPf4/Po/+xw
2024-09-27 04:02:09 UTC	1369	IN	Data Raw: 44 78 6b 65 6e 5a 64 57 58 36 41 5a 47 39 74 61 59 43 45 6c 33 52 34 57 49 71 4c 6e 6e 39 34 66 57 39 2b 66 70 69 64 6b 49 43 65 65 35 53 45 70 49 6c 6d 65 59 4f 69 6b 34 39 79 70 33 4b 6b 69 71 6d 52 62 70 36 53 72 70 57 36 74 37 6a 46 75 70 57 32 6d 62 36 5a 75 70 58 43 6e 62 36 64 78 71 48 43 76 63 71 52 30 37 4b 33 74 72 4b 36 78 37 43 39 7a 36 2f 4d 77 4b 79 6b 6e 4c 2b 38 79 65 69 6e 32 65 76 65 71 62 7a 70 77 71 37 6c 7a 4d 2f 6d 38 75 6a 4b 36 2f 50 72 7a 75 2f 55 34 64 55 45 78 4e 48 67 31 4d 50 69 35 74 77 42 78 77 72 63 44 51 6a 69 35 77 6e 68 34 68 66 30 30 42 4c 74 2b 74 54 76 2b 66 37 59 38 79 51 44 33 50 67 45 36 50 45 46 49 69 48 35 34 43 62 69 41 53 4d 55 45 44 4d 48 4d 78 6a 77 4c 41 33 30 38 2f 6f 49 39 7a 48 36 44 51 41 41 49 43 67 64 Data Ascii: DxkenZdWX6AZG9taYCEl3R4WIqLnn94fW9+fpidkICee5SEpIlmeYOik49yp3KkiqmRbp6SrpW6t7jFupW2mb6ZupXCnb6dxqHCvcqR07K3trK6x7C9z6/MwKyknL+8yein2eveqbzpwq7lzM/m8ujK6/Przu/U4dUExNHg1MPi5twBxwrcDQji5wnh4hf00BLt+tTv+f7Y8yQD3PgE6PEFIiH54CbiASMUEDMHMxjwLA308/oI9zH6DQAAICgd
2024-09-27 04:02:09 UTC	1369	IN	Data Raw: 74 6d 63 47 32 52 69 6c 46 69 67 47 31 32 63 6e 61 48 63 48 32 41 58 34 75 41 59 4a 6c 63 6d 33 35 38 71 32 4f 4d 6e 59 47 4a 5a 36 47 46 73 36 61 72 68 72 65 51 74 59 79 56 6c 4b 6d 65 69 48 75 78 6b 73 4f 32 74 35 62 48 74 72 4f 63 70 61 53 39 6e 6f 61 70 6d 72 47 63 6e 61 2f 52 6b 73 36 75 78 5a 57 6d 31 4e 37 67 33 5a 79 64 32 74 6a 6a 74 4a 37 6e 77 4b 6a 46 74 72 75 6c 6f 65 2f 79 78 38 58 44 37 37 44 78 30 2b 79 7a 38 74 72 71 78 2f 37 7a 33 62 54 57 34 4e 33 54 75 65 58 63 78 38 54 56 41 4e 73 4c 32 38 67 49 33 76 44 56 38 42 6b 51 41 76 66 54 38 66 44 36 2b 68 76 65 45 52 37 34 39 4f 37 64 43 43 6f 6e 41 43 51 75 43 65 45 75 49 54 4c 38 4c 79 67 6f 38 7a 6f 53 4c 52 73 57 39 7a 50 38 50 6a 38 68 48 54 4d 64 45 6b 59 5a 49 54 6f 46 42 55 41 61 49 Data Ascii: tmcG2RilFigG12cnaHcH2AX4uAYJlcm358q2OMnYGJZ6GFs6arhreQtYyVlKmeiHuxksO2t5bHtrOcpaS9noapmrGcna/Rks6uxZWm1N7g3Zyd2tjjtJ7nwKjFtruloe/yx8XD77Dx0+yz8trqx/7z3bTW4N3TueXcx8TVANsL28gI3vDV8BkQAvfT8fD6+hveER749O7dCConACQuCeEuITL8Lygo8zoSLRsW9zP8Pj8hHTMdEkYZIToFBUAaI
2024-09-27 04:02:09 UTC	1369	IN	Data Raw: 71 67 47 32 54 68 47 35 64 58 48 6c 71 66 4a 39 35 6f 35 46 2b 5a 4a 53 55 67 70 61 47 62 4b 64 36 66 62 4b 4c 69 33 52 79 63 61 4b 70 71 6e 4f 33 73 62 43 66 63 59 75 74 73 4c 65 77 6e 4a 4b 36 6b 34 4b 37 6d 38 62 49 6e 70 2b 34 67 36 69 51 70 59 36 4f 76 38 58 48 72 39 47 6c 74 5a 65 62 33 74 69 2f 73 4d 2f 5a 76 63 4f 69 70 38 71 6d 32 63 54 46 38 4d 6a 52 78 65 53 76 31 75 62 68 38 38 32 34 37 4f 54 5a 32 72 37 73 37 76 62 54 7a 4e 51 44 2b 67 45 45 35 41 58 56 31 39 33 72 2b 74 45 45 36 68 50 6f 30 2b 62 59 31 2b 6b 52 43 76 59 4f 36 2f 44 37 39 75 37 32 4a 68 6e 39 35 64 38 71 2f 43 59 4a 39 76 6f 6d 37 42 77 47 41 79 76 75 45 52 41 49 4c 50 45 7a 2b 79 6f 63 45 6a 4d 73 52 41 45 65 41 41 52 48 51 7a 59 5a 42 55 30 35 4a 53 6b 4d 4b 46 56 56 49 52 Data Ascii: qgG2ThG5dXHlqfJ95o5F+ZJSUgpaGbKd6fbKLi3RycaKpqnO3sbCfcYutsLewnJK6k4K7m8bInp+4g6iQpY6Ov8XHr9GltZeb3ti/sM/ZvcOip8qm2cTF8MjRxeSv1ubh88247OTZ2r7s7vbTzNQD+gEE5AXV193r+tEE6hPo0+bY1+kRCvYO6/D79u72Jhn95d8q/CYJ9vom7BwGAyvuERAILPEz+yocEjMsRAEeAARHQzYZBU05JSkMKFVVIR
2024-09-27 04:02:09 UTC	1369	IN	Data Raw: 65 56 32 59 61 35 64 67 6b 49 57 62 6e 35 71 65 5a 61 65 47 68 49 71 47 6a 70 75 47 6a 6d 79 49 6a 4b 70 7a 65 4a 61 57 73 35 61 55 73 61 70 7a 6e 48 32 52 6c 5a 76 48 76 71 61 6f 75 73 53 4d 79 35 69 5a 69 4b 47 6d 77 4a 4b 4e 77 70 47 57 31 37 44 4a 74 64 37 49 79 74 4f 55 31 74 37 46 6f 38 4c 48 70 72 66 4c 79 75 58 71 7a 62 6e 63 34 37 33 77 34 76 44 6b 7a 50 66 50 32 50 33 30 2b 4e 38 42 33 66 4b 2b 76 4d 4c 54 32 74 62 44 77 66 6e 67 32 2b 6e 4f 34 67 34 48 35 51 6e 71 45 4e 54 71 45 52 45 55 45 64 51 59 41 52 48 72 46 2b 4c 39 39 51 59 58 39 51 4d 6d 35 79 48 33 2f 75 30 4c 4d 76 72 76 43 78 41 50 39 77 77 55 4f 66 4d 47 47 44 31 42 2b 79 49 52 52 52 52 47 4e 66 30 43 47 6b 67 68 49 42 6c 48 49 6b 78 48 4a 68 42 4f 52 6c 51 58 52 52 56 59 56 6c 41 Data Ascii: eV2Ya5dgkIWbn5qeZaeGhIqGjpuGjmyIjKpzeJaWs5aUsapznH2RlZvHvqaousSMy5iZiKGmwJKNwpGW17DJtd7IytOU1t7Fo8LHprfLyuXqzbnc473w4vDkzPfP2P30+N8B3fK+vMLT2tbDwfng2+nO4g4H5QnqENTqEREUEdQYARHrF+L99QYX9QMm5yH3/u0LMvrvCxAP9wwUOfMGGD1B+yIRRRRGNf0CGkghIBlHIkxHJhBORlQXRRVYVlA
2024-09-27 04:02:09 UTC	1369	IN	Data Raw: 49 39 34 68 48 6c 38 68 6e 65 65 61 6f 75 71 69 4a 32 46 6a 72 52 73 62 49 65 34 71 71 36 48 68 4a 79 6f 6a 37 75 62 6b 6f 32 61 6b 34 36 51 6b 62 4b 5a 6e 63 47 34 79 73 6a 52 73 49 6d 6e 78 37 47 6c 73 73 4b 59 72 36 69 5a 30 5a 43 7a 74 4c 53 39 6f 72 37 63 33 4e 32 6c 34 4f 4f 6f 78 74 37 69 33 39 33 6b 78 2b 6e 7a 7a 62 58 59 39 76 4c 56 31 37 7a 58 32 76 50 57 30 51 51 46 2b 74 76 59 34 63 66 37 32 67 73 46 41 38 77 4d 36 75 6a 4f 78 63 76 4e 42 38 2f 6a 2b 52 44 6d 36 4e 72 36 2f 76 48 36 2f 51 44 6b 41 41 48 66 33 2b 59 43 2b 42 67 47 43 52 73 4a 4b 2b 34 50 35 67 48 73 42 4f 72 30 4d 44 4d 39 4c 54 55 68 43 69 49 53 46 7a 49 38 51 77 67 55 48 30 64 48 4f 69 63 47 48 53 6b 2b 4b 46 55 55 44 54 5a 41 4f 42 56 5a 45 68 30 31 58 6a 4a 56 55 6c 52 63 Data Ascii: I94hHl8hneeaouqiJ2FjrRsbIe4qq6HhJyoj7ubko2ak46QkbKZncG4ysjRsImnx7GlssKYr6iZ0ZCztLS9or7c3N2l4OOoxt7i393kx+nzzbXY9vLV17zX2vPW0QQF+tvY4cf72gsFA8wM6ujOxcvNB8/j+RDm6Nr6/vH6/QDkAAHf3+YC+BgGCRsJK+4P5gHsBOr0MDM9LTUhCiISFzI8QwgUH0dHOicGHSk+KFUUDTZAOBVZEh01XjJVUlRc
2024-09-27 04:02:09 UTC	1369	IN	Data Raw: 65 65 61 6f 75 71 69 4c 4b 46 6b 49 4a 73 62 49 65 48 68 49 4f 59 66 4a 32 37 73 4b 79 61 77 70 2f 46 77 4a 75 6f 73 62 75 42 6f 36 71 36 72 4b 4f 59 70 4d 50 44 6e 59 2f 49 76 38 2f 48 75 62 6d 33 74 37 6d 73 76 70 2f 62 72 39 72 47 70 70 6e 62 34 74 62 6b 35 38 50 73 32 4d 58 4b 36 63 47 39 34 75 44 72 35 38 33 58 35 50 44 74 32 50 44 4c 75 37 2f 55 30 2f 41 44 76 73 62 55 2f 76 37 61 42 65 37 63 78 75 62 6b 46 42 59 58 46 52 67 44 47 78 4c 78 46 39 77 59 36 43 41 6a 2f 4f 76 6b 34 75 45 54 47 68 76 6a 4b 43 49 68 45 4f 48 71 48 69 54 73 49 51 33 73 37 77 51 6a 4d 41 63 6f 44 68 58 33 43 68 63 5a 4e 7a 41 66 49 78 59 66 46 30 77 44 49 41 41 65 47 69 56 4c 49 68 34 54 45 79 70 58 56 7a 73 73 4a 55 74 50 4d 55 68 4f 58 68 38 30 4f 46 73 69 4d 30 63 39 52 Data Ascii: eeaouqiLKFkIJsbIeHhIOYfJ27sKyawp/FwJuosbuBo6q6rKOYpMPDnY/Iv8/Hubm3t7msvp/br9rGppnb4tbk58Ps2MXK6cG94uDr583X5PDt2PDLu7/U0/ADvsbU/v7aBe7cxubkFBYXFRgDGxLxF9wY6CAj/Ovk4uETGhvjKCIhEOHqHiTsIQ3s7wQjMAcoDhX3ChcZNzAfIxYfF0wDIAAeGiVLIh4TEypXVzssJUtPMUhOXh80OFsiM0c9R
2024-09-27 04:02:09 UTC	1369	IN	Data Raw: 77 6b 6e 36 49 6f 4c 65 52 63 34 79 71 70 37 4f 4d 71 59 32 2f 73 6e 32 59 74 37 48 48 76 71 69 79 6c 4d 47 57 75 4a 2f 4c 30 71 4f 69 76 73 32 6a 6b 4d 61 36 32 4c 71 6d 73 4d 6a 66 75 5a 75 30 30 73 2f 62 74 4e 47 30 77 63 69 69 36 4f 72 69 77 75 50 69 71 72 37 31 79 65 54 31 35 39 44 32 38 38 72 64 39 4c 76 34 2b 50 6e 64 38 51 48 41 2f 63 6a 2b 2b 38 48 4d 35 63 66 4c 44 38 76 73 33 68 44 74 38 66 49 51 2b 50 62 34 35 51 38 4f 43 75 44 39 32 42 4d 6a 46 2f 67 6e 4a 79 62 31 4b 78 73 66 2f 41 6b 66 4c 77 54 39 43 52 37 73 4b 41 6b 72 44 52 55 72 39 52 45 65 39 76 30 36 39 51 4d 34 4e 55 51 32 4f 43 41 73 53 43 59 4f 52 30 39 53 4c 69 42 51 49 6a 51 50 55 78 6c 45 4e 31 63 64 4e 53 78 63 53 6a 39 50 50 56 45 6b 4e 55 63 63 50 6b 49 73 4f 57 74 65 5a 57 Data Ascii: wkn6IoLeRc4yqp7OMqY2/sn2Yt7HHvqiylMGWuJ/L0qOivs2jkMa62LqmsMjfuZu00s/btNG0wcii6OriwuPiqr71yeT159D288rd9Lv4+Pnd8QHA/cj++8HM5cfLD8vs3hDt8fIQ+Pb45Q8OCuD92BMjF/gnJyb1Kxsf/AkfLwT9CR7sKAkrDRUr9REe9v069QM4NUQ2OCAsSCYOR09SLiBQIjQPUxlEN1cdNSxcSj9PPVEkNUccPkIsOWteZW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49909	104.18.95.41	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:09 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/g/i/8c9898691a4b42b5/1727409719721/QRnLOEdUTmV-wSC HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:09 UTC	170	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:09 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8c9898b9eb25728a-EWR
2024-09-27 04:02:09 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5e 00 00 00 29 08 02 00 00 00 33 97 09 40 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR^)3@IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49910	104.18.95.41	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:09 UTC	928	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1747044856:1727406813:cYobLX1V0bNGFw4HsDfHR7tNyeWvFZHZq9lR0vUDSLA/8c9898691a4b42b5/154eb201ebda143 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 32672 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 154eb201ebda143 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/15pzp/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:09 UTC	16384	OUT	Data Raw: 76 5f 38 63 39 38 39 38 36 39 31 61 34 62 34 32 62 35 3d 31 50 4c 39 78 5a 76 7a 34 79 34 45 25 32 62 66 77 73 58 73 64 79 4c 5a 79 76 42 73 59 39 61 39 66 7a 73 52 73 6f 35 30 4e 76 78 61 73 79 51 30 47 50 79 7a 76 2d 47 73 30 4a 73 4c 30 77 76 75 73 69 4d 62 71 34 73 24 39 46 6b 73 71 2d 51 50 73 49 47 35 73 43 47 6c 53 5a 47 4e 73 6f 73 30 50 73 4a 73 64 79 79 70 73 31 78 71 43 73 38 4a 34 73 48 24 35 42 5a 57 38 37 73 53 51 73 69 2b 70 39 46 2b 34 34 73 73 68 35 73 4d 70 45 39 70 73 55 39 45 2d 73 5a 6d 48 4e 62 57 67 6a 70 4c 73 6f 39 70 4d 79 37 66 4a 4e 6f 47 73 47 70 79 4d 39 57 6c 76 4e 4e 74 72 73 56 42 51 7a 56 69 53 73 73 50 73 4a 34 47 70 63 78 39 73 42 78 49 70 4c 38 24 43 65 35 49 51 61 79 77 49 4c 70 53 32 63 2b 41 6e 46 31 47 70 73 7a 75 Data Ascii: v_8c9898691a4b42b5=1PL9xZvz4y4E%2bfwsXsdyLZyvBsY9a9fzsRso50NvxasyQ0GPyzv-Gs0JsL0wvusiMbq4s$9Fksq-QPsIG5sCGlSZGNsos0PsJsdyyps1xqCs8J4sH$5BZW87sSQsi+p9F+44ssh5sMpE9psU9E-sZmHNbWgjpLso9pMy7fJNoGsGpyM9WlvNNtrsVBQzViSssPsJ4Gpcx9sBxIpL8$Ce5IQaywILpS2c+AnF1Gpszu
2024-09-27 04:02:09 UTC	16288	OUT	Data Raw: 54 56 47 77 47 79 74 4c 35 76 53 76 6f 51 31 34 73 73 46 35 33 34 34 5a 68 43 4c 35 30 72 73 73 73 75 36 6b 2b 76 51 6b 58 76 47 4a 35 73 4c 67 76 4c 76 74 73 45 73 47 77 73 78 4e 66 4a 76 47 73 39 73 4e 73 31 38 73 36 73 69 59 41 35 76 77 73 55 73 73 66 73 79 73 4b 72 4f 68 39 31 39 58 48 24 7a 73 32 73 64 77 47 5a 73 43 73 6b 39 76 41 2b 65 73 56 39 73 47 76 4a 73 64 72 73 4c 73 42 73 58 35 47 77 76 4f 73 66 41 47 41 73 55 73 79 73 46 4c 4a 2b 54 2b 51 45 6b 73 6c 73 79 73 30 43 73 35 73 64 51 47 7a 73 75 73 55 73 66 45 51 74 34 79 77 5a 4c 73 6d 6a 47 73 30 35 45 46 73 52 73 66 35 5a 56 51 6f 39 49 51 73 51 73 2b 39 46 64 39 79 73 45 35 30 56 76 6d 73 57 73 64 36 72 48 73 6a 39 47 43 73 35 73 77 35 45 30 39 69 73 65 35 73 77 76 41 73 49 35 5a 2b 45 46 Data Ascii: TVGwGytL5vSvoQ14ssF5344ZhCL50rsssu6k+vQkXvGJ5sLgvLvtsEsGwsxNfJvGs9sNs18s6siYA5vwsUssfsysKrOh919XH$zs2sdwGZsCsk9vA+esV9sGvJsdrsLsBsX5GwvOsfAGAsUsysFLJ+T+QEkslsys0Cs5sdQGzsusUsfEQt4ywZLsmjGs05EFsRsf5ZVQo9IQsQs+9Fd9ysE50VvmsWsd6rHsj9GCs5sw5E09ise5swvAsI5Z+EF
2024-09-27 04:02:09 UTC	927	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:09 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4632 Connection: close cf-chl-out-s: 2+xEu6CBuZVOTqStUZwaQlfeMo8sow9vKMbLe0QpWF1imAU3gQBYq5DsQ4qDDV+l6h3nmXdsQo5YZFH76NGKN0AhXsI80GvRgBkmxBAd5JgdsEz3eF/kvWSLKphXGV7CduqdsxRPi5EQd6YGAGC92AffuFGrGslzYPhzhkoFKkz09prhgwjAtxl9QIfMmULCiqEw3r+SQ9mNxQeUW8gm+rulo29NPs7lzNy1LjqWE89/7f7p1IX0T0IlJu9syKq7ILHgAzWT9CXXSXUpzxHOD+fpAq7/RLr6s5wytM/fFX5RlNVO9Kf4ccoGBaM9MdgcucaxMw+4C8twHz3rub8vdViZ1mHlEktgP6FweJNTLxoo16GPQwNzzvPK2NQ6v4H7pTFkywpRecPoJfA0zTZGAvV4g8nSk4Pp1LLccAvhfrgFNRIPTd0tVmF7fm8AiD3e7obPLUPVs5Of228+bAIgjKW78gsUzmkgd3YbJyqN7kAKVXH2xOFMKRzM2gdnErUphxR3qZkphzCF/SFtl01VKfv1N0qVBy4syA2YSXxAYHE=$E1EKa/znPEhcvz+X cf-chl-out: 1ywT8jru0wwOoNo/CuV1U+I6KiAsxNh1gRafDWgVbQfxNtne6+DztoRZvlPkCQULskaDpYlZWTVTrBjxoPFVwPUcPbEHf8WZOIAOuj2mGQn+3fXZhupm058=$d79YzBhx30zFMZkt Server: cloudflare CF-RAY: 8c9898ba88ec7289-EWR
2024-09-27 04:02:09 UTC	442	IN	Data Raw: 72 35 32 45 76 62 57 31 76 34 4c 4c 79 4e 43 5a 69 71 37 54 6b 4b 47 55 6a 38 72 44 6b 36 7a 5a 79 4e 4b 71 33 73 2b 73 30 4b 50 4f 6e 74 36 6a 78 4c 50 6b 77 4d 4f 71 78 4d 4c 77 33 38 4c 77 39 4f 50 47 74 36 76 4f 32 72 53 35 31 4d 6a 2b 79 66 72 75 41 72 37 76 76 64 77 4b 39 41 6e 32 78 38 30 50 35 41 33 72 36 74 7a 31 35 66 54 55 41 39 51 46 47 77 33 6f 44 64 77 42 37 76 77 58 41 78 72 65 42 79 76 31 47 41 67 46 47 2f 37 6f 36 2b 51 48 4e 50 50 77 41 41 59 78 38 2f 55 61 50 76 35 42 41 44 38 43 47 78 68 45 4d 6b 55 7a 4a 52 34 6b 4b 45 35 44 4b 51 6b 79 4d 52 30 30 50 78 41 6c 53 45 51 55 46 46 6f 56 57 69 34 77 50 52 78 4e 50 56 42 49 4a 79 63 35 52 47 6f 70 4f 47 46 47 51 43 70 74 50 30 42 6e 4e 55 70 77 61 7a 68 56 4f 55 39 56 59 59 45 34 59 56 77 Data Ascii: r52EvbW1v4LLyNCZiq7TkKGUj8rDk6zZyNKq3s+s0KPOnt6jxLPkwMOqxMLw38Lw9OPGt6vO2rS51Mj+yfruAr7vvdwK9An2x80P5A3r6tz15fTUA9QFGw3oDdwB7vwXAxreByv1GAgFG/7o6+QHNPPwAAYx8/UaPv5BAD8CGxhEMkUzJR4kKE5DKQkyMR00PxAlSEQUFFoVWi4wPRxNPVBIJyc5RGopOGFGQCptP0BnNUpwazhVOU9VYYE4YVw
2024-09-27 04:02:09 UTC	1369	IN	Data Raw: 45 42 46 51 67 49 30 74 63 61 41 68 66 72 44 52 34 48 45 67 76 59 39 65 73 6b 4a 76 67 57 48 4f 41 55 39 79 4d 75 36 79 72 75 49 53 77 42 38 65 30 30 4e 79 6f 6e 2b 44 77 79 47 44 45 71 48 77 45 2b 2f 69 45 6b 50 79 51 33 4a 45 74 47 42 6b 6b 46 4b 67 6f 7a 42 56 49 75 49 54 52 59 54 30 30 76 4b 30 63 63 4c 56 49 72 51 6c 45 68 4c 54 30 32 49 69 64 43 54 47 63 36 62 57 68 4a 52 56 42 41 4b 69 78 4d 51 30 46 5a 55 30 52 45 4e 56 74 4c 66 33 64 62 55 48 4e 6c 57 31 56 51 53 46 2b 48 59 30 74 57 61 6f 39 50 53 6f 6c 4f 6b 49 52 4e 5a 4a 42 5a 64 47 35 74 68 35 78 2f 6c 46 6d 4e 63 61 43 67 6b 56 2b 47 71 35 64 37 69 6d 69 58 66 59 5a 74 62 4b 2b 6f 72 35 42 76 71 62 61 6b 70 32 39 31 76 33 6d 39 66 59 7a 44 70 5a 56 39 74 37 6d 61 74 71 43 4d 6f 63 61 6a 78 Data Ascii: EBFQgI0tcaAhfrDR4HEgvY9eskJvgWHOAU9yMu6yruISwB8e00Nyon+DwyGDEqHwE+/iEkPyQ3JEtGBkkFKgozBVIuITRYT00vK0ccLVIrQlEhLT02IidCTGc6bWhJRVBAKixMQ0FZU0RENVtLf3dbUHNlW1VQSF+HY0tWao9PSolOkIRNZJBZdG5th5x/lFmNcaCgkV+Gq5d7imiXfYZtbK+or5Bvqbakp291v3m9fYzDpZV9t7matqCMocajx
2024-09-27 04:02:09 UTC	1369	IN	Data Raw: 55 43 65 49 51 2f 65 7a 37 31 78 54 35 36 78 59 63 44 78 41 63 4a 50 49 4b 39 2b 51 75 43 76 76 6f 37 51 34 41 45 67 41 52 38 51 6f 57 46 2f 51 4b 48 42 38 7a 48 6b 41 75 4e 68 49 58 4a 53 51 4a 48 43 67 71 4a 6a 34 73 48 30 42 4d 4e 44 41 52 44 79 41 33 4d 6b 6c 46 54 6a 34 2b 4f 56 35 43 57 55 35 41 49 54 35 53 52 69 46 4c 52 6a 73 36 53 56 73 6e 59 44 39 54 59 6b 55 2f 56 46 5a 30 55 32 56 49 66 46 64 59 63 31 6c 53 62 57 4a 38 51 58 46 37 5a 6f 46 71 52 55 32 47 64 32 68 79 66 48 78 4d 5a 6d 35 78 55 6e 71 4a 5a 6d 74 6d 58 59 68 6f 66 71 47 50 67 47 46 32 6a 35 75 58 66 6f 69 4b 6f 4a 65 48 6a 6e 47 66 6f 49 4a 73 67 35 4b 56 6b 6f 53 58 64 62 79 61 71 4b 36 73 76 36 75 67 73 4c 79 68 78 72 2b 58 72 4b 69 65 71 61 7a 44 77 4c 2b 37 73 5a 58 53 6f 4c Data Ascii: UCeIQ/ez71xT56xYcDxAcJPIK9+QuCvvo7Q4AEgAR8QoWF/QKHB8zHkAuNhIXJSQJHCgqJj4sH0BMNDARDyA3MklFTj4+OV5CWU5AIT5SRiFLRjs6SVsnYD9TYkU/VFZ0U2VIfFdYc1lSbWJ8QXF7ZoFqRU2Gd2hyfHxMZm5xUnqJZmtmXYhofqGPgGF2j5uXfoiKoJeHjnGfoIJsg5KVkoSXdbyaqK6sv6ugsLyhxr+XrKieqazDwL+7sZXSoL
2024-09-27 04:02:09 UTC	1369	IN	Data Raw: 2f 64 73 56 2b 67 4d 43 34 2f 72 68 4a 4f 67 58 4c 42 63 6c 44 2f 34 73 2b 68 45 51 4e 44 63 53 46 53 51 4b 47 67 6b 34 39 52 30 30 4d 42 59 54 45 55 41 77 4a 51 45 4a 4e 78 30 62 52 44 59 77 4c 78 34 70 4a 52 34 64 54 44 45 51 54 45 67 31 4f 46 51 74 4e 6c 41 2b 4e 6b 4a 57 58 31 52 44 49 53 56 69 52 45 68 4b 51 6c 64 6a 4c 55 5a 51 55 57 74 72 55 6d 31 30 55 46 5a 4a 65 47 5a 70 63 6d 73 30 62 6f 56 61 5a 47 47 49 5a 6d 56 6c 57 49 53 44 62 47 78 52 66 32 78 75 64 6f 4e 31 55 49 53 56 62 48 64 5a 5a 6e 35 76 61 6e 47 4c 58 47 52 63 68 4a 79 67 70 34 57 4c 71 4b 2b 4b 65 32 32 78 67 6d 79 4a 74 36 4b 56 69 71 65 6b 69 70 36 64 6e 6f 32 61 6f 4a 57 51 66 4d 65 30 6c 38 53 62 73 36 71 2f 77 5a 2b 63 7a 4c 2f 41 6f 4d 79 75 73 38 32 32 72 4c 4b 56 70 74 71 Data Ascii: /dsV+gMC4/rhJOgXLBclD/4s+hEQNDcSFSQKGgk49R00MBYTEUAwJQEJNx0bRDYwLx4pJR4dTDEQTEg1OFQtNlA+NkJWX1RDISViREhKQldjLUZQUWtrUm10UFZJeGZpcms0boVaZGGIZmVlWISDbGxRf2xudoN1UISVbHdZZn5vanGLXGRchJygp4WLqK+Ke22xgmyJt6KViqekip6dno2aoJWQfMe0l8Sbs6q/wZ+czL/AoMyus822rLKVptq
2024-09-27 04:02:09 UTC	83	IN	Data Raw: 65 4c 39 38 79 6e 71 48 77 63 45 2f 68 33 6e 2b 66 76 75 4c 77 67 6c 4b 53 50 32 4c 42 4d 54 44 67 77 2b 2b 42 63 42 44 42 59 6d 42 2f 6b 43 51 68 59 57 48 67 63 67 50 77 4d 45 52 7a 39 41 43 43 45 7a 4f 52 56 63 56 78 6f 71 55 56 64 4c 4a 67 3d 3d Data Ascii: eL98ynqHwcE/h3n+fvuLwglKSP2LBMTDgw++BcBDBYmB/kCQhYWHgcgPwMERz9ACCEzORVcVxoqUVdLJg==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49915	104.18.95.41	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:10 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1747044856:1727406813:cYobLX1V0bNGFw4HsDfHR7tNyeWvFZHZq9lR0vUDSLA/8c9898691a4b42b5/154eb201ebda143 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:10 UTC	349	IN	HTTP/1.1 404 Not Found Date: Fri, 27 Sep 2024 04:02:10 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: wLfF0offVEKx3Fq6+P/dDzBTyTaI6nYnisM=$vHh89sbsoo1Qgj8o Server: cloudflare CF-RAY: 8c9898bf5c39c404-EWR
2024-09-27 04:02:10 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49916	104.18.95.41	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:10 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1013387493:1727406779:YeLLeSo_U6RZZGVQuSYB98sLFp2Tgq99RTAz7RsFCL0/8c98989bea707d00/b235806045ed28b HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:10 UTC	349	IN	HTTP/1.1 404 Not Found Date: Fri, 27 Sep 2024 04:02:10 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: X8oUXB0b6H7D+TT5145BcxIaI3mWrre9jnU=$beds3qn73PKM7Dji cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8c9898bf7cacc454-EWR
2024-09-27 04:02:10 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49918	104.18.95.41	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:10 UTC	764	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/jkyme/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:11 UTC	1369	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:10 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 164860 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cross-origin-resource-policy: cross-origin cross-origin-embedder-policy: require-corp document-policy: js-profiling content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self' origin-agent-cluster: ?1 cross-origin-opener-policy: same-origin permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() referrer-policy: same-origin accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
2024-09-27 04:02:11 UTC	52	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 63 39 38 39 38 63 32 38 65 64 61 34 33 37 38 2d 45 57 52 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8c9898c28eda4378-EWR
2024-09-27 04:02:11 UTC	1317	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-09-27 04:02:11 UTC	1369	IN	Data Raw: 25 3b 6d 61 72 67 69 6e 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 Data Ascii: %;margin:0;overflow:hidden;padding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-web
2024-09-27 04:02:11 UTC	1369	IN	Data Raw: 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 7d 23 73 75 63 63 65 73 73 2d 70 72 65 2d 69 20 6c 69 6e 65 7b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 Data Ascii: ght:30px;width:30px}#success-pre-i line{stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;st
2024-09-27 04:02:11 UTC	1369	IN	Data Raw: 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e Data Ascii: allenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dark #challen
2024-09-27 04:02:11 UTC	1369	IN	Data Raw: 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 Data Ascii: dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-helper-loop
2024-09-27 04:02:11 UTC	1369	IN	Data Raw: 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 61 63 74 69 76 65 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 66 6f 63 75 73 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 31 36 36 33 37 39 7d 23 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 32 35 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 70 78 7d 2e 66 61 69 6c 75 72 65 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 Data Ascii: ,#challenge-overlay a:link,#challenge-overlay a:visited{color:#232323}#challenge-overlay a:active,#challenge-overlay a:focus,#challenge-overlay a:hover{color:#166379}#logo{height:25px;margin-bottom:1px}.failure-circle{stroke-dasharray:166;stroke-dashoffse
2024-09-27 04:02:11 UTC	1369	IN	Data Raw: 6e 3a 61 6c 6c 20 2e 31 73 20 65 61 73 65 2d 69 6e 3b 77 69 64 74 68 3a 32 34 70 78 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 38 7d 2e 63 62 2d 6c 62 20 2e 63 62 2d 69 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 63 62 2d 6c 62 20 2e 63 62 2d 6c 62 2d 74 7b 67 72 69 64 2d 63 6f 6c 75 6d 6e 3a 32 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 63 6f 6e 74 65 6e 74 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c Data Ascii: n:all .1s ease-in;width:24px;z-index:9998}.cb-lb .cb-i:after{border-radius:5px;content:"";position:absolute}.cb-lb .cb-lb-t{grid-column:2;margin-left:8px}.size-compact{font-size:14px}.size-compact #content{align-items:flex-start;display:flex;flex-flow:col
2024-09-27 04:02:11 UTC	1369	IN	Data Raw: 72 74 6c 7d 2e 72 74 6c 20 2e 63 62 2d 6c 62 2d 74 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 72 74 6c 20 23 65 78 70 69 72 65 64 2d 69 2c 2e 72 74 6c 20 23 66 61 69 6c 2d 69 2c 2e 72 74 6c 20 23 6f 76 65 72 72 75 6e 2d 69 2c 2e 72 74 6c 20 23 73 70 69 6e 6e 65 72 2d 69 2c 2e 72 74 6c 20 23 73 75 63 63 65 73 73 2d 69 2c 2e 72 74 6c 20 23 74 69 6d 65 6f 75 74 2d 69 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 Data Ascii: rtl}.rtl .cb-lb-t{margin-left:0;margin-right:8px;padding:0}.rtl #expired-i,.rtl #fail-i,.rtl #overrun-i,.rtl #spinner-i,.rtl #success-i,.rtl #timeout-i{left:255px}.rtl #fr-helper{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px
2024-09-27 04:02:11 UTC	1369	IN	Data Raw: 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 61 63 74 69 76 65 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 66 6f 63 75 73 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c Data Ascii: challenge-error-title a{color:#232323}#challenge-error-title a:active,#challenge-error-title a:focus,#challenge-error-title a:hover{color:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#chall

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49920	188.114.96.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:10 UTC	804	OUT	POST /socket.io/?EIO=4&transport=polling&t=P8nfAla&sid=rK5nYzdFNB7SnldaADHs HTTP/1.1 Host: datechf.cc Connection: keep-alive Content-Length: 1 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://datechf.cc Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://datechf.cc/de/receive/79469380 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
2024-09-27 04:02:10 UTC	1	OUT	Data Raw: 31 Data Ascii: 1
2024-09-27 04:02:11 UTC	535	IN	HTTP/1.1 400 Bad Request Date: Fri, 27 Sep 2024 04:02:11 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BR0EnVtv20xQKcbcTL8AmgfAjTUs7nY7atNvgxDlE1TTjNfEsrMoVntUgDvtybj%2Fu6TSTGVZioIKxRSj09RmcSzPc%2FyWO16goAieY5fBqGSXeL2zbevnaBqNnHEP"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c9898c29c048c29-EWR
2024-09-27 04:02:11 UTC	47	IN	Data Raw: 32 39 0d 0a 7b 22 63 6f 64 65 22 3a 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 53 65 73 73 69 6f 6e 20 49 44 20 75 6e 6b 6e 6f 77 6e 22 7d 0d 0a Data Ascii: 29{"code":1,"message":"Session ID unknown"}
2024-09-27 04:02:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49924	104.18.95.41	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:11 UTC	731	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8c9898c28eda4378&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/jkyme/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:12 UTC	301	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:12 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 120293 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8c9898c98a06430d-EWR
2024-09-27 04:02:12 UTC	1068	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 71 5a 4a 79 54 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.qZJyT2={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"http
2024-09-27 04:02:12 UTC	1369	IN	Data Raw: 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 25 32 32 25 33 45 43 6c 69 63 6b 25 32 30 68 65 72 65 25 32 30 66 6f 72 25 32 30 6d 6f 72 65 25 32 30 69 6e 66 6f 72 6d 61 74 69 6f 6e 25 33 43 25 32 46 61 25 33 45 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 61 69 6c 75 72 65 22 3a 22 45 72 72 6f 72 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 73 75 63 63 65 73 73 22 3a 22 53 75 63 63 65 73 73 25 32 31 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 22 3a 22 48 61 76 69 6e 67 25 32 30 74 72 6f 75 Data Ascii: dflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support%22%3EClick%20here%20for%20more%20information%3C%2Fa%3E","turnstile_failure":"Error","turnstile_success":"Success%21","turnstile_feedback_report":"Having%20trou
2024-09-27 04:02:12 UTC	1369	IN	Data Raw: 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 31 36 31 38 36 39 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 49 28 35 37 37 29 5d 2c 65 4f 3d 66 75 6e 63 74 69 6f 6e 28 67 4a 2c 64 2c 65 2c 66 2c 67 29 7b 72 65 74 75 72 6e 20 67 4a 3d 67 49 2c 64 3d 7b 27 62 57 63 7a 4a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 73 6d 45 4e 79 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 5e 69 7d 2c 27 58 58 70 66 41 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 54 52 45 53 76 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 Data Ascii: ;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,161869),eM=this\|\|self,eN=eM[gI(577)],eO=function(gJ,d,e,f,g){return gJ=gI,d={'bWczJ':function(h,i){return h-i},'smENy':function(h,i){return h^i},'XXpfA':function(h,i){return h==i},'TRESv':function(h,i
2024-09-27 04:02:12 UTC	1369	IN	Data Raw: 2c 4e 2c 50 2c 54 2c 55 2c 56 29 7b 69 66 28 67 4e 3d 67 4a 2c 73 3d 7b 27 52 55 50 52 45 27 3a 66 75 6e 63 74 69 6f 6e 28 4f 2c 50 2c 67 4c 29 7b 72 65 74 75 72 6e 20 67 4c 3d 62 2c 64 5b 67 4c 28 31 31 36 37 29 5d 28 4f 2c 50 29 7d 2c 27 53 5a 77 6b 45 27 3a 66 75 6e 63 74 69 6f 6e 28 4f 2c 50 29 7b 72 65 74 75 72 6e 20 4f 5e 50 7d 2c 27 69 58 65 6a 58 27 3a 66 75 6e 63 74 69 6f 6e 28 4f 2c 50 29 7b 72 65 74 75 72 6e 20 4f 5e 50 7d 2c 27 55 4d 55 59 42 27 3a 66 75 6e 63 74 69 6f 6e 28 4f 2c 50 2c 67 4d 29 7b 72 65 74 75 72 6e 20 67 4d 3d 62 2c 64 5b 67 4d 28 31 33 34 30 29 5d 28 4f 2c 50 29 7d 7d 2c 64 5b 67 4e 28 31 34 33 36 29 5d 28 6e 75 6c 6c 2c 69 29 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 42 3d 7b 7d 2c 43 3d 7b 7d 2c 44 3d 27 27 2c 45 3d 32 2c Data Ascii: ,N,P,T,U,V){if(gN=gJ,s={'RUPRE':function(O,P,gL){return gL=b,d[gL(1167)](O,P)},'SZwkE':function(O,P){return O^P},'iXejX':function(O,P){return O^P},'UMUYB':function(O,P,gM){return gM=b,d[gM(1340)](O,P)}},d[gN(1436)](null,i))return'';for(B={},C={},D='',E=2,
2024-09-27 04:02:12 UTC	1369	IN	Data Raw: 29 3b 7d 45 2d 2d 2c 45 3d 3d 30 26 26 28 45 3d 4d 61 74 68 5b 67 4e 28 38 30 30 29 5d 28 32 2c 47 29 2c 47 2b 2b 29 2c 64 65 6c 65 74 65 20 43 5b 44 5d 7d 65 6c 73 65 20 66 6f 72 28 4e 3d 42 5b 44 5d 2c 78 3d 30 3b 64 5b 67 4e 28 35 32 37 29 5d 28 78 2c 47 29 3b 49 3d 49 3c 3c 31 7c 64 5b 67 4e 28 31 36 38 33 29 5d 28 4e 2c 31 29 2c 4a 3d 3d 64 5b 67 4e 28 39 33 36 29 5d 28 6a 2c 31 29 3f 28 4a 3d 30 2c 48 5b 67 4e 28 31 33 32 38 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3e 3e 3d 31 2c 78 2b 2b 29 3b 44 3d 28 45 2d 2d 2c 45 3d 3d 30 26 26 28 45 3d 4d 61 74 68 5b 67 4e 28 38 30 30 29 5d 28 32 2c 47 29 2c 47 2b 2b 29 2c 42 5b 4d 5d 3d 46 2b 2b 2c 53 74 72 69 6e 67 28 4c 29 29 7d 69 66 28 27 27 21 3d 3d 44 29 7b 69 66 28 67 4e 28 31 30 37 39 Data Ascii: );}E--,E==0&&(E=Math[gN(800)](2,G),G++),delete C[D]}else for(N=B[D],x=0;d[gN(527)](x,G);I=I<<1\|d[gN(1683)](N,1),J==d[gN(936)](j,1)?(J=0,H[gN(1328)](o(I)),I=0):J++,N>>=1,x++);D=(E--,E==0&&(E=Math[gN(800)](2,G),G++),B[M]=F++,String(L))}if(''!==D){if(gN(1079
2024-09-27 04:02:12 UTC	1369	IN	Data Raw: 28 31 34 32 39 29 5d 28 49 2c 31 29 7c 64 5b 67 4e 28 31 36 38 33 29 5d 28 4e 2c 31 29 2c 64 5b 67 4e 28 31 34 33 36 29 5d 28 4a 2c 6a 2d 31 29 3f 28 4a 3d 30 2c 48 5b 67 4e 28 31 33 32 38 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3e 3e 3d 31 2c 78 2b 2b 29 3b 66 6f 72 28 3b 3b 29 69 66 28 49 3c 3c 3d 31 2c 6a 2d 31 3d 3d 4a 29 7b 48 5b 67 4e 28 31 33 32 38 29 5d 28 64 5b 67 4e 28 31 33 34 32 29 5d 28 6f 2c 49 29 29 3b 62 72 65 61 6b 7d 65 6c 73 65 20 4a 2b 2b 3b 72 65 74 75 72 6e 20 48 5b 67 4e 28 35 31 38 29 5d 28 27 27 29 7d 2c 27 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 67 4f 29 7b 72 65 74 75 72 6e 20 67 4f 3d 67 4a 2c 68 3d 3d 6e 75 6c 6c 3f 27 27 3a 64 5b 67 4f 28 34 35 32 29 5d 28 27 27 2c 68 29 3f 6e 75 6c 6c 3a 66 2e 69 28 68 5b Data Ascii: (1429)](I,1)\|d[gN(1683)](N,1),d[gN(1436)](J,j-1)?(J=0,H[gN(1328)](o(I)),I=0):J++,N>>=1,x++);for(;;)if(I<<=1,j-1==J){H[gN(1328)](d[gN(1342)](o,I));break}else J++;return H[gN(518)]('')},'j':function(h,gO){return gO=gJ,h==null?'':d[gO(452)]('',h)?null:f.i(h[
2024-09-27 04:02:12 UTC	1369	IN	Data Raw: 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 67 51 28 38 30 30 29 5d 28 32 2c 38 29 2c 46 3d 31 3b 46 21 3d 4b 3b 4e 3d 48 26 47 2c 48 3e 3e 3d 31 2c 64 5b 67 51 28 31 33 38 32 29 5d 28 30 2c 48 29 26 26 28 48 3d 6a 2c 47 3d 64 5b 67 51 28 31 33 34 32 29 5d 28 6f 2c 49 2b 2b 29 29 2c 4a 7c 3d 64 5b 67 51 28 31 35 32 34 29 5d 28 30 3c 4e 3f 31 3a 30 2c 46 29 2c 46 3c 3c 3d 31 29 3b 73 5b 42 2b 2b 5d 3d 64 5b 67 51 28 31 33 34 32 29 5d 28 65 2c 4a 29 2c 4f 3d 64 5b 67 51 28 34 33 39 29 5d 28 42 2c 31 29 2c 78 2d 2d 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 67 51 28 38 30 30 29 5d 28 32 2c 31 36 29 2c 46 3d 31 3b 64 5b 67 51 28 31 36 36 35 29 5d 28 46 2c 4b 29 3b 4e 3d 64 5b 67 51 28 31 Data Ascii: ){case 0:for(J=0,K=Math[gQ(800)](2,8),F=1;F!=K;N=H&G,H>>=1,d[gQ(1382)](0,H)&&(H=j,G=d[gQ(1342)](o,I++)),J\|=d[gQ(1524)](0<N?1:0,F),F<<=1);s[B++]=d[gQ(1342)](e,J),O=d[gQ(439)](B,1),x--;break;case 1:for(J=0,K=Math[gQ(800)](2,16),F=1;d[gQ(1665)](F,K);N=d[gQ(1
2024-09-27 04:02:12 UTC	1369	IN	Data Raw: 66 6c 2c 63 29 7d 63 61 74 63 68 28 67 29 7b 72 65 74 75 72 6e 20 65 5b 68 41 28 31 38 32 37 29 5d 3d 3d 3d 65 5b 68 41 28 31 30 35 39 29 5d 3f 76 6f 69 64 28 65 5b 68 41 28 31 34 31 34 29 5d 28 69 2c 65 5b 68 41 28 31 30 34 34 29 5d 2c 66 75 6e 63 74 69 6f 6e 28 76 2c 68 42 29 7b 68 42 3d 68 41 2c 76 5b 68 42 28 31 36 35 30 29 5d 3d 6f 28 68 42 28 31 31 33 35 29 29 7d 29 2c 6b 28 68 41 28 34 36 32 29 2c 66 75 6e 63 74 69 6f 6e 28 76 2c 68 43 29 7b 68 43 3d 68 41 2c 76 5b 68 43 28 31 36 35 30 29 5d 3d 6f 28 68 43 28 31 31 33 35 29 29 7d 29 2c 65 5b 68 41 28 31 33 33 36 29 5d 28 6d 2c 68 41 28 31 33 39 31 29 2c 66 75 6e 63 74 69 6f 6e 28 76 2c 68 44 29 7b 68 44 3d 68 41 2c 76 5b 68 44 28 31 36 35 30 29 5d 3d 65 5b 68 44 28 31 30 37 34 29 5d 28 6f 2c 65 5b Data Ascii: fl,c)}catch(g){return e[hA(1827)]===e[hA(1059)]?void(e[hA(1414)](i,e[hA(1044)],function(v,hB){hB=hA,v[hB(1650)]=o(hB(1135))}),k(hA(462),function(v,hC){hC=hA,v[hC(1650)]=o(hC(1135))}),e[hA(1336)](m,hA(1391),function(v,hD){hD=hA,v[hD(1650)]=e[hD(1074)](o,e[
2024-09-27 04:02:12 UTC	1369	IN	Data Raw: 34 30 31 29 5d 3d 65 4d 5b 68 47 28 31 36 38 31 29 5d 5b 68 47 28 31 34 30 31 29 5d 2c 6f 5b 68 47 28 31 31 34 34 29 5d 3d 65 4d 5b 68 47 28 31 36 38 31 29 5d 5b 68 47 28 31 31 34 34 29 5d 2c 73 3d 6f 2c 78 3d 6e 65 77 20 65 4d 5b 28 68 47 28 31 35 39 33 29 29 5d 28 29 2c 21 78 29 72 65 74 75 72 6e 3b 42 3d 6b 5b 68 47 28 31 35 38 36 29 5d 2c 78 5b 68 47 28 31 35 32 38 29 5d 28 42 2c 6e 2c 21 21 5b 5d 29 2c 78 5b 68 47 28 31 34 31 30 29 5d 3d 32 35 30 30 2c 78 5b 68 47 28 31 35 33 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 78 5b 68 47 28 31 31 33 30 29 5d 28 68 47 28 31 32 35 33 29 2c 6b 5b 68 47 28 35 37 39 29 5d 29 2c 43 3d 7b 7d 2c 43 5b 68 47 28 31 35 33 32 29 5d 3d 67 2c 43 2e 63 63 3d 68 2c 43 5b 68 47 28 39 31 32 29 5d 3d 6c 2c 43 5b 68 47 Data Ascii: 401)]=eM[hG(1681)][hG(1401)],o[hG(1144)]=eM[hG(1681)][hG(1144)],s=o,x=new eM[(hG(1593))](),!x)return;B=k[hG(1586)],x[hG(1528)](B,n,!![]),x[hG(1410)]=2500,x[hG(1538)]=function(){},x[hG(1130)](hG(1253),k[hG(579)]),C={},C[hG(1532)]=g,C.cc=h,C[hG(912)]=l,C[hG
2024-09-27 04:02:12 UTC	1369	IN	Data Raw: 49 28 31 36 38 31 29 5d 5b 67 49 28 31 35 32 36 29 5d 5b 67 49 28 31 38 31 30 29 5d 2c 66 73 3d 65 4d 5b 67 49 28 31 36 38 31 29 5d 5b 67 49 28 31 35 32 36 29 5d 5b 67 49 28 31 36 31 33 29 5d 2c 66 44 3d 21 5b 5d 2c 66 51 3d 75 6e 64 65 66 69 6e 65 64 2c 65 4d 5b 67 49 28 34 37 39 29 5d 28 67 49 28 31 35 36 34 29 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 69 76 2c 64 2c 65 29 7b 69 76 3d 67 49 2c 64 3d 7b 27 42 54 61 6d 6a 27 3a 69 76 28 33 37 34 29 2c 27 53 41 5a 6d 6c 27 3a 69 76 28 38 35 30 29 2c 27 4f 49 6e 68 7a 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 29 7b 72 65 74 75 72 6e 20 66 28 67 2c 68 29 7d 2c 27 6e 55 4a 53 66 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 28 67 29 7d 7d 2c 65 3d 63 5b 69 76 28 31 32 39 37 29 5d 2c Data Ascii: I(1681)][gI(1526)][gI(1810)],fs=eM[gI(1681)][gI(1526)][gI(1613)],fD=![],fQ=undefined,eM[gI(479)](gI(1564),function(c,iv,d,e){iv=gI,d={'BTamj':iv(374),'SAZml':iv(850),'OInhz':function(f,g,h){return f(g,h)},'nUJSf':function(f,g){return f(g)}},e=c[iv(1297)],

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49927	104.18.86.42	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:12 UTC	572	OUT	GET /consent/baf1656f-0c9f-4cd8-83fe-a5ce8d8c9eed/OtAutoBlock.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twint.ch/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:12 UTC	988	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:12 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8c9898ca3a1a19b6-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 45237 Cache-Control: public, max-age=86400 Expires: Sat, 28 Sep 2024 04:02:12 GMT Last-Modified: Tue, 24 Sep 2024 11:53:01 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: 2QfO3pW6d2PAkLqdTLEoQw== Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 5958e5ca-b01e-0078-1678-0efb3d000000 x-ms-version: 2009-09-19 Cross-Origin-Resource-Policy: cross-origin Server: cloudflare
2024-09-27 04:02:12 UTC	381	IN	Data Raw: 31 31 34 39 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 71 28 61 29 7b 76 61 72 20 63 3d 5b 5d 2c 62 3d 5b 5d 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 66 6f 72 28 76 61 72 20 67 3d 7b 7d 2c 68 3d 30 3b 68 3c 75 2e 6c 65 6e 67 74 68 3b 68 2b 2b 29 7b 76 61 72 20 64 3d 75 5b 68 5d 3b 69 66 28 64 2e 54 61 67 3d 3d 3d 66 29 7b 67 3d 64 3b 62 72 65 61 6b 7d 76 61 72 20 6c 3d 76 6f 69 64 20 30 2c 6b 3d 64 2e 54 61 67 3b 76 61 72 20 43 3d 28 6b 3d 2d 31 21 3d 3d 6b 2e 69 6e 64 65 78 4f 66 28 22 68 74 74 70 3a 22 29 3f 6b 2e 72 65 70 6c 61 63 65 28 22 68 74 74 70 3a 22 2c 22 22 29 3a 6b 2e 72 65 70 6c 61 63 65 28 22 68 74 74 70 73 3a 22 2c 22 22 29 2c 2d 31 21 3d 3d 28 6c 3d 6b 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 29 3f 6b 2e 72 65 Data Ascii: 1149!function(){function q(a){var c=[],b=[],e=function(f){for(var g={},h=0;h<u.length;h++){var d=u[h];if(d.Tag===f){g=d;break}var l=void 0,k=d.Tag;var C=(k=-1!==k.indexOf("http:")?k.replace("http:",""):k.replace("https:",""),-1!==(l=k.indexOf("?"))?k.re
2024-09-27 04:02:12 UTC	1369	IN	Data Raw: 65 2e 43 61 74 65 67 6f 72 79 49 64 29 2c 65 2e 56 65 6e 64 6f 72 26 26 28 62 3d 65 2e 56 65 6e 64 6f 72 2e 73 70 6c 69 74 28 22 3a 22 29 29 2c 21 65 2e 54 61 67 26 26 44 26 26 28 62 3d 63 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 76 61 72 20 67 3d 5b 5d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 6c 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 0a 72 65 74 75 72 6e 20 6c 2e 68 72 65 66 3d 64 2c 2d 31 21 3d 3d 28 64 3d 6c 2e 68 6f 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 22 2e 22 29 29 2e 69 6e 64 65 78 4f 66 28 22 77 77 77 22 29 7c 7c 32 3c 64 2e 6c 65 6e 67 74 68 3f 64 2e 73 6c 69 63 65 28 31 29 2e 6a 6f 69 6e 28 22 2e 22 29 3a 6c 2e 68 6f 73 74 6e 61 6d 65 7d 28 66 29 3b 76 2e 73 6f 6d 65 28 66 75 6e 63 Data Ascii: e.CategoryId),e.Vendor&&(b=e.Vendor.split(":")),!e.Tag&&D&&(b=c=function(f){var g=[],h=function(d){var l=document.createElement("a");return l.href=d,-1!==(d=l.hostname.split(".")).indexOf("www")\|\|2<d.length?d.slice(1).join("."):l.hostname}(f);v.some(func
2024-09-27 04:02:12 UTC	1369	IN	Data Raw: 78 4f 66 28 22 6f 74 2d 76 73 63 61 74 2d 22 2b 62 29 26 26 28 65 2b 3d 22 20 22 2b 28 22 6f 74 2d 76 73 63 61 74 2d 22 2b 62 29 2e 74 72 69 6d 28 29 29 2c 65 2b 22 20 22 2b 63 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 61 29 7b 76 61 72 20 63 2c 62 3d 71 28 61 2e 73 72 63 7c 7c 22 22 29 3b 28 62 2e 63 61 74 65 67 6f 72 79 49 64 73 2e 6c 65 6e 67 74 68 7c 7c 62 2e 76 73 43 61 74 49 64 73 2e 6c 65 6e 67 74 68 29 26 26 28 78 28 62 2e 63 61 74 65 67 6f 72 79 49 64 73 2c 61 2c 62 2e 76 73 43 61 74 49 64 73 29 2c 6d 28 62 2e 63 61 74 65 67 6f 72 79 49 64 73 2c 62 2e 76 73 43 61 74 49 64 73 29 7c 7c 28 61 2e 74 79 70 65 3d 22 74 65 78 74 2f 70 6c 61 69 6e 22 29 2c 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 62 65 66 6f 72 65 73 63 72 69 70 74 65 78 65 Data Ascii: xOf("ot-vscat-"+b)&&(e+=" "+("ot-vscat-"+b).trim()),e+" "+c}function z(a){var c,b=q(a.src\|\|"");(b.categoryIds.length\|\|b.vsCatIds.length)&&(x(b.categoryIds,a,b.vsCatIds),m(b.categoryIds,b.vsCatIds)\|\|(a.type="text/plain"),a.addEventListener("beforescriptexe
2024-09-27 04:02:12 UTC	1314	IN	Data Raw: 6d 65 6e 74 73 5b 65 5d 3b 72 65 74 75 72 6e 22 73 63 72 69 70 74 22 3d 3d 3d 62 5b 30 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7c 7c 2d 31 21 3d 3d 74 2e 69 6e 64 65 78 4f 66 28 62 5b 30 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3f 28 61 3d 42 2e 62 69 6e 64 28 64 6f 63 75 6d 65 6e 74 29 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 62 29 2c 63 3d 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 2e 62 69 6e 64 28 61 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 61 2c 7b 73 72 63 3a 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 61 2e 63 6c 6f 6e 65 4e 6f 64 65 28 29 2e 73 72 63 7d 63 61 74 63 68 28 66 29 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 29 Data Ascii: ments[e];return"script"===b[0].toLowerCase()\|\|-1!==t.indexOf(b[0].toLowerCase())?(a=B.bind(document).apply(void 0,b),c=a.setAttribute.bind(a),Object.defineProperties(a,{src:{get:function(){try{return a.cloneNode().src}catch(f){return a.getAttribute("src")
2024-09-27 04:02:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49928	104.18.86.42	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:12 UTC	541	OUT	GET /scripttemplates/otSDKStub.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twint.ch/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:12 UTC	907	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:12 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: jwlUUXc1HMPClYXMpY+NPQ== Last-Modified: Tue, 24 Sep 2024 06:41:29 GMT x-ms-request-id: d894fb67-d01e-0063-14b2-0ed5af000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Age: 44763 Expires: Thu, 26 Sep 2024 15:36:08 GMT Cache-Control: public, max-age=86400 CF-Cache-Status: HIT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8c9898ca3d0e1809-EWR
2024-09-27 04:02:12 UTC	462	IN	Data Raw: 35 32 65 30 0d 0a 76 61 72 20 4f 6e 65 54 72 75 73 74 53 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 2c 6f 2c 70 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3d 22 4f 70 74 61 6e 6f 6e 43 6f 6e 73 65 6e 74 22 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 74 6d 6c 47 72 6f 75 70 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 6f 73 74 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 67 65 6e 56 65 6e 64 6f 72 73 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 76 65 6e 64 6f 72 73 53 65 72 76 69 63 65 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 22 22 2c 74 68 69 73 2e 6f 6e 65 54 72 75 73 74 49 41 42 Data Ascii: 52e0var OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIAB
2024-09-27 04:02:12 UTC	1369	IN	Data Raw: 2c 22 46 52 22 2c 22 49 54 22 2c 22 43 59 22 2c 22 4c 56 22 2c 22 4c 54 22 2c 22 4c 55 22 2c 22 48 55 22 2c 22 4d 54 22 2c 22 4e 4c 22 2c 22 41 54 22 2c 22 50 4c 22 2c 22 50 54 22 2c 22 52 4f 22 2c 22 53 49 22 2c 22 53 4b 22 2c 22 46 49 22 2c 22 53 45 22 2c 22 47 42 22 2c 22 48 52 22 2c 22 4c 49 22 2c 22 4e 4f 22 2c 22 49 53 22 5d 2c 74 68 69 73 2e 73 74 75 62 46 69 6c 65 4e 61 6d 65 3d 22 6f 74 53 44 4b 53 74 75 62 22 2c 74 68 69 73 2e 44 41 54 41 46 49 4c 45 41 54 54 52 49 42 55 54 45 3d 22 64 61 74 61 2d 64 6f 6d 61 69 6e 2d 73 63 72 69 70 74 22 2c 74 68 69 73 2e 62 61 6e 6e 65 72 53 63 72 69 70 74 4e 61 6d 65 3d 22 6f 74 42 61 6e 6e 65 72 53 64 6b 2e 6a 73 22 2c 74 68 69 73 2e 6d 6f 62 69 6c 65 4f 6e 6c 69 6e 65 55 52 4c 3d 5b 5d 2c 74 68 69 73 2e 69 Data Ascii: ,"FR","IT","CY","LV","LT","LU","HU","MT","NL","AT","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.i
2024-09-27 04:02:12 UTC	1369	IN	Data Raw: 69 2e 6c 65 6e 67 74 68 3b 2b 2b 6e 29 69 66 28 2f 3a 2f 2e 74 65 73 74 28 69 5b 6e 5d 29 29 7b 69 66 28 21 28 61 3d 69 5b 6e 5d 2e 73 70 6c 69 74 28 2f 3a 28 2e 2b 29 2f 29 29 5b 31 5d 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 65 5b 74 68 69 73 2e 63 61 6d 65 6c 69 7a 65 28 61 5b 30 5d 29 5d 3d 61 5b 31 5d 2e 74 72 69 6d 28 29 7d 72 65 74 75 72 6e 20 65 7d 2c 65 29 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 69 6d 70 6c 65 6d 65 6e 74 54 68 65 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 2c 6f 3d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3b 72 65 74 75 72 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 Data Ascii: i.length;++n)if(/:/.test(i[n])){if(!(a=i[n].split(/:(.+)/))[1])return null;e[this.camelize(a[0])]=a[1].trim()}return e},e);function e(){var t=this;this.implementThePolyfill=function(){var a=t,o=Element.prototype.setAttribute;return Element.prototype.setAt
2024-09-27 04:02:12 UTC	1369	IN	Data Raw: 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 73 2e 6d 65 73 73 61 67 65 48 61 6e 64 6c 65 72 2c 21 31 29 2c 73 2e 61 64 64 46 72 61 6d 65 28 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 29 29 7d 2c 74 68 69 73 2e 72 65 6d 6f 76 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 69 66 72 61 6d 65 5b 6e 61 6d 65 3d 22 2b 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 2b 22 5d 22 29 5b 30 5d 3b 74 26 26 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 7d 2c 74 68 69 73 2e 65 78 65 63 75 74 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f Data Ascii: tListener("message",s.messageHandler,!1),s.addFrame(s.LOCATOR_NAME))},this.removeGppApi=function(){delete s.win.__gpp;var t=document.querySelectorAll("iframe[name="+s.LOCATOR_NAME+"]")[0];t&&t.parentElement.removeChild(t)},this.executeGppApi=function(){fo
2024-09-27 04:02:12 UTC	1369	IN	Data Raw: 74 75 72 6e 20 6e 7c 7c 28 69 2e 62 6f 64 79 3f 28 28 65 3d 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 29 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 2c 65 2e 6e 61 6d 65 3d 74 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 69 74 6c 65 22 2c 22 47 50 50 20 4c 6f 63 61 74 6f 72 22 29 2c 69 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 61 64 64 46 72 61 6d 65 28 74 29 7d 2c 35 29 29 2c 21 6e 7d 2c 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 3d 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 72 65 74 75 72 6e 20 6e Data Ascii: turn n\|\|(i.body?((e=i.createElement("iframe")).style.cssText="display:none",e.name=t,e.setAttribute("title","GPP Locator"),i.body.appendChild(e)):setTimeout(function(){s.addFrame(t)},5)),!n},this.addEventListener=function(t,e){var i,n=s.win.__gpp;return n
2024-09-27 04:02:12 UTC	1369	IN	Data Raw: 28 29 2c 74 68 69 73 2e 66 65 74 63 68 42 61 6e 6e 65 72 53 44 4b 44 65 70 65 6e 64 65 6e 63 79 28 29 2c 74 68 69 73 2e 63 61 70 74 75 72 65 4e 6f 6e 63 65 28 29 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 70 74 75 72 65 4e 6f 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 6e 63 65 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 6e 6f 6e 63 65 7c 7c 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7c 7c 6e 75 6c 6c 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 66 65 74 63 68 42 61 6e 6e 65 72 53 44 4b 44 65 70 65 6e 64 65 6e 63 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 65 74 44 6f 6d 61 69 6e 44 61 74 61 46 69 6c 65 55 52 4c 28 29 2c Data Ascii: (),this.fetchBannerSDKDependency(),this.captureNonce()},h.prototype.captureNonce=function(){this.nonce=p.stubScriptElement.nonce\|\|p.stubScriptElement.getAttribute("nonce")\|\|null},h.prototype.fetchBannerSDKDependency=function(){this.setDomainDataFileURL(),
2024-09-27 04:02:12 UTC	1369	IN	Data Raw: 77 69 6e 64 6f 77 3b 69 2e 4f 6e 65 54 72 75 73 74 26 26 69 2e 4f 6e 65 54 72 75 73 74 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 52 65 73 70 6f 6e 73 65 3f 28 69 3d 69 2e 4f 6e 65 54 72 75 73 74 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 52 65 73 70 6f 6e 73 65 2c 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 69 2e 63 6f 75 6e 74 72 79 43 6f 64 65 2c 69 2e 73 74 61 74 65 43 6f 64 65 29 2c 74 68 69 73 2e 61 64 64 42 61 6e 6e 65 72 53 44 4b 53 63 72 69 70 74 28 74 29 29 3a 28 69 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 29 7c 7c 74 2e 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 3f 28 65 3d 69 2e Data Ascii: window;i.OneTrust&&i.OneTrust.geolocationResponse?(i=i.OneTrust.geolocationResponse,this.setGeoLocation(i.countryCode,i.stateCode),this.addBannerSDKScript(t)):(i=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam))\|\|t.SkipGeolocation?(e=i.
2024-09-27 04:02:12 UTC	1369	IN	Data Raw: 62 75 74 65 28 22 64 61 74 61 2d 64 4c 61 79 65 72 2d 6e 61 6d 65 22 29 7c 7c 22 64 61 74 61 4c 61 79 65 72 22 7d 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 70 2e 75 73 65 72 4c 6f 63 61 74 69 6f 6e 3d 7b 63 6f 75 6e 74 72 79 3a 74 2c 73 74 61 74 65 3a 65 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 22 22 3a 65 7d 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 74 46 65 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 65 2c 6e 2c 61 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 21 31 29 2c 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 6e 75 6c 6c 29 3b 76 61 72 20 6f 3d 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 26 26 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f Data Ascii: bute("data-dLayer-name")\|\|"dataLayer"}},h.prototype.setGeoLocation=function(t,e){p.userLocation={country:t,state:e=void 0===e?"":e}},h.prototype.otFetch=function(t,i,e,n,a){void 0===e&&(e=!1),void 0===n&&(n=null);var o=window.sessionStorage&&window.sessio
2024-09-27 04:02:12 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 65 28 29 7d 29 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 52 65 67 69 6f 6e 53 65 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 69 2c 6e 2c 61 3d 70 2e 75 73 65 72 4c 6f 63 61 74 69 6f 6e 2c 6f 3d 74 2e 52 75 6c 65 53 65 74 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 74 2e 44 65 66 61 75 6c 74 7d 29 3b 69 66 28 21 61 2e 63 6f 75 6e 74 72 79 26 26 21 61 2e 73 74 61 74 65 29 72 65 74 75 72 6e 20 6f 26 26 30 3c 6f 2e 6c 65 6e 67 74 68 3f 6f 5b 30 5d 3a 6e 75 6c 6c 3b 66 6f 72 28 76 61 72 20 73 3d 61 2e 73 74 61 74 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 72 3d 61 2e 63 6f 75 6e 74 72 79 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 75 3d 30 3b 75 3c 74 Data Ascii: unction(){e()})},h.prototype.getRegionSet=function(t){var e,i,n,a=p.userLocation,o=t.RuleSet.filter(function(t){return!0===t.Default});if(!a.country&&!a.state)return o&&0<o.length?o[0]:null;for(var s=a.state.toLowerCase(),r=a.country.toLowerCase(),u=0;u<t
2024-09-27 04:02:12 UTC	1369	IN	Data Raw: 62 61 6c 53 63 6f 70 65 3d 21 30 2c 70 2e 69 73 53 74 75 62 52 65 61 64 79 3d 21 31 29 3a 28 70 2e 68 61 73 49 41 42 47 6c 6f 62 61 6c 53 63 6f 70 65 3d 21 31 2c 70 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 74 68 69 73 2e 67 65 74 43 6f 6f 6b 69 65 28 70 2e 6f 6e 65 54 72 75 73 74 49 41 42 43 6f 6f 6b 69 65 4e 61 6d 65 29 29 3a 70 2e 69 73 53 74 75 62 52 65 61 64 79 3d 21 31 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 69 64 61 74 65 49 41 42 47 44 50 52 41 70 70 6c 69 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 2e 73 70 6c 69 74 Data Ascii: balScope=!0,p.isStubReady=!1):(p.hasIABGlobalScope=!1,p.IABCookieValue=this.getCookie(p.oneTrustIABCookieName)):p.isStubReady=!1},h.prototype.validateIABGDPRApplied=function(){var t=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam).split

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49931	104.18.95.41	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:12 UTC	786	OUT	GET /cdn-cgi/challenge-platform/h/g/i/8c98989bea707d00/1727409729545/yrXd159Ts3jd8Vz HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/z2exq/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:12 UTC	170	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:12 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8c9898cbf8bcc468-EWR
2024-09-27 04:02:12 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 25 08 02 00 00 00 e7 7d af fd 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%}IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49936	104.18.86.42	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:12 UTC	369	OUT	GET /scripttemplates/otSDKStub.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:12 UTC	907	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:12 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: jwlUUXc1HMPClYXMpY+NPQ== Last-Modified: Tue, 24 Sep 2024 06:41:29 GMT x-ms-request-id: d894fb67-d01e-0063-14b2-0ed5af000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Age: 44763 Expires: Thu, 26 Sep 2024 15:36:08 GMT Cache-Control: public, max-age=86400 CF-Cache-Status: HIT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8c9898cec98f8c0f-EWR
2024-09-27 04:02:12 UTC	462	IN	Data Raw: 35 32 65 30 0d 0a 76 61 72 20 4f 6e 65 54 72 75 73 74 53 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 2c 6f 2c 70 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3d 22 4f 70 74 61 6e 6f 6e 43 6f 6e 73 65 6e 74 22 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 74 6d 6c 47 72 6f 75 70 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 6f 73 74 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 67 65 6e 56 65 6e 64 6f 72 73 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 76 65 6e 64 6f 72 73 53 65 72 76 69 63 65 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 22 22 2c 74 68 69 73 2e 6f 6e 65 54 72 75 73 74 49 41 42 Data Ascii: 52e0var OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIAB
2024-09-27 04:02:12 UTC	1369	IN	Data Raw: 2c 22 46 52 22 2c 22 49 54 22 2c 22 43 59 22 2c 22 4c 56 22 2c 22 4c 54 22 2c 22 4c 55 22 2c 22 48 55 22 2c 22 4d 54 22 2c 22 4e 4c 22 2c 22 41 54 22 2c 22 50 4c 22 2c 22 50 54 22 2c 22 52 4f 22 2c 22 53 49 22 2c 22 53 4b 22 2c 22 46 49 22 2c 22 53 45 22 2c 22 47 42 22 2c 22 48 52 22 2c 22 4c 49 22 2c 22 4e 4f 22 2c 22 49 53 22 5d 2c 74 68 69 73 2e 73 74 75 62 46 69 6c 65 4e 61 6d 65 3d 22 6f 74 53 44 4b 53 74 75 62 22 2c 74 68 69 73 2e 44 41 54 41 46 49 4c 45 41 54 54 52 49 42 55 54 45 3d 22 64 61 74 61 2d 64 6f 6d 61 69 6e 2d 73 63 72 69 70 74 22 2c 74 68 69 73 2e 62 61 6e 6e 65 72 53 63 72 69 70 74 4e 61 6d 65 3d 22 6f 74 42 61 6e 6e 65 72 53 64 6b 2e 6a 73 22 2c 74 68 69 73 2e 6d 6f 62 69 6c 65 4f 6e 6c 69 6e 65 55 52 4c 3d 5b 5d 2c 74 68 69 73 2e 69 Data Ascii: ,"FR","IT","CY","LV","LT","LU","HU","MT","NL","AT","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.i
2024-09-27 04:02:12 UTC	1369	IN	Data Raw: 69 2e 6c 65 6e 67 74 68 3b 2b 2b 6e 29 69 66 28 2f 3a 2f 2e 74 65 73 74 28 69 5b 6e 5d 29 29 7b 69 66 28 21 28 61 3d 69 5b 6e 5d 2e 73 70 6c 69 74 28 2f 3a 28 2e 2b 29 2f 29 29 5b 31 5d 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 65 5b 74 68 69 73 2e 63 61 6d 65 6c 69 7a 65 28 61 5b 30 5d 29 5d 3d 61 5b 31 5d 2e 74 72 69 6d 28 29 7d 72 65 74 75 72 6e 20 65 7d 2c 65 29 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 69 6d 70 6c 65 6d 65 6e 74 54 68 65 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 2c 6f 3d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3b 72 65 74 75 72 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 Data Ascii: i.length;++n)if(/:/.test(i[n])){if(!(a=i[n].split(/:(.+)/))[1])return null;e[this.camelize(a[0])]=a[1].trim()}return e},e);function e(){var t=this;this.implementThePolyfill=function(){var a=t,o=Element.prototype.setAttribute;return Element.prototype.setAt
2024-09-27 04:02:12 UTC	1369	IN	Data Raw: 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 73 2e 6d 65 73 73 61 67 65 48 61 6e 64 6c 65 72 2c 21 31 29 2c 73 2e 61 64 64 46 72 61 6d 65 28 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 29 29 7d 2c 74 68 69 73 2e 72 65 6d 6f 76 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 69 66 72 61 6d 65 5b 6e 61 6d 65 3d 22 2b 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 2b 22 5d 22 29 5b 30 5d 3b 74 26 26 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 7d 2c 74 68 69 73 2e 65 78 65 63 75 74 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f Data Ascii: tListener("message",s.messageHandler,!1),s.addFrame(s.LOCATOR_NAME))},this.removeGppApi=function(){delete s.win.__gpp;var t=document.querySelectorAll("iframe[name="+s.LOCATOR_NAME+"]")[0];t&&t.parentElement.removeChild(t)},this.executeGppApi=function(){fo
2024-09-27 04:02:12 UTC	1369	IN	Data Raw: 74 75 72 6e 20 6e 7c 7c 28 69 2e 62 6f 64 79 3f 28 28 65 3d 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 29 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 2c 65 2e 6e 61 6d 65 3d 74 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 69 74 6c 65 22 2c 22 47 50 50 20 4c 6f 63 61 74 6f 72 22 29 2c 69 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 61 64 64 46 72 61 6d 65 28 74 29 7d 2c 35 29 29 2c 21 6e 7d 2c 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 3d 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 72 65 74 75 72 6e 20 6e Data Ascii: turn n\|\|(i.body?((e=i.createElement("iframe")).style.cssText="display:none",e.name=t,e.setAttribute("title","GPP Locator"),i.body.appendChild(e)):setTimeout(function(){s.addFrame(t)},5)),!n},this.addEventListener=function(t,e){var i,n=s.win.__gpp;return n
2024-09-27 04:02:12 UTC	1369	IN	Data Raw: 28 29 2c 74 68 69 73 2e 66 65 74 63 68 42 61 6e 6e 65 72 53 44 4b 44 65 70 65 6e 64 65 6e 63 79 28 29 2c 74 68 69 73 2e 63 61 70 74 75 72 65 4e 6f 6e 63 65 28 29 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 70 74 75 72 65 4e 6f 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 6e 63 65 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 6e 6f 6e 63 65 7c 7c 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7c 7c 6e 75 6c 6c 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 66 65 74 63 68 42 61 6e 6e 65 72 53 44 4b 44 65 70 65 6e 64 65 6e 63 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 65 74 44 6f 6d 61 69 6e 44 61 74 61 46 69 6c 65 55 52 4c 28 29 2c Data Ascii: (),this.fetchBannerSDKDependency(),this.captureNonce()},h.prototype.captureNonce=function(){this.nonce=p.stubScriptElement.nonce\|\|p.stubScriptElement.getAttribute("nonce")\|\|null},h.prototype.fetchBannerSDKDependency=function(){this.setDomainDataFileURL(),
2024-09-27 04:02:12 UTC	1369	IN	Data Raw: 77 69 6e 64 6f 77 3b 69 2e 4f 6e 65 54 72 75 73 74 26 26 69 2e 4f 6e 65 54 72 75 73 74 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 52 65 73 70 6f 6e 73 65 3f 28 69 3d 69 2e 4f 6e 65 54 72 75 73 74 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 52 65 73 70 6f 6e 73 65 2c 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 69 2e 63 6f 75 6e 74 72 79 43 6f 64 65 2c 69 2e 73 74 61 74 65 43 6f 64 65 29 2c 74 68 69 73 2e 61 64 64 42 61 6e 6e 65 72 53 44 4b 53 63 72 69 70 74 28 74 29 29 3a 28 69 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 29 7c 7c 74 2e 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 3f 28 65 3d 69 2e Data Ascii: window;i.OneTrust&&i.OneTrust.geolocationResponse?(i=i.OneTrust.geolocationResponse,this.setGeoLocation(i.countryCode,i.stateCode),this.addBannerSDKScript(t)):(i=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam))\|\|t.SkipGeolocation?(e=i.
2024-09-27 04:02:12 UTC	1369	IN	Data Raw: 62 75 74 65 28 22 64 61 74 61 2d 64 4c 61 79 65 72 2d 6e 61 6d 65 22 29 7c 7c 22 64 61 74 61 4c 61 79 65 72 22 7d 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 70 2e 75 73 65 72 4c 6f 63 61 74 69 6f 6e 3d 7b 63 6f 75 6e 74 72 79 3a 74 2c 73 74 61 74 65 3a 65 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 22 22 3a 65 7d 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 74 46 65 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 65 2c 6e 2c 61 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 21 31 29 2c 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 6e 75 6c 6c 29 3b 76 61 72 20 6f 3d 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 26 26 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f Data Ascii: bute("data-dLayer-name")\|\|"dataLayer"}},h.prototype.setGeoLocation=function(t,e){p.userLocation={country:t,state:e=void 0===e?"":e}},h.prototype.otFetch=function(t,i,e,n,a){void 0===e&&(e=!1),void 0===n&&(n=null);var o=window.sessionStorage&&window.sessio
2024-09-27 04:02:12 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 65 28 29 7d 29 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 52 65 67 69 6f 6e 53 65 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 69 2c 6e 2c 61 3d 70 2e 75 73 65 72 4c 6f 63 61 74 69 6f 6e 2c 6f 3d 74 2e 52 75 6c 65 53 65 74 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 74 2e 44 65 66 61 75 6c 74 7d 29 3b 69 66 28 21 61 2e 63 6f 75 6e 74 72 79 26 26 21 61 2e 73 74 61 74 65 29 72 65 74 75 72 6e 20 6f 26 26 30 3c 6f 2e 6c 65 6e 67 74 68 3f 6f 5b 30 5d 3a 6e 75 6c 6c 3b 66 6f 72 28 76 61 72 20 73 3d 61 2e 73 74 61 74 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 72 3d 61 2e 63 6f 75 6e 74 72 79 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 75 3d 30 3b 75 3c 74 Data Ascii: unction(){e()})},h.prototype.getRegionSet=function(t){var e,i,n,a=p.userLocation,o=t.RuleSet.filter(function(t){return!0===t.Default});if(!a.country&&!a.state)return o&&0<o.length?o[0]:null;for(var s=a.state.toLowerCase(),r=a.country.toLowerCase(),u=0;u<t
2024-09-27 04:02:12 UTC	1369	IN	Data Raw: 62 61 6c 53 63 6f 70 65 3d 21 30 2c 70 2e 69 73 53 74 75 62 52 65 61 64 79 3d 21 31 29 3a 28 70 2e 68 61 73 49 41 42 47 6c 6f 62 61 6c 53 63 6f 70 65 3d 21 31 2c 70 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 74 68 69 73 2e 67 65 74 43 6f 6f 6b 69 65 28 70 2e 6f 6e 65 54 72 75 73 74 49 41 42 43 6f 6f 6b 69 65 4e 61 6d 65 29 29 3a 70 2e 69 73 53 74 75 62 52 65 61 64 79 3d 21 31 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 69 64 61 74 65 49 41 42 47 44 50 52 41 70 70 6c 69 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 2e 73 70 6c 69 74 Data Ascii: balScope=!0,p.isStubReady=!1):(p.hasIABGlobalScope=!1,p.IABCookieValue=this.getCookie(p.oneTrustIABCookieName)):p.isStubReady=!1},h.prototype.validateIABGDPRApplied=function(){var t=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam).split

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49937	104.18.86.42	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:12 UTC	400	OUT	GET /consent/baf1656f-0c9f-4cd8-83fe-a5ce8d8c9eed/OtAutoBlock.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:13 UTC	988	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:12 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8c9898cef90b8c4e-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 45237 Cache-Control: public, max-age=86400 Expires: Sat, 28 Sep 2024 04:02:12 GMT Last-Modified: Tue, 24 Sep 2024 11:53:01 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: 2QfO3pW6d2PAkLqdTLEoQw== Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 5958e5ca-b01e-0078-1678-0efb3d000000 x-ms-version: 2009-09-19 Cross-Origin-Resource-Policy: cross-origin Server: cloudflare
2024-09-27 04:02:13 UTC	381	IN	Data Raw: 31 31 34 39 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 71 28 61 29 7b 76 61 72 20 63 3d 5b 5d 2c 62 3d 5b 5d 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 66 6f 72 28 76 61 72 20 67 3d 7b 7d 2c 68 3d 30 3b 68 3c 75 2e 6c 65 6e 67 74 68 3b 68 2b 2b 29 7b 76 61 72 20 64 3d 75 5b 68 5d 3b 69 66 28 64 2e 54 61 67 3d 3d 3d 66 29 7b 67 3d 64 3b 62 72 65 61 6b 7d 76 61 72 20 6c 3d 76 6f 69 64 20 30 2c 6b 3d 64 2e 54 61 67 3b 76 61 72 20 43 3d 28 6b 3d 2d 31 21 3d 3d 6b 2e 69 6e 64 65 78 4f 66 28 22 68 74 74 70 3a 22 29 3f 6b 2e 72 65 70 6c 61 63 65 28 22 68 74 74 70 3a 22 2c 22 22 29 3a 6b 2e 72 65 70 6c 61 63 65 28 22 68 74 74 70 73 3a 22 2c 22 22 29 2c 2d 31 21 3d 3d 28 6c 3d 6b 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 29 3f 6b 2e 72 65 Data Ascii: 1149!function(){function q(a){var c=[],b=[],e=function(f){for(var g={},h=0;h<u.length;h++){var d=u[h];if(d.Tag===f){g=d;break}var l=void 0,k=d.Tag;var C=(k=-1!==k.indexOf("http:")?k.replace("http:",""):k.replace("https:",""),-1!==(l=k.indexOf("?"))?k.re
2024-09-27 04:02:13 UTC	1369	IN	Data Raw: 65 2e 43 61 74 65 67 6f 72 79 49 64 29 2c 65 2e 56 65 6e 64 6f 72 26 26 28 62 3d 65 2e 56 65 6e 64 6f 72 2e 73 70 6c 69 74 28 22 3a 22 29 29 2c 21 65 2e 54 61 67 26 26 44 26 26 28 62 3d 63 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 76 61 72 20 67 3d 5b 5d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 6c 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 0a 72 65 74 75 72 6e 20 6c 2e 68 72 65 66 3d 64 2c 2d 31 21 3d 3d 28 64 3d 6c 2e 68 6f 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 22 2e 22 29 29 2e 69 6e 64 65 78 4f 66 28 22 77 77 77 22 29 7c 7c 32 3c 64 2e 6c 65 6e 67 74 68 3f 64 2e 73 6c 69 63 65 28 31 29 2e 6a 6f 69 6e 28 22 2e 22 29 3a 6c 2e 68 6f 73 74 6e 61 6d 65 7d 28 66 29 3b 76 2e 73 6f 6d 65 28 66 75 6e 63 Data Ascii: e.CategoryId),e.Vendor&&(b=e.Vendor.split(":")),!e.Tag&&D&&(b=c=function(f){var g=[],h=function(d){var l=document.createElement("a");return l.href=d,-1!==(d=l.hostname.split(".")).indexOf("www")\|\|2<d.length?d.slice(1).join("."):l.hostname}(f);v.some(func
2024-09-27 04:02:13 UTC	1369	IN	Data Raw: 78 4f 66 28 22 6f 74 2d 76 73 63 61 74 2d 22 2b 62 29 26 26 28 65 2b 3d 22 20 22 2b 28 22 6f 74 2d 76 73 63 61 74 2d 22 2b 62 29 2e 74 72 69 6d 28 29 29 2c 65 2b 22 20 22 2b 63 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 61 29 7b 76 61 72 20 63 2c 62 3d 71 28 61 2e 73 72 63 7c 7c 22 22 29 3b 28 62 2e 63 61 74 65 67 6f 72 79 49 64 73 2e 6c 65 6e 67 74 68 7c 7c 62 2e 76 73 43 61 74 49 64 73 2e 6c 65 6e 67 74 68 29 26 26 28 78 28 62 2e 63 61 74 65 67 6f 72 79 49 64 73 2c 61 2c 62 2e 76 73 43 61 74 49 64 73 29 2c 6d 28 62 2e 63 61 74 65 67 6f 72 79 49 64 73 2c 62 2e 76 73 43 61 74 49 64 73 29 7c 7c 28 61 2e 74 79 70 65 3d 22 74 65 78 74 2f 70 6c 61 69 6e 22 29 2c 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 62 65 66 6f 72 65 73 63 72 69 70 74 65 78 65 Data Ascii: xOf("ot-vscat-"+b)&&(e+=" "+("ot-vscat-"+b).trim()),e+" "+c}function z(a){var c,b=q(a.src\|\|"");(b.categoryIds.length\|\|b.vsCatIds.length)&&(x(b.categoryIds,a,b.vsCatIds),m(b.categoryIds,b.vsCatIds)\|\|(a.type="text/plain"),a.addEventListener("beforescriptexe
2024-09-27 04:02:13 UTC	1314	IN	Data Raw: 6d 65 6e 74 73 5b 65 5d 3b 72 65 74 75 72 6e 22 73 63 72 69 70 74 22 3d 3d 3d 62 5b 30 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7c 7c 2d 31 21 3d 3d 74 2e 69 6e 64 65 78 4f 66 28 62 5b 30 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3f 28 61 3d 42 2e 62 69 6e 64 28 64 6f 63 75 6d 65 6e 74 29 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 62 29 2c 63 3d 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 2e 62 69 6e 64 28 61 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 61 2c 7b 73 72 63 3a 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 61 2e 63 6c 6f 6e 65 4e 6f 64 65 28 29 2e 73 72 63 7d 63 61 74 63 68 28 66 29 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 29 Data Ascii: ments[e];return"script"===b[0].toLowerCase()\|\|-1!==t.indexOf(b[0].toLowerCase())?(a=B.bind(document).apply(void 0,b),c=a.setAttribute.bind(a),Object.defineProperties(a,{src:{get:function(){try{return a.cloneNode().src}catch(f){return a.getAttribute("src")
2024-09-27 04:02:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49938	104.18.86.42	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:12 UTC	625	OUT	GET /consent/baf1656f-0c9f-4cd8-83fe-a5ce8d8c9eed/baf1656f-0c9f-4cd8-83fe-a5ce8d8c9eed.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.twint.ch Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.twint.ch/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:13 UTC	982	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:12 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Ray: 8c9898cef9cf1879-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 45236 Cache-Control: public, max-age=86400 Expires: Sat, 28 Sep 2024 04:02:12 GMT Last-Modified: Tue, 24 Sep 2024 11:53:01 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: 2BCnt9yWwbb1DFZQfcsDhw== Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e9a4e5ce-e01e-00ac-4878-0eb21d000000 x-ms-version: 2009-09-19 Cross-Origin-Resource-Policy: cross-origin Server: cloudflare
2024-09-27 04:02:13 UTC	387	IN	Data Raw: 31 31 65 38 0d 0a 7b 22 43 6f 6f 6b 69 65 53 50 41 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 53 61 6d 65 53 69 74 65 4e 6f 6e 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 56 32 43 53 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4d 75 6c 74 69 56 61 72 69 61 6e 74 54 65 73 74 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 55 73 65 56 32 22 3a 74 72 75 65 2c 22 4d 6f 62 69 6c 65 53 44 4b 22 3a 66 61 6c 73 65 2c 22 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 53 63 72 69 70 74 54 79 70 65 22 3a 22 50 52 4f 44 55 43 54 49 4f 4e 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 33 30 37 2e 31 2e 30 22 2c 22 4f 70 74 61 6e 6f 6e 44 61 74 61 4a 53 4f 4e 22 3a 22 62 61 66 31 Data Ascii: 11e8{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202307.1.0","OptanonDataJSON":"baf1
2024-09-27 04:02:13 UTC	1369	IN	Data Raw: 65 63 6b 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6f 6b 69 65 73 2d 64 61 74 61 2e 6f 6e 65 74 72 75 73 74 2e 69 6f 2f 62 61 6e 6e 65 72 73 64 6b 2f 76 31 2f 64 6f 6d 61 69 6e 67 72 6f 75 70 63 68 65 63 6b 22 2c 22 52 75 6c 65 53 65 74 22 3a 5b 7b 22 49 64 22 3a 22 30 31 39 32 31 64 66 64 2d 30 35 33 35 2d 37 63 38 38 2d 39 35 35 38 2d 66 39 63 38 32 35 30 65 35 35 38 63 22 2c 22 4e 61 6d 65 22 3a 22 47 6c 6f 62 61 6c 20 41 75 64 69 65 6e 63 65 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 22 70 72 22 2c 22 70 73 22 2c 22 70 77 22 2c 22 70 79 22 2c 22 71 61 22 2c 22 61 64 22 2c 22 61 65 22 2c 22 61 66 22 2c 22 61 67 22 2c 22 61 69 22 2c 22 61 6c 22 2c 22 61 6d 22 2c 22 61 6f 22 2c 22 61 71 22 2c 22 61 72 22 2c 22 61 73 22 2c 22 61 75 22 2c 22 61 77 Data Ascii: eckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"01921dfd-0535-7c88-9558-f9c8250e558c","Name":"Global Audience","Countries":["pr","ps","pw","py","qa","ad","ae","af","ag","ai","al","am","ao","aq","ar","as","au","aw
2024-09-27 04:02:13 UTC	1369	IN	Data Raw: 70 65 22 3a 22 47 45 4e 45 52 49 43 22 2c 22 55 73 65 47 6f 6f 67 6c 65 56 65 6e 64 6f 72 73 22 3a 66 61 6c 73 65 2c 22 56 61 72 69 61 6e 74 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 54 65 73 74 45 6e 64 54 69 6d 65 22 3a 6e 75 6c 6c 2c 22 56 61 72 69 61 6e 74 73 22 3a 5b 5d 2c 22 54 65 6d 70 6c 61 74 65 4e 61 6d 65 22 3a 22 47 65 6e 65 72 69 63 20 54 65 6d 70 6c 61 74 65 22 2c 22 43 6f 6e 64 69 74 69 6f 6e 73 22 3a 5b 5d 2c 22 47 43 45 6e 61 62 6c 65 22 3a 74 72 75 65 2c 22 49 73 47 50 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 4a 57 54 41 75 74 68 46 6f 72 4b 6e 6f 77 6e 55 73 65 72 73 22 3a 66 61 6c 73 65 7d 2c 7b 22 49 64 22 3a 22 30 31 39 32 31 64 66 64 2d 30 34 30 62 2d 37 31 36 32 2d 62 37 62 30 2d 31 63 65 66 37 39 Data Ascii: pe":"GENERIC","UseGoogleVendors":false,"VariantEnabled":false,"TestEndTime":null,"Variants":[],"TemplateName":"Generic Template","Conditions":[],"GCEnable":true,"IsGPPEnabled":false,"EnableJWTAuthForKnownUsers":false},{"Id":"01921dfd-040b-7162-b7b0-1cef79
2024-09-27 04:02:13 UTC	1369	IN	Data Raw: 73 65 6e 74 4c 61 6e 67 75 61 67 65 22 3a 6e 75 6c 6c 2c 22 76 65 6e 64 6f 72 4c 69 73 74 56 65 72 73 69 6f 6e 22 3a 30 2c 22 6d 61 78 56 65 6e 64 6f 72 49 64 22 3a 30 2c 22 65 6e 63 6f 64 69 6e 67 54 79 70 65 22 3a 22 30 22 2c 22 67 6c 6f 62 61 6c 56 65 6e 64 6f 72 4c 69 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6f 6b 69 65 6c 61 77 2e 6f 72 67 2f 76 65 6e 64 6f 72 6c 69 73 74 2f 69 61 62 32 44 61 74 61 2e 6a 73 6f 6e 22 7d 2c 22 49 61 62 32 56 32 44 61 74 61 22 3a 7b 22 63 6f 6f 6b 69 65 56 65 72 73 69 6f 6e 22 3a 22 31 22 2c 22 63 72 65 61 74 65 64 54 69 6d 65 22 3a 22 32 30 32 34 2d 30 39 2d 32 34 54 31 31 3a 35 33 3a 30 31 2e 34 32 36 33 32 39 35 35 30 22 2c 22 75 70 64 61 74 65 64 54 69 6d 65 22 3a 22 32 30 32 34 2d 30 39 2d Data Ascii: sentLanguage":null,"vendorListVersion":0,"maxVendorId":0,"encodingType":"0","globalVendorListUrl":"https://cdn.cookielaw.org/vendorlist/iab2Data.json"},"Iab2V2Data":{"cookieVersion":"1","createdTime":"2024-09-24T11:53:01.426329550","updatedTime":"2024-09-
2024-09-27 04:02:13 UTC	98	IN	Data Raw: 22 47 70 70 44 61 74 61 22 3a 7b 22 63 6d 70 49 64 22 3a 22 32 38 22 7d 2c 22 41 75 74 68 65 6e 74 69 63 61 74 65 64 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 43 44 4e 4c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6f 6b 69 65 6c 61 77 2e 6f 72 67 22 7d 0d 0a Data Ascii: "GppData":{"cmpId":"28"},"AuthenticatedConsent":false,"CDNLocation":"https://cdn.cookielaw.org"}
2024-09-27 04:02:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49941	104.18.95.41	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:12 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8c9898c28eda4378&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:13 UTC	301	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:13 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 118386 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8c9898cf7e9543f1-EWR
2024-09-27 04:02:13 UTC	1068	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 71 5a 4a 79 54 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.qZJyT2={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"http
2024-09-27 04:02:13 UTC	1369	IN	Data Raw: 49 6e 76 61 6c 69 64 25 32 30 64 6f 6d 61 69 6e 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 74 69 6d 65 6f 75 74 22 3a 22 54 69 6d 65 64 25 32 30 6f 75 74 22 2c 22 68 75 6d 61 6e 5f 62 75 74 74 6f 6e 5f 74 65 78 74 22 3a 22 56 65 72 69 66 79 25 32 30 79 6f 75 25 32 30 61 72 65 25 32 30 68 75 6d 61 6e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 6c 6f 6e 67 65 72 5f 74 68 61 6e 5f 65 78 70 65 63 74 65 64 22 3a 22 25 33 43 61 25 32 30 68 72 65 66 25 33 44 25 32 32 25 32 33 25 32 32 25 32 30 63 6c 61 73 73 25 33 44 25 32 32 72 65 66 72 65 73 68 5f 6c Data Ascii: Invalid%20domain.%20Contact%20the%20Site%20Administrator%20if%20this%20problem%20persists.","turnstile_timeout":"Timed%20out","human_button_text":"Verify%20you%20are%20human","turnstile_longer_than_expected":"%3Ca%20href%3D%22%23%22%20class%3D%22refresh_l
2024-09-27 04:02:13 UTC	1369	IN	Data Raw: 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 37 36 32 35 32 38 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 49 28 34 36 36 29 5d 2c 65 4f 3d 7b 7d 2c 65 4f 5b 67 49 28 37 31 32 29 5d 3d 27 6f 27 2c 65 4f 5b 67 49 28 35 38 34 29 5d 3d 27 73 27 2c 65 4f 5b 67 49 28 33 34 32 29 5d 3d 27 75 27 2c 65 4f 5b 67 49 28 31 37 36 32 29 5d 3d 27 7a 27 2c 65 4f 5b 67 49 28 33 31 30 29 5d 3d 27 6e 27 2c 65 4f 5b 67 49 28 31 31 33 35 29 5d 3d 27 49 27 2c 65 50 3d 65 4f 2c 65 4d 5b 67 49 28 31 34 31 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 2c 67 4d 2c 6f 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 29 7b 69 66 28 67 4d 3d 67 49 2c 6f 3d 7b 27 55 41 65 6b 78 27 3a 67 4d 28 36 35 30 29 2c 27 6f Data Ascii: atch(g){e.push(e.shift())}}(a,762528),eM=this\|\|self,eN=eM[gI(466)],eO={},eO[gI(712)]='o',eO[gI(584)]='s',eO[gI(342)]='u',eO[gI(1762)]='z',eO[gI(310)]='n',eO[gI(1135)]='I',eP=eO,eM[gI(1412)]=function(g,h,i,j,gM,o,x,B,C,D,E,F){if(gM=gI,o={'UAekx':gM(650),'o
2024-09-27 04:02:13 UTC	1369	IN	Data Raw: 5d 29 29 3a 6f 5b 67 4d 28 31 34 34 36 29 5d 28 73 2c 6f 5b 67 4d 28 31 35 38 34 29 5d 28 69 2c 44 29 2c 45 29 2c 43 2b 2b 29 3b 72 65 74 75 72 6e 20 6a 3b 66 75 6e 63 74 69 6f 6e 20 73 28 47 2c 48 2c 67 4e 29 7b 67 4e 3d 67 4d 2c 67 4e 28 36 35 30 29 21 3d 3d 6f 5b 67 4e 28 31 36 34 36 29 5d 3f 78 28 73 2c 30 29 3a 28 4f 62 6a 65 63 74 5b 67 4e 28 31 32 39 33 29 5d 5b 67 4e 28 31 30 34 31 29 5d 5b 67 4e 28 31 32 39 37 29 5d 28 6a 2c 48 29 7c 7c 28 6a 5b 48 5d 3d 5b 5d 29 2c 6a 5b 48 5d 5b 67 4e 28 31 35 37 33 29 5d 28 47 29 29 7d 7d 2c 65 54 3d 67 49 28 31 35 34 33 29 5b 67 49 28 31 36 34 33 29 5d 28 27 3b 27 29 2c 65 55 3d 65 54 5b 67 49 28 39 39 32 29 5d 5b 67 49 28 33 32 36 29 5d 28 65 54 29 2c 65 4d 5b 67 49 28 35 37 38 29 5d 3d 66 75 6e 63 74 69 6f Data Ascii: ])):o[gM(1446)](s,o[gM(1584)](i,D),E),C++);return j;function s(G,H,gN){gN=gM,gN(650)!==o[gN(1646)]?x(s,0):(Object[gN(1293)][gN(1041)][gN(1297)](j,H)\|\|(j[H]=[]),j[H][gN(1573)](G))}},eT=gI(1543)[gI(1643)](';'),eU=eT[gI(992)][gI(326)](eT),eM[gI(578)]=functio
2024-09-27 04:02:13 UTC	1369	IN	Data Raw: 75 48 47 65 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 48 49 61 4f 48 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 7c 68 7d 2c 27 76 50 42 53 75 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 71 5a 53 4c 67 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 78 66 4e 77 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 63 78 4c 4e 46 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 21 3d 3d 69 7d 2c 27 65 48 79 6b 69 27 3a 68 32 28 31 30 38 33 29 2c 27 43 44 46 58 57 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d Data Ascii: uHGe':function(h,i){return h(i)},'HIaOH':function(h,i){return i\|h},'vPBSu':function(h,i){return h(i)},'qZSLg':function(h,i){return h<i},'xfNwl':function(h,i){return i==h},'cxLNF':function(h,i){return h!==i},'eHyki':h2(1083),'CDFXW':function(h,i){return i=
2024-09-27 04:02:13 UTC	1369	IN	Data Raw: 29 7b 69 66 28 32 35 36 3e 43 5b 68 35 28 31 35 35 33 29 5d 28 30 29 29 7b 66 6f 72 28 73 3d 30 3b 64 5b 68 35 28 31 36 38 32 29 5d 28 73 2c 46 29 3b 48 3c 3c 3d 31 2c 6a 2d 31 3d 3d 49 3f 28 49 3d 30 2c 47 5b 68 35 28 31 35 37 33 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 68 35 28 31 35 35 33 29 5d 28 30 29 2c 73 3d 30 3b 64 5b 68 35 28 38 39 33 29 5d 28 38 2c 73 29 3b 48 3d 31 26 4d 7c 48 3c 3c 31 2c 64 5b 68 35 28 38 30 36 29 5d 28 49 2c 6a 2d 31 29 3f 28 49 3d 30 2c 47 5b 68 35 28 31 35 37 33 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 4d 3d 31 2c 73 3d 30 3b 73 3c 46 3b 48 3d 64 5b 68 35 28 31 34 33 34 29 5d 28 48 2c 31 29 7c 4d Data Ascii: ){if(256>C[h5(1553)](0)){for(s=0;d[h5(1682)](s,F);H<<=1,j-1==I?(I=0,G[h5(1573)](o(H)),H=0):I++,s++);for(M=C[h5(1553)](0),s=0;d[h5(893)](8,s);H=1&M\|H<<1,d[h5(806)](I,j-1)?(I=0,G[h5(1573)](o(H)),H=0):I++,M>>=1,s++);}else{for(M=1,s=0;s<F;H=d[h5(1434)](H,1)\|M
2024-09-27 04:02:13 UTC	1369	IN	Data Raw: 35 31 38 29 5d 28 4d 2c 31 29 29 2c 64 5b 68 35 28 31 34 30 39 29 5d 28 49 2c 6a 2d 31 29 3f 28 49 3d 30 2c 47 5b 68 35 28 31 35 37 33 29 5d 28 64 5b 68 35 28 31 31 39 39 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 44 2d 2d 2c 64 5b 68 35 28 39 31 33 29 5d 28 30 2c 44 29 26 26 28 44 3d 4d 61 74 68 5b 68 35 28 31 37 30 32 29 5d 28 32 2c 46 29 2c 46 2b 2b 29 2c 64 65 6c 65 74 65 20 42 5b 43 5d 7d 65 6c 73 65 20 66 6f 72 28 4d 3d 78 5b 43 5d 2c 73 3d 30 3b 64 5b 68 35 28 31 36 38 32 29 5d 28 73 2c 46 29 3b 48 3d 64 5b 68 35 28 31 32 31 36 29 5d 28 48 3c 3c 31 2c 64 5b 68 35 28 36 31 36 29 5d 28 4d 2c 31 29 29 2c 64 5b 68 35 28 31 35 34 37 29 5d 28 49 2c 6a 2d 31 29 3f 28 49 3d 30 2c 47 5b 68 35 28 31 35 37 33 29 Data Ascii: 518)](M,1)),d[h5(1409)](I,j-1)?(I=0,G[h5(1573)](d[h5(1199)](o,H)),H=0):I++,M>>=1,s++);}D--,d[h5(913)](0,D)&&(D=Math[h5(1702)](2,F),F++),delete B[C]}else for(M=x[C],s=0;d[h5(1682)](s,F);H=d[h5(1216)](H<<1,d[h5(616)](M,1)),d[h5(1547)](I,j-1)?(I=0,G[h5(1573)
2024-09-27 04:02:13 UTC	1369	IN	Data Raw: 21 3d 3d 73 5b 68 38 28 38 34 39 29 5d 29 7b 66 6f 72 28 53 3d 68 38 28 37 33 39 29 5b 68 38 28 31 36 34 33 29 5d 28 27 7c 27 29 2c 54 3d 30 3b 21 21 5b 5d 3b 29 7b 73 77 69 74 63 68 28 53 5b 54 2b 2b 5d 29 7b 63 61 73 65 27 30 27 3a 57 5b 68 38 28 35 39 38 29 5d 5b 68 38 28 31 37 34 37 29 5d 28 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 27 3a 73 5b 68 38 28 36 38 36 29 5d 28 61 30 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 32 27 3a 59 5b 68 38 28 35 39 38 29 5d 5b 68 38 28 31 30 32 36 29 5d 28 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 33 27 3a 5a 5b 68 38 28 35 39 38 29 5d 5b 68 38 28 31 30 31 31 29 5d 28 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 34 27 3a 61 31 5b 68 38 28 35 39 38 29 5d 5b 68 38 28 31 34 35 31 29 5d 28 29 3b 63 Data Ascii: !==s[h8(849)]){for(S=h8(739)[h8(1643)]('\|'),T=0;!![];){switch(S[T++]){case'0':W[h8(598)][h8(1747)]();continue;case'1':s[h8(686)](a0);continue;case'2':Y[h8(598)][h8(1026)]();continue;case'3':Z[h8(598)][h8(1011)]();continue;case'4':a1[h8(598)][h8(1451)]();c
2024-09-27 04:02:13 UTC	1369	IN	Data Raw: 68 38 28 31 34 30 39 29 5d 28 30 2c 49 29 26 26 28 49 3d 6a 2c 48 3d 6f 28 4a 2b 2b 29 29 2c 4b 7c 3d 28 64 5b 68 38 28 39 36 38 29 5d 28 30 2c 4f 29 3f 31 3a 30 29 2a 47 2c 47 3c 3c 3d 31 29 3b 78 5b 43 2b 2b 5d 3d 65 28 4b 29 2c 50 3d 64 5b 68 38 28 31 33 38 39 29 5d 28 43 2c 31 29 2c 42 2d 2d 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 45 5b 68 38 28 35 32 39 29 5d 28 27 27 29 7d 69 66 28 42 3d 3d 30 26 26 28 42 3d 4d 61 74 68 5b 68 38 28 31 37 30 32 29 5d 28 32 2c 44 29 2c 44 2b 2b 29 2c 78 5b 50 5d 29 50 3d 78 5b 50 5d 3b 65 6c 73 65 20 69 66 28 43 3d 3d 3d 50 29 50 3d 46 2b 46 5b 68 38 28 31 34 35 38 29 5d 28 30 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 45 5b 68 38 28 31 35 37 33 29 5d 28 50 29 2c 78 5b 43 2b 2b 5d Data Ascii: h8(1409)](0,I)&&(I=j,H=o(J++)),K\|=(d[h8(968)](0,O)?1:0)*G,G<<=1);x[C++]=e(K),P=d[h8(1389)](C,1),B--;break;case 2:return E[h8(529)]('')}if(B==0&&(B=Math[h8(1702)](2,D),D++),x[P])P=x[P];else if(C===P)P=F+F[h8(1458)](0);else return null;E[h8(1573)](P),x[C++]
2024-09-27 04:02:13 UTC	1369	IN	Data Raw: 63 6f 64 65 27 3a 68 63 28 31 30 34 37 29 2c 27 72 63 56 27 3a 65 4d 5b 68 63 28 31 37 31 36 29 5d 5b 68 63 28 34 39 39 29 5d 7d 2c 27 2a 27 29 29 7d 2c 67 29 7d 2c 65 4d 5b 67 49 28 36 32 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 68 64 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 29 7b 6b 3d 28 68 64 3d 67 49 2c 6a 3d 7b 7d 2c 6a 5b 68 64 28 32 39 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 49 29 7b 72 65 74 75 72 6e 20 48 3d 3d 3d 49 7d 2c 6a 5b 68 64 28 36 36 38 29 5d 3d 68 64 28 33 37 36 29 2c 6a 5b 68 64 28 36 35 32 29 5d 3d 68 64 28 31 32 38 33 29 2c 6a 5b 68 64 28 37 32 36 29 5d 3d 68 64 28 31 34 38 39 29 2c 6a 5b 68 64 28 31 30 35 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 49 29 7b 72 65 74 Data Ascii: code':hc(1047),'rcV':eM[hc(1716)][hc(499)]},'*'))},g)},eM[gI(625)]=function(g,h,i,hd,j,k,l,m,n,o,s,x,B,C,D,E,F,G){k=(hd=gI,j={},j[hd(298)]=function(H,I){return H===I},j[hd(668)]=hd(376),j[hd(652)]=hd(1283),j[hd(726)]=hd(1489),j[hd(1054)]=function(H,I){ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49943	104.18.95.41	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:13 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/g/i/8c98989bea707d00/1727409729545/yrXd159Ts3jd8Vz HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:13 UTC	170	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:13 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8c9898cfcc7c17ad-EWR
2024-09-27 04:02:13 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 25 08 02 00 00 00 e7 7d af fd 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%}IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49944	104.18.95.41	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:13 UTC	815	OUT	GET /cdn-cgi/challenge-platform/h/g/pat/8c98989bea707d00/1727409729549/6e772fe038b38ec32bda048e9279175be3e9a3c1b033612b98a2703d39605abc/_6b6v8N3gCA3UaK HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/z2exq/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:13 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Fri, 27 Sep 2024 04:02:13 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-09-27 04:02:13 UTC	1985	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 62 6e 63 76 34 44 69 7a 6a 73 4d 72 32 67 53 4f 6b 6e 6b 58 57 2d 50 70 6f 38 47 77 4d 32 45 72 6d 4b 4a 77 50 54 6c 67 57 72 77 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gbncv4DizjsMr2gSOknkXW-Ppo8GwM2ErmKJwPTlgWrwAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-09-27 04:02:13 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49945	104.18.95.41	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:13 UTC	927	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1731196884:1727406774:ogyKtD3DYRZvneb8A8Xd4gumCbdnDgJl3yl7WoSTagU/8c9898c28eda4378/cf4fc23845fcc6d HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3734 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: cf4fc23845fcc6d sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/jkyme/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:13 UTC	3734	OUT	Data Raw: 76 5f 38 63 39 38 39 38 63 32 38 65 64 61 34 33 37 38 3d 6b 52 47 51 6f 51 45 51 52 51 38 51 79 50 43 33 50 43 36 51 50 25 32 62 4c 32 68 6d 50 39 43 68 43 58 4a 2b 47 4c 42 43 72 62 43 39 35 4c 2b 62 62 43 6c 43 62 63 39 6a 61 46 71 62 67 43 61 51 62 52 61 39 43 62 36 4e 63 48 43 50 52 61 66 43 34 47 43 74 4c 56 74 24 43 6b 43 43 24 52 43 66 51 43 52 7a 33 4d 7a 45 47 61 72 31 62 42 74 71 49 47 2d 51 4c 4e 43 4a 45 69 46 47 61 43 4f 46 24 61 45 43 35 43 61 38 43 2d 33 4d 47 59 57 43 68 63 50 6a 34 30 6a 47 4d 31 6a 43 44 2b 50 65 44 37 4e 43 71 45 54 43 70 6e 70 50 4c 79 4e 43 61 71 24 43 67 32 71 43 50 75 74 58 54 43 43 64 51 50 56 68 4c 35 45 55 31 2b 24 48 43 4c 74 30 43 43 4a 43 51 61 4a 6b 75 62 43 65 51 43 5a 37 43 61 4d 75 41 32 7a 72 63 24 5a 36 Data Ascii: v_8c9898c28eda4378=kRGQoQEQRQ8QyPC3PC6QP%2bL2hmP9ChCXJ+GLBCrbC95L+bbClCbc9jaFqbgCaQbRa9Cb6NcHCPRafC4GCtLVt$CkCC$RCfQCRz3MzEGar1bBtqIG-QLNCJEiFGaCOF$aEC5Ca8C-3MGYWChcPj40jGM1jCD+PeD7NCqETCpnpPLyNCaq$Cg2qCPutXTCCdQPVhL5EU1+$HCLt0CCJCQaJkubCeQCZ7CaMuA2zrc$Z6
2024-09-27 04:02:13 UTC	717	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:13 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 152192 Connection: close cf-chl-gen: qxsaOxNrGVKtIxGl+sTByEhlgZlJ2KTnwo49cmkdI1bqqkDOawL51SvAUWiHsDiXLmzjBQ8+Mgd64nNohFtSVOXEzMnbIZvZkbU/ymgNtcS8GS5cHFO8vc97aMGUEJpLjjPfNPfBkohL+jr4NF6o/JykUWVhptvdg/dNnnC+/7z1KD3TxNprGNLtBOvwuvcJEgfRXYU+4DSAQ6+/2/POXDYlRE/28Nqaj6ftbMEhG4uDdRpmYtBrHQYMJEH0j185cPU5a1RTgRCwrQcvabc5XhEEc3+lYxCeq/fjO+MkQ/mUIAObIPvWxpl/jIyeelkm8VnS5QOV0E7/9HdLKED8zjA4j/c/PLIOVfpyPOeIZ+w8jlanxX+MqmwwbNDjjqZtlHTfWDMj/Z4RJnyEw13ZIlUKGzx+wATtW95vxA8xpML8SIo9NTJW98mNuROe1ePfyTn91eh71El7FXphzL6/lhI6yl+l3ymPAcbQf6QtDHS4iuY=$ZQagmkWN5QsuQCQr Server: cloudflare CF-RAY: 8c9898d05a9b7d16-EWR
2024-09-27 04:02:13 UTC	652	IN	Data Raw: 6a 46 31 69 67 30 69 4a 63 6d 65 46 5a 6b 39 52 6a 34 2b 4a 5a 33 31 58 59 48 31 37 6d 59 56 69 66 58 65 57 6c 36 46 39 66 70 61 68 6b 4c 43 6a 6b 49 75 4f 61 35 36 7a 6c 35 47 35 74 48 75 72 6b 72 4f 53 74 34 71 36 67 49 4b 31 70 35 53 46 70 4d 43 4c 78 62 72 46 6f 74 44 4d 6f 4d 76 56 74 71 6e 4a 6b 63 71 37 78 35 7a 4e 76 75 43 75 31 4e 6e 58 6e 72 7a 44 6f 4a 2b 38 34 71 6e 44 35 4f 58 4e 33 74 7a 6d 30 75 75 31 74 50 65 30 35 4c 6a 37 75 4f 7a 65 75 66 76 76 30 2f 6a 53 33 4f 4d 45 76 39 7a 64 76 76 34 47 34 4d 49 44 43 67 7a 4f 30 74 62 6b 30 41 59 48 44 52 54 2b 36 65 2f 71 36 64 6f 54 32 2b 54 69 48 52 34 42 34 4f 67 6e 4a 77 41 67 42 54 41 48 44 68 37 6e 43 53 67 72 4a 2f 6b 76 46 44 50 37 45 50 6b 75 50 2f 30 52 52 55 55 6a 2b 68 51 63 4e 51 6b Data Ascii: jF1ig0iJcmeFZk9Rj4+JZ31XYH17mYVifXeWl6F9fpahkLCjkIuOa56zl5G5tHurkrOSt4q6gIK1p5SFpMCLxbrFotDMoMvVtqnJkcq7x5zNvuCu1NnXnrzDoJ+84qnD5OXN3tzm0uu1tPe05Lj7uOzeufvv0/jS3OMEv9zdvv4G4MIDCgzO0tbk0AYHDRT+6e/q6doT2+TiHR4B4OgnJwAgBTAHDh7nCSgrJ/kvFDP7EPkuP/0RRUUj+hQcNQk
2024-09-27 04:02:13 UTC	1369	IN	Data Raw: 5a 44 56 37 5a 57 31 48 4d 54 5a 57 63 56 31 67 63 46 4b 49 56 34 5a 62 63 32 4a 4a 67 59 35 78 6b 47 6c 38 68 6c 46 6e 63 56 52 71 56 59 71 4f 63 48 70 52 67 58 35 65 6a 71 4f 57 5a 6f 43 54 6d 6f 56 37 6f 49 4b 50 5a 34 6d 68 6b 58 47 70 6e 37 56 30 65 4b 56 30 6d 59 79 79 72 5a 2b 63 6c 6e 76 41 6c 62 4c 47 75 38 65 56 6c 4b 6a 4b 67 34 79 6d 75 34 69 53 70 36 75 52 74 4c 57 79 6b 74 66 4c 30 4b 76 50 71 62 57 59 76 71 4b 36 34 4e 69 65 34 4f 44 48 34 71 50 62 76 2b 43 74 36 65 54 64 36 76 48 4a 36 4f 44 44 37 4f 58 79 30 39 48 77 36 66 48 30 37 66 63 43 32 66 6a 79 2b 66 7a 31 41 4c 2f 68 41 66 6b 53 42 66 30 4f 41 75 6b 4a 39 66 4d 4e 42 68 58 64 45 78 2f 72 41 68 7a 75 2b 68 2f 79 47 4f 63 69 41 42 77 57 4a 77 58 33 47 75 6b 78 45 54 55 43 49 51 2f Data Ascii: ZDV7ZW1HMTZWcV1gcFKIV4Zbc2JJgY5xkGl8hlFncVRqVYqOcHpRgX5ejqOWZoCTmoV7oIKPZ4mhkXGpn7V0eKV0mYyyrZ+clnvAlbLGu8eVlKjKg4ymu4iSp6uRtLWyktfL0KvPqbWYvqK64Nie4ODH4qPbv+Ct6eTd6vHJ6ODD7OXy09Hw6fH07fcC2fjy+fz1AL/hAfkSBf0OAukJ9fMNBhXdEx/rAhzu+h/yGOciABwWJwX3GukxETUCIQ/
2024-09-27 04:02:13 UTC	1369	IN	Data Raw: 31 74 31 4f 6e 31 75 59 6a 35 37 5a 34 52 63 69 57 46 70 69 6c 69 4d 62 5a 43 4e 62 49 6c 74 6c 4a 42 79 6d 70 5a 58 6d 58 4e 38 63 6e 71 69 6e 46 32 4f 63 6e 79 59 6f 33 35 6f 70 6f 65 42 72 36 5a 71 67 34 43 4a 6a 47 79 31 67 58 47 4d 70 4a 47 55 76 37 32 4a 65 59 79 73 6d 59 32 2f 78 5a 48 4b 73 38 53 6d 70 73 2f 44 78 4d 75 4e 6f 38 71 73 71 74 61 4f 6f 74 54 51 6d 61 36 74 6d 4e 36 74 75 64 76 44 78 74 54 69 6f 63 48 71 6f 64 53 66 37 2b 4f 72 73 65 7a 6d 72 36 66 52 38 72 50 50 77 39 58 76 32 50 43 36 37 73 72 77 35 4e 44 44 2b 64 76 62 31 64 76 38 79 39 38 42 2b 51 58 6e 35 51 58 78 42 67 6b 43 45 68 62 74 44 66 6e 6f 37 2f 6e 65 46 68 63 4f 2b 41 38 66 34 2f 49 48 4b 79 50 39 44 51 6e 6c 42 66 6b 65 44 69 6b 33 45 76 59 76 43 7a 51 54 37 68 6f 63 Data Ascii: 1t1On1uYj57Z4RciWFpiliMbZCNbIltlJBympZXmXN8cnqinF2OcnyYo35opoeBr6Zqg4CJjGy1gXGMpJGUv72JeYysmY2/xZHKs8Smps/DxMuNo8qsqtaOotTQma6tmN6tudvDxtTiocHqodSf7+Orsezmr6fR8rPPw9Xv2PC67srw5NDD+dvb1dv8y98B+QXn5QXxBgkCEhbtDfno7/neFhcO+A8f4/IHKyP9DQnlBfkeDik3EvYvCzQT7hoc
2024-09-27 04:02:13 UTC	1369	IN	Data Raw: 31 2b 67 32 46 67 65 47 42 2f 57 46 36 4f 67 48 2b 4a 62 47 78 6c 5a 56 46 76 6a 35 70 6d 69 70 4e 35 56 6c 32 63 6c 48 53 56 64 70 68 34 63 6d 57 57 66 58 65 67 6e 48 2b 68 70 4c 42 77 6a 33 57 6f 69 59 4a 31 73 6f 32 47 64 62 36 50 73 62 53 30 6c 5a 61 59 77 4a 36 37 67 35 57 61 70 71 79 74 79 62 71 64 79 4c 43 51 71 5a 66 55 70 5a 4b 58 33 61 6d 6d 6e 71 33 51 6d 5a 71 69 78 4e 75 37 6e 71 62 58 70 72 62 65 74 73 61 35 37 4b 54 4e 37 73 44 68 30 4f 62 57 36 64 58 57 2f 4c 62 4c 2b 4d 44 36 37 65 58 30 2f 73 48 53 32 75 49 43 32 66 33 71 33 4f 41 42 7a 66 48 6a 33 2f 59 4c 41 68 66 54 43 42 4d 59 48 77 7a 58 48 2f 4d 69 49 51 50 32 39 67 51 45 47 51 59 67 48 79 59 46 48 6a 45 48 46 54 45 54 43 4f 30 4c 4d 50 4d 71 4d 78 41 56 4c 6b 45 58 4f 78 73 63 45 Data Ascii: 1+g2FgeGB/WF6OgH+JbGxlZVFvj5pmipN5Vl2clHSVdph4cmWWfXegnH+hpLBwj3WoiYJ1so2Gdb6PsbS0lZaYwJ67g5WapqytybqdyLCQqZfUpZKX3ammnq3QmZqixNu7nqbXprbetsa57KTN7sDh0ObW6dXW/LbL+MD67eX0/sHS2uIC2f3q3OABzfHj3/YLAhfTCBMYHwzXH/MiIQP29gQEGQYgHyYFHjEHFTETCO0LMPMqMxAVLkEXOxscE
2024-09-27 04:02:13 UTC	1369	IN	Data Raw: 42 69 56 39 6d 62 57 46 70 66 32 6d 4b 6c 6d 74 52 65 6d 68 53 6d 6e 64 63 6e 33 42 7a 6e 57 4b 67 6c 59 47 42 5a 36 75 73 69 35 56 71 70 6d 6d 78 71 62 53 4f 69 34 4f 55 6b 49 5a 36 69 62 61 65 73 70 65 58 63 33 72 41 72 4c 71 54 74 62 43 43 76 62 32 30 79 37 2b 72 76 63 4b 51 6e 4c 36 56 71 36 65 6f 30 4b 2f 52 32 72 71 57 72 63 69 76 30 72 44 51 30 4c 47 64 34 4e 6e 4b 35 72 75 33 70 65 50 4b 78 73 75 6c 79 2b 2f 44 2b 4b 2b 77 36 4f 76 75 74 75 36 38 31 73 33 4f 77 4e 30 48 33 39 48 65 43 2b 50 2b 35 50 37 4a 79 4e 38 53 30 75 51 45 41 4f 62 32 35 65 62 57 47 2f 62 35 48 64 66 39 46 74 6f 57 41 79 54 75 49 42 55 47 48 42 6f 58 44 41 67 76 43 4f 67 62 4b 43 6b 58 2f 75 33 33 47 50 6f 30 4a 78 77 49 4f 53 6b 67 48 44 30 63 4f 6a 6f 37 4d 69 49 38 4e 44 Data Ascii: BiV9mbWFpf2mKlmtRemhSmndcn3BznWKglYGBZ6usi5VqpmmxqbSOi4OUkIZ6ibaespeXc3rArLqTtbCCvb20y7+rvcKQnL6Vq6eo0K/R2rqWrciv0rDQ0LGd4NnK5ru3pePKxsuly+/D+K+w6Ovutu681s3OwN0H39HeC+P+5P7JyN8S0uQEAOb25ebWG/b5Hdf9FtoWAyTuIBUGHBoXDAgvCOgbKCkX/u33GPo0JxwIOSkgHD0cOjo7MiI8ND
2024-09-27 04:02:13 UTC	1369	IN	Data Raw: 5a 6d 2b 41 64 57 53 59 65 70 42 70 6a 4a 68 2f 62 5a 31 7a 58 31 61 67 66 61 56 36 69 6e 4f 72 6c 61 57 66 5a 5a 32 6d 71 6f 43 67 68 59 4e 77 71 49 35 73 75 72 6d 36 76 71 65 4a 6e 48 79 2b 66 58 2f 41 78 5a 7a 43 68 49 69 39 6d 4d 47 70 76 64 47 2b 72 4d 61 6c 31 74 54 49 70 74 75 72 6d 70 69 64 6d 36 6d 35 6f 4c 4c 41 70 61 44 49 70 4f 54 58 32 2b 6e 59 7a 63 32 72 33 4f 54 62 37 76 50 6c 71 62 50 54 37 50 44 4a 37 4e 4c 64 30 51 4c 7a 37 39 55 46 35 75 54 5a 2b 50 6a 70 32 66 6a 4a 2b 39 2f 62 37 67 54 6a 33 68 51 56 30 66 4d 46 2b 65 6e 33 2f 67 44 74 48 76 50 66 31 76 72 39 4a 76 6f 4b 4b 69 77 57 4a 69 44 6c 48 69 63 72 41 53 45 47 42 50 41 70 44 2b 77 33 4f 68 55 2f 44 69 41 4b 46 54 38 45 4f 6b 68 45 41 77 66 38 41 78 68 41 48 7a 41 4f 48 54 45 Data Ascii: Zm+AdWSYepBpjJh/bZ1zX1agfaV6inOrlaWfZZ2mqoCghYNwqI5surm6vqeJnHy+fX/AxZzChIi9mMGpvdG+rMal1tTIpturmpidm6m5oLLApaDIpOTX2+nYzc2r3OTb7vPlqbPT7PDJ7NLd0QLz79UF5uTZ+Pjp2fjJ+9/b7gTj3hQV0fMF+en3/gDtHvPf1vr9JvoKKiwWJiDlHicrASEGBPApD+w3OhU/DiAKFT8EOkhEAwf8AxhAHzAOHTE
2024-09-27 04:02:13 UTC	1369	IN	Data Raw: 4a 71 58 6d 70 70 74 65 4a 42 32 70 49 4b 41 6b 71 4f 62 64 36 42 6f 6f 59 70 73 72 48 36 53 67 6e 74 71 73 36 65 55 70 72 71 36 74 4c 74 35 72 62 2b 4f 75 71 79 54 75 6f 2b 34 73 6e 71 67 71 59 61 49 68 34 7a 4c 30 4c 76 54 6e 4e 58 4b 74 59 6d 35 6b 5a 62 58 72 4d 37 4d 77 4e 48 66 72 5a 6d 75 75 73 43 79 76 38 48 4a 70 65 75 6c 7a 4b 33 72 36 71 79 37 38 75 4c 46 77 37 50 50 74 62 48 4d 39 4e 48 67 79 38 38 42 7a 65 53 33 76 2f 37 58 32 67 44 37 78 38 66 57 42 39 2f 69 42 41 54 50 7a 66 59 50 35 2b 76 59 44 4e 66 56 39 69 44 38 48 74 34 62 47 76 44 30 35 43 55 43 48 68 59 6c 44 53 59 4c 41 51 62 78 48 68 49 57 4a 67 63 45 2b 54 66 79 4b 66 63 48 44 78 59 6a 50 66 6f 50 4a 52 6b 49 2f 6b 41 4b 43 43 67 4e 47 51 5a 52 4a 7a 73 66 4c 44 35 55 4b 6b 30 70 Data Ascii: JqXmppteJB2pIKAkqObd6BooYpsrH6Sgntqs6eUprq6tLt5rb+OuqyTuo+4snqgqYaIh4zL0LvTnNXKtYm5kZbXrM7MwNHfrZmuusCyv8HJpeulzK3r6qy78uLFw7PPtbHM9NHgy88BzeS3v/7X2gD7x8fWB9/iBATPzfYP5+vYDNfV9iD8Ht4bGvD05CUCHhYlDSYLAQbxHhIWJgcE+TfyKfcHDxYjPfoPJRkI/kAKCCgNGQZRJzsfLD5UKk0p
2024-09-27 04:02:13 UTC	1369	IN	Data Raw: 6c 37 67 5a 79 59 6f 59 53 69 6f 5a 32 6a 71 48 68 36 6e 57 75 6a 72 4a 78 73 6a 37 43 78 63 49 36 79 68 62 47 75 66 70 79 35 66 62 57 7a 67 37 4b 37 67 73 61 38 6e 71 75 6f 76 6f 33 4e 6d 61 50 50 70 4d 6d 6a 78 4c 2f 5a 78 38 72 45 71 37 62 63 75 35 6d 35 34 71 76 53 34 64 37 68 78 74 48 58 7a 4c 65 39 74 36 58 67 78 36 2f 4b 79 50 50 53 78 50 65 79 79 66 43 35 36 65 2f 7a 75 2f 7a 52 76 41 58 36 2b 72 6e 67 31 4d 72 39 42 51 48 47 37 51 54 79 2f 65 33 72 30 4f 49 53 45 4f 59 4a 35 65 77 48 33 76 77 54 33 51 34 55 34 78 4d 63 34 69 63 64 2f 67 77 4a 48 2b 72 2b 47 65 34 77 42 53 6f 45 4a 53 41 36 4b 43 73 6c 44 42 63 39 48 43 30 76 48 6b 51 44 52 6a 73 69 53 53 44 38 49 79 46 4d 4b 79 5a 51 43 6c 4d 47 55 69 42 48 49 45 78 54 46 69 78 65 47 45 6f 31 4f Data Ascii: l7gZyYoYSioZ2jqHh6nWujrJxsj7CxcI6yhbGufpy5fbWzg7K7gsa8nquovo3NmaPPpMmjxL/Zx8rEq7bcu5m54qvS4d7hxtHXzLe9t6Xgx6/KyPPSxPeyyfC56e/zu/zRvAX6+rng1Mr9BQHG7QTy/e3r0OISEOYJ5ewH3vwT3Q4U4xMc4icd/gwJH+r+Ge4wBSoEJSA6KCslDBc9HC0vHkQDRjsiSSD8IyFMKyZQClMGUiBHIExTFixeGEo1O
2024-09-27 04:02:13 UTC	1369	IN	Data Raw: 79 59 58 4f 71 67 34 36 42 6e 36 65 78 67 49 61 31 63 4b 69 58 73 72 4a 30 6a 70 57 33 6e 62 75 30 66 58 2f 42 6c 72 6d 68 6f 59 43 42 6f 36 75 6f 76 73 2b 39 7a 35 36 39 71 4b 57 4c 6b 4a 61 31 73 4e 6a 54 79 62 72 65 7a 63 72 65 74 5a 7a 67 30 75 58 6e 30 63 43 37 36 38 6d 6a 74 74 76 4e 71 4e 7a 30 79 64 50 31 38 74 66 36 78 2b 6e 45 31 2b 37 77 39 37 7a 66 76 51 62 4f 30 50 72 51 30 75 4c 2b 79 65 6f 41 36 67 51 50 46 4d 58 67 34 68 62 75 36 4d 2f 37 43 2f 54 55 39 77 6a 57 45 68 4c 6a 44 51 66 6d 49 68 6a 6f 43 65 55 6b 37 4f 41 4b 36 4f 6f 65 4b 51 76 79 37 68 55 56 38 69 55 4a 2f 50 77 33 2f 54 6f 36 4f 7a 41 2b 41 52 4d 66 41 69 4d 54 48 79 59 71 4c 46 41 78 43 68 46 4d 44 31 49 4e 54 79 6f 78 45 56 74 49 4b 79 63 71 4e 46 35 53 4c 6d 55 36 59 44 Data Ascii: yYXOqg46Bn6exgIa1cKiXsrJ0jpW3nbu0fX/BlrmhoYCBo6uovs+9z569qKWLkJa1sNjTybrezcretZzg0uXn0cC768mjttvNqNz0ydP18tf6x+nE1+7w97zfvQbO0PrQ0uL+yeoA6gQPFMXg4hbu6M/7C/TU9wjWEhLjDQfmIhjoCeUk7OAK6OoeKQvy7hUV8iUJ/Pw3/To6OzA+ARMfAiMTHyYqLFAxChFMD1INTyoxEVtIKycqNF5SLmU6YD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49946	188.114.96.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:13 UTC	691	OUT	GET /socket.io/?EIO=4&transport=polling&t=P8nfBLz HTTP/1.1 Host: datechf.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://datechf.cc/de/receive/79469380 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
2024-09-27 04:02:13 UTC	566	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:13 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: no-store CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=APHDdyTwvh7IT4zzRRH%2B6E9HF%2Fgz597JdMyn8%2B54pV3yH5PhSeu9z4%2FQ6xtKI0QTVsEiM1jbzj%2B4IVULCy47gaN0VtgQlr9KLl6cj5IXeH1%2BNjp7yiJ2KeLFegAJ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c9898d1eee79e02-EWR
2024-09-27 04:02:13 UTC	124	IN	Data Raw: 37 36 0d 0a 30 7b 22 73 69 64 22 3a 22 71 6b 61 5a 41 70 56 62 42 37 52 43 64 79 42 35 41 44 48 76 22 2c 22 75 70 67 72 61 64 65 73 22 3a 5b 22 77 65 62 73 6f 63 6b 65 74 22 5d 2c 22 70 69 6e 67 49 6e 74 65 72 76 61 6c 22 3a 32 35 30 30 30 2c 22 70 69 6e 67 54 69 6d 65 6f 75 74 22 3a 32 30 30 30 30 2c 22 6d 61 78 50 61 79 6c 6f 61 64 22 3a 31 30 30 30 30 30 30 7d 0d 0a Data Ascii: 760{"sid":"qkaZApVbB7RCdyB5ADHv","upgrades":["websocket"],"pingInterval":25000,"pingTimeout":20000,"maxPayload":1000000}
2024-09-27 04:02:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49951	104.18.86.42	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:13 UTC	427	OUT	GET /consent/baf1656f-0c9f-4cd8-83fe-a5ce8d8c9eed/baf1656f-0c9f-4cd8-83fe-a5ce8d8c9eed.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:13 UTC	981	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:13 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Ray: 8c9898d319da5e6a-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 9381 Cache-Control: public, max-age=86400 Expires: Sat, 28 Sep 2024 04:02:13 GMT Last-Modified: Tue, 24 Sep 2024 11:53:01 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: 2BCnt9yWwbb1DFZQfcsDhw== Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 87479205-a01e-00c6-6780-0eeeb6000000 x-ms-version: 2009-09-19 Cross-Origin-Resource-Policy: cross-origin Server: cloudflare
2024-09-27 04:02:13 UTC	388	IN	Data Raw: 31 31 65 38 0d 0a 7b 22 43 6f 6f 6b 69 65 53 50 41 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 53 61 6d 65 53 69 74 65 4e 6f 6e 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 56 32 43 53 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4d 75 6c 74 69 56 61 72 69 61 6e 74 54 65 73 74 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 55 73 65 56 32 22 3a 74 72 75 65 2c 22 4d 6f 62 69 6c 65 53 44 4b 22 3a 66 61 6c 73 65 2c 22 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 53 63 72 69 70 74 54 79 70 65 22 3a 22 50 52 4f 44 55 43 54 49 4f 4e 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 33 30 37 2e 31 2e 30 22 2c 22 4f 70 74 61 6e 6f 6e 44 61 74 61 4a 53 4f 4e 22 3a 22 62 61 66 31 Data Ascii: 11e8{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202307.1.0","OptanonDataJSON":"baf1
2024-09-27 04:02:13 UTC	1369	IN	Data Raw: 63 6b 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6f 6b 69 65 73 2d 64 61 74 61 2e 6f 6e 65 74 72 75 73 74 2e 69 6f 2f 62 61 6e 6e 65 72 73 64 6b 2f 76 31 2f 64 6f 6d 61 69 6e 67 72 6f 75 70 63 68 65 63 6b 22 2c 22 52 75 6c 65 53 65 74 22 3a 5b 7b 22 49 64 22 3a 22 30 31 39 32 31 64 66 64 2d 30 35 33 35 2d 37 63 38 38 2d 39 35 35 38 2d 66 39 63 38 32 35 30 65 35 35 38 63 22 2c 22 4e 61 6d 65 22 3a 22 47 6c 6f 62 61 6c 20 41 75 64 69 65 6e 63 65 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 22 70 72 22 2c 22 70 73 22 2c 22 70 77 22 2c 22 70 79 22 2c 22 71 61 22 2c 22 61 64 22 2c 22 61 65 22 2c 22 61 66 22 2c 22 61 67 22 2c 22 61 69 22 2c 22 61 6c 22 2c 22 61 6d 22 2c 22 61 6f 22 2c 22 61 71 22 2c 22 61 72 22 2c 22 61 73 22 2c 22 61 75 22 2c 22 61 77 22 Data Ascii: ckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"01921dfd-0535-7c88-9558-f9c8250e558c","Name":"Global Audience","Countries":["pr","ps","pw","py","qa","ad","ae","af","ag","ai","al","am","ao","aq","ar","as","au","aw"
2024-09-27 04:02:13 UTC	1369	IN	Data Raw: 65 22 3a 22 47 45 4e 45 52 49 43 22 2c 22 55 73 65 47 6f 6f 67 6c 65 56 65 6e 64 6f 72 73 22 3a 66 61 6c 73 65 2c 22 56 61 72 69 61 6e 74 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 54 65 73 74 45 6e 64 54 69 6d 65 22 3a 6e 75 6c 6c 2c 22 56 61 72 69 61 6e 74 73 22 3a 5b 5d 2c 22 54 65 6d 70 6c 61 74 65 4e 61 6d 65 22 3a 22 47 65 6e 65 72 69 63 20 54 65 6d 70 6c 61 74 65 22 2c 22 43 6f 6e 64 69 74 69 6f 6e 73 22 3a 5b 5d 2c 22 47 43 45 6e 61 62 6c 65 22 3a 74 72 75 65 2c 22 49 73 47 50 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 4a 57 54 41 75 74 68 46 6f 72 4b 6e 6f 77 6e 55 73 65 72 73 22 3a 66 61 6c 73 65 7d 2c 7b 22 49 64 22 3a 22 30 31 39 32 31 64 66 64 2d 30 34 30 62 2d 37 31 36 32 2d 62 37 62 30 2d 31 63 65 66 37 39 61 Data Ascii: e":"GENERIC","UseGoogleVendors":false,"VariantEnabled":false,"TestEndTime":null,"Variants":[],"TemplateName":"Generic Template","Conditions":[],"GCEnable":true,"IsGPPEnabled":false,"EnableJWTAuthForKnownUsers":false},{"Id":"01921dfd-040b-7162-b7b0-1cef79a
2024-09-27 04:02:13 UTC	1369	IN	Data Raw: 65 6e 74 4c 61 6e 67 75 61 67 65 22 3a 6e 75 6c 6c 2c 22 76 65 6e 64 6f 72 4c 69 73 74 56 65 72 73 69 6f 6e 22 3a 30 2c 22 6d 61 78 56 65 6e 64 6f 72 49 64 22 3a 30 2c 22 65 6e 63 6f 64 69 6e 67 54 79 70 65 22 3a 22 30 22 2c 22 67 6c 6f 62 61 6c 56 65 6e 64 6f 72 4c 69 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6f 6b 69 65 6c 61 77 2e 6f 72 67 2f 76 65 6e 64 6f 72 6c 69 73 74 2f 69 61 62 32 44 61 74 61 2e 6a 73 6f 6e 22 7d 2c 22 49 61 62 32 56 32 44 61 74 61 22 3a 7b 22 63 6f 6f 6b 69 65 56 65 72 73 69 6f 6e 22 3a 22 31 22 2c 22 63 72 65 61 74 65 64 54 69 6d 65 22 3a 22 32 30 32 34 2d 30 39 2d 32 34 54 31 31 3a 35 33 3a 30 31 2e 34 32 36 33 32 39 35 35 30 22 2c 22 75 70 64 61 74 65 64 54 69 6d 65 22 3a 22 32 30 32 34 2d 30 39 2d 32 Data Ascii: entLanguage":null,"vendorListVersion":0,"maxVendorId":0,"encodingType":"0","globalVendorListUrl":"https://cdn.cookielaw.org/vendorlist/iab2Data.json"},"Iab2V2Data":{"cookieVersion":"1","createdTime":"2024-09-24T11:53:01.426329550","updatedTime":"2024-09-2
2024-09-27 04:02:13 UTC	97	IN	Data Raw: 47 70 70 44 61 74 61 22 3a 7b 22 63 6d 70 49 64 22 3a 22 32 38 22 7d 2c 22 41 75 74 68 65 6e 74 69 63 61 74 65 64 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 43 44 4e 4c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6f 6b 69 65 6c 61 77 2e 6f 72 67 22 7d 0d 0a Data Ascii: GppData":{"cmpId":"28"},"AuthenticatedConsent":false,"CDNLocation":"https://cdn.cookielaw.org"}
2024-09-27 04:02:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49950	104.18.32.137	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:13 UTC	591	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.twint.ch Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.twint.ch/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:13 UTC	370	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:13 GMT Content-Type: application/json Content-Length: 69 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8c9898d3eab942d8-EWR
2024-09-27 04:02:13 UTC	69	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 4e 59 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"NY","stateName":"New York","continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49955	104.18.95.41	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:14 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1731196884:1727406774:ogyKtD3DYRZvneb8A8Xd4gumCbdnDgJl3yl7WoSTagU/8c9898c28eda4378/cf4fc23845fcc6d HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:14 UTC	349	IN	HTTP/1.1 404 Not Found Date: Fri, 27 Sep 2024 04:02:14 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: TGKSqQyj7h4B+ceuE4AjU9pCyXkpeYmM3ts=$RYg7JzL5M+rU5YL8 cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8c9898d82b03435d-EWR
2024-09-27 04:02:14 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49957	104.18.32.137	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:14 UTC	380	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:14 UTC	249	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:14 GMT Content-Type: text/javascript Content-Length: 80 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8c9898d84a5243bc-EWR
2024-09-27 04:02:14 UTC	80	IN	Data Raw: 6a 73 6f 6e 46 65 65 64 28 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 4e 59 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d 29 3b Data Ascii: jsonFeed({"country":"US","state":"NY","stateName":"New York","continent":"NA"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49956	188.114.97.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:14 UTC	505	OUT	GET /socket.io/?EIO=4&transport=polling&t=P8nfBLz HTTP/1.1 Host: datechf.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
2024-09-27 04:02:14 UTC	562	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:14 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: no-store CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fzPc5en5KA1ZvMlZ3JiHD%2FrDO9Qw%2BUNnA7A9t5PAK35TCTIWZBC%2FoVtpga4flAvW1e%2FeNJOUfNwDMN5gonMQ0wJT5QmUqIp9Z8QXDQ6K329hXdT9HnCKeQjRTovJ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c9898d858b74283-EWR
2024-09-27 04:02:14 UTC	124	IN	Data Raw: 37 36 0d 0a 30 7b 22 73 69 64 22 3a 22 79 52 46 32 6e 62 75 36 2d 6a 64 71 6a 6a 6e 45 41 44 48 77 22 2c 22 75 70 67 72 61 64 65 73 22 3a 5b 22 77 65 62 73 6f 63 6b 65 74 22 5d 2c 22 70 69 6e 67 49 6e 74 65 72 76 61 6c 22 3a 32 35 30 30 30 2c 22 70 69 6e 67 54 69 6d 65 6f 75 74 22 3a 32 30 30 30 30 2c 22 6d 61 78 50 61 79 6c 6f 61 64 22 3a 31 30 30 30 30 30 30 7d 0d 0a Data Ascii: 760{"sid":"yRF2nbu6-jdqjjnEADHw","upgrades":["websocket"],"pingInterval":25000,"pingTimeout":20000,"maxPayload":1000000}
2024-09-27 04:02:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49964	188.114.96.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:14 UTC	804	OUT	POST /socket.io/?EIO=4&transport=polling&t=P8nfBkw&sid=qkaZApVbB7RCdyB5ADHv HTTP/1.1 Host: datechf.cc Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://datechf.cc Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://datechf.cc/de/receive/79469380 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
2024-09-27 04:02:14 UTC	2	OUT	Data Raw: 34 30 Data Ascii: 40
2024-09-27 04:02:15 UTC	582	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:15 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close cache-control: no-store CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KUvuNZPRXKNBieQw%2Bqh4uEREAPf%2Bp2GH6b3L%2B0%2FA%2Bd9XwH59y9QXem%2FLoxjF%2FVGJYBjCM4NdhjwmCCcUNH4thCV6emTfN550L5Wtbi0V9iVyptw0sdiDjGPu5nzY"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c9898db9fad8c81-EWR alt-svc: h3=":443"; ma=86400
2024-09-27 04:02:15 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-09-27 04:02:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49965	188.114.96.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:14 UTC	716	OUT	GET /socket.io/?EIO=4&transport=polling&t=P8nfBk-&sid=qkaZApVbB7RCdyB5ADHv HTTP/1.1 Host: datechf.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://datechf.cc/de/receive/79469380 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
2024-09-27 04:02:15 UTC	564	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:15 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: no-store CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Uo5ZE%2FOWj%2Bb7On3LXQcAiv0YpVCom%2BaBCyQsxSJb3JSKbuyeGWdWGABeqdNi9DQr3dnzTVgZqX9mHZA6tnPFuBdxF%2BOFpwedVdIAFR1l%2B8BkQaU8cGswvVGb93Vz"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c9898db9e0c8cc5-EWR
2024-09-27 04:02:15 UTC	38	IN	Data Raw: 32 30 0d 0a 34 30 7b 22 73 69 64 22 3a 22 33 66 4c 77 50 75 63 61 57 4a 64 75 6d 44 34 4b 41 44 48 78 22 7d 0d 0a Data Ascii: 2040{"sid":"3fLwPucaWJdumD4KADHx"}
2024-09-27 04:02:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49966	188.114.96.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:14 UTC	672	OUT	GET /socket.io/?EIO=4&transport=websocket&sid=qkaZApVbB7RCdyB5ADHv HTTP/1.1 Host: datechf.cc Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://datechf.cc Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de Sec-WebSocket-Key: YzgEtue9jvyMxPYWhtacPA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-09-27 04:02:15 UTC	533	IN	HTTP/1.1 400 Bad Request Date: Fri, 27 Sep 2024 04:02:15 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l0n2SvyNfss0hG7iLwXOz7qVniZmC5JrJsiC3k6qMGD1qHPrHK2m%2FvGmpLkKgvRT6PtSkTL2W63j0IVyLnOdCw%2FjNOJ54MLof4YMekAE86aACIOG6Nyv2X0PTYoo"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c9898dbc9d242ab-EWR
2024-09-27 04:02:15 UTC	40	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}
2024-09-27 04:02:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49970	104.18.32.137	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:15 UTC	591	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.twint.ch Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.twint.ch/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:15 UTC	370	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:15 GMT Content-Type: application/json Content-Length: 69 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8c9898dd9c6e4400-EWR
2024-09-27 04:02:15 UTC	69	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 4e 59 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"NY","stateName":"New York","continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49977	104.18.95.41	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:15 UTC	786	OUT	GET /cdn-cgi/challenge-platform/h/g/i/8c9898c28eda4378/1727409733188/7Hf4hPCc6PpUz1G HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/jkyme/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:15 UTC	170	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:15 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8c9898ddac147287-EWR
2024-09-27 04:02:15 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 21 00 00 00 30 08 02 00 00 00 10 0c 84 06 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR!0IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49986	104.18.86.42	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:15 UTC	554	OUT	GET /scripttemplates/202307.1.0/otBannerSdk.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twint.ch/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:16 UTC	859	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:16 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: orDm7smwsr/pjTi/DOTSGQ== Last-Modified: Wed, 02 Aug 2023 03:24:04 GMT x-ms-request-id: 1e317a27-c01e-0099-0a64-14463e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 15132 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8c9898e1fbcb42d3-EWR
2024-09-27 04:02:16 UTC	510	IN	Data Raw: 37 63 34 35 0d 0a 2f 2a 2a 20 0a 20 2a 20 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 0a 20 2a 20 76 32 30 32 33 30 37 2e 31 2e 30 0a 20 2a 20 62 79 20 4f 6e 65 54 72 75 73 74 20 4c 4c 43 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 33 20 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 41 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 41 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6f 20 69 6e Data Ascii: 7c45/** * onetrust-banner-sdk * v202307.1.0 * by OneTrust LLC * Copyright 2023 */!function(){"use strict";var A=function(e,t){return(A=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in
2024-09-27 04:02:16 UTC	1369	IN	Data Raw: 75 6c 6c 3d 3d 3d 74 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 29 3a 28 6f 2e 70 72 6f 74 6f 74 79 70 65 3d 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 65 77 20 6f 29 7d 76 61 72 20 4c 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 5f 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 3c 6e 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 29 2e 61 70 70 6c 79 28 74 68 Data Ascii: ull===t?Object.create(t):(o.prototype=t.prototype,new o)}var L,_=function(){return(_=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(th
2024-09-27 04:02:16 UTC	1369	IN	Data Raw: 26 6c 2e 6c 61 62 65 6c 3c 61 5b 31 5d 29 6c 2e 6c 61 62 65 6c 3d 61 5b 31 5d 2c 61 3d 74 3b 65 6c 73 65 7b 69 66 28 21 28 61 26 26 6c 2e 6c 61 62 65 6c 3c 61 5b 32 5d 29 29 7b 61 5b 32 5d 26 26 6c 2e 6f 70 73 2e 70 6f 70 28 29 2c 6c 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 7d 6c 2e 6c 61 62 65 6c 3d 61 5b 32 5d 2c 6c 2e 6f 70 73 2e 70 75 73 68 28 74 29 7d 7d 74 3d 72 2e 63 61 6c 6c 28 6e 2c 6c 29 7d 63 61 74 63 68 28 65 29 7b 74 3d 5b 36 2c 65 5d 2c 73 3d 30 7d 66 69 6e 61 6c 6c 79 7b 69 3d 61 3d 30 7d 69 66 28 35 26 74 5b 30 5d 29 74 68 72 6f 77 20 74 5b 31 5d 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 74 5b 30 5d 3f 74 5b 31 5d 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 71 28 29 7b 66 6f 72 28 Data Ascii: &l.label<a[1])l.label=a[1],a=t;else{if(!(a&&l.label<a[2])){a[2]&&l.ops.pop(),l.trys.pop();continue}l.label=a[2],l.ops.push(t)}}t=r.call(n,l)}catch(e){t=[6,e],s=0}finally{i=a=0}if(5&t[0])throw t[1];return{value:t[0]?t[1]:void 0,done:!0}}}}function q(){for(
2024-09-27 04:02:16 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 29 29 7b 76 61 72 20 6f 3d 65 2e 74 68 65 6e 3b 69 66 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 7a 29 72 65 74 75 72 6e 20 74 2e 5f 73 74 61 74 65 3d 33 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 76 6f 69 64 20 59 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 29 72 65 74 75 72 6e 20 76 6f 69 64 20 51 28 28 6e 3d 6f 2c 72 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 61 70 70 6c 79 28 72 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 59 28 74 29 7d 63 61 74 63 68 28 65 29 7b 4a 28 74 2c 65 29 7d 76 61 72 20 6e 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 4a 28 65 2c 74 29 7b 65 2e 5f 73 74 61 74 65 3d 32 2c 65 2e 5f Data Ascii: nction"==typeof e)){var o=e.then;if(e instanceof z)return t._state=3,t._value=e,void Y(t);if("function"==typeof o)return void Q((n=o,r=e,function(){n.apply(r,arguments)}),t)}t._state=1,t._value=e,Y(t)}catch(e){J(t,e)}var n,r}function J(e,t){e._state=2,e._
2024-09-27 04:02:16 UTC	1369	IN	Data Raw: 66 20 65 29 29 7b 76 61 72 20 6e 3d 65 2e 74 68 65 6e 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 6e 2e 63 61 6c 6c 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 28 6f 2c 65 29 7d 2c 69 29 7d 73 5b 6f 5d 3d 65 2c 30 3d 3d 2d 2d 61 26 26 72 28 73 29 7d 63 61 74 63 68 28 65 29 7b 69 28 65 29 7d 7d 28 65 2c 73 5b 65 5d 29 7d 29 7d 2c 7a 2e 72 65 73 6f 6c 76 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 7a 3f 74 3a 6e 65 77 20 7a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 74 29 7d 29 7d 2c 7a 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 Data Ascii: f e)){var n=e.then;if("function"==typeof n)return void n.call(e,function(e){t(o,e)},i)}s[o]=e,0==--a&&r(s)}catch(e){i(e)}}(e,s[e])})},z.resolve=function(t){return t&&"object"==typeof t&&t.constructor===z?t:new z(function(e){e(t)})},z.reject=function(o){re
2024-09-27 04:02:16 UTC	1369	IN	Data Raw: 7c 7c 65 21 3d 65 26 26 73 21 3d 73 29 72 65 74 75 72 6e 21 30 3b 69 2b 2b 7d 7d 72 65 74 75 72 6e 21 31 7d 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 2c 24 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 45 6e 64 73 57 69 74 68 50 6f 6c 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 64 73 57 69 74 68 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 64 73 57 69 74 68 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 3e 74 68 69 73 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 Data Ascii: \|\|e!=e&&s!=s)return!0;i++}}return!1},writable:!0,configurable:!0})},$.prototype.initEndsWithPoly=function(){String.prototype.endsWith\|\|Object.defineProperty(String.prototype,"endsWith",{value:function(e,t){return(void 0===t\|\|t>this.length)&&(t=this.length
2024-09-27 04:02:16 UTC	1369	IN	Data Raw: 7d 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 2c 24 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 41 72 72 61 79 46 69 6c 6c 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2c 22 66 69 6c 6c 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 74 68 69 73 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 66 6f 72 28 76 61 72 20 74 3d 4f 62 6a 65 63 74 28 74 68 69 73 29 2c 6f 3d 74 Data Ascii: },writable:!0,configurable:!0})},$.prototype.initArrayFillPolyfill=function(){Array.prototype.fill\|\|Object.defineProperty(Array.prototype,"fill",{value:function(e){if(null==this)throw new TypeError("this is null or not defined");for(var t=Object(this),o=t
2024-09-27 04:02:16 UTC	1369	IN	Data Raw: 6e 6e 65 72 53 61 76 65 53 65 74 74 69 6e 67 73 3d 35 5d 3d 22 42 61 6e 6e 65 72 53 61 76 65 53 65 74 74 69 6e 67 73 22 2c 65 5b 65 2e 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 3d 36 5d 3d 22 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 22 2c 28 65 3d 65 65 3d 65 65 7c 7c 7b 7d 29 5b 65 2e 42 61 6e 6e 65 72 3d 31 5d 3d 22 42 61 6e 6e 65 72 22 2c 65 5b 65 2e 50 43 3d 32 5d 3d 22 50 43 22 2c 65 5b 65 2e 41 50 49 3d 33 5d 3d 22 41 50 49 22 2c 28 65 3d 74 65 3d 74 65 7c 7c 7b 7d 29 2e 41 63 63 65 70 74 41 6c 6c 3d 22 41 63 63 65 70 74 41 6c 6c 22 2c 65 2e 52 65 6a 65 63 74 41 6c 6c 3d 22 52 65 6a 65 63 74 41 6c 6c 22 2c 65 2e 55 70 64 61 74 65 43 6f 6e 73 65 6e 74 3d Data Ascii: nnerSaveSettings=5]="BannerSaveSettings",e[e.ContinueWithoutAcceptingButton=6]="ContinueWithoutAcceptingButton",(e=ee=ee\|\|{})[e.Banner=1]="Banner",e[e.PC=2]="PC",e[e.API=3]="API",(e=te=te\|\|{}).AcceptAll="AcceptAll",e.RejectAll="RejectAll",e.UpdateConsent=
2024-09-27 04:02:16 UTC	1369	IN	Data Raw: 5d 3d 35 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 52 65 6a 65 63 74 20 41 6c 6c 22 2c 65 5b 65 5b 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 5d 3d 36 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 2c 65 5b 65 5b 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 5d 3d 37 5d 3d 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 2c 28 65 3d 68 65 3d 68 65 7c 7c 7b 7d 29 2e 41 63 74 69 76 65 3d 22 31 22 2c 65 2e 49 6e 41 63 74 69 76 65 3d 22 30 22 2c 28 65 3d 67 65 3d 67 65 7c 7c 7b 7d 29 2e 48 6f 73 74 3d 22 48 6f 73 74 22 2c 65 2e 47 65 6e 56 65 6e 64 6f 72 3d 22 47 65 6e 56 65 6e 22 2c 28 65 3d 43 65 3d 43 65 7c 7c 7b 7d 29 5b Data Ascii: ]=5]="Preference Center - Reject All",e[e["Preference Center - Confirm"]=6]="Preference Center - Confirm",e[e["GPC value changed"]=7]="GPC value changed",(e=he=he\|\|{}).Active="1",e.InActive="0",(e=ge=ge\|\|{}).Host="Host",e.GenVendor="GenVen",(e=Ce=Ce\|\|{})[
2024-09-27 04:02:16 UTC	1369	IN	Data Raw: 22 2c 65 2e 4c 49 5f 41 43 54 49 56 45 5f 49 46 5f 4c 45 47 41 4c 5f 42 41 53 49 53 3d 22 4c 49 41 63 74 69 76 65 49 66 4c 65 67 61 6c 42 61 73 69 73 22 2c 28 65 3d 4c 65 3d 4c 65 7c 7c 7b 7d 29 2e 63 6f 6f 6b 69 65 73 3d 22 63 6f 6f 6b 69 65 73 22 2c 65 2e 76 65 6e 64 6f 72 73 3d 22 76 65 6e 64 6f 72 73 22 2c 28 65 3d 5f 65 3d 5f 65 7c 7c 7b 7d 29 2e 47 44 50 52 3d 22 47 44 50 52 22 2c 65 2e 49 41 42 3d 22 49 41 42 22 2c 65 2e 43 43 50 41 3d 22 43 43 50 41 22 2c 65 2e 49 41 42 32 3d 22 49 41 42 32 22 2c 65 2e 47 45 4e 45 52 49 43 3d 22 47 45 4e 45 52 49 43 22 2c 65 2e 4c 47 50 44 3d 22 4c 47 50 44 22 2c 65 2e 47 45 4e 45 52 49 43 5f 50 52 4f 4d 50 54 3d 22 47 45 4e 45 52 49 43 5f 50 52 4f 4d 50 54 22 2c 65 2e 43 50 52 41 3d 22 43 50 52 41 22 2c 65 2e 43 Data Ascii: ",e.LI_ACTIVE_IF_LEGAL_BASIS="LIActiveIfLegalBasis",(e=Le=Le\|\|{}).cookies="cookies",e.vendors="vendors",(e=_e=_e\|\|{}).GDPR="GDPR",e.IAB="IAB",e.CCPA="CCPA",e.IAB2="IAB2",e.GENERIC="GENERIC",e.LGPD="LGPD",e.GENERIC_PROMPT="GENERIC_PROMPT",e.CPRA="CPRA",e.C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49994	188.114.96.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:17 UTC	716	OUT	GET /socket.io/?EIO=4&transport=polling&t=P8nfC8J&sid=qkaZApVbB7RCdyB5ADHv HTTP/1.1 Host: datechf.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://datechf.cc/de/receive/79469380 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
2024-09-27 04:02:20 UTC	545	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:20 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close cache-control: no-store CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZWDPYBV2hauxXq8CdMx4mVjuEuWOtAiwbMga5y5HnBXwV9P4jnPPpYu7KyqFs7HuViSEk4TmAu7ZehbaxSRwqwUM5FZWjSk468P7yutFzwrG16qZppwvJ1Ztbz5K"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c9898e8d8c242c3-EWR
2024-09-27 04:02:20 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49993	188.114.96.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:17 UTC	805	OUT	POST /socket.io/?EIO=4&transport=polling&t=P8nfC8Q&sid=qkaZApVbB7RCdyB5ADHv HTTP/1.1 Host: datechf.cc Connection: keep-alive Content-Length: 26 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://datechf.cc Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://datechf.cc/de/receive/79469380 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
2024-09-27 04:02:17 UTC	26	OUT	Data Raw: 34 32 5b 22 6d 61 64 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 22 2c 22 30 22 5d Data Ascii: 42["madeNotification","0"]
2024-09-27 04:02:17 UTC	548	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:17 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close cache-control: no-store CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lwmSYkmOFOENiRapymnwt16Sh%2Bwd%2Bm2PGUIhYmgGw00pMVG1VbRzvNvO4rELZ2mOctkDsUTyXzOVuyye2cO3JTSR%2FkyCvU%2BnKCVKdCioIozNngkjh50grqmE%2BBI5"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c9898e91f470f95-EWR
2024-09-27 04:02:17 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-09-27 04:02:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	50004	104.18.86.42	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:17 UTC	628	OUT	GET /consent/baf1656f-0c9f-4cd8-83fe-a5ce8d8c9eed/01921dfd-0535-7c88-9558-f9c8250e558c/de.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.twint.ch Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.twint.ch/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:17 UTC	981	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:17 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Ray: 8c9898ea89094216-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 9381 Cache-Control: public, max-age=86400 Expires: Sat, 28 Sep 2024 04:02:17 GMT Last-Modified: Tue, 24 Sep 2024 11:53:04 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: 9RlaUw8souLe5+1AEv+kMg== Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: ac3a55f2-201e-0054-4b78-0e7900000000 x-ms-version: 2009-09-19 Cross-Origin-Resource-Policy: cross-origin Server: cloudflare
2024-09-27 04:02:17 UTC	388	IN	Data Raw: 37 62 63 63 0d 0a 7b 22 44 6f 6d 61 69 6e 44 61 74 61 22 3a 7b 22 70 63 63 6c 6f 73 65 42 75 74 74 6f 6e 54 79 70 65 22 3a 22 49 63 6f 6e 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 22 3a 22 4a 61 68 72 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 73 22 3a 22 4a 61 68 72 65 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 53 65 63 73 22 3a 22 45 69 6e 69 67 65 20 53 65 6b 75 6e 64 65 6e 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 22 3a 22 57 6f 63 68 65 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 73 22 3a 22 57 6f 63 68 65 6e 22 2c 22 70 63 63 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 54 65 78 74 22 3a 22 46 6f 72 74 66 61 68 72 65 6e 20 6f 68 6e 65 20 41 6b 7a 65 70 74 69 65 72 65 6e 22 2c 22 4d 61 69 6e 54 65 78 74 22 3a 22 44 61 74 65 6e 73 Data Ascii: 7bcc{"DomainData":{"pccloseButtonType":"Icon","pclifeSpanYr":"Jahr","pclifeSpanYrs":"Jahre","pclifeSpanSecs":"Einige Sekunden","pclifeSpanWk":"Woche","pclifeSpanWks":"Wochen","pccontinueWithoutAcceptText":"Fortfahren ohne Akzeptieren","MainText":"Datens
2024-09-27 04:02:17 UTC	1369	IN	Data Raw: 65 69 63 68 65 72 6e 2e 20 44 69 65 73 20 67 65 73 63 68 69 65 68 74 20 6d 65 69 73 74 20 69 6e 20 46 6f 72 6d 20 76 6f 6e 20 43 6f 6f 6b 69 65 73 2e 20 48 69 65 72 62 65 69 20 6b 61 6e 6e 20 65 73 20 73 69 63 68 20 75 6d 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 65 6e 20 c3 bc 62 65 72 20 53 69 65 2c 20 49 68 72 65 20 45 69 6e 73 74 65 6c 6c 75 6e 67 65 6e 20 6f 64 65 72 20 49 68 72 20 47 65 72 c3 a4 74 20 68 61 6e 64 65 6c 6e 2e 20 4d 65 69 73 74 20 77 65 72 64 65 6e 20 64 69 65 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 65 6e 20 76 65 72 77 65 6e 64 65 74 2c 20 75 6d 20 64 69 65 20 65 72 77 61 72 74 75 6e 67 73 67 65 6d c3 a4 73 73 65 20 46 75 6e 6b 74 69 6f 6e 20 64 65 72 20 57 65 62 73 69 74 65 20 7a 75 20 67 65 77 c3 a4 68 72 6c 65 69 73 74 65 6e 2e 20 44 75 72 Data Ascii: eichern. Dies geschieht meist in Form von Cookies. Hierbei kann es sich um Informationen ber Sie, Ihre Einstellungen oder Ihr Gert handeln. Meist werden die Informationen verwendet, um die erwartungsgemsse Funktion der Website zu gewhrleisten. Dur
2024-09-27 04:02:17 UTC	1369	IN	Data Raw: 72 68 65 69 74 20 64 65 72 20 57 65 62 73 65 69 74 65 20 28 75 6e 62 65 64 69 6e 67 74 20 65 72 66 6f 72 64 65 72 6c 69 63 68 65 20 43 6f 6f 6b 69 65 73 29 20 75 6e 64 20 76 65 72 62 65 73 73 65 72 6e 20 61 6e 64 65 72 65 72 73 65 69 74 73 20 64 65 69 6e 20 42 65 73 75 63 68 73 65 72 6c 65 62 6e 69 73 2c 20 69 6e 64 65 6d 20 77 69 72 20 64 69 65 20 4c 65 69 73 74 75 6e 67 20 75 6e 64 20 4e 75 74 7a 75 6e 67 20 64 65 72 20 57 65 62 73 65 69 74 65 20 61 6e 61 6c 79 73 69 65 72 65 6e 20 75 6e 64 20 6f 70 74 69 6d 69 65 72 65 6e 20 28 46 75 6e 6b 74 69 6f 6e 65 6c 6c 65 20 75 6e 64 20 4c 65 69 73 74 75 6e 67 73 2d 43 6f 6f 6b 69 65 73 29 2e 20 5c 6e 57 65 6e 6e 20 64 75 20 5c 22 41 6c 6c 65 20 43 6f 6f 6b 69 65 73 20 61 6b 7a 65 70 74 69 65 72 65 6e 5c 22 20 Data Ascii: rheit der Webseite (unbedingt erforderliche Cookies) und verbessern andererseits dein Besuchserlebnis, indem wir die Leistung und Nutzung der Webseite analysieren und optimieren (Funktionelle und Leistungs-Cookies). \nWenn du \"Alle Cookies akzeptieren\"
2024-09-27 04:02:17 UTC	1369	IN	Data Raw: 65 72 22 3a 22 57 69 72 64 20 69 6e 20 6e 65 75 65 72 20 52 65 67 69 73 74 65 72 6b 61 72 74 65 20 67 65 c3 b6 66 66 6e 65 74 22 2c 22 43 6f 6f 6b 69 65 4c 69 73 74 54 69 74 6c 65 22 3a 22 43 6f 6f 6b 69 65 2d 4c 69 73 74 65 22 2c 22 43 6f 6f 6b 69 65 4c 69 73 74 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 45 69 6e 20 43 6f 6f 6b 69 65 20 69 73 74 20 65 69 6e 20 6b 6c 65 69 6e 65 73 20 44 61 74 65 6e 70 61 6b 65 74 20 28 54 65 78 74 64 61 74 65 69 29 2c 20 64 61 73 20 49 68 72 20 42 72 6f 77 73 65 72 20 61 75 66 20 41 6e 77 65 69 73 75 6e 67 20 65 69 6e 65 72 20 62 65 73 75 63 68 74 65 6e 20 57 65 62 73 69 74 65 20 61 75 66 20 49 68 72 65 6d 20 47 65 72 c3 a4 74 20 73 70 65 69 63 68 65 72 74 2c 20 75 6d 20 73 69 63 68 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 65 Data Ascii: er":"Wird in neuer Registerkarte geffnet","CookieListTitle":"Cookie-Liste","CookieListDescription":"Ein Cookie ist ein kleines Datenpaket (Textdatei), das Ihr Browser auf Anweisung einer besuchten Website auf Ihrem Gert speichert, um sich Informatione
2024-09-27 04:02:17 UTC	1369	IN	Data Raw: 64 69 65 20 57 65 62 73 69 74 65 20 69 6e 20 64 65 72 20 4c 61 67 65 2c 20 65 72 77 65 69 74 65 72 74 65 20 46 75 6e 6b 74 69 6f 6e 61 6c 69 74 c3 a4 74 20 75 6e 64 20 50 65 72 73 6f 6e 61 6c 69 73 69 65 72 75 6e 67 20 62 65 72 65 69 74 7a 75 73 74 65 6c 6c 65 6e 2e 20 53 69 65 20 6b c3 b6 6e 6e 65 6e 20 76 6f 6e 20 75 6e 73 20 6f 64 65 72 20 76 6f 6e 20 44 72 69 74 74 61 6e 62 69 65 74 65 72 6e 20 67 65 73 65 74 7a 74 20 77 65 72 64 65 6e 2c 20 64 65 72 65 6e 20 44 69 65 6e 73 74 65 20 77 69 72 20 61 75 66 20 75 6e 73 65 72 65 6e 20 53 65 69 74 65 6e 20 76 65 72 77 65 6e 64 65 6e 2e 20 57 65 6e 6e 20 53 69 65 20 64 69 65 73 65 20 43 6f 6f 6b 69 65 73 20 6e 69 63 68 74 20 7a 75 6c 61 73 73 65 6e 2c 20 66 75 6e 6b 74 69 6f 6e 69 65 72 65 6e 20 65 69 6e 69 Data Ascii: die Website in der Lage, erweiterte Funktionalitt und Personalisierung bereitzustellen. Sie knnen von uns oder von Drittanbietern gesetzt werden, deren Dienste wir auf unseren Seiten verwenden. Wenn Sie diese Cookies nicht zulassen, funktionieren eini
2024-09-27 04:02:17 UTC	1369	IN	Data Raw: 6e 73 63 68 75 74 7a 65 69 6e 73 74 65 6c 6c 75 6e 67 65 6e 2c 20 64 65 6d 20 41 6e 6d 65 6c 64 65 6e 20 6f 64 65 72 20 64 65 6d 20 41 75 73 66 c3 bc 6c 6c 65 6e 20 76 6f 6e 20 46 6f 72 6d 75 6c 61 72 65 6e 2e 20 53 69 65 20 6b c3 b6 6e 6e 65 6e 20 49 68 72 65 6e 20 42 72 6f 77 73 65 72 20 73 6f 20 65 69 6e 73 74 65 6c 6c 65 6e 2c 20 64 61 73 73 20 64 69 65 73 65 20 43 6f 6f 6b 69 65 73 20 62 6c 6f 63 6b 69 65 72 74 20 6f 64 65 72 20 53 69 65 20 c3 bc 62 65 72 20 64 69 65 73 65 20 43 6f 6f 6b 69 65 73 20 62 65 6e 61 63 68 72 69 63 68 74 69 67 74 20 77 65 72 64 65 6e 2e 20 45 69 6e 69 67 65 20 42 65 72 65 69 63 68 65 20 64 65 72 20 57 65 62 73 69 74 65 20 66 75 6e 6b 74 69 6f 6e 69 65 72 65 6e 20 64 61 6e 6e 20 61 62 65 72 20 6e 69 63 68 74 2e 20 44 69 65 Data Ascii: nschutzeinstellungen, dem Anmelden oder dem Ausfllen von Formularen. Sie knnen Ihren Browser so einstellen, dass diese Cookies blockiert oder Sie ber diese Cookies benachrichtigt werden. Einige Bereiche der Website funktionieren dann aber nicht. Die
2024-09-27 04:02:17 UTC	1369	IN	Data Raw: 73 22 3a 5b 5d 2c 22 48 61 73 4c 65 67 49 6e 74 4f 70 74 4f 75 74 22 3a 66 61 6c 73 65 2c 22 48 61 73 43 6f 6e 73 65 6e 74 4f 70 74 4f 75 74 22 3a 74 72 75 65 2c 22 49 73 47 70 63 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 56 65 6e 64 6f 72 53 65 72 76 69 63 65 73 22 3a 6e 75 6c 6c 2c 22 54 72 61 63 6b 69 6e 67 54 65 63 68 22 3a 6e 75 6c 6c 7d 2c 7b 22 53 68 6f 77 49 6e 50 6f 70 75 70 22 3a 74 72 75 65 2c 22 53 68 6f 77 49 6e 50 6f 70 75 70 4e 6f 6e 49 41 42 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 44 4b 4c 69 73 74 4c 69 6e 6b 22 3a 74 72 75 65 2c 22 4f 72 64 65 72 22 3a 22 33 22 2c 22 4f 70 74 61 6e 6f 6e 47 72 6f 75 70 49 64 22 3a 22 43 30 30 30 35 22 2c 22 50 61 72 65 6e 74 22 3a 22 22 2c 22 53 68 6f 77 53 75 62 67 72 6f 75 70 22 3a 74 72 75 65 2c Data Ascii: s":[],"HasLegIntOptOut":false,"HasConsentOptOut":true,"IsGpcEnabled":false,"VendorServices":null,"TrackingTech":null},{"ShowInPopup":true,"ShowInPopupNonIAB":true,"ShowSDKListLink":true,"Order":"3","OptanonGroupId":"C0005","Parent":"","ShowSubgroup":true,
2024-09-27 04:02:17 UTC	1369	IN	Data Raw: 72 65 69 67 61 62 65 74 6f 6f 6c 73 20 6d c3 b6 67 6c 69 63 68 65 72 77 65 69 73 65 20 6e 69 63 68 74 20 76 65 72 77 65 6e 64 65 6e 20 6f 64 65 72 20 73 65 68 65 6e 2e 22 2c 22 47 72 6f 75 70 4e 61 6d 65 4d 6f 62 69 6c 65 22 3a 22 53 6f 63 69 61 6c 2d 4d 65 64 69 61 2d 43 6f 6f 6b 69 65 73 22 2c 22 47 72 6f 75 70 4e 61 6d 65 4f 54 54 22 3a 22 53 6f 63 69 61 6c 2d 4d 65 64 69 61 2d 43 6f 6f 6b 69 65 73 22 2c 22 47 72 6f 75 70 4e 61 6d 65 22 3a 22 53 6f 63 69 61 6c 2d 4d 65 64 69 61 2d 43 6f 6f 6b 69 65 73 22 2c 22 49 73 49 61 62 50 75 72 70 6f 73 65 22 3a 66 61 6c 73 65 2c 22 47 65 6e 65 72 61 6c 56 65 6e 64 6f 72 73 49 64 73 22 3a 5b 5d 2c 22 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 73 22 3a 5b 5d 2c 22 48 6f 73 74 73 22 3a 5b 5d 2c 22 50 75 72 70 Data Ascii: reigabetools mglicherweise nicht verwenden oder sehen.","GroupNameMobile":"Social-Media-Cookies","GroupNameOTT":"Social-Media-Cookies","GroupName":"Social-Media-Cookies","IsIabPurpose":false,"GeneralVendorsIds":[],"FirstPartyCookies":[],"Hosts":[],"Purp
2024-09-27 04:02:17 UTC	1369	IN	Data Raw: 75 6e 73 65 72 65 6e 20 57 65 72 62 65 70 61 72 74 6e 65 72 6e 20 67 65 73 65 74 7a 74 20 77 65 72 64 65 6e 2e 20 53 69 65 20 6b c3 b6 6e 6e 65 6e 20 76 6f 6e 20 64 69 65 73 65 6e 20 55 6e 74 65 72 6e 65 68 6d 65 6e 20 76 65 72 77 65 6e 64 65 74 20 77 65 72 64 65 6e 2c 20 75 6d 20 65 69 6e 20 50 72 6f 66 69 6c 20 49 68 72 65 72 20 49 6e 74 65 72 65 73 73 65 6e 20 7a 75 20 65 72 73 74 65 6c 6c 65 6e 20 75 6e 64 20 49 68 6e 65 6e 20 72 65 6c 65 76 61 6e 74 65 20 41 6e 7a 65 69 67 65 6e 20 61 75 66 20 61 6e 64 65 72 65 6e 20 57 65 62 73 69 74 65 73 20 7a 75 20 7a 65 69 67 65 6e 2e 20 53 69 65 20 73 70 65 69 63 68 65 72 6e 20 6e 69 63 68 74 20 64 69 72 65 6b 74 20 70 65 72 73 6f 6e 65 6e 62 65 7a 6f 67 65 6e 65 20 44 61 74 65 6e 2c 20 62 61 73 69 65 72 65 6e Data Ascii: unseren Werbepartnern gesetzt werden. Sie knnen von diesen Unternehmen verwendet werden, um ein Profil Ihrer Interessen zu erstellen und Ihnen relevante Anzeigen auf anderen Websites zu zeigen. Sie speichern nicht direkt personenbezogene Daten, basieren
2024-09-27 04:02:17 UTC	1369	IN	Data Raw: 53 75 62 67 72 6f 75 70 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 75 62 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 75 62 67 72 6f 75 70 54 6f 67 67 6c 65 22 3a 66 61 6c 73 65 2c 22 41 6c 77 61 79 73 53 68 6f 77 43 61 74 65 67 6f 72 79 22 3a 66 61 6c 73 65 2c 22 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 44 69 65 73 65 20 43 6f 6f 6b 69 65 73 20 65 72 6d c3 b6 67 6c 69 63 68 65 6e 20 65 73 20 75 6e 73 2c 20 42 65 73 75 63 68 65 20 75 6e 64 20 56 65 72 6b 65 68 72 73 71 75 65 6c 6c 65 6e 20 7a 75 20 7a c3 a4 68 6c 65 6e 2c 20 64 61 6d 69 74 20 77 69 72 20 64 69 65 20 4c 65 69 73 74 75 6e 67 20 75 6e 73 65 72 65 72 20 57 65 62 73 69 74 65 20 6d 65 73 73 65 6e 20 75 6e 64 20 76 65 72 62 65 73 73 65 72 6e Data Ascii: Subgroup":true,"ShowSubGroupDescription":true,"ShowSubgroupToggle":false,"AlwaysShowCategory":false,"GroupDescription":"Diese Cookies ermglichen es uns, Besuche und Verkehrsquellen zu zhlen, damit wir die Leistung unserer Website messen und verbessern

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	50002	150.171.27.10	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:17 UTC	567	OUT	GET /bat.js HTTP/1.1 Host: bat.bing.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twint.ch/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MR=0
2024-09-27 04:02:17 UTC	651	IN	HTTP/1.1 200 OK Cache-Control: private,max-age=1800 Content-Length: 50523 Content-Type: application/javascript Last-Modified: Thu, 19 Sep 2024 15:43:41 GMT Accept-Ranges: bytes ETag: "803483b3aaadb1:0" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: A0E082D40E7845DD8EB167B9FE606AD8 Ref B: EWR30EDGE0106 Ref C: 2024-09-27T04:02:17Z Date: Fri, 27 Sep 2024 04:02:16 GMT Connection: close
2024-09-27 04:02:17 UTC	3375	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 55 45 54 28 6f 29 7b 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 26 26 6e 2e 6c 65 6e 67 74 68 3e 30 7d 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 3d 22 62 61 74 2e 62 69 6e 67 2e 63 6f 6d 22 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 43 6c 3d 22 62 61 74 2e 62 69 6e 67 2e 6e 65 74 22 3b 74 68 69 73 2e 55 52 4c 4c 45 4e 47 54 48 4c 49 4d 49 54 3d 34 30 39 36 3b 74 68 69 73 2e 70 61 67 65 4c 6f 61 64 45 76 74 3d 22 70 61 67 65 4c 6f 61 64 22 3b 74 68 69 73 2e 63 75 73 74 6f 6d 45 76 74 3d 22 63 75 73 74 6f 6d 22 3b 74 68 69 73 2e 70 61 67 65 56 69 65 77 45 76 74 3d 22 70 61 67 65 5f 76 69 65 77 22 3b 6f 2e 56 65 72 3d 6f 2e 56 65 72 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 Data Ascii: function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&
2024-09-27 04:02:17 UTC	8192	IN	Data Raw: 2c 22 70 72 6f 6d 6f 74 69 6f 6e 73 2e 6e 61 6d 65 22 3a 7b 7d 2c 70 69 64 3a 7b 74 79 70 65 3a 22 6f 62 6a 65 63 74 22 7d 2c 22 70 69 64 2e 65 6d 22 3a 7b 74 79 70 65 3a 22 70 69 64 22 7d 2c 22 70 69 64 2e 65 6d 61 69 6c 22 3a 7b 74 79 70 65 3a 22 70 69 64 22 2c 62 65 61 63 6f 6e 3a 22 65 6d 22 7d 2c 22 70 69 64 2e 70 68 22 3a 7b 74 79 70 65 3a 22 70 69 64 22 7d 2c 22 70 69 64 2e 70 68 6f 6e 65 5f 6e 75 6d 62 65 72 22 3a 7b 74 79 70 65 3a 22 70 69 64 22 2c 62 65 61 63 6f 6e 3a 22 70 68 22 7d 7d 3b 74 68 69 73 2e 6b 6e 6f 77 6e 45 76 65 6e 74 73 3d 7b 61 64 64 5f 70 61 79 6d 65 6e 74 5f 69 6e 66 6f 3a 5b 5d 2c 61 64 64 5f 74 6f 5f 63 61 72 74 3a 5b 22 72 65 76 65 6e 75 65 5f 76 61 6c 75 65 22 2c 22 63 75 72 72 65 6e 63 79 22 2c 22 69 74 65 6d 73 22 5d 2c Data Ascii: ,"promotions.name":{},pid:{type:"object"},"pid.em":{type:"pid"},"pid.email":{type:"pid",beacon:"em"},"pid.ph":{type:"pid"},"pid.phone_number":{type:"pid",beacon:"ph"}};this.knownEvents={add_payment_info:[],add_to_cart:["revenue_value","currency","items"],
2024-09-27 04:02:17 UTC	4441	IN	Data Raw: 64 26 26 74 79 70 65 6f 66 20 6f 2e 70 61 67 65 50 69 64 3d 3d 22 6f 62 6a 65 63 74 22 3f 74 68 69 73 2e 70 61 67 65 4c 65 76 65 6c 50 61 72 61 6d 73 2e 70 69 64 3d 6f 2e 70 61 67 65 50 69 64 3a 6f 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 67 74 61 67 50 69 64 22 29 26 26 6f 2e 67 74 61 67 50 69 64 3d 3d 3d 21 30 26 26 28 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 67 74 61 67 50 69 64 3d 21 30 29 3b 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 65 6e 61 62 6c 65 41 75 74 6f 53 70 61 54 72 61 63 6b 69 6e 67 3d 21 31 3b 6f 2e 65 6e 61 62 6c 65 41 75 74 6f 53 70 61 54 72 61 63 6b 69 6e 67 3d 3d 3d 21 30 26 26 28 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 65 6e 61 62 6c 65 41 75 74 6f 53 70 61 54 72 61 63 6b 69 6e 67 3d 21 30 29 3b 74 68 69 73 2e Data Ascii: d&&typeof o.pagePid=="object"?this.pageLevelParams.pid=o.pagePid:o.hasOwnProperty("gtagPid")&&o.gtagPid===!0&&(this.uetConfig.gtagPid=!0);this.uetConfig.enableAutoSpaTracking=!1;o.enableAutoSpaTracking===!0&&(this.uetConfig.enableAutoSpaTracking=!0);this.
2024-09-27 04:02:17 UTC	8192	IN	Data Raw: 75 6e 64 65 66 69 6e 65 64 29 72 65 74 75 72 6e 3b 68 3d 75 3d 3d 3d 74 68 69 73 2e 70 61 67 65 56 69 65 77 45 76 74 3f 74 68 69 73 2e 70 61 67 65 4c 6f 61 64 45 76 74 3a 74 68 69 73 2e 63 75 73 74 6f 6d 45 76 74 3b 74 68 69 73 2e 65 76 74 28 68 2c 75 2c 73 2c 6e 5b 32 5d 29 7d 65 6c 73 65 20 69 66 28 6e 5b 30 5d 3d 3d 3d 22 73 65 74 22 29 7b 69 66 28 74 79 70 65 6f 66 20 6e 5b 31 5d 5b 30 5d 21 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 3b 66 6f 72 28 69 20 69 6e 20 6e 5b 31 5d 5b 30 5d 29 74 68 69 73 2e 6b 6e 6f 77 6e 50 61 72 61 6d 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 69 29 26 26 28 74 68 69 73 2e 70 61 67 65 4c 65 76 65 6c 50 61 72 61 6d 73 5b 69 5d 3d 6e 5b 31 5d 5b 30 5d 5b 69 5d 2c 69 3d 3d 3d 22 70 69 64 22 26 26 74 68 69 73 2e Data Ascii: undefined)return;h=u===this.pageViewEvt?this.pageLoadEvt:this.customEvt;this.evt(h,u,s,n[2])}else if(n[0]==="set"){if(typeof n[1][0]!="object")return;for(i in n[1][0])this.knownParams.hasOwnProperty(i)&&(this.pageLevelParams[i]=n[1][0][i],i==="pid"&&this.
2024-09-27 04:02:17 UTC	8192	IN	Data Raw: 6e 2e 6d 74 70 3d 6e 61 76 69 67 61 74 6f 72 2e 6d 61 78 54 6f 75 63 68 50 6f 69 6e 74 73 29 2c 6e 7d 3b 74 68 69 73 2e 72 65 6d 6f 76 65 54 72 61 69 6c 69 6e 67 41 6d 70 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 6e 2e 63 68 61 72 41 74 28 6e 2e 6c 65 6e 67 74 68 2d 31 29 3b 72 65 74 75 72 6e 28 74 3d 3d 3d 22 26 22 7c 7c 74 3d 3d 3d 22 3f 22 29 26 26 28 6e 3d 6e 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 6e 2e 6c 65 6e 67 74 68 2d 31 29 29 2c 6e 7d 3b 74 68 69 73 2e 68 65 6c 70 65 72 45 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 74 79 70 65 6f 66 20 43 75 73 74 6f 6d 45 76 65 6e 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 76 61 72 20 74 3d 7b 65 72 72 4d 73 67 3a 6e 2c 74 61 67 49 64 3a 74 68 69 73 2e 62 65 61 63 6f 6e 50 61 Data Ascii: n.mtp=navigator.maxTouchPoints),n};this.removeTrailingAmp=function(n){var t=n.charAt(n.length-1);return(t==="&"\|\|t==="?")&&(n=n.substring(0,n.length-1)),n};this.helperError=function(n){if(typeof CustomEvent=="function"){var t={errMsg:n,tagId:this.beaconPa
2024-09-27 04:02:17 UTC	8192	IN	Data Raw: 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 70 61 67 65 74 79 70 65 22 29 3e 30 3f 28 74 2e 70 61 67 65 74 79 70 65 3d 74 68 69 73 2e 76 61 6c 69 64 61 74 65 50 61 67 65 54 79 70 65 28 74 2e 70 61 67 65 74 79 70 65 2c 74 68 69 73 2e 76 61 6c 69 64 52 65 74 61 69 6c 50 61 67 65 54 79 70 65 56 61 6c 75 65 73 29 2c 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 70 72 6f 64 69 64 22 29 3e 30 26 26 28 74 2e 70 72 6f 64 69 64 3d 74 68 69 73 2e 76 61 6c 69 64 61 74 65 50 72 6f 64 49 64 28 74 2e 70 72 6f 64 69 64 29 29 29 3a 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 70 72 6f 64 69 64 22 29 3e 30 26 26 74 68 69 73 2e 74 68 72 6f 77 45 72 72 6f 72 28 74 68 69 73 2e 6d 69 73 73 69 6e 67 50 61 67 65 54 79 70 65 45 78 63 65 70 74 69 6f 6e Data Ascii: t.hasOwnProperty("pagetype")>0?(t.pagetype=this.validatePageType(t.pagetype,this.validRetailPageTypeValues),t.hasOwnProperty("prodid")>0&&(t.prodid=this.validateProdId(t.prodid))):t.hasOwnProperty("prodid")>0&&this.throwError(this.missingPageTypeException
2024-09-27 04:02:17 UTC	8192	IN	Data Raw: 75 3c 3d 33 3f 74 5b 69 5d 3d 22 22 3a 64 65 6c 65 74 65 20 74 5b 69 5d 2c 72 3d 74 68 69 73 2e 73 74 72 69 6e 67 69 66 79 54 6f 52 65 71 75 65 73 74 28 74 29 2c 66 3d 74 68 69 73 2e 72 65 6d 6f 76 65 54 72 61 69 6c 69 6e 67 41 6d 70 28 65 2b 72 29 29 3b 74 68 69 73 2e 66 69 72 65 42 65 61 63 6f 6e 49 6d 67 28 66 29 3b 74 68 69 73 2e 73 6e 69 70 70 65 74 45 76 65 6e 74 51 75 65 75 65 2e 70 75 73 68 28 72 29 3b 74 68 69 73 2e 73 6e 69 70 70 65 74 45 76 65 6e 74 51 75 65 75 65 2e 6c 65 6e 67 74 68 3e 32 30 26 26 74 68 69 73 2e 73 6e 69 70 70 65 74 45 76 65 6e 74 51 75 65 75 65 2e 73 68 69 66 74 28 29 3b 74 72 79 7b 74 79 70 65 6f 66 20 43 75 73 74 6f 6d 45 76 65 6e 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 73 3d 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 Data Ascii: u<=3?t[i]="":delete t[i],r=this.stringifyToRequest(t),f=this.removeTrailingAmp(e+r));this.fireBeaconImg(f);this.snippetEventQueue.push(r);this.snippetEventQueue.length>20&&this.snippetEventQueue.shift();try{typeof CustomEvent=="function"&&(s=new CustomEve
2024-09-27 04:02:17 UTC	1747	IN	Data Raw: 28 21 74 68 69 73 2e 69 73 41 64 53 74 6f 72 61 67 65 41 6c 6c 6f 77 65 64 28 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 69 3d 6e 3d 3d 3d 30 3f 74 68 69 73 2e 73 65 73 73 69 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3a 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 76 69 64 43 6f 6f 6b 69 65 2c 74 3d 74 68 69 73 2e 67 65 74 43 6f 6f 6b 69 65 28 69 2c 22 22 2c 74 68 69 73 2e 69 6e 73 69 67 68 74 73 43 6f 6f 6b 69 65 4d 61 78 4c 65 6e 67 74 68 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 28 74 29 7c 7c 28 74 3d 74 68 69 73 2e 67 65 74 4c 6f 63 61 6c 53 74 6f 72 61 67 65 42 61 63 6b 75 70 28 69 2c 74 68 69 73 2e 69 6e 73 69 67 68 74 73 43 6f 6f 6b 69 65 4d 61 78 4c 65 6e 67 74 68 29 29 2c 74 68 69 73 2e 69 6e 73 69 67 68 Data Ascii: (!this.isAdStorageAllowed())return null;var i=n===0?this.sessionCookieName:this.uetConfig.vidCookie,t=this.getCookie(i,"",this.insightsCookieMaxLength);return this.stringExists(t)\|\|(t=this.getLocalStorageBackup(i,this.insightsCookieMaxLength)),this.insigh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49996	157.240.0.6	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:17 UTC	533	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twint.ch/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:17 UTC	1451	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-09-27 04:02:17 UTC	1700	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-09-27 04:02:17 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-09-27 04:02:17 UTC	14683	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-09-27 04:02:17 UTC	16384	IN	Data Raw: 3d 6e 75 6c 6c 26 26 61 21 3d 6e 75 6c 6c 26 26 64 21 3d 6e 75 6c 6c 3f 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 62 2c 65 76 65 6e 74 5f 74 79 70 65 3a 63 2c 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3a 64 2c 69 64 3a 61 7d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 61 2e 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 Data Ascii: =null&&a!=null&&d!=null?{domain_uri:b,event_type:c,extractor_type:d,id:a}:null}function g(a){if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;a=a.extractor_config;if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object"
2024-09-27 04:02:17 UTC	16384	IN	Data Raw: 63 65 3b 61 2e 65 6e 66 6f 72 63 65 3b 61 3d 62 2e 61 72 72 61 79 4f 66 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 61 6c 6c 6f 63 61 74 69 6f 6e 3a 62 2e 6e 75 6d 62 65 72 28 29 2c 63 6f 64 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 6e 61 6d 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 70 61 73 73 52 61 74 65 3a 62 2e 6e 75 6d 62 65 72 28 29 7d 29 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 74 72 61 63 74 50 49 49 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c Data Ascii: ce;a.enforce;a=b.arrayOf(b.objectWithFields({allocation:b.number(),code:b.string(),name:b.string(),passRate:b.number()}));k.exports=a})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsExtractPII",function(){return function(g,h,i,
2024-09-27 04:02:17 UTC	16384	IN	Data Raw: 62 6a 65 63 74 22 26 26 28 67 3d 68 29 3b 72 65 74 75 72 6e 20 61 21 3d 6e 75 6c 6c 26 26 63 21 3d 6e 75 6c 6c 3f 5b 61 2c 63 2c 6a 2c 66 2c 67 5d 3a 6e 75 6c 6c 7d 63 3d 6e 65 77 20 61 28 67 29 3b 6c 2e 65 78 70 6f 72 74 73 3d 63 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 65 74 49 73 43 68 72 6f 6d 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 2c 69 29 7b 76 61 72 20 6a 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6a 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 Data Ascii: bject"&&(g=h);return a!=null&&c!=null?[a,c,j,f,g]:null}c=new a(g);l.exports=c})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetIsChrome",function(){return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict
2024-09-27 04:02:17 UTC	1700	IN	Data Raw: 72 74 79 2e 63 61 6c 6c 28 68 2c 61 29 3f 68 5b 61 5d 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 72 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 29 72 65 74 75 72 6e 20 61 3b 69 66 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 61 29 3f 76 6f 69 64 20 30 3a 61 3b 74 72 79 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 61 29 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 75 72 6e 20 61 2e 74 6f 53 74 72 69 6e 67 26 26 61 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 3f 61 2e 74 6f 53 74 72 69 6e 67 28 29 3a 76 6f 69 64 20 30 7d 66 75 6e 63 74 69 6f 6e 20 73 28 61 29 7b 76 61 72 20 62 3d 7b 7d 3b 69 66 28 61 21 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 61 3d 3d Data Ascii: rty.call(h,a)?h[a]:a}function r(a){if(typeof a==="string")return a;if(typeof a==="number")return isNaN(a)?void 0:a;try{return JSON.stringify(a)}catch(a){}return a.toString&&a.toString.call?a.toString():void 0}function s(a){var b={};if(a!=null&&(typeof a==
2024-09-27 04:02:17 UTC	14684	IN	Data Raw: 74 75 72 6e 20 61 21 3d 6e 75 6c 6c 7d 29 3b 66 2e 6c 65 6e 67 74 68 3e 30 26 26 28 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 68 61 73 68 21 3d 6e 75 6c 6c 26 26 61 2e 61 70 70 65 6e 64 28 22 68 6d 65 22 2c 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 68 61 73 68 29 2c 61 2e 61 70 70 65 6e 64 28 22 65 78 5f 6d 22 2c 66 2e 6a 6f 69 6e 28 22 2c 22 29 29 29 7d 7d 5d 29 3b 72 65 74 75 72 6e 20 61 7d 28 29 3b 6c 2e 65 78 70 6f 72 74 73 3d 6e 65 77 20 61 28 29 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e Data Ascii: turn a!=null});f.length>0&&(this.moduleEncodings.hash!=null&&a.append("hme",this.moduleEncodings.hash),a.append("ex_m",f.join(",")))}}]);return a}();l.exports=new a()})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsModuleEncodin
2024-09-27 04:02:18 UTC	16384	IN	Data Raw: 29 3b 72 65 74 75 72 6e 7d 69 66 28 68 28 62 29 29 7b 6d 28 22 42 45 41 43 4f 4e 22 2c 61 29 3b 72 65 74 75 72 6e 7d 69 66 28 6a 28 62 29 29 7b 6d 28 22 50 4f 53 54 22 2c 61 29 3b 72 65 74 75 72 6e 7d 69 66 28 69 28 62 2c 7b 69 67 6e 6f 72 65 52 65 71 75 65 73 74 4c 65 6e 67 74 68 43 68 65 63 6b 3a 21 30 7d 29 29 7b 6d 28 22 47 45 54 22 2c 61 29 3b 72 65 74 75 72 6e 7d 63 28 6e 65 77 20 45 72 72 6f 72 28 22 63 6f 75 6c 64 20 6e 6f 74 20 73 65 6e 64 20 62 61 74 63 68 22 29 29 7d 76 61 72 20 6f 3d 6e 65 77 20 61 28 6e 29 3b 66 75 6e 63 74 69 6f 6e 20 70 28 61 29 7b 6f 2e 61 64 64 54 6f 42 61 74 63 68 28 61 29 7d 67 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6f 6e 70 61 67 65 68 69 64 65 22 69 6e 20 67 3f 22 70 61 67 65 68 69 64 65 22 3a 22 75 Data Ascii: );return}if(h(b)){m("BEACON",a);return}if(j(b)){m("POST",a);return}if(i(b,{ignoreRequestLengthCheck:!0})){m("GET",a);return}c(new Error("could not send batch"))}var o=new a(n);function p(a){o.addToBatch(a)}g.addEventListener("onpagehide"in g?"pagehide":"u
2024-09-27 04:02:18 UTC	16384	IN	Data Raw: 72 6f 77 20 6e 65 77 20 67 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 44 28 61 29 7b 69 66 28 21 61 29 74 68 72 6f 77 20 6e 65 77 20 67 28 29 7d 66 75 6e 63 74 69 6f 6e 20 45 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 3d 42 28 62 2c 75 28 29 29 3b 44 28 62 2e 6c 65 6e 67 74 68 3d 3d 3d 61 2e 6c 65 6e 67 74 68 29 3b 72 65 74 75 72 6e 20 62 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 42 28 62 2c 61 5b 63 5d 29 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 28 61 29 7b 76 61 72 20 62 3d 61 2e 64 65 66 2c 63 3d 61 2e 76 61 6c 69 64 61 74 6f 72 73 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 64 3d 42 28 61 2c 62 29 3b 63 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 Data Ascii: row new g()}}function D(a){if(!a)throw new g()}function E(a){return function(b){b=B(b,u());D(b.length===a.length);return b.map(function(b,c){return B(b,a[c])})}}function F(a){var b=a.def,c=a.validators;return function(a){var d=B(a,b);c.forEach(function(a)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49997	142.250.186.98	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:17 UTC	1410	OUT	GET /td/rul/946203707?random=1727409735110&cv=11&fst=1727409735110&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465z876304729za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2Fvelo%2F&hn=www.googleadservices.com&frm=0&tiba=Veloversicherung%20mit%20TWINT%20abschliessen%20%C2%BB%20TWINT&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.twint.ch/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:17 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 27 Sep 2024 04:02:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 27-Sep-2024 04:17:17 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-27 04:02:17 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-09-27 04:02:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	50006	142.250.186.34	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:18 UTC	1286	OUT	GET /pagead/viewthroughconversion/946203707/?random=1727409735110&cv=11&fst=1727409735110&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465z876304729za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2Fvelo%2F&hn=www.googleadservices.com&frm=0&tiba=Veloversicherung%20mit%20TWINT%20abschliessen%20%C2%BB%20TWINT&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twint.ch/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:18 UTC	842	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 27 Sep 2024 04:02:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 27-Sep-2024 04:17:18 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-27 04:02:18 UTC	548	IN	Data Raw: 31 32 63 37 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 64 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 64 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c Data Ascii: 12c7(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&global
2024-09-27 04:02:18 UTC	1390	IN	Data Raw: 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 2c 62 2c 64 29 7b 69 66 28 21 64 7c 7c 61 21 3d 6e 75 6c 6c 29 7b 64 3d 76 5b 62 5d 3b 69 66 28 64 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 61 5b 62 5d 3b 64 3d 61 5b 64 5d 3b 72 65 74 75 72 6e 20 64 21 3d 3d 76 6f 69 64 20 30 3f 64 3a 61 5b 62 5d 7d 7d 20 66 75 6e 63 74 69 6f 6e 20 78 28 61 2c 62 2c 64 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 61 3d 63 2e 6c 65 6e 67 74 68 3d 3d 3d 31 3b 76 61 72 20 65 3d 63 5b 30 5d 2c 67 3b 21 61 26 26 65 20 69 6e 20 74 3f 67 3d 74 3a 67 3d 6d 3b 66 6f 72 28 65 3d 30 3b 65 3c 63 2e 6c 65 6e 67 74 68 2d 31 3b 65 2b 2b 29 7b 76 61 72 20 66 3d 63 5b 65 5d 3b 69 66 28 21 28 66 20 69 6e 20 67 29 29 62 72 65 61 6b 20 61 3b 67 3d 67 5b 66 5d Data Ascii: ;function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]
2024-09-27 04:02:18 UTC	1390	IN	Data Raw: 2e 62 72 61 6e 64 29 26 26 62 2e 69 6e 64 65 78 4f 66 28 61 29 21 3d 2d 31 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 52 28 61 29 7b 76 61 72 20 62 3b 61 3a 7b 69 66 28 62 3d 7a 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 62 3d 62 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b 62 3d 22 22 7d 72 65 74 75 72 6e 20 62 2e 69 6e 64 65 78 4f 66 28 61 29 21 3d 2d 31 7d 3b 66 75 6e 63 74 69 6f 6e 20 54 28 29 7b 72 65 74 75 72 6e 20 47 3f 21 21 4f 26 26 4f 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3e 30 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 55 28 29 7b 72 65 74 75 72 6e 20 54 28 29 3f 51 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 52 28 22 43 68 72 6f 6d 65 22 29 7c 7c 52 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 54 28 29 3f 30 3a 52 28 22 45 64 Data Ascii: .brand)&&b.indexOf(a)!=-1}):!1:!1}function R(a){var b;a:{if(b=z.navigator)if(b=b.userAgent)break a;b=""}return b.indexOf(a)!=-1};function T(){return G?!!O&&O.brands.length>0:!1}function U(){return T()?Q("Chromium"):(R("Chrome")\|\|R("CriOS"))&&!(T()?0:R("Ed
2024-09-27 04:02:18 UTC	1390	IN	Data Raw: 66 65 74 63 68 28 71 2c 49 29 3b 53 26 26 53 2e 63 61 74 63 68 28 42 29 3b 76 61 72 20 4a 3d 21 30 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 62 61 29 7b 7d 7d 69 66 28 6e 26 26 6e 2e 6e 6f 46 61 6c 6c 62 61 63 6b 29 4a 3d 21 31 3b 65 6c 73 65 7b 74 72 79 7b 76 61 72 20 63 61 3d 44 2e 73 65 6e 64 42 65 61 63 6f 6e 26 26 44 2e 73 65 6e 64 42 65 61 63 6f 6e 28 71 29 7d 63 61 74 63 68 28 62 61 29 7b 41 2e 54 41 47 47 49 4e 47 3d 41 2e 54 41 47 47 49 4e 47 7c 7c 5b 5d 2c 41 2e 54 41 47 47 49 4e 47 5b 31 35 5d 3d 21 30 7d 63 61 7c 7c 45 28 71 29 3b 4a 3d 21 30 7d 7d 4a 26 26 65 28 29 7d 7d 28 66 29 29 29 3b 72 2e 6f 6e 6c 6f 61 64 3d 65 3b 72 2e 73 72 63 3d 64 5b 66 2e 67 5d 7d 65 28 29 7d 76 61 72 20 58 3d 5b 22 73 73 5f 22 5d 2c 59 3d 73 7c 7c 7a 3b 58 5b Data Ascii: fetch(q,I);S&&S.catch(B);var J=!0;break a}catch(ba){}}if(n&&n.noFallback)J=!1;else{try{var ca=D.sendBeacon&&D.sendBeacon(q)}catch(ba){A.TAGGING=A.TAGGING\|\|[],A.TAGGING[15]=!0}ca\|\|E(q);J=!0}}J&&e()}}(f)));r.onload=e;r.src=d[f.g]}e()}var X=["ss_"],Y=s\|\|z;X[
2024-09-27 04:02:18 UTC	97	IN	Data Raw: 44 6a 6e 42 66 6f 71 57 58 38 67 57 77 59 51 4e 5f 32 6c 34 53 69 4a 30 36 79 31 51 61 67 5c 78 32 36 72 61 6e 64 6f 6d 5c 78 33 64 31 37 35 30 31 36 33 34 39 35 5c 78 32 36 72 6d 74 5f 74 6c 64 5c 78 33 64 30 5c 78 32 36 69 70 72 5c 78 33 64 79 27 5d 2c 20 5b 5d 29 3b 7d 29 28 29 3b 0d 0a Data Ascii: DjnBfoqWX8gWwYQN_2l4SiJ06y1Qag\x26random\x3d1750163495\x26rmt_tld\x3d0\x26ipr\x3dy'], []);})();
2024-09-27 04:02:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	50008	104.18.95.41	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:18 UTC	928	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1013387493:1727406779:YeLLeSo_U6RZZGVQuSYB98sLFp2Tgq99RTAz7RsFCL0/8c98989bea707d00/b235806045ed28b HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 32477 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: b235806045ed28b sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/z2exq/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:18 UTC	16384	OUT	Data Raw: 76 5f 38 63 39 38 39 38 39 62 65 61 37 30 37 64 30 30 3d 63 4f 25 32 62 51 4e 44 67 56 36 70 36 4a 75 71 4d 33 72 33 7a 70 2b 44 43 70 4a 43 67 50 33 64 51 2b 4f 33 38 33 2b 51 67 52 55 67 43 33 4d 51 47 2b 4a 62 33 35 51 54 6e 51 33 59 2b 53 33 43 51 70 4f 4a 39 33 70 6e 67 62 79 33 48 4f 67 41 48 6b 43 64 69 48 49 67 33 42 5a 43 33 48 51 4a 56 33 5a 51 71 69 32 55 33 47 68 6b 56 74 33 54 75 4b 33 62 24 45 47 5a 47 74 5a 5a 69 78 33 47 55 6e 4a 47 33 76 73 73 51 33 4a 31 33 4a 4b 2b 7a 67 2b 33 2d 51 4a 6c 33 44 64 55 62 74 4b 67 51 58 2b 33 41 51 6b 50 70 46 47 58 59 77 69 33 69 6b 48 50 6e 72 6f 6b 62 73 79 68 33 4c 66 6e 56 33 4f 43 33 33 4f 33 6b 78 69 6f 4a 24 51 33 66 74 76 62 69 65 6c 56 53 4d 76 6e 33 48 65 32 76 58 2b 2d 34 75 42 63 72 56 79 68 Data Ascii: v_8c98989bea707d00=cO%2bQNDgV6p6JuqM3r3zp+DCpJCgP3dQ+O383+QgRUgC3MQG+Jb35QTnQ3Y+S3CQpOJ93pngby3HOgAHkCdiHIg3BZC3HQJV3ZQqi2U3GhkVt3TuK3b$EGZGtZZix3GUnJG3vssQ3J13JK+zg+3-QJl3DdUbtKgQX+3AQkPpFGXYwi3ikHPnrokbsyh3LfnV3OC33O3kxioJ$Q3ftvbielVSMvn3He2vX+-4uBcrVyh
2024-09-27 04:02:18 UTC	16093	OUT	Data Raw: 4e 6e 58 2b 36 33 2b 53 67 59 33 56 33 46 68 2d 33 68 43 71 6b 67 2b 33 6a 34 4c 53 2d 36 67 4f 33 4c 6c 73 33 70 51 4a 36 33 76 36 63 51 67 73 33 53 33 54 51 4a 65 5a 7a 31 69 51 33 75 6e 50 33 44 64 67 73 33 70 33 47 6e 4a 43 59 6a 33 69 2b 67 39 33 2b 33 48 2b 67 4e 5a 53 33 71 2b 33 70 33 46 51 44 33 44 38 33 6c 51 4a 36 67 5a 33 46 33 63 74 4f 6c 33 49 51 48 75 67 5a 33 63 51 44 33 33 32 51 53 33 4c 6a 64 36 33 72 6e 47 55 33 2d 33 41 49 48 63 54 55 51 4b 51 33 51 67 51 33 47 62 48 4f 33 59 33 36 49 69 63 33 34 38 47 75 4c 78 6e 39 51 57 33 33 51 4a 33 36 47 33 67 4e 4a 6d 33 75 33 4c 36 51 64 33 2d 33 33 38 67 4b 33 53 33 4c 36 6b 51 50 54 78 63 51 4a 55 51 51 51 4a 5a 67 4b 33 53 73 7a 43 67 62 33 24 44 32 77 67 50 33 47 33 48 51 6b 58 78 35 51 33 Data Ascii: NnX+63+SgY3V3Fh-3hCqkg+3j4LS-6gO3Lls3pQJ63v6cQgs3S3TQJeZz1iQ3unP3Ddgs3p3GnJCYj3i+g93+3H+gNZS3q+3p3FQD3D83lQJ6gZ3F3ctOl3IQHugZ3cQD332QS3Ljd63rnGU3-3AIHcTUQKQ3QgQ3GbHO3Y36Iic348GuLxn9QW33QJ36G3gNJm3u3L6Qd3-338gK3S3L6kQPTxcQJUQQQJZgK3SszCgb3$D2wgP3G3HQkXx5Q3
2024-09-27 04:02:18 UTC	831	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:18 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4632 Connection: close cf-chl-out-s: JmdmyzUkcDgOlzbMLw0RAYoChQ10lU3JRlC+lfM8JLfeU0rHX/c32MhvxvRBsBoVhIOavTMNkSjZgRzaxiAfKCIk6wpi/m3+KTAaM/QwEWFitmDzjHSAEBC61YcFl5eySFB12LWs0twHiyKhoVR95B8KtbVyiJyriexQ39/TQZODWP2mWG/5Yij5NFv94b0CnJDA3AJZW/l5lBq6Pz34XZSC5g8zKooE61gsfGin/Dpe2wGY08fVqu+v21HSf5jLlfrUMI9eHHxXr0Mw8vS0rUmXUhNImPEcfJbJea8m4yHmzSG0U6+q1OME+PBBdF0MTURjg7PToaHAkmGzOIhvrlC0LwUZCe0Fy2Sty367KkQuOqbLWzTkpqjlosiqDSNJCIBnGCkN8mwYRnlThVQO+P/eoopSyaQcLsORnxNnL182BANYa6Gty2dSyTXxyj/ceopWC66BEL4=$D7NIwlu2w5X6qmfG cf-chl-out: 8z+M3C79ZlNvuMAzqmRMSDRO9O3JgeOGbDAS7a1Ql9REcIqx2XE4b6tQbinVJVYka2FfJmYcRBbYrqhSoPDgidy63TVPXeRTxFFXK04vRIb13J658u35pq8=$Is8lGQMoLR9QLIMK Server: cloudflare CF-RAY: 8c9898efa8198c57-EWR
2024-09-27 04:02:18 UTC	538	IN	Data Raw: 69 58 53 49 5a 6f 2b 5a 68 35 56 65 56 34 47 66 59 4a 36 6e 66 4a 74 78 64 32 53 4e 5a 34 65 67 6a 6f 43 44 68 6e 4f 64 64 5a 69 6a 68 62 57 32 6b 70 57 35 76 62 61 42 77 58 71 55 6e 58 32 58 6d 4b 47 42 71 5a 69 39 6d 71 69 47 7a 73 6a 45 78 70 53 57 6f 36 72 4a 73 72 79 71 7a 4d 7a 57 71 61 72 55 75 38 53 2b 35 74 2f 6b 35 4c 6e 49 37 4b 32 35 34 4f 48 46 73 62 44 47 7a 38 4c 41 79 2f 66 62 2b 4d 6a 4b 2f 4f 6e 34 36 72 7a 63 41 63 4d 49 33 41 6d 37 34 4f 45 4f 78 4f 34 4d 33 74 73 46 35 4f 58 66 33 76 66 6f 43 67 6b 54 36 4f 6f 56 43 68 7a 30 34 50 77 69 44 79 41 70 4b 65 66 6a 36 79 37 73 4a 41 4d 4f 2b 75 33 74 44 51 59 4c 43 78 54 33 4d 77 6f 74 45 43 73 4d 50 43 37 2b 51 7a 30 55 45 44 73 64 4e 45 73 35 51 68 59 73 50 42 45 65 53 53 56 47 4a 42 4e Data Ascii: iXSIZo+Zh5VeV4GfYJ6nfJtxd2SNZ4egjoCDhnOddZijhbW2kpW5vbaBwXqUnX2XmKGBqZi9mqiGzsjExpSWo6rJsryqzMzWqarUu8S+5t/k5LnI7K254OHFsbDGz8LAy/fb+MjK/On46rzcAcMI3Am74OEOxO4M3tsF5OXf3vfoCgkT6OoVChz04PwiDyApKefj6y7sJAMO+u3tDQYLCxT3MwotECsMPC7+Qz0UEDsdNEs5QhYsPBEeSSVGJBN
2024-09-27 04:02:18 UTC	1369	IN	Data Raw: 59 75 43 68 6f 62 2f 43 45 66 4d 2f 34 49 44 51 62 30 4c 51 30 4a 50 76 41 77 50 68 51 4f 41 41 34 65 4f 54 59 46 49 41 49 59 44 43 6c 51 50 68 6b 70 52 54 41 55 4c 6a 4d 6b 46 44 4a 63 55 68 67 74 56 45 30 33 55 53 74 6a 59 55 64 6d 4d 56 73 68 51 30 70 66 54 69 70 5a 53 45 70 69 4c 32 68 47 5a 48 5a 30 53 30 4e 79 62 30 78 59 64 6d 46 55 57 31 78 6d 66 54 6b 2f 61 6e 68 34 53 55 64 61 67 57 6c 36 69 6d 6c 55 64 6b 68 66 6c 56 52 69 6d 59 36 62 63 32 79 68 6f 6f 36 61 63 6f 4b 57 59 33 4b 69 6d 61 42 70 6a 4a 74 2f 72 49 4e 77 6a 58 31 6e 73 34 32 33 75 6f 2b 49 71 4b 79 78 74 4c 47 2b 67 6e 6d 58 78 59 58 43 6c 35 32 4b 78 48 36 4a 6a 73 75 6e 71 49 32 6f 6f 72 48 54 30 36 2b 6c 32 4c 44 52 75 5a 69 65 72 39 32 68 74 4d 4f 66 32 61 66 44 35 39 32 6e 78 Data Ascii: YuChob/CEfM/4IDQb0LQ0JPvAwPhQOAA4eOTYFIAIYDClQPhkpRTAULjMkFDJcUhgtVE03UStjYUdmMVshQ0pfTipZSEpiL2hGZHZ0S0Nyb0xYdmFUW1xmfTk/anh4SUdagWl6imlUdkhflVRimY6bc2yhoo6acoKWY3KimaBpjJt/rINwjX1ns423uo+IqKyxtLG+gnmXxYXCl52KxH6JjsunqI2oorHT06+l2LDRuZier92htMOf2afD592nx
2024-09-27 04:02:18 UTC	1369	IN	Data Raw: 53 37 79 6b 79 44 68 4d 33 4e 66 67 56 4d 43 77 62 4c 50 6b 73 52 52 74 48 2f 44 45 59 42 68 70 4a 54 55 38 67 49 67 35 50 4e 44 30 7a 53 42 63 6d 4e 31 68 59 4a 31 74 52 51 43 39 52 56 46 42 44 52 69 51 5a 58 45 41 68 4b 6a 39 57 4c 56 6c 4c 54 53 39 63 61 55 30 30 63 55 4e 52 4e 44 46 62 62 6e 73 37 58 33 75 44 57 46 35 62 65 55 63 2b 51 45 53 48 57 31 56 47 69 57 74 78 55 47 52 76 6a 30 31 6f 5a 32 52 5a 62 48 74 30 58 5a 74 32 58 6c 70 69 6f 32 4f 69 59 33 39 67 70 6f 46 2f 64 70 39 6c 68 33 70 70 6e 34 4a 79 63 4c 4b 35 70 61 79 30 62 6e 75 36 6c 63 47 4f 66 71 32 78 74 38 57 48 6f 37 65 39 75 4a 2b 35 69 63 69 4f 72 73 57 2b 73 38 4f 53 6a 61 66 59 7a 4d 57 6d 6a 35 6a 41 72 36 72 4f 75 4b 2f 6a 34 37 76 70 75 4b 58 6e 71 73 79 6d 6f 63 76 74 72 4c Data Ascii: S7ykyDhM3NfgVMCwbLPksRRtH/DEYBhpJTU8gIg5PND0zSBcmN1hYJ1tRQC9RVFBDRiQZXEAhKj9WLVlLTS9caU00cUNRNDFbbns7X3uDWF5beUc+QESHW1VGiWtxUGRvj01oZ2RZbHt0XZt2Xlpio2OiY39gpoF/dp9lh3ppn4JycLK5pay0bnu6lcGOfq2xt8WHo7e9uJ+5iciOrsW+s8OSjafYzMWmj5jAr6rOuK/j47vpuKXnqsymocvtrL
2024-09-27 04:02:18 UTC	1356	IN	Data Raw: 47 42 55 51 44 6a 77 75 4d 42 42 43 41 30 55 67 4e 7a 35 46 45 6a 67 4c 4b 68 5a 42 52 51 38 61 4b 79 55 70 4b 53 4e 4f 49 79 6c 5a 52 52 4d 55 4c 44 77 5a 4d 31 4a 53 48 44 4e 6c 4f 46 45 79 57 56 6b 72 53 45 70 61 5a 54 78 30 52 47 56 44 64 55 42 4d 56 31 4e 63 55 45 35 58 4f 33 4e 51 67 32 39 62 58 6b 39 6f 57 56 68 6e 66 6e 64 6a 61 57 53 4c 59 6f 46 2f 62 47 4e 6b 64 57 39 4d 63 6c 65 53 62 32 6d 65 62 57 71 6a 6a 6f 46 7a 63 5a 70 37 64 33 4f 4d 70 48 74 37 5a 36 65 43 73 34 57 48 67 49 47 6d 69 34 69 58 71 35 43 52 6d 4b 71 75 6e 5a 71 32 6c 36 4f 6a 76 58 2b 63 6b 34 75 66 6f 38 33 4f 70 59 54 42 6c 4b 57 68 31 5a 69 76 74 4a 4c 52 6d 70 54 63 32 71 6d 79 72 4e 36 75 72 38 48 57 73 72 7a 46 77 4b 65 35 75 4d 7a 48 76 4d 7a 51 35 73 6a 43 34 38 33 Data Ascii: GBUQDjwuMBBCA0UgNz5FEjgLKhZBRQ8aKyUpKSNOIylZRRMULDwZM1JSHDNlOFEyWVkrSEpaZTx0RGVDdUBMV1NcUE5XO3NQg29bXk9oWVhnfndjaWSLYoF/bGNkdW9McleSb2mebWqjjoFzcZp7d3OMpHt7Z6eCs4WHgIGmi4iXq5CRmKqunZq2l6OjvX+ck4ufo83OpYTBlKWh1ZivtJLRmpTc2qmyrN6ur8HWsrzFwKe5uMzHvMzQ5sjC483

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	50011	104.18.86.42	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:18 UTC	599	OUT	GET /scripttemplates/202307.1.0/assets/otFloatingRoundedIcon.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.twint.ch Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.twint.ch/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:18 UTC	853	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:18 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: fVDOd1lPfsNJLbYSij5kwg== Last-Modified: Wed, 02 Aug 2023 03:23:59 GMT x-ms-request-id: cc21b4a1-501e-0031-60d2-9b1abe000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 75237 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8c9898f0cdb30cdd-EWR
2024-09-27 04:02:18 UTC	516	IN	Data Raw: 33 66 62 31 0d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 46 6c 6f 61 74 69 6e 67 52 6f 75 6e 64 65 64 49 63 6f 6e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 59 6d 46 75 62 6d 56 79 4c 58 4e 6b 61 79 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 52 6d 78 76 59 58 52 70 62 6d 64 53 62 33 56 75 5a 47 56 6b 53 57 4e 76 62 69 42 32 5a 58 4a 30 61 57 4e 68 62 43 31 68 62 47 6c 6e 62 69 31 6a 62 32 35 30 5a 57 35 30 49 6a 34 38 5a 47 6c 32 49 48 4a 76 62 47 55 39 49 6d 46 73 5a 58 4a 30 5a 47 6c 68 62 47 39 6e 49 69 42 68 63 6d 6c 68 4c 57 52 6c 63 32 4e 79 61 57 4a 6c Data Ascii: 3fb1 { "name": "otFloatingRoundedIcon", "html": "PGRpdiBpZD0ib25ldHJ1c3QtYmFubmVyLXNkayIgY2xhc3M9Im90RmxvYXRpbmdSb3VuZGVkSWNvbiB2ZXJ0aWNhbC1hbGlnbi1jb250ZW50Ij48ZGl2IHJvbGU9ImFsZXJ0ZGlhbG9nIiBhcmlhLWRlc2NyaWJl
2024-09-27 04:02:18 UTC	1369	IN	Data Raw: 57 64 6f 64 44 30 69 4e 6a 55 69 49 48 5a 70 5a 58 64 43 62 33 67 39 49 69 30 79 49 43 30 79 49 44 4d 31 49 44 4d 31 49 69 42 34 62 57 78 75 63 7a 30 69 61 48 52 30 63 44 6f 76 4c 33 64 33 64 79 35 33 4d 79 35 76 63 6d 63 76 4d 6a 41 77 4d 43 39 7a 64 6d 63 69 50 6a 78 30 61 58 52 73 5a 54 35 44 62 32 39 72 61 57 56 7a 49 45 4a 31 64 48 52 76 62 6a 77 76 64 47 6c 30 62 47 55 2b 50 47 63 67 5a 6d 6c 73 62 44 30 69 62 6d 39 75 5a 53 49 67 5a 6d 6c 73 62 43 31 79 64 57 78 6c 50 53 4a 6c 64 6d 56 75 62 32 52 6b 49 6a 34 38 59 32 6c 79 59 32 78 6c 49 47 4e 34 50 53 49 78 4e 53 49 67 59 33 6b 39 49 6a 45 31 49 69 42 79 50 53 49 78 4e 69 34 31 49 69 42 6d 61 57 78 73 50 53 49 6a 4d 6d 55 7a 4e 6a 51 7a 49 69 38 2b 50 47 4e 70 63 6d 4e 73 5a 53 42 6a 65 44 30 69 Data Ascii: WdodD0iNjUiIHZpZXdCb3g9Ii0yIC0yIDM1IDM1IiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjx0aXRsZT5Db29raWVzIEJ1dHRvbjwvdGl0bGU+PGcgZmlsbD0ibm9uZSIgZmlsbC1ydWxlPSJldmVub2RkIj48Y2lyY2xlIGN4PSIxNSIgY3k9IjE1IiByPSIxNi41IiBmaWxsPSIjMmUzNjQzIi8+PGNpcmNsZSBjeD0i
2024-09-27 04:02:18 UTC	1369	IN	Data Raw: 49 2b 50 47 67 79 49 47 6c 6b 50 53 4a 76 62 6d 56 30 63 6e 56 7a 64 43 31 77 62 32 78 70 59 33 6b 74 64 47 6c 30 62 47 55 69 50 6b 46 31 64 47 68 76 63 6d 6c 36 5a 53 42 68 59 32 4e 6c 63 33 4d 67 64 47 38 67 65 57 39 31 63 69 42 6b 59 58 52 68 50 43 39 6f 4d 6a 34 38 5a 47 6c 32 49 47 6c 6b 50 53 4a 76 62 6d 56 30 63 6e 56 7a 64 43 31 77 62 32 78 70 59 33 6b 74 64 47 56 34 64 43 49 2b 64 47 6c 30 62 47 55 38 59 53 42 6f 63 6d 56 6d 50 53 49 6a 49 6a 35 77 62 32 78 70 59 33 6b 38 4c 32 45 2b 50 43 39 6b 61 58 59 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 5a 48 42 6b 4c 57 4e 76 62 6e 52 68 61 57 35 6c 63 69 49 2b 50 47 67 7a 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 6b 63 47 51 74 64 47 6c 30 62 47 55 69 50 6a 77 76 61 44 4d 2b 50 Data Ascii: I+PGgyIGlkPSJvbmV0cnVzdC1wb2xpY3ktdGl0bGUiPkF1dGhvcml6ZSBhY2Nlc3MgdG8geW91ciBkYXRhPC9oMj48ZGl2IGlkPSJvbmV0cnVzdC1wb2xpY3ktdGV4dCI+dGl0bGU8YSBocmVmPSIjIj5wb2xpY3k8L2E+PC9kaXY+PGRpdiBjbGFzcz0ib3QtZHBkLWNvbnRhaW5lciI+PGgzIGNsYXNzPSJvdC1kcGQtdGl0bGUiPjwvaDM+P
2024-09-27 04:02:18 UTC	1369	IN	Data Raw: 75 50 43 39 6b 61 58 59 2b 50 43 39 6b 61 58 59 2b 50 43 45 74 4c 53 42 44 62 47 39 7a 5a 53 42 43 64 58 52 30 62 32 34 67 4c 53 30 2b 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 59 32 78 76 63 32 55 74 59 6e 52 75 4c 57 4e 76 62 6e 52 68 61 57 35 6c 63 69 49 2b 50 47 4a 31 64 48 52 76 62 69 42 6a 62 47 46 7a 63 7a 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 59 32 78 76 63 32 55 74 59 6e 52 75 4c 57 68 68 62 6d 52 73 5a 58 49 67 62 32 35 6c 64 48 4a 31 63 33 51 74 59 32 78 76 63 32 55 74 59 6e 52 75 4c 58 56 70 49 47 4a 68 62 6d 35 6c 63 69 31 6a 62 47 39 7a 5a 53 31 69 64 58 52 30 62 32 34 67 62 33 51 74 59 32 78 76 63 32 55 74 61 57 4e 76 62 69 49 2b 50 43 39 69 64 58 52 30 62 32 34 2b 50 43 39 6b 61 58 59 2b 50 43 45 74 4c 53 Data Ascii: uPC9kaXY+PC9kaXY+PCEtLSBDbG9zZSBCdXR0b24gLS0+PGRpdiBpZD0ib25ldHJ1c3QtY2xvc2UtYnRuLWNvbnRhaW5lciI+PGJ1dHRvbiBjbGFzcz0ib25ldHJ1c3QtY2xvc2UtYnRuLWhhbmRsZXIgb25ldHJ1c3QtY2xvc2UtYnRuLXVpIGJhbm5lci1jbG9zZS1idXR0b24gb3QtY2xvc2UtaWNvbiI+PC9idXR0b24+PC9kaXY+PCEtLS
2024-09-27 04:02:18 UTC	1369	IN	Data Raw: 6d 61 6c 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 2d 70 61 72 65 6e 74 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 61 63 63 65 70 74 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 68 61 6e 64 6c 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 36 38 62 36 33 31 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 36 38 62 36 33 31 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 36 72 65 6d 7d 23 6f 6e 65 74 Data Ascii: mal}#onetrust-banner-sdk #onetrust-button-group-parent{text-align:center}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler{background-color:#68b631;color:#fff;border-color:#68b631;margin-bottom:.6rem}#onet
2024-09-27 04:02:18 UTC	1369	IN	Data Raw: 2e 38 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 65 78 74 3e 2a 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 3e 2a 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 65 78 74 20 61 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 20 61 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 Data Ascii: .8em;line-height:1.5}#onetrust-banner-sdk #onetrust-policy-text>,#onetrust-banner-sdk .ot-b-addl-desc>{font-size:inherit}#onetrust-banner-sdk #onetrust-policy-text a,#onetrust-banner-sdk .ot-b-addl-desc a{font-weight:600;margin-left:5px}#onetrust-banner
2024-09-27 04:02:18 UTC	1369	IN	Data Raw: 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 36 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 32 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 20 2a 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 Data Ascii: :auto;height:auto;border:none;padding:0;padding-right:3px;margin-bottom:6px;margin-left:20px;font-size:.82em;line-height:1.4}#onetrust-banner-sdk .banner-option-input *{pointer-events:none;font-size:inherit;line-height:inherit}#onetrust-banner-sdk .banner
2024-09-27 04:02:18 UTC	1369	IN	Data Raw: 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 64 65 74 61 69 6c 73 20 2a 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 64 69 6d 67 72 61 79 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 63 6f 6e 74 61 69 6e 65 72 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 63 6c 65 61 72 3a Data Ascii: nsition:all 300ms ease-in 0s;-moz-transition:all 300ms ease-in 0s;-o-transition:all 300ms ease-in 0s}#onetrust-banner-sdk .banner-option-details *{font-size:inherit;line-height:inherit;color:dimgray}#onetrust-banner-sdk .ot-dpd-container{float:left;clear:
2024-09-27 04:02:18 UTC	1369	IN	Data Raw: 32 30 70 78 20 30 20 31 30 70 78 20 30 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 2e 38 37 35 72 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 2d 70 61 72 65 6e 74 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6f 74 2d 73 64 6b 2d 72 6f 77 7b 6d 61 72 67 69 6e 3a 30 20 31 35 70 78 20 30 20 31 35 70 78 7d 23 6f 6e 65 74 72 75 Data Ascii: 20px 0 10px 0}#onetrust-banner-sdk .ot-optout-signal{margin-top:1.875rem}#onetrust-banner-sdk #onetrust-policy,#onetrust-banner-sdk #onetrust-button-group-parent{margin-left:0}#onetrust-banner-sdk .ot-sdk-container .ot-sdk-row{margin:0 15px 0 15px}#onetru
2024-09-27 04:02:18 UTC	1369	IN	Data Raw: 2d 73 64 6b 2e 6f 74 46 6c 6f 61 74 69 6e 67 52 6f 75 6e 64 65 64 49 63 6f 6e 5b 64 69 72 3d 72 74 6c 5d 7b 72 69 67 68 74 3a 32 30 25 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 38 39 37 70 78 29 7b 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 2d 70 61 72 65 6e 74 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 30 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 3b 77 69 64 74 68 3a 32 30 25 3b 6c 65 66 74 3a 36 34 25 7d 23 6f 6e 65 Data Ascii: -sdk.otFloatingRoundedIcon[dir=rtl]{right:20%}}@media only screen and (min-width: 897px){#onetrust-banner-sdk.vertical-align-content #onetrust-button-group-parent{position:absolute;top:50%;margin-top:10px;transform:translateY(-50%);width:20%;left:64%}#one

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	50010	104.18.86.42	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:18 UTC	591	OUT	GET /scripttemplates/202307.1.0/assets/v2/otPcCenter.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.twint.ch Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.twint.ch/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:18 UTC	853	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:18 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: lrjqvumkzLVMxa35AVJR4w== Last-Modified: Wed, 02 Aug 2023 03:24:00 GMT x-ms-request-id: a09e6f29-f01e-005a-01d2-9b47e8000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 45241 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8c9898f0e8631780-EWR
2024-09-27 04:02:18 UTC	516	IN	Data Raw: 37 63 34 63 0d 0a 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 50 63 43 65 6e 74 65 72 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 63 47 4d 74 63 32 52 72 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 52 51 59 30 4e 6c 62 6e 52 6c 63 69 42 76 64 43 31 6f 61 57 52 6c 49 47 39 30 4c 57 5a 68 5a 47 55 74 61 57 34 69 50 6a 78 6b 61 58 59 67 63 6d 39 73 5a 54 30 69 59 57 78 6c 63 6e 52 6b 61 57 46 73 62 32 63 69 49 47 46 79 61 57 45 74 62 57 39 6b 59 57 77 39 49 6e 52 79 64 57 55 69 49 47 46 79 61 57 45 74 5a 47 56 7a 59 33 4a 70 59 6d 56 6b 59 6e 6b 39 49 6d 39 30 4c 58 42 6a 4c 57 52 6c 63 32 4d 69 50 6a 77 Data Ascii: 7c4c { "name": "otPcCenter", "html": "PGRpdiBpZD0ib25ldHJ1c3QtcGMtc2RrIiBjbGFzcz0ib3RQY0NlbnRlciBvdC1oaWRlIG90LWZhZGUtaW4iPjxkaXYgcm9sZT0iYWxlcnRkaWFsb2ciIGFyaWEtbW9kYWw9InRydWUiIGFyaWEtZGVzY3JpYmVkYnk9Im90LXBjLWRlc2MiPjw
2024-09-27 04:02:18 UTC	1369	IN	Data Raw: 50 53 4a 44 62 47 39 7a 5a 53 49 2b 50 43 39 69 64 58 52 30 62 32 34 2b 50 43 39 6b 61 58 59 2b 50 43 45 74 4c 53 42 44 62 47 39 7a 5a 53 42 43 64 58 52 30 62 32 34 67 4c 53 30 2b 50 47 52 70 64 69 42 70 5a 44 30 69 62 33 51 74 63 47 4d 74 59 32 39 75 64 47 56 75 64 43 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 42 6a 4c 58 4e 6a 63 6d 39 73 62 47 4a 68 63 69 49 2b 50 47 67 79 49 47 6c 6b 50 53 4a 76 64 43 31 77 59 79 31 30 61 58 52 73 5a 53 49 2b 57 57 39 31 63 69 42 51 63 6d 6c 32 59 57 4e 35 50 43 39 6f 4d 6a 34 38 5a 47 6c 32 49 47 6c 6b 50 53 4a 76 64 43 31 77 59 79 31 6b 5a 58 4e 6a 49 6a 34 38 4c 32 52 70 64 6a 34 38 59 6e 56 30 64 47 39 75 49 47 6c 6b 50 53 4a 68 59 32 4e 6c 63 48 51 74 63 6d 56 6a 62 32 31 74 5a 57 35 6b 5a 57 51 74 59 6e 52 Data Ascii: PSJDbG9zZSI+PC9idXR0b24+PC9kaXY+PCEtLSBDbG9zZSBCdXR0b24gLS0+PGRpdiBpZD0ib3QtcGMtY29udGVudCIgY2xhc3M9Im90LXBjLXNjcm9sbGJhciI+PGgyIGlkPSJvdC1wYy10aXRsZSI+WW91ciBQcml2YWN5PC9oMj48ZGl2IGlkPSJvdC1wYy1kZXNjIj48L2Rpdj48YnV0dG9uIGlkPSJhY2NlcHQtcmVjb21tZW5kZWQtYnR
2024-09-27 04:02:18 UTC	1369	IN	Data Raw: 57 46 6a 59 79 31 6e 63 6e 42 6b 5a 58 4e 6a 49 6a 34 38 4c 33 41 2b 50 43 39 6b 61 58 59 2b 50 43 39 6b 61 58 59 2b 50 43 45 74 4c 53 42 42 59 32 4e 76 63 6d 52 70 62 32 34 67 52 33 4a 76 64 58 41 67 63 32 56 6a 64 47 6c 76 62 69 42 6c 62 6d 52 7a 49 43 30 74 50 6a 77 76 63 32 56 6a 64 47 6c 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 63 32 56 6a 64 47 6c 76 62 69 42 70 5a 44 30 69 62 33 51 74 63 47 4d 74 62 48 4e 30 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 61 47 6c 6b 5a 53 42 76 64 43 31 6f 62 33 4e 30 63 79 31 31 61 53 42 76 64 43 31 77 59 79 31 7a 59 33 4a 76 62 47 78 69 59 58 49 69 50 6a 78 6b 61 58 59 67 61 57 51 39 49 6d 39 30 4c 58 42 6a 4c 57 68 6b 63 69 49 2b 50 47 52 70 64 69 42 70 5a 44 30 69 62 33 51 74 62 48 4e 30 4c 58 52 70 64 47 78 6c Data Ascii: WFjYy1ncnBkZXNjIj48L3A+PC9kaXY+PC9kaXY+PCEtLSBBY2NvcmRpb24gR3JvdXAgc2VjdGlvbiBlbmRzIC0tPjwvc2VjdGlvbj48L2Rpdj48c2VjdGlvbiBpZD0ib3QtcGMtbHN0IiBjbGFzcz0ib3QtaGlkZSBvdC1ob3N0cy11aSBvdC1wYy1zY3JvbGxiYXIiPjxkaXYgaWQ9Im90LXBjLWhkciI+PGRpdiBpZD0ib3QtbHN0LXRpdGxl
2024-09-27 04:02:18 UTC	1369	IN	Data Raw: 56 30 64 47 39 75 50 6a 78 6f 4d 7a 35 51 5a 58 4a 6d 62 33 4a 74 59 57 35 6a 5a 53 42 44 62 32 39 72 61 57 56 7a 50 43 39 6f 4d 7a 34 38 4c 32 52 70 64 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 63 33 51 74 63 33 56 69 61 47 52 79 49 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 57 46 79 59 32 67 74 59 32 35 30 63 69 49 2b 50 48 41 67 63 6d 39 73 5a 54 30 69 63 33 52 68 64 48 56 7a 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 63 32 4e 79 62 69 31 79 5a 48 49 69 50 6a 77 76 63 44 34 38 61 57 35 77 64 58 51 67 61 57 51 39 49 6e 5a 6c 62 6d 52 76 63 69 31 7a 5a 57 46 79 59 32 67 74 61 47 46 75 5a 47 78 6c 63 69 49 67 64 48 6c 77 5a 54 30 69 64 47 56 34 64 43 49 67 62 6d 46 74 5a 54 30 69 64 6d 56 75 5a Data Ascii: V0dG9uPjxoMz5QZXJmb3JtYW5jZSBDb29raWVzPC9oMz48L2Rpdj48ZGl2IGNsYXNzPSJvdC1sc3Qtc3ViaGRyIj48ZGl2IGNsYXNzPSJvdC1zZWFyY2gtY250ciI+PHAgcm9sZT0ic3RhdHVzIiBjbGFzcz0ib3Qtc2Nybi1yZHIiPjwvcD48aW5wdXQgaWQ9InZlbmRvci1zZWFyY2gtaGFuZGxlciIgdHlwZT0idGV4dCIgbmFtZT0idmVuZ
2024-09-27 04:02:18 UTC	1369	IN	Data Raw: 76 4d 54 6b 35 4f 53 39 34 62 47 6c 75 61 79 49 67 65 44 30 69 4d 48 42 34 49 69 42 35 50 53 49 77 63 48 67 69 49 48 5a 70 5a 58 64 43 62 33 67 39 49 6a 41 67 4d 43 41 30 4d 44 49 75 4e 54 63 33 49 44 51 77 4d 69 34 31 4e 7a 63 69 49 48 68 74 62 44 70 7a 63 47 46 6a 5a 54 30 69 63 48 4a 6c 63 32 56 79 64 6d 55 69 50 6a 78 30 61 58 52 73 5a 54 35 47 61 57 78 30 5a 58 49 67 53 57 4e 76 62 6a 77 76 64 47 6c 30 62 47 55 2b 50 47 63 2b 50 48 42 68 64 47 67 67 5a 6d 6c 73 62 44 30 69 49 32 5a 6d 5a 69 49 67 5a 44 30 69 54 54 51 77 4d 43 34 34 4e 54 67 73 4d 54 45 75 4e 44 49 33 59 79 30 7a 4c 6a 49 30 4d 53 30 33 4c 6a 51 79 4d 53 30 34 4c 6a 67 31 4c 54 45 78 4c 6a 45 7a 4d 69 30 78 4e 69 34 34 4e 54 51 74 4d 54 45 75 4d 54 4d 32 53 44 45 34 4c 6a 55 32 4e 47 Data Ascii: vMTk5OS94bGluayIgeD0iMHB4IiB5PSIwcHgiIHZpZXdCb3g9IjAgMCA0MDIuNTc3IDQwMi41NzciIHhtbDpzcGFjZT0icHJlc2VydmUiPjx0aXRsZT5GaWx0ZXIgSWNvbjwvdGl0bGU+PGc+PHBhdGggZmlsbD0iI2ZmZiIgZD0iTTQwMC44NTgsMTEuNDI3Yy0zLjI0MS03LjQyMS04Ljg1LTExLjEzMi0xNi44NTQtMTEuMTM2SDE4LjU2NG
2024-09-27 04:02:18 UTC	1369	IN	Data Raw: 4c 58 4e 6c 62 43 31 69 62 47 73 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6c 62 43 31 68 62 47 77 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6c 62 43 31 68 62 47 77 74 61 47 52 79 49 6a 34 38 63 33 42 68 62 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 59 32 39 75 63 32 56 75 64 43 31 6f 5a 48 49 69 50 6b 4e 76 62 6e 4e 6c 62 6e 51 38 4c 33 4e 77 59 57 34 2b 49 44 78 7a 63 47 46 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 61 53 31 6f 5a 48 49 69 50 6b 78 6c 5a 79 35 4a 62 6e 52 6c 63 6d 56 7a 64 44 77 76 63 33 42 68 62 6a 34 38 4c 32 52 70 64 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 57 77 74 59 57 78 73 4c 57 4e 6f 61 32 4a 76 65 43 49 2b 50 43 39 6b 61 58 59 Data Ascii: LXNlbC1ibGsiPjxkaXYgY2xhc3M9Im90LXNlbC1hbGwiPjxkaXYgY2xhc3M9Im90LXNlbC1hbGwtaGRyIj48c3BhbiBjbGFzcz0ib3QtY29uc2VudC1oZHIiPkNvbnNlbnQ8L3NwYW4+IDxzcGFuIGNsYXNzPSJvdC1saS1oZHIiPkxlZy5JbnRlcmVzdDwvc3Bhbj48L2Rpdj48ZGl2IGNsYXNzPSJvdC1zZWwtYWxsLWNoa2JveCI+PC9kaXY
2024-09-27 04:02:18 UTC	1369	IN	Data Raw: 47 52 79 49 6a 34 38 61 44 4d 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 5a 6c 62 69 31 75 59 57 31 6c 49 6a 34 38 4c 32 67 7a 50 6a 78 68 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 32 5a 57 34 74 62 47 6c 75 61 79 49 67 61 48 4a 6c 5a 6a 30 69 49 79 49 2b 56 6d 6c 6c 64 79 42 51 63 6d 6c 32 59 57 4e 35 49 45 35 76 64 47 6c 6a 5a 54 77 76 59 54 34 38 4c 32 52 70 64 6a 34 38 49 53 30 74 49 48 52 76 5a 32 64 73 5a 58 4d 67 59 57 35 6b 49 47 46 79 63 6d 39 33 49 43 30 74 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 52 6e 62 43 31 6a 62 6e 52 79 49 6a 34 38 4c 32 52 70 64 6a 34 38 4c 33 4e 6c 59 33 52 70 62 32 34 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 59 57 4e 6a 4c 58 52 34 64 43 49 2b 50 48 56 73 49 47 4e 73 Data Ascii: GRyIj48aDMgY2xhc3M9Im90LXZlbi1uYW1lIj48L2gzPjxhIGNsYXNzPSJvdC12ZW4tbGluayIgaHJlZj0iIyI+VmlldyBQcml2YWN5IE5vdGljZTwvYT48L2Rpdj48IS0tIHRvZ2dsZXMgYW5kIGFycm93IC0tPjxkaXYgY2xhc3M9Im90LXRnbC1jbnRyIj48L2Rpdj48L3NlY3Rpb24+PGRpdiBjbGFzcz0ib3QtYWNjLXR4dCI+PHVsIGNs
2024-09-27 04:02:18 UTC	1369	IN	Data Raw: 31 69 64 47 34 67 59 32 46 30 5a 57 64 76 63 6e 6b 74 64 6d 56 75 5a 47 39 79 63 79 31 73 61 58 4e 30 4c 57 68 68 62 6d 52 73 5a 58 49 69 50 6c 5a 70 5a 58 63 67 56 6d 56 75 5a 47 39 79 49 45 78 70 63 33 51 38 4c 32 4a 31 64 48 52 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 49 53 30 74 49 45 4e 76 62 32 74 70 5a 53 42 73 62 33 4e 30 49 47 78 70 62 6d 73 67 4c 53 30 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 61 47 78 7a 64 43 31 6a 62 6e 52 79 49 6a 34 38 59 6e 56 30 64 47 39 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 61 57 35 72 4c 57 4a 30 62 69 42 6a 59 58 52 6c 5a 32 39 79 65 53 31 6f 62 33 4e 30 4c 57 78 70 63 33 51 74 61 47 46 75 5a 47 78 6c 63 69 49 2b 53 47 39 7a 64 43 42 4d 61 58 4e 30 50 43 39 69 64 58 52 30 62 32 34 2b 50 Data Ascii: 1idG4gY2F0ZWdvcnktdmVuZG9ycy1saXN0LWhhbmRsZXIiPlZpZXcgVmVuZG9yIExpc3Q8L2J1dHRvbj48L2Rpdj48IS0tIENvb2tpZSBsb3N0IGxpbmsgLS0+PGRpdiBjbGFzcz0ib3QtaGxzdC1jbnRyIj48YnV0dG9uIGNsYXNzPSJvdC1saW5rLWJ0biBjYXRlZ29yeS1ob3N0LWxpc3QtaGFuZGxlciI+SG9zdCBMaXN0PC9idXR0b24+P
2024-09-27 04:02:18 UTC	1369	IN	Data Raw: 39 49 6d 68 30 64 48 41 36 4c 79 39 33 64 33 63 75 64 7a 4d 75 62 33 4a 6e 4c 7a 49 77 4d 44 41 76 63 33 5a 6e 49 69 42 32 61 57 56 33 51 6d 39 34 50 53 49 77 49 44 41 67 4d 54 6b 79 49 44 55 78 4d 69 49 2b 50 48 42 68 64 47 67 67 5a 6d 6c 73 62 44 30 69 59 33 56 79 63 6d 56 75 64 45 4e 76 62 47 39 79 49 69 42 6b 50 53 4a 4e 4d 54 59 32 4c 6a 6b 67 4d 6a 59 30 4c 6a 56 73 4c 54 45 78 4e 79 34 34 49 44 45 78 4e 6d 4d 74 4e 43 34 33 49 44 51 75 4e 79 30 78 4d 69 34 7a 49 44 51 75 4e 79 30 78 4e 79 41 77 62 43 30 33 4c 6a 45 74 4e 79 34 78 59 79 30 30 4c 6a 63 74 4e 43 34 33 4c 54 51 75 4e 79 30 78 4d 69 34 7a 49 44 41 74 4d 54 64 4d 4d 54 49 33 4c 6a 4d 67 4d 6a 55 32 49 44 49 31 4c 6a 45 67 4d 54 55 31 4c 6a 5a 6a 4c 54 51 75 4e 79 30 30 4c 6a 63 74 4e 43 Data Ascii: 9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB2aWV3Qm94PSIwIDAgMTkyIDUxMiI+PHBhdGggZmlsbD0iY3VycmVudENvbG9yIiBkPSJNMTY2LjkgMjY0LjVsLTExNy44IDExNmMtNC43IDQuNy0xMi4zIDQuNy0xNyAwbC03LjEtNy4xYy00LjctNC43LTQuNy0xMi4zIDAtMTdMMTI3LjMgMjU2IDI1LjEgMTU1LjZjLTQuNy00LjctNC
2024-09-27 04:02:18 UTC	1369	IN	Data Raw: 64 47 56 7a 64 44 77 76 61 44 51 2b 50 43 39 6b 61 58 59 2b 50 43 45 74 4c 53 42 68 59 32 4e 76 63 6d 52 70 62 32 34 67 5a 47 56 30 59 57 6c 73 49 43 30 74 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 46 6a 59 79 31 6e 63 6e 42 6a 62 6e 52 79 49 47 39 30 4c 57 46 6a 59 79 31 30 65 48 51 67 62 33 51 74 64 6d 35 6b 4c 57 6c 75 5a 6d 38 74 59 32 35 30 63 69 49 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 6d 35 6b 4c 57 6c 75 5a 6d 38 69 50 6a 78 6f 4e 53 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 6d 35 6b 4c 57 78 69 62 43 49 2b 55 32 56 79 64 6d 6c 6a 5a 53 42 4f 59 57 31 6c 50 43 39 6f 4e 54 34 38 61 44 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 5a 75 5a 43 31 6a 62 6e 51 69 50 6b 64 76 62 32 64 73 5a 53 42 Data Ascii: dGVzdDwvaDQ+PC9kaXY+PCEtLSBhY2NvcmRpb24gZGV0YWlsIC0tPjxkaXYgY2xhc3M9Im90LWFjYy1ncnBjbnRyIG90LWFjYy10eHQgb3Qtdm5kLWluZm8tY250ciI+PGRpdiBjbGFzcz0ib3Qtdm5kLWluZm8iPjxoNSBjbGFzcz0ib3Qtdm5kLWxibCI+U2VydmljZSBOYW1lPC9oNT48aDYgY2xhc3M9Im90LXZuZC1jbnQiPkdvb2dsZSB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	50012	104.18.86.42	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:18 UTC	600	OUT	GET /scripttemplates/202307.1.0/assets/otCookieSettingsButton.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.twint.ch Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.twint.ch/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:18 UTC	853	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:18 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: J/OXP0fdvy1F2I+bffRnrw== Last-Modified: Wed, 02 Aug 2023 03:23:59 GMT x-ms-request-id: 53dd4fce-701e-0003-5f55-cd908d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 75237 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8c9898f0f94843b5-EWR
2024-09-27 04:02:18 UTC	516	IN	Data Raw: 31 32 37 32 0d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 43 6f 6f 6b 69 65 53 65 74 74 69 6e 67 73 42 75 74 74 6f 6e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 33 51 74 63 32 52 72 4c 57 4a 30 62 69 31 6d 62 47 39 68 64 47 6c 75 5a 79 49 67 64 47 6c 30 62 47 55 39 49 6b 31 68 62 6d 46 6e 5a 53 42 51 63 6d 6c 32 59 57 4e 35 49 46 42 79 5a 57 5a 6c 63 6d 56 75 59 32 56 7a 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 5a 6d 78 76 59 58 52 70 62 6d 63 74 59 6e 56 30 64 47 39 75 49 47 39 30 4c 57 68 70 5a 47 55 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 5a 73 62 32 46 Data Ascii: 1272 { "name": "otCookieSettingsButton", "html": "PGRpdiBpZD0ib3Qtc2RrLWJ0bi1mbG9hdGluZyIgdGl0bGU9Ik1hbmFnZSBQcml2YWN5IFByZWZlcmVuY2VzIiBjbGFzcz0ib3QtZmxvYXRpbmctYnV0dG9uIG90LWhpZGUiPjxkaXYgY2xhc3M9Im90LWZsb2F
2024-09-27 04:02:18 UTC	1369	IN	Data Raw: 63 32 6c 76 62 6a 30 69 4d 53 34 77 49 69 42 6c 62 6d 4e 76 5a 47 6c 75 5a 7a 30 69 56 56 52 47 4c 54 67 69 50 79 30 74 50 69 41 38 63 33 5a 6e 49 48 4a 76 62 47 55 39 49 6e 42 79 5a 58 4e 6c 62 6e 52 68 64 47 6c 76 62 69 49 67 64 6d 6c 6c 64 30 4a 76 65 44 30 69 4d 43 41 77 49 44 49 30 49 44 49 30 49 69 42 32 5a 58 4a 7a 61 57 39 75 50 53 49 78 4c 6a 45 69 49 48 68 74 62 47 35 7a 50 53 4a 6f 64 48 52 77 4f 69 38 76 64 33 64 33 4c 6e 63 7a 4c 6d 39 79 5a 79 38 79 4d 44 41 77 4c 33 4e 32 5a 79 49 2b 50 47 63 67 61 57 51 39 49 6c 42 68 5a 32 55 74 4d 53 49 67 63 33 52 79 62 32 74 6c 50 53 4a 75 62 32 35 6c 49 69 42 7a 64 48 4a 76 61 32 55 74 64 32 6c 6b 64 47 67 39 49 6a 45 69 49 47 5a 70 62 47 77 39 49 6d 35 76 62 6d 55 69 49 47 5a 70 62 47 77 74 63 6e 56 Data Ascii: c2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPy0tPiA8c3ZnIHJvbGU9InByZXNlbnRhdGlvbiIgdmlld0JveD0iMCAwIDI0IDI0IiB2ZXJzaW9uPSIxLjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyI+PGcgaWQ9IlBhZ2UtMSIgc3Ryb2tlPSJub25lIiBzdHJva2Utd2lkdGg9IjEiIGZpbGw9Im5vbmUiIGZpbGwtcnV
2024-09-27 04:02:18 UTC	1369	IN	Data Raw: 20 65 61 73 65 20 30 6d 73 20 31 20 66 6f 72 77 61 72 64 73 7d 23 6f 74 2d 73 64 6b 2d 62 74 6e 2d 66 6c 6f 61 74 69 6e 67 2e 6f 74 2d 66 6c 6f 61 74 69 6e 67 2d 62 75 74 74 6f 6e 2e 6f 74 2d 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 23 6f 74 2d 73 64 6b 2d 62 74 6e 2d 66 6c 6f 61 74 69 6e 67 2e 6f 74 2d 66 6c 6f 61 74 69 6e 67 2d 62 75 74 74 6f 6e 3a 3a 62 65 66 6f 72 65 2c 23 6f 74 2d 73 64 6b 2d 62 74 6e 2d 66 6c 6f 61 74 69 6e 67 2e 6f 74 2d 66 6c 6f 61 74 69 6e 67 2d 62 75 74 74 6f 6e 3a 3a 61 66 74 65 72 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f Data Ascii: ease 0ms 1 forwards}#ot-sdk-btn-floating.ot-floating-button.ot-hide{display:none}#ot-sdk-btn-floating.ot-floating-button::before,#ot-sdk-btn-floating.ot-floating-button::after{text-transform:none;line-height:1;user-select:none;pointer-events:none;positio
2024-09-27 04:02:18 UTC	1369	IN	Data Raw: 62 74 6e 2d 66 6c 6f 61 74 69 6e 67 2e 6f 74 2d 66 6c 6f 61 74 69 6e 67 2d 62 75 74 74 6f 6e 2e 6f 74 2d 70 63 2d 6f 70 65 6e 20 2e 6f 74 2d 66 6c 6f 61 74 69 6e 67 2d 62 75 74 74 6f 6e 5f 5f 62 61 63 6b 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 59 28 30 29 7d 23 6f 74 2d 73 64 6b 2d 62 74 6e 2d 66 6c 6f 61 74 69 6e 67 20 2e 6f 74 2d 66 6c 6f 61 74 69 6e 67 2d 62 75 74 74 6f 6e 5f 5f 66 72 6f 6e 74 2c 23 6f 74 2d 73 64 6b 2d 62 74 6e 2d 66 6c 6f 61 74 69 6e 67 20 2e 6f 74 2d 66 6c 6f 61 74 69 6e 67 2d 62 75 74 74 6f 6e 5f 5f 62 61 63 6b 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 Data Ascii: btn-floating.ot-floating-button.ot-pc-open .ot-floating-button__back{transform:rotateY(0)}#ot-sdk-btn-floating .ot-floating-button__front,#ot-sdk-btn-floating .ot-floating-button__back{position:absolute;width:100%;height:100%;-webkit-backface-visibility:h
2024-09-27 04:02:18 UTC	107	IN	Data Raw: 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 29 20 72 6f 74 61 74 65 28 2d 32 37 30 64 65 67 29 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 30 30 25 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 2e 39 35 29 20 72 6f 74 61 74 65 28 30 64 65 67 29 7d 7d 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a Data Ascii: ;transform:scale(0) rotate(-270deg)}100%{opacity:100%;transform:scale(0.95) rotate(0deg)}}" }
2024-09-27 04:02:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	50013	104.18.86.42	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:18 UTC	591	OUT	GET /scripttemplates/202307.1.0/assets/otCommonStyles.css HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.twint.ch Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.twint.ch/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:18 UTC	870	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:18 GMT Content-Type: text/css Content-Length: 21681 Connection: close Content-MD5: /b68gAlvQhCuyX9fCPcDyg== Last-Modified: Wed, 02 Aug 2023 03:24:08 GMT ETag: 0x8DB9307EEEC525E x-ms-request-id: 0c23a1f3-801e-0021-3520-241df8000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 75237 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8c9898f1194f8c54-EWR
2024-09-27 04:02:18 UTC	499	IN	Data Raw: 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 7b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 74 72 75 73 74 2d 76 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 63 6f 6c 6f 72 3a 23 31 66 39 36 64 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 Data Ascii: #onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .one
2024-09-27 04:02:18 UTC	1369	IN	Data Raw: 74 72 75 73 74 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 68 61 6e 64 6c 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 31 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 62 6e 72 2d 77 2d 6c 6f 67 6f 20 2e 6f 74 2d 62 6e 72 2d 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 36 34 70 78 3b 77 69 64 74 68 3a 36 34 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 74 63 66 32 2d 76 65 6e 64 6f 72 2d 63 6f 75 6e 74 2e 6f 74 2d 74 65 78 74 2d 62 6f 6c 64 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 Data Ascii: trust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk
2024-09-27 04:02:18 UTC	1369	IN	Data Raw: 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 68 34 20 2a 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 68 36 20 2a 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 62 75 74 74 6f 6e 20 2a 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 61 5b 64 61 74 61 2d 70 61 72 65 6e 74 2d 69 64 5d 20 2a 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 2e 6f 74 2d 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 23 6f 6e 65 Data Ascii: ,#ot-sync-ntfy h4 ,#ot-sync-ntfy h6 ,#ot-sync-ntfy button ,#ot-sync-ntfy a[data-parent-id] {font-size:inherit;font-weight:inherit;color:inherit}#onetrust-banner-sdk .ot-hide,#onetrust-pc-sdk .ot-hide,#ot-sync-ntfy .ot-hide{display:none !important}#one
2024-09-27 04:02:18 UTC	1369	IN	Data Raw: 70 63 2d 73 64 6b 20 2e 6f 74 2d 70 63 2d 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 36 30 70 78 3b 77 69 64 74 68 3a 31 38 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 70 63 2d 6c 6f 67 6f 20 69 6d 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 70 63 2d 6c 6f 67 6f 20 69 6d 67 7b 6d 61 78 2d 68 65 69 67 Data Ascii: pc-sdk .ot-pc-logo{height:60px;width:180px;background-position:center;background-size:contain;background-repeat:no-repeat;display:inline-flex;justify-content:center;align-items:center}#onetrust-pc-sdk .pc-logo img,#onetrust-pc-sdk .ot-pc-logo img{max-heig
2024-09-27 04:02:18 UTC	1369	IN	Data Raw: 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 7d 40 6b 65 79 66 72 61 6d 65 73 20 6f 6e 65 74 72 75 73 74 2d 66 61 64 65 2d 69 6e 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 7d 2e 6f 74 2d 63 6f 6f 6b 69 65 2d 6c 61 62 65 6c 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 32 36 70 78 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 38 39 36 70 78 29 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 20 6c 61 6e 64 73 63 61 70 65 29 7b 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 Data Ascii: ion:fixed;top:0;bottom:0;left:0}@keyframes onetrust-fade-in{0%{opacity:0}100%{opacity:1}}.ot-cookie-label{text-decoration:underline}@media only screen and (min-width: 426px)and (max-width: 896px)and (orientation: landscape){#onetrust-pc-sdk p{font-size:.7
2024-09-27 04:02:18 UTC	1369	IN	Data Raw: 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 7b 68 65 69 67 68 74 3a 32 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 2e 35 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 7b 66 69 6c 6c 3a 23 33 32 61 65 38 38 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b Data Ascii: ptout-signal svg,#onetrust-pc-sdk .ot-optout-signal svg{height:20px;width:30px;transform:scale(0.5)}#onetrust-banner-sdk .ot-optout-signal svg path,#onetrust-pc-sdk .ot-optout-signal svg path{fill:#32ae88}#onetrust-banner-sdk,#onetrust-pc-sdk,#ot-sdk-cook
2024-09-27 04:02:18 UTC	1369	IN	Data Raw: 23 6f 74 2d 63 6f 6e 74 65 6e 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 74 2d 70 63 2d 63 6f 6e 74 65 6e 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 64 69 76 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 73 70 61 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 31 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 32 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 33 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 34 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 35 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 36 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d Data Ascii: #ot-content,#onetrust-banner-sdk #ot-pc-content,#onetrust-banner-sdk .checkbox,#onetrust-pc-sdk div,#onetrust-pc-sdk span,#onetrust-pc-sdk h1,#onetrust-pc-sdk h2,#onetrust-pc-sdk h3,#onetrust-pc-sdk h4,#onetrust-pc-sdk h5,#onetrust-pc-sdk h6,#onetrust-pc-
2024-09-27 04:02:18 UTC	1369	IN	Data Raw: 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 6f 74 2d 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 6f 74 2d 74 6f 67 67 6c 65 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 23 6f 74 2d 63 6f 6e 74 65 6e 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 23 6f 74 2d 70 63 2d 63 6f 6e 74 65 6e 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 63 68 65 63 6b 62 6f 78 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 64 69 76 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 73 70 61 6e 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 68 31 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 68 32 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 Data Ascii: sdk-cookie-policy .ot-main-content,#ot-sdk-cookie-policy .ot-toggle,#ot-sdk-cookie-policy #ot-content,#ot-sdk-cookie-policy #ot-pc-content,#ot-sdk-cookie-policy .checkbox,#ot-sync-ntfy div,#ot-sync-ntfy span,#ot-sync-ntfy h1,#ot-sync-ntfy h2,#ot-sync-ntfy
2024-09-27 04:02:18 UTC	1369	IN	Data Raw: 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 3a 62 65 66 6f 72 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 6c 61 62 65 6c 3a 62 65 66 6f 72 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 6c 61 62 65 6c 3a 61 66 74 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 3a 61 66 74 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 3a 62 65 66 6f 72 65 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 61 62 65 6c 3a 62 65 66 6f 72 65 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 61 62 65 6c 3a 61 66 74 65 72 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 Data Ascii: er,#onetrust-banner-sdk .checkbox:before,#onetrust-pc-sdk label:before,#onetrust-pc-sdk label:after,#onetrust-pc-sdk .checkbox:after,#onetrust-pc-sdk .checkbox:before,#ot-sdk-cookie-policy label:before,#ot-sdk-cookie-policy label:after,#ot-sdk-cookie-poli
2024-09-27 04:02:18 UTC	1369	IN	Data Raw: 63 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 73 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 73 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 73 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 6f Data Ascii: c-sdk .ot-sdk-columns,#ot-sdk-cookie-policy .ot-sdk-column,#ot-sdk-cookie-policy .ot-sdk-columns{margin-left:4%}#onetrust-banner-sdk .ot-sdk-column:first-child,#onetrust-banner-sdk .ot-sdk-columns:first-child,#onetrust-pc-sdk .ot-sdk-column:first-child,#o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	50009	142.250.186.98	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:18 UTC	1627	OUT	GET /td/rul/946203707?random=1727409736078&cv=11&fst=1727409736078&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465z876304729za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fgoogle-play%2F&ref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fgoogle-play%2F%3F__cf_chl_tk%3DvPDafy5u7fTr24UoQidgupFmfFsp3K2ZYE8LkGIqA1g-1727409712-0.0.1.1-4734&hn=www.googleadservices.com&frm=0&tiba=Kaufe%20Google%20Play%20Guthaben%20direkt%20in%20der%20TWINT%20App%20%C2%BB%20TWINT&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.twint.ch/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:18 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 27 Sep 2024 04:02:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 27-Sep-2024 04:17:18 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-27 04:02:18 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-09-27 04:02:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	50014	150.171.27.10	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:18 UTC	581	OUT	GET /p/action/20058379.js HTTP/1.1 Host: bat.bing.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twint.ch/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MR=0
2024-09-27 04:02:18 UTC	570	IN	HTTP/1.1 200 OK Cache-Control: private,max-age=1800 Content-Length: 371 Content-Type: application/javascript; charset=utf-8 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 756178EBBD734F24BE54874BC4736829 Ref B: EWR30EDGE0407 Ref C: 2024-09-27T04:02:18Z Date: Fri, 27 Sep 2024 04:02:18 GMT Connection: close
2024-09-27 04:02:18 UTC	59	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 63 2c 6b 2c 61 2c 62 2c 74 2c 65 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 63 73 20 3d 20 64 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b Data Ascii: (function(w,d,c,k,a,b,t,e) { var cs = d.currentScript;
2024-09-27 04:02:18 UTC	312	IN	Data Raw: 0d 0a 20 20 20 20 69 66 20 28 63 73 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 75 6f 20 3d 20 63 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 75 65 74 6f 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 75 6f 20 26 26 20 77 5b 75 6f 5d 20 26 26 20 74 79 70 65 6f 66 20 77 5b 75 6f 5d 2e 73 65 74 55 73 65 72 53 69 67 6e 61 6c 73 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 5b 75 6f 5d 2e 73 65 74 55 73 65 72 53 69 67 6e 61 6c 73 28 7b 27 63 6f 27 3a 20 63 2c 20 27 6b 63 27 3a 20 6b 2c 20 27 61 74 27 3a 20 61 2c 20 27 62 69 27 3a 20 62 2c 20 27 64 74 27 3a 20 74 2c 20 27 65 63 27 3a 20 65 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 0d 0a 7d 29 28 77 69 6e 64 Data Ascii: if (cs) { var uo = cs.getAttribute('data-ueto'); if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') { w[uo].setUserSignals({'co': c, 'kc': k, 'at': a, 'bi': b, 'dt': t, 'ec': e}); } }})(wind

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	50020	157.240.0.6	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:19 UTC	1345	OUT	GET /signals/config/979879722096658?v=2.9.168&r=stable&domain=www.twint.ch&hme=3ba426d944c98eb3ce406a0f93fc097d0320a486b65b445a33b2eda3a5aa3429&ex_m=70%2C119%2C105%2C109%2C61%2C4%2C98%2C69%2C16%2C95%2C87%2C51%2C54%2C170%2C173%2C185%2C181%2C182%2C184%2C29%2C99%2C53%2C76%2C183%2C165%2C168%2C178%2C179%2C186%2C129%2C41%2C34%2C141%2C15%2C50%2C192%2C191%2C131%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C91%2C17%2C14%2C94%2C90%2C89%2C106%2C52%2C108%2C39%2C107%2C30%2C92%2C26%2C166%2C169%2C138%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C74%2C100%2C27%2C75%2C9%2C8%2C79%2C48%2C21%2C102%2C101%2C103%2C96%2C10%2C20%2C3%2C38%2C19%2C84%2C56%2C82%2C33%2C73%2C0%2C93%2C32%2C81%2C86%2C47%2C46%2C85%2C37%2C5%2C88%2C80%2C44%2C35%2C83%2C2%2C36%2C63%2C42%2C104%2C45%2C78%2C68%2C110%2C60%2C59%2C31%2C97%2C58%2C55%2C49%2C77%2C72%2C24%2C111 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twint.ch/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:19 UTC	1451	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-09-27 04:02:19 UTC	1728	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-09-27 04:02:19 UTC	1500	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-09-27 04:02:19 UTC	1500	IN	Data Raw: 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 3d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 28 29 29 3b 72 65 74 75 72 6e 20 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 Data Ascii: urn!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f
2024-09-27 04:02:19 UTC	1500	IN	Data Raw: 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 21 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 28 62 29 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 62 5d 3d 61 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 69 77 6c 70 61 72 61 6d 65 74 65 72 73 22 2c 66 75 6e 63 74 69 6f 6e 28 Data Ascii: eventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlparameters",function(
2024-09-27 04:02:19 UTC	1500	IN	Data Raw: 6d 61 6e 63 65 2e 6e 6f 77 26 26 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 69 66 28 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 61 2e 70 6f 73 74 4d 65 73 73 61 67 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 69 66 28 21 66 29 7b 62 28 7b 61 63 74 69 6f 6e 3a 22 46 42 5f 4c 4f 47 22 2c 6c 6f 67 54 79 70 65 3a 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 22 2c 6c 6f 67 4d 65 73 73 61 67 65 3a 22 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 7d 2c 22 2a 22 29 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c Data Ascii: mance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"*");"error"in console&&console.error("Facebook Pixel
2024-09-27 04:02:19 UTC	1500	IN	Data Raw: 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 52 4c 55 74 69 6c 22 29 2c 62 3d 61 2e 67 65 74 55 52 4c 50 61 72 61 6d 65 74 65 72 2c 63 3d 22 63 6c 69 63 6b 49 44 22 2c 64 3d 22 66 62 63 6c 69 64 22 3b 66 75 6e 63 74 69 6f 6e 20 67 28 61 2c 62 29 7b 76 61 72 20 63 3d 6e 65 77 20 4d 61 70 28 61 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 5b 61 2e 70 61 72 61 6d 43 6f 6e 66 69 67 2e 71 75 65 72 79 2c Data Ascii: n(){return function(g,h,i,d){var e={exports:{}};e.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsURLUtil"),b=a.getURLParameter,c="clickID",d="fbclid";function g(a,b){var c=new Map(a.map(function(a){return[a.paramConfig.query,
2024-09-27 04:02:19 UTC	1500	IN	Data Raw: 6f 70 43 6f 6f 6b 69 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 49 73 48 6f 73 74 46 61 63 65 62 6f 6f 6b 22 29 2c 62 3d 22 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 73 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 72 65 74 75 72 6e 20 67 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 22 68 74 74 70 22 2e 6c 65 Data Ascii: opCookie",function(){return function(g,h,i,j){var e={exports:{}};e.exports;(function(){"use strict";var a=f.getFbeventsModules("signalsFBEventsIsHostFacebook"),b="FirstPartyCookies";e.exports=function(c,d){return g.location.protocol.substring(0,"http".le
2024-09-27 04:02:19 UTC	1500	IN	Data Raw: 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 41 29 3b 72 65 74 75 72 6e 20 61 2e 74 6f 53 74 72 69 6e 67 28 29 2b 62 2e 74 6f 53 74 72 69 6e 67 28 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 29 7b 76 61 72 20 61 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 61 72 67 75 6d 65 6e 74 73 5b 30 5d 21 3d 3d 76 6f 69 64 20 30 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 6a 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 63 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 21 3d 3d 76 6f 69 64 20 30 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 6e 75 6c 6c 2c 64 3d 6e 28 61 2c 74 29 3b 28 64 3d 3d 6e 75 6c 6c 7c 7c 64 2e 74 72 69 6d 28 29 3d 3d 22 22 29 26 26 28 64 3d 6e 28 62 2e 72 65 66 65 72 72 65 72 2c 74 29 29 3b Data Ascii: ath.random()*A);return a.toString()+b.toString()}function C(){var a=arguments.length>0&&arguments[0]!==void 0?arguments[0]:j.location.href,c=arguments.length>1&&arguments[1]!==void 0?arguments[1]:null,d=n(a,t);(d==null\|\|d.trim()=="")&&(d=n(b.referrer,t));
2024-09-27 04:02:19 UTC	1500	IN	Data Raw: 3d 61 2e 66 62 63 50 61 72 61 6d 73 43 6f 6e 66 69 67 29 3b 68 3d 61 21 3d 6e 75 6c 6c 26 26 61 2e 65 6e 61 62 6c 65 46 62 63 50 61 72 61 6d 53 70 6c 69 74 21 3d 6e 75 6c 6c 3f 61 2e 65 6e 61 62 6c 65 46 62 63 50 61 72 61 6d 53 70 6c 69 74 3a 7a 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 64 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 70 28 61 2c 62 29 29 72 65 74 75 72 6e 7b 7d 3b 76 61 72 20 63 3d 7b 7d 2c 64 3d 43 28 6a 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 65 29 2c 66 3d 44 28 6a 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 65 2c 67 29 3b 68 26 26 66 3f 63 5b 76 5d 3d 66 2e 70 61 63 6b 28 29 3a 64 26 26 28 63 5b 76 5d 3d 64 2e 70 61 63 6b 28 29 29 3b 66 3d 45 28 29 3b 69 66 28 66 29 7b 64 3d 66 2e 70 61 63 6b 28 29 Data Ascii: =a.fbcParamsConfig);h=a!=null&&a.enableFbcParamSplit!=null?a.enableFbcParamSplit:z});function a(){d.listen(function(a){if(p(a,b))return{};var c={},d=C(j.location.href,e),f=D(j.location.href,e,g);h&&f?c[v]=f.pack():d&&(c[v]=d.pack());f=E();if(f){d=f.pack()
2024-09-27 04:02:20 UTC	1500	IN	Data Raw: 64 4d 6f 64 75 6c 65 73 5b 61 5d 3d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 28 29 29 3b 72 65 74 75 72 6e 20 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 21 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 28 62 29 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 62 5d 3d 61 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 Data Ascii: dModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistere

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	50021	142.250.186.98	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:19 UTC	1333	OUT	GET /td/fls/rul/activityi;fledge=1;src=9818618;type=twint002;cat=twint0;ord=1895166089217;npa=0;auiddc=1403402495.1727409735;ps=1;pcor=137932440;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2Fvelo%2F? HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.twint.ch/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-09-27 04:02:19 UTC	967	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 27 Sep 2024 04:02:19 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUnCmIuTxYaI8tvBINX6gj-xx2ExurKOP2O-v0zdac9A85x8dt32GggBtZPkWSA; expires=Sun, 27-Sep-2026 04:02:19 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-27 04:02:19 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-09-27 04:02:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	50023	172.217.16.198	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:19 UTC	1322	OUT	GET /activityi;src=9818618;type=twint002;cat=twint0;ord=1895166089217;npa=0;auiddc=1403402495.1727409735;ps=1;pcor=137932440;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2Fvelo%2F? HTTP/1.1 Host: 9818618.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.twint.ch/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-09-27 04:02:19 UTC	1256	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 27 Sep 2024 04:02:19 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://9818618.fls.doubleclick.net/activityi;dc_pre=CIDIkN-e4ogDFcSHgwcdx90GEg;src=9818618;type=twint002;cat=twint0;ord=1895166089217;npa=0;auiddc=1403402495.1727409735;ps=1;pcor=137932440;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2Fvelo%2F? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	50022	142.250.186.134	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:19 UTC	1304	OUT	GET /activity;register_conversion=1;src=9818618;type=twint002;cat=twint0;ord=1895166089217;npa=0;auiddc=1403402495.1727409735;ps=1;pcor=137932440;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2Fvelo%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source;navigation-source Referer: https://www.twint.ch/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-09-27 04:02:19 UTC	2835	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 27 Sep 2024 04:02:19 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"9502282414999624996"}],"aggregatable_trigger_data":[{"filters":[{"14":["11774320"]}],"key_piece":"0x62aecf34a3a795f6","source_keys":["12","13","14","15","16","17","18","19","20","21","628516024","628516025","628516026","628516027","628623136","628623137","628623138","628623139","628701672","628701673","628701674","628701675","634856388","634856389","634856390","634856391"]},{"key_piece":"0x59c1041dbdd69499","not_filters":{"14":["11774320"]},"source_keys":["12","13","14","15","16","17","18","19","20","21","628516024","628516025","628516026","628516027","628623136","628623137","628623138","628623139","628701672","628701673","628701674","628701675","634856388","634856389","634856390","634856391"]}],"aggregatable_values":{"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"628516024":327,"628516025":327,"628516026":327,"628516027":31784,"628623136":65,"628623137":65,"628623138":65," [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 27-Oct-2024 04:02:19 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUnaxrRQiOXDkuDPypDvKrx_28Q0spLOcJvV9FpcEPQeJgRmNFlJQAQ_CJMG; expires=Sun, 27-Sep-2026 04:02:19 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	50025	216.58.206.68	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:19 UTC	1610	OUT	GET /pagead/1p-user-list/946203707/?random=1727409735110&cv=11&fst=1727409600000&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465z876304729za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2Fvelo%2F&hn=www.googleadservices.com&frm=0&tiba=Veloversicherung%20mit%20TWINT%20abschliessen%20%C2%BB%20TWINT&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwDpaXnfDjnBfoqWX8gWwYQN_2l4SiJ06y1Qag&random=1750163495&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twint.ch/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=517=uHE3MPhWkkCAHJpDH1pishVOR2DYGb4VCGR8FWemchSsyuvuwmsiE1fPmcYb8cy-vat5744oZWk9lzdQx-eGkMtCG5oHkHJxpbmzc-IPDj-LYdAi_7nLYb4BOjEbMLc04Iw9jJ28d0aZ82FWxcJUVm6xZxGsIZdSvdTjN3etGqpmcJVcLA
2024-09-27 04:02:19 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 27 Sep 2024 04:02:19 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 04:02:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	50026	188.114.96.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:19 UTC	805	OUT	POST /socket.io/?EIO=4&transport=polling&t=P8nfCqH&sid=qkaZApVbB7RCdyB5ADHv HTTP/1.1 Host: datechf.cc Connection: keep-alive Content-Length: 34 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://datechf.cc Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://datechf.cc/de/receive/79469380 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
2024-09-27 04:02:19 UTC	34	OUT	Data Raw: 34 32 5b 22 6c 69 6e 6b 53 74 61 74 75 73 43 68 65 63 6b 65 72 22 2c 22 37 39 34 36 39 33 38 30 22 5d Data Ascii: 42["linkStatusChecker","79469380"]
2024-09-27 04:02:20 UTC	544	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:19 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close cache-control: no-store CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wWgpT877SWSW%2BIRdzm1tDbtooULK3VUyq%2B828hsbJ5zIsoCOMMCEAvQCkaiFqUP4SdIYqgVeZugbkop8rc8SjEL8IR0zwjZeebKhxzylsYiv%2Bp6jOns8e2IopWZj"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c9898f95b2fde99-EWR
2024-09-27 04:02:20 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-09-27 04:02:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	50029	104.18.86.42	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:19 UTC	598	OUT	GET /logos/static/ot_close.svg HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twint.ch/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:19 UTC	873	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:19 GMT Content-Type: image/svg+xml Content-Length: 651 Connection: close Content-MD5: pcXWFGpuVeSg/jVnYCseRg== Last-Modified: Thu, 26 Sep 2024 06:47:54 GMT ETag: 0x8DCDDF725D5272F x-ms-request-id: abcacca9-201e-00fe-5729-10afef000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 25690 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8c9898f97ec441af-EWR
2024-09-27 04:02:19 UTC	496	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 34 38 2e 33 33 33 22 20 68 65 69 67 68 74 3d 22 33 34 38 2e 33 33 33 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 34 38 2e 33 33 33 20 33 34 38 2e 33 33 34 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 35 36 35 36 35 36 22 20 64 3d 22 4d 33 33 36 2e 35 35 39 20 36 38 2e 36 31 31 4c 32 33 31 2e 30 31 36 20 31 37 34 2e 31 36 35 6c 31 30 35 2e 35 34 33 20 31 30 35 2e 35 34 39 63 31 35 2e 36 39 39 20 31 35 2e 37 30 35 20 31 35 2e 36 39 39 20 34 31 2e 31 34 35 20 30 20 35 36 2e 38 35 2d 37 2e 38 34 34 20 37 2e 38 34 34 2d 31 38 2e 31 32 38 20 31 31 2e 37 36 39 2d 32 38 2e 34 30 37 20 31 31 2e 37 36 39 2d 31 30 2e 32 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="348.333" height="348.333" viewBox="0 0 348.333 348.334"><path fill="#565656" d="M336.559 68.611L231.016 174.165l105.543 105.549c15.699 15.705 15.699 41.145 0 56.85-7.844 7.844-18.128 11.769-28.407 11.769-10.2
2024-09-27 04:02:19 UTC	155	IN	Data Raw: 34 20 31 35 2e 36 39 36 2d 31 35 2e 36 38 37 20 34 31 2e 31 32 37 2d 31 35 2e 36 38 37 20 35 36 2e 38 32 39 20 30 6c 31 30 35 2e 35 36 33 20 31 30 35 2e 35 35 34 4c 32 37 39 2e 37 32 31 20 31 31 2e 37 36 37 63 31 35 2e 37 30 35 2d 31 35 2e 36 38 37 20 34 31 2e 31 33 39 2d 31 35 2e 36 38 37 20 35 36 2e 38 33 32 20 30 20 31 35 2e 37 30 35 20 31 35 2e 36 39 39 20 31 35 2e 37 30 35 20 34 31 2e 31 34 35 2e 30 30 36 20 35 36 2e 38 34 34 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: 4 15.696-15.687 41.127-15.687 56.829 0l105.563 105.554L279.721 11.767c15.705-15.687 41.139-15.687 56.832 0 15.705 15.699 15.705 41.145.006 56.844z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	50027	104.18.86.42	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:19 UTC	719	OUT	GET /logos/c6763161-a85e-4d6f-9902-c9d4575334af/209d2df7-c2dd-4023-807a-b382cfc1c6a0/f8ae775d-1572-46f6-ab4d-b468dd952de8/MicrosoftTeams-image_(53).png HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twint.ch/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:19 UTC	871	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:19 GMT Content-Type: mage/png Content-Length: 268909 Connection: close Content-MD5: OLbBnjjsPVq6cVzQSTHoFg== Last-Modified: Mon, 04 Sep 2023 15:19:41 GMT ETag: 0x8DBAD5A5C6086B9 x-ms-request-id: 6c93a64a-c01e-000f-0de9-734fef000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 75237 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8c9898f9790842c3-EWR
2024-09-27 04:02:19 UTC	498	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 08 70 00 00 08 70 08 06 00 00 00 4f cc 5b 69 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 20 00 49 44 41 54 78 9c ec dd 4b 76 1c 47 9a 26 ec 37 75 7a 4e 8c 63 42 ec 40 da 01 b1 03 69 01 5d 45 e4 55 79 53 32 7a 54 c9 ab 42 e3 ba 24 94 29 29 2f 55 fd ff d0 a4 4a bc 1e 69 07 e0 0e a4 1d 80 03 e7 98 5c 01 7a 10 94 44 89 37 07 60 61 6e e6 f1 3c e7 f0 74 27 e1 f1 99 9d 90 9b bc e4 df 0b b3 9f 9c 9c 9c 04 00 00 00 00 00 00 00 80 e9 bc 35 f5 04 00 00 00 00 00 00 00 00 b6 9d 00 07 00 00 00 00 00 00 00 c0 c4 04 38 00 00 00 00 00 00 00 00 26 26 c0 01 00 00 00 00 00 00 00 30 31 01 0e 00 00 00 00 00 00 00 80 89 09 70 00 00 00 00 00 00 00 00 4c 4c 80 03 00 00 00 00 00 00 00 60 62 02 1c 00 00 Data Ascii: PNGIHDRppO[ipHYs%%IR$ IDATxKvG&7uzNcB@i]EUyS2zTB$))/UJi\zD7`an<t'58&&01pLL`b
2024-09-27 04:02:19 UTC	1369	IN	Data Raw: 00 80 89 09 70 00 00 00 00 00 00 00 00 4c 4c 80 03 00 00 00 00 00 00 00 60 62 02 1c 00 00 00 00 00 00 00 00 13 13 e0 00 00 00 00 00 00 00 00 98 98 00 07 00 00 00 00 00 00 00 c0 c4 04 38 00 00 00 00 00 00 00 00 26 26 c0 01 00 00 00 00 00 00 00 30 31 01 0e 00 00 00 00 00 00 00 80 89 09 70 00 00 00 00 00 00 00 00 4c 4c 80 03 00 00 00 00 00 00 00 60 62 02 1c 00 00 00 00 00 00 00 00 13 13 e0 00 00 00 00 00 00 00 00 98 98 00 07 00 00 00 00 00 00 00 c0 c4 04 38 00 00 00 00 00 00 00 00 26 26 c0 01 00 00 00 00 00 00 00 30 31 01 0e 00 00 00 00 00 00 00 80 89 09 70 00 00 00 00 00 00 00 00 4c 4c 80 03 00 00 00 00 00 00 00 60 62 02 1c 00 00 00 00 00 00 00 00 13 13 e0 00 00 00 00 00 00 00 00 98 98 00 07 00 00 00 00 00 00 00 c0 c4 04 38 00 00 00 00 00 00 00 00 26 26 c0 Data Ascii: pLL`b8&&01pLL`b8&&01pLL`b8&&
2024-09-27 04:02:19 UTC	1369	IN	Data Raw: 58 7f e7 89 31 1a dc 0d a3 b5 f0 c6 f9 4a 3d ca f7 81 8e 23 bb 74 00 00 00 40 9f 04 38 00 00 00 a0 13 3f 0a 6c ec 25 b9 f0 c3 2b 84 37 9a 1c af 62 99 67 c5 9e e6 59 98 23 c9 d1 e2 df fe 59 a0 03 00 00 00 3a 20 c0 01 00 00 00 8d 7a 76 24 ca 7b 79 65 60 e3 c7 5a 0b 70 34 78 94 c9 fc c3 1b 2f fb cb e7 03 1d 5f 2e fe ed 9f 8f 4b 8e 08 00 00 00 94 21 c0 01 00 00 00 8d 78 fc c7 ff d9 c9 3a a8 f1 6d 68 e3 e2 f8 4f b7 16 de 18 39 60 ed a3 4c e6 75 74 ca 59 0b 3d ca b3 30 47 d6 3b 74 3c 29 35 03 00 00 00 e0 ec 04 38 00 00 00 60 42 cf 1d 8b f2 5e 92 4b 67 ab b2 ed e1 8d da e3 75 1d de 78 99 87 f9 3e cc e1 b8 15 00 00 00 98 88 00 07 00 00 00 54 f6 f8 8f ff f3 ed 0e 1b ef e5 54 bb 6c bc 4c ed 9d 27 0a 0e e6 e8 94 82 8a cd e9 51 be 0d 73 fc fb 3f 7f 59 a6 28 00 00 00 Data Ascii: X1J=#t@8?l%+7bgY#Y: zv${ye`Zp4x/_.K!x:mhO9`LutY=0G;t<)58`B^Kgux>TTlL'Qs?Y(
2024-09-27 04:02:19 UTC	1369	IN	Data Raw: 52 d9 c9 c9 c7 49 56 8b 3f fd f4 c9 d4 53 01 00 00 80 e7 bd 35 f5 04 00 00 00 e0 79 c3 d5 db cb 24 c7 19 19 de 28 aa c9 66 f3 d4 13 78 89 16 8f 0d 69 72 bc 31 7c 07 55 ad d7 f8 95 24 c7 8f ff cf ff bf 9c 78 36 00 00 00 f0 03 76 e0 00 00 00 a0 09 c3 d5 db 7b 49 0e 92 bc fd fd df 56 dc 7d c3 d1 29 e3 06 ec f6 e8 94 82 13 ef 76 4e 02 51 2f 99 d3 37 49 96 8b 3f fd f4 a8 fe 64 00 00 00 e0 87 04 38 00 00 00 98 d4 70 f5 f6 6e d6 c1 8d 77 7f f8 13 47 a7 38 3a a5 d4 58 05 8b 75 3b 27 e1 8d 37 cc e9 ab ac 83 1c c7 75 26 03 00 00 00 2f 12 e0 00 00 00 60 12 c3 d5 db 3b 49 96 49 3e 7c f1 a7 73 0e 6f 24 76 df 68 30 2c 52 bd 54 ed 40 49 c5 1b aa c5 77 4d e3 e7 f4 51 92 83 c5 9f 7e fa 64 83 b3 01 00 00 80 97 12 e0 00 00 00 a0 ba e1 ea ed fd ac 77 dd b8 f0 f2 2b 1c 9d 52 Data Ascii: RIV?S5y$(fxir1\|U$x6v{IV})vNQ/7I?d8pnwG8:Xu;'7u&/`;II>\|so$vh0,RT@IwMQ~dw+R
2024-09-27 04:02:19 UTC	1369	IN	Data Raw: 97 1a 05 00 00 80 76 09 70 00 00 00 cc dc 70 ed f6 4e 92 65 92 0f 8b 14 2c b8 53 80 f0 46 49 73 0e 6f 14 2c 26 bc 31 4e 8b ef 8b 66 bd ce df 58 e8 a3 24 07 8b 83 9f 3f 29 35 22 00 00 00 ed 11 e0 00 00 00 98 b1 e1 da ed fd 24 07 49 2e 14 2b ba f5 47 a7 d4 fe ad fc 82 83 39 3a a5 a0 9a 73 12 de 98 77 78 63 74 b1 a7 49 96 8b 83 9f 1f 96 1c 19 00 00 80 76 08 70 00 00 00 cc d0 70 ed f6 5e d6 c1 8d b7 8b 16 76 74 4a ec be d1 60 58 a4 7a a9 19 ef be d1 e2 7b a2 d9 af f1 53 17 fb 26 eb 20 c7 51 c9 59 00 00 00 30 3d 01 0e 00 00 80 19 19 ae dd de cd 3a b8 f1 6e f1 e2 8e 4e 89 f0 46 ed f1 84 37 ec be 91 99 ef b0 73 ae 42 5f 65 1d e4 38 2e 33 17 00 00 00 a6 26 c0 01 00 00 30 03 c3 b5 db 3b 49 96 cf fe 94 3b 2e e5 79 8e 4e 29 7a 59 19 73 0e 6f 14 2c d6 ed 9c 84 37 e6 Data Ascii: vppNe,SFIso,&1NfX$?)5"$I.+G9:swxctIvpp^vtJ`Xz{S& QY0=:nNF7sB_e8.3&0;I;.yN)zYso,7
2024-09-27 04:02:19 UTC	1369	IN	Data Raw: 1c e7 4c e1 8d ca 9a 0c 94 cc bd b1 3b 46 83 73 6a 2d bc 51 54 b7 5f 26 a3 f8 e7 3b ca f9 a7 7d 25 c9 f1 e3 3f fc d7 f2 fc 93 01 00 00 c0 0e 1c 00 00 00 e7 30 5c bf b3 97 e4 20 c9 db 2f bd a0 c9 b0 44 99 8b 8a ed be 21 bc 31 6e c0 da 3b 05 74 bb 33 41 e5 62 4d ae f1 06 df f5 cc 7a 9d 6f d5 d1 29 af 2b f4 4d 92 e5 e2 cf bf 3c 2a 55 15 00 00 60 db 08 70 00 00 00 9c c1 70 fd ce 6e d6 c1 8d 77 5f 79 51 93 8d dd 32 17 f5 7b 74 4a ed 63 43 0a 0e 56 b3 d9 dc 6d 50 a2 72 31 47 a7 8c 33 eb f0 46 c1 62 7d 87 37 9e f7 55 d6 41 8e e3 52 23 00 00 00 6c 0b 01 0e 00 00 80 53 18 ae df d9 49 b2 4c f2 e1 6b 2f 9c 71 78 23 b1 fb 46 59 0d ee 14 d0 ed ce 04 55 0b 35 ba ce 1b 7c cf d3 5a 48 ab db f0 c6 14 e3 9d ab d8 47 49 0e 16 7f fe e5 93 92 a3 01 00 00 cc 99 00 07 00 00 c0 Data Ascii: L;Fsj-QT_&;}%?0\ /D!1n;t3AbMzo)+M<*U`ppnw_yQ2{tJcCVmPr1G3Fb}7UAR#lSILk/qx#FYU5\|ZHGI
2024-09-27 04:02:19 UTC	1369	IN	Data Raw: bc 8a c5 a6 59 4f 0f b3 0e 72 7c 5d ba 30 00 00 40 0d 02 1c 00 00 40 77 9e 1d 97 72 90 e4 f2 eb af ec b4 11 57 74 28 47 a7 d4 d5 60 b3 b9 db a0 44 d5 42 c2 1b 63 cd 7a 9d 77 7a 3f 75 1b de 28 38 de 8b 3e cf 3a c8 e1 58 15 00 00 a0 2b 6f 4d 3d 01 00 00 80 d3 18 ae df 5d 26 39 4e ad f0 c6 68 0d 36 5a 6b 1f 9d 52 55 9f df 77 f5 f1 7c 4d e3 08 6f 8c 33 eb f0 46 41 2d de 4f a3 34 f8 cf f7 ec 2e 27 39 7e fc c1 3f 96 9b 1c 04 00 00 a0 34 3b 70 00 00 00 5d 18 ae df dd 4b 72 98 e4 e2 b8 4f 74 bd 05 7c 81 e1 2a 87 37 34 76 c7 0d e8 e8 94 f6 e6 34 fd 4e 01 2f 19 aa c1 77 35 b3 5f e3 9d de 4f dd 7e 07 55 ef a7 47 39 39 d9 5f 7c f2 fe 51 cd 41 01 00 00 ce 42 80 03 00 00 68 da 70 fd ee 6e d6 c1 8d 4b e3 3f d5 69 23 ae e8 50 8e 4e a9 ab c1 66 73 6b 41 89 a2 a5 3a 3d ea Data Ascii: YOr\|]0@@wrWt(G`DBczwz?u(8>:X+oM=]&9Nh6ZkRUw\|Mo3FA-O4.'9~?4;p]KrOt\|*74v4N/w5_O~UG99_\|QABhpnK?i#PNfskA:=
2024-09-27 04:02:19 UTC	1369	IN	Data Raw: 7b 99 fd 1a ef 74 e7 89 6e bf 03 e1 8d 97 cc e9 a3 24 07 8b 4f 7f fd 64 82 d9 00 00 00 9d 12 e0 00 00 00 46 1b 6e dc db 4f b2 4a 4e 2e be f1 e2 6e 9b 50 05 c7 2b 3a 94 a3 53 ea 6a b0 d9 dc 6d 50 a2 6a 21 cd e6 b1 66 bd c3 4e a7 f7 93 e7 e6 c8 a1 ba 5a 4f 8f 92 ac 16 9f fe fa b0 de 64 00 00 80 9e 09 70 00 00 00 6f 34 dc b8 b7 97 64 95 e4 92 46 5c 61 5b bf fb 46 a7 47 a7 74 1b de 28 58 ac db 39 09 6f cc 3b a4 d5 f1 33 c3 77 30 4e 9f 6b ea 61 d6 41 8e a3 cd 4f 06 00 00 e8 99 00 07 00 00 f0 4a cf 8e 4b 39 48 72 f9 fb bf d5 88 2b 66 eb c3 1b 89 dd 37 84 37 ec 14 50 d9 ec d7 78 a7 61 20 cf cd 71 fa 5f 53 9f 27 59 3a 56 05 00 00 78 95 b7 a6 9e 00 00 00 d0 a6 e1 c6 bd 55 92 e3 4c 16 de 28 a8 c9 26 54 b1 8b ca 99 7d 63 77 8c 16 e7 54 4a 8b 13 6f f0 9e a3 20 ff 7c Data Ascii: {tn$OdFnOJN.nP+:SjmPj!fNZOdpo4dF\a[FGt(X9o;3w0NkaAOJK9Hr+f77Pxa q_S'Y:VxUL(&T}cwTJo \|
2024-09-27 04:02:19 UTC	1369	IN	Data Raw: dc 1c c7 9a 4a 85 35 f5 28 c9 fe e2 b3 df 1c 9d ab 0a 00 00 50 85 00 07 00 00 34 6e b8 71 6f 37 c9 41 92 77 cb 57 d7 88 2b a6 e0 9c 1c 9d 52 52 83 f7 78 b7 8d dd aa 85 1a 5d e7 0d be 43 71 74 4a c1 52 db 1e 88 b2 9e 66 fe dc fc 2a 39 59 2e 3e fb ed 71 b1 8a 00 00 40 71 02 1c 00 00 d0 a8 e1 c6 bd 9d 24 cb 24 1f 6e 66 04 8d b8 62 0a ee 14 20 bc 51 d2 9c c3 1b 05 8b 75 3b 27 cd e6 79 af f3 8e 9f 19 ad 7d 07 76 b3 19 67 d6 eb e9 07 c5 3e 4a 72 b0 f8 ec b7 4f 4a 56 07 00 00 ca 10 e0 00 00 80 06 0d 37 ee ed 67 bd eb c6 85 cd 8d a2 11 57 cc d6 1f 9d 52 3b 0c 54 70 30 47 a7 14 a4 d9 5c d5 f6 34 9b 2b 94 99 71 78 63 74 29 81 a8 79 3f 37 5f 28 f4 34 c9 72 f1 d9 6f 0f 4b 8d 00 00 00 94 21 c0 01 00 00 0d 19 6e dc db cb 3a b8 f1 f6 66 47 d2 88 2b c6 d1 29 b1 fb c6 e4 Data Ascii: J5(P4nqo7AwW+RRx]CqtJRf*9Y.>q@q$$nfb Qu;'y}vg>JrOJV7gWR;Tp0G\4+qxct)y?7_(4roK!n:fG+)
2024-09-27 04:02:19 UTC	1369	IN	Data Raw: 11 57 b0 58 93 6b bc c1 f7 21 b3 5e e7 1d 3f 33 5a fb 0e ec 66 33 ce ac d7 53 c1 62 75 e6 f4 30 c9 72 f1 d7 df 7d 5d 72 34 00 00 98 23 01 0e 00 00 78 8d 67 c7 a5 1c 24 b9 7c ea 0f cf ba 71 d0 71 23 ae d8 70 73 3e 3a a5 76 18 a8 e0 60 8e 4e 29 48 b3 b9 aa 59 3f 33 0a 16 db f6 f0 c6 e8 52 02 51 f3 7e 6e 76 7b 8f 7f 9e 75 90 c3 b1 2a 00 00 f0 0a 6f 4d 3d 01 00 00 68 d5 70 f3 fe 2a c9 71 84 37 36 a7 c9 26 54 b1 8b ca 69 b2 31 36 f5 04 5e a2 c5 c6 58 93 e3 8d e1 3b a8 6a f6 cf 8c 16 03 4a 0d 8e 37 86 67 d4 38 4d ce a9 b9 42 53 cc e9 72 92 e3 c7 bf f9 74 55 6a 64 00 00 98 1b 3b 70 00 00 c0 8f 0c 37 ef ef 25 39 4c 72 f1 cc 45 5a fb ad cf ae 1b 71 35 7f 2b bf dc 85 8e 4e 29 a9 c1 7b 5c 23 ae 60 29 cd e6 79 af f3 4e ef 27 cf cd 91 43 59 4f 4d 3e a3 2a 96 39 47 b1 Data Ascii: WXk!^?3Zf3Sbu0r}]r4#xg$\|qq#ps>:v`N)HY?3RQ~nv{uoM=hpq76&Ti16^X;jJ7g8MBSrtUjd;p7%9LrEZq5+N){\#`)yN'CYOM>*9G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	50031	104.18.86.42	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:19 UTC	713	OUT	GET /logos/c6763161-a85e-4d6f-9902-c9d4575334af/3c138d7e-9ef4-4168-8713-9b0f422d7140/328b026b-df30-40ce-be3e-cf9ec7a8cf13/twint_logo_q_pos_bg.png HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twint.ch/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:19 UTC	870	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:19 GMT Content-Type: mage/png Content-Length: 54603 Connection: close Content-MD5: PN4AlZMi3w4ZEt0TOurKfg== Last-Modified: Thu, 31 Aug 2023 13:14:08 GMT ETag: 0x8DBAA2428BAEBE9 x-ms-request-id: 0936b8de-e01e-0037-1cc3-13eb2f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 75237 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8c9898f98e6142f8-EWR
2024-09-27 04:02:19 UTC	499	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 09 45 00 00 03 83 08 06 00 00 00 91 99 f2 98 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 20 00 49 44 41 54 78 da ec dd cd 72 1b 59 7e e6 e1 3f d4 6d 77 db ed 19 64 47 cc b4 7b 22 3c 91 39 bb de 11 77 90 d9 57 40 de 01 e1 2b d0 b9 03 1d dd c1 d9 79 a9 e4 ce 3b 53 3b ef 98 d8 79 57 e0 15 10 f0 62 1c 63 3b c6 c8 71 b8 ba fa c3 cd 59 a8 4a 55 a5 92 54 92 8a 1f 40 e2 79 22 18 14 05 81 a2 7e 60 28 14 d5 6f 9f 33 bb bd bd 8d fb 34 9b cd aa 88 e8 22 62 f1 e5 fb 2a 22 4e 02 00 00 00 00 00 00 00 00 38 06 ab 88 d8 45 c4 3a 22 86 db db db e1 be 7f c3 d9 7d 8c a2 66 b3 59 13 11 67 11 b1 0c 03 28 00 00 00 00 00 00 00 00 e0 db 5e 46 c4 65 44 5c de de de ee ee fa 93 df e9 28 6a 36 9b 9d 45 44 Data Ascii: PNGIHDREpHYs.#.#x?v IDATxrY~?mwdG{"<9wW@+y;S;yWbc;qYJUT@y"~`(o34"b*"N8E:"}fYg(^FeD\(j6ED
2024-09-27 04:02:19 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 60 4f 7c d0 89 51 ef 1d 45 cd 66 b3 b3 88 f8 3b 2d 01 00 00 00 00 00 00 00 80 3d f1 bd c3 a8 77 8e a2 66 b3 d9 22 22 86 78 75 f4 14 00 00 00 00 00 00 00 00 c0 be d8 46 c4 e2 f6 f6 76 f7 b6 07 9f bc e7 89 7d 18 44 01 00 00 00 00 00 00 00 00 fb a7 8e 57 fb a6 b7 7a eb 28 6a 36 9b 95 88 38 d1 0e 00 00 00 00 00 00 00 00 d8 53 a7 b3 d9 2c bd ed 81 ef 5c 9f f7 e5 b5 79 9f 69 06 00 00 00 00 00 00 00 00 ec b9 31 22 9a 37 af d1 7b db 49 51 45 2b 00 00 00 00 00 00 00 00 e0 00 cc e3 2d 7b a7 6f 9d 14 35 9b cd 96 11 f1 42 2b 00 00 00 00 00 00 00 00 e0 80 fc af db db db cd 57 1f bc 79 52 54 d6 07 00 00 00 00 00 00 00 00 38 30 f9 9b 1f bc 3e 29 6a 36 9b 9d 45 c4 df e9 03 00 00 00 00 00 00 00 00 1c a0 d7 a7 45 7d f3 a4 a8 a4 0b 00 00 00 00 00 00 00 00 Data Ascii: `O\|QEf;-=wf""xuFv}DWz(j68S,\yi1"7{IQE+-{o5B+WyRT80>)j6EE}
2024-09-27 04:02:19 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 c0 a4 18 45 01 00 00 00 00 00 00 00 00 93 62 14 05 00 00 00 00 00 00 00 00 4c 8a 51 14 00 00 00 00 00 00 00 00 30 29 46 51 00 00 00 00 00 00 00 00 c0 a4 18 45 01 00 00 00 00 00 00 00 00 93 62 14 05 00 00 00 00 00 00 00 00 4c ca 8f 25 00 e0 90 35 4d 13 5d d7 c5 62 b1 88 c5 62 11 4d d3 44 5d d7 ef fc f5 e3 38 c6 7a bd 8e cd 66 13 eb f5 3a 86 61 88 f5 7a 2d 24 00 00 00 00 00 00 c0 84 cc 22 e2 56 06 00 0e 49 d3 34 91 52 8a b3 b3 b3 f7 0e a0 3e d4 38 8e 71 79 79 19 7d df c7 30 0c 02 03 00 00 00 00 00 00 1c 38 a3 28 00 0e 46 d7 75 91 73 8e b6 6d ef ed f7 d8 6e b7 91 73 8e be ef 05 07 00 00 00 00 00 00 38 50 46 51 00 ec bd a6 69 a2 ef fb 7b 1d 43 bd 69 bb dd c6 72 b9 74 72 14 00 00 00 00 00 00 c0 01 7a 22 01 00 fb aa aa aa 28 a5 c4 cd cd cd 83 Data Ascii: EbLQ0)FQEbL%5M]bbMD]8zf:az-$"VI4R>8qyy}08(Fusmns8PFQi{Cirtrz"(
2024-09-27 04:02:19 UTC	1369	IN	Data Raw: b6 6d c5 e0 a3 8c e3 18 29 a5 e8 fb 5e 0c 00 00 00 00 00 00 60 52 9e 48 00 70 98 9a a6 89 be ef e3 ea ea ca 20 8a 4f 32 9f cf e3 c5 8b 17 31 0c 43 74 5d 27 08 00 00 00 00 00 00 30 19 4e 8a 02 38 30 55 55 45 4a 29 52 4a ae ca e3 4e 5d 5c 5c 44 ce 39 36 9b 8d 18 00 00 00 00 00 00 c0 41 33 8a 02 38 20 67 67 67 51 4a 89 ba ae c5 e0 5e 8c e3 18 a5 94 c8 39 8b 01 00 00 00 00 00 00 1c 2c a3 28 80 03 b0 58 2c a2 94 e2 9a 3c 1e cc 76 bb 8d 94 52 5c 5e 5e 8a 01 00 00 00 00 00 00 1c 1c a3 28 80 3d 56 55 55 94 52 e2 fc fc 5c 0c 1e c5 6a b5 8a 94 52 ac d7 6b 31 00 00 00 00 00 00 80 83 61 14 05 b0 a7 72 ce 91 52 8a f9 7c 2e 06 8f ee e2 e2 22 52 4a b1 db ed c4 00 00 00 00 00 00 00 f6 9e 51 14 c0 9e e9 ba 2e fa be 8f ba ae c5 60 af 8c e3 18 39 e7 28 a5 88 01 00 00 00 00 Data Ascii: m)^`RHp O21Ct]'0N80UUEJ)RJN]\\D96A38 gggQJ^9,(X,<vR\^^(=VUUR\jRk1arR\|."RJQ.`9(
2024-09-27 04:02:19 UTC	1369	IN	Data Raw: 00 00 00 00 00 07 ca 28 0a 38 08 5d d7 45 29 25 4e 4e 4e c4 00 ee dd 38 8e 91 52 8a be ef c5 00 00 00 00 00 00 80 03 e4 fa 3c 60 af 35 4d 13 7d df c7 d5 d5 95 41 14 f0 60 e6 f3 79 bc 78 f1 22 86 61 88 ae eb 04 01 00 00 00 00 00 80 03 e3 a4 28 60 2f 55 55 15 29 a5 48 29 b9 2a 0f 78 74 17 17 17 91 73 8e cd 66 23 06 00 00 00 00 00 00 1c 00 a3 28 60 ef 2c 97 cb c8 39 47 5d d7 62 00 7b 63 1c c7 28 a5 44 29 25 76 bb 9d 20 00 00 00 00 00 00 b0 c7 8c a2 80 bd b1 58 2c a2 94 12 6d db 8a 01 ec ad ed 76 1b 29 a5 b8 bc bc 14 03 00 00 00 00 00 00 f6 94 51 14 f0 e8 aa aa 8a 52 4a 9c 9f 9f 8b 01 1c 8c d5 6a 15 29 a5 58 af d7 62 00 00 00 00 00 00 c0 9e 31 8a 02 1e 55 ce 39 52 4a 31 9f cf c5 00 0e d2 c5 c5 45 a4 94 5c a9 07 00 00 00 00 00 00 7b c4 28 0a 78 14 67 67 67 51 Data Ascii: (8]E)%NNN8R<`5M}A`yx"a(`/UU)H)*xtsf#(`,9G]b{c(D)%v X,mv)QRJj)Xb1U9RJ1E\{(xgggQ
2024-09-27 04:02:19 UTC	1369	IN	Data Raw: 8a 61 18 a2 69 1a 41 00 00 00 00 00 00 38 18 4e 8a 82 3d b4 5c 2e a3 94 12 f3 f9 5c 0c 00 f6 c6 f3 e7 cf a3 94 12 bb dd 4e 0c 00 00 00 00 00 00 f6 9a 51 14 ec 91 ae eb a2 94 12 27 27 27 62 00 b0 97 c6 71 8c 94 52 f4 7d 2f 06 00 00 00 00 00 00 7b cb 28 0a f6 40 d3 34 51 4a 89 d3 d3 53 31 00 38 08 d7 d7 d7 91 52 8a 61 18 c4 00 00 00 00 00 00 60 ef 18 45 c1 23 aa aa 2a 52 4a 91 52 72 55 1e 00 07 e9 e2 e2 22 72 ce b1 d9 6c c4 00 00 00 00 00 00 60 6f 18 45 c1 23 59 2e 97 91 73 8e ba ae c5 00 e0 a0 8d e3 18 a5 94 28 a5 c4 6e b7 13 04 00 00 00 00 00 80 47 67 14 05 0f ac eb ba c8 39 47 db b6 62 00 30 29 db ed 36 72 ce d1 f7 bd 18 00 00 00 00 00 00 3c 2a a3 28 78 20 55 55 45 29 25 ce cf cf c5 00 60 d2 56 ab 55 a4 94 62 bd 5e 8b 01 00 00 00 00 00 c0 a3 30 8a 82 07 Data Ascii: aiA8N=\.\NQ'''bqR}/{(@4QJS18Ra`E#RJRrU"rl`oE#Y.s(nGg9Gb0)6r<(x UUE)%`VUb^0
2024-09-27 04:02:19 UTC	1369	IN	Data Raw: 94 12 37 37 37 06 51 00 c0 c1 a8 eb 3a ae ae ae 62 18 86 68 9a 46 10 00 00 00 00 00 80 3d e3 a4 28 1e cd d9 d9 59 f4 7d 1f f3 f9 5c 0c 00 e0 a0 3d 7f fe 3c 72 ce 42 00 00 00 00 00 00 ec 09 a3 28 1e 45 df f7 71 7e 7e 2e 04 00 30 19 d7 d7 d7 d1 75 5d ec 76 3b 31 00 00 00 00 00 00 1e 99 51 14 0f aa aa aa 18 86 21 4e 4e 4e c4 00 00 26 67 1c c7 e8 ba 2e d6 eb b5 18 00 00 00 00 00 00 8f e8 89 04 3c 14 83 28 00 60 ea e6 f3 79 0c c3 10 8b c5 42 0c 00 00 00 00 00 80 47 64 14 c5 83 30 88 02 00 8e 85 61 14 00 00 00 00 00 c0 e3 73 7d 1e 0f 62 18 86 68 db 56 08 00 e0 68 8c e3 18 4d d3 c4 6e b7 13 03 00 00 00 00 00 e0 81 39 29 8a 7b 57 4a 31 88 02 00 8e ce 57 27 46 01 00 00 00 00 00 f0 f0 7e 14 11 59 06 ee 4b d7 75 f1 37 7f f3 37 42 00 00 47 e9 97 bf fc 65 cc 66 33 e3 Data Ascii: 777Q:bhF=(Y}\=<rB(Eq~~.0u]v;1Q!NNN&g.<(`yBGd0as}bhVhMn9){WJ1W'F~YKu77BGef3
2024-09-27 04:02:19 UTC	1369	IN	Data Raw: 0c 99 de 7c fe ec 3b 4f 79 db a0 ea 3d 23 ab 2f 3f cf fc 4f 9e c4 d9 5f fd ec d5 40 ea 7f 1a 48 7d 92 7f bb 8c d8 7d 39 86 7a df 69 50 ef 7a 2d 3e e5 d7 de e5 30 ea 7d 3f f7 a3 f9 d7 e3 a8 ff 6e 20 05 bc 9d 51 14 00 00 00 b0 af be 1a 37 7d 35 7a fa e6 d8 69 b1 58 c4 7c 3e 7f f0 af 69 bb dd c6 66 b3 89 88 af c7 53 5f 8d a6 fc 37 16 00 e0 6d 8c a2 b8 33 46 51 44 bc ba 1a af ff c7 ff 88 fe 1f 3f 8f f1 f7 ff f9 8e 6f 96 f7 fc e4 f7 8c 9a de fd b9 1e e6 b4 a8 ef 7c 1d b7 11 f3 3f 99 c5 d9 ff fc 8b 78 fa ab ca 15 7b df e7 f3 75 c4 ff 29 1f 3e 84 7a ef 5f 3a 9f f8 f8 87 0e a1 de f5 d8 fb 7e ee 6d bf e6 47 f3 88 5f 2e 23 fe c7 32 e2 bf b8 62 0f f8 9a 51 14 c0 ff 67 ef 5e 9f dc ba ef 3b cf 7f 9a 22 45 89 94 04 88 a2 64 c9 b2 0d c8 97 58 b6 e5 00 76 32 76 6e 33 80 Data Ascii: \|;Oy=#/?O_@H}}9ziPz->0}?n Q7}5ziX\|>ifS_7m3FQD?o\|?x{u)>z_:~mG_.#2bQg^;"EdXv2vn3
2024-09-27 04:02:19 UTC	1369	IN	Data Raw: bb cd 09 0e 49 52 b1 58 54 bb dd d6 70 38 d4 8b 2f be 48 20 2a a1 56 57 57 f5 e2 8b 2f 6a 38 1c aa dd 6e ab 58 2c 32 28 09 d2 6e b7 f9 b7 85 0f 3e 52 fc 01 c4 85 50 14 80 bb ff a1 74 75 47 d5 ad 4b 3a fd ea 87 bb 1b 8c 03 25 41 82 51 01 d3 27 a1 03 35 11 93 38 01 ef be fe db 27 b2 bf 40 ae f7 a5 97 aa d2 5b a7 cd c7 6a 65 41 cf 2d e8 73 98 47 65 ab 15 97 fb c6 f1 dc 2e 9e 95 fe ae 2a bd c3 5f 1c 01 00 00 60 b9 f8 2b f8 bb 1a 8d 06 83 90 b0 f9 28 14 0a 73 39 76 b3 d9 64 80 13 a4 58 2c aa 52 a9 30 10 5c 93 81 4c 2a 97 cb ea 76 bb ba 72 e5 8a d6 d7 d7 69 93 97 12 a5 52 49 eb eb eb ba 72 e5 8a ba dd ae ca e5 32 83 02 00 40 42 10 8a 02 20 49 ea bc f6 91 be b1 75 49 83 ab 3b e1 0e b0 32 8f 10 d2 fc 13 35 76 e4 e7 28 55 1e 3e aa e6 e7 1f ca f6 02 79 b3 bd 5b 1d Data Ascii: IRXTp8/H VWW/j8nX,2(n>RPtuGK:%AQ'58'@[jeA-sGe._`+(s9vdX,R0\L*vriRIr2@B IuI;25v(U>y[
2024-09-27 04:02:19 UTC	1369	IN	Data Raw: 17 5f a4 55 1e 02 5b 5f 5f 57 bf df a7 32 25 00 00 31 22 14 05 64 98 71 20 6a 25 45 2f 2a 48 0b bd 39 3c 78 e9 f8 61 b5 be 9c 91 5f 66 a7 81 a8 c9 78 fe 6b 63 25 61 eb 65 99 8f b9 a8 e7 f4 ab b3 d2 8f 9a 5c 08 01 00 00 30 37 54 2a d9 55 2a 95 68 77 b2 24 cb 08 28 15 0a 05 82 70 4b 42 28 6a d7 60 30 90 65 59 0c 04 90 40 54 87 42 1c 2a 95 8a 7a bd 9e 5a 2d fe e8 15 00 80 38 10 8a 02 32 2a 70 85 a8 a0 6d f4 8c 2a e5 ac 18 3e ee 9c 5a e8 05 dc dd 36 38 ce fa 33 27 b2 b1 40 e2 aa 10 b5 6c 49 0a 6d 25 31 40 36 3c 2f fd b0 c9 05 11 00 00 00 73 41 a5 92 bb 08 6b 2c 5e b9 5c 56 a5 52 59 ca 63 13 8a e2 3c e3 da 0b 60 56 a7 d3 a1 3a 14 62 53 28 14 74 e6 cc 19 f5 7a 3d 15 8b 45 06 04 00 80 08 08 45 01 19 14 ba 65 de 4a 0e 06 27 c2 6b ac 3d 76 9f 9a 4f 3d 98 fe 31 b8 Data Ascii: _U[__W2%1"dq j%E/H9<xa_fxkc%ae\07TUhw$(pKB(j`0eY@TBzZ-82pm>Z683'@lIm%1@6</sAk,^\VRYc<`V:bS(tz=EEeJ'k=vO=1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	50030	104.18.86.42	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:19 UTC	605	OUT	GET /logos/static/powered_by_logo.svg HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twint.ch/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:19 UTC	874	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:19 GMT Content-Type: image/svg+xml Content-Length: 5194 Connection: close Content-MD5: Y+c301RBZNK39PvKQWrIBw== Last-Modified: Tue, 24 Sep 2024 06:41:31 GMT ETag: 0x8DCDC63ED2B599A x-ms-request-id: 103bc9ec-301e-0026-47bd-0e083e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 35940 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8c9898f98efb41a1-EWR
2024-09-27 04:02:19 UTC	495	IN	Data Raw: 3c 73 76 67 20 68 65 69 67 68 74 3d 22 31 36 22 20 77 69 64 74 68 3d 22 31 33 36 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 36 20 31 34 2e 36 22 3e 3c 64 65 66 73 3e 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 61 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 64 3d 22 4d 35 33 2e 37 36 20 30 48 31 33 36 76 31 34 2e 36 48 35 33 2e 37 36 7a 22 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 31 32 2e 33 56 35 2e 35 39 68 32 2e 32 37 61 32 2e 36 32 20 32 2e 36 32 20 30 20 30 31 31 2e 32 39 2e 32 38 20 31 2e 38 33 20 31 2e 38 33 20 Data Ascii: <svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83
2024-09-27 04:02:19 UTC	1369	IN	Data Raw: 31 38 48 2e 38 31 76 36 7a 6d 37 2e 37 34 2e 31 61 32 2e 32 39 20 32 2e 32 39 20 30 20 30 31 2d 31 2e 32 2d 2e 33 32 20 32 2e 32 39 20 32 2e 32 39 20 30 20 30 31 2d 2e 38 2d 2e 39 31 20 33 2e 30 36 20 33 2e 30 36 20 30 20 30 31 2d 2e 32 38 2d 31 2e 33 36 20 33 2e 30 37 20 33 2e 30 37 20 30 20 30 31 2e 32 38 2d 31 2e 33 37 20 32 2e 31 34 20 32 2e 31 34 20 30 20 30 31 32 2d 31 2e 32 34 20 32 2e 31 34 20 32 2e 31 34 20 30 20 30 31 32 20 31 2e 32 34 41 33 2e 30 37 20 33 2e 30 37 20 30 20 30 31 31 30 20 39 2e 38 31 61 33 2e 30 36 20 33 2e 30 36 20 30 20 30 31 2d 2e 32 39 20 31 2e 33 36 20 32 2e 31 31 20 32 2e 31 31 20 30 20 30 31 2d 32 20 31 2e 32 33 7a 6d 30 2d 2e 36 39 61 31 2e 33 31 20 31 2e 33 31 20 30 20 30 30 2e 38 35 2d 2e 32 37 20 31 2e 36 20 31 2e 36 Data Ascii: 18H.81v6zm7.74.1a2.29 2.29 0 01-1.2-.32 2.29 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6
2024-09-27 04:02:19 UTC	1369	IN	Data Raw: 30 31 2d 2e 32 38 2d 31 2e 33 36 41 33 2e 32 34 20 33 2e 32 34 20 30 20 30 31 32 37 20 38 2e 34 36 61 32 2e 31 38 20 32 2e 31 38 20 30 20 30 31 2e 38 2d 2e 39 32 41 32 2e 30 35 20 32 2e 30 35 20 30 20 30 31 32 39 20 37 2e 32 61 32 2e 35 34 20 32 2e 35 34 20 30 20 30 31 2e 37 37 2e 31 33 20 31 2e 39 20 31 2e 39 20 30 20 30 31 2e 37 2e 34 33 20 31 2e 39 34 20 31 2e 39 34 20 30 20 30 31 2e 35 2e 37 37 20 33 2e 31 39 20 33 2e 31 39 20 30 20 30 31 2e 31 39 20 31 2e 31 39 56 31 30 68 2d 33 2e 38 35 76 2d 2e 36 32 68 33 2e 30 39 61 31 2e 35 35 20 31 2e 35 35 20 30 20 30 30 2d 2e 31 37 2d 2e 37 36 20 31 2e 32 38 20 31 2e 32 38 20 30 20 30 30 2d 2e 34 37 2d 2e 35 33 41 31 2e 33 35 20 31 2e 33 35 20 30 20 30 30 32 39 20 37 2e 39 61 31 2e 33 39 20 31 2e 33 39 20 30 Data Ascii: 01-.28-1.36A3.24 3.24 0 0127 8.46a2.18 2.18 0 01.8-.92A2.05 2.05 0 0129 7.2a2.54 2.54 0 01.77.13 1.9 1.9 0 01.7.43 1.94 1.94 0 01.5.77 3.19 3.19 0 01.19 1.19V10h-3.85v-.62h3.09a1.55 1.55 0 00-.17-.76 1.28 1.28 0 00-.47-.53A1.35 1.35 0 0029 7.9a1.39 1.39 0
2024-09-27 04:02:19 UTC	1369	IN	Data Raw: 20 30 20 30 30 2e 31 37 20 31 20 31 2e 35 20 31 2e 35 20 30 20 30 30 2e 34 39 2e 36 38 20 31 2e 33 39 20 31 2e 33 39 20 30 20 30 30 31 2e 35 39 20 30 20 31 2e 34 36 20 31 2e 34 36 20 30 20 30 30 2e 34 39 2d 2e 36 39 20 32 2e 35 35 20 32 2e 35 35 20 30 20 30 30 2e 31 37 2d 31 20 32 2e 35 39 20 32 2e 35 39 20 30 20 30 30 2d 2e 31 36 2d 2e 39 35 20 31 2e 34 35 20 31 2e 34 35 20 30 20 30 30 2d 2e 34 39 2d 2e 36 38 41 31 2e 32 39 20 31 2e 32 39 20 30 20 30 30 34 33 20 37 2e 39 61 31 2e 33 36 20 31 2e 33 36 20 30 20 30 30 2d 2e 37 39 2e 32 33 20 31 2e 34 37 20 31 2e 34 37 20 30 20 30 30 2d 2e 34 38 2e 36 37 20 32 2e 36 38 20 32 2e 36 38 20 30 20 30 30 2d 2e 31 38 2e 39 38 7a 6d 35 2e 31 38 20 34 2e 34 61 31 2e 39 20 31 2e 39 20 30 20 30 31 2d 2e 33 35 20 30 6c Data Ascii: 0 00.17 1 1.5 1.5 0 00.49.68 1.39 1.39 0 001.59 0 1.46 1.46 0 00.49-.69 2.55 2.55 0 00.17-1 2.59 2.59 0 00-.16-.95 1.45 1.45 0 00-.49-.68A1.29 1.29 0 0043 7.9a1.36 1.36 0 00-.79.23 1.47 1.47 0 00-.48.67 2.68 2.68 0 00-.18.98zm5.18 4.4a1.9 1.9 0 01-.35 0l
2024-09-27 04:02:19 UTC	592	IN	Data Raw: 38 2e 34 37 61 32 2e 37 36 20 32 2e 37 36 20 30 20 30 31 32 2e 37 37 20 32 2e 39 33 68 2d 35 2e 36 43 38 31 20 35 2e 34 36 20 38 32 20 34 2e 34 36 20 38 33 2e 35 34 20 34 2e 34 36 7a 4d 31 30 35 2e 35 38 20 33 76 32 2e 33 35 63 2d 2e 37 38 20 30 2d 31 2e 30 39 2d 2e 30 37 2d 31 2e 33 36 2d 2e 30 37 2d 31 2e 36 35 20 30 2d 32 2e 37 31 2e 37 32 2d 33 2e 30 36 20 32 2e 37 38 61 37 2e 38 35 20 37 2e 38 35 20 30 20 30 30 2d 2e 30 39 20 31 2e 31 39 76 35 2e 31 34 68 2d 32 2e 33 33 56 33 68 32 2e 31 32 76 33 2e 35 38 61 31 34 2e 39 20 31 34 2e 39 20 30 20 30 31 2e 37 39 2d 32 41 32 2e 35 39 20 32 2e 35 39 20 30 20 30 31 31 30 34 20 33 7a 6d 32 37 2e 34 39 20 38 2e 38 35 63 30 20 2e 37 35 2e 32 37 20 31 20 31 20 31 68 31 2e 39 31 76 31 2e 34 39 68 2d 32 2e 37 32 Data Ascii: 8.47a2.76 2.76 0 012.77 2.93h-5.6C81 5.46 82 4.46 83.54 4.46zM105.58 3v2.35c-.78 0-1.09-.07-1.36-.07-1.65 0-2.71.72-3.06 2.78a7.85 7.85 0 00-.09 1.19v5.14h-2.33V3h2.12v3.58a14.9 14.9 0 01.79-2A2.59 2.59 0 01104 3zm27.49 8.85c0 .75.27 1 1 1h1.91v1.49h-2.72

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	50028	104.18.86.42	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:19 UTC	569	OUT	GET /logos/static/ot_guard_logo.svg HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.twint.ch Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.twint.ch/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:19 UTC	872	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:19 GMT Content-Type: image/svg+xml Content-Length: 497 Connection: close Content-MD5: tXyZydHjxQshFMbbBT1/8A== Last-Modified: Thu, 26 Sep 2024 06:47:53 GMT ETag: 0x8DCDDF7258281FF x-ms-request-id: 84a8a027-d01e-0101-6903-10d422000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 9380 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8c9898f9f8a64392-EWR
2024-09-27 04:02:19 UTC	497	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 6f 74 2d 66 6c 6f 61 74 69 6e 67 2d 62 75 74 74 6f 6e 5f 5f 73 76 67 2d 66 69 6c 6c 22 20 64 3d 22 4d 31 34 2e 35 38 38 20 30 6c 2e 34 34 35 2e 33 32 38 63 31 2e 38 30 37 20 31 2e 33 30 33 20 33 2e 39 36 31 20 32 2e 35 33 33 20 36 2e 34 36 31 20 33 2e 36 38 38 20 32 2e 30 31 35 2e 39 33 20 34 2e 35 37 36 20 31 2e 37 34 36 20 37 2e 36 38 32 20 32 2e 34 34 36 20 30 20 31 34 2e 31 37 38 2d 34 2e 37 33 20 32 34 2e 31 33 33 2d 31 34 2e 31 39 20 32 39 2e 38 36 34 6c 2d 2e 33 39 38 2e 32 33 36 43 34 2e 38 36 33 20 33 30 2e 38 37 20 30 20 32 30 2e 38 33 37 20 30 20 36 2e 34 36 32 63 33 2e 31 30 37 2d 2e 37 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg"><path class="ot-floating-button__svg-fill" d="M14.588 0l.445.328c1.807 1.303 3.961 2.533 6.461 3.688 2.015.93 4.576 1.746 7.682 2.446 0 14.178-4.73 24.133-14.19 29.864l-.398.236C4.863 30.87 0 20.837 0 6.462c3.107-.7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	50035	188.114.97.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:20 UTC	530	OUT	GET /socket.io/?EIO=4&transport=polling&t=P8nfBkw&sid=qkaZApVbB7RCdyB5ADHv HTTP/1.1 Host: datechf.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
2024-09-27 04:02:20 UTC	537	IN	HTTP/1.1 400 Bad Request Date: Fri, 27 Sep 2024 04:02:20 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GPq5EqKFM3WyXp%2BTwPrXXmtYN4mBOpgyLEJOz1DmdyH%2BlZB3Sgtk4C0dQ60Vxv0EpkQofZmogi%2FcGwT9S42iK4sgmxFpELHpf3gkVFUYJ8hRZTB9NUIC0n%2B7NyTC"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c9898fcbd300c88-EWR
2024-09-27 04:02:20 UTC	47	IN	Data Raw: 32 39 0d 0a 7b 22 63 6f 64 65 22 3a 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 53 65 73 73 69 6f 6e 20 49 44 20 75 6e 6b 6e 6f 77 6e 22 7d 0d 0a Data Ascii: 29{"code":1,"message":"Session ID unknown"}
2024-09-27 04:02:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	50046	104.18.86.42	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:20 UTC	382	OUT	GET /scripttemplates/202307.1.0/otBannerSdk.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:20 UTC	859	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:20 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: orDm7smwsr/pjTi/DOTSGQ== Last-Modified: Wed, 02 Aug 2023 03:24:04 GMT x-ms-request-id: 1e317a27-c01e-0099-0a64-14463e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 15136 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8c9898fcc89cc431-EWR
2024-09-27 04:02:20 UTC	510	IN	Data Raw: 37 63 34 35 0d 0a 2f 2a 2a 20 0a 20 2a 20 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 0a 20 2a 20 76 32 30 32 33 30 37 2e 31 2e 30 0a 20 2a 20 62 79 20 4f 6e 65 54 72 75 73 74 20 4c 4c 43 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 33 20 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 41 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 41 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6f 20 69 6e Data Ascii: 7c45/** * onetrust-banner-sdk * v202307.1.0 * by OneTrust LLC * Copyright 2023 */!function(){"use strict";var A=function(e,t){return(A=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in
2024-09-27 04:02:20 UTC	1369	IN	Data Raw: 75 6c 6c 3d 3d 3d 74 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 29 3a 28 6f 2e 70 72 6f 74 6f 74 79 70 65 3d 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 65 77 20 6f 29 7d 76 61 72 20 4c 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 5f 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 3c 6e 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 29 2e 61 70 70 6c 79 28 74 68 Data Ascii: ull===t?Object.create(t):(o.prototype=t.prototype,new o)}var L,_=function(){return(_=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(th
2024-09-27 04:02:20 UTC	1369	IN	Data Raw: 26 6c 2e 6c 61 62 65 6c 3c 61 5b 31 5d 29 6c 2e 6c 61 62 65 6c 3d 61 5b 31 5d 2c 61 3d 74 3b 65 6c 73 65 7b 69 66 28 21 28 61 26 26 6c 2e 6c 61 62 65 6c 3c 61 5b 32 5d 29 29 7b 61 5b 32 5d 26 26 6c 2e 6f 70 73 2e 70 6f 70 28 29 2c 6c 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 7d 6c 2e 6c 61 62 65 6c 3d 61 5b 32 5d 2c 6c 2e 6f 70 73 2e 70 75 73 68 28 74 29 7d 7d 74 3d 72 2e 63 61 6c 6c 28 6e 2c 6c 29 7d 63 61 74 63 68 28 65 29 7b 74 3d 5b 36 2c 65 5d 2c 73 3d 30 7d 66 69 6e 61 6c 6c 79 7b 69 3d 61 3d 30 7d 69 66 28 35 26 74 5b 30 5d 29 74 68 72 6f 77 20 74 5b 31 5d 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 74 5b 30 5d 3f 74 5b 31 5d 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 71 28 29 7b 66 6f 72 28 Data Ascii: &l.label<a[1])l.label=a[1],a=t;else{if(!(a&&l.label<a[2])){a[2]&&l.ops.pop(),l.trys.pop();continue}l.label=a[2],l.ops.push(t)}}t=r.call(n,l)}catch(e){t=[6,e],s=0}finally{i=a=0}if(5&t[0])throw t[1];return{value:t[0]?t[1]:void 0,done:!0}}}}function q(){for(
2024-09-27 04:02:20 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 29 29 7b 76 61 72 20 6f 3d 65 2e 74 68 65 6e 3b 69 66 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 7a 29 72 65 74 75 72 6e 20 74 2e 5f 73 74 61 74 65 3d 33 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 76 6f 69 64 20 59 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 29 72 65 74 75 72 6e 20 76 6f 69 64 20 51 28 28 6e 3d 6f 2c 72 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 61 70 70 6c 79 28 72 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 59 28 74 29 7d 63 61 74 63 68 28 65 29 7b 4a 28 74 2c 65 29 7d 76 61 72 20 6e 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 4a 28 65 2c 74 29 7b 65 2e 5f 73 74 61 74 65 3d 32 2c 65 2e 5f Data Ascii: nction"==typeof e)){var o=e.then;if(e instanceof z)return t._state=3,t._value=e,void Y(t);if("function"==typeof o)return void Q((n=o,r=e,function(){n.apply(r,arguments)}),t)}t._state=1,t._value=e,Y(t)}catch(e){J(t,e)}var n,r}function J(e,t){e._state=2,e._
2024-09-27 04:02:20 UTC	1369	IN	Data Raw: 66 20 65 29 29 7b 76 61 72 20 6e 3d 65 2e 74 68 65 6e 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 6e 2e 63 61 6c 6c 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 28 6f 2c 65 29 7d 2c 69 29 7d 73 5b 6f 5d 3d 65 2c 30 3d 3d 2d 2d 61 26 26 72 28 73 29 7d 63 61 74 63 68 28 65 29 7b 69 28 65 29 7d 7d 28 65 2c 73 5b 65 5d 29 7d 29 7d 2c 7a 2e 72 65 73 6f 6c 76 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 7a 3f 74 3a 6e 65 77 20 7a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 74 29 7d 29 7d 2c 7a 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 Data Ascii: f e)){var n=e.then;if("function"==typeof n)return void n.call(e,function(e){t(o,e)},i)}s[o]=e,0==--a&&r(s)}catch(e){i(e)}}(e,s[e])})},z.resolve=function(t){return t&&"object"==typeof t&&t.constructor===z?t:new z(function(e){e(t)})},z.reject=function(o){re
2024-09-27 04:02:20 UTC	1369	IN	Data Raw: 7c 7c 65 21 3d 65 26 26 73 21 3d 73 29 72 65 74 75 72 6e 21 30 3b 69 2b 2b 7d 7d 72 65 74 75 72 6e 21 31 7d 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 2c 24 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 45 6e 64 73 57 69 74 68 50 6f 6c 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 64 73 57 69 74 68 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 64 73 57 69 74 68 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 3e 74 68 69 73 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 Data Ascii: \|\|e!=e&&s!=s)return!0;i++}}return!1},writable:!0,configurable:!0})},$.prototype.initEndsWithPoly=function(){String.prototype.endsWith\|\|Object.defineProperty(String.prototype,"endsWith",{value:function(e,t){return(void 0===t\|\|t>this.length)&&(t=this.length
2024-09-27 04:02:20 UTC	1369	IN	Data Raw: 7d 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 2c 24 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 41 72 72 61 79 46 69 6c 6c 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2c 22 66 69 6c 6c 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 74 68 69 73 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 66 6f 72 28 76 61 72 20 74 3d 4f 62 6a 65 63 74 28 74 68 69 73 29 2c 6f 3d 74 Data Ascii: },writable:!0,configurable:!0})},$.prototype.initArrayFillPolyfill=function(){Array.prototype.fill\|\|Object.defineProperty(Array.prototype,"fill",{value:function(e){if(null==this)throw new TypeError("this is null or not defined");for(var t=Object(this),o=t
2024-09-27 04:02:20 UTC	1369	IN	Data Raw: 6e 6e 65 72 53 61 76 65 53 65 74 74 69 6e 67 73 3d 35 5d 3d 22 42 61 6e 6e 65 72 53 61 76 65 53 65 74 74 69 6e 67 73 22 2c 65 5b 65 2e 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 3d 36 5d 3d 22 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 22 2c 28 65 3d 65 65 3d 65 65 7c 7c 7b 7d 29 5b 65 2e 42 61 6e 6e 65 72 3d 31 5d 3d 22 42 61 6e 6e 65 72 22 2c 65 5b 65 2e 50 43 3d 32 5d 3d 22 50 43 22 2c 65 5b 65 2e 41 50 49 3d 33 5d 3d 22 41 50 49 22 2c 28 65 3d 74 65 3d 74 65 7c 7c 7b 7d 29 2e 41 63 63 65 70 74 41 6c 6c 3d 22 41 63 63 65 70 74 41 6c 6c 22 2c 65 2e 52 65 6a 65 63 74 41 6c 6c 3d 22 52 65 6a 65 63 74 41 6c 6c 22 2c 65 2e 55 70 64 61 74 65 43 6f 6e 73 65 6e 74 3d Data Ascii: nnerSaveSettings=5]="BannerSaveSettings",e[e.ContinueWithoutAcceptingButton=6]="ContinueWithoutAcceptingButton",(e=ee=ee\|\|{})[e.Banner=1]="Banner",e[e.PC=2]="PC",e[e.API=3]="API",(e=te=te\|\|{}).AcceptAll="AcceptAll",e.RejectAll="RejectAll",e.UpdateConsent=
2024-09-27 04:02:20 UTC	1369	IN	Data Raw: 5d 3d 35 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 52 65 6a 65 63 74 20 41 6c 6c 22 2c 65 5b 65 5b 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 5d 3d 36 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 2c 65 5b 65 5b 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 5d 3d 37 5d 3d 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 2c 28 65 3d 68 65 3d 68 65 7c 7c 7b 7d 29 2e 41 63 74 69 76 65 3d 22 31 22 2c 65 2e 49 6e 41 63 74 69 76 65 3d 22 30 22 2c 28 65 3d 67 65 3d 67 65 7c 7c 7b 7d 29 2e 48 6f 73 74 3d 22 48 6f 73 74 22 2c 65 2e 47 65 6e 56 65 6e 64 6f 72 3d 22 47 65 6e 56 65 6e 22 2c 28 65 3d 43 65 3d 43 65 7c 7c 7b 7d 29 5b Data Ascii: ]=5]="Preference Center - Reject All",e[e["Preference Center - Confirm"]=6]="Preference Center - Confirm",e[e["GPC value changed"]=7]="GPC value changed",(e=he=he\|\|{}).Active="1",e.InActive="0",(e=ge=ge\|\|{}).Host="Host",e.GenVendor="GenVen",(e=Ce=Ce\|\|{})[
2024-09-27 04:02:20 UTC	1369	IN	Data Raw: 22 2c 65 2e 4c 49 5f 41 43 54 49 56 45 5f 49 46 5f 4c 45 47 41 4c 5f 42 41 53 49 53 3d 22 4c 49 41 63 74 69 76 65 49 66 4c 65 67 61 6c 42 61 73 69 73 22 2c 28 65 3d 4c 65 3d 4c 65 7c 7c 7b 7d 29 2e 63 6f 6f 6b 69 65 73 3d 22 63 6f 6f 6b 69 65 73 22 2c 65 2e 76 65 6e 64 6f 72 73 3d 22 76 65 6e 64 6f 72 73 22 2c 28 65 3d 5f 65 3d 5f 65 7c 7c 7b 7d 29 2e 47 44 50 52 3d 22 47 44 50 52 22 2c 65 2e 49 41 42 3d 22 49 41 42 22 2c 65 2e 43 43 50 41 3d 22 43 43 50 41 22 2c 65 2e 49 41 42 32 3d 22 49 41 42 32 22 2c 65 2e 47 45 4e 45 52 49 43 3d 22 47 45 4e 45 52 49 43 22 2c 65 2e 4c 47 50 44 3d 22 4c 47 50 44 22 2c 65 2e 47 45 4e 45 52 49 43 5f 50 52 4f 4d 50 54 3d 22 47 45 4e 45 52 49 43 5f 50 52 4f 4d 50 54 22 2c 65 2e 43 50 52 41 3d 22 43 50 52 41 22 2c 65 2e 43 Data Ascii: ",e.LI_ACTIVE_IF_LEGAL_BASIS="LIActiveIfLegalBasis",(e=Le=Le\|\|{}).cookies="cookies",e.vendors="vendors",(e=_e=_e\|\|{}).GDPR="GDPR",e.IAB="IAB",e.CCPA="CCPA",e.IAB2="IAB2",e.GENERIC="GENERIC",e.LGPD="LGPD",e.GENERIC_PROMPT="GENERIC_PROMPT",e.CPRA="CPRA",e.C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	50036	188.114.97.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:20 UTC	530	OUT	GET /socket.io/?EIO=4&transport=polling&t=P8nfBk-&sid=qkaZApVbB7RCdyB5ADHv HTTP/1.1 Host: datechf.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
2024-09-27 04:02:20 UTC	499	IN	HTTP/1.1 400 Bad Request Date: Fri, 27 Sep 2024 04:02:20 GMT Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rof6k7MGoN2ODCh6e0RsXS4bplh8xV89mTUUjm0enMw32k4erZInEYe4KzX4tiS9t2CgWtJbEcih5bQ6T4IOwdpsap%2FEiZR63Uw1ZNRMwxM2HO3FISmVOaGIdg22"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c9898fcedc8440b-EWR
2024-09-27 04:02:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	50038	104.18.95.41	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:20 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/g/i/8c9898c28eda4378/1727409733188/7Hf4hPCc6PpUz1G HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:20 UTC	170	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:20 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8c9898fcc95741d9-EWR
2024-09-27 04:02:20 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 21 00 00 00 30 08 02 00 00 00 10 0c 84 06 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR!0IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	50048	104.18.32.137	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:20 UTC	380	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:20 UTC	249	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:20 GMT Content-Type: text/javascript Content-Length: 80 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8c9898fd2a1a4327-EWR
2024-09-27 04:02:20 UTC	80	IN	Data Raw: 6a 73 6f 6e 46 65 65 64 28 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 4e 59 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d 29 3b Data Ascii: jsonFeed({"country":"US","state":"NY","stateName":"New York","continent":"NA"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	50033	150.171.27.10	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:20 UTC	1045	OUT	GET /action/0?ti=20058379&tm=gtm002&Ver=2&mid=95270a66-e649-4deb-a4ab-3b09c746e031&sid=497e5f707c8511efa859ef9731879154&vid=498037407c8511ef8c4a6b44ef6ef254&vids=1&msclkid=N&uach=pv%3D10.0.0&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Veloversicherung%20mit%20TWINT%20abschliessen%20%C2%BB%20TWINT&p=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2Fvelo%2F&r=&lt=686&evt=pageLoad&sv=1&cdb=AQET&rn=935116 HTTP/1.1 Host: bat.bing.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twint.ch/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MR=0
2024-09-27 04:02:20 UTC	763	IN	HTTP/1.1 204 No Content Cache-Control: no-cache, must-revalidate Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Set-Cookie: MSPTC=2of7DkoixaLfYUbWyihudepkmANZsPUZb-bl4_5CISU; domain=.bing.com; expires=Wed, 22-Oct-2025 04:02:20 GMT; path=/; Partitioned; secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Origin: * X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 1C07872FD82C41739ABA95D469141569 Ref B: EWR30EDGE0415 Ref C: 2024-09-27T04:02:20Z Date: Fri, 27 Sep 2024 04:02:20 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	50034	172.217.16.198	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:20 UTC	1406	OUT	GET /activityi;dc_pre=CIDIkN-e4ogDFcSHgwcdx90GEg;src=9818618;type=twint002;cat=twint0;ord=1895166089217;npa=0;auiddc=1403402495.1727409735;ps=1;pcor=137932440;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2Fvelo%2F? HTTP/1.1 Host: 9818618.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.twint.ch/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnaxrRQiOXDkuDPypDvKrx_28Q0spLOcJvV9FpcEPQeJgRmNFlJQAQ_CJMG
2024-09-27 04:02:20 UTC	663	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 27 Sep 2024 04:02:20 GMT Expires: Fri, 27 Sep 2024 04:02:20 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-27 04:02:20 UTC	727	IN	Data Raw: 32 65 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 49 44 49 6b 4e 2d 65 34 6f 67 44 46 63 Data Ascii: 2ec<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CIDIkN-e4ogDFc
2024-09-27 04:02:20 UTC	28	IN	Data Raw: 32 46 76 65 6c 6f 25 32 46 22 2f 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 2Fvelo%2F"/></body></html>
2024-09-27 04:02:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	50057	157.240.0.35	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:21 UTC	915	OUT	GET /tr/?id=979879722096658&ev=PageView&dl=https%3A%2F%2Fwww.twint.ch&rl=&if=false&ts=1727409739025&sw=1280&sh=1024&v=2.9.168&r=stable&ec=0&o=4125&fbp=fb.1.1727409739018.104976150382192680&cs_est=true&pm=1&hrl=683abd&ler=empty&cdl=API_unavailable&it=1727409736851&coo=false&cs_cc=1&cas=1184151431702574%2C7836316349762126%2C7350041391718351&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twint.ch/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:21 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=94, rtx=0, c=10, mss=1392, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 27 Sep 2024 04:02:21 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	50058	157.240.0.35	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:21 UTC	1007	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=979879722096658&ev=PageView&dl=https%3A%2F%2Fwww.twint.ch&rl=&if=false&ts=1727409739025&sw=1280&sh=1024&v=2.9.168&r=stable&ec=0&o=4125&fbp=fb.1.1727409739018.104976150382192680&cs_est=true&pm=1&hrl=683abd&ler=empty&cdl=API_unavailable&it=1727409736851&coo=false&cs_cc=1&cas=1184151431702574%2C7836316349762126%2C7350041391718351&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source Referer: https://www.twint.ch/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:22 UTC	795	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7419168344633594737", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7419168344633594737"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-09-27 04:02:22 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-09-27 04:02:22 UTC	1697	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 3d 28 73 65 6c 66 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), browsing-topics=(self), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), c
2024-09-27 04:02:22 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	50060	142.250.186.66	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:21 UTC	1396	OUT	GET /ddm/fls/z/dc_pre=CIDIkN-e4ogDFcSHgwcdx90GEg;src=9818618;type=twint002;cat=twint0;ord=1895166089217;npa=0;auiddc=;ps=1;pcor=137932440;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe49p0v9190730279z876304729za201zb76304729;gcs=G111;gcd=13t3t3t3t5l1;dma=0;tag_exp=101671035~101747727;epver=2;~oref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fversicherung%2Fvelo%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9818618.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=517=uHE3MPhWkkCAHJpDH1pishVOR2DYGb4VCGR8FWemchSsyuvuwmsiE1fPmcYb8cy-vat5744oZWk9lzdQx-eGkMtCG5oHkHJxpbmzc-IPDj-LYdAi_7nLYb4BOjEbMLc04Iw9jJ28d0aZ82FWxcJUVm6xZxGsIZdSvdTjN3etGqpmcJVcLA
2024-09-27 04:02:22 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 27 Sep 2024 04:02:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 04:02:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	50081	104.18.86.42	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:22 UTC	776	OUT	GET /logos/c6763161-a85e-4d6f-9902-c9d4575334af/209d2df7-c2dd-4023-807a-b382cfc1c6a0/f8ae775d-1572-46f6-ab4d-b468dd952de8/MicrosoftTeams-image_(53).png HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.twint.ch/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Range: bytes=244800-244800 If-Range: 0x8DBAD5A5C6086B9
2024-09-27 04:02:22 UTC	871	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:22 GMT Content-Type: mage/png Content-Length: 268909 Connection: close Content-MD5: OLbBnjjsPVq6cVzQSTHoFg== Last-Modified: Mon, 04 Sep 2023 15:19:41 GMT ETag: 0x8DBAD5A5C6086B9 x-ms-request-id: 6c93a64a-c01e-000f-0de9-734fef000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 75240 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8c98990af96742e0-EWR
2024-09-27 04:02:22 UTC	498	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 08 70 00 00 08 70 08 06 00 00 00 4f cc 5b 69 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 20 00 49 44 41 54 78 9c ec dd 4b 76 1c 47 9a 26 ec 37 75 7a 4e 8c 63 42 ec 40 da 01 b1 03 69 01 5d 45 e4 55 79 53 32 7a 54 c9 ab 42 e3 ba 24 94 29 29 2f 55 fd ff d0 a4 4a bc 1e 69 07 e0 0e a4 1d 80 03 e7 98 5c 01 7a 10 94 44 89 37 07 60 61 6e e6 f1 3c e7 f0 74 27 e1 f1 99 9d 90 9b bc e4 df 0b b3 9f 9c 9c 9c 04 00 00 00 00 00 00 00 80 e9 bc 35 f5 04 00 00 00 00 00 00 00 00 b6 9d 00 07 00 00 00 00 00 00 00 c0 c4 04 38 00 00 00 00 00 00 00 00 26 26 c0 01 00 00 00 00 00 00 00 30 31 01 0e 00 00 00 00 00 00 00 80 89 09 70 00 00 00 00 00 00 00 00 4c 4c 80 03 00 00 00 00 00 00 00 60 62 02 1c 00 00 Data Ascii: PNGIHDRppO[ipHYs%%IR$ IDATxKvG&7uzNcB@i]EUyS2zTB$))/UJi\zD7`an<t'58&&01pLL`b
2024-09-27 04:02:22 UTC	1369	IN	Data Raw: 00 80 89 09 70 00 00 00 00 00 00 00 00 4c 4c 80 03 00 00 00 00 00 00 00 60 62 02 1c 00 00 00 00 00 00 00 00 13 13 e0 00 00 00 00 00 00 00 00 98 98 00 07 00 00 00 00 00 00 00 c0 c4 04 38 00 00 00 00 00 00 00 00 26 26 c0 01 00 00 00 00 00 00 00 30 31 01 0e 00 00 00 00 00 00 00 80 89 09 70 00 00 00 00 00 00 00 00 4c 4c 80 03 00 00 00 00 00 00 00 60 62 02 1c 00 00 00 00 00 00 00 00 13 13 e0 00 00 00 00 00 00 00 00 98 98 00 07 00 00 00 00 00 00 00 c0 c4 04 38 00 00 00 00 00 00 00 00 26 26 c0 01 00 00 00 00 00 00 00 30 31 01 0e 00 00 00 00 00 00 00 80 89 09 70 00 00 00 00 00 00 00 00 4c 4c 80 03 00 00 00 00 00 00 00 60 62 02 1c 00 00 00 00 00 00 00 00 13 13 e0 00 00 00 00 00 00 00 00 98 98 00 07 00 00 00 00 00 00 00 c0 c4 04 38 00 00 00 00 00 00 00 00 26 26 c0 Data Ascii: pLL`b8&&01pLL`b8&&01pLL`b8&&
2024-09-27 04:02:22 UTC	1369	IN	Data Raw: 58 7f e7 89 31 1a dc 0d a3 b5 f0 c6 f9 4a 3d ca f7 81 8e 23 bb 74 00 00 00 40 9f 04 38 00 00 00 a0 13 3f 0a 6c ec 25 b9 f0 c3 2b 84 37 9a 1c af 62 99 67 c5 9e e6 59 98 23 c9 d1 e2 df fe 59 a0 03 00 00 00 3a 20 c0 01 00 00 00 8d 7a 76 24 ca 7b 79 65 60 e3 c7 5a 0b 70 34 78 94 c9 fc c3 1b 2f fb cb e7 03 1d 5f 2e fe ed 9f 8f 4b 8e 08 00 00 00 94 21 c0 01 00 00 00 8d 78 fc c7 ff d9 c9 3a a8 f1 6d 68 e3 e2 f8 4f b7 16 de 18 39 60 ed a3 4c e6 75 74 ca 59 0b 3d ca b3 30 47 d6 3b 74 3c 29 35 03 00 00 00 e0 ec 04 38 00 00 00 60 42 cf 1d 8b f2 5e 92 4b 67 ab b2 ed e1 8d da e3 75 1d de 78 99 87 f9 3e cc e1 b8 15 00 00 00 98 88 00 07 00 00 00 54 f6 f8 8f ff f3 ed 0e 1b ef e5 54 bb 6c bc 4c ed 9d 27 0a 0e e6 e8 94 82 8a cd e9 51 be 0d 73 fc fb 3f 7f 59 a6 28 00 00 00 Data Ascii: X1J=#t@8?l%+7bgY#Y: zv${ye`Zp4x/_.K!x:mhO9`LutY=0G;t<)58`B^Kgux>TTlL'Qs?Y(
2024-09-27 04:02:22 UTC	1369	IN	Data Raw: 52 d9 c9 c9 c7 49 56 8b 3f fd f4 c9 d4 53 01 00 00 80 e7 bd 35 f5 04 00 00 00 e0 79 c3 d5 db cb 24 c7 19 19 de 28 aa c9 66 f3 d4 13 78 89 16 8f 0d 69 72 bc 31 7c 07 55 ad d7 f8 95 24 c7 8f ff cf ff bf 9c 78 36 00 00 00 f0 03 76 e0 00 00 00 a0 09 c3 d5 db 7b 49 0e 92 bc fd fd df 56 dc 7d c3 d1 29 e3 06 ec f6 e8 94 82 13 ef 76 4e 02 51 2f 99 d3 37 49 96 8b 3f fd f4 a8 fe 64 00 00 00 e0 87 04 38 00 00 00 98 d4 70 f5 f6 6e d6 c1 8d 77 7f f8 13 47 a7 38 3a a5 d4 58 05 8b 75 3b 27 e1 8d 37 cc e9 ab ac 83 1c c7 75 26 03 00 00 00 2f 12 e0 00 00 00 60 12 c3 d5 db 3b 49 96 49 3e 7c f1 a7 73 0e 6f 24 76 df 68 30 2c 52 bd 54 ed 40 49 c5 1b aa c5 77 4d e3 e7 f4 51 92 83 c5 9f 7e fa 64 83 b3 01 00 00 80 97 12 e0 00 00 00 a0 ba e1 ea ed fd ac 77 dd b8 f0 f2 2b 1c 9d 52 Data Ascii: RIV?S5y$(fxir1\|U$x6v{IV})vNQ/7I?d8pnwG8:Xu;'7u&/`;II>\|so$vh0,RT@IwMQ~dw+R
2024-09-27 04:02:22 UTC	1369	IN	Data Raw: 97 1a 05 00 00 80 76 09 70 00 00 00 cc dc 70 ed f6 4e 92 65 92 0f 8b 14 2c b8 53 80 f0 46 49 73 0e 6f 14 2c 26 bc 31 4e 8b ef 8b 66 bd ce df 58 e8 a3 24 07 8b 83 9f 3f 29 35 22 00 00 00 ed 11 e0 00 00 00 98 b1 e1 da ed fd 24 07 49 2e 14 2b ba f5 47 a7 d4 fe ad fc 82 83 39 3a a5 a0 9a 73 12 de 98 77 78 63 74 b1 a7 49 96 8b 83 9f 1f 96 1c 19 00 00 80 76 08 70 00 00 00 cc d0 70 ed f6 5e d6 c1 8d b7 8b 16 76 74 4a ec be d1 60 58 a4 7a a9 19 ef be d1 e2 7b a2 d9 af f1 53 17 fb 26 eb 20 c7 51 c9 59 00 00 00 30 3d 01 0e 00 00 80 19 19 ae dd de cd 3a b8 f1 6e f1 e2 8e 4e 89 f0 46 ed f1 84 37 ec be 91 99 ef b0 73 ae 42 5f 65 1d e4 38 2e 33 17 00 00 00 a6 26 c0 01 00 00 30 03 c3 b5 db 3b 49 96 cf fe 94 3b 2e e5 79 8e 4e 29 7a 59 19 73 0e 6f 14 2c d6 ed 9c 84 37 e6 Data Ascii: vppNe,SFIso,&1NfX$?)5"$I.+G9:swxctIvpp^vtJ`Xz{S& QY0=:nNF7sB_e8.3&0;I;.yN)zYso,7
2024-09-27 04:02:22 UTC	1369	IN	Data Raw: 1c e7 4c e1 8d ca 9a 0c 94 cc bd b1 3b 46 83 73 6a 2d bc 51 54 b7 5f 26 a3 f8 e7 3b ca f9 a7 7d 25 c9 f1 e3 3f fc d7 f2 fc 93 01 00 00 c0 0e 1c 00 00 00 e7 30 5c bf b3 97 e4 20 c9 db 2f bd a0 c9 b0 44 99 8b 8a ed be 21 bc 31 6e c0 da 3b 05 74 bb 33 41 e5 62 4d ae f1 06 df f5 cc 7a 9d 6f d5 d1 29 af 2b f4 4d 92 e5 e2 cf bf 3c 2a 55 15 00 00 60 db 08 70 00 00 00 9c c1 70 fd ce 6e d6 c1 8d 77 5f 79 51 93 8d dd 32 17 f5 7b 74 4a ed 63 43 0a 0e 56 b3 d9 dc 6d 50 a2 72 31 47 a7 8c 33 eb f0 46 c1 62 7d 87 37 9e f7 55 d6 41 8e e3 52 23 00 00 00 6c 0b 01 0e 00 00 80 53 18 ae df d9 49 b2 4c f2 e1 6b 2f 9c 71 78 23 b1 fb 46 59 0d ee 14 d0 ed ce 04 55 0b 35 ba ce 1b 7c cf d3 5a 48 ab db f0 c6 14 e3 9d ab d8 47 49 0e 16 7f fe e5 93 92 a3 01 00 00 cc 99 00 07 00 00 c0 Data Ascii: L;Fsj-QT_&;}%?0\ /D!1n;t3AbMzo)+M<*U`ppnw_yQ2{tJcCVmPr1G3Fb}7UAR#lSILk/qx#FYU5\|ZHGI
2024-09-27 04:02:22 UTC	1369	IN	Data Raw: bc 8a c5 a6 59 4f 0f b3 0e 72 7c 5d ba 30 00 00 40 0d 02 1c 00 00 40 77 9e 1d 97 72 90 e4 f2 eb af ec b4 11 57 74 28 47 a7 d4 d5 60 b3 b9 db a0 44 d5 42 c2 1b 63 cd 7a 9d 77 7a 3f 75 1b de 28 38 de 8b 3e cf 3a c8 e1 58 15 00 00 a0 2b 6f 4d 3d 01 00 00 80 d3 18 ae df 5d 26 39 4e ad f0 c6 68 0d 36 5a 6b 1f 9d 52 55 9f df 77 f5 f1 7c 4d e3 08 6f 8c 33 eb f0 46 41 2d de 4f a3 34 f8 cf f7 ec 2e 27 39 7e fc c1 3f 96 9b 1c 04 00 00 a0 34 3b 70 00 00 00 5d 18 ae df dd 4b 72 98 e4 e2 b8 4f 74 bd 05 7c 81 e1 2a 87 37 34 76 c7 0d e8 e8 94 f6 e6 34 fd 4e 01 2f 19 aa c1 77 35 b3 5f e3 9d de 4f dd 7e 07 55 ef a7 47 39 39 d9 5f 7c f2 fe 51 cd 41 01 00 00 ce 42 80 03 00 00 68 da 70 fd ee 6e d6 c1 8d 4b e3 3f d5 69 23 ae e8 50 8e 4e a9 ab c1 66 73 6b 41 89 a2 a5 3a 3d ea Data Ascii: YOr\|]0@@wrWt(G`DBczwz?u(8>:X+oM=]&9Nh6ZkRUw\|Mo3FA-O4.'9~?4;p]KrOt\|*74v4N/w5_O~UG99_\|QABhpnK?i#PNfskA:=
2024-09-27 04:02:22 UTC	1369	IN	Data Raw: 7b 99 fd 1a ef 74 e7 89 6e bf 03 e1 8d 97 cc e9 a3 24 07 8b 4f 7f fd 64 82 d9 00 00 00 9d 12 e0 00 00 00 46 1b 6e dc db 4f b2 4a 4e 2e be f1 e2 6e 9b 50 05 c7 2b 3a 94 a3 53 ea 6a b0 d9 dc 6d 50 a2 6a 21 cd e6 b1 66 bd c3 4e a7 f7 93 e7 e6 c8 a1 ba 5a 4f 8f 92 ac 16 9f fe fa b0 de 64 00 00 80 9e 09 70 00 00 00 6f 34 dc b8 b7 97 64 95 e4 92 46 5c 61 5b bf fb 46 a7 47 a7 74 1b de 28 58 ac db 39 09 6f cc 3b a4 d5 f1 33 c3 77 30 4e 9f 6b ea 61 d6 41 8e a3 cd 4f 06 00 00 e8 99 00 07 00 00 f0 4a cf 8e 4b 39 48 72 f9 fb bf d5 88 2b 66 eb c3 1b 89 dd 37 84 37 ec 14 50 d9 ec d7 78 a7 61 20 cf cd 71 fa 5f 53 9f 27 59 3a 56 05 00 00 78 95 b7 a6 9e 00 00 00 d0 a6 e1 c6 bd 55 92 e3 4c 16 de 28 a8 c9 26 54 b1 8b ca 99 7d 63 77 8c 16 e7 54 4a 8b 13 6f f0 9e a3 20 ff 7c Data Ascii: {tn$OdFnOJN.nP+:SjmPj!fNZOdpo4dF\a[FGt(X9o;3w0NkaAOJK9Hr+f77Pxa q_S'Y:VxUL(&T}cwTJo \|
2024-09-27 04:02:22 UTC	1369	IN	Data Raw: dc 1c c7 9a 4a 85 35 f5 28 c9 fe e2 b3 df 1c 9d ab 0a 00 00 50 85 00 07 00 00 34 6e b8 71 6f 37 c9 41 92 77 cb 57 d7 88 2b a6 e0 9c 1c 9d 52 52 83 f7 78 b7 8d dd aa 85 1a 5d e7 0d be 43 71 74 4a c1 52 db 1e 88 b2 9e 66 fe dc fc 2a 39 59 2e 3e fb ed 71 b1 8a 00 00 40 71 02 1c 00 00 d0 a8 e1 c6 bd 9d 24 cb 24 1f 6e 66 04 8d b8 62 0a ee 14 20 bc 51 d2 9c c3 1b 05 8b 75 3b 27 cd e6 79 af f3 8e 9f 19 ad 7d 07 76 b3 19 67 d6 eb e9 07 c5 3e 4a 72 b0 f8 ec b7 4f 4a 56 07 00 00 ca 10 e0 00 00 80 06 0d 37 ee ed 67 bd eb c6 85 cd 8d a2 11 57 cc d6 1f 9d 52 3b 0c 54 70 30 47 a7 14 a4 d9 5c d5 f6 34 9b 2b 94 99 71 78 63 74 29 81 a8 79 3f 37 5f 28 f4 34 c9 72 f1 d9 6f 0f 4b 8d 00 00 00 94 21 c0 01 00 00 0d 19 6e dc db cb 3a b8 f1 f6 66 47 d2 88 2b c6 d1 29 b1 fb c6 e4 Data Ascii: J5(P4nqo7AwW+RRx]CqtJRf*9Y.>q@q$$nfb Qu;'y}vg>JrOJV7gWR;Tp0G\4+qxct)y?7_(4roK!n:fG+)
2024-09-27 04:02:22 UTC	1369	IN	Data Raw: 11 57 b0 58 93 6b bc c1 f7 21 b3 5e e7 1d 3f 33 5a fb 0e ec 66 33 ce ac d7 53 c1 62 75 e6 f4 30 c9 72 f1 d7 df 7d 5d 72 34 00 00 98 23 01 0e 00 00 78 8d 67 c7 a5 1c 24 b9 7c ea 0f cf ba 71 d0 71 23 ae d8 70 73 3e 3a a5 76 18 a8 e0 60 8e 4e 29 48 b3 b9 aa 59 3f 33 0a 16 db f6 f0 c6 e8 52 02 51 f3 7e 6e 76 7b 8f 7f 9e 75 90 c3 b1 2a 00 00 f0 0a 6f 4d 3d 01 00 00 68 d5 70 f3 fe 2a c9 71 84 37 36 a7 c9 26 54 b1 8b ca 69 b2 31 36 f5 04 5e a2 c5 c6 58 93 e3 8d e1 3b a8 6a f6 cf 8c 16 03 4a 0d 8e 37 86 67 d4 38 4d ce a9 b9 42 53 cc e9 72 92 e3 c7 bf f9 74 55 6a 64 00 00 98 1b 3b 70 00 00 c0 8f 0c 37 ef ef 25 39 4c 72 f1 cc 45 5a fb ad cf ae 1b 71 35 7f 2b bf dc 85 8e 4e 29 a9 c1 7b 5c 23 ae 60 29 cd e6 79 af f3 4e ef 27 cf cd 91 43 59 4f 4d 3e a3 2a 96 39 47 b1 Data Ascii: WXk!^?3Zf3Sbu0r}]r4#xg$\|qq#ps>:v`N)HY?3RQ~nv{uoM=hpq76&Ti16^X;jJ7g8MBSrtUjd;p7%9LrEZq5+N){\#`)yN'CYOM>*9G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	50073	104.18.86.42	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:22 UTC	430	OUT	GET /consent/baf1656f-0c9f-4cd8-83fe-a5ce8d8c9eed/01921dfd-0535-7c88-9558-f9c8250e558c/de.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:22 UTC	981	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:22 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Ray: 8c98990b1ffd1784-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 9380 Cache-Control: public, max-age=86400 Expires: Sat, 28 Sep 2024 04:02:22 GMT Last-Modified: Tue, 24 Sep 2024 11:53:04 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: 9RlaUw8souLe5+1AEv+kMg== Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: cce39ddc-d01e-00c2-1bc3-0e1b34000000 x-ms-version: 2009-09-19 Cross-Origin-Resource-Policy: cross-origin Server: cloudflare
2024-09-27 04:02:22 UTC	388	IN	Data Raw: 37 62 63 63 0d 0a 7b 22 44 6f 6d 61 69 6e 44 61 74 61 22 3a 7b 22 70 63 63 6c 6f 73 65 42 75 74 74 6f 6e 54 79 70 65 22 3a 22 49 63 6f 6e 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 22 3a 22 4a 61 68 72 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 73 22 3a 22 4a 61 68 72 65 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 53 65 63 73 22 3a 22 45 69 6e 69 67 65 20 53 65 6b 75 6e 64 65 6e 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 22 3a 22 57 6f 63 68 65 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 73 22 3a 22 57 6f 63 68 65 6e 22 2c 22 70 63 63 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 54 65 78 74 22 3a 22 46 6f 72 74 66 61 68 72 65 6e 20 6f 68 6e 65 20 41 6b 7a 65 70 74 69 65 72 65 6e 22 2c 22 4d 61 69 6e 54 65 78 74 22 3a 22 44 61 74 65 6e 73 Data Ascii: 7bcc{"DomainData":{"pccloseButtonType":"Icon","pclifeSpanYr":"Jahr","pclifeSpanYrs":"Jahre","pclifeSpanSecs":"Einige Sekunden","pclifeSpanWk":"Woche","pclifeSpanWks":"Wochen","pccontinueWithoutAcceptText":"Fortfahren ohne Akzeptieren","MainText":"Datens
2024-09-27 04:02:22 UTC	1369	IN	Data Raw: 65 69 63 68 65 72 6e 2e 20 44 69 65 73 20 67 65 73 63 68 69 65 68 74 20 6d 65 69 73 74 20 69 6e 20 46 6f 72 6d 20 76 6f 6e 20 43 6f 6f 6b 69 65 73 2e 20 48 69 65 72 62 65 69 20 6b 61 6e 6e 20 65 73 20 73 69 63 68 20 75 6d 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 65 6e 20 c3 bc 62 65 72 20 53 69 65 2c 20 49 68 72 65 20 45 69 6e 73 74 65 6c 6c 75 6e 67 65 6e 20 6f 64 65 72 20 49 68 72 20 47 65 72 c3 a4 74 20 68 61 6e 64 65 6c 6e 2e 20 4d 65 69 73 74 20 77 65 72 64 65 6e 20 64 69 65 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 65 6e 20 76 65 72 77 65 6e 64 65 74 2c 20 75 6d 20 64 69 65 20 65 72 77 61 72 74 75 6e 67 73 67 65 6d c3 a4 73 73 65 20 46 75 6e 6b 74 69 6f 6e 20 64 65 72 20 57 65 62 73 69 74 65 20 7a 75 20 67 65 77 c3 a4 68 72 6c 65 69 73 74 65 6e 2e 20 44 75 72 Data Ascii: eichern. Dies geschieht meist in Form von Cookies. Hierbei kann es sich um Informationen ber Sie, Ihre Einstellungen oder Ihr Gert handeln. Meist werden die Informationen verwendet, um die erwartungsgemsse Funktion der Website zu gewhrleisten. Dur
2024-09-27 04:02:22 UTC	1369	IN	Data Raw: 72 68 65 69 74 20 64 65 72 20 57 65 62 73 65 69 74 65 20 28 75 6e 62 65 64 69 6e 67 74 20 65 72 66 6f 72 64 65 72 6c 69 63 68 65 20 43 6f 6f 6b 69 65 73 29 20 75 6e 64 20 76 65 72 62 65 73 73 65 72 6e 20 61 6e 64 65 72 65 72 73 65 69 74 73 20 64 65 69 6e 20 42 65 73 75 63 68 73 65 72 6c 65 62 6e 69 73 2c 20 69 6e 64 65 6d 20 77 69 72 20 64 69 65 20 4c 65 69 73 74 75 6e 67 20 75 6e 64 20 4e 75 74 7a 75 6e 67 20 64 65 72 20 57 65 62 73 65 69 74 65 20 61 6e 61 6c 79 73 69 65 72 65 6e 20 75 6e 64 20 6f 70 74 69 6d 69 65 72 65 6e 20 28 46 75 6e 6b 74 69 6f 6e 65 6c 6c 65 20 75 6e 64 20 4c 65 69 73 74 75 6e 67 73 2d 43 6f 6f 6b 69 65 73 29 2e 20 5c 6e 57 65 6e 6e 20 64 75 20 5c 22 41 6c 6c 65 20 43 6f 6f 6b 69 65 73 20 61 6b 7a 65 70 74 69 65 72 65 6e 5c 22 20 Data Ascii: rheit der Webseite (unbedingt erforderliche Cookies) und verbessern andererseits dein Besuchserlebnis, indem wir die Leistung und Nutzung der Webseite analysieren und optimieren (Funktionelle und Leistungs-Cookies). \nWenn du \"Alle Cookies akzeptieren\"
2024-09-27 04:02:22 UTC	1369	IN	Data Raw: 65 72 22 3a 22 57 69 72 64 20 69 6e 20 6e 65 75 65 72 20 52 65 67 69 73 74 65 72 6b 61 72 74 65 20 67 65 c3 b6 66 66 6e 65 74 22 2c 22 43 6f 6f 6b 69 65 4c 69 73 74 54 69 74 6c 65 22 3a 22 43 6f 6f 6b 69 65 2d 4c 69 73 74 65 22 2c 22 43 6f 6f 6b 69 65 4c 69 73 74 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 45 69 6e 20 43 6f 6f 6b 69 65 20 69 73 74 20 65 69 6e 20 6b 6c 65 69 6e 65 73 20 44 61 74 65 6e 70 61 6b 65 74 20 28 54 65 78 74 64 61 74 65 69 29 2c 20 64 61 73 20 49 68 72 20 42 72 6f 77 73 65 72 20 61 75 66 20 41 6e 77 65 69 73 75 6e 67 20 65 69 6e 65 72 20 62 65 73 75 63 68 74 65 6e 20 57 65 62 73 69 74 65 20 61 75 66 20 49 68 72 65 6d 20 47 65 72 c3 a4 74 20 73 70 65 69 63 68 65 72 74 2c 20 75 6d 20 73 69 63 68 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 65 Data Ascii: er":"Wird in neuer Registerkarte geffnet","CookieListTitle":"Cookie-Liste","CookieListDescription":"Ein Cookie ist ein kleines Datenpaket (Textdatei), das Ihr Browser auf Anweisung einer besuchten Website auf Ihrem Gert speichert, um sich Informatione
2024-09-27 04:02:22 UTC	1369	IN	Data Raw: 64 69 65 20 57 65 62 73 69 74 65 20 69 6e 20 64 65 72 20 4c 61 67 65 2c 20 65 72 77 65 69 74 65 72 74 65 20 46 75 6e 6b 74 69 6f 6e 61 6c 69 74 c3 a4 74 20 75 6e 64 20 50 65 72 73 6f 6e 61 6c 69 73 69 65 72 75 6e 67 20 62 65 72 65 69 74 7a 75 73 74 65 6c 6c 65 6e 2e 20 53 69 65 20 6b c3 b6 6e 6e 65 6e 20 76 6f 6e 20 75 6e 73 20 6f 64 65 72 20 76 6f 6e 20 44 72 69 74 74 61 6e 62 69 65 74 65 72 6e 20 67 65 73 65 74 7a 74 20 77 65 72 64 65 6e 2c 20 64 65 72 65 6e 20 44 69 65 6e 73 74 65 20 77 69 72 20 61 75 66 20 75 6e 73 65 72 65 6e 20 53 65 69 74 65 6e 20 76 65 72 77 65 6e 64 65 6e 2e 20 57 65 6e 6e 20 53 69 65 20 64 69 65 73 65 20 43 6f 6f 6b 69 65 73 20 6e 69 63 68 74 20 7a 75 6c 61 73 73 65 6e 2c 20 66 75 6e 6b 74 69 6f 6e 69 65 72 65 6e 20 65 69 6e 69 Data Ascii: die Website in der Lage, erweiterte Funktionalitt und Personalisierung bereitzustellen. Sie knnen von uns oder von Drittanbietern gesetzt werden, deren Dienste wir auf unseren Seiten verwenden. Wenn Sie diese Cookies nicht zulassen, funktionieren eini
2024-09-27 04:02:22 UTC	1369	IN	Data Raw: 6e 73 63 68 75 74 7a 65 69 6e 73 74 65 6c 6c 75 6e 67 65 6e 2c 20 64 65 6d 20 41 6e 6d 65 6c 64 65 6e 20 6f 64 65 72 20 64 65 6d 20 41 75 73 66 c3 bc 6c 6c 65 6e 20 76 6f 6e 20 46 6f 72 6d 75 6c 61 72 65 6e 2e 20 53 69 65 20 6b c3 b6 6e 6e 65 6e 20 49 68 72 65 6e 20 42 72 6f 77 73 65 72 20 73 6f 20 65 69 6e 73 74 65 6c 6c 65 6e 2c 20 64 61 73 73 20 64 69 65 73 65 20 43 6f 6f 6b 69 65 73 20 62 6c 6f 63 6b 69 65 72 74 20 6f 64 65 72 20 53 69 65 20 c3 bc 62 65 72 20 64 69 65 73 65 20 43 6f 6f 6b 69 65 73 20 62 65 6e 61 63 68 72 69 63 68 74 69 67 74 20 77 65 72 64 65 6e 2e 20 45 69 6e 69 67 65 20 42 65 72 65 69 63 68 65 20 64 65 72 20 57 65 62 73 69 74 65 20 66 75 6e 6b 74 69 6f 6e 69 65 72 65 6e 20 64 61 6e 6e 20 61 62 65 72 20 6e 69 63 68 74 2e 20 44 69 65 Data Ascii: nschutzeinstellungen, dem Anmelden oder dem Ausfllen von Formularen. Sie knnen Ihren Browser so einstellen, dass diese Cookies blockiert oder Sie ber diese Cookies benachrichtigt werden. Einige Bereiche der Website funktionieren dann aber nicht. Die
2024-09-27 04:02:22 UTC	1369	IN	Data Raw: 73 22 3a 5b 5d 2c 22 48 61 73 4c 65 67 49 6e 74 4f 70 74 4f 75 74 22 3a 66 61 6c 73 65 2c 22 48 61 73 43 6f 6e 73 65 6e 74 4f 70 74 4f 75 74 22 3a 74 72 75 65 2c 22 49 73 47 70 63 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 56 65 6e 64 6f 72 53 65 72 76 69 63 65 73 22 3a 6e 75 6c 6c 2c 22 54 72 61 63 6b 69 6e 67 54 65 63 68 22 3a 6e 75 6c 6c 7d 2c 7b 22 53 68 6f 77 49 6e 50 6f 70 75 70 22 3a 74 72 75 65 2c 22 53 68 6f 77 49 6e 50 6f 70 75 70 4e 6f 6e 49 41 42 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 44 4b 4c 69 73 74 4c 69 6e 6b 22 3a 74 72 75 65 2c 22 4f 72 64 65 72 22 3a 22 33 22 2c 22 4f 70 74 61 6e 6f 6e 47 72 6f 75 70 49 64 22 3a 22 43 30 30 30 35 22 2c 22 50 61 72 65 6e 74 22 3a 22 22 2c 22 53 68 6f 77 53 75 62 67 72 6f 75 70 22 3a 74 72 75 65 2c Data Ascii: s":[],"HasLegIntOptOut":false,"HasConsentOptOut":true,"IsGpcEnabled":false,"VendorServices":null,"TrackingTech":null},{"ShowInPopup":true,"ShowInPopupNonIAB":true,"ShowSDKListLink":true,"Order":"3","OptanonGroupId":"C0005","Parent":"","ShowSubgroup":true,
2024-09-27 04:02:22 UTC	1369	IN	Data Raw: 72 65 69 67 61 62 65 74 6f 6f 6c 73 20 6d c3 b6 67 6c 69 63 68 65 72 77 65 69 73 65 20 6e 69 63 68 74 20 76 65 72 77 65 6e 64 65 6e 20 6f 64 65 72 20 73 65 68 65 6e 2e 22 2c 22 47 72 6f 75 70 4e 61 6d 65 4d 6f 62 69 6c 65 22 3a 22 53 6f 63 69 61 6c 2d 4d 65 64 69 61 2d 43 6f 6f 6b 69 65 73 22 2c 22 47 72 6f 75 70 4e 61 6d 65 4f 54 54 22 3a 22 53 6f 63 69 61 6c 2d 4d 65 64 69 61 2d 43 6f 6f 6b 69 65 73 22 2c 22 47 72 6f 75 70 4e 61 6d 65 22 3a 22 53 6f 63 69 61 6c 2d 4d 65 64 69 61 2d 43 6f 6f 6b 69 65 73 22 2c 22 49 73 49 61 62 50 75 72 70 6f 73 65 22 3a 66 61 6c 73 65 2c 22 47 65 6e 65 72 61 6c 56 65 6e 64 6f 72 73 49 64 73 22 3a 5b 5d 2c 22 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 73 22 3a 5b 5d 2c 22 48 6f 73 74 73 22 3a 5b 5d 2c 22 50 75 72 70 Data Ascii: reigabetools mglicherweise nicht verwenden oder sehen.","GroupNameMobile":"Social-Media-Cookies","GroupNameOTT":"Social-Media-Cookies","GroupName":"Social-Media-Cookies","IsIabPurpose":false,"GeneralVendorsIds":[],"FirstPartyCookies":[],"Hosts":[],"Purp
2024-09-27 04:02:22 UTC	1369	IN	Data Raw: 75 6e 73 65 72 65 6e 20 57 65 72 62 65 70 61 72 74 6e 65 72 6e 20 67 65 73 65 74 7a 74 20 77 65 72 64 65 6e 2e 20 53 69 65 20 6b c3 b6 6e 6e 65 6e 20 76 6f 6e 20 64 69 65 73 65 6e 20 55 6e 74 65 72 6e 65 68 6d 65 6e 20 76 65 72 77 65 6e 64 65 74 20 77 65 72 64 65 6e 2c 20 75 6d 20 65 69 6e 20 50 72 6f 66 69 6c 20 49 68 72 65 72 20 49 6e 74 65 72 65 73 73 65 6e 20 7a 75 20 65 72 73 74 65 6c 6c 65 6e 20 75 6e 64 20 49 68 6e 65 6e 20 72 65 6c 65 76 61 6e 74 65 20 41 6e 7a 65 69 67 65 6e 20 61 75 66 20 61 6e 64 65 72 65 6e 20 57 65 62 73 69 74 65 73 20 7a 75 20 7a 65 69 67 65 6e 2e 20 53 69 65 20 73 70 65 69 63 68 65 72 6e 20 6e 69 63 68 74 20 64 69 72 65 6b 74 20 70 65 72 73 6f 6e 65 6e 62 65 7a 6f 67 65 6e 65 20 44 61 74 65 6e 2c 20 62 61 73 69 65 72 65 6e Data Ascii: unseren Werbepartnern gesetzt werden. Sie knnen von diesen Unternehmen verwendet werden, um ein Profil Ihrer Interessen zu erstellen und Ihnen relevante Anzeigen auf anderen Websites zu zeigen. Sie speichern nicht direkt personenbezogene Daten, basieren
2024-09-27 04:02:22 UTC	1369	IN	Data Raw: 53 75 62 67 72 6f 75 70 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 75 62 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 75 62 67 72 6f 75 70 54 6f 67 67 6c 65 22 3a 66 61 6c 73 65 2c 22 41 6c 77 61 79 73 53 68 6f 77 43 61 74 65 67 6f 72 79 22 3a 66 61 6c 73 65 2c 22 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 44 69 65 73 65 20 43 6f 6f 6b 69 65 73 20 65 72 6d c3 b6 67 6c 69 63 68 65 6e 20 65 73 20 75 6e 73 2c 20 42 65 73 75 63 68 65 20 75 6e 64 20 56 65 72 6b 65 68 72 73 71 75 65 6c 6c 65 6e 20 7a 75 20 7a c3 a4 68 6c 65 6e 2c 20 64 61 6d 69 74 20 77 69 72 20 64 69 65 20 4c 65 69 73 74 75 6e 67 20 75 6e 73 65 72 65 72 20 57 65 62 73 69 74 65 20 6d 65 73 73 65 6e 20 75 6e 64 20 76 65 72 62 65 73 73 65 72 6e Data Ascii: Subgroup":true,"ShowSubGroupDescription":true,"ShowSubgroupToggle":false,"AlwaysShowCategory":false,"GroupDescription":"Diese Cookies ermglichen es uns, Besuche und Verkehrsquellen zu zhlen, damit wir die Leistung unserer Website messen und verbessern

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	50066	104.18.95.41	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:22 UTC	815	OUT	GET /cdn-cgi/challenge-platform/h/g/pat/8c9898c28eda4378/1727409733189/025777101fe1a45b0f5d87c612f46fac53b6d59d903f2a5f242cb7915cf2c14c/x8Gv9uqo--nZHa1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/jkyme/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:22 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Fri, 27 Sep 2024 04:02:22 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-09-27 04:02:22 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 41 6c 64 33 45 42 5f 68 70 46 73 50 58 59 66 47 45 76 52 76 72 46 4f 32 31 5a 32 51 50 79 70 66 4a 43 79 33 6b 56 7a 79 77 55 77 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gAld3EB_hpFsPXYfGEvRvrFO21Z2QPypfJCy3kVzywUwAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-09-27 04:02:22 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	50072	188.114.97.3	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:22 UTC	530	OUT	GET /socket.io/?EIO=4&transport=polling&t=P8nfC8Q&sid=qkaZApVbB7RCdyB5ADHv HTTP/1.1 Host: datechf.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: connect.sid=s%3A%23Europe39005686.Uf7vJ6guFdHYBTEo8rIEABrh5QFZPn9FJkFJWZgvk9w; googtrans=/auto/de; googtrans=/auto/de
2024-09-27 04:02:22 UTC	533	IN	HTTP/1.1 400 Bad Request Date: Fri, 27 Sep 2024 04:02:22 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TXOhxG5tEdtMMHS%2B0ierCgFaZ78ZNDBb3mQ3puA0W2HrVoIRoGYTNThCTcCuQSvkczXvVkvGzoxbxITasILR3i5Nk0yavf60gDg2ZZfTlQXWqF6Kr%2FpRakAJkvpR"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c98990aff3b32ca-EWR
2024-09-27 04:02:22 UTC	47	IN	Data Raw: 32 39 0d 0a 7b 22 63 6f 64 65 22 3a 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 53 65 73 73 69 6f 6e 20 49 44 20 75 6e 6b 6e 6f 77 6e 22 7d 0d 0a Data Ascii: 29{"code":1,"message":"Session ID unknown"}
2024-09-27 04:02:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	50079	150.171.28.10	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:22 UTC	395	OUT	GET /bat.js HTTP/1.1 Host: bat.bing.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MR=0
2024-09-27 04:02:22 UTC	651	IN	HTTP/1.1 200 OK Cache-Control: private,max-age=1800 Content-Length: 50523 Content-Type: application/javascript Last-Modified: Thu, 19 Sep 2024 15:43:41 GMT Accept-Ranges: bytes ETag: "803483b3aaadb1:0" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: D2A2A2585F8C4747A971A5A9D958634A Ref B: EWR30EDGE0806 Ref C: 2024-09-27T04:02:22Z Date: Fri, 27 Sep 2024 04:02:22 GMT Connection: close
2024-09-27 04:02:22 UTC	1897	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 55 45 54 28 6f 29 7b 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 26 26 6e 2e 6c 65 6e 67 74 68 3e 30 7d 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 3d 22 62 61 74 2e 62 69 6e 67 2e 63 6f 6d 22 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 43 6c 3d 22 62 61 74 2e 62 69 6e 67 2e 6e 65 74 22 3b 74 68 69 73 2e 55 52 4c 4c 45 4e 47 54 48 4c 49 4d 49 54 3d 34 30 39 36 3b 74 68 69 73 2e 70 61 67 65 4c 6f 61 64 45 76 74 3d 22 70 61 67 65 4c 6f 61 64 22 3b 74 68 69 73 2e 63 75 73 74 6f 6d 45 76 74 3d 22 63 75 73 74 6f 6d 22 3b 74 68 69 73 2e 70 61 67 65 56 69 65 77 45 76 74 3d 22 70 61 67 65 5f 76 69 65 77 22 3b 6f 2e 56 65 72 3d 6f 2e 56 65 72 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 Data Ascii: function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&
2024-09-27 04:02:22 UTC	8192	IN	Data Raw: 69 64 3a 7b 7d 2c 68 63 74 5f 74 6f 74 61 6c 5f 70 72 69 63 65 3a 7b 74 79 70 65 3a 22 6e 75 6d 62 65 72 22 7d 2c 68 63 74 5f 70 61 67 65 74 79 70 65 3a 7b 74 79 70 65 3a 22 65 6e 75 6d 22 2c 76 61 6c 75 65 73 3a 5b 22 68 6f 6d 65 22 2c 22 73 65 61 72 63 68 72 65 73 75 6c 74 73 22 2c 22 6f 66 66 65 72 64 65 74 61 69 6c 22 2c 22 63 6f 6e 76 65 72 73 69 6f 6e 69 6e 74 65 6e 74 22 2c 22 63 6f 6e 76 65 72 73 69 6f 6e 22 2c 22 70 72 6f 70 65 72 74 79 22 2c 22 63 61 72 74 22 2c 22 70 75 72 63 68 61 73 65 22 2c 22 63 61 6e 63 65 6c 22 2c 22 6f 74 68 65 72 22 5d 7d 2c 74 72 61 76 65 6c 5f 64 65 73 74 69 64 3a 7b 7d 2c 74 72 61 76 65 6c 5f 6f 72 69 67 69 6e 69 64 3a 7b 7d 2c 74 72 61 76 65 6c 5f 70 61 67 65 74 79 70 65 3a 7b 74 79 70 65 3a 22 65 6e 75 6d 22 2c 76 Data Ascii: id:{},hct_total_price:{type:"number"},hct_pagetype:{type:"enum",values:["home","searchresults","offerdetail","conversionintent","conversion","property","cart","purchase","cancel","other"]},travel_destid:{},travel_originid:{},travel_pagetype:{type:"enum",v
2024-09-27 04:02:22 UTC	5919	IN	Data Raw: 69 65 44 6f 6d 61 69 6e 29 3b 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 63 6f 6f 6b 69 65 46 6c 61 67 73 3d 22 22 3b 6f 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 63 6f 6f 6b 69 65 46 6c 61 67 73 22 29 26 26 6f 2e 63 6f 6f 6b 69 65 46 6c 61 67 73 26 26 74 79 70 65 6f 66 20 6f 2e 63 6f 6f 6b 69 65 46 6c 61 67 73 3d 3d 22 73 74 72 69 6e 67 22 26 26 28 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 63 6f 6f 6b 69 65 46 6c 61 67 73 3d 6f 2e 63 6f 6f 6b 69 65 46 6c 61 67 73 29 3b 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 6e 61 76 54 69 6d 69 6e 67 41 70 69 3d 21 31 3b 6f 2e 6e 61 76 54 69 6d 69 6e 67 41 70 69 3d 3d 3d 21 30 26 26 28 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 6e 61 76 54 69 6d 69 6e 67 41 70 69 3d 21 30 29 3b 74 68 69 73 2e 75 65 Data Ascii: ieDomain);this.uetConfig.cookieFlags="";o.hasOwnProperty("cookieFlags")&&o.cookieFlags&&typeof o.cookieFlags=="string"&&(this.uetConfig.cookieFlags=o.cookieFlags);this.uetConfig.navTimingApi=!1;o.navTimingApi===!0&&(this.uetConfig.navTimingApi=!0);this.ue
2024-09-27 04:02:22 UTC	8192	IN	Data Raw: 75 6e 64 65 66 69 6e 65 64 29 72 65 74 75 72 6e 3b 68 3d 75 3d 3d 3d 74 68 69 73 2e 70 61 67 65 56 69 65 77 45 76 74 3f 74 68 69 73 2e 70 61 67 65 4c 6f 61 64 45 76 74 3a 74 68 69 73 2e 63 75 73 74 6f 6d 45 76 74 3b 74 68 69 73 2e 65 76 74 28 68 2c 75 2c 73 2c 6e 5b 32 5d 29 7d 65 6c 73 65 20 69 66 28 6e 5b 30 5d 3d 3d 3d 22 73 65 74 22 29 7b 69 66 28 74 79 70 65 6f 66 20 6e 5b 31 5d 5b 30 5d 21 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 3b 66 6f 72 28 69 20 69 6e 20 6e 5b 31 5d 5b 30 5d 29 74 68 69 73 2e 6b 6e 6f 77 6e 50 61 72 61 6d 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 69 29 26 26 28 74 68 69 73 2e 70 61 67 65 4c 65 76 65 6c 50 61 72 61 6d 73 5b 69 5d 3d 6e 5b 31 5d 5b 30 5d 5b 69 5d 2c 69 3d 3d 3d 22 70 69 64 22 26 26 74 68 69 73 2e Data Ascii: undefined)return;h=u===this.pageViewEvt?this.pageLoadEvt:this.customEvt;this.evt(h,u,s,n[2])}else if(n[0]==="set"){if(typeof n[1][0]!="object")return;for(i in n[1][0])this.knownParams.hasOwnProperty(i)&&(this.pageLevelParams[i]=n[1][0][i],i==="pid"&&this.
2024-09-27 04:02:22 UTC	8192	IN	Data Raw: 6e 2e 6d 74 70 3d 6e 61 76 69 67 61 74 6f 72 2e 6d 61 78 54 6f 75 63 68 50 6f 69 6e 74 73 29 2c 6e 7d 3b 74 68 69 73 2e 72 65 6d 6f 76 65 54 72 61 69 6c 69 6e 67 41 6d 70 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 6e 2e 63 68 61 72 41 74 28 6e 2e 6c 65 6e 67 74 68 2d 31 29 3b 72 65 74 75 72 6e 28 74 3d 3d 3d 22 26 22 7c 7c 74 3d 3d 3d 22 3f 22 29 26 26 28 6e 3d 6e 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 6e 2e 6c 65 6e 67 74 68 2d 31 29 29 2c 6e 7d 3b 74 68 69 73 2e 68 65 6c 70 65 72 45 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 74 79 70 65 6f 66 20 43 75 73 74 6f 6d 45 76 65 6e 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 76 61 72 20 74 3d 7b 65 72 72 4d 73 67 3a 6e 2c 74 61 67 49 64 3a 74 68 69 73 2e 62 65 61 63 6f 6e 50 61 Data Ascii: n.mtp=navigator.maxTouchPoints),n};this.removeTrailingAmp=function(n){var t=n.charAt(n.length-1);return(t==="&"\|\|t==="?")&&(n=n.substring(0,n.length-1)),n};this.helperError=function(n){if(typeof CustomEvent=="function"){var t={errMsg:n,tagId:this.beaconPa
2024-09-27 04:02:22 UTC	8192	IN	Data Raw: 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 70 61 67 65 74 79 70 65 22 29 3e 30 3f 28 74 2e 70 61 67 65 74 79 70 65 3d 74 68 69 73 2e 76 61 6c 69 64 61 74 65 50 61 67 65 54 79 70 65 28 74 2e 70 61 67 65 74 79 70 65 2c 74 68 69 73 2e 76 61 6c 69 64 52 65 74 61 69 6c 50 61 67 65 54 79 70 65 56 61 6c 75 65 73 29 2c 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 70 72 6f 64 69 64 22 29 3e 30 26 26 28 74 2e 70 72 6f 64 69 64 3d 74 68 69 73 2e 76 61 6c 69 64 61 74 65 50 72 6f 64 49 64 28 74 2e 70 72 6f 64 69 64 29 29 29 3a 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 70 72 6f 64 69 64 22 29 3e 30 26 26 74 68 69 73 2e 74 68 72 6f 77 45 72 72 6f 72 28 74 68 69 73 2e 6d 69 73 73 69 6e 67 50 61 67 65 54 79 70 65 45 78 63 65 70 74 69 6f 6e Data Ascii: t.hasOwnProperty("pagetype")>0?(t.pagetype=this.validatePageType(t.pagetype,this.validRetailPageTypeValues),t.hasOwnProperty("prodid")>0&&(t.prodid=this.validateProdId(t.prodid))):t.hasOwnProperty("prodid")>0&&this.throwError(this.missingPageTypeException
2024-09-27 04:02:22 UTC	8192	IN	Data Raw: 75 3c 3d 33 3f 74 5b 69 5d 3d 22 22 3a 64 65 6c 65 74 65 20 74 5b 69 5d 2c 72 3d 74 68 69 73 2e 73 74 72 69 6e 67 69 66 79 54 6f 52 65 71 75 65 73 74 28 74 29 2c 66 3d 74 68 69 73 2e 72 65 6d 6f 76 65 54 72 61 69 6c 69 6e 67 41 6d 70 28 65 2b 72 29 29 3b 74 68 69 73 2e 66 69 72 65 42 65 61 63 6f 6e 49 6d 67 28 66 29 3b 74 68 69 73 2e 73 6e 69 70 70 65 74 45 76 65 6e 74 51 75 65 75 65 2e 70 75 73 68 28 72 29 3b 74 68 69 73 2e 73 6e 69 70 70 65 74 45 76 65 6e 74 51 75 65 75 65 2e 6c 65 6e 67 74 68 3e 32 30 26 26 74 68 69 73 2e 73 6e 69 70 70 65 74 45 76 65 6e 74 51 75 65 75 65 2e 73 68 69 66 74 28 29 3b 74 72 79 7b 74 79 70 65 6f 66 20 43 75 73 74 6f 6d 45 76 65 6e 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 73 3d 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 Data Ascii: u<=3?t[i]="":delete t[i],r=this.stringifyToRequest(t),f=this.removeTrailingAmp(e+r));this.fireBeaconImg(f);this.snippetEventQueue.push(r);this.snippetEventQueue.length>20&&this.snippetEventQueue.shift();try{typeof CustomEvent=="function"&&(s=new CustomEve
2024-09-27 04:02:22 UTC	1747	IN	Data Raw: 28 21 74 68 69 73 2e 69 73 41 64 53 74 6f 72 61 67 65 41 6c 6c 6f 77 65 64 28 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 69 3d 6e 3d 3d 3d 30 3f 74 68 69 73 2e 73 65 73 73 69 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3a 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 76 69 64 43 6f 6f 6b 69 65 2c 74 3d 74 68 69 73 2e 67 65 74 43 6f 6f 6b 69 65 28 69 2c 22 22 2c 74 68 69 73 2e 69 6e 73 69 67 68 74 73 43 6f 6f 6b 69 65 4d 61 78 4c 65 6e 67 74 68 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 28 74 29 7c 7c 28 74 3d 74 68 69 73 2e 67 65 74 4c 6f 63 61 6c 53 74 6f 72 61 67 65 42 61 63 6b 75 70 28 69 2c 74 68 69 73 2e 69 6e 73 69 67 68 74 73 43 6f 6f 6b 69 65 4d 61 78 4c 65 6e 67 74 68 29 29 2c 74 68 69 73 2e 69 6e 73 69 67 68 Data Ascii: (!this.isAdStorageAllowed())return null;var i=n===0?this.sessionCookieName:this.uetConfig.vidCookie,t=this.getCookie(i,"",this.insightsCookieMaxLength);return this.stringExists(t)\|\|(t=this.getLocalStorageBackup(i,this.insightsCookieMaxLength)),this.insigh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	50082	157.240.252.13	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:22 UTC	361	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:22 UTC	1451	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-09-27 04:02:22 UTC	1700	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-09-27 04:02:22 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-09-27 04:02:22 UTC	14683	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-09-27 04:02:23 UTC	16384	IN	Data Raw: 3d 6e 75 6c 6c 26 26 61 21 3d 6e 75 6c 6c 26 26 64 21 3d 6e 75 6c 6c 3f 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 62 2c 65 76 65 6e 74 5f 74 79 70 65 3a 63 2c 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3a 64 2c 69 64 3a 61 7d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 61 2e 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 Data Ascii: =null&&a!=null&&d!=null?{domain_uri:b,event_type:c,extractor_type:d,id:a}:null}function g(a){if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;a=a.extractor_config;if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object"
2024-09-27 04:02:23 UTC	16384	IN	Data Raw: 63 65 3b 61 2e 65 6e 66 6f 72 63 65 3b 61 3d 62 2e 61 72 72 61 79 4f 66 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 61 6c 6c 6f 63 61 74 69 6f 6e 3a 62 2e 6e 75 6d 62 65 72 28 29 2c 63 6f 64 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 6e 61 6d 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 70 61 73 73 52 61 74 65 3a 62 2e 6e 75 6d 62 65 72 28 29 7d 29 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 74 72 61 63 74 50 49 49 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c Data Ascii: ce;a.enforce;a=b.arrayOf(b.objectWithFields({allocation:b.number(),code:b.string(),name:b.string(),passRate:b.number()}));k.exports=a})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsExtractPII",function(){return function(g,h,i,
2024-09-27 04:02:23 UTC	16384	IN	Data Raw: 62 6a 65 63 74 22 26 26 28 67 3d 68 29 3b 72 65 74 75 72 6e 20 61 21 3d 6e 75 6c 6c 26 26 63 21 3d 6e 75 6c 6c 3f 5b 61 2c 63 2c 6a 2c 66 2c 67 5d 3a 6e 75 6c 6c 7d 63 3d 6e 65 77 20 61 28 67 29 3b 6c 2e 65 78 70 6f 72 74 73 3d 63 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 65 74 49 73 43 68 72 6f 6d 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 2c 69 29 7b 76 61 72 20 6a 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6a 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 Data Ascii: bject"&&(g=h);return a!=null&&c!=null?[a,c,j,f,g]:null}c=new a(g);l.exports=c})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetIsChrome",function(){return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict
2024-09-27 04:02:23 UTC	1700	IN	Data Raw: 72 74 79 2e 63 61 6c 6c 28 68 2c 61 29 3f 68 5b 61 5d 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 72 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 29 72 65 74 75 72 6e 20 61 3b 69 66 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 61 29 3f 76 6f 69 64 20 30 3a 61 3b 74 72 79 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 61 29 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 75 72 6e 20 61 2e 74 6f 53 74 72 69 6e 67 26 26 61 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 3f 61 2e 74 6f 53 74 72 69 6e 67 28 29 3a 76 6f 69 64 20 30 7d 66 75 6e 63 74 69 6f 6e 20 73 28 61 29 7b 76 61 72 20 62 3d 7b 7d 3b 69 66 28 61 21 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 61 3d 3d Data Ascii: rty.call(h,a)?h[a]:a}function r(a){if(typeof a==="string")return a;if(typeof a==="number")return isNaN(a)?void 0:a;try{return JSON.stringify(a)}catch(a){}return a.toString&&a.toString.call?a.toString():void 0}function s(a){var b={};if(a!=null&&(typeof a==
2024-09-27 04:02:23 UTC	14684	IN	Data Raw: 74 75 72 6e 20 61 21 3d 6e 75 6c 6c 7d 29 3b 66 2e 6c 65 6e 67 74 68 3e 30 26 26 28 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 68 61 73 68 21 3d 6e 75 6c 6c 26 26 61 2e 61 70 70 65 6e 64 28 22 68 6d 65 22 2c 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 68 61 73 68 29 2c 61 2e 61 70 70 65 6e 64 28 22 65 78 5f 6d 22 2c 66 2e 6a 6f 69 6e 28 22 2c 22 29 29 29 7d 7d 5d 29 3b 72 65 74 75 72 6e 20 61 7d 28 29 3b 6c 2e 65 78 70 6f 72 74 73 3d 6e 65 77 20 61 28 29 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e Data Ascii: turn a!=null});f.length>0&&(this.moduleEncodings.hash!=null&&a.append("hme",this.moduleEncodings.hash),a.append("ex_m",f.join(",")))}}]);return a}();l.exports=new a()})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsModuleEncodin
2024-09-27 04:02:23 UTC	16384	IN	Data Raw: 29 3b 72 65 74 75 72 6e 7d 69 66 28 68 28 62 29 29 7b 6d 28 22 42 45 41 43 4f 4e 22 2c 61 29 3b 72 65 74 75 72 6e 7d 69 66 28 6a 28 62 29 29 7b 6d 28 22 50 4f 53 54 22 2c 61 29 3b 72 65 74 75 72 6e 7d 69 66 28 69 28 62 2c 7b 69 67 6e 6f 72 65 52 65 71 75 65 73 74 4c 65 6e 67 74 68 43 68 65 63 6b 3a 21 30 7d 29 29 7b 6d 28 22 47 45 54 22 2c 61 29 3b 72 65 74 75 72 6e 7d 63 28 6e 65 77 20 45 72 72 6f 72 28 22 63 6f 75 6c 64 20 6e 6f 74 20 73 65 6e 64 20 62 61 74 63 68 22 29 29 7d 76 61 72 20 6f 3d 6e 65 77 20 61 28 6e 29 3b 66 75 6e 63 74 69 6f 6e 20 70 28 61 29 7b 6f 2e 61 64 64 54 6f 42 61 74 63 68 28 61 29 7d 67 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6f 6e 70 61 67 65 68 69 64 65 22 69 6e 20 67 3f 22 70 61 67 65 68 69 64 65 22 3a 22 75 Data Ascii: );return}if(h(b)){m("BEACON",a);return}if(j(b)){m("POST",a);return}if(i(b,{ignoreRequestLengthCheck:!0})){m("GET",a);return}c(new Error("could not send batch"))}var o=new a(n);function p(a){o.addToBatch(a)}g.addEventListener("onpagehide"in g?"pagehide":"u
2024-09-27 04:02:23 UTC	16384	IN	Data Raw: 72 6f 77 20 6e 65 77 20 67 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 44 28 61 29 7b 69 66 28 21 61 29 74 68 72 6f 77 20 6e 65 77 20 67 28 29 7d 66 75 6e 63 74 69 6f 6e 20 45 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 3d 42 28 62 2c 75 28 29 29 3b 44 28 62 2e 6c 65 6e 67 74 68 3d 3d 3d 61 2e 6c 65 6e 67 74 68 29 3b 72 65 74 75 72 6e 20 62 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 42 28 62 2c 61 5b 63 5d 29 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 28 61 29 7b 76 61 72 20 62 3d 61 2e 64 65 66 2c 63 3d 61 2e 76 61 6c 69 64 61 74 6f 72 73 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 64 3d 42 28 61 2c 62 29 3b 63 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 Data Ascii: row new g()}}function D(a){if(!a)throw new g()}function E(a){return function(b){b=B(b,u());D(b.length===a.length);return b.map(function(b,c){return B(b,a[c])})}}function F(a){var b=a.def,c=a.validators;return function(a){var d=B(a,b);c.forEach(function(a)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	50085	104.18.32.137	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:22 UTC	591	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.twint.ch Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.twint.ch/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:02:22 UTC	370	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 04:02:22 GMT Content-Type: application/json Content-Length: 69 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8c98990c3d8d4245-EWR
2024-09-27 04:02:22 UTC	69	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 4e 59 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"NY","stateName":"New York","continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	50090	142.250.186.34	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:02:25 UTC	1593	OUT	GET /pagead/viewthroughconversion/946203707/?random=1727409736078&cv=11&fst=1727409736078&bg=ffffff&guid=ON&async=1&gtm=45be49p0v9117572465z876304729za200zb9190789414&gcd=13t3t3t3t5l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fgoogle-play%2F&ref=https%3A%2F%2Fwww.twint.ch%2Fprivatkunden%2Ffunktionen%2Fdigitale-gutscheine%2Fgoogle-play%2F%3F__cf_chl_tk%3DvPDafy5u7fTr24UoQidgupFmfFsp3K2ZYE8LkGIqA1g-1727409712-0.0.1.1-4734&hn=www.googleadservices.com&frm=0&tiba=Kaufe%20Google%20Play%20Guthaben%20direkt%20in%20der%20TWINT%20App%20%C2%BB%20TWINT&npa=0&pscdl=noapi&auid=1403402495.1727409735&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.twint.ch/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnaxrRQiOXDkuDPypDvKrx_28Q0spLOcJvV9FpcEPQeJgRmNFlJQAQ_CJMG
2024-09-27 04:02:25 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 27 Sep 2024 04:02:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-27 04:02:25 UTC	687	IN	Data Raw: 31 33 62 38 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 64 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 64 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c Data Ascii: 13b8(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&global
2024-09-27 04:02:25 UTC	1390	IN	Data Raw: 22 2e 22 29 3b 61 3d 63 2e 6c 65 6e 67 74 68 3d 3d 3d 31 3b 76 61 72 20 65 3d 63 5b 30 5d 2c 67 3b 21 61 26 26 65 20 69 6e 20 74 3f 67 3d 74 3a 67 3d 6d 3b 66 6f 72 28 65 3d 30 3b 65 3c 63 2e 6c 65 6e 67 74 68 2d 31 3b 65 2b 2b 29 7b 76 61 72 20 66 3d 63 5b 65 5d 3b 69 66 28 21 28 66 20 69 6e 20 67 29 29 62 72 65 61 6b 20 61 3b 67 3d 67 5b 66 5d 7d 63 3d 63 5b 63 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 70 26 26 64 3d 3d 3d 22 65 73 36 22 3f 67 5b 63 5d 3a 6e 75 6c 6c 3b 62 3d 62 28 64 29 3b 62 21 3d 6e 75 6c 6c 26 26 28 61 3f 68 28 74 2c 63 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 3a 62 21 3d 3d 64 26 26 28 76 5b 63 5d 3d 3d 3d 76 6f 69 64 20 30 26 26 28 61 3d 4d 61 74 68 2e 72 61 Data Ascii: ".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.ra
2024-09-27 04:02:25 UTC	1390	IN	Data Raw: 28 29 7b 72 65 74 75 72 6e 20 47 3f 21 21 4f 26 26 4f 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3e 30 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 55 28 29 7b 72 65 74 75 72 6e 20 54 28 29 3f 51 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 52 28 22 43 68 72 6f 6d 65 22 29 7c 7c 52 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 54 28 29 3f 30 3a 52 28 22 45 64 67 65 22 29 29 7c 7c 52 28 22 53 69 6c 6b 22 29 7d 3b 21 52 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 55 28 29 3b 55 28 29 3b 52 28 22 53 61 66 61 72 69 22 29 26 26 28 55 28 29 7c 7c 28 54 28 29 3f 30 3a 52 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 54 28 29 3f 30 3a 52 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 54 28 29 3f 30 3a 52 28 22 45 64 67 65 22 29 29 7c 7c 28 54 28 29 3f 51 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 Data Ascii: (){return G?!!O&&O.brands.length>0:!1}function U(){return T()?Q("Chromium"):(R("Chrome")\|\|R("CriOS"))&&!(T()?0:R("Edge"))\|\|R("Silk")};!R("Android")\|\|U();U();R("Safari")&&(U()\|\|(T()?0:R("Coast"))\|\|(T()?0:R("Opera"))\|\|(T()?0:R("Edge"))\|\|(T()?Q("Microsoft Ed
2024-09-27 04:02:25 UTC	1390	IN	Data Raw: 47 49 4e 47 3d 41 2e 54 41 47 47 49 4e 47 7c 7c 5b 5d 2c 41 2e 54 41 47 47 49 4e 47 5b 31 35 5d 3d 21 30 7d 63 61 7c 7c 45 28 71 29 3b 4a 3d 21 30 7d 7d 4a 26 26 65 28 29 7d 7d 28 66 29 29 29 3b 72 2e 6f 6e 6c 6f 61 64 3d 65 3b 72 2e 73 72 63 3d 64 5b 66 2e 67 5d 7d 65 28 29 7d 76 61 72 20 58 3d 5b 22 73 73 5f 22 5d 2c 59 3d 73 7c 7c 7a 3b 58 5b 30 5d 69 6e 20 59 7c 7c 74 79 70 65 6f 66 20 59 2e 65 78 65 63 53 63 72 69 70 74 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 7c 7c 59 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 58 5b 30 5d 29 3b 20 66 6f 72 28 76 61 72 20 5a 3b 58 2e 6c 65 6e 67 74 68 26 26 28 5a 3d 58 2e 73 68 69 66 74 28 29 29 3b 29 58 2e 6c 65 6e 67 74 68 7c 7c 57 3d 3d 3d 76 6f 69 64 20 30 3f 59 5b 5a 5d 26 26 59 5b 5a 5d 21 3d 3d 4f Data Ascii: GING=A.TAGGING\|\|[],A.TAGGING[15]=!0}ca\|\|E(q);J=!0}}J&&e()}}(f)));r.onload=e;r.src=d[f.g]}e()}var X=["ss_"],Y=s\|\|z;X[0]in Y\|\|typeof Y.execScript=="undefined"\|\|Y.execScript("var "+X[0]); for(var Z;X.length&&(Z=X.shift());)X.length\|\|W===void 0?Y[Z]&&Y[Z]!==O
2024-09-27 04:02:25 UTC	199	IN	Data Raw: 33 64 65 76 65 6e 74 25 33 44 67 74 61 67 2e 63 6f 6e 66 69 67 5c 78 32 36 72 66 6d 74 5c 78 33 64 33 5c 78 32 36 66 6d 74 5c 78 33 64 33 5c 78 32 36 69 73 5f 76 74 63 5c 78 33 64 31 5c 78 32 36 63 69 64 5c 78 33 64 43 41 51 53 4b 51 44 70 61 58 6e 66 32 6f 51 44 4c 4f 69 6c 76 50 45 33 41 6b 47 5a 4d 38 4b 37 7a 4c 4a 46 4b 48 6f 50 33 47 77 4a 46 71 4e 36 43 78 4e 6c 69 73 38 71 48 66 59 50 5c 78 32 36 72 61 6e 64 6f 6d 5c 78 33 64 32 39 34 36 31 39 38 31 39 31 5c 78 32 36 72 6d 74 5f 74 6c 64 5c 78 33 64 30 5c 78 32 36 69 70 72 5c 78 33 64 79 27 5d 2c 20 5b 5d 29 3b 7d 29 28 29 3b 0d 0a Data Ascii: 3devent%3Dgtag.config\x26rfmt\x3d3\x26fmt\x3d3\x26is_vtc\x3d1\x26cid\x3dCAQSKQDpaXnf2oQDLOilvPE3AkGZM8K7zLJFKHoP3GwJFqN6CxNlis8qHfYP\x26random\x3d2946198191\x26rmt_tld\x3d0\x26ipr\x3dy'], []);})();
2024-09-27 04:02:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	00:01:30
Start date:	27/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	00:01:33
Start date:	27/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2116 --field-trial-handle=1856,i,1715639760046732038,11749315745599090564,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	00:01:36
Start date:	27/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://datechf.cc/de/receive/79469380"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	00:02:45
Start date:	27/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6520 --field-trial-handle=1856,i,1715639760046732038,11749315745599090564,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	00:02:45
Start date:	27/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4912 --field-trial-handle=1856,i,1715639760046732038,11749315745599090564,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://datechf.cc/de/receive/79469380

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Chrome Cache Entry: 180

Chrome Cache Entry: 181

Chrome Cache Entry: 182

Chrome Cache Entry: 183

Chrome Cache Entry: 184

Chrome Cache Entry: 185

Chrome Cache Entry: 186

Chrome Cache Entry: 187

Chrome Cache Entry: 188

Chrome Cache Entry: 189

Chrome Cache Entry: 190

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Windows Analysis Report
http://datechf.cc/de/receive/79469380