Edit tour

Windows Analysis Report
https://notexistsaa.calperlongtermcare.com/

Overview

General Information

Sample URL:	https://notexistsaa.calperlongtermcare.com/
Analysis ID:	1522244
Tags:	urlscan
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML page contains hidden javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1900 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3328 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=2036,i,9510549417315578312,17399682177661513637,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6372 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://notexistsaa.calperlongtermcare.com/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://notexistsaa.calperlongtermcare.com/

HTTP Parser: Base64 decoded: <svg fill='#D7D7D7' style="float: right" xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Source: https://notexistsaa.calperlongtermcare.com/	HTTP Parser: No favicon
Source: https://notexistsaa.calperlongtermcare.com/	HTTP Parser: No favicon
Source: https://notexistsaa.calperlongtermcare.com/	HTTP Parser: No favicon
Source: https://notexistsaa.calperlongtermcare.com/	HTTP Parser: No favicon
Source: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Long-term+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpjxYC9i9y0TgoYIuZ8V_UHRMakU9iohKuhUuqxr8ymSHJsd1j4bjWfISTJnMGI7hFgWr_vhvGP_2LJwczGgGfqI8hF3eyZLCQwcvAFeaUtp6um6oqJ5_8cyL1p-sL7wwR07cSGJTy4bg&pcsa=false	HTTP Parser: No favicon
Source: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Long-term+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpjxYC9i9y0TgoYIuZ8V_UHRMakU9iohKuhUuqxr8ymSHJsd1j4bjWfISTJnMGI7hFgWr_vhvGP_2LJwczGgGfqI8hF3eyZLCQwcvAFeaUtp6um6oqJ5_8cyL1p-sL7wwR07cSGJTy4bg&pcsa=false	HTTP Parser: No favicon
Source: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Long-term+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpjxYC9i9y0TgoYIuZ8V_UHRMakU9iohKuhUuqxr8ymSHJsd1j4bjWfISTJnMGI7hFgWr_vhvGP_2LJwczGgGfqI8hF3eyZLCQwcvAFeaUtp6um6oqJ5_8cyL1p-sL7wwR07cSGJTy4bg&pcsa=false	HTTP Parser: No favicon
Source: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Long-term+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpjxYC9i9y0TgoYIuZ8V_UHRMakU9iohKuhUuqxr8ymSHJsd1j4bjWfISTJnMGI7hFgWr_vhvGP_2LJwczGgGfqI8hF3eyZLCQwcvAFeaUtp6um6oqJ5_8cyL1p-sL7wwR07cSGJTy4bg&pcsa=false	HTTP Parser: No favicon
Source: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Mental+Health+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj2Fwx1CP69y51eGq-AiAZrdjjEEEm-kgI4GG27mh0rqrtgT08SvO_YxhRixDnAmYj1ePjmTSEcyDkXkXf2_m-yoK-uk8je2jQwTOwoAJueqS2Nl_BXbBpVJ72-oiVSQZKMuVZ8IvWr4&pcsa=false	HTTP Parser: No favicon
Source: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Mental+Health+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj2Fwx1CP69y51eGq-AiAZrdjjEEEm-kgI4GG27mh0rqrtgT08SvO_YxhRixDnAmYj1ePjmTSEcyDkXkXf2_m-yoK-uk8je2jQwTOwoAJueqS2Nl_BXbBpVJ72-oiVSQZKMuVZ8IvWr4&pcsa=false	HTTP Parser: No favicon
Source: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Mental+Health+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj2Fwx1CP69y51eGq-AiAZrdjjEEEm-kgI4GG27mh0rqrtgT08SvO_YxhRixDnAmYj1ePjmTSEcyDkXkXf2_m-yoK-uk8je2jQwTOwoAJueqS2Nl_BXbBpVJ72-oiVSQZKMuVZ8IvWr4&pcsa=false	HTTP Parser: No favicon
Source: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Mental+Health+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj2Fwx1CP69y51eGq-AiAZrdjjEEEm-kgI4GG27mh0rqrtgT08SvO_YxhRixDnAmYj1ePjmTSEcyDkXkXf2_m-yoK-uk8je2jQwTOwoAJueqS2Nl_BXbBpVJ72-oiVSQZKMuVZ8IvWr4&pcsa=false	HTTP Parser: No favicon
Source: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Mental+Health+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj2Fwx1CP69y51eGq-AiAZrdjjEEEm-kgI4GG27mh0rqrtgT08SvO_YxhRixDnAmYj1ePjmTSEcyDkXkXf2_m-yoK-uk8je2jQwTOwoAJueqS2Nl_BXbBpVJ72-oiVSQZKMuVZ8IvWr4&pcsa=false	HTTP Parser: No favicon
Source: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Disability+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj8QvgQXu7ghwdodehT82JgRTn3vllMykC0FwxvyfTQJr6A0SuG7m0lQBPeY8be8shRgjOY8aIA_Dc4-x7TvuvAzvS8PHi2SQZ6LVKYyrfVusdKdQ6CTxo02n5nKSQlxTjJhvzl1MnjA&pcsa=false	HTTP Parser: No favicon
Source: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Disability+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj8QvgQXu7ghwdodehT82JgRTn3vllMykC0FwxvyfTQJr6A0SuG7m0lQBPeY8be8shRgjOY8aIA_Dc4-x7TvuvAzvS8PHi2SQZ6LVKYyrfVusdKdQ6CTxo02n5nKSQlxTjJhvzl1MnjA&pcsa=false	HTTP Parser: No favicon
Source: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Disability+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj8QvgQXu7ghwdodehT82JgRTn3vllMykC0FwxvyfTQJr6A0SuG7m0lQBPeY8be8shRgjOY8aIA_Dc4-x7TvuvAzvS8PHi2SQZ6LVKYyrfVusdKdQ6CTxo02n5nKSQlxTjJhvzl1MnjA&pcsa=false	HTTP Parser: No favicon
Source: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Disability+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj8QvgQXu7ghwdodehT82JgRTn3vllMykC0FwxvyfTQJr6A0SuG7m0lQBPeY8be8shRgjOY8aIA_Dc4-x7TvuvAzvS8PHi2SQZ6LVKYyrfVusdKdQ6CTxo02n5nKSQlxTjJhvzl1MnjA&pcsa=false	HTTP Parser: No favicon
Source: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Mental+Health+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj2Fwx1CP69y51eGq-AiAZrdjjEEEm-kgI4GG27mh0rqrtgT08SvO_YxhRixDnAmYj1ePjmTSEcyDkXkXf2_m-yoK-uk8je2jQwTOwoAJueqS2Nl_BXbBpVJ72-oiVSQZKMuVZ8IvWr4&pcsa=false&nb=0&nm=1	HTTP Parser: No favicon
Source: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Mental+Health+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj2Fwx1CP69y51eGq-AiAZrdjjEEEm-kgI4GG27mh0rqrtgT08SvO_YxhRixDnAmYj1ePjmTSEcyDkXkXf2_m-yoK-uk8je2jQwTOwoAJueqS2Nl_BXbBpVJ72-oiVSQZKMuVZ8IvWr4&pcsa=false&nb=0&nm=1	HTTP Parser: No favicon
Source: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Mental+Health+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj2Fwx1CP69y51eGq-AiAZrdjjEEEm-kgI4GG27mh0rqrtgT08SvO_YxhRixDnAmYj1ePjmTSEcyDkXkXf2_m-yoK-uk8je2jQwTOwoAJueqS2Nl_BXbBpVJ72-oiVSQZKMuVZ8IvWr4&pcsa=false&nb=0&nm=1	HTTP Parser: No favicon
Source: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Mental+Health+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj2Fwx1CP69y51eGq-AiAZrdjjEEEm-kgI4GG27mh0rqrtgT08SvO_YxhRixDnAmYj1ePjmTSEcyDkXkXf2_m-yoK-uk8je2jQwTOwoAJueqS2Nl_BXbBpVJ72-oiVSQZKMuVZ8IvWr4&pcsa=false&nb=0&nm=1	HTTP Parser: No favicon
Source: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Disability+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj8QvgQXu7ghwdodehT82JgRTn3vllMykC0FwxvyfTQJr6A0SuG7m0lQBPeY8be8shRgjOY8aIA_Dc4-x7TvuvAzvS8PHi2SQZ6LVKYyrfVusdKdQ6CTxo02n5nKSQlxTjJhvzl1MnjA&pcsa=false&nb=0&nm=2	HTTP Parser: No favicon
Source: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Disability+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj8QvgQXu7ghwdodehT82JgRTn3vllMykC0FwxvyfTQJr6A0SuG7m0lQBPeY8be8shRgjOY8aIA_Dc4-x7TvuvAzvS8PHi2SQZ6LVKYyrfVusdKdQ6CTxo02n5nKSQlxTjJhvzl1MnjA&pcsa=false&nb=0&nm=2	HTTP Parser: No favicon
Source: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Disability+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj8QvgQXu7ghwdodehT82JgRTn3vllMykC0FwxvyfTQJr6A0SuG7m0lQBPeY8be8shRgjOY8aIA_Dc4-x7TvuvAzvS8PHi2SQZ6LVKYyrfVusdKdQ6CTxo02n5nKSQlxTjJhvzl1MnjA&pcsa=false&nb=0&nm=2	HTTP Parser: No favicon
Source: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Disability+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj8QvgQXu7ghwdodehT82JgRTn3vllMykC0FwxvyfTQJr6A0SuG7m0lQBPeY8be8shRgjOY8aIA_Dc4-x7TvuvAzvS8PHi2SQZ6LVKYyrfVusdKdQ6CTxo02n5nKSQlxTjJhvzl1MnjA&pcsa=false&nb=0&nm=2	HTTP Parser: No favicon
Source: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Long-term+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpjxYC9i9y0TgoYIuZ8V_UHRMakU9iohKuhUuqxr8ymSHJsd1j4bjWfISTJnMGI7hFgWr_vhvGP_2LJwczGgGfqI8hF3eyZLCQwcvAFeaUtp6um6oqJ5_8cyL1p-sL7wwR07cSGJTy4bg&pcsa=false&nb=0&nm=1	HTTP Parser: No favicon
Source: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Long-term+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpjxYC9i9y0TgoYIuZ8V_UHRMakU9iohKuhUuqxr8ymSHJsd1j4bjWfISTJnMGI7hFgWr_vhvGP_2LJwczGgGfqI8hF3eyZLCQwcvAFeaUtp6um6oqJ5_8cyL1p-sL7wwR07cSGJTy4bg&pcsa=false&nb=0&nm=1	HTTP Parser: No favicon
Source: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Long-term+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpjxYC9i9y0TgoYIuZ8V_UHRMakU9iohKuhUuqxr8ymSHJsd1j4bjWfISTJnMGI7hFgWr_vhvGP_2LJwczGgGfqI8hF3eyZLCQwcvAFeaUtp6um6oqJ5_8cyL1p-sL7wwR07cSGJTy4bg&pcsa=false&nb=0&nm=1	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49753 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.18
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.18
Source: unknown	TCP traffic detected without corresponding DNS query: 2.16.100.168
Source: unknown	TCP traffic detected without corresponding DNS query: 2.16.100.168
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.php?domain=calperlongtermcare.com&toggle=browserjs&uid=MTcyNzYxNTc3NS4yNDM4OmRmMjk1NDRhMGE4OWQ3MjlkMjZmNGVkMzcyMmQwZjM0NGI5ZWY3ODU1OTYzY2UyMzk2YmQxNzBlNGJiZDY3OGY6NjZmOTUzMWYzYjg3Ng%3D%3D HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"device-memory: 8rtt: 250sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36viewport-width: 1280dpr: 1downlink: 1.6ect: 4gsec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notexistsaa.calperlongtermcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1Host: d38psrni17bvxu.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://notexistsaa.calperlongtermcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://notexistsaa.calperlongtermcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ls.php?t=66f9531f&token=1753bcdf7e1334ef35daf0f89f8347a35bd1b0fb HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"device-memory: 8rtt: 250sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36viewport-width: 1280dpr: 1downlink: 1.6ect: 4gsec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notexistsaa.calperlongtermcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.php?domain=calperlongtermcare.com&toggle=browserjs&uid=MTcyNzYxNTc3NS4yNDM4OmRmMjk1NDRhMGE4OWQ3MjlkMjZmNGVkMzcyMmQwZjM0NGI5ZWY3ODU1OTYzY2UyMzk2YmQxNzBlNGJiZDY3OGY6NjZmOTUzMWYzYjg3Ng%3D%3D HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1Host: d38psrni17bvxu.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2C000003%2C000517%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet12_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fnotexistsaa.calperlongtermcare.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&terms=Long-term%20care%2Cmental%20health%20care%2Cdisability%20care%2Celderly%20care%2Cin%20home%20care&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2556349329685648&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266%2C72717107&format=r3%7Cs&nocache=5811727615776546&num=0&output=afd_ads&domain_name=notexistsaa.calperlongtermcare.com&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1727615776549&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=754&frm=0&uio=--&cont=tc&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=https%3A%2F%2Fnotexistsaa.calperlongtermcare.com%2F HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://notexistsaa.calperlongtermcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?pac=2 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /track.php?domain=calperlongtermcare.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTc3NS4yNDM4OmRmMjk1NDRhMGE4OWQ3MjlkMjZmNGVkMzcyMmQwZjM0NGI5ZWY3ODU1OTYzY2UyMzk2YmQxNzBlNGJiZDY3OGY6NjZmOTUzMWYzYjg3Ng%3D%3D HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"device-memory: 8rtt: 250sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36viewport-width: 1280dpr: 1downlink: 1.6ect: 3gsec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notexistsaa.calperlongtermcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?pac=2 HTTP/1.1Host: syndicatedsearch.googConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.php?domain=calperlongtermcare.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTc3NS4yNDM4OmRmMjk1NDRhMGE4OWQ3MjlkMjZmNGVkMzcyMmQwZjM0NGI5ZWY3ODU1OTYzY2UyMzk2YmQxNzBlNGJiZDY3OGY6NjZmOTUzMWYzYjg3Ng%3D%3D HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"device-memory: 8rtt: 250sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36viewport-width: 1280dpr: 1downlink: 1.6ect: 3gsec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://notexistsaa.calperlongtermcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=7r0oy54bkrbw&aqid=IlP5Zr_nHbyXovsP1eGuiA4&psid=7840396037&pbt=bs&adbx=375&adby=93&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=8%7C0%7C1411%7C1901%7C1188&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://notexistsaa.calperlongtermcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=tbn7nkmvzgmz&aqid=IlP5Zr_nHbyXovsP1eGuiA4&psid=7840396037&pbt=bv&adbx=375&adby=93&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=8%7C0%7C1411%7C1901%7C1188&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://notexistsaa.calperlongtermcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://notexistsaa.calperlongtermcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://notexistsaa.calperlongtermcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2C000003%2C000517%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet12_3ph&r=m&sct=ID%3D911125d09fe5fc33%3AT%3D1727615778%3ART%3D1727615778%3AS%3DALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw&sc_status=6&hl=en&rpbu=http%3A%2F%2Fnotexistsaa.calperlongtermcare.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzk1LjI4MDJ8MGIxNjc0MTZjODk3ZjI1MzFlNTAwMzc2ZDU2YzViMWI3MDBlMmY2OXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&terms=Long-term%20care%2Cmental%20health%20care%2Cdisability%20care%2Celderly%20care%2Cin%20home%20care&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2556349329685648&q=Long-term%20Care&afdt=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpjxYC9i9y0TgoYIuZ8V_UHRMakU9iohKuhUuqxr8ymSHJsd1j4bjWfISTJnMGI7hFgWr_vhvGP_2LJwczGgGfqI8hF3eyZLCQwcvAFeaUtp6um6oqJ5_8cyL1p-sL7wwR07cSGJTy4bg&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300000%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266%2C72717108&format=n3&ad=n3&nocache=7701727615797187&num=0&output=afd_ads&domain_name=notexistsaa.calperlongtermcare.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727615797197&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=754&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=http%3A%2F%2Fnotexistsaa.calperlongtermcare.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8%26query%3DLong-term%2BCare%26afdToken%3DChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpjxYC9i9y0TgoYIuZ8V_UHRMakU9iohKuhUuqxr8ymSHJsd1j4bjWfISTJnMGI7hFgWr_vhvGP_2LJwczGgGfqI8hF3eyZLCQwcvAFeaUtp6um6oqJ5_8cyL1p-sL7wwR07cSGJTy4bg%26pcsa%3Dfalse HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://notexistsaa.calperlongtermcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://notexistsaa.calperlongtermcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?pac=0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?pac=0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/afs/snowman.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=652pedqnoxbl&aqid=N1P5ZtuRBKSDhcIPk9SNsAQ&psid=7840396037&pbt=bs&adbx=366.5&adby=109&adbh=1355&adbw=530&adbah=475%2C439%2C439&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=51%7C0%7C1341%7C1513%7C243&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://notexistsaa.calperlongtermcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/afs/snowman.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=x4y35lt9lpng&aqid=N1P5ZtuRBKSDhcIPk9SNsAQ&psid=7840396037&pbt=bv&adbx=366.5&adby=109&adbh=1355&adbw=530&adbah=475%2C439%2C439&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=51%7C0%7C1341%7C1513%7C243&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://notexistsaa.calperlongtermcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2C000003%2C000517%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet12_3ph&r=m&sct=ID%3D911125d09fe5fc33%3AT%3D1727615778%3ART%3D1727615778%3AS%3DALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw&sc_status=6&hl=en&rpbu=http%3A%2F%2Fnotexistsaa.calperlongtermcare.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1ODA1LjA5NTl8OTRiYzNhNGIyNzJhZjViZGU2M2QzNjkyMTg1MjVlOWRiNGI1ZmNkNXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&terms=Long-term%20care%2Cmental%20health%20care%2Cdisability%20care%2Celderly%20care%2Cin%20home%20care&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2556349329685648&q=Mental%20Health%20Care&afdt=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj2Fwx1CP69y51eGq-AiAZrdjjEEEm-kgI4GG27mh0rqrtgT08SvO_YxhRixDnAmYj1ePjmTSEcyDkXkXf2_m-yoK-uk8je2jQwTOwoAJueqS2Nl_BXbBpVJ72-oiVSQZKMuVZ8IvWr4&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300000%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266%2C72717107&format=n3&ad=n3&nocache=941727615804579&num=0&output=afd_ads&domain_name=notexistsaa.calperlongtermcare.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727615804581&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=754&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=http%3A%2F%2Fnotexistsaa.calperlongtermcare.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8%26query%3DMental%2BHealth%2BCare%26afdToken%3DChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj2Fwx1CP69y51eGq-AiAZrdjjEEEm-kgI4GG27mh0rqrtgT08SvO_YxhRixDnAmYj1ePjmTSEcyDkXkXf2_m-yoK-uk8je2jQwTOwoAJueqS2Nl_BXbBpVJ72-oiVSQZKMuVZ8IvWr4%26pcsa%3Dfalse HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://notexistsaa.calperlongtermcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://notexistsaa.calperlongtermcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://notexistsaa.calperlongtermcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=wrxx7vj7ui9r&aqid=PVP5ZprLKp3amLAP2f_WyQ0&psid=7840396037&pbt=bs&adbx=366.5&adby=109&adbh=1355&adbw=530&adbah=475%2C439%2C439&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=19%7C0%7C582%7C22%7C260&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://notexistsaa.calperlongtermcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=nvga0ho65dvd&aqid=PVP5ZprLKp3amLAP2f_WyQ0&psid=7840396037&pbt=bv&adbx=366.5&adby=109&adbh=1355&adbw=530&adbah=475%2C439%2C439&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=19%7C0%7C582%7C22%7C260&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://notexistsaa.calperlongtermcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2C000003%2C000517%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet12_3ph&r=m&sct=ID%3D911125d09fe5fc33%3AT%3D1727615778%3ART%3D1727615778%3AS%3DALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw&sc_status=6&hl=en&rpbu=http%3A%2F%2Fnotexistsaa.calperlongtermcare.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1ODA5LjUzMDN8NGI0OWVhZmExNDM5M2M2OTA2ZjFjMmEwNTI5ZDEwZmM4ZTViNGE3Y3x8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&terms=Long-term%20care%2Cmental%20health%20care%2Cdisability%20care%2Celderly%20care%2Cin%20home%20care&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2556349329685648&q=Disability%20Care&afdt=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj8QvgQXu7ghwdodehT82JgRTn3vllMykC0FwxvyfTQJr6A0SuG7m0lQBPeY8be8shRgjOY8aIA_Dc4-x7TvuvAzvS8PHi2SQZ6LVKYyrfVusdKdQ6CTxo02n5nKSQlxTjJhvzl1MnjA&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300000%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266%2C72717107&format=n3&ad=n3&nocache=3901727615809603&num=0&output=afd_ads&domain_name=notexistsaa.calperlongtermcare.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727615809608&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=754&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=http%3A%2F%2Fnotexistsaa.calperlongtermcare.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8%26query%3DDisability%2BCare%26afdToken%3DChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj8QvgQXu7ghwdodehT82JgRTn3vllMykC0FwxvyfTQJr6A0SuG7m0lQBPeY8be8shRgjOY8aIA_Dc4-x7TvuvAzvS8PHi2SQZ6LVKYyrfVusdKdQ6CTxo02n5nKSQlxTjJhvzl1MnjA%26pcsa%3Dfalse HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://notexistsaa.calperlongtermcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://notexistsaa.calperlongtermcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://notexistsaa.calperlongtermcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=x6hufqxvfipd&aqid=Q1P5ZvaiHpLaovsPw5qRoAI&psid=7840396037&pbt=bs&adbx=366.5&adby=109&adbh=1355&adbw=530&adbah=475%2C439%2C439&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=35%7C0%7C1325%7C3%7C1026&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://notexistsaa.calperlongtermcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=k4vgtt2ky74x&aqid=Q1P5ZvaiHpLaovsPw5qRoAI&psid=7840396037&pbt=bv&adbx=366.5&adby=109&adbh=1355&adbw=530&adbah=475%2C439%2C439&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=35%7C0%7C1325%7C3%7C1026&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://notexistsaa.calperlongtermcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://notexistsaa.calperlongtermcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2C000003%2C000517%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet12_3ph&r=m&sct=ID%3D911125d09fe5fc33%3AT%3D1727615778%3ART%3D1727615778%3AS%3DALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw&sc_status=6&hl=en&rpbu=http%3A%2F%2Fnotexistsaa.calperlongtermcare.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1ODIyLjcwNDh8ZTk2YWU4MWVhZDQ1MGVkOTgwMDFhNGRjZjFhMDE5OTg3ZDYzZmRlOXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&terms=Long-term%20care%2Cmental%20health%20care%2Cdisability%20care%2Celderly%20care%2Cin%20home%20care&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2556349329685648&q=Mental%20Health%20Care&afdt=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj2Fwx1CP69y51eGq-AiAZrdjjEEEm-kgI4GG27mh0rqrtgT08SvO_YxhRixDnAmYj1ePjmTSEcyDkXkXf2_m-yoK-uk8je2jQwTOwoAJueqS2Nl_BXbBpVJ72-oiVSQZKMuVZ8IvWr4&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300000%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266%2C72717108&format=n3&ad=n3&nocache=6351727615822213&num=0&output=afd_ads&domain_name=notexistsaa.calperlongtermcare.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727615822215&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=754&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=http%3A%2F%2Fnotexistsaa.calperlongtermcare.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8%26query%3DMental%2BHealth%2BCare%26afdToken%3DChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj2Fwx1CP69y51eGq-AiAZrdjjEEEm-kgI4GG27mh0rqrtgT08SvO_YxhRixDnAmYj1ePjmTSEcyDkXkXf2_m-yoK-uk8je2jQwTOwoAJueqS2Nl_BXbBpVJ72-oiVSQZKMuVZ8IvWr4%26pcsa%3Dfalse%26nb%3D0%26nm%3D1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://notexistsaa.calperlongtermcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://notexistsaa.calperlongtermcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=qp3lescnt109&aqid=UFP5ZsDdA8r_mLAPmKangAU&psid=7840396037&pbt=bs&adbx=366.5&adby=109&adbh=1355&adbw=530&adbah=475%2C439%2C439&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=33%7C0%7C1292%7C9%7C898&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://notexistsaa.calperlongtermcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=jppmr26ecf6p&aqid=UFP5ZsDdA8r_mLAPmKangAU&psid=7840396037&pbt=bv&adbx=366.5&adby=109&adbh=1355&adbw=530&adbah=475%2C439%2C439&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=33%7C0%7C1292%7C9%7C898&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://notexistsaa.calperlongtermcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2C000003%2C000517%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet12_3ph&r=m&sct=ID%3D911125d09fe5fc33%3AT%3D1727615778%3ART%3D1727615778%3AS%3DALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw&sc_status=6&hl=en&rpbu=http%3A%2F%2Fnotexistsaa.calperlongtermcare.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1ODI4LjM4NHw4OGY2NjdhMTA4YmE2ODUwMWExZTMxZDkxY2U1Zjc3YzdkNmI3MjI5fHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHx8fDB8MHx8MHx8fDB8MHxXMTA9fHwxfFcxMD18MTc1M2JjZGY3ZTEzMzRlZjM1ZGFmMGY4OWY4MzQ3YTM1YmQxYjBmYnwwfGRwLXRlYW1pbnRlcm5ldDEyXzNwaHwwfDB8fHw%253D&terms=Long-term%20care%2Cmental%20health%20care%2Cdisability%20care%2Celderly%20care%2Cin%20home%20care&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2556349329685648&q=Disability%20Care&afdt=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj8QvgQXu7ghwdodehT82JgRTn3vllMykC0FwxvyfTQJr6A0SuG7m0lQBPeY8be8shRgjOY8aIA_Dc4-x7TvuvAzvS8PHi2SQZ6LVKYyrfVusdKdQ6CTxo02n5nKSQlxTjJhvzl1MnjA&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300000%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266%2C72717108&format=n3&ad=n3&nocache=1511727615828097&num=0&output=afd_ads&domain_name=notexistsaa.calperlongtermcare.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727615828102&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=754&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=http%3A%2F%2Fnotexistsaa.calperlongtermcare.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8%26query%3DDisability%2BCare%26afdToken%3DChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj8QvgQXu7ghwdodehT82JgRTn3vllMykC0FwxvyfTQJr6A0SuG7m0lQBPeY8be8shRgjOY8aIA_Dc4-x7TvuvAzvS8PHi2SQZ6LVKYyrfVusdKdQ6CTxo02n5nKSQlxTjJhvzl1MnjA%26pcsa%3Dfalse%26nb%3D0%26nm%3D2 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://notexistsaa.calperlongtermcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://notexistsaa.calperlongtermcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://notexistsaa.calperlongtermcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=h91sp5te7cyh&aqid=VVP5ZrfLOfbYmLAP9e-o4QE&psid=7840396037&pbt=bs&adbx=366.5&adby=109&adbh=1355&adbw=530&adbah=475%2C439%2C439&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=27%7C0%7C1317%7C5%7C1290&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://notexistsaa.calperlongtermcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=sdde6wtalo4n&aqid=VVP5ZrfLOfbYmLAP9e-o4QE&psid=7840396037&pbt=bv&adbx=366.5&adby=109&adbh=1355&adbw=530&adbah=475%2C439%2C439&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=27%7C0%7C1317%7C5%7C1290&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://notexistsaa.calperlongtermcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://notexistsaa.calperlongtermcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2C000003%2C000517%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet12_3ph&r=m&sct=ID%3D911125d09fe5fc33%3AT%3D1727615778%3ART%3D1727615778%3AS%3DALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw&sc_status=6&hl=en&rpbu=http%3A%2F%2Fnotexistsaa.calperlongtermcare.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1ODM1LjQyMjZ8MjY3MjMxZjJhM2ExNjA5OTk3ZDc3MWU3YTEzZWM2YWQ0NTlhNzNmYnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&terms=Long-term%20care%2Cmental%20health%20care%2Cdisability%20care%2Celderly%20care%2Cin%20home%20care&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2556349329685648&q=Long-term%20Care&afdt=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpjxYC9i9y0TgoYIuZ8V_UHRMakU9iohKuhUuqxr8ymSHJsd1j4bjWfISTJnMGI7hFgWr_vhvGP_2LJwczGgGfqI8hF3eyZLCQwcvAFeaUtp6um6oqJ5_8cyL1p-sL7wwR07cSGJTy4bg&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300000%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266%2C72717108&format=n3&ad=n3&nocache=6431727615835035&num=0&output=afd_ads&domain_name=notexistsaa.calperlongtermcare.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727615835037&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=754&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=http%3A%2F%2Fnotexistsaa.calperlongtermcare.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8%26query%3DLong-term%2BCare%26afdToken%3DChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpjxYC9i9y0TgoYIuZ8V_UHRMakU9iohKuhUuqxr8ymSHJsd1j4bjWfISTJnMGI7hFgWr_vhvGP_2LJwczGgGfqI8hF3eyZLCQwcvAFeaUtp6um6oqJ5_8cyL1p-sL7wwR07cSGJTy4bg%26pcsa%3Dfalse%26nb%3D0%26nm%3D1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://notexistsaa.calperlongtermcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://notexistsaa.calperlongtermcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=qwy65mgg467a&aqid=XFP5Zv-sN6CahcIP4t748Ac&psid=7840396037&pbt=bs&adbx=366.5&adby=109&adbh=1355&adbw=530&adbah=475%2C439%2C439&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=23%7C0%7C1709%7C18%7C699&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://notexistsaa.calperlongtermcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=u7l3x2p49ukq&aqid=XFP5Zv-sN6CahcIP4t748Ac&psid=7840396037&pbt=bv&adbx=366.5&adby=109&adbh=1355&adbw=530&adbah=475%2C439%2C439&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=23%7C0%7C1709%7C18%7C699&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://notexistsaa.calperlongtermcare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Long-term+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpjxYC9i9y0TgoYIuZ8V_UHRMakU9iohKuhUuqxr8ymSHJsd1j4bjWfISTJnMGI7hFgWr_vhvGP_2LJwczGgGfqI8hF3eyZLCQwcvAFeaUtp6um6oqJ5_8cyL1p-sL7wwR07cSGJTy4bg&pcsa=false HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=calperlongtermcare.com&toggle=browserjs&uid=MTcyNzYxNTc5NS4yNjM3OmRkNDlhZjNmMDUyYjU0NmNhNzY4NDUxMWMzNDdkNTQ4ZWFmNzFhNzkyMmNjYjNmNGM3MDUyY2YxNDBlNDRhZGU6NjZmOTUzMzM0MDYzNg%3D%3D HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Long-term+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpjxYC9i9y0TgoYIuZ8V_UHRMakU9iohKuhUuqxr8ymSHJsd1j4bjWfISTJnMGI7hFgWr_vhvGP_2LJwczGgGfqI8hF3eyZLCQwcvAFeaUtp6um6oqJ5_8cyL1p-sL7wwR07cSGJTy4bg&pcsa=falseAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Source: global traffic	HTTP traffic detected: GET /ls.php?t=66f95333&token=f06df9e8ddd462c8afb5845161eee5e6a6511e54 HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Long-term+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpjxYC9i9y0TgoYIuZ8V_UHRMakU9iohKuhUuqxr8ymSHJsd1j4bjWfISTJnMGI7hFgWr_vhvGP_2LJwczGgGfqI8hF3eyZLCQwcvAFeaUtp6um6oqJ5_8cyL1p-sL7wwR07cSGJTy4bg&pcsa=falseAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Source: global traffic	HTTP traffic detected: GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1Host: d38psrni17bvxu.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://notexistsaa.calperlongtermcare.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.php?domain=calperlongtermcare.com&toggle=browserjs&uid=MTcyNzYxNTc5NS4yNjM3OmRkNDlhZjNmMDUyYjU0NmNhNzY4NDUxMWMzNDdkNTQ4ZWFmNzFhNzkyMmNjYjNmNGM3MDUyY2YxNDBlNDRhZGU6NjZmOTUzMzM0MDYzNg%3D%3D HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Source: global traffic	HTTP traffic detected: GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1Host: d38psrni17bvxu.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.php?domain=calperlongtermcare.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTc5NS4yNjM3OmRkNDlhZjNmMDUyYjU0NmNhNzY4NDUxMWMzNDdkNTQ4ZWFmNzFhNzkyMmNjYjNmNGM3MDUyY2YxNDBlNDRhZGU6NjZmOTUzMzM0MDYzNg%3D%3D HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Long-term+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpjxYC9i9y0TgoYIuZ8V_UHRMakU9iohKuhUuqxr8ymSHJsd1j4bjWfISTJnMGI7hFgWr_vhvGP_2LJwczGgGfqI8hF3eyZLCQwcvAFeaUtp6um6oqJ5_8cyL1p-sL7wwR07cSGJTy4bg&pcsa=falseAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=calperlongtermcare.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTc5NS4yNjM3OmRkNDlhZjNmMDUyYjU0NmNhNzY4NDUxMWMzNDdkNTQ4ZWFmNzFhNzkyMmNjYjNmNGM3MDUyY2YxNDBlNDRhZGU6NjZmOTUzMzM0MDYzNg%3D%3D HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Long-term+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpjxYC9i9y0TgoYIuZ8V_UHRMakU9iohKuhUuqxr8ymSHJsd1j4bjWfISTJnMGI7hFgWr_vhvGP_2LJwczGgGfqI8hF3eyZLCQwcvAFeaUtp6um6oqJ5_8cyL1p-sL7wwR07cSGJTy4bg&pcsa=falseAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Source: global traffic	HTTP traffic detected: GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Mental+Health+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj2Fwx1CP69y51eGq-AiAZrdjjEEEm-kgI4GG27mh0rqrtgT08SvO_YxhRixDnAmYj1ePjmTSEcyDkXkXf2_m-yoK-uk8je2jQwTOwoAJueqS2Nl_BXbBpVJ72-oiVSQZKMuVZ8IvWr4&pcsa=false HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=calperlongtermcare.com&toggle=browserjs&uid=MTcyNzYxNTgwNS4wODA5OjkzM2NiZGEwODhjNzQyZTkxMzk3Y2Q5N2QzODliZDM5NDFjNzhmMTU5ZjkzZDAwNTQwMGNkMDNiYzQ1NGE5MGQ6NjZmOTUzM2QxM2MxOA%3D%3D HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Mental+Health+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj2Fwx1CP69y51eGq-AiAZrdjjEEEm-kgI4GG27mh0rqrtgT08SvO_YxhRixDnAmYj1ePjmTSEcyDkXkXf2_m-yoK-uk8je2jQwTOwoAJueqS2Nl_BXbBpVJ72-oiVSQZKMuVZ8IvWr4&pcsa=falseAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=calperlongtermcare.com&toggle=browserjs&uid=MTcyNzYxNTgwNS4wODA5OjkzM2NiZGEwODhjNzQyZTkxMzk3Y2Q5N2QzODliZDM5NDFjNzhmMTU5ZjkzZDAwNTQwMGNkMDNiYzQ1NGE5MGQ6NjZmOTUzM2QxM2MxOA%3D%3D HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Source: global traffic	HTTP traffic detected: GET /ls.php?t=66f9533d&token=f43d8d86d39ec9063ea817064e929bdd606d7640 HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Mental+Health+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj2Fwx1CP69y51eGq-AiAZrdjjEEEm-kgI4GG27mh0rqrtgT08SvO_YxhRixDnAmYj1ePjmTSEcyDkXkXf2_m-yoK-uk8je2jQwTOwoAJueqS2Nl_BXbBpVJ72-oiVSQZKMuVZ8IvWr4&pcsa=falseAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=calperlongtermcare.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTgwNS4wODA5OjkzM2NiZGEwODhjNzQyZTkxMzk3Y2Q5N2QzODliZDM5NDFjNzhmMTU5ZjkzZDAwNTQwMGNkMDNiYzQ1NGE5MGQ6NjZmOTUzM2QxM2MxOA%3D%3D HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Mental+Health+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj2Fwx1CP69y51eGq-AiAZrdjjEEEm-kgI4GG27mh0rqrtgT08SvO_YxhRixDnAmYj1ePjmTSEcyDkXkXf2_m-yoK-uk8je2jQwTOwoAJueqS2Nl_BXbBpVJ72-oiVSQZKMuVZ8IvWr4&pcsa=falseAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=calperlongtermcare.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTgwNS4wODA5OjkzM2NiZGEwODhjNzQyZTkxMzk3Y2Q5N2QzODliZDM5NDFjNzhmMTU5ZjkzZDAwNTQwMGNkMDNiYzQ1NGE5MGQ6NjZmOTUzM2QxM2MxOA%3D%3D HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Source: global traffic	HTTP traffic detected: GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Disability+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj8QvgQXu7ghwdodehT82JgRTn3vllMykC0FwxvyfTQJr6A0SuG7m0lQBPeY8be8shRgjOY8aIA_Dc4-x7TvuvAzvS8PHi2SQZ6LVKYyrfVusdKdQ6CTxo02n5nKSQlxTjJhvzl1MnjA&pcsa=false HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=calperlongtermcare.com&toggle=browserjs&uid=MTcyNzYxNTgwOS41MTQyOjk4ODg5ZDBkOTNhZmViZDZjZmJlMDcyMzEwZmU1NTA3NWRiMmMxYzExOGZkODQ5OTAxMWM4Yjg0OTlmZGZiNTU6NjZmOTUzNDE3ZDhhYg%3D%3D HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Disability+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj8QvgQXu7ghwdodehT82JgRTn3vllMykC0FwxvyfTQJr6A0SuG7m0lQBPeY8be8shRgjOY8aIA_Dc4-x7TvuvAzvS8PHi2SQZ6LVKYyrfVusdKdQ6CTxo02n5nKSQlxTjJhvzl1MnjA&pcsa=falseAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Source: global traffic	HTTP traffic detected: GET /ls.php?t=66f95341&token=879f150f85d7f9141d1410d530ddca2c0f697246 HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Disability+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj8QvgQXu7ghwdodehT82JgRTn3vllMykC0FwxvyfTQJr6A0SuG7m0lQBPeY8be8shRgjOY8aIA_Dc4-x7TvuvAzvS8PHi2SQZ6LVKYyrfVusdKdQ6CTxo02n5nKSQlxTjJhvzl1MnjA&pcsa=falseAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=calperlongtermcare.com&toggle=browserjs&uid=MTcyNzYxNTgwOS41MTQyOjk4ODg5ZDBkOTNhZmViZDZjZmJlMDcyMzEwZmU1NTA3NWRiMmMxYzExOGZkODQ5OTAxMWM4Yjg0OTlmZGZiNTU6NjZmOTUzNDE3ZDhhYg%3D%3D HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=calperlongtermcare.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTgwOS41MTQyOjk4ODg5ZDBkOTNhZmViZDZjZmJlMDcyMzEwZmU1NTA3NWRiMmMxYzExOGZkODQ5OTAxMWM4Yjg0OTlmZGZiNTU6NjZmOTUzNDE3ZDhhYg%3D%3D HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Disability+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj8QvgQXu7ghwdodehT82JgRTn3vllMykC0FwxvyfTQJr6A0SuG7m0lQBPeY8be8shRgjOY8aIA_Dc4-x7TvuvAzvS8PHi2SQZ6LVKYyrfVusdKdQ6CTxo02n5nKSQlxTjJhvzl1MnjA&pcsa=falseAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=calperlongtermcare.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTgwOS41MTQyOjk4ODg5ZDBkOTNhZmViZDZjZmJlMDcyMzEwZmU1NTA3NWRiMmMxYzExOGZkODQ5OTAxMWM4Yjg0OTlmZGZiNTU6NjZmOTUzNDE3ZDhhYg%3D%3D HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Source: global traffic	HTTP traffic detected: GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Mental+Health+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj2Fwx1CP69y51eGq-AiAZrdjjEEEm-kgI4GG27mh0rqrtgT08SvO_YxhRixDnAmYj1ePjmTSEcyDkXkXf2_m-yoK-uk8je2jQwTOwoAJueqS2Nl_BXbBpVJ72-oiVSQZKMuVZ8IvWr4&pcsa=false&nb=0&nm=1 HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=calperlongtermcare.com&toggle=browserjs&uid=MTcyNzYxNTgyMi42ODg3OmQ4OTczZDQ3MDMwYjk0NzQ3ODhiOTVmZTk5NjdkZWM1MWI2ZmM3Yzg4NTgyMzEwZjE1NWE4MWQ5YjZiYWNiY2I6NjZmOTUzNGVhODIyNg%3D%3D HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Mental+Health+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj2Fwx1CP69y51eGq-AiAZrdjjEEEm-kgI4GG27mh0rqrtgT08SvO_YxhRixDnAmYj1ePjmTSEcyDkXkXf2_m-yoK-uk8je2jQwTOwoAJueqS2Nl_BXbBpVJ72-oiVSQZKMuVZ8IvWr4&pcsa=false&nb=0&nm=1Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=calperlongtermcare.com&toggle=browserjs&uid=MTcyNzYxNTgyMi42ODg3OmQ4OTczZDQ3MDMwYjk0NzQ3ODhiOTVmZTk5NjdkZWM1MWI2ZmM3Yzg4NTgyMzEwZjE1NWE4MWQ5YjZiYWNiY2I6NjZmOTUzNGVhODIyNg%3D%3D HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Source: global traffic	HTTP traffic detected: GET /ls.php?t=66f9534e&token=045d16523d9232997a06f47047c84c5614864402 HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Mental+Health+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj2Fwx1CP69y51eGq-AiAZrdjjEEEm-kgI4GG27mh0rqrtgT08SvO_YxhRixDnAmYj1ePjmTSEcyDkXkXf2_m-yoK-uk8je2jQwTOwoAJueqS2Nl_BXbBpVJ72-oiVSQZKMuVZ8IvWr4&pcsa=false&nb=0&nm=1Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=calperlongtermcare.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTgyMi42ODg3OmQ4OTczZDQ3MDMwYjk0NzQ3ODhiOTVmZTk5NjdkZWM1MWI2ZmM3Yzg4NTgyMzEwZjE1NWE4MWQ5YjZiYWNiY2I6NjZmOTUzNGVhODIyNg%3D%3D HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Mental+Health+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj2Fwx1CP69y51eGq-AiAZrdjjEEEm-kgI4GG27mh0rqrtgT08SvO_YxhRixDnAmYj1ePjmTSEcyDkXkXf2_m-yoK-uk8je2jQwTOwoAJueqS2Nl_BXbBpVJ72-oiVSQZKMuVZ8IvWr4&pcsa=false&nb=0&nm=1Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=calperlongtermcare.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTgyMi42ODg3OmQ4OTczZDQ3MDMwYjk0NzQ3ODhiOTVmZTk5NjdkZWM1MWI2ZmM3Yzg4NTgyMzEwZjE1NWE4MWQ5YjZiYWNiY2I6NjZmOTUzNGVhODIyNg%3D%3D HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Source: global traffic	HTTP traffic detected: GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Disability+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj8QvgQXu7ghwdodehT82JgRTn3vllMykC0FwxvyfTQJr6A0SuG7m0lQBPeY8be8shRgjOY8aIA_Dc4-x7TvuvAzvS8PHi2SQZ6LVKYyrfVusdKdQ6CTxo02n5nKSQlxTjJhvzl1MnjA&pcsa=false&nb=0&nm=2 HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=calperlongtermcare.com&toggle=browserjs&uid=MTcyNzYxNTgyOC4zNjY6YTVhM2Y5OWYyNmIzZTBhOWQxZWYyZTEwMjcyNWJjYzJjZTNkMWFiN2QwNGNlNTViOGRkMzk3YmIwZjgwM2MyYTo2NmY5NTM1NDU5NTkw HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Disability+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj8QvgQXu7ghwdodehT82JgRTn3vllMykC0FwxvyfTQJr6A0SuG7m0lQBPeY8be8shRgjOY8aIA_Dc4-x7TvuvAzvS8PHi2SQZ6LVKYyrfVusdKdQ6CTxo02n5nKSQlxTjJhvzl1MnjA&pcsa=false&nb=0&nm=2Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Source: global traffic	HTTP traffic detected: GET /ls.php?t=66f95354&token=002ca744dbc126b8105f96b660f7b6a2674c7bd7 HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Disability+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj8QvgQXu7ghwdodehT82JgRTn3vllMykC0FwxvyfTQJr6A0SuG7m0lQBPeY8be8shRgjOY8aIA_Dc4-x7TvuvAzvS8PHi2SQZ6LVKYyrfVusdKdQ6CTxo02n5nKSQlxTjJhvzl1MnjA&pcsa=false&nb=0&nm=2Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=calperlongtermcare.com&toggle=browserjs&uid=MTcyNzYxNTgyOC4zNjY6YTVhM2Y5OWYyNmIzZTBhOWQxZWYyZTEwMjcyNWJjYzJjZTNkMWFiN2QwNGNlNTViOGRkMzk3YmIwZjgwM2MyYTo2NmY5NTM1NDU5NTkw HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=calperlongtermcare.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTgyOC4zNjY6YTVhM2Y5OWYyNmIzZTBhOWQxZWYyZTEwMjcyNWJjYzJjZTNkMWFiN2QwNGNlNTViOGRkMzk3YmIwZjgwM2MyYTo2NmY5NTM1NDU5NTkw HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Disability+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj8QvgQXu7ghwdodehT82JgRTn3vllMykC0FwxvyfTQJr6A0SuG7m0lQBPeY8be8shRgjOY8aIA_Dc4-x7TvuvAzvS8PHi2SQZ6LVKYyrfVusdKdQ6CTxo02n5nKSQlxTjJhvzl1MnjA&pcsa=false&nb=0&nm=2Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=calperlongtermcare.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTgyOC4zNjY6YTVhM2Y5OWYyNmIzZTBhOWQxZWYyZTEwMjcyNWJjYzJjZTNkMWFiN2QwNGNlNTViOGRkMzk3YmIwZjgwM2MyYTo2NmY5NTM1NDU5NTkw HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Source: global traffic	HTTP traffic detected: GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Long-term+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpjxYC9i9y0TgoYIuZ8V_UHRMakU9iohKuhUuqxr8ymSHJsd1j4bjWfISTJnMGI7hFgWr_vhvGP_2LJwczGgGfqI8hF3eyZLCQwcvAFeaUtp6um6oqJ5_8cyL1p-sL7wwR07cSGJTy4bg&pcsa=false&nb=0&nm=1 HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=calperlongtermcare.com&toggle=browserjs&uid=MTcyNzYxNTgzNS40MDc6NzY2N2VhYmE2OGEzNWE1M2Q3N2M3OWI1MDE1OTc0ODNkNmYxMjc2M2M0YTc1N2Q4NWI3ZjkyYjk3NmYyODMyNDo2NmY5NTM1YjYzNWQ2 HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Long-term+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpjxYC9i9y0TgoYIuZ8V_UHRMakU9iohKuhUuqxr8ymSHJsd1j4bjWfISTJnMGI7hFgWr_vhvGP_2LJwczGgGfqI8hF3eyZLCQwcvAFeaUtp6um6oqJ5_8cyL1p-sL7wwR07cSGJTy4bg&pcsa=false&nb=0&nm=1Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Source: global traffic	HTTP traffic detected: GET /ls.php?t=66f9535b&token=b12389aec88761c69130efd9163b459583a6c7b3 HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Long-term+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpjxYC9i9y0TgoYIuZ8V_UHRMakU9iohKuhUuqxr8ymSHJsd1j4bjWfISTJnMGI7hFgWr_vhvGP_2LJwczGgGfqI8hF3eyZLCQwcvAFeaUtp6um6oqJ5_8cyL1p-sL7wwR07cSGJTy4bg&pcsa=false&nb=0&nm=1Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=calperlongtermcare.com&toggle=browserjs&uid=MTcyNzYxNTgzNS40MDc6NzY2N2VhYmE2OGEzNWE1M2Q3N2M3OWI1MDE1OTc0ODNkNmYxMjc2M2M0YTc1N2Q4NWI3ZjkyYjk3NmYyODMyNDo2NmY5NTM1YjYzNWQ2 HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=calperlongtermcare.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTgzNS40MDc6NzY2N2VhYmE2OGEzNWE1M2Q3N2M3OWI1MDE1OTc0ODNkNmYxMjc2M2M0YTc1N2Q4NWI3ZjkyYjk3NmYyODMyNDo2NmY5NTM1YjYzNWQ2 HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Long-term+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpjxYC9i9y0TgoYIuZ8V_UHRMakU9iohKuhUuqxr8ymSHJsd1j4bjWfISTJnMGI7hFgWr_vhvGP_2LJwczGgGfqI8hF3eyZLCQwcvAFeaUtp6um6oqJ5_8cyL1p-sL7wwR07cSGJTy4bg&pcsa=false&nb=0&nm=1Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=calperlongtermcare.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTgzNS40MDc6NzY2N2VhYmE2OGEzNWE1M2Q3N2M3OWI1MDE1OTc0ODNkNmYxMjc2M2M0YTc1N2Q4NWI3ZjkyYjk3NmYyODMyNDo2NmY5NTM1YjYzNWQ2 HTTP/1.1Host: notexistsaa.calperlongtermcare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw

Source: global traffic	DNS traffic detected: DNS query: notexistsaa.calperlongtermcare.com
Source: global traffic	DNS traffic detected: DNS query: d38psrni17bvxu.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: syndicatedsearch.goog
Source: global traffic	DNS traffic detected: DNS query: afs.googleusercontent.com

Source: chromecache_107.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqkCUBTW3fqmSxO7IvB4UEkUgOcJA
Source: chromecache_102.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqkGFS2NXID_pDTZOT2SJBSszizh3
Source: chromecache_107.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqka1W5fTEp3LIwzMM0Vpn51rCmrd
Source: chromecache_89.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqkhUBp2RPdfckVwbRVRUfIw8NSxF
Source: chromecache_105.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqkrmevfqXr9ZbeuSUlYtdkU3ijpL
Source: chromecache_89.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqktyGbEAIs64UuZmKJS_qA7kAFri
Source: chromecache_94.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrql-PO4NYviQ0s3HGG1SGzHTeaNkl
Source: chromecache_89.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqltswFXnN_jDIZ-OOU_cpDmeJ_kY
Source: chromecache_105.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqm-DKO4hOkSesXQ32xyFg_GM0mOY
Source: chromecache_112.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqn9GyhwT8F8cAu3UODo-3aYu43wa
Source: chromecache_112.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqnC06e43E-QkOQiRUuvbxuhC7pq8
Source: chromecache_105.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqnH2CPaG_w1lCa7Smp9ZFkRO7Xt4
Source: chromecache_112.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqnLOKT0tiXM4bcuBkqDR20NlS3S7
Source: chromecache_102.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqneaTBCcKPvpd0r-d8YZbiXTgnVz
Source: chromecache_94.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqno3OAwH82YOCVu8TSDNNu0jUrAE
Source: chromecache_102.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqnxXVus2w1U1zB2c5b-lCJgjiBdh
Source: chromecache_94.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqnz2ubu0zunJxnXBmeBy1kgpIVmn
Source: chromecache_126.2.dr, chromecache_86.2.dr, chromecache_133.2.dr, chromecache_124.2.dr, chromecache_129.2.dr, chromecache_120.2.dr, chromecache_106.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/mate/v17/m8JdjftRd7WZ6zS2W7XS.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/mate/v17/m8JdjftRd7WZ6zq2Ww.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/matesc/v22/-nF8OGQ1-uoVr2wK-iLT9g.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/matesc/v22/-nF8OGQ1-uoVr2wK-izT9qOk.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_126.2.dr, chromecache_86.2.dr, chromecache_133.2.dr, chromecache_124.2.dr, chromecache_129.2.dr, chromecache_120.2.dr, chromecache_106.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_126.2.dr, chromecache_86.2.dr, chromecache_133.2.dr, chromecache_124.2.dr, chromecache_129.2.dr, chromecache_120.2.dr, chromecache_106.2.dr	String found in binary or memory: https://partner.googleadservices.com/gampad/cookie.js
Source: chromecache_107.2.dr	String found in binary or memory: https://policylibrary.mcnhealth
Source: chromecache_126.2.dr, chromecache_86.2.dr, chromecache_133.2.dr, chromecache_124.2.dr, chromecache_129.2.dr, chromecache_120.2.dr, chromecache_106.2.dr	String found in binary or memory: https://syndicatedsearch.goog
Source: chromecache_94.2.dr, chromecache_105.2.dr	String found in binary or memory: https://www.aarp.org/aarp/assistance
Source: chromecache_89.2.dr, chromecache_102.2.dr	String found in binary or memory: https://www.applitrack.com/
Source: chromecache_112.2.dr, chromecache_107.2.dr	String found in binary or memory: https://www.centraltrust.net/
Source: chromecache_107.2.dr	String found in binary or memory: https://www.google.com/images/afs/snowman.png
Source: chromecache_126.2.dr, chromecache_86.2.dr, chromecache_133.2.dr, chromecache_124.2.dr, chromecache_129.2.dr, chromecache_120.2.dr, chromecache_106.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=5
Source: chromecache_94.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwi20IK2nuiIAxUSrWgJHUNNBCQYABAAGgJ3Zg
Source: chromecache_94.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwi20IK2nuiIAxUSrWgJHUNNBCQYABABGgJ3Zg
Source: chromecache_94.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwi20IK2nuiIAxUSrWgJHUNNBCQYABACGgJ3Zg
Source: chromecache_107.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwibiYywnuiIAxWkQUECHRNqA0YYABAAGgJ3cw
Source: chromecache_107.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwibiYywnuiIAxWkQUECHRNqA0YYABABGgJ3cw
Source: chromecache_107.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwibiYywnuiIAxWkQUECHRNqA0YYABACGgJ3cw
Source: chromecache_105.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwj3yei-nuiIAxV2LAYAHfU3KhwYABAAGgJ3cw
Source: chromecache_105.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwj3yei-nuiIAxV2LAYAHfU3KhwYABABGgJ3cw
Source: chromecache_105.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwj3yei-nuiIAxV2LAYAHfU3KhwYABACGgJ3cw
Source: chromecache_89.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwjAxYG8nuiIAxXKPwYAHRjTCVAYABAAGgJ3cw
Source: chromecache_89.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwjAxYG8nuiIAxXKPwYAHRjTCVAYABABGgJ3cw
Source: chromecache_89.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwjAxYG8nuiIAxXKPwYAHRjTCVAYABACGgJ3cw
Source: chromecache_112.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwj_ypHCnuiIAxUgTUECHWIvHn4YABAAGgJ3cw
Source: chromecache_112.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwj_ypHCnuiIAxUgTUECHWIvHn4YABABGgJ3cw
Source: chromecache_112.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwj_ypHCnuiIAxUgTUECHWIvHn4YABACGgJ3cw
Source: chromecache_102.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwja3aCznuiIAxUdLQYAHdm_NdkYABAAGgJ3cw
Source: chromecache_102.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwja3aCznuiIAxUdLQYAHdm_NdkYABABGgJ3cw
Source: chromecache_102.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwja3aCznuiIAxUdLQYAHdm_NdkYABACGgJ3cw
Source: chromecache_126.2.dr, chromecache_86.2.dr, chromecache_133.2.dr, chromecache_124.2.dr, chromecache_129.2.dr, chromecache_120.2.dr, chromecache_106.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/16521530460/?gad_source=1&adview_type=3
Source: chromecache_94.2.dr, chromecache_105.2.dr	String found in binary or memory: https://www.militaryonesource.mil/efmp
Source: chromecache_112.2.dr	String found in binary or memory: https://www.nylaarp.com/
Source: chromecache_94.2.dr, chromecache_105.2.dr	String found in binary or memory: https://www.oregonablesavings.com/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49753 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@23/117@40/17

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=2036,i,9510549417315578312,17399682177661513637,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://notexistsaa.calperlongtermcare.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=2036,i,9510549417315578312,17399682177661513637,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
notexistsaa.calperlongtermcare.com	185.53.179.172	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
syndicatedsearch.goog	142.250.185.142	true	false	unknown
www.google.com	142.250.186.164	true	false	unknown
googlehosted.l.googleusercontent.com	142.250.185.129	true	false	unknown
d38psrni17bvxu.cloudfront.net	18.66.121.135	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
afs.googleusercontent.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true	false	unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=7r0oy54bkrbw&aqid=IlP5Zr_nHbyXovsP1eGuiA4&psid=7840396037&pbt=bs&adbx=375&adby=93&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=8%7C0%7C1411%7C1901%7C1188&lle=0&ifv=1&hpt=1	false	unknown
http://notexistsaa.calperlongtermcare.com/ls.php?t=66f95341&token=879f150f85d7f9141d1410d530ddca2c0f697246	false	unknown
http://notexistsaa.calperlongtermcare.com/ls.php?t=66f95333&token=f06df9e8ddd462c8afb5845161eee5e6a6511e54	false	unknown
http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Mental+Health+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj2Fwx1CP69y51eGq-AiAZrdjjEEEm-kgI4GG27mh0rqrtgT08SvO_YxhRixDnAmYj1ePjmTSEcyDkXkXf2_m-yoK-uk8je2jQwTOwoAJueqS2Nl_BXbBpVJ72-oiVSQZKMuVZ8IvWr4&pcsa=false&nb=0&nm=1	false	unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=wrxx7vj7ui9r&aqid=PVP5ZprLKp3amLAP2f_WyQ0&psid=7840396037&pbt=bs&adbx=366.5&adby=109&adbh=1355&adbw=530&adbah=475%2C439%2C439&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=19%7C0%7C582%7C22%7C260&lle=0&ifv=1&hpt=1	false	unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=qp3lescnt109&aqid=UFP5ZsDdA8r_mLAPmKangAU&psid=7840396037&pbt=bs&adbx=366.5&adby=109&adbh=1355&adbw=530&adbah=475%2C439%2C439&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=33%7C0%7C1292%7C9%7C898&lle=0&ifv=1&hpt=1	false	unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=nvga0ho65dvd&aqid=PVP5ZprLKp3amLAP2f_WyQ0&psid=7840396037&pbt=bv&adbx=366.5&adby=109&adbh=1355&adbw=530&adbah=475%2C439%2C439&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=19%7C0%7C582%7C22%7C260&lle=0&ifv=1&hpt=1	false	unknown
http://notexistsaa.calperlongtermcare.com/track.php?domain=calperlongtermcare.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTgyMi42ODg3OmQ4OTczZDQ3MDMwYjk0NzQ3ODhiOTVmZTk5NjdkZWM1MWI2ZmM3Yzg4NTgyMzEwZjE1NWE4MWQ5YjZiYWNiY2I6NjZmOTUzNGVhODIyNg%3D%3D	false	unknown
http://notexistsaa.calperlongtermcare.com/track.php?domain=calperlongtermcare.com&toggle=browserjs&uid=MTcyNzYxNTgyOC4zNjY6YTVhM2Y5OWYyNmIzZTBhOWQxZWYyZTEwMjcyNWJjYzJjZTNkMWFiN2QwNGNlNTViOGRkMzk3YmIwZjgwM2MyYTo2NmY5NTM1NDU5NTkw	false	unknown
http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Long-term+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpjxYC9i9y0TgoYIuZ8V_UHRMakU9iohKuhUuqxr8ymSHJsd1j4bjWfISTJnMGI7hFgWr_vhvGP_2LJwczGgGfqI8hF3eyZLCQwcvAFeaUtp6um6oqJ5_8cyL1p-sL7wwR07cSGJTy4bg&pcsa=false&nb=0&nm=1	false	unknown
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff	false	unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=sdde6wtalo4n&aqid=VVP5ZrfLOfbYmLAP9e-o4QE&psid=7840396037&pbt=bv&adbx=366.5&adby=109&adbh=1355&adbw=530&adbah=475%2C439%2C439&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=27%7C0%7C1317%7C5%7C1290&lle=0&ifv=1&hpt=1	false	unknown
http://d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png	false	unknown
http://notexistsaa.calperlongtermcare.com/track.php?domain=calperlongtermcare.com&toggle=browserjs&uid=MTcyNzYxNTgzNS40MDc6NzY2N2VhYmE2OGEzNWE1M2Q3N2M3OWI1MDE1OTc0ODNkNmYxMjc2M2M0YTc1N2Q4NWI3ZjkyYjk3NmYyODMyNDo2NmY5NTM1YjYzNWQ2	false	unknown
http://notexistsaa.calperlongtermcare.com/track.php?domain=calperlongtermcare.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTc5NS4yNjM3OmRkNDlhZjNmMDUyYjU0NmNhNzY4NDUxMWMzNDdkNTQ4ZWFmNzFhNzkyMmNjYjNmNGM3MDUyY2YxNDBlNDRhZGU6NjZmOTUzMzM0MDYzNg%3D%3D	false	unknown
https://notexistsaa.calperlongtermcare.com/ls.php?t=66f9531f&token=1753bcdf7e1334ef35daf0f89f8347a35bd1b0fb	false	unknown
http://notexistsaa.calperlongtermcare.com/ls.php?t=66f9533d&token=f43d8d86d39ec9063ea817064e929bdd606d7640	false	unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=tbn7nkmvzgmz&aqid=IlP5Zr_nHbyXovsP1eGuiA4&psid=7840396037&pbt=bv&adbx=375&adby=93&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=8%7C0%7C1411%7C1901%7C1188&lle=0&ifv=1&hpt=1	false	unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=x6hufqxvfipd&aqid=Q1P5ZvaiHpLaovsPw5qRoAI&psid=7840396037&pbt=bs&adbx=366.5&adby=109&adbh=1355&adbw=530&adbah=475%2C439%2C439&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=35%7C0%7C1325%7C3%7C1026&lle=0&ifv=1&hpt=1	false	unknown
https://notexistsaa.calperlongtermcare.com/	false	unknown
http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Disability+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj8QvgQXu7ghwdodehT82JgRTn3vllMykC0FwxvyfTQJr6A0SuG7m0lQBPeY8be8shRgjOY8aIA_Dc4-x7TvuvAzvS8PHi2SQZ6LVKYyrfVusdKdQ6CTxo02n5nKSQlxTjJhvzl1MnjA&pcsa=false	false	unknown
https://notexistsaa.calperlongtermcare.com/track.php?domain=calperlongtermcare.com&toggle=browserjs&uid=MTcyNzYxNTc3NS4yNDM4OmRmMjk1NDRhMGE4OWQ3MjlkMjZmNGVkMzcyMmQwZjM0NGI5ZWY3ODU1OTYzY2UyMzk2YmQxNzBlNGJiZDY3OGY6NjZmOTUzMWYzYjg3Ng%3D%3D	false	unknown
http://notexistsaa.calperlongtermcare.com/track.php?domain=calperlongtermcare.com&toggle=browserjs&uid=MTcyNzYxNTgyMi42ODg3OmQ4OTczZDQ3MDMwYjk0NzQ3ODhiOTVmZTk5NjdkZWM1MWI2ZmM3Yzg4NTgyMzEwZjE1NWE4MWQ5YjZiYWNiY2I6NjZmOTUzNGVhODIyNg%3D%3D	false	unknown
https://www.google.com/images/afs/snowman.png	false	unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=652pedqnoxbl&aqid=N1P5ZtuRBKSDhcIPk9SNsAQ&psid=7840396037&pbt=bs&adbx=366.5&adby=109&adbh=1355&adbw=530&adbah=475%2C439%2C439&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=51%7C0%7C1341%7C1513%7C243&lle=0&ifv=1&hpt=1	false	unknown
http://notexistsaa.calperlongtermcare.com/favicon.ico	false	unknown
https://syndicatedsearch.goog/afs/ads/i/iframe.html	false	unknown
http://notexistsaa.calperlongtermcare.com/track.php?domain=calperlongtermcare.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTgzNS40MDc6NzY2N2VhYmE2OGEzNWE1M2Q3N2M3OWI1MDE1OTc0ODNkNmYxMjc2M2M0YTc1N2Q4NWI3ZjkyYjk3NmYyODMyNDo2NmY5NTM1YjYzNWQ2	false	unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=u7l3x2p49ukq&aqid=XFP5Zv-sN6CahcIP4t748Ac&psid=7840396037&pbt=bv&adbx=366.5&adby=109&adbh=1355&adbw=530&adbah=475%2C439%2C439&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=23%7C0%7C1709%7C18%7C699&lle=0&ifv=1&hpt=1	false	unknown
http://notexistsaa.calperlongtermcare.com/ls.php?t=66f95354&token=002ca744dbc126b8105f96b660f7b6a2674c7bd7	false	unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=x4y35lt9lpng&aqid=N1P5ZtuRBKSDhcIPk9SNsAQ&psid=7840396037&pbt=bv&adbx=366.5&adby=109&adbh=1355&adbw=530&adbah=475%2C439%2C439&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=51%7C0%7C1341%7C1513%7C243&lle=0&ifv=1&hpt=1	false	unknown
http://notexistsaa.calperlongtermcare.com/track.php?domain=calperlongtermcare.com&toggle=browserjs&uid=MTcyNzYxNTgwOS41MTQyOjk4ODg5ZDBkOTNhZmViZDZjZmJlMDcyMzEwZmU1NTA3NWRiMmMxYzExOGZkODQ5OTAxMWM4Yjg0OTlmZGZiNTU6NjZmOTUzNDE3ZDhhYg%3D%3D	false	unknown
https://notexistsaa.calperlongtermcare.com/track.php?domain=calperlongtermcare.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTc3NS4yNDM4OmRmMjk1NDRhMGE4OWQ3MjlkMjZmNGVkMzcyMmQwZjM0NGI5ZWY3ODU1OTYzY2UyMzk2YmQxNzBlNGJiZDY3OGY6NjZmOTUzMWYzYjg3Ng%3D%3D	false	unknown
http://notexistsaa.calperlongtermcare.com/ls.php?t=66f9535b&token=b12389aec88761c69130efd9163b459583a6c7b3	false	unknown
https://d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png	false	unknown
http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Long-term+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpjxYC9i9y0TgoYIuZ8V_UHRMakU9iohKuhUuqxr8ymSHJsd1j4bjWfISTJnMGI7hFgWr_vhvGP_2LJwczGgGfqI8hF3eyZLCQwcvAFeaUtp6um6oqJ5_8cyL1p-sL7wwR07cSGJTy4bg&pcsa=false	false	unknown
http://notexistsaa.calperlongtermcare.com/track.php?domain=calperlongtermcare.com&toggle=browserjs&uid=MTcyNzYxNTgwNS4wODA5OjkzM2NiZGEwODhjNzQyZTkxMzk3Y2Q5N2QzODliZDM5NDFjNzhmMTU5ZjkzZDAwNTQwMGNkMDNiYzQ1NGE5MGQ6NjZmOTUzM2QxM2MxOA%3D%3D	false	unknown
http://notexistsaa.calperlongtermcare.com/ls.php?t=66f9534e&token=045d16523d9232997a06f47047c84c5614864402	false	unknown
http://notexistsaa.calperlongtermcare.com/track.php?domain=calperlongtermcare.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTgwNS4wODA5OjkzM2NiZGEwODhjNzQyZTkxMzk3Y2Q5N2QzODliZDM5NDFjNzhmMTU5ZjkzZDAwNTQwMGNkMDNiYzQ1NGE5MGQ6NjZmOTUzM2QxM2MxOA%3D%3D	false	unknown
http://notexistsaa.calperlongtermcare.com/track.php?domain=calperlongtermcare.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTgwOS41MTQyOjk4ODg5ZDBkOTNhZmViZDZjZmJlMDcyMzEwZmU1NTA3NWRiMmMxYzExOGZkODQ5OTAxMWM4Yjg0OTlmZGZiNTU6NjZmOTUzNDE3ZDhhYg%3D%3D	false	unknown
http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Disability+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj8QvgQXu7ghwdodehT82JgRTn3vllMykC0FwxvyfTQJr6A0SuG7m0lQBPeY8be8shRgjOY8aIA_Dc4-x7TvuvAzvS8PHi2SQZ6LVKYyrfVusdKdQ6CTxo02n5nKSQlxTjJhvzl1MnjA&pcsa=false&nb=0&nm=2	false	unknown
http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Mental+Health+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj2Fwx1CP69y51eGq-AiAZrdjjEEEm-kgI4GG27mh0rqrtgT08SvO_YxhRixDnAmYj1ePjmTSEcyDkXkXf2_m-yoK-uk8je2jQwTOwoAJueqS2Nl_BXbBpVJ72-oiVSQZKMuVZ8IvWr4&pcsa=false	false	unknown
https://syndicatedsearch.goog/adsense/domains/caf.js?pac=2	false	unknown
https://syndicatedsearch.goog/adsense/domains/caf.js?pac=0	false	unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=h91sp5te7cyh&aqid=VVP5ZrfLOfbYmLAP9e-o4QE&psid=7840396037&pbt=bs&adbx=366.5&adby=109&adbh=1355&adbw=530&adbah=475%2C439%2C439&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=27%7C0%7C1317%7C5%7C1290&lle=0&ifv=1&hpt=1	false	unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=qwy65mgg467a&aqid=XFP5Zv-sN6CahcIP4t748Ac&psid=7840396037&pbt=bs&adbx=366.5&adby=109&adbh=1355&adbw=530&adbah=475%2C439%2C439&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=23%7C0%7C1709%7C18%7C699&lle=0&ifv=1&hpt=1	false	unknown
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff	false	unknown
https://notexistsaa.calperlongtermcare.com/favicon.ico	false	unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=jppmr26ecf6p&aqid=UFP5ZsDdA8r_mLAPmKangAU&psid=7840396037&pbt=bv&adbx=366.5&adby=109&adbh=1355&adbw=530&adbah=475%2C439%2C439&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=33%7C0%7C1292%7C9%7C898&lle=0&ifv=1&hpt=1	false	unknown
http://notexistsaa.calperlongtermcare.com/track.php?domain=calperlongtermcare.com&toggle=browserjs&uid=MTcyNzYxNTc5NS4yNjM3OmRkNDlhZjNmMDUyYjU0NmNhNzY4NDUxMWMzNDdkNTQ4ZWFmNzFhNzkyMmNjYjNmNGM3MDUyY2YxNDBlNDRhZGU6NjZmOTUzMzM0MDYzNg%3D%3D	false	unknown
http://notexistsaa.calperlongtermcare.com/track.php?domain=calperlongtermcare.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTgyOC4zNjY6YTVhM2Y5OWYyNmIzZTBhOWQxZWYyZTEwMjcyNWJjYzJjZTNkMWFiN2QwNGNlNTViOGRkMzk3YmIwZjgwM2MyYTo2NmY5NTM1NDU5NTkw	false	unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=k4vgtt2ky74x&aqid=Q1P5ZvaiHpLaovsPw5qRoAI&psid=7840396037&pbt=bv&adbx=366.5&adby=109&adbh=1355&adbw=530&adbah=475%2C439%2C439&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=35%7C0%7C1325%7C3%7C1026&lle=0&ifv=1&hpt=1	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://www.oregonablesavings.com/	chromecache_94.2.dr, chromecache_105.2.dr	false	unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqka1W5fTEp3LIwzMM0Vpn51rCmrd	chromecache_107.2.dr	false	unknown
https://syndicatedsearch.goog	chromecache_126.2.dr, chromecache_86.2.dr, chromecache_133.2.dr, chromecache_124.2.dr, chromecache_129.2.dr, chromecache_120.2.dr, chromecache_106.2.dr	false	unknown
https://www.aarp.org/aarp/assistance	chromecache_94.2.dr, chromecache_105.2.dr	false	unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqkrmevfqXr9ZbeuSUlYtdkU3ijpL	chromecache_105.2.dr	false	unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqm-DKO4hOkSesXQ32xyFg_GM0mOY	chromecache_105.2.dr	false	unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqneaTBCcKPvpd0r-d8YZbiXTgnVz	chromecache_102.2.dr	false	unknown
https://www.nylaarp.com/	chromecache_112.2.dr	false	unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqkCUBTW3fqmSxO7IvB4UEkUgOcJA	chromecache_107.2.dr	false	unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqnz2ubu0zunJxnXBmeBy1kgpIVmn	chromecache_94.2.dr	false	unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqn9GyhwT8F8cAu3UODo-3aYu43wa	chromecache_112.2.dr	false	unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqkGFS2NXID_pDTZOT2SJBSszizh3	chromecache_102.2.dr	false	unknown
https://policylibrary.mcnhealth	chromecache_107.2.dr	false	unknown
https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=5	chromecache_126.2.dr, chromecache_86.2.dr, chromecache_133.2.dr, chromecache_124.2.dr, chromecache_129.2.dr, chromecache_120.2.dr, chromecache_106.2.dr	false	unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqnLOKT0tiXM4bcuBkqDR20NlS3S7	chromecache_112.2.dr	false	unknown
https://www.applitrack.com/	chromecache_89.2.dr, chromecache_102.2.dr	false	unknown
https://www.militaryonesource.mil/efmp	chromecache_94.2.dr, chromecache_105.2.dr	false	unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqnxXVus2w1U1zB2c5b-lCJgjiBdh	chromecache_102.2.dr	false	unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqno3OAwH82YOCVu8TSDNNu0jUrAE	chromecache_94.2.dr	false	unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrql-PO4NYviQ0s3HGG1SGzHTeaNkl	chromecache_94.2.dr	false	unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqktyGbEAIs64UuZmKJS_qA7kAFri	chromecache_89.2.dr	false	unknown
https://www.centraltrust.net/	chromecache_112.2.dr, chromecache_107.2.dr	false	unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqltswFXnN_jDIZ-OOU_cpDmeJ_kY	chromecache_89.2.dr	false	unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqnC06e43E-QkOQiRUuvbxuhC7pq8	chromecache_112.2.dr	false	unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqkhUBp2RPdfckVwbRVRUfIw8NSxF	chromecache_89.2.dr	false	unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqnH2CPaG_w1lCa7Smp9ZFkRO7Xt4	chromecache_105.2.dr	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.78	unknown	United States	15169	GOOGLEUS	false
142.250.185.129	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
142.250.186.174	unknown	United States	15169	GOOGLEUS	false
172.217.18.14	unknown	United States	15169	GOOGLEUS	false
185.53.179.172	notexistsaa.calperlongtermcare.com	Germany	61969	TEAMINTERNET-ASDE	false
18.66.121.69	unknown	United States	3	MIT-GATEWAYSUS	false
18.66.121.190	unknown	United States	3	MIT-GATEWAYSUS	false
142.250.185.142	syndicatedsearch.goog	United States	15169	GOOGLEUS	false
18.66.121.135	d38psrni17bvxu.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
142.250.74.196	unknown	United States	15169	GOOGLEUS	false
142.250.184.196	unknown	United States	15169	GOOGLEUS	false
142.250.185.193	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false
172.217.18.100	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.7
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1522244
Start date and time:	2024-09-29 15:15:17 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 43s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://notexistsaa.calperlongtermcare.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@23/117@40/17
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Long-term+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpjxYC9i9y0TgoYIuZ8V_UHRMakU9iohKuhUuqxr8ymSHJsd1j4bjWfISTJnMGI7hFgWr_vhvGP_2LJwczGgGfqI8hF3eyZLCQwcvAFeaUtp6um6oqJ5_8cyL1p-sL7wwR07cSGJTy4bg&pcsa=false Browse: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Mental+Health+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj2Fwx1CP69y51eGq-AiAZrdjjEEEm-kgI4GG27mh0rqrtgT08SvO_YxhRixDnAmYj1ePjmTSEcyDkXkXf2_m-yoK-uk8je2jQwTOwoAJueqS2Nl_BXbBpVJ72-oiVSQZKMuVZ8IvWr4&pcsa=false Browse: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Disability+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj8QvgQXu7ghwdodehT82JgRTn3vllMykC0FwxvyfTQJr6A0SuG7m0lQBPeY8be8shRgjOY8aIA_Dc4-x7TvuvAzvS8PHi2SQZ6LVKYyrfVusdKdQ6CTxo02n5nKSQlxTjJhvzl1MnjA&pcsa=false Browse: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Mental+Health+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj2Fwx1CP69y51eGq-AiAZrdjjEEEm-kgI4GG27mh0rqrtgT08SvO_YxhRixDnAmYj1ePjmTSEcyDkXkXf2_m-yoK-uk8je2jQwTOwoAJueqS2Nl_BXbBpVJ72-oiVSQZKMuVZ8IvWr4&pcsa=false&nb=0&nm=1 Browse: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Disability+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj8QvgQXu7ghwdodehT82JgRTn3vllMykC0FwxvyfTQJr6A0SuG7m0lQBPeY8be8shRgjOY8aIA_Dc4-x7TvuvAzvS8PHi2SQZ6LVKYyrfVusdKdQ6CTxo02n5nKSQlxTjJhvzl1MnjA&pcsa=false&nb=0&nm=2 Browse: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Long-term+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpjxYC9i9y0TgoYIuZ8V_UHRMakU9iohKuhUuqxr8ymSHJsd1j4bjWfISTJnMGI7hFgWr_vhvGP_2LJwczGgGfqI8hF3eyZLCQwcvAFeaUtp6um6oqJ5_8cyL1p-sL7wwR07cSGJTy4bg&pcsa=false&nb=0&nm=1

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.131, 142.251.168.84, 142.250.186.46, 34.104.35.123, 142.250.185.98, 52.165.165.26, 199.232.214.172, 192.229.221.95, 13.85.23.206, 216.58.206.74, 20.242.39.171, 172.217.16.195, 142.250.181.227
Excluded domains from analysis (whitelisted): fonts.googleapis.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, fonts.gstatic.com, partner.googleadservices.com, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://notexistsaa.calperlongtermcare.com/

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://notexistsaa.calperlongtermcare.com/ Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":null, "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8f Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Visit Website", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8f Model: jbxai	{ "brand":["Calperlongtermcare.com"], "contains_trigger_text":true, "trigger_text":"Visit Website", "prominent_button_name":"Visit Website", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://notexistsaa.calperlongtermcare.com/ Model: jbxai	{ "brand":["calperlongtermcare.com"], "contains_trigger_text":true, "trigger_text":"Sign into X Sign in with Google Sign in with Apple Phone, email, or username Next Forgot password? Dont have an account? Sign up", "prominent_button_name":"Sign into X", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8f Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Visit Website", "text_input_field_labels":[], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8f Model: jbxai	{ "brand":["calperlongtermcare.com"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Visit Website", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8f Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"unknown", "prominent_button_name":"Visit Website", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8f Model: jbxai	{ "brand":["AARP", "Central Trust"], "contains_trigger_text":true, "trigger_text":"Visit Website", "prominent_button_name":"Visit Website", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8f Model: jbxai	{ "brand":["Globi"], "contains_trigger_text":true, "trigger_text":"Visit Website", "prominent_button_name":"Visit Website", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8f Model: jbxai	{ "brand":["AARP", "Central Trust"], "contains_trigger_text":true, "trigger_text":"Visit Website", "prominent_button_name":"Visit Website", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	166
Entropy (8bit):	5.852184084844084
Encrypted:	false
SSDEEP:	3:yionv//thPlGARtjmA66MF5DpwloyzFZp0xdkgl08mzsPS98WInwgblSHxp2p/Hb:6v/lhPIARoA6b5tQoEZCkglFmRhawgB5
MD5:	D2D649B406D7A325683E2CCBD3297E43
SHA1:	819D6E6BF4CE1219BF83DEB5CB33A04A57E12C07
SHA-256:	E9BDAE625005100947D641A34F00BDD51B435D2C5979DF3F3F32F0D812CB17F7
SHA-512:	19E7F5D74C422DB0DC24B1748C174931CCC59EA0F80EE7F92293C7EF05956D477C8287F21CB10FCFF6867E10AC81C96DC138F9C5FF1F83F3AC4FC66A7F7D1AE0
Malicious:	false
Reputation:	low
URL:	https://www.google.com/images/afs/snowman.png
Preview:	.PNG........IHDR...0...0......,.....PLTE....................r.....tRNS. ... ..<~...=IDATx.c.~.Q.I......!V....'......X%L.2.....b.U.U.(.&.0.V.a5...-...........IEND.B`.

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	391
Entropy (8bit):	4.7474201749507134
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slzTPl2O4UYaeLIT4W+KS4S1UpMTQpi6jUs8sh6B+BSmK0C:t6qFPUPkHSt1UiT6i6jUs8b0I0C
MD5:	8959DDCD9712196961D93F58064ED655
SHA1:	62AB1E38E7E9FBF58A04381B76C2D96A9C829F24
SHA-256:	17C7A89BF169C2EE400E31B042CEA68513F06B9CD7D1E8990DBEC800F0D771C7
SHA-512:	5E9EFFA313C30B351345DB963238B4AFD0728CA302FD79A853C80C89F042266D44CC1D29492520FB0FA80B47135E54E6963DFC21972F6B236B84C1DA2FAD809D
Malicious:	false
Reputation:	low
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L20.49 19l-4.99-5zm-6 0C7.01 14 5 11.99 5 9.5S7.01 5 9.5 5 14 7.01 14 9.5 11.99 14 9.5 14z"/><path d="M0 0h24v24H0z" fill="none"/></svg>.

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (18103)
Category:	downloaded
Size (bytes):	35370
Entropy (8bit):	5.336745317320223
Encrypted:	false
SSDEEP:	384:2ni0XP/zfuiS4u/uHeDCGuG1FuGzAMuH4/uGN2ZoKe0xY6esWXykHO4:2iIP/z9ogsxx9L/P2ZosxY6esgyH4
MD5:	AD2C14B825FCB2AE261524B869CFDBAD
SHA1:	A90016F81927D82061502020FE112514078686A0
SHA-256:	38AE7B7F7F905F8149947BB7F8DA57287D01FEAF4323413C951B06206D21C733
SHA-512:	D75C156F94CDB3E3B88E7F81F8D93B54664C2E9495605AB9746D47177B1B8114D9E3D063E98DDB7C7B59A80B61E798B4C24090C8EDE5618CE23B7DF5077DC272
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2C000003%2C000517%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet12_3ph&r=m&sct=ID%3D911125d09fe5fc33%3AT%3D1727615778%3ART%3D1727615778%3AS%3DALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw&sc_status=6&hl=en&rpbu=http%3A%2F%2Fnotexistsaa.calperlongtermcare.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1ODA1LjA5NTl8OTRiYzNhNGIyNzJhZjViZGU2M2QzNjkyMTg1MjVlOWRiNGI1ZmNkNXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&terms=Long-term%20care%2Cmental%20health%20care%2Cdisability%20care%2Celderly%20care%2Cin%20home%20care&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2556349329685648&q=Mental%20Health%20Care&afdt=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj2Fwx1CP69y51eGq-AiAZrdjjEEEm-kgI4GG27mh0rqrtgT08SvO_YxhRixDnAmYj1ePjmTSEcyDkXkXf2_m-yoK-uk8je2jQwTOwoAJueqS2Nl_BXbBpVJ72-oiVSQZKMuVZ8IvWr4&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300000%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266%2C72717107&format=n3&ad=n3&nocache=941727615804579&num=0&output=afd_ads&domain_name=notexistsaa.calperlongtermcare.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727615804581&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=754&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=http%3A%2F%2Fnotexistsaa.calperlongtermcare.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8%26query%3DMental%2BHealth%2BCare%26afdToken%3DChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj2Fwx1CP69y51eGq-AiAZrdjjEEEm-kgI4GG27mh0rqrtgT08SvO_YxhRixDnAmYj1ePjmTSEcyDkXkXf2_m-yoK-uk8je2jQwTOwoAJueqS2Nl_BXbBpVJ72-oiVSQZKMuVZ8IvWr4%26pcsa%3Dfalse
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (14105)
Category:	downloaded
Size (bytes):	14992
Entropy (8bit):	5.4714423960307
Encrypted:	false
SSDEEP:	192:2E12iMpgbLLgh3VLWrXNmkNvsNJTRKgf+a:2ni0d3hYHqrRKW+a
MD5:	879BE787633375E1786C03D27A79C075
SHA1:	F9AF5C3423B0F653E1FCFB6B02C8DD8AA485D8FB
SHA-256:	01C7161ADA641A876E17609F5C31820ECEA918B0ACC16DCF1785BA683AFD6D6E
SHA-512:	5ACF8ECFD0FC67A65E134BD0B4FC9B2AD25C4D96A1170CEF177AA213071ED33591CADEA4E5891E0484B4310642F935A885E376473C68F9A30ECD6CC95EA70DB7
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2C000003%2C000517%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet12_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fnotexistsaa.calperlongtermcare.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&terms=Long-term%20care%2Cmental%20health%20care%2Cdisability%20care%2Celderly%20care%2Cin%20home%20care&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2556349329685648&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266%2C72717107&format=r3%7Cs&nocache=5811727615776546&num=0&output=afd_ads&domain_name=notexistsaa.calperlongtermcare.com&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1727615776549&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=754&frm=0&uio=--&cont=tc&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=https%3A%2F%2Fnotexistsaa.calperlongtermcare.com%2F
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1559)
Category:	downloaded
Size (bytes):	1560
Entropy (8bit):	5.3397419740086
Encrypted:	false
SSDEEP:	48:0JhwpOnK8lwSb6YS4tyPWp2PXihm0wQR2FgbnYfblV:8aEDbL1tzAXr+0P
MD5:	703CD18CF33FAB9BE06D10C3E11397ED
SHA1:	E560EB038E29BD9FA3956A2F0B384B131E464F6B
SHA-256:	D3C67494FF40397807DC658721F21A937C51392F31A08108B84845B2F75EF617
SHA-512:	59EA3FA87BF0CAA2E5E48B1C4EBB2F6790F8FD9E35FFC54B81F5B84298A452F04CC4C7CB5D3A2795F279A9E1D761AC74A70AED741D7C533CAE49AF62CE9CE006
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads/i/iframe.html
Preview:	<!doctype html><html><head><meta name="ROBOTS" content="NOINDEX, NOFOLLOW"><meta name="format-detection" content="telephone=no"><meta content="origin" name="referrer"></head><body><div id="adBlock"></div><script nonce="GXRfXd2FoOScjndNzkKtpA">if (window.name.match(/^{"name":"master-\d+"/)) {var script = document.createElement('script');script.src = "/adsense/search/ads.js";var href = window.location.href;if (!!href && (href.indexOf('?pac=') > 0 \|\| href.indexOf('&pac=') > 0)) {if (href.indexOf('?pac=1') > 0 \|\| href.indexOf('&pac=1') > 0) {script.src += '?pac=1';} else if (href.indexOf('?pac=2') > 0 \|\| href.indexOf('&pac=2') > 0) {script.src += '?pac=2';} else {script.src += '?pac=0';}}document.head.appendChild(script);window.IS_GOOGLE_AFS_IFRAME_ = true;}function populate(el) {var adBlock = document.getElementById('adBlock');adBlock.innerHTML += el;}function getMaster() {var m = null;var pIndex = window.name.indexOf('\|');if (pIndex > -1 && window.name.charAt(0) != '{') {try {m = window.

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (16379)
Category:	downloaded
Size (bytes):	35174
Entropy (8bit):	5.3540096944437865
Encrypted:	false
SSDEEP:	384:2ni0XP/zfuiS4u/uHeDCEirQiC3gg/gj/jMJzOH:2iIP/z9og+i1C3O3xH
MD5:	2761D27C0E37AC68BBEE3451C189CF6F
SHA1:	18002D584BB889F35F69945256ADF11D99B6891E
SHA-256:	B011F4ECCA3916B7B12EED83938D0DA7EEC477DE0E0410B06123280EC4A6466E
SHA-512:	6F316B35131B6151DBF2745B34ADEEEC4746DCEBA77AC2B138ABA3BC9503DB332163C1D5F4255E404EDDA8ACC959B03BE8349C54F0F5D8FE9CAC6B1123BFBE9E
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2C000003%2C000517%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet12_3ph&r=m&sct=ID%3D911125d09fe5fc33%3AT%3D1727615778%3ART%3D1727615778%3AS%3DALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw&sc_status=6&hl=en&rpbu=http%3A%2F%2Fnotexistsaa.calperlongtermcare.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1ODI4LjM4NHw4OGY2NjdhMTA4YmE2ODUwMWExZTMxZDkxY2U1Zjc3YzdkNmI3MjI5fHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHx8fDB8MHx8MHx8fDB8MHxXMTA9fHwxfFcxMD18MTc1M2JjZGY3ZTEzMzRlZjM1ZGFmMGY4OWY4MzQ3YTM1YmQxYjBmYnwwfGRwLXRlYW1pbnRlcm5ldDEyXzNwaHwwfDB8fHw%253D&terms=Long-term%20care%2Cmental%20health%20care%2Cdisability%20care%2Celderly%20care%2Cin%20home%20care&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2556349329685648&q=Disability%20Care&afdt=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj8QvgQXu7ghwdodehT82JgRTn3vllMykC0FwxvyfTQJr6A0SuG7m0lQBPeY8be8shRgjOY8aIA_Dc4-x7TvuvAzvS8PHi2SQZ6LVKYyrfVusdKdQ6CTxo02n5nKSQlxTjJhvzl1MnjA&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300000%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266%2C72717108&format=n3&ad=n3&nocache=1511727615828097&num=0&output=afd_ads&domain_name=notexistsaa.calperlongtermcare.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727615828102&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=754&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=http%3A%2F%2Fnotexistsaa.calperlongtermcare.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8%26query%3DDisability%2BCare%26afdToken%3DChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj8QvgQXu7ghwdodehT82JgRTn3vllMykC0FwxvyfTQJr6A0SuG7m0lQBPeY8be8shRgjOY8aIA_Dc4-x7TvuvAzvS8PHi2SQZ6LVKYyrfVusdKdQ6CTxo02n5nKSQlxTjJhvzl1MnjA%26pcsa%3Dfalse%26nb%3D0%26nm%3D2
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1879)
Category:	downloaded
Size (bytes):	153214
Entropy (8bit):	5.543630481633971
Encrypted:	false
SSDEEP:	1536:sni6+zNKofjr9PyfpK7fDH+7pSU6GZvu85pistHWvR3+2xwHzgmcfpUWgQABuucP:gqM7vptHWpu22H9dBuDj3dmChm9Abj
MD5:	40530F1DED793B59E0D928D18CF39569
SHA1:	A0F3E2E77B57996C4AAFA678188064EFC979AA0C
SHA-256:	3FF8C01FF32ACE1D0DBD7F4DE73CB1C027E30FCC0A68CE8698193092C2A5E6E8
SHA-512:	E9164FE5D3A4692591F0AFF6B7560CF719301A0B3106CDA0DEFC47FF5D66CFAB5F95293B68BB8E131C066BDE77AE98D2F953CC6F5EB4D6CF79819DC879DDB0EB
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/adsense/domains/caf.js?pac=0
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17301431,17301433,17301436,17301511,17301515,17301516,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":0,"afs_gpp_api":0}}};var n;function ba(a){var b=0;return functi

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (16434)
Category:	downloaded
Size (bytes):	37217
Entropy (8bit):	5.393148946303609
Encrypted:	false
SSDEEP:	384:2ni0XP/zfuiS4u/uHeDC2rh6rGNTjNrtlHZewiegmUae0HO2:2iIP/z9ogOhYGNNtlHdwjn2
MD5:	306B9E6498F34502B456B5DED1736554
SHA1:	FCCD2463FB58FF751C4BA867F31B8FCD709A30FE
SHA-256:	36ACDC657BE46950DC9B9BE1631734C2CA7C6EFF18EED973D8A78EB9C7B3570B
SHA-512:	12E60C39A5183C3BD8AA9730746AC9E586460CB1911531CADE73B070C2D6909A6613C51735978AA23D2A00DEFF8F36128E4DA124BA683416BE10EDD7D66EC81F
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2C000003%2C000517%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet12_3ph&r=m&sct=ID%3D911125d09fe5fc33%3AT%3D1727615778%3ART%3D1727615778%3AS%3DALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw&sc_status=6&hl=en&rpbu=http%3A%2F%2Fnotexistsaa.calperlongtermcare.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzk1LjI4MDJ8MGIxNjc0MTZjODk3ZjI1MzFlNTAwMzc2ZDU2YzViMWI3MDBlMmY2OXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&terms=Long-term%20care%2Cmental%20health%20care%2Cdisability%20care%2Celderly%20care%2Cin%20home%20care&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2556349329685648&q=Long-term%20Care&afdt=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpjxYC9i9y0TgoYIuZ8V_UHRMakU9iohKuhUuqxr8ymSHJsd1j4bjWfISTJnMGI7hFgWr_vhvGP_2LJwczGgGfqI8hF3eyZLCQwcvAFeaUtp6um6oqJ5_8cyL1p-sL7wwR07cSGJTy4bg&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300000%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266%2C72717108&format=n3&ad=n3&nocache=7701727615797187&num=0&output=afd_ads&domain_name=notexistsaa.calperlongtermcare.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727615797197&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=754&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=http%3A%2F%2Fnotexistsaa.calperlongtermcare.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8%26query%3DLong-term%2BCare%26afdToken%3DChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpjxYC9i9y0TgoYIuZ8V_UHRMakU9iohKuhUuqxr8ymSHJsd1j4bjWfISTJnMGI7hFgWr_vhvGP_2LJwczGgGfqI8hF3eyZLCQwcvAFeaUtp6um6oqJ5_8cyL1p-sL7wwR07cSGJTy4bg%26pcsa%3Dfalse
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 14539
Category:	downloaded
Size (bytes):	5449
Entropy (8bit):	7.969006099210722
Encrypted:	false
SSDEEP:	96:BjLVoHv+C/Kn6uY3ic+DSoJ3ORhCG7jj1FEP2/u1SljczhgPHpuA5ztUtDNUb/o:JVcmCS6uY3iciLhIH1FOiBwNgPgA5zyr
MD5:	CC8BBB0F3A594CE88799791F6CED4BA3
SHA1:	CA53CD5D6AD50683E3A4829A0C09CD7127049607
SHA-256:	427297803E4E2C503AB301833DFBD1E6DE517FAF806A82DDC8CD5BA867CB33A5
SHA-512:	750908750C8956B31F186FE2B4D1B4F698305F763F861A4B48C111E4236032749D402E726B0950827A606DC3D7B99A0B4871D0230FEA2C70F4839ED6B702BD28
Malicious:	false
Reputation:	low
URL:	http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Disability+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj8QvgQXu7ghwdodehT82JgRTn3vllMykC0FwxvyfTQJr6A0SuG7m0lQBPeY8be8shRgjOY8aIA_Dc4-x7TvuvAzvS8PHi2SQZ6LVKYyrfVusdKdQ6CTxo02n5nKSQlxTjJhvzl1MnjA&pcsa=false&nb=0&nm=2
Preview:	...........[.w.....W(.y....Xl..3..-./......R..!.0K?.....q^.Ng.....V.u..U>.P.>i.o.R...G[..#..ci.wL[.....h.N.....'.....5......j..:.\.<.^.1...[OwV......7{.....m..:...2,}j...9.5..6/5.T{.>.^6.......f\.JU...Z,.T..j..R.vj.......39..}......S..t8-.....2%v........<.(....].[g.G.6;.W...L..9.......ldZn%...q9..N..4..N/....gf..d2.WIp+A..L?..9.q..q.8..../..my.....'$...$<>.2..@...q.W.x.t)..#..W./...m..........xZ..$.2<..iWc&..)..;.5L{v.kx..p{.g.#t.s........h..0.C.r.\onri.u.U...p.h.. ...1'+......=.XzY.8fR.d.\|i.:...u^f.E3..u....^....w3....x...w$.N;\|.'i..w...!.X...x..>7z}..9....d.28`..O.!=.z.....ED.......H..8.;$..L....v.m.m v..4.s.<@]..i@.m.A.........L..Ns..u...f..2....m.S.......1.gX.. GR.......6u..,A.ZD.$~.x...c.63m..........l. d4...5.-.u.], `jY.)......Jl..hJOyghx....tc.%....^l.l..z..z.}G....!p....,.y...A..~S....=...P.t....:.2.M..1.f....F.[..;..A...e..#.G.....!....W..H".5.i.o.:...>.?..l.R.[.@.b..3)...<..Rj}:.@...6.J..S;N.nz.!.E......

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	200
Entropy (8bit):	5.025855206845441
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slhohC/vmI4SmK0xhFELE47zF:t6qnoU/vmRI0xQTF
MD5:	11B3089D616633CA6B73B57AA877EEB4
SHA1:	07632F63E06B30D9B63C97177D3A8122629BDA9B
SHA-256:	809FB4619D2A2F1A85DBDA8CC69A7F1659215212D708A098D62150EEE57070C1
SHA-512:	079B0E35B479DFDBE64A987661000F4A034B10688E26F2A5FE6AAA807E81CCC5593D40609B731AB3340E687D83DD08DE4B8B1E01CDAC9D4523A9F6BB3ACFCBA0
Malicious:	false
Reputation:	low
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (16552)
Category:	downloaded
Size (bytes):	36639
Entropy (8bit):	5.363469439206816
Encrypted:	false
SSDEEP:	384:2ni0XP/zfuiS4u/uHeDCuPZ2GrhOrGhBrMRcETU6rO0:2iIP/z9og8P0ch0Gh5MRcETUZ0
MD5:	9B715C9AD11622549807D72B665AAE87
SHA1:	2C57BEE815236E1D022EF1292C3C8C9B040BFFC7
SHA-256:	67F8E6E8255DFD8B9BA9F3CC1261D1EB133F6DE26B675CAAECAFA611582E4AEC
SHA-512:	E0F6843365861BF3E4D4D854696B33FDB2FE3F0CA1BF9C82B854C466DF390BF45F79F4157721D0A737EA33FED44544EF7D55156955D00FCF2CB732042780E89B
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2C000003%2C000517%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet12_3ph&r=m&sct=ID%3D911125d09fe5fc33%3AT%3D1727615778%3ART%3D1727615778%3AS%3DALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw&sc_status=6&hl=en&rpbu=http%3A%2F%2Fnotexistsaa.calperlongtermcare.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1ODM1LjQyMjZ8MjY3MjMxZjJhM2ExNjA5OTk3ZDc3MWU3YTEzZWM2YWQ0NTlhNzNmYnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&terms=Long-term%20care%2Cmental%20health%20care%2Cdisability%20care%2Celderly%20care%2Cin%20home%20care&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2556349329685648&q=Long-term%20Care&afdt=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpjxYC9i9y0TgoYIuZ8V_UHRMakU9iohKuhUuqxr8ymSHJsd1j4bjWfISTJnMGI7hFgWr_vhvGP_2LJwczGgGfqI8hF3eyZLCQwcvAFeaUtp6um6oqJ5_8cyL1p-sL7wwR07cSGJTy4bg&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300000%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266%2C72717108&format=n3&ad=n3&nocache=6431727615835035&num=0&output=afd_ads&domain_name=notexistsaa.calperlongtermcare.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727615835037&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=754&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=http%3A%2F%2Fnotexistsaa.calperlongtermcare.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8%26query%3DLong-term%2BCare%26afdToken%3DChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpjxYC9i9y0TgoYIuZ8V_UHRMakU9iohKuhUuqxr8ymSHJsd1j4bjWfISTJnMGI7hFgWr_vhvGP_2LJwczGgGfqI8hF3eyZLCQwcvAFeaUtp6um6oqJ5_8cyL1p-sL7wwR07cSGJTy4bg%26pcsa%3Dfalse%26nb%3D0%26nm%3D1
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (7793)
Category:	downloaded
Size (bytes):	15339
Entropy (8bit):	5.574953176513149
Encrypted:	false
SSDEEP:	384:Ti7YoHMfOTC8WphEgA26EHeDCtkGarTqWUYX7pimhYdRu6:TiRMflfZuEHSCtkGarT7UYLwmhYdc6
MD5:	FE12E6C96A56414CC7DFD392C5B960FC
SHA1:	F04EB869ACE418761B763B8AD63E32F7FE978F1C
SHA-256:	F03E8599CF54691AF4D648C8553B3AA3777CA7962CC710CC6848114E5EBB87CE
SHA-512:	9574E371B86D1C546ACAD8ABDF0E64A003A7EC94ABD5E20465558F2C687FD7791DEE5B62ED75EBC16A713C4CD9192CD54F7BD730893D7D130D540E834B27939E
Malicious:	false
Reputation:	low
URL:	https://notexistsaa.calperlongtermcare.com/
Preview:	<!DOCTYPE html>.<html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_k+DcGgdTfMe4qvDcpKsLuXCUtPLF82oXuZp62V1+6PjTZsT8wxDTD7TGbQkAybJsAYPxkkfJsY/UBZS+Q+dgnQ==" xmlns="http://www.w3.org/1999/xhtml" lang="en">.<head>. <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"/>. <title>calperlongtermcare.com</title>. <style media="screen">..asset_star0 {..background: url('//d38psrni17bvxu.cloudfront.net/themes/assets/star0.gif') no-repeat center;..width: 13px;..height: 12px;..display: inline-block;.}...asset_star1 {..background: url('//d38psrni17bvxu.cloudfront.net/themes/assets/star1.gif') no-repeat center;..width: 13px;..height: 12px;..display: inline-block;.}...asset_starH {..background: url('//d38psrni17bvxu.cloudfront.net/themes/assets/starH.gif') no-repeat center;..width: 13px;.

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.202819531114783
Encrypted:	false
SSDEEP:	3:YWQRAW64:YWQmq
MD5:	7363E85FE9EDEE6F053A4B319588C086
SHA1:	A15E2127145548437173FC17F3E980E3F3DEE2D0
SHA-256:	C955E57777EC0D73639DCA6748560D00AA5EB8E12F13EBB2ED9656ADD3908F97
SHA-512:	A2FD24056E3EC2F1628F89EB2F1B36A9FC2437AE58D34190630FE065DF2BBEDAF9BD8AEE5F8949A002070052CA68CC6C0167214DD55DF289783CFF682B808D85
Malicious:	false
Reputation:	low
URL:	https://notexistsaa.calperlongtermcare.com/ls.php?t=66f9531f&token=1753bcdf7e1334ef35daf0f89f8347a35bd1b0fb
Preview:	{"success":true}

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.202819531114783
Encrypted:	false
SSDEEP:	3:YWQRAW64:YWQmq
MD5:	7363E85FE9EDEE6F053A4B319588C086
SHA1:	A15E2127145548437173FC17F3E980E3F3DEE2D0
SHA-256:	C955E57777EC0D73639DCA6748560D00AA5EB8E12F13EBB2ED9656ADD3908F97
SHA-512:	A2FD24056E3EC2F1628F89EB2F1B36A9FC2437AE58D34190630FE065DF2BBEDAF9BD8AEE5F8949A002070052CA68CC6C0167214DD55DF289783CFF682B808D85
Malicious:	false
Reputation:	low
URL:	http://notexistsaa.calperlongtermcare.com/ls.php?t=66f95341&token=879f150f85d7f9141d1410d530ddca2c0f697246
Preview:	{"success":true}

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	166
Entropy (8bit):	5.852184084844084
Encrypted:	false
SSDEEP:	3:yionv//thPlGARtjmA66MF5DpwloyzFZp0xdkgl08mzsPS98WInwgblSHxp2p/Hb:6v/lhPIARoA6b5tQoEZCkglFmRhawgB5
MD5:	D2D649B406D7A325683E2CCBD3297E43
SHA1:	819D6E6BF4CE1219BF83DEB5CB33A04A57E12C07
SHA-256:	E9BDAE625005100947D641A34F00BDD51B435D2C5979DF3F3F32F0D812CB17F7
SHA-512:	19E7F5D74C422DB0DC24B1748C174931CCC59EA0F80EE7F92293C7EF05956D477C8287F21CB10FCFF6867E10AC81C96DC138F9C5FF1F83F3AC4FC66A7F7D1AE0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0......,.....PLTE....................r.....tRNS. ... ..<~...=IDATx.c.~.Q.I......!V....'......X%L.2.....b.U.U.(.&.0.V.a5...-...........IEND.B`.

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://notexistsaa.calperlongtermcare.com/track.php?domain=calperlongtermcare.com&toggle=browserjs&uid=MTcyNzYxNTgzNS40MDc6NzY2N2VhYmE2OGEzNWE1M2Q3N2M3OWI1MDE1OTc0ODNkNmYxMjc2M2M0YTc1N2Q4NWI3ZjkyYjk3NmYyODMyNDo2NmY5NTM1YjYzNWQ2
Preview:	....................

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://notexistsaa.calperlongtermcare.com/track.php?domain=calperlongtermcare.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTgwNS4wODA5OjkzM2NiZGEwODhjNzQyZTkxMzk3Y2Q5N2QzODliZDM5NDFjNzhmMTU5ZjkzZDAwNTQwMGNkMDNiYzQ1NGE5MGQ6NjZmOTUzM2QxM2MxOA%3D%3D
Preview:	....................

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1879)
Category:	downloaded
Size (bytes):	153207
Entropy (8bit):	5.5436820577576045
Encrypted:	false
SSDEEP:	1536:Oni6+zNKofjr9PyfpK7fDH+7pSU6GZvu85pistHWvR3+2xwHzgmcfpUWgQABuucP:6qM7vptHWpu22H9dBuDj3dmChm9Abj
MD5:	47351B1653AAACFB6081EA0E6A33A059
SHA1:	24B7EEAF5C06E41A2EF15A21586BCC3D198282C5
SHA-256:	874EAA1A8A2B34A082638EF40F7A56B163C8B2425CD31D24E49A0166EBDBE687
SHA-512:	8ED3286A5F1DD5ED654482B89E3EB997DA488BCFF3BF6137B549262AAED5370B6C1A99ECCA3D5D7F2FEC143B042E647D1FCC4BB0EFF8E703F24FA56A2842E476
Malicious:	false
Reputation:	low
URL:	https://www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17300000,17301437,17301439,17301442,17301511,17301516,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":0,"afs_gpp_api":0}}};var n;function ba(a){var b=0;return function(){re

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.202819531114783
Encrypted:	false
SSDEEP:	3:YWQRAW64:YWQmq
MD5:	7363E85FE9EDEE6F053A4B319588C086
SHA1:	A15E2127145548437173FC17F3E980E3F3DEE2D0
SHA-256:	C955E57777EC0D73639DCA6748560D00AA5EB8E12F13EBB2ED9656ADD3908F97
SHA-512:	A2FD24056E3EC2F1628F89EB2F1B36A9FC2437AE58D34190630FE065DF2BBEDAF9BD8AEE5F8949A002070052CA68CC6C0167214DD55DF289783CFF682B808D85
Malicious:	false
Reputation:	low
URL:	http://notexistsaa.calperlongtermcare.com/ls.php?t=66f95354&token=002ca744dbc126b8105f96b660f7b6a2674c7bd7
Preview:	{"success":true}

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (398), with no line terminators
Category:	dropped
Size (bytes):	398
Entropy (8bit):	5.473258414028602
Encrypted:	false
SSDEEP:	12:xW7KfabhLd8Ez4gvM7HgjoblCVdz4gvM7n:shzz41zBlC3z417n
MD5:	E3F6A96273BD5375D535721F0A022016
SHA1:	22A32C0DF4BF188580E7C546A45F9A310D77457D
SHA-256:	CD8BFEB8B14B549AD8FB8A5BB885A760EECB96FEB97967896CF5EE04861F3CF6
SHA-512:	2BA2D19C30EF4F930206E8F4E201EE2C7A92A1AB166B865CEEB6C9B7DF6B9B5E54699ACA64522971B61035BAAC8187B0AB0890DAE720AA4F0200F0FA67A39ACF
Malicious:	false
Reputation:	low
Preview:	__sasCookie({"_cookies_":[{"_value_":"ID=38d1c4a19a488209:T=1727615780:RT=1727615780:S=ALNI_MbGjwKVVWc1awU4UDYi8yK07L85nQ","_expires_":1761311780,"_path_":"/","_domain_":"calperlongtermcare.com","_version_":1},{"_value_":"UID=00000efe9d99c724:T=1727615780:RT=1727615780:S=ALNI_MYCmbH4hITsiq5DbDUkfKKCyXIG5Q","_expires_":1761311780,"_path_":"/","_domain_":"calperlongtermcare.com","_version_":2}]});

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1879)
Category:	dropped
Size (bytes):	153198
Entropy (8bit):	5.54355971169404
Encrypted:	false
SSDEEP:	1536:8ni6+zNKofjr9PyfpK7fDH+7pSU6GZvu85pistHWvR3+2xwHzgmcfpUWgQABuucP:wqM7vptHWpu22H9dBuDj3dmChm9Abj
MD5:	B22C1AC60EAD0F027FBE0661AA5AED8A
SHA1:	6F078850BF476EE27DC182C5D7203586DE7B403D
SHA-256:	BD4D16F5DCFC31BEEDDCBB565F052072034461C145DA3DF205B834422709A64D
SHA-512:	DE4B373622BFCF826278EEF166AF9E4867E2333E2396FBE969FD7C4F50950682BDD7A7BFD766743F6565F3562B7F8BC45D6DE46C98A2BB49C724C47E4ED46949
Malicious:	false
Reputation:	low
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17301431,17301433,17301436,17301511,17301516,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":0,"afs_gpp_api":0}}};var n;function ba(a){var b=0;return function(){return b<a.

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://notexistsaa.calperlongtermcare.com/track.php?domain=calperlongtermcare.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTc5NS4yNjM3OmRkNDlhZjNmMDUyYjU0NmNhNzY4NDUxMWMzNDdkNTQ4ZWFmNzFhNzkyMmNjYjNmNGM3MDUyY2YxNDBlNDRhZGU6NjZmOTUzMzM0MDYzNg%3D%3D
Preview:	....................

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1879)
Category:	dropped
Size (bytes):	153223
Entropy (8bit):	5.5437637967096665
Encrypted:	false
SSDEEP:	1536:Cni6+zNKofjr9PyfpK7fDH+7pSU6GZvu85pistHWvR3+2xwHzgmcfpUWgQABuucP:OqM7vptHWpu22H9dBuDj3dmChm9Abj
MD5:	C875D08DB819C6BD95956ED168ABAE89
SHA1:	C5784C32F97B5A264C33D2C72127DA98C9D7C41F
SHA-256:	0667AA014554DEF8BAA63E171F87E26A7A567DA7F92FA6CB8369D32446958B35
SHA-512:	E9391F0090891CA7FC87AB3F319656E37B7AEFA7CCE4E725328365FE5865CE2DE6312416860B778FB83D07ACBCF2BCE007A9EB003F9AC7F5191FE60CF0951233
Malicious:	false
Reputation:	low
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17300002,17301437,17301439,17301442,17301511,17301515,17301516,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":0,"afs_gpp_api":0}}};var n;function ba(a){var b=0;retu

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1879)
Category:	downloaded
Size (bytes):	153207
Entropy (8bit):	5.543693145362615
Encrypted:	false
SSDEEP:	1536:0ni6+zNKofjr9PyfpK7fDH+7pSU6GZvu85pistHWvR3+2xwHzgmcfpUWgQABuucP:4qM7vptHWpu22H9dBuDj3dmChm9Abj
MD5:	2609A64DE5BF4C9822B604B3B4166059
SHA1:	17A8C4743EB499BC76571945CDAEF29D1A32A7B0
SHA-256:	FC16D108E957833C3DE8065818A6DC11EEFAC53A0D726A8ADF6CE5D13F7738FD
SHA-512:	B28DCBFC41E231FD4E108E853589EA7B0B97241DBE01A9AAF79D97C436F545F1CAFEFDF8192C55E6ECA76D07E19171F232D3556F8AB9F314F0D3008840EB0638
Malicious:	false
Reputation:	low
URL:	https://www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17300002,17301437,17301439,17301442,17301511,17301516,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":0,"afs_gpp_api":0}}};var n;function ba(a){var b=0;return function(){re

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 14555
Category:	downloaded
Size (bytes):	5343
Entropy (8bit):	7.962515562504871
Encrypted:	false
SSDEEP:	96:ipMAsUN6vgjAZutEcUU6COgrq0dXZ5TkIEfpguGGqTxv95OOuqtupGbBlhB8tb:8/9N58ZutDSgrq0dvTkSzGLOuqIMbwtb
MD5:	BCAEC69832266B7DBC1558D5F14692DF
SHA1:	2727FB22AA1A62841A0B7E431F4EB0A934918EE6
SHA-256:	D4077BD6DAD8BA274EE761E638E11B2D8D4CCA5080C7B70100FAF711B72A491B
SHA-512:	91B26CD301A3052B419ADC2FF369238BB310FC8AE4A703DAE42BCD7DA7DA68442155DE50C7CFB0AB872E674EB427526D1E03B322E9C16E175117DB4D9204D68F
Malicious:	false
Reputation:	low
URL:	http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Mental+Health+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj2Fwx1CP69y51eGq-AiAZrdjjEEEm-kgI4GG27mh0rqrtgT08SvO_YxhRixDnAmYj1ePjmTSEcyDkXkXf2_m-yoK-uk8je2jQwTOwoAJueqS2Nl_BXbBpVJ72-oiVSQZKMuVZ8IvWr4&pcsa=false&nb=0&nm=1
Preview:	...........[yw.....S(.y....m...........O!. ..-.....>.[Z...%}:.g..Hu.n.u.*.}._.......72.7..K...L.6..h.O......v....5k.G.....im..v~P..}R?>j=.X.S'[..^....vvf....3n.....G...6.\.............f.z..>..ii.y.\.O.>.J.....V.V.'k2.t.....c.<.Y.nt.;..h.=.9..........P...K...O..~.........kL5..l>..Z.......ldZ...{...L.SeZPl......ff..d2..&.. .q..oH....8o..O.g5qh[...tk>..I....g^.0U%....{....L...F\M<.\|:../6\|j.^_.....xII.ex.3..L..R..w.k...t..T.p{.g.}t.s........h.h/.C.r.\onri.u...Ws.X..\...z..J.l...a.'.^.&...3..P...8..y.M..'z.....{...G...4nF.QzFW.,;..1g...s.n.C,.".........=...n.c..+..iX<-.....#2......D..ED...D.....!Q8f.nX...l.6m.........J.B.Ro........g.ig.g<s...'.s.v0.mU -..Lh....D.u.`.9=.d...9....`m...s.f...s%t.J.g..76`3.f....a }...BFC..^...[......V...2K.h.(.X.M<.M.).../....v.nL..O.../.!..A........C.....R..=...<..[.o.lN+lW...T>.e#....r..w......d...V..N.b.k..J..#.G.....!.......D.k..J..un..}R....&..r.....gRJ+s..y.....t.a.......T..v.6...9C..~..i#!s.E

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	200
Entropy (8bit):	5.025855206845441
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slhohC/vmI4SmK0xhFELE47zF:t6qnoU/vmRI0xQTF
MD5:	11B3089D616633CA6B73B57AA877EEB4
SHA1:	07632F63E06B30D9B63C97177D3A8122629BDA9B
SHA-256:	809FB4619D2A2F1A85DBDA8CC69A7F1659215212D708A098D62150EEE57070C1
SHA-512:	079B0E35B479DFDBE64A987661000F4A034B10688E26F2A5FE6AAA807E81CCC5593D40609B731AB3340E687D83DD08DE4B8B1E01CDAC9D4523A9F6BB3ACFCBA0
Malicious:	false
Reputation:	low
URL:	https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://notexistsaa.calperlongtermcare.com/track.php?domain=calperlongtermcare.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTgwOS41MTQyOjk4ODg5ZDBkOTNhZmViZDZjZmJlMDcyMzEwZmU1NTA3NWRiMmMxYzExOGZkODQ5OTAxMWM4Yjg0OTlmZGZiNTU6NjZmOTUzNDE3ZDhhYg%3D%3D
Preview:	....................

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1879)
Category:	downloaded
Size (bytes):	153223
Entropy (8bit):	5.543771316454415
Encrypted:	false
SSDEEP:	1536:9ni6+zNKofjr9PyfpK7fDH+7pSU6GZvu85pistHWvR3+2xwHzgmcfpUWgQABuucP:VqM7vptHWpu22H9dBuDj3dmChm9Abj
MD5:	D6632825FE93723865BD8A07ED872078
SHA1:	AC5FC4E43ECC216F2C9FD861D597D95F95A22C28
SHA-256:	101BD14079016AC55EE13E603FD058A703656AAE57E9160B1CFB4D02650CDF0E
SHA-512:	28BB0CFC588BD33B7DD02989EC902B4FD4EF5B7024D4D2FE2DDCBAA3D15074FD80E8AA0371BBAAE565DF20EC2BA86ED8EF1D8819241B85D1DF63C5CEFDE373EF
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/adsense/domains/caf.js?pac=2
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17300003,17301437,17301439,17301442,17301511,17301515,17301516,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":0,"afs_gpp_api":0}}};var n;function ba(a){var b=0;retu

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://notexistsaa.calperlongtermcare.com/track.php?domain=calperlongtermcare.com&toggle=browserjs&uid=MTcyNzYxNTgwNS4wODA5OjkzM2NiZGEwODhjNzQyZTkxMzk3Y2Q5N2QzODliZDM5NDFjNzhmMTU5ZjkzZDAwNTQwMGNkMDNiYzQ1NGE5MGQ6NjZmOTUzM2QxM2MxOA%3D%3D
Preview:	....................

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19684, version 1.0
Category:	downloaded
Size (bytes):	19684
Entropy (8bit):	7.988639555000283
Encrypted:	false
SSDEEP:	384:ONwiXfXdhL8GpPfyGjRzz40RK4dqy5n393AFCdIXSXxk+ukfD+EPzDF7z9XkZfYz:+f3AGpPrRzz4h4dqy393AFuXx+EbD1xJ
MD5:	29F5BA8FC1F2AC21FA0ED86EC404BCDE
SHA1:	ADDA13FABCBFE7C004AA99A5642012A927B20F3F
SHA-256:	251342FF1E3A31CD968101F7492ECD6B59E0058190A38B77E15A64928FC44593
SHA-512:	5149122690C7BE981EBA0018B751DD9615EBF24839912BA377ABE252E026AC441F14DC68BCF5A80E3733644107F971F107DAC0E0D322FD8ECA0222E74E9AB34E
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/mate/v17/m8JdjftRd7WZ6zq2Ww.woff2
Preview:	wOF2......L...........L..............................8....`..d.l........X.....l..6.$..T. ..R..w..=....6.'.....[.Q..Y...6.`..S.......X.V.C..Pi.....]..DJ.....\..%N.P..]..S..[^fCh.x..........X,.......rv..ms............cq.h.y.O...J2..IE.[.{...3.m.kr....O{.>t.{O..M.=&.p.P~.?$.W.8.Q.J/.<E..RtD.O..&..=<?......f.1j.m..l#V.......>Q.;..N.>O...<O......kx.g?.}3....P.x.....5...!B(..)......$.H.........J..{...Z-...B.%..........!.......-........;.....f...7..PX...>.tM."k".N.+<._..7..2....#....hW?.......j.....r.B.Y./..2...OD.S.~.@`.no......\.6...l.0...G!.............6@.(.!....=...Z]5.c.i..\|+....t~m.......)...N...l.>t.3y5gV!...T...AR..`<...Q..A.O.$<.>......!f!9`.n....w...n...nSZl7q9._..o".d..dI?u....ZV.$..>Vf...T.!............,0....Q.2._+...C..Z}Y#...c...k...R...c.* ...W..._..... D.\q.u7.r...<...0..A0.M.A@..6-...>..q)SaO.N..-.N*.......c..P..;........U..mM.......d......2.`-..fD5"...D.hD.....i..$.'......b7.9....a .z6.....\..Y[[...!....-..s ...6.>.......-..q

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 14547
Category:	downloaded
Size (bytes):	5331
Entropy (8bit):	7.965841842266965
Encrypted:	false
SSDEEP:	96:QwQ4t9qrSLTAEgx8Gm+eiOhBuSIjq80/gWO9IvzqLuCeJcLqqzXRK49:Qw7tQrSLUEg6Gm+nMBuSIm82sAqyPJc5
MD5:	38AE389CC88E42C76443E2EE963DCDBC
SHA1:	F8877587E625C92CA1351F0E69F06B22645CECF9
SHA-256:	27BE065F1DFEDE644B54F2EEAC9D206CE505DFEED3AB8B1D90809616348C870E
SHA-512:	CBDFEBC93AE937BEE368F8650D3675A9CB71D8256BCAA056DA0CE6713E10C3E007DAEDC12EFF25DEE51FC5F17E4CF129A8A313C96123407A1C102D51F5594E83
Malicious:	false
Reputation:	low
URL:	http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Long-term+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpjxYC9i9y0TgoYIuZ8V_UHRMakU9iohKuhUuqxr8ymSHJsd1j4bjWfISTJnMGI7hFgWr_vhvGP_2LJwczGgGfqI8hF3eyZLCQwcvAFeaUtp6um6oqJ5_8cyL1p-sL7wwR07cSGJTy4bg&pcsa=false
Preview:	...........[{W.....)..u...V.c_.mu.....o.....I..s....+..b..3w.].n%.].k.....]...x}..e.n....U_.z.t../.T.t6k.<^..t.OZ.qsrtt.h~.5f...G........?s......Egoo.h_[..IkQ~.W.}4..q{.u{t.h_h.C.A.....~.^\.u4.Ym8g...*.....Q.o.....U...........e.9.r.....;x..x0......M..z.......q....^.[k././.\|..X.EI..e.........f3yV..w.+.......3U{....".qU?.b..X.W.8...M.'%u..>..lg1.)..oJ..s?G..L....}e....T...V-....>.8...>3t......xV.d.a....YOSM..2....=..N.o....}.7.!.M.k:......5.:..P...$._..Y\7T%.i....U.D..\|.....S...u..^cS.LK..^.N<.6.{...T.Lg..]p@......^N..r..<0.......'\....q.......+.&s...1..x-.W..&......a.......V...Dd.$..O"...'.3\|.....=..6..6..=n..U}@=..h@.u.A............O..&...\s\...5H..!.............Tw`.<.3..+.c...9..].%.-T.1..W..../.H.............l.,d4...5.-...}, dj.U.y.FsHI..2u.;h..xol.........`...<o.l..r..z.~G....!p.zDi.....CbQ......[...P.l_...:....k`.U.j..le.....y.3..\n.;JvV..u.. 0....F.....jCC.-..I.i..._.e.. /.I........R........yVR...I.....s]...L...

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1500 x 600, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	11375
Entropy (8bit):	7.645494653990172
Encrypted:	false
SSDEEP:	192:Wg3JLNIdFb540f7mqTiLHrBjcCTN1MbaJD/RBse6ogkORdLv2Ha/:vD4N54IsHVjdN1tD7lODL/
MD5:	0CB2E5165DC9324EB462199F04E1FFA9
SHA1:	9E0F89847EC8A98D98A6020BC5C4ED32B7A48BF8
SHA-256:	67DFF0AAD873050F12609885F2264417CCDD0D438311000A704C89F0865F7865
SHA-512:	7A285C4A87B9F9093B7BA720D8FE08E0AD7E2EBDE9EF8C8D11B70AFA08245AF8F8A7281C7B3FBE8BAD21C3AFDE4F32634D3BD416822892AA47BA82C12F4B8191
Malicious:	false
Reputation:	low
URL:	https://d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
Preview:	.PNG........IHDR.......X.....Om......tEXtSoftware.Adobe ImageReadyq.e<....PLTE......cdtIK^IK]IK\03IHK_acsceubdtcet..0=@SHK]IL]HK\MPbNQbORc.....0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes..-..0. 5.!6."7.#8."6.$9 %:!&;"'<"';$)>#(<%?$)=&+@%>',A&+?(-B).C(-A).B/C+0D,1E05I15G<@R=ASIM_HL]KO`HL\MQbaeu.....-../.....0../.....0../..1..1..2..3..4. 5.!6.#8.$9.%: &;"':$)<&+>',?(-@).A/B+0C,1D/A-2E.3F/4G05H16I/4F05G38K6;N49K;@S;@R<ASGL^bfuaetbft.....0.!5."6.#7.$8.%9 &:!';"(<!':#)=#)<$=&,@&,?+1E)/B06IGL]GL\HM]bfs..-.....0..1. 4.!5."6.#7.$8 '< ';*0B.4F06H06G..-..0.!5 (< (;...................................................................................................................................................................................................................................................t....tRNS..............................................................................................................................................

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1500 x 600, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	11375
Entropy (8bit):	7.645494653990172
Encrypted:	false
SSDEEP:	192:Wg3JLNIdFb540f7mqTiLHrBjcCTN1MbaJD/RBse6ogkORdLv2Ha/:vD4N54IsHVjdN1tD7lODL/
MD5:	0CB2E5165DC9324EB462199F04E1FFA9
SHA1:	9E0F89847EC8A98D98A6020BC5C4ED32B7A48BF8
SHA-256:	67DFF0AAD873050F12609885F2264417CCDD0D438311000A704C89F0865F7865
SHA-512:	7A285C4A87B9F9093B7BA720D8FE08E0AD7E2EBDE9EF8C8D11B70AFA08245AF8F8A7281C7B3FBE8BAD21C3AFDE4F32634D3BD416822892AA47BA82C12F4B8191
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......X.....Om......tEXtSoftware.Adobe ImageReadyq.e<....PLTE......cdtIK^IK]IK\03IHK_acsceubdtcet..0=@SHK]IL]HK\MPbNQbORc.....0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes..-..0. 5.!6."7.#8."6.$9 %:!&;"'<"';$)>#(<%?$)=&+@%>',A&+?(-B).C(-A).B/C+0D,1E05I15G<@R=ASIM_HL]KO`HL\MQbaeu.....-../.....0../.....0../..1..1..2..3..4. 5.!6.#8.$9.%: &;"':$)<&+>',?(-@).A/B+0C,1D/A-2E.3F/4G05H16I/4F05G38K6;N49K;@S;@R<ASGL^bfuaetbft.....0.!5."6.#7.$8.%9 &:!';"(<!':#)=#)<$=&,@&,?+1E)/B06IGL]GL\HM]bfs..-.....0..1. 4.!5."6.#7.$8 '< ';*0B.4F06H06G..-..0.!5 (< (;...................................................................................................................................................................................................................................................t....tRNS..............................................................................................................................................

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 14549
Category:	downloaded
Size (bytes):	5294
Entropy (8bit):	7.963969574093574
Encrypted:	false
SSDEEP:	96:hqfjIWz3hHQajBdTybdnqDmLnHABYI7djR6bEmzO9Y0lyj9bDlG:haIQ3hNnTdDSAGI7djIbEmFtI
MD5:	A5443FE03B83A50F1A5BB0670AA464B3
SHA1:	1821920E2E7A0644FE07E6B606F8D8F6FD8E51EB
SHA-256:	AD366B29D956E64E232D63A12565043EF0E22ADFEDC23B12A790891FAA9C7E73
SHA-512:	036ECA92ED4EC92F1648F5170C6C2B8C5F8E60E4542EDE8B39C424A1FCC8FD2811B0B2C98E85578FAA6F5519BD377A049F0450A0648E0CA94A13C8999E57D0B8
Malicious:	false
Reputation:	low
URL:	http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Disability+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj8QvgQXu7ghwdodehT82JgRTn3vllMykC0FwxvyfTQJr6A0SuG7m0lQBPeY8be8shRgjOY8aIA_Dc4-x7TvuvAzvS8PHi2SQZ6LVKYyrfVusdKdQ6CTxo02n5nKSQlxTjJhvzl1MnjA&pcsa=false
Preview:	...........[.[.J..y.+..g.n!....~Q.j........."!.&A...........}nw.YZ%.3s...>.....Q.su....:../fp.g...}8.s-.<.N........Qo......O...S...~...qr..h.O.\|.ws.s\|...u....9/?.w?t.S{....~....u~..?\........n.7v....Be..>=..5.[{d_].4Kn...5.......'w.[........G.s..y{......&.....O.O.OO..r...m.l......{....b..e{Zj...j.7.N.iIu.~.......?R..v_K.;E...8.`....8....O.G-u....l{>.)..oZ..3?G.jL.p...6.{..T....#...M1.;...>5.......EV.d.i.....sKh.....i.....f;1n..-q.nc.Z....;.+T......\.\...-.F.0...tW.E.....<..y....\..]gb.U6q.........fa..8....L.......s.@....h.......l'..>..9..6.&.Xe..x...0....E.j.....8`...J!.m<ol$.,.ED.~%.......=....pwH...a.v?..M.@...e..#.........G...k ..Q.k....&...Bw\...UH.- .............q.o..<.3..+.c...:.!\.%.-T.1..W....o...,...bD,...E"[,K..D6\|Mj.o.^....Ze.r.<}.9...b......S...~.. !.r.xU.L..9O.!.?.C........!...W.(..w.c.vH,.B....kr`....iAG=n{YO.&.LX.~r..c+#u.v9.3.D...Q..dg..P....3.+.`$..Y.:0.C.r..F..).m.L....3.......`.Bj.:..P._...J..S;.^v..0d......

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://notexistsaa.calperlongtermcare.com/track.php?domain=calperlongtermcare.com&toggle=browserjs&uid=MTcyNzYxNTgwOS41MTQyOjk4ODg5ZDBkOTNhZmViZDZjZmJlMDcyMzEwZmU1NTA3NWRiMmMxYzExOGZkODQ5OTAxMWM4Yjg0OTlmZGZiNTU6NjZmOTUzNDE3ZDhhYg%3D%3D
Preview:	....................

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19600, version 1.0
Category:	downloaded
Size (bytes):	19600
Entropy (8bit):	7.987896864926305
Encrypted:	false
SSDEEP:	384:DO9QOKK1ov0/vS0RMIy5z+s3O4mszugwVSy8ypC+eFfPYDE:q9QRN0/vTRv1t5s9wMyp2dPYDE
MD5:	A97AF381DD8B174164F0BD1D5BF5B123
SHA1:	C8B72AEE9FC4FA425761C2DA454F95D45B42F506
SHA-256:	4A9FA9C4ECB0EAEC0AF1E4949930232604B331CD076CA7EFBA2A4E2EFDBAA367
SHA-512:	A0833DBE283F89503A173F47C4C0C9F61FBE2553E62FD2151786F63AEADDA7FD1DDAF5BBF5B77B74D269D43B140887CA683F11D0DDAE8DC980416D55F09D8261
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/matesc/v22/-nF8OGQ1-uoVr2wK-iLT9g.woff2
Preview:	wOF2......L...........L,.............................<..,.`..l...........t........6.$..\|. ..f..i..K.w.5l.....8.K..E.q...z$.`..b......%p"C.4....$%.........D.2.N.T..A.R6+.&.w..#..q.l.t....v5+O..d..w9.>.`.P(........ptJP...>W.......'........h...Q....@.ZL.PQ..b...U.p....s}..v..X.....nf..}....'..(4.<O...../0t/......P...v.F...E.+.....X{.=..(.Rl...c. w...o...j!-..t:.dP....W..]_..o.fZ.W.:... g2.2i7..9s~v.w.!.L....MVYEB.Qg..KXI[e...O0....`..$.re.q....<o.-....K....t. 8T.4e.G.....O....t...$-.~Q..2..fm...p.K8..y.<.H.N.../]v.}...L.:E.6.N..\G.{f.&.rR.Wc.... vk/...v...A......$..m'.{...J..m.I..L..'g....oN........(yC\|...P]y.^...g..?..!...".\|...q.h...'..+.M!..@.z%{C.}9....W.).u{.e5..z. L.{..P.>.M...#V...LF..:....$.V)M.g..4.~...... ..t.O..........{.^..@......h.......8...g..d...`...`.%x.O..........r...wwz....06....z..v..L.....4....+....(d...."....d.hA...x..L+Q.8Rb..A8 .F3..1.d...9=..vW....Nv..i..A$.{...,..,.<..4..27..wFF...4}.JQ.%,~.\|@..N ..............{...^..v

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3856
Entropy (8bit):	5.408297976823041
Encrypted:	false
SSDEEP:	96:6OEaM7Vc+uuOEaMzNKOEaF9Vc+uGOEaiN1OEaNPlOEaNVFZKOEaNHOEaNk3yOEaU:dMDEMn3GXNP6NfNANk3FNNN8YNYn
MD5:	FD90B2E322504D22FF0E849CCC595CCA
SHA1:	DD1F1D5AF0D1E50FC41F1297EFEA6B5CD01124C9
SHA-256:	3CE2554E586B71B83AEFAA869E6675614E2C910B111A5194660230E9C7303A78
SHA-512:	EB03995040AF10B83E28A662F702D2BEFADCE38948FE9460DF1FB06B7F0A2B50BFA9606759BD8B7650D0B385E3653F18DAA3626E0E6EEBB4B71B79AB268A905A
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Mate%20SC%7CMate%7CRoboto%7CRoboto%20Light&display=swap
Preview:	/* latin-ext /.@font-face {. font-family: 'Mate';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/mate/v17/m8JdjftRd7WZ6zS2W7XS.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Mate';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/mate/v17/m8JdjftRd7WZ6zq2Ww.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Mate SC';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/matesc/v22/-nF8OGQ1-uoVr2wK-izT9qOk.woff2) format('woff2');. unicode-range: U+01

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.202819531114783
Encrypted:	false
SSDEEP:	3:YWQRAW64:YWQmq
MD5:	7363E85FE9EDEE6F053A4B319588C086
SHA1:	A15E2127145548437173FC17F3E980E3F3DEE2D0
SHA-256:	C955E57777EC0D73639DCA6748560D00AA5EB8E12F13EBB2ED9656ADD3908F97
SHA-512:	A2FD24056E3EC2F1628F89EB2F1B36A9FC2437AE58D34190630FE065DF2BBEDAF9BD8AEE5F8949A002070052CA68CC6C0167214DD55DF289783CFF682B808D85
Malicious:	false
Reputation:	low
URL:	http://notexistsaa.calperlongtermcare.com/ls.php?t=66f9534e&token=045d16523d9232997a06f47047c84c5614864402
Preview:	{"success":true}

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.202819531114783
Encrypted:	false
SSDEEP:	3:YWQRAW64:YWQmq
MD5:	7363E85FE9EDEE6F053A4B319588C086
SHA1:	A15E2127145548437173FC17F3E980E3F3DEE2D0
SHA-256:	C955E57777EC0D73639DCA6748560D00AA5EB8E12F13EBB2ED9656ADD3908F97
SHA-512:	A2FD24056E3EC2F1628F89EB2F1B36A9FC2437AE58D34190630FE065DF2BBEDAF9BD8AEE5F8949A002070052CA68CC6C0167214DD55DF289783CFF682B808D85
Malicious:	false
Reputation:	low
URL:	http://notexistsaa.calperlongtermcare.com/ls.php?t=66f9535b&token=b12389aec88761c69130efd9163b459583a6c7b3
Preview:	{"success":true}

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.202819531114783
Encrypted:	false
SSDEEP:	3:YWQRAW64:YWQmq
MD5:	7363E85FE9EDEE6F053A4B319588C086
SHA1:	A15E2127145548437173FC17F3E980E3F3DEE2D0
SHA-256:	C955E57777EC0D73639DCA6748560D00AA5EB8E12F13EBB2ED9656ADD3908F97
SHA-512:	A2FD24056E3EC2F1628F89EB2F1B36A9FC2437AE58D34190630FE065DF2BBEDAF9BD8AEE5F8949A002070052CA68CC6C0167214DD55DF289783CFF682B808D85
Malicious:	false
Reputation:	low
URL:	http://notexistsaa.calperlongtermcare.com/ls.php?t=66f95333&token=f06df9e8ddd462c8afb5845161eee5e6a6511e54
Preview:	{"success":true}

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://notexistsaa.calperlongtermcare.com/track.php?domain=calperlongtermcare.com&toggle=browserjs&uid=MTcyNzYxNTgyOC4zNjY6YTVhM2Y5OWYyNmIzZTBhOWQxZWYyZTEwMjcyNWJjYzJjZTNkMWFiN2QwNGNlNTViOGRkMzk3YmIwZjgwM2MyYTo2NmY5NTM1NDU5NTkw
Preview:	....................

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1500 x 600, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	11375
Entropy (8bit):	7.645494653990172
Encrypted:	false
SSDEEP:	192:Wg3JLNIdFb540f7mqTiLHrBjcCTN1MbaJD/RBse6ogkORdLv2Ha/:vD4N54IsHVjdN1tD7lODL/
MD5:	0CB2E5165DC9324EB462199F04E1FFA9
SHA1:	9E0F89847EC8A98D98A6020BC5C4ED32B7A48BF8
SHA-256:	67DFF0AAD873050F12609885F2264417CCDD0D438311000A704C89F0865F7865
SHA-512:	7A285C4A87B9F9093B7BA720D8FE08E0AD7E2EBDE9EF8C8D11B70AFA08245AF8F8A7281C7B3FBE8BAD21C3AFDE4F32634D3BD416822892AA47BA82C12F4B8191
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......X.....Om......tEXtSoftware.Adobe ImageReadyq.e<....PLTE......cdtIK^IK]IK\03IHK_acsceubdtcet..0=@SHK]IL]HK\MPbNQbORc.....0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes..-..0. 5.!6."7.#8."6.$9 %:!&;"'<"';$)>#(<%?$)=&+@%>',A&+?(-B).C(-A).B/C+0D,1E05I15G<@R=ASIM_HL]KO`HL\MQbaeu.....-../.....0../.....0../..1..1..2..3..4. 5.!6.#8.$9.%: &;"':$)<&+>',?(-@).A/B+0C,1D/A-2E.3F/4G05H16I/4F05G38K6;N49K;@S;@R<ASGL^bfuaetbft.....0.!5."6.#7.$8.%9 &:!';"(<!':#)=#)<$=&,@&,?+1E)/B06IGL]GL\HM]bfs..-.....0..1. 4.!5."6.#7.$8 '< ';*0B.4F06H06G..-..0.!5 (< (;...................................................................................................................................................................................................................................................t....tRNS..............................................................................................................................................

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://notexistsaa.calperlongtermcare.com/track.php?domain=calperlongtermcare.com&toggle=browserjs&uid=MTcyNzYxNTc5NS4yNjM3OmRkNDlhZjNmMDUyYjU0NmNhNzY4NDUxMWMzNDdkNTQ4ZWFmNzFhNzkyMmNjYjNmNGM3MDUyY2YxNDBlNDRhZGU6NjZmOTUzMzM0MDYzNg%3D%3D
Preview:	....................

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://notexistsaa.calperlongtermcare.com/track.php?domain=calperlongtermcare.com&toggle=browserjs&uid=MTcyNzYxNTgyMi42ODg3OmQ4OTczZDQ3MDMwYjk0NzQ3ODhiOTVmZTk5NjdkZWM1MWI2ZmM3Yzg4NTgyMzEwZjE1NWE4MWQ5YjZiYWNiY2I6NjZmOTUzNGVhODIyNg%3D%3D
Preview:	....................

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://notexistsaa.calperlongtermcare.com/track.php?domain=calperlongtermcare.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTgzNS40MDc6NzY2N2VhYmE2OGEzNWE1M2Q3N2M3OWI1MDE1OTc0ODNkNmYxMjc2M2M0YTc1N2Q4NWI3ZjkyYjk3NmYyODMyNDo2NmY5NTM1YjYzNWQ2
Preview:	....................

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1879)
Category:	dropped
Size (bytes):	153214
Entropy (8bit):	5.5436425399747336
Encrypted:	false
SSDEEP:	1536:5ni6+zNKofjr9PyfpK7fDH+7pSU6GZvu85pistHWvR3+2xwHzgmcfpUWgQABuucP:hqM7vptHWpu22H9dBuDj3dmChm9Abj
MD5:	F5B7C2B515720924FA63037CEF10BA02
SHA1:	205A8C037532CC669803599827543FD131277138
SHA-256:	EFAEADE5A7436B576EDA114ABCB86CED39F97724F8EEBB505E34A950E72D8A89
SHA-512:	8A3B966B1F2A415CA1370A8A04D04AC916D7DCAD425D155DCECBD37775240B754DF8C60A5AFA13CC7E9D59C9DC2A836B744414ED48383B80BB2364B500AFE480
Malicious:	false
Reputation:	low
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17301437,17301439,17301442,17301511,17301515,17301516,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":0,"afs_gpp_api":0}}};var n;function ba(a){var b=0;return functi

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://notexistsaa.calperlongtermcare.com/track.php?domain=calperlongtermcare.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTgyMi42ODg3OmQ4OTczZDQ3MDMwYjk0NzQ3ODhiOTVmZTk5NjdkZWM1MWI2ZmM3Yzg4NTgyMzEwZjE1NWE4MWQ5YjZiYWNiY2I6NjZmOTUzNGVhODIyNg%3D%3D
Preview:	....................

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (398), with no line terminators
Category:	downloaded
Size (bytes):	398
Entropy (8bit):	5.412041622420663
Encrypted:	false
SSDEEP:	6:xWzPvghMSQxVGozRRU4V20uPKZzXyvM7M+dm53RhxVGhyz+afCGH5X20uPKZzXys:xWrghT3H4zYvM7HpYaU151YvM7n
MD5:	60EBB19997623D26988038FC9712CA94
SHA1:	62AA3296E2BDFFF7D28E41D11717FD67AAC8FD7C
SHA-256:	D50CF25B347AC5D1ACB50D2DF0158A734F253F773E0B4636EE2B4EAB54794673
SHA-512:	B7E9052AB64AF385ACE0256A3FE5D378F566311D8B79DB8B78CDF0F7354FBE348E15A676DDE2EDC2EA696824F889D32DBC1BB44BD3CABA5EEC8D5AF475283B0D
Malicious:	false
Reputation:	low
URL:	https://partner.googleadservices.com/gampad/cookie.js?domain=notexistsaa.calperlongtermcare.com&client=dp-teaminternet12_3ph&product=SAS&callback=__sasCookie&cookie_types=v1%2Cv2
Preview:	__sasCookie({"_cookies_":[{"_value_":"ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw","_expires_":1761311778,"_path_":"/","_domain_":"calperlongtermcare.com","_version_":1},{"_value_":"UID=00000efe9cbe848f:T=1727615778:RT=1727615778:S=ALNI_MY5wtXSfoKx_Q8z5m_Lo6zyVczKRg","_expires_":1761311778,"_path_":"/","_domain_":"calperlongtermcare.com","_version_":2}]});

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (18050)
Category:	downloaded
Size (bytes):	35386
Entropy (8bit):	5.345116005408519
Encrypted:	false
SSDEEP:	384:2ni0XP/zfuiS4u/uHeDCHG1cGzATyMaGJBbh0psaNSDOv:2iIP/z9oggKXBupsaNBv
MD5:	9903ECC68F1A18A604502036E7C321AB
SHA1:	72AB7B05DED2FA6BED4F83822A3C1210BF7A1371
SHA-256:	7257DF28C2787EC3804DF2B82720571542E2E565EC49150DBCB891ADFEB3D1A2
SHA-512:	05FA77869AE37D5669D5E704682FD3C040190E08AB0B8B0D55C47E6982F27D178C307976EF45E5AB858C84340ED2C803CA0C6D4E1E86BCBB9BD9B2CCCB659B09
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2C000003%2C000517%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet12_3ph&r=m&sct=ID%3D911125d09fe5fc33%3AT%3D1727615778%3ART%3D1727615778%3AS%3DALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw&sc_status=6&hl=en&rpbu=http%3A%2F%2Fnotexistsaa.calperlongtermcare.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1ODIyLjcwNDh8ZTk2YWU4MWVhZDQ1MGVkOTgwMDFhNGRjZjFhMDE5OTg3ZDYzZmRlOXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&terms=Long-term%20care%2Cmental%20health%20care%2Cdisability%20care%2Celderly%20care%2Cin%20home%20care&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2556349329685648&q=Mental%20Health%20Care&afdt=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj2Fwx1CP69y51eGq-AiAZrdjjEEEm-kgI4GG27mh0rqrtgT08SvO_YxhRixDnAmYj1ePjmTSEcyDkXkXf2_m-yoK-uk8je2jQwTOwoAJueqS2Nl_BXbBpVJ72-oiVSQZKMuVZ8IvWr4&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300000%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266%2C72717108&format=n3&ad=n3&nocache=6351727615822213&num=0&output=afd_ads&domain_name=notexistsaa.calperlongtermcare.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727615822215&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=754&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=http%3A%2F%2Fnotexistsaa.calperlongtermcare.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8%26query%3DMental%2BHealth%2BCare%26afdToken%3DChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj2Fwx1CP69y51eGq-AiAZrdjjEEEm-kgI4GG27mh0rqrtgT08SvO_YxhRixDnAmYj1ePjmTSEcyDkXkXf2_m-yoK-uk8je2jQwTOwoAJueqS2Nl_BXbBpVJ72-oiVSQZKMuVZ8IvWr4%26pcsa%3Dfalse%26nb%3D0%26nm%3D1
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	391
Entropy (8bit):	4.7474201749507134
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slzTPl2O4UYaeLIT4W+KS4S1UpMTQpi6jUs8sh6B+BSmK0C:t6qFPUPkHSt1UiT6i6jUs8b0I0C
MD5:	8959DDCD9712196961D93F58064ED655
SHA1:	62AB1E38E7E9FBF58A04381B76C2D96A9C829F24
SHA-256:	17C7A89BF169C2EE400E31B042CEA68513F06B9CD7D1E8990DBEC800F0D771C7
SHA-512:	5E9EFFA313C30B351345DB963238B4AFD0728CA302FD79A853C80C89F042266D44CC1D29492520FB0FA80B47135E54E6963DFC21972F6B236B84C1DA2FAD809D
Malicious:	false
Reputation:	low
URL:	https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L20.49 19l-4.99-5zm-6 0C7.01 14 5 11.99 5 9.5S7.01 5 9.5 5 14 7.01 14 9.5 11.99 14 9.5 14z"/><path d="M0 0h24v24H0z" fill="none"/></svg>.

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 14535
Category:	downloaded
Size (bytes):	5276
Entropy (8bit):	7.9610363222295675
Encrypted:	false
SSDEEP:	96:TDJ/83HKvcfUyi9ku7uxPtX3wexvRy6BXjMGPaiX2gH7h/hARbMdkUavacWx:2HKo+GWeDTBA8ai7HlhARbMSUX
MD5:	F12B8E40587F2B6E8D8040FD93CC54E6
SHA1:	9F8DD96560FB53FCB515E67C161DE7BA3DF27985
SHA-256:	AC4EA8B7791E4B1C59C4E15BD1EA73F974561E4BC5B8A1E352DC7CB10A412FFF
SHA-512:	AB66781ECC3CCEFDFDF02FA842C6D5D43E78B5A30980203CEF50E3A3AC3C4A1C1055B1EA2FB0E115AE4379220A06A6CDF3C08C6495F2EA0B4B944396111F0DC0
Malicious:	false
Reputation:	low
URL:	http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Long-term+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpjxYC9i9y0TgoYIuZ8V_UHRMakU9iohKuhUuqxr8ymSHJsd1j4bjWfISTJnMGI7hFgWr_vhvGP_2LJwczGgGfqI8hF3eyZLCQwcvAFeaUtp6um6oqJ5_8cyL1p-sL7wwR07cSGJTy4bg&pcsa=false&nb=0&nm=1
Preview:	...........[.[...\|.+...........^.[...b........... .>....&/.....s.....Y3k.Y.3..i\..;.l...C.a...y...1..i....7........h.oN..o.O...S..~....}..).y.......E{...q.......8.\|.Xg.5.3.......qo\|..h........m.hT.....e.rR....7....v.t:.....i.8W....YpvZh~.....Q....xwZ9(6....;u..N.XA......y..~h.?z..A..i.6...e.A0.....L..d..........a.....w2.!..G[...1.t0.....S.Q..N.. .^Lx.....<(...3....@...\|%SH#r.1.2...M\/H..Yf0.L.h.</^r.r....o.6........Y......l~.n......76t..;>,.P...$?X...i.Z.7<..-.>.....Wd.n.......N.........T...c)....T6lwj.<p@vxP..\|...@.....o....y.O..0...^m.ob.U..&s......xU.i..[_T...rx^.im.yk+E......J"..""..z"}+...(..i9...m..m......z......l~.....2p....]7....8y....Y\..iq8d.z..U..7...c..[N...r..bBv..3.6.G.D]...:...).Y`.M..s...w9"..H.b.U.BFc..^...[....".VYELY._4G.( ....ES~.#+.w].$.=..~.......f....<...w4.........i....:....RT..^M..A..=}l..Q_w...=.k&.b?u..c+cu.v1..xU..8.Q..b..CL......I.z.;..,...: ..Q.kCJ~..._..p&ywm.. /.....4,.........N......_.`.H

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1500 x 600, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	11375
Entropy (8bit):	7.645494653990172
Encrypted:	false
SSDEEP:	192:Wg3JLNIdFb540f7mqTiLHrBjcCTN1MbaJD/RBse6ogkORdLv2Ha/:vD4N54IsHVjdN1tD7lODL/
MD5:	0CB2E5165DC9324EB462199F04E1FFA9
SHA1:	9E0F89847EC8A98D98A6020BC5C4ED32B7A48BF8
SHA-256:	67DFF0AAD873050F12609885F2264417CCDD0D438311000A704C89F0865F7865
SHA-512:	7A285C4A87B9F9093B7BA720D8FE08E0AD7E2EBDE9EF8C8D11B70AFA08245AF8F8A7281C7B3FBE8BAD21C3AFDE4F32634D3BD416822892AA47BA82C12F4B8191
Malicious:	false
Reputation:	low
URL:	http://d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
Preview:	.PNG........IHDR.......X.....Om......tEXtSoftware.Adobe ImageReadyq.e<....PLTE......cdtIK^IK]IK\03IHK_acsceubdtcet..0=@SHK]IL]HK\MPbNQbORc.....0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes..-..0. 5.!6."7.#8."6.$9 %:!&;"'<"';$)>#(<%?$)=&+@%>',A&+?(-B).C(-A).B/C+0D,1E05I15G<@R=ASIM_HL]KO`HL\MQbaeu.....-../.....0../.....0../..1..1..2..3..4. 5.!6.#8.$9.%: &;"':$)<&+>',?(-@).A/B+0C,1D/A-2E.3F/4G05H16I/4F05G38K6;N49K;@S;@R<ASGL^bfuaetbft.....0.!5."6.#7.$8.%9 &:!';"(<!':#)=#)<$=&,@&,?+1E)/B06IGL]GL\HM]bfs..-.....0..1. 4.!5."6.#7.$8 '< ';*0B.4F06H06G..-..0.!5 (< (;...................................................................................................................................................................................................................................................t....tRNS..............................................................................................................................................

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18536, version 1.0
Category:	downloaded
Size (bytes):	18536
Entropy (8bit):	7.986571198050597
Encrypted:	false
SSDEEP:	384:IhocXmE6eM871P7td/mcOKA454H2orQEONKrOqxw:f6WeL1P//9D54WCCKc
MD5:	8EFF0B8045FD1959E117F85654AE7770
SHA1:	227FEE13CEB7C410B5C0BB8000258B6643CB6255
SHA-256:	89978E658E840B927DDDB5CB3A835C7D8526ECE79933BD9F3096B301FE1A8571
SHA-512:	2E4FB65CAAB06F02E341E9BA4FB217D682338881DABA3518A0DF8DF724E0496E1AF613DB8E2F65B42B9E82703BA58916B5F5ABB68C807C78A88577030A6C2058
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......Hh..........H..............................Z..\|.`..J.T..<.....H..U..Z...x.6.$..0. ..t. ..I....p.0.VU.......1....AQ...d..x.....R..4.-.c..C$fUc.c..IX..@..~g.xs.....%...O...eJ.w..U.\|.......%..{.......U+..T#.S......`.n.....V.w.4..~P"..zk.%..../........=3...F.........V.FL..;Bc.........A.Uk.U1.b!Y.BH.DL...s.s...F.m.9a..GJ..1..#.`m5..DI..X5#.........B.Akm.....&..0...{.L.....G......-(.......O4.@3....=......f..l...$.....j..NO...e.Y.tJ2J>F.(.c....08..e...~....D2S7s:.G'Gm........!.7.........r.c.`,.....~.).......c>1.......Y.g2^...T-1.7./r./....>...g.ov@u.?.U.+._...'M..,.,g....!g..9."..yBF.#r+.Ps...%.d=....U...5.b.$:`.4R.II.<A....Q)....e...k.....M.8.z....+.....5}..F........F.d._...].~-](.Lf....Y..W....;-z...;. .@x._v../.%UIm....=s...P.C....G...^..Q.!g.!b._.P....at..?.}....t.z...O(..Y6..R.2.X....k.R..K.gw(.F.K?m..R...7....dj..7. .r.U..be.4......8.].w.B..B......Y..:..8.N..U...NEm...\.^q..f}.......{..6.". ...y-.Y...N.+.M E..`......R.$T

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (15676)
Category:	downloaded
Size (bytes):	35174
Entropy (8bit):	5.361493599349062
Encrypted:	false
SSDEEP:	384:2ni0XP/zfuiS4u/uHeDCij+mlgXtkmu53iB1HOnO2:2iIP/z9ogcj+BXtkm5/Z2
MD5:	6588DFDB6AC0F698506982C936921C30
SHA1:	1E8D7EE95473410E809ED32C157993A3F8001C15
SHA-256:	F5CC9C65260C7EB6191EFCA91A8810531F9AB5E1654167A79732FFBBA7E1C035
SHA-512:	A2B04B15A96EF8521A2DB2BF6FCD13C737A901A7709FEFF6EAF16DB3D0A7C741F99A859E97DED3CA2CF4E132C6CABC561A2F94064AA6B9282B59D8FE5F060958
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2C000003%2C000517%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet12_3ph&r=m&sct=ID%3D911125d09fe5fc33%3AT%3D1727615778%3ART%3D1727615778%3AS%3DALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw&sc_status=6&hl=en&rpbu=http%3A%2F%2Fnotexistsaa.calperlongtermcare.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1ODA5LjUzMDN8NGI0OWVhZmExNDM5M2M2OTA2ZjFjMmEwNTI5ZDEwZmM4ZTViNGE3Y3x8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&terms=Long-term%20care%2Cmental%20health%20care%2Cdisability%20care%2Celderly%20care%2Cin%20home%20care&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2556349329685648&q=Disability%20Care&afdt=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj8QvgQXu7ghwdodehT82JgRTn3vllMykC0FwxvyfTQJr6A0SuG7m0lQBPeY8be8shRgjOY8aIA_Dc4-x7TvuvAzvS8PHi2SQZ6LVKYyrfVusdKdQ6CTxo02n5nKSQlxTjJhvzl1MnjA&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300000%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266%2C72717107&format=n3&ad=n3&nocache=3901727615809603&num=0&output=afd_ads&domain_name=notexistsaa.calperlongtermcare.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727615809608&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=754&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=http%3A%2F%2Fnotexistsaa.calperlongtermcare.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8%26query%3DDisability%2BCare%26afdToken%3DChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj8QvgQXu7ghwdodehT82JgRTn3vllMykC0FwxvyfTQJr6A0SuG7m0lQBPeY8be8shRgjOY8aIA_Dc4-x7TvuvAzvS8PHi2SQZ6LVKYyrfVusdKdQ6CTxo02n5nKSQlxTjJhvzl1MnjA%26pcsa%3Dfalse
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://notexistsaa.calperlongtermcare.com/track.php?domain=calperlongtermcare.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTgyOC4zNjY6YTVhM2Y5OWYyNmIzZTBhOWQxZWYyZTEwMjcyNWJjYzJjZTNkMWFiN2QwNGNlNTViOGRkMzk3YmIwZjgwM2MyYTo2NmY5NTM1NDU5NTkw
Preview:	....................

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 14555
Category:	downloaded
Size (bytes):	5346
Entropy (8bit):	7.964262750462878
Encrypted:	false
SSDEEP:	96:kEGoes3En6PfEXfRGhMMZmiKgtgISbhvbZJe47mKAnycVuq5bIFy:VgB6PfuRGxUAGVvbZJeu1An4q5bCy
MD5:	87674F3B35330C7539AB1FB436E0B65C
SHA1:	3FADE31FD3C41FFFECE275FB84B466360ABF0A30
SHA-256:	E84A11A0AA8E33562E4B0DDC1F9CD4602EE3875E88CF6B82DED8C1211FB656E7
SHA-512:	B0D4E506FCE6BF6822440862EA1E9B585CDA3916EDD610162B27C2F5E11E53A69230580D3E1BD0C1489E5509763B6DF35B6EAAC7784747E4CA37B49F9E775060
Malicious:	false
Reputation:	low
URL:	http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Mental+Health+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj2Fwx1CP69y51eGq-AiAZrdjjEEEm-kgI4GG27mh0rqrtgT08SvO_YxhRixDnAmYj1ePjmTSEcyDkXkXf2_m-yoK-uk8je2jQwTOwoAJueqS2Nl_BXbBpVJ72-oiVSQZKMuVZ8IvWr4&pcsa=false
Preview:	...........[.W.....WL9..\|..M.A.E..)Q[.jW_.....'.......\|! ..g....z.J2{f.=....o..G...c..G...>}1..<.......S...y}...p........u..q.~l\.6..1i....>..37_..\.._.wwg....Cg.o?.+..g.P....\6....5.../..}......n^4+.....B.r..7.....a....[._(.5...b.6.'M....Ee....,Un\.0.-V.G.1........[..C.q.=...}..i...=w.......ld.^=...q5..N..:n/W......)fq.WO.;E...8.`....8....L..z..}a...\|,RL...)_...a.1..]O.....VR.$"..D=.h...q...i...!.M]d.K......z:.D..a^.5.a.w.]..N..7}K...X..c.\|.t..UwF....#...sK..0L^Oy.+.U....<.....=..F.M\+..rF.2.\.,.v.g.U....u....~...r....x..U...d]1..g:8'...?....P.....f...(_...[\|^..,..Y)...........$../"..'.3}.....17...e.p.vh....,.~.>...U..y..h.6c...<.wM;.}.Q..8YC.Y...i..dB....V......#..L..gy.9b.\|Lv..3.2.K..]..2:..*.Yb.....r8..F.B.J_$..m)....Im....b.!S.."...7.CJ. ...);....g;.....7.We.D.......>4..}..M./0....j..y..c....E.V....NM..B.]>2-..m/.......On.=le.....y..\1.v......QA`&....$B].V..a.[....(. %.U.._..`&..2WV...ZHm@G.......YIU`j.Y...;....2.6.2

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.202819531114783
Encrypted:	false
SSDEEP:	3:YWQRAW64:YWQmq
MD5:	7363E85FE9EDEE6F053A4B319588C086
SHA1:	A15E2127145548437173FC17F3E980E3F3DEE2D0
SHA-256:	C955E57777EC0D73639DCA6748560D00AA5EB8E12F13EBB2ED9656ADD3908F97
SHA-512:	A2FD24056E3EC2F1628F89EB2F1B36A9FC2437AE58D34190630FE065DF2BBEDAF9BD8AEE5F8949A002070052CA68CC6C0167214DD55DF289783CFF682B808D85
Malicious:	false
Reputation:	low
URL:	http://notexistsaa.calperlongtermcare.com/ls.php?t=66f9533d&token=f43d8d86d39ec9063ea817064e929bdd606d7640
Preview:	{"success":true}

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 15:16:03.839310884 CEST	49675	443	192.168.2.4	173.222.162.32
Sep 29, 2024 15:16:13.440809965 CEST	49675	443	192.168.2.4	173.222.162.32
Sep 29, 2024 15:16:14.322762012 CEST	49735	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:14.322829962 CEST	443	49735	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:14.322932005 CEST	49735	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:14.323522091 CEST	49736	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:14.323563099 CEST	443	49736	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:14.323628902 CEST	49736	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:14.323751926 CEST	49735	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:14.323786974 CEST	443	49735	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:14.324007988 CEST	49736	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:14.324022055 CEST	443	49736	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:15.005388021 CEST	443	49736	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:15.005786896 CEST	49736	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:15.005811930 CEST	443	49736	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:15.007285118 CEST	443	49736	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:15.007360935 CEST	49736	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:15.008625984 CEST	49736	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:15.008708954 CEST	443	49736	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:15.008807898 CEST	49736	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:15.008815050 CEST	443	49736	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:15.009188890 CEST	443	49735	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:15.009481907 CEST	49735	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:15.009560108 CEST	443	49735	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:15.011377096 CEST	443	49735	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:15.011574984 CEST	49735	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:15.012469053 CEST	49735	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:15.012576103 CEST	443	49735	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:15.058624983 CEST	49735	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:15.058650970 CEST	443	49735	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:15.058841944 CEST	49736	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:15.105511904 CEST	49735	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:15.359730005 CEST	443	49736	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:15.360025883 CEST	443	49736	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:15.360296011 CEST	49736	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:15.360306978 CEST	443	49736	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:15.360379934 CEST	443	49736	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:15.360420942 CEST	49736	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:15.360426903 CEST	443	49736	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:15.360555887 CEST	443	49736	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:15.360624075 CEST	49736	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:15.360630035 CEST	443	49736	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:15.404352903 CEST	49736	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:15.458517075 CEST	443	49736	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:15.458534956 CEST	443	49736	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:15.458573103 CEST	443	49736	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:15.458600044 CEST	49736	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:15.458774090 CEST	443	49736	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:15.458818913 CEST	49736	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:15.714997053 CEST	49736	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:15.715018034 CEST	443	49736	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:15.739078999 CEST	49739	443	192.168.2.4	18.66.121.135
Sep 29, 2024 15:16:15.739165068 CEST	443	49739	18.66.121.135	192.168.2.4
Sep 29, 2024 15:16:15.739259958 CEST	49739	443	192.168.2.4	18.66.121.135
Sep 29, 2024 15:16:15.739749908 CEST	49739	443	192.168.2.4	18.66.121.135
Sep 29, 2024 15:16:15.739784956 CEST	443	49739	18.66.121.135	192.168.2.4
Sep 29, 2024 15:16:15.771159887 CEST	49735	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:15.811440945 CEST	443	49735	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:15.967252970 CEST	443	49735	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:15.967502117 CEST	443	49735	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:15.967571020 CEST	49735	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:15.974474907 CEST	49735	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:15.974514961 CEST	443	49735	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:15.996714115 CEST	49741	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:15.996763945 CEST	443	49741	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:15.996824026 CEST	49741	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:15.997039080 CEST	49741	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:15.997045040 CEST	443	49741	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:16.006659031 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:16.006695032 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:16.006768942 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:16.006949902 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:16.006962061 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:16.134079933 CEST	49743	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:16.134151936 CEST	443	49743	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:16.134249926 CEST	49743	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:16.134736061 CEST	49743	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:16.134769917 CEST	443	49743	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:16.238594055 CEST	49744	443	192.168.2.4	172.217.18.100
Sep 29, 2024 15:16:16.238629103 CEST	443	49744	172.217.18.100	192.168.2.4
Sep 29, 2024 15:16:16.238694906 CEST	49744	443	192.168.2.4	172.217.18.100
Sep 29, 2024 15:16:16.238975048 CEST	49744	443	192.168.2.4	172.217.18.100
Sep 29, 2024 15:16:16.238987923 CEST	443	49744	172.217.18.100	192.168.2.4
Sep 29, 2024 15:16:16.460987091 CEST	443	49739	18.66.121.135	192.168.2.4
Sep 29, 2024 15:16:16.463481903 CEST	49739	443	192.168.2.4	18.66.121.135
Sep 29, 2024 15:16:16.463524103 CEST	443	49739	18.66.121.135	192.168.2.4
Sep 29, 2024 15:16:16.465274096 CEST	443	49739	18.66.121.135	192.168.2.4
Sep 29, 2024 15:16:16.465349913 CEST	49739	443	192.168.2.4	18.66.121.135
Sep 29, 2024 15:16:16.467358112 CEST	49739	443	192.168.2.4	18.66.121.135
Sep 29, 2024 15:16:16.467462063 CEST	443	49739	18.66.121.135	192.168.2.4
Sep 29, 2024 15:16:16.467752934 CEST	49739	443	192.168.2.4	18.66.121.135
Sep 29, 2024 15:16:16.467771053 CEST	443	49739	18.66.121.135	192.168.2.4
Sep 29, 2024 15:16:16.511585951 CEST	49739	443	192.168.2.4	18.66.121.135
Sep 29, 2024 15:16:16.649291992 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:16.649656057 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:16.649666071 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:16.650645018 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:16.650693893 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:16.655734062 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:16.655805111 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:16.656430006 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:16.656439066 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:16.672419071 CEST	443	49741	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:16.694128036 CEST	49741	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:16.694155931 CEST	443	49741	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:16.695292950 CEST	443	49741	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:16.695652008 CEST	49741	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:16.695792913 CEST	49741	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:16.695799112 CEST	443	49741	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:16.695823908 CEST	443	49741	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:16.703766108 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:16.730773926 CEST	443	49739	18.66.121.135	192.168.2.4
Sep 29, 2024 15:16:16.730807066 CEST	443	49739	18.66.121.135	192.168.2.4
Sep 29, 2024 15:16:16.730818033 CEST	443	49739	18.66.121.135	192.168.2.4
Sep 29, 2024 15:16:16.730848074 CEST	443	49739	18.66.121.135	192.168.2.4
Sep 29, 2024 15:16:16.730890036 CEST	49739	443	192.168.2.4	18.66.121.135
Sep 29, 2024 15:16:16.730921984 CEST	443	49739	18.66.121.135	192.168.2.4
Sep 29, 2024 15:16:16.730943918 CEST	443	49739	18.66.121.135	192.168.2.4
Sep 29, 2024 15:16:16.730964899 CEST	49739	443	192.168.2.4	18.66.121.135
Sep 29, 2024 15:16:16.730993032 CEST	49739	443	192.168.2.4	18.66.121.135
Sep 29, 2024 15:16:16.733604908 CEST	49739	443	192.168.2.4	18.66.121.135
Sep 29, 2024 15:16:16.733632088 CEST	443	49739	18.66.121.135	192.168.2.4
Sep 29, 2024 15:16:16.736797094 CEST	49741	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:16.809856892 CEST	49745	443	192.168.2.4	18.66.121.69
Sep 29, 2024 15:16:16.809943914 CEST	443	49745	18.66.121.69	192.168.2.4
Sep 29, 2024 15:16:16.810029030 CEST	49745	443	192.168.2.4	18.66.121.69
Sep 29, 2024 15:16:16.810851097 CEST	49745	443	192.168.2.4	18.66.121.69
Sep 29, 2024 15:16:16.810899973 CEST	443	49745	18.66.121.69	192.168.2.4
Sep 29, 2024 15:16:16.813447952 CEST	443	49743	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:16.813875914 CEST	49743	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:16.813905954 CEST	443	49743	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:16.815000057 CEST	443	49743	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:16.815067053 CEST	49743	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:16.815416098 CEST	49743	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:16.815490007 CEST	443	49743	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:16.815706015 CEST	49743	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:16.815723896 CEST	443	49743	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:16.855850935 CEST	49743	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:16.885412931 CEST	443	49744	172.217.18.100	192.168.2.4
Sep 29, 2024 15:16:16.886028051 CEST	49744	443	192.168.2.4	172.217.18.100
Sep 29, 2024 15:16:16.886043072 CEST	443	49744	172.217.18.100	192.168.2.4
Sep 29, 2024 15:16:16.887052059 CEST	443	49744	172.217.18.100	192.168.2.4
Sep 29, 2024 15:16:16.887125969 CEST	49744	443	192.168.2.4	172.217.18.100
Sep 29, 2024 15:16:16.887897968 CEST	49744	443	192.168.2.4	172.217.18.100
Sep 29, 2024 15:16:16.887954950 CEST	443	49744	172.217.18.100	192.168.2.4
Sep 29, 2024 15:16:16.923365116 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:16.923410892 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:16.923454046 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:16.923501015 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:16.923512936 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:16.923527002 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:16.923693895 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:16.929409981 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:16.929462910 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:16.929649115 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:16.929661036 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:16.935743093 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:16.935791969 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:16.935800076 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:16.937222958 CEST	49744	443	192.168.2.4	172.217.18.100
Sep 29, 2024 15:16:16.937236071 CEST	443	49744	172.217.18.100	192.168.2.4
Sep 29, 2024 15:16:16.941899061 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:16.941951990 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:16.941963911 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:16.980869055 CEST	49744	443	192.168.2.4	172.217.18.100
Sep 29, 2024 15:16:16.985609055 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.004585028 CEST	443	49741	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:17.004966974 CEST	443	49741	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:17.005088091 CEST	49741	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:17.005795956 CEST	49741	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:17.005815983 CEST	443	49741	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:17.011686087 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.012057066 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.012085915 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.012109041 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.012119055 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.012162924 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.018315077 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.024581909 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.024640083 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.024661064 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.024681091 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.024732113 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.030899048 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.037142038 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.037184954 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.037226915 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.037237883 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.042062998 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.043400049 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.049310923 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.049382925 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.049424887 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.049443007 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.049576998 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.055119038 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.060915947 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.061001062 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.061009884 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.066812038 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.066842079 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.066943884 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.066951990 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.067001104 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.072761059 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.072823048 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.072887897 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.072896957 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.100011110 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.100059986 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.100064039 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.100075006 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.100125074 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.100131989 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.100660086 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.100814104 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.100827932 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.103800058 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.103946924 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.103954077 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.109617949 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.109666109 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.109680891 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.115504980 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.115557909 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.115566969 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.121385098 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.121445894 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.121453047 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.127015114 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.127120972 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.127139091 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.132342100 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.132400990 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.132425070 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.137600899 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.137658119 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.137671947 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.142885923 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.142950058 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.142968893 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.147989035 CEST	443	49743	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:17.148166895 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.148247957 CEST	443	49743	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:17.148322105 CEST	49743	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:17.148349047 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.148370028 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.148823977 CEST	49743	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:17.148875952 CEST	443	49743	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:17.153029919 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.153084040 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.153100014 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.157984972 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.158057928 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.158065081 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.162014008 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.162070990 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.162076950 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.166074038 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.166143894 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.166157961 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.170341969 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.170427084 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.170442104 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.174382925 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.174606085 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.174629927 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.178066015 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.178134918 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.178142071 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.181893110 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.181950092 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.181963921 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.185841084 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.185934067 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.185949087 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.189637899 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.189687967 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.189701080 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.191922903 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.191953897 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.191975117 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.191998959 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.192047119 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.194231033 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.196656942 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.196698904 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.196702957 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.196724892 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.197036982 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.198894024 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.201128960 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.201200962 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.201201916 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.201210976 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.201251984 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.203449965 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.205748081 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.205800056 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.205811024 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.205825090 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.205900908 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.208122969 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.210479975 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.210526943 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.210531950 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.210545063 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.210774899 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.212754965 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.215037107 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.215085983 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.215096951 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.215111017 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.215322971 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.217447996 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.219630957 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.219681025 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.219710112 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.219724894 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.219808102 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.221986055 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.224246979 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.224292040 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.224314928 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.224337101 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.224457979 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.226675034 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.226828098 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.226878881 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.227145910 CEST	49742	443	192.168.2.4	142.250.186.164
Sep 29, 2024 15:16:17.227164030 CEST	443	49742	142.250.186.164	192.168.2.4
Sep 29, 2024 15:16:17.392532110 CEST	49746	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:17.392632961 CEST	443	49746	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:17.392705917 CEST	49746	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:17.415424109 CEST	49746	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:17.415458918 CEST	443	49746	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:17.570831060 CEST	443	49745	18.66.121.69	192.168.2.4
Sep 29, 2024 15:16:17.571430922 CEST	49745	443	192.168.2.4	18.66.121.69
Sep 29, 2024 15:16:17.571506977 CEST	443	49745	18.66.121.69	192.168.2.4
Sep 29, 2024 15:16:17.573172092 CEST	443	49745	18.66.121.69	192.168.2.4
Sep 29, 2024 15:16:17.573254108 CEST	49745	443	192.168.2.4	18.66.121.69
Sep 29, 2024 15:16:17.576958895 CEST	49745	443	192.168.2.4	18.66.121.69
Sep 29, 2024 15:16:17.577094078 CEST	443	49745	18.66.121.69	192.168.2.4
Sep 29, 2024 15:16:17.580425024 CEST	49745	443	192.168.2.4	18.66.121.69
Sep 29, 2024 15:16:17.580442905 CEST	443	49745	18.66.121.69	192.168.2.4
Sep 29, 2024 15:16:17.587289095 CEST	49748	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:17.587327957 CEST	443	49748	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:17.587538958 CEST	49748	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:17.588150024 CEST	49748	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:17.588162899 CEST	443	49748	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:17.627686024 CEST	49745	443	192.168.2.4	18.66.121.69
Sep 29, 2024 15:16:17.863308907 CEST	443	49745	18.66.121.69	192.168.2.4
Sep 29, 2024 15:16:17.863334894 CEST	443	49745	18.66.121.69	192.168.2.4
Sep 29, 2024 15:16:17.863343000 CEST	443	49745	18.66.121.69	192.168.2.4
Sep 29, 2024 15:16:17.863409042 CEST	49745	443	192.168.2.4	18.66.121.69
Sep 29, 2024 15:16:17.863420010 CEST	443	49745	18.66.121.69	192.168.2.4
Sep 29, 2024 15:16:17.863457918 CEST	443	49745	18.66.121.69	192.168.2.4
Sep 29, 2024 15:16:17.863475084 CEST	443	49745	18.66.121.69	192.168.2.4
Sep 29, 2024 15:16:17.863481045 CEST	49745	443	192.168.2.4	18.66.121.69
Sep 29, 2024 15:16:17.863521099 CEST	49745	443	192.168.2.4	18.66.121.69
Sep 29, 2024 15:16:18.066050053 CEST	443	49746	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:18.112509966 CEST	49746	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:18.235658884 CEST	443	49748	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:18.268260956 CEST	49746	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:18.268279076 CEST	443	49746	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:18.268754005 CEST	49748	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:18.268810987 CEST	443	49748	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:18.270472050 CEST	443	49748	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:18.270549059 CEST	49748	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:18.272981882 CEST	443	49746	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:18.273061037 CEST	49746	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:18.274813890 CEST	49748	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:18.274945974 CEST	443	49748	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:18.276609898 CEST	49746	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:18.276865959 CEST	443	49746	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:18.280791998 CEST	49748	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:18.280797958 CEST	443	49748	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:18.324615002 CEST	49746	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:18.324631929 CEST	443	49746	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:18.324661970 CEST	49748	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:18.372623920 CEST	49746	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:18.379534960 CEST	49745	443	192.168.2.4	18.66.121.69
Sep 29, 2024 15:16:18.379625082 CEST	443	49745	18.66.121.69	192.168.2.4
Sep 29, 2024 15:16:18.641379118 CEST	443	49748	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:18.641453028 CEST	443	49748	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:18.641491890 CEST	443	49748	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:18.641531944 CEST	443	49748	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:18.641544104 CEST	49748	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:18.641568899 CEST	443	49748	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:18.641576052 CEST	49748	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:18.647329092 CEST	443	49748	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:18.647397995 CEST	443	49748	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:18.647439957 CEST	49748	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:18.647449970 CEST	443	49748	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:18.647501945 CEST	49748	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:18.647509098 CEST	443	49748	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:18.653529882 CEST	443	49748	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:18.653620958 CEST	49748	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:18.653626919 CEST	443	49748	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:18.659897089 CEST	443	49748	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:18.659948111 CEST	49748	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:18.659954071 CEST	443	49748	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:18.660041094 CEST	443	49748	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:18.660103083 CEST	49748	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:18.686286926 CEST	49748	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:18.686299086 CEST	443	49748	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:18.772891045 CEST	49749	443	192.168.2.4	184.28.90.27
Sep 29, 2024 15:16:18.772993088 CEST	443	49749	184.28.90.27	192.168.2.4
Sep 29, 2024 15:16:18.773077011 CEST	49749	443	192.168.2.4	184.28.90.27
Sep 29, 2024 15:16:18.774954081 CEST	49749	443	192.168.2.4	184.28.90.27
Sep 29, 2024 15:16:18.774988890 CEST	443	49749	184.28.90.27	192.168.2.4
Sep 29, 2024 15:16:19.176021099 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:19.176086903 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:19.176158905 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:19.179837942 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:19.179871082 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:19.237050056 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:19.237093925 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:19.237158060 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:19.238060951 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:19.238073111 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:19.412369967 CEST	443	49749	184.28.90.27	192.168.2.4
Sep 29, 2024 15:16:19.412470102 CEST	49749	443	192.168.2.4	184.28.90.27
Sep 29, 2024 15:16:19.532588005 CEST	49749	443	192.168.2.4	184.28.90.27
Sep 29, 2024 15:16:19.532628059 CEST	443	49749	184.28.90.27	192.168.2.4
Sep 29, 2024 15:16:19.532907009 CEST	443	49749	184.28.90.27	192.168.2.4
Sep 29, 2024 15:16:19.583291054 CEST	49749	443	192.168.2.4	184.28.90.27
Sep 29, 2024 15:16:19.814028978 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:19.869301081 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:19.874836922 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:19.916294098 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:19.925725937 CEST	49749	443	192.168.2.4	184.28.90.27
Sep 29, 2024 15:16:19.927076101 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:19.927092075 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:19.927232981 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:19.927237988 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:19.927671909 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:19.928855896 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:19.928910971 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:19.956191063 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:19.956346989 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:19.958082914 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:19.958240986 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:19.958492994 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:19.959028006 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:19.959038019 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:19.971434116 CEST	443	49749	184.28.90.27	192.168.2.4
Sep 29, 2024 15:16:20.003423929 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.011296988 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.109690905 CEST	443	49749	184.28.90.27	192.168.2.4
Sep 29, 2024 15:16:20.109792948 CEST	443	49749	184.28.90.27	192.168.2.4
Sep 29, 2024 15:16:20.110107899 CEST	49749	443	192.168.2.4	184.28.90.27
Sep 29, 2024 15:16:20.119318962 CEST	49749	443	192.168.2.4	184.28.90.27
Sep 29, 2024 15:16:20.119318962 CEST	49749	443	192.168.2.4	184.28.90.27
Sep 29, 2024 15:16:20.119355917 CEST	443	49749	184.28.90.27	192.168.2.4
Sep 29, 2024 15:16:20.119396925 CEST	443	49749	184.28.90.27	192.168.2.4
Sep 29, 2024 15:16:20.149208069 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.149254084 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.149282932 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.149308920 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.149316072 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.149338961 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.149378061 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.149396896 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.149441957 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.149456978 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.155463934 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.155535936 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.155551910 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.155776024 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.155827999 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.155872107 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.155911922 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.155914068 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.155926943 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.155968904 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.155988932 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.156030893 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.161334038 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.161386967 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.161396980 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.161686897 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.161822081 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.161869049 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.161878109 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.167740107 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.167861938 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.167870998 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.167913914 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.167969942 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.167975903 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.174509048 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.174561977 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.174566984 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.184050083 CEST	49753	443	192.168.2.4	184.28.90.27
Sep 29, 2024 15:16:20.184087038 CEST	443	49753	184.28.90.27	192.168.2.4
Sep 29, 2024 15:16:20.184168100 CEST	49753	443	192.168.2.4	184.28.90.27
Sep 29, 2024 15:16:20.184926033 CEST	49753	443	192.168.2.4	184.28.90.27
Sep 29, 2024 15:16:20.184938908 CEST	443	49753	184.28.90.27	192.168.2.4
Sep 29, 2024 15:16:20.218977928 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.219053030 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.236654997 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.238328934 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.238363028 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.238406897 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.238429070 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.238507032 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.244474888 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.244544029 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.244580030 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.244596958 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.244606018 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.244618893 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.244652033 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.250900984 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.250941992 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.251066923 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.251077890 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.251091003 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.251358986 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.257113934 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.257153034 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.257184029 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.257189989 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.257226944 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.257349014 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.263104916 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.263405085 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.263458967 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.263469934 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.269366980 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.269407988 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.269454002 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.269460917 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.269500017 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.269594908 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.269639969 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.269649982 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.276422977 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.276454926 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.276474953 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.276484013 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.276535034 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.276787043 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.281522989 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.281558037 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.281578064 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.281584978 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.281624079 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.281663895 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.287410975 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.287452936 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.287481070 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.287501097 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.287511110 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.287574053 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.293155909 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.293164968 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.293204069 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.293209076 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.299002886 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.299055099 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.299060106 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.299114943 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.299133062 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.299161911 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.299170971 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.299273014 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.299279928 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.304932117 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.304972887 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.305001974 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.305006981 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.305042028 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.305047035 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.323797941 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.323831081 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.323874950 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.323885918 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.323961020 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.324034929 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.325675011 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.325726986 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.325736046 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.329420090 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.329467058 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.329476118 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.332521915 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.332572937 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.332575083 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.332588911 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.332628012 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.332634926 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.332828045 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.333045959 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.333050013 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.334033966 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.334157944 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.334166050 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.335736990 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.335827112 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.335830927 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.338660955 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.338715076 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.338723898 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.340651035 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.340702057 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.340708017 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.343370914 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.343417883 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.343426943 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.345657110 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.345763922 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.345768929 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.348073006 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.348115921 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.348124981 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.350274086 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.350336075 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.350339890 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.352808952 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.352855921 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.352865934 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.354829073 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.354880095 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.354883909 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.357402086 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.357450008 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.357458115 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.359507084 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.359556913 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.359563112 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.362184048 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.362240076 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.362250090 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.364150047 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.364217997 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.364224911 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.366887093 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.366934061 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.366941929 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.368917942 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.369043112 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.369049072 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.371375084 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.371422052 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.371442080 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.373627901 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.373673916 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.373678923 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.376230001 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.376380920 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.376391888 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.378078938 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.378128052 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.378133059 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.380718946 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.380769014 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.380778074 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.382679939 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.382726908 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.382731915 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.385288954 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.385337114 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.385344982 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.387564898 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.387614965 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.387620926 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.389633894 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.389683008 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.389693022 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.391792059 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.391840935 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.391846895 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.393802881 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.393841982 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.393851042 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.396265030 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.396325111 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.396330118 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.398019075 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.398066044 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.398077011 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.400367022 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.400413990 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.400418043 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.401935101 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.402048111 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.402056932 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.404247046 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.404289961 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.404294968 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.405867100 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.405914068 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.405922890 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.408222914 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.408288002 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.408293962 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.409641981 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.409687042 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.409696102 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.412117004 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.412163019 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.412168026 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.413630962 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.413657904 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.413703918 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.413713932 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.413754940 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.416393042 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.416441917 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.416446924 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.417445898 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.419783115 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.419821978 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.419827938 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.419830084 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.419842005 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.419847965 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.419866085 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.419877052 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.419884920 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.419919014 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.422029972 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.423870087 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.424637079 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.424669981 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.424688101 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.424698114 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.424763918 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.425940990 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.425983906 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.425995111 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.425998926 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.426038980 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.427032948 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.428069115 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.429022074 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.429054022 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.429085970 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.429096937 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.429169893 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.430438995 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.430483103 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.430500984 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.430521011 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.430565119 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.431329012 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.433181047 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.433595896 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.433615923 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.433643103 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.433653116 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.433764935 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.435236931 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.435281992 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.435298920 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.435991049 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.437401056 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.437443972 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.437446117 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.437458038 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.437493086 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.438361883 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.438409090 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.438419104 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.439651012 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.440370083 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.440413952 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.440423012 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.441900015 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.442008018 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.442049980 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.442063093 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.442100048 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.442625046 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.442653894 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.442701101 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.442711115 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.442800999 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.444119930 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.444720984 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.446470976 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.446512938 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.446561098 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.446577072 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.446618080 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.447138071 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.447169065 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.447180986 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.447189093 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.447227001 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.448698044 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.449225903 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.449379921 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.449421883 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.449531078 CEST	49750	443	192.168.2.4	142.250.185.78
Sep 29, 2024 15:16:20.449543953 CEST	443	49750	142.250.185.78	192.168.2.4
Sep 29, 2024 15:16:20.450963020 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.450999975 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.451033115 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.451056004 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.451095104 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.453155994 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.455516100 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.455560923 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.455575943 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.455673933 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.455724955 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.455903053 CEST	49751	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:20.455918074 CEST	443	49751	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:20.851305962 CEST	443	49753	184.28.90.27	192.168.2.4
Sep 29, 2024 15:16:20.851387024 CEST	49753	443	192.168.2.4	184.28.90.27
Sep 29, 2024 15:16:20.853861094 CEST	49753	443	192.168.2.4	184.28.90.27
Sep 29, 2024 15:16:20.853868961 CEST	443	49753	184.28.90.27	192.168.2.4
Sep 29, 2024 15:16:20.854091883 CEST	443	49753	184.28.90.27	192.168.2.4
Sep 29, 2024 15:16:20.885632038 CEST	49753	443	192.168.2.4	184.28.90.27
Sep 29, 2024 15:16:20.927397013 CEST	443	49753	184.28.90.27	192.168.2.4
Sep 29, 2024 15:16:20.937325954 CEST	49754	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:20.937386990 CEST	443	49754	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:20.937628984 CEST	49754	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:20.937886953 CEST	49754	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:20.937927008 CEST	443	49754	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:21.022106886 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:21.022130966 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:21.022183895 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:21.022423029 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:21.022432089 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:21.126580954 CEST	443	49753	184.28.90.27	192.168.2.4
Sep 29, 2024 15:16:21.126751900 CEST	443	49753	184.28.90.27	192.168.2.4
Sep 29, 2024 15:16:21.126861095 CEST	49753	443	192.168.2.4	184.28.90.27
Sep 29, 2024 15:16:21.127917051 CEST	49753	443	192.168.2.4	184.28.90.27
Sep 29, 2024 15:16:21.127942085 CEST	443	49753	184.28.90.27	192.168.2.4
Sep 29, 2024 15:16:21.127955914 CEST	49753	443	192.168.2.4	184.28.90.27
Sep 29, 2024 15:16:21.127962112 CEST	443	49753	184.28.90.27	192.168.2.4
Sep 29, 2024 15:16:21.619792938 CEST	443	49754	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:21.620520115 CEST	49754	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:21.620539904 CEST	443	49754	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:21.620899916 CEST	443	49754	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:21.621361971 CEST	49754	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:21.621433973 CEST	443	49754	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:21.621509075 CEST	49754	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:21.655025959 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:21.655241966 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:21.655272007 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:21.656382084 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:21.656433105 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:21.656778097 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:21.656846046 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:21.656900883 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:21.667406082 CEST	443	49754	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:21.699429035 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:21.778214931 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:21.778239012 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:21.907483101 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:21.934125900 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:21.934170961 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:21.934196949 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:21.934225082 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:21.934223890 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:21.934242964 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:21.934267044 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:21.940126896 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:21.940169096 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:21.940202951 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:21.940211058 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:21.940248013 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:21.940299034 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:21.946407080 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:21.946461916 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:21.946469069 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:21.952888012 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:21.952934027 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:21.952940941 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:21.962023973 CEST	443	49754	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:21.962132931 CEST	443	49754	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:21.962196112 CEST	49754	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:21.962630987 CEST	49754	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:21.962675095 CEST	443	49754	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:21.968208075 CEST	49756	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:21.968239069 CEST	443	49756	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:21.968616009 CEST	49756	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:21.970304966 CEST	49756	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:21.970316887 CEST	443	49756	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:21.973365068 CEST	49757	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:21.973421097 CEST	443	49757	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:21.973496914 CEST	49757	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:21.973730087 CEST	49757	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:21.973756075 CEST	443	49757	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:21.988172054 CEST	49758	443	192.168.2.4	142.250.185.129
Sep 29, 2024 15:16:21.988226891 CEST	443	49758	142.250.185.129	192.168.2.4
Sep 29, 2024 15:16:21.988275051 CEST	49759	443	192.168.2.4	142.250.185.129
Sep 29, 2024 15:16:21.988301992 CEST	443	49759	142.250.185.129	192.168.2.4
Sep 29, 2024 15:16:21.988302946 CEST	49758	443	192.168.2.4	142.250.185.129
Sep 29, 2024 15:16:21.988353968 CEST	49759	443	192.168.2.4	142.250.185.129
Sep 29, 2024 15:16:21.988487005 CEST	49758	443	192.168.2.4	142.250.185.129
Sep 29, 2024 15:16:21.988512993 CEST	443	49758	142.250.185.129	192.168.2.4
Sep 29, 2024 15:16:21.988603115 CEST	49759	443	192.168.2.4	142.250.185.129
Sep 29, 2024 15:16:21.988616943 CEST	443	49759	142.250.185.129	192.168.2.4
Sep 29, 2024 15:16:22.020858049 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.020915985 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.020944118 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.023303032 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.023355961 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.023372889 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.029653072 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.029709101 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.029722929 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.036117077 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.036184072 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.036199093 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.042416096 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.042469025 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.042481899 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.048613071 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.048670053 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.048682928 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.054873943 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.054925919 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.054939032 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.060863018 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.060937881 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.060950994 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.066546917 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.066611052 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.066622972 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.072479010 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.072531939 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.072546959 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.078902006 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.078948021 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.078963041 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.084810019 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.084835052 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.084849119 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.084853888 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.084898949 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.090327024 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.107697010 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.107736111 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.107745886 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.109411955 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.109450102 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.109455109 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.115216970 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.115252972 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.115258932 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.121042013 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.121097088 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.121102095 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.126302004 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.126348019 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.126349926 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.126357079 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.126399994 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.131587029 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.137067080 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.137119055 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.137121916 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.137130976 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.137161970 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.142307043 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.149389029 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.149422884 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.149426937 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.149432898 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.149467945 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.152997017 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.158181906 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.158224106 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.158229113 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.163134098 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.163157940 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.163177967 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.163183928 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.163213015 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.168359995 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.172610998 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.172643900 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.172652960 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.172658920 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.172700882 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.176740885 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.181137085 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.181162119 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.181193113 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.181221962 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.181257010 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.184894085 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.188863039 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.188910961 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.188915968 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.192538977 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.192681074 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.192686081 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.196376085 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.196410894 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.196414948 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.196423054 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.196461916 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.200623989 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.203993082 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.204022884 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.204031944 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.204037905 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.204066038 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.204070091 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.206387997 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.206432104 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.206435919 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.209284067 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.209320068 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.209325075 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.211131096 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.211183071 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.211188078 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.213437080 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.213515043 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.213520050 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.215786934 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.215859890 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.215864897 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.218324900 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.218362093 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.218367100 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.220918894 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.220956087 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.220961094 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.222914934 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.222970963 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.222975969 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.225070953 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.225116014 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.225120068 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.227457047 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.227495909 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.227502108 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.229676008 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.229712009 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.229717016 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.232043028 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.232088089 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.232093096 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.234375954 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.234477043 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.234482050 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.237193108 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.237232924 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.237237930 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.238934040 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.239012957 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.239029884 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.239061117 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.239224911 CEST	49755	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:22.239238024 CEST	443	49755	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:22.638701916 CEST	443	49757	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:22.639950037 CEST	443	49759	142.250.185.129	192.168.2.4
Sep 29, 2024 15:16:22.655096054 CEST	443	49756	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:22.684720993 CEST	49757	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:22.684817076 CEST	49759	443	192.168.2.4	142.250.185.129
Sep 29, 2024 15:16:22.700872898 CEST	49756	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:22.703294039 CEST	443	49758	142.250.185.129	192.168.2.4
Sep 29, 2024 15:16:22.714833975 CEST	49758	443	192.168.2.4	142.250.185.129
Sep 29, 2024 15:16:22.714859009 CEST	443	49758	142.250.185.129	192.168.2.4
Sep 29, 2024 15:16:22.715038061 CEST	49756	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:22.715042114 CEST	49759	443	192.168.2.4	142.250.185.129
Sep 29, 2024 15:16:22.715048075 CEST	443	49756	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:22.715049028 CEST	443	49759	142.250.185.129	192.168.2.4
Sep 29, 2024 15:16:22.715261936 CEST	443	49758	142.250.185.129	192.168.2.4
Sep 29, 2024 15:16:22.715277910 CEST	443	49758	142.250.185.129	192.168.2.4
Sep 29, 2024 15:16:22.715336084 CEST	49758	443	192.168.2.4	142.250.185.129
Sep 29, 2024 15:16:22.715349913 CEST	443	49758	142.250.185.129	192.168.2.4
Sep 29, 2024 15:16:22.715382099 CEST	49758	443	192.168.2.4	142.250.185.129
Sep 29, 2024 15:16:22.715415955 CEST	49758	443	192.168.2.4	142.250.185.129
Sep 29, 2024 15:16:22.715445042 CEST	443	49756	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:22.715548038 CEST	443	49759	142.250.185.129	192.168.2.4
Sep 29, 2024 15:16:22.715559006 CEST	443	49759	142.250.185.129	192.168.2.4
Sep 29, 2024 15:16:22.715766907 CEST	49759	443	192.168.2.4	142.250.185.129
Sep 29, 2024 15:16:22.715771914 CEST	443	49759	142.250.185.129	192.168.2.4
Sep 29, 2024 15:16:22.716023922 CEST	443	49758	142.250.185.129	192.168.2.4
Sep 29, 2024 15:16:22.716059923 CEST	49759	443	192.168.2.4	142.250.185.129
Sep 29, 2024 15:16:22.716257095 CEST	443	49759	142.250.185.129	192.168.2.4
Sep 29, 2024 15:16:22.718784094 CEST	49757	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:22.718796015 CEST	443	49757	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:22.719141006 CEST	443	49757	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:22.720942974 CEST	49756	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:22.721029043 CEST	443	49756	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:22.726692915 CEST	49757	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:22.726768970 CEST	443	49757	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:22.726974964 CEST	49759	443	192.168.2.4	142.250.185.129
Sep 29, 2024 15:16:22.727031946 CEST	443	49759	142.250.185.129	192.168.2.4
Sep 29, 2024 15:16:22.727324963 CEST	49758	443	192.168.2.4	142.250.185.129
Sep 29, 2024 15:16:22.727391958 CEST	443	49758	142.250.185.129	192.168.2.4
Sep 29, 2024 15:16:22.727607965 CEST	49756	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:22.727777004 CEST	49757	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:22.727909088 CEST	49759	443	192.168.2.4	142.250.185.129
Sep 29, 2024 15:16:22.727914095 CEST	443	49759	142.250.185.129	192.168.2.4
Sep 29, 2024 15:16:22.727973938 CEST	49758	443	192.168.2.4	142.250.185.129
Sep 29, 2024 15:16:22.727988958 CEST	443	49758	142.250.185.129	192.168.2.4
Sep 29, 2024 15:16:22.771323919 CEST	49759	443	192.168.2.4	142.250.185.129
Sep 29, 2024 15:16:22.771395922 CEST	443	49756	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:22.771399975 CEST	443	49757	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:22.779620886 CEST	49758	443	192.168.2.4	142.250.185.129
Sep 29, 2024 15:16:22.911811113 CEST	443	49759	142.250.185.129	192.168.2.4
Sep 29, 2024 15:16:22.911895037 CEST	443	49759	142.250.185.129	192.168.2.4
Sep 29, 2024 15:16:22.911986113 CEST	49759	443	192.168.2.4	142.250.185.129
Sep 29, 2024 15:16:22.913436890 CEST	49759	443	192.168.2.4	142.250.185.129
Sep 29, 2024 15:16:22.913451910 CEST	443	49759	142.250.185.129	192.168.2.4
Sep 29, 2024 15:16:22.930350065 CEST	49760	443	192.168.2.4	142.250.185.193
Sep 29, 2024 15:16:22.930440903 CEST	443	49760	142.250.185.193	192.168.2.4
Sep 29, 2024 15:16:22.930510998 CEST	49760	443	192.168.2.4	142.250.185.193
Sep 29, 2024 15:16:22.930737019 CEST	49760	443	192.168.2.4	142.250.185.193
Sep 29, 2024 15:16:22.930763960 CEST	443	49760	142.250.185.193	192.168.2.4
Sep 29, 2024 15:16:22.966542959 CEST	443	49757	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:22.966615915 CEST	443	49757	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:22.966670036 CEST	49757	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:22.967730045 CEST	49757	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:22.967741966 CEST	443	49757	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:22.972193003 CEST	443	49758	142.250.185.129	192.168.2.4
Sep 29, 2024 15:16:22.972255945 CEST	443	49758	142.250.185.129	192.168.2.4
Sep 29, 2024 15:16:22.972377062 CEST	49758	443	192.168.2.4	142.250.185.129
Sep 29, 2024 15:16:22.973254919 CEST	49761	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:22.973273039 CEST	443	49761	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:22.973352909 CEST	49761	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:22.973558903 CEST	49761	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:22.973572016 CEST	443	49761	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:22.974623919 CEST	49758	443	192.168.2.4	142.250.185.129
Sep 29, 2024 15:16:22.974651098 CEST	443	49758	142.250.185.129	192.168.2.4
Sep 29, 2024 15:16:22.981586933 CEST	49762	443	192.168.2.4	142.250.185.193
Sep 29, 2024 15:16:22.981620073 CEST	443	49762	142.250.185.193	192.168.2.4
Sep 29, 2024 15:16:22.981673956 CEST	49762	443	192.168.2.4	142.250.185.193
Sep 29, 2024 15:16:22.981950045 CEST	49762	443	192.168.2.4	142.250.185.193
Sep 29, 2024 15:16:22.981961966 CEST	443	49762	142.250.185.193	192.168.2.4
Sep 29, 2024 15:16:22.991323948 CEST	443	49756	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:22.991415024 CEST	443	49756	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:22.991473913 CEST	49756	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:22.991846085 CEST	49756	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:22.991858006 CEST	443	49756	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:23.471857071 CEST	49746	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:23.515443087 CEST	443	49746	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:23.620837927 CEST	443	49762	142.250.185.193	192.168.2.4
Sep 29, 2024 15:16:23.621375084 CEST	49762	443	192.168.2.4	142.250.185.193
Sep 29, 2024 15:16:23.621407032 CEST	443	49762	142.250.185.193	192.168.2.4
Sep 29, 2024 15:16:23.621779919 CEST	443	49762	142.250.185.193	192.168.2.4
Sep 29, 2024 15:16:23.621794939 CEST	443	49762	142.250.185.193	192.168.2.4
Sep 29, 2024 15:16:23.621855021 CEST	49762	443	192.168.2.4	142.250.185.193
Sep 29, 2024 15:16:23.621864080 CEST	443	49762	142.250.185.193	192.168.2.4
Sep 29, 2024 15:16:23.621906042 CEST	49762	443	192.168.2.4	142.250.185.193
Sep 29, 2024 15:16:23.622514009 CEST	443	49762	142.250.185.193	192.168.2.4
Sep 29, 2024 15:16:23.622746944 CEST	49762	443	192.168.2.4	142.250.185.193
Sep 29, 2024 15:16:23.622808933 CEST	443	49762	142.250.185.193	192.168.2.4
Sep 29, 2024 15:16:23.622920036 CEST	49762	443	192.168.2.4	142.250.185.193
Sep 29, 2024 15:16:23.622926950 CEST	443	49762	142.250.185.193	192.168.2.4
Sep 29, 2024 15:16:23.647713900 CEST	443	49760	142.250.185.193	192.168.2.4
Sep 29, 2024 15:16:23.647941113 CEST	49760	443	192.168.2.4	142.250.185.193
Sep 29, 2024 15:16:23.648005962 CEST	443	49760	142.250.185.193	192.168.2.4
Sep 29, 2024 15:16:23.648403883 CEST	443	49760	142.250.185.193	192.168.2.4
Sep 29, 2024 15:16:23.648417950 CEST	443	49760	142.250.185.193	192.168.2.4
Sep 29, 2024 15:16:23.648483038 CEST	49760	443	192.168.2.4	142.250.185.193
Sep 29, 2024 15:16:23.648503065 CEST	443	49760	142.250.185.193	192.168.2.4
Sep 29, 2024 15:16:23.648679018 CEST	49760	443	192.168.2.4	142.250.185.193
Sep 29, 2024 15:16:23.649132967 CEST	443	49760	142.250.185.193	192.168.2.4
Sep 29, 2024 15:16:23.649323940 CEST	49760	443	192.168.2.4	142.250.185.193
Sep 29, 2024 15:16:23.649396896 CEST	443	49760	142.250.185.193	192.168.2.4
Sep 29, 2024 15:16:23.649450064 CEST	49760	443	192.168.2.4	142.250.185.193
Sep 29, 2024 15:16:23.663495064 CEST	443	49761	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:23.663731098 CEST	49761	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:23.663773060 CEST	443	49761	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:23.664122105 CEST	443	49761	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:23.664474964 CEST	49761	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:23.664541960 CEST	443	49761	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:23.664695978 CEST	49761	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:23.667078018 CEST	49762	443	192.168.2.4	142.250.185.193
Sep 29, 2024 15:16:23.669190884 CEST	443	49746	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:23.669743061 CEST	49746	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:23.669784069 CEST	443	49746	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:23.669814110 CEST	443	49746	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:23.669855118 CEST	49746	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:23.669892073 CEST	49746	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:23.691431999 CEST	443	49760	142.250.185.193	192.168.2.4
Sep 29, 2024 15:16:23.702079058 CEST	49760	443	192.168.2.4	142.250.185.193
Sep 29, 2024 15:16:23.702092886 CEST	443	49760	142.250.185.193	192.168.2.4
Sep 29, 2024 15:16:23.707407951 CEST	443	49761	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:23.747899055 CEST	49760	443	192.168.2.4	142.250.185.193
Sep 29, 2024 15:16:23.893156052 CEST	443	49762	142.250.185.193	192.168.2.4
Sep 29, 2024 15:16:23.893389940 CEST	443	49762	142.250.185.193	192.168.2.4
Sep 29, 2024 15:16:23.894141912 CEST	49762	443	192.168.2.4	142.250.185.193
Sep 29, 2024 15:16:23.894716978 CEST	49762	443	192.168.2.4	142.250.185.193
Sep 29, 2024 15:16:23.894736052 CEST	443	49762	142.250.185.193	192.168.2.4
Sep 29, 2024 15:16:23.919543982 CEST	443	49760	142.250.185.193	192.168.2.4
Sep 29, 2024 15:16:23.919642925 CEST	443	49760	142.250.185.193	192.168.2.4
Sep 29, 2024 15:16:23.919935942 CEST	49760	443	192.168.2.4	142.250.185.193
Sep 29, 2024 15:16:23.921236992 CEST	49760	443	192.168.2.4	142.250.185.193
Sep 29, 2024 15:16:23.921272039 CEST	443	49760	142.250.185.193	192.168.2.4
Sep 29, 2024 15:16:23.976700068 CEST	49763	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:23.976767063 CEST	443	49763	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:23.976844072 CEST	49763	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:23.977137089 CEST	49763	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:23.977155924 CEST	443	49763	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:24.001812935 CEST	443	49761	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:24.001888037 CEST	443	49761	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:24.002041101 CEST	49761	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:24.006052017 CEST	49761	443	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:24.006073952 CEST	443	49761	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:24.612658024 CEST	443	49763	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:24.626295090 CEST	49763	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:24.626349926 CEST	443	49763	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:24.626827002 CEST	443	49763	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:24.627616882 CEST	49763	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:24.627693892 CEST	443	49763	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:24.627863884 CEST	49763	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:24.671400070 CEST	443	49763	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:24.676708937 CEST	49763	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:24.899925947 CEST	443	49763	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:24.900015116 CEST	443	49763	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:24.900094032 CEST	49763	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:25.358406067 CEST	49763	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:25.358441114 CEST	443	49763	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:26.405201912 CEST	49672	443	192.168.2.4	173.222.162.32
Sep 29, 2024 15:16:26.405251026 CEST	443	49672	173.222.162.32	192.168.2.4
Sep 29, 2024 15:16:26.798269033 CEST	443	49744	172.217.18.100	192.168.2.4
Sep 29, 2024 15:16:26.798337936 CEST	443	49744	172.217.18.100	192.168.2.4
Sep 29, 2024 15:16:26.798508883 CEST	49744	443	192.168.2.4	172.217.18.100
Sep 29, 2024 15:16:28.540249109 CEST	49744	443	192.168.2.4	172.217.18.100
Sep 29, 2024 15:16:28.540267944 CEST	443	49744	172.217.18.100	192.168.2.4
Sep 29, 2024 15:16:29.540815115 CEST	80	49723	217.20.57.18	192.168.2.4
Sep 29, 2024 15:16:29.540946960 CEST	49723	80	192.168.2.4	217.20.57.18
Sep 29, 2024 15:16:29.549909115 CEST	49723	80	192.168.2.4	217.20.57.18
Sep 29, 2024 15:16:29.555000067 CEST	80	49723	217.20.57.18	192.168.2.4
Sep 29, 2024 15:16:34.677805901 CEST	49772	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:34.678222895 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:34.682653904 CEST	80	49772	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:34.682996988 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:34.683156967 CEST	49772	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:34.684484959 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:34.702893019 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:34.707709074 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:36.385719061 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:36.385736942 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:36.385747910 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:36.385804892 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:36.385827065 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:36.385844946 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:36.385858059 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:36.385869980 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:36.385898113 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:36.386147976 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:36.386202097 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:36.387850046 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:36.387895107 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:36.389823914 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:36.389866114 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:36.471762896 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:36.476761103 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:36.671135902 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:36.724544048 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:36.752842903 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:36.757694960 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:36.760888100 CEST	49774	80	192.168.2.4	18.66.121.69
Sep 29, 2024 15:16:36.763664007 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:36.763717890 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:36.763797045 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:36.764381886 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:36.764403105 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:36.765724897 CEST	80	49774	18.66.121.69	192.168.2.4
Sep 29, 2024 15:16:36.765804052 CEST	49774	80	192.168.2.4	18.66.121.69
Sep 29, 2024 15:16:36.766150951 CEST	49774	80	192.168.2.4	18.66.121.69
Sep 29, 2024 15:16:36.770925999 CEST	80	49774	18.66.121.69	192.168.2.4
Sep 29, 2024 15:16:36.954138994 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:36.995554924 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:37.035558939 CEST	49776	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:37.041344881 CEST	80	49776	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:37.041408062 CEST	49776	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:37.042032957 CEST	49776	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:37.047899008 CEST	80	49776	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:37.384196997 CEST	80	49774	18.66.121.69	192.168.2.4
Sep 29, 2024 15:16:37.384229898 CEST	80	49774	18.66.121.69	192.168.2.4
Sep 29, 2024 15:16:37.384313107 CEST	80	49774	18.66.121.69	192.168.2.4
Sep 29, 2024 15:16:37.384314060 CEST	49774	80	192.168.2.4	18.66.121.69
Sep 29, 2024 15:16:37.384324074 CEST	80	49774	18.66.121.69	192.168.2.4
Sep 29, 2024 15:16:37.384350061 CEST	80	49774	18.66.121.69	192.168.2.4
Sep 29, 2024 15:16:37.384366035 CEST	80	49774	18.66.121.69	192.168.2.4
Sep 29, 2024 15:16:37.384373903 CEST	49774	80	192.168.2.4	18.66.121.69
Sep 29, 2024 15:16:37.384377003 CEST	80	49774	18.66.121.69	192.168.2.4
Sep 29, 2024 15:16:37.384388924 CEST	80	49774	18.66.121.69	192.168.2.4
Sep 29, 2024 15:16:37.384398937 CEST	49774	80	192.168.2.4	18.66.121.69
Sep 29, 2024 15:16:37.384421110 CEST	49774	80	192.168.2.4	18.66.121.69
Sep 29, 2024 15:16:37.384525061 CEST	80	49774	18.66.121.69	192.168.2.4
Sep 29, 2024 15:16:37.384536982 CEST	80	49774	18.66.121.69	192.168.2.4
Sep 29, 2024 15:16:37.384576082 CEST	49774	80	192.168.2.4	18.66.121.69
Sep 29, 2024 15:16:37.389214993 CEST	80	49774	18.66.121.69	192.168.2.4
Sep 29, 2024 15:16:37.406526089 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.420402050 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.420469046 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.424063921 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.424145937 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.428841114 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.429022074 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.432866096 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.432885885 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.442548037 CEST	49774	80	192.168.2.4	18.66.121.69
Sep 29, 2024 15:16:37.470626116 CEST	80	49774	18.66.121.69	192.168.2.4
Sep 29, 2024 15:16:37.470689058 CEST	80	49774	18.66.121.69	192.168.2.4
Sep 29, 2024 15:16:37.470756054 CEST	49774	80	192.168.2.4	18.66.121.69
Sep 29, 2024 15:16:37.474535942 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.687562943 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.687628984 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.687695026 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.687702894 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.687726021 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.687766075 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.687773943 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.693737984 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.693785906 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.693813086 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.693825006 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.693839073 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.693871975 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.699827909 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.699891090 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.699927092 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.706037998 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.706094027 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.706104994 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.708262920 CEST	80	49776	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:37.760538101 CEST	49776	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:37.760807991 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.765428066 CEST	49777	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:37.765499115 CEST	443	49777	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:37.765592098 CEST	49777	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:37.765829086 CEST	49777	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:37.765861988 CEST	443	49777	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:37.775806904 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.776881933 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.776932955 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.776942015 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.783252954 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.783343077 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.783369064 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.783375978 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.783468962 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.789555073 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.796021938 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.796062946 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.796072006 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.802166939 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.802212954 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.802242041 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.802252054 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.802340984 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.808474064 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.814479113 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.814508915 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.814539909 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.814549923 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.814585924 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.815766096 CEST	49778	80	192.168.2.4	18.66.121.190
Sep 29, 2024 15:16:37.820405006 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.820533991 CEST	80	49778	18.66.121.190	192.168.2.4
Sep 29, 2024 15:16:37.820594072 CEST	49778	80	192.168.2.4	18.66.121.190
Sep 29, 2024 15:16:37.820928097 CEST	49778	80	192.168.2.4	18.66.121.190
Sep 29, 2024 15:16:37.825733900 CEST	80	49778	18.66.121.190	192.168.2.4
Sep 29, 2024 15:16:37.826344013 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.826380014 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.826414108 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.826423883 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.826462984 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.832087994 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.838007927 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.838056087 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.838066101 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.838078022 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.838121891 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.838129997 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.864437103 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.864487886 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.864502907 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.864541054 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.864593029 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.864600897 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.864619970 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.864677906 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.865482092 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.869334936 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.869391918 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.869414091 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.875296116 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.875355959 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.875375032 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.881031036 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.881103039 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.881115913 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.886905909 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.886953115 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.886961937 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.892647982 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.892697096 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.892704010 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.898078918 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.898154020 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.898161888 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.903561115 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.903614998 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.903623104 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.908693075 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.908746958 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.908760071 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.914073944 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.914124012 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.914133072 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.918920040 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.918967009 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.918976068 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.923661947 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.923719883 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.923727036 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.928164005 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.928224087 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.928236008 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.932656050 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.932712078 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.932727098 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.936465025 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.936542988 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.936551094 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.940359116 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.940413952 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.940422058 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.944374084 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.944430113 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.944437027 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.948241949 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.948291063 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.948297024 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.951996088 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.952045918 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.952054024 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.956336021 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.956685066 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.956692934 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.958210945 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.958266020 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.958271980 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.960530996 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.960603952 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.960608006 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.960637093 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.960680008 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.962923050 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.965173960 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.965231895 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.965240002 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.967468977 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.967546940 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.967550993 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.967575073 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.967617989 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.969791889 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.972058058 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.972100019 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.972125053 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.972134113 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.972171068 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.974381924 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.976840973 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.976896048 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.976903915 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.978940964 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.978991032 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.978996992 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.981451988 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.981524944 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.981530905 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.983782053 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.983846903 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.983853102 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.986118078 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.986171007 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.986179113 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.988488913 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.988553047 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.988560915 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.990686893 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.990735054 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.990736008 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.990748882 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.990842104 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:37.993206024 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.993365049 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:37.993417025 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:38.032246113 CEST	49775	443	192.168.2.4	142.250.74.196
Sep 29, 2024 15:16:38.032274961 CEST	443	49775	142.250.74.196	192.168.2.4
Sep 29, 2024 15:16:38.236644983 CEST	49779	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:38.236680984 CEST	443	49779	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:38.236738920 CEST	49779	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:38.237092018 CEST	49780	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:38.237133980 CEST	443	49780	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:38.237251997 CEST	49780	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:38.237909079 CEST	49779	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:38.237922907 CEST	443	49779	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:38.238533974 CEST	49780	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:38.238547087 CEST	443	49780	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:38.413336992 CEST	443	49777	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:38.414450884 CEST	49777	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:38.414484978 CEST	443	49777	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:38.415946960 CEST	443	49777	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:38.416008949 CEST	49777	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:38.417423964 CEST	49777	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:38.417503119 CEST	443	49777	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:38.440191031 CEST	80	49778	18.66.121.190	192.168.2.4
Sep 29, 2024 15:16:38.440280914 CEST	80	49778	18.66.121.190	192.168.2.4
Sep 29, 2024 15:16:38.440320015 CEST	80	49778	18.66.121.190	192.168.2.4
Sep 29, 2024 15:16:38.440330982 CEST	80	49778	18.66.121.190	192.168.2.4
Sep 29, 2024 15:16:38.440334082 CEST	49778	80	192.168.2.4	18.66.121.190
Sep 29, 2024 15:16:38.440388918 CEST	80	49778	18.66.121.190	192.168.2.4
Sep 29, 2024 15:16:38.440402031 CEST	80	49778	18.66.121.190	192.168.2.4
Sep 29, 2024 15:16:38.440387964 CEST	49778	80	192.168.2.4	18.66.121.190
Sep 29, 2024 15:16:38.440454006 CEST	49778	80	192.168.2.4	18.66.121.190
Sep 29, 2024 15:16:38.440507889 CEST	80	49778	18.66.121.190	192.168.2.4
Sep 29, 2024 15:16:38.440520048 CEST	80	49778	18.66.121.190	192.168.2.4
Sep 29, 2024 15:16:38.440531015 CEST	80	49778	18.66.121.190	192.168.2.4
Sep 29, 2024 15:16:38.440541029 CEST	80	49778	18.66.121.190	192.168.2.4
Sep 29, 2024 15:16:38.440563917 CEST	49778	80	192.168.2.4	18.66.121.190
Sep 29, 2024 15:16:38.440598011 CEST	49778	80	192.168.2.4	18.66.121.190
Sep 29, 2024 15:16:38.445173025 CEST	80	49778	18.66.121.190	192.168.2.4
Sep 29, 2024 15:16:38.445184946 CEST	80	49778	18.66.121.190	192.168.2.4
Sep 29, 2024 15:16:38.445250988 CEST	49778	80	192.168.2.4	18.66.121.190
Sep 29, 2024 15:16:38.463558912 CEST	49777	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:38.463593960 CEST	443	49777	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:38.511533022 CEST	49777	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:38.877583981 CEST	443	49780	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:38.878279924 CEST	49780	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:38.878290892 CEST	443	49780	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:38.879365921 CEST	443	49780	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:38.879441977 CEST	49780	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:38.880043030 CEST	49780	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:38.880105019 CEST	443	49780	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:38.880408049 CEST	49780	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:38.880414009 CEST	443	49780	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:38.883151054 CEST	443	49779	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:38.883439064 CEST	49779	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:38.883450985 CEST	443	49779	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:38.887295008 CEST	443	49779	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:38.887362003 CEST	49779	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:38.888451099 CEST	49779	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:38.888622999 CEST	443	49779	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:38.888823032 CEST	49779	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:38.888833046 CEST	443	49779	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:38.926048994 CEST	49780	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:38.941905975 CEST	49779	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:39.175035954 CEST	443	49780	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.175075054 CEST	443	49780	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.175190926 CEST	49780	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:39.175203085 CEST	443	49780	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.175343990 CEST	443	49780	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.175394058 CEST	49780	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:39.176784992 CEST	49781	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:39.176876068 CEST	443	49781	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.176884890 CEST	49780	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:39.176902056 CEST	443	49780	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.177031040 CEST	49781	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:39.177464962 CEST	49781	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:39.177499056 CEST	443	49781	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.337438107 CEST	443	49779	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.337574959 CEST	443	49779	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.337668896 CEST	443	49779	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.337673903 CEST	49779	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:39.337697983 CEST	443	49779	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.337748051 CEST	49779	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:39.337785006 CEST	443	49779	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.343132019 CEST	443	49779	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.343219042 CEST	49779	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:39.343225956 CEST	443	49779	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.343251944 CEST	443	49779	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.343317032 CEST	49779	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:39.343362093 CEST	443	49779	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.349740028 CEST	443	49779	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.349814892 CEST	49779	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:39.349829912 CEST	443	49779	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.355972052 CEST	443	49779	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.356132030 CEST	49779	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:39.356141090 CEST	443	49779	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.402904034 CEST	49779	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:39.425632000 CEST	443	49779	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.426147938 CEST	443	49779	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.426215887 CEST	49779	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:39.426218987 CEST	443	49779	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.426269054 CEST	443	49779	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.426522017 CEST	49779	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:39.432610035 CEST	443	49779	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.438838959 CEST	443	49779	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.438896894 CEST	49779	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:39.438915014 CEST	443	49779	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.438940048 CEST	443	49779	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.439106941 CEST	49779	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:39.445111036 CEST	443	49779	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.451423883 CEST	443	49779	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.451513052 CEST	443	49779	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.451529980 CEST	49779	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:39.451545000 CEST	443	49779	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.451596022 CEST	49779	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:39.457756996 CEST	443	49779	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.463557959 CEST	443	49779	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.463629961 CEST	49779	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:39.463645935 CEST	443	49779	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.463785887 CEST	443	49779	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.463912010 CEST	49779	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:39.463918924 CEST	443	49779	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.463980913 CEST	443	49779	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.464093924 CEST	49779	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:39.468763113 CEST	49779	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:39.468782902 CEST	443	49779	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.492188931 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:39.492305994 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.492388010 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:39.492831945 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:39.492867947 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.827275038 CEST	443	49781	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.836663008 CEST	49781	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:39.836708069 CEST	443	49781	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.837121964 CEST	443	49781	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.841197014 CEST	49781	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:39.841284990 CEST	443	49781	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:39.842694998 CEST	49781	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:39.887413979 CEST	443	49781	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.121731997 CEST	443	49781	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.121812105 CEST	443	49781	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.121875048 CEST	49781	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.126696110 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.144998074 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.145019054 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.146215916 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.183933973 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.184169054 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.184468031 CEST	49781	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.184489012 CEST	443	49781	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.186057091 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.231400013 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.247565985 CEST	80	49772	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:40.247612953 CEST	49772	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:40.404233932 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.404331923 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.404388905 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.404414892 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.404515028 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.404606104 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.404609919 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.404625893 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.404664993 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.410084963 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.410223961 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.410275936 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.410283089 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.424338102 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.424446106 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.424519062 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.424529076 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.424539089 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.424591064 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.490817070 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.492566109 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.492656946 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.492666006 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.492680073 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.492732048 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.498909950 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.505403996 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.505475044 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.505485058 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.511382103 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.511476994 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.511485100 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.517730951 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.517802954 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.517867088 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.517875910 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.517930984 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.524108887 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.529706001 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.529783964 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.529824972 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.529834986 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.529902935 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.535784960 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.541619062 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.541701078 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.541703939 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.541717052 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.541765928 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.547524929 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.553360939 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.553436041 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.553442955 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.553531885 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.553577900 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.553585052 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.577610970 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.577686071 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.577732086 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.577744961 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.577940941 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.577955008 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.579235077 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.579370022 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.579376936 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.584454060 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.584542990 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.584549904 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.590329885 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.590562105 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.590569973 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.596082926 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.596163034 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.596170902 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.601984978 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.602051973 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.602060080 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.608793974 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.608849049 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.608855963 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.614140987 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.614207983 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.614216089 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.619132996 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.619318008 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.619329929 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.624460936 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.624535084 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.624543905 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.629810095 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.629890919 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.629899025 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.634797096 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.634979963 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.634987116 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.639308929 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.639374971 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.639380932 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.642587900 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.642674923 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.642682076 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.646799088 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.646857023 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.646864891 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.650979996 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.651053905 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.651061058 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.654875040 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.655006886 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.655014992 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.660089970 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.660155058 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.660161972 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.663548946 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.663599968 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.663608074 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.667404890 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.667460918 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.667468071 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.671191931 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.671251059 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.671258926 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.673584938 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.673660040 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.673666954 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.676184893 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.676244974 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.676253080 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.676260948 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.676306963 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.678150892 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.680512905 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.680573940 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.680610895 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.680618048 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.680717945 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.682820082 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.685172081 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.685241938 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.685287952 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.685296059 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.685349941 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.687483072 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.689732075 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.689781904 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.689789057 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.692137003 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.692215919 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.692217112 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.692231894 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.692346096 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.694571972 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.696089983 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.696146011 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.696154118 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.699620008 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.699769020 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.699803114 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.699811935 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.700033903 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.701210022 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.703632116 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.703690052 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.703696966 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.705157995 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.705219984 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.705226898 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.705239058 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.705293894 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.707334995 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.707648039 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.707710028 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.707842112 CEST	49782	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.707859993 CEST	443	49782	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.955791950 CEST	49772	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:40.960673094 CEST	80	49772	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:40.970834970 CEST	49783	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.970869064 CEST	443	49783	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:40.970942020 CEST	49783	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.971683025 CEST	49783	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:40.971693039 CEST	443	49783	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:41.015538931 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:41.020397902 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:41.125575066 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:41.125632048 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:41.125703096 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:41.125991106 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:41.126010895 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:41.214591026 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:41.259238005 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:41.399993896 CEST	49786	443	192.168.2.4	172.217.18.100
Sep 29, 2024 15:16:41.400033951 CEST	443	49786	172.217.18.100	192.168.2.4
Sep 29, 2024 15:16:41.400114059 CEST	49786	443	192.168.2.4	172.217.18.100
Sep 29, 2024 15:16:41.400357962 CEST	49786	443	192.168.2.4	172.217.18.100
Sep 29, 2024 15:16:41.400371075 CEST	443	49786	172.217.18.100	192.168.2.4
Sep 29, 2024 15:16:41.508909941 CEST	49776	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:41.513819933 CEST	80	49776	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:41.609031916 CEST	443	49783	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:41.609536886 CEST	49783	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:41.609555006 CEST	443	49783	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:41.610636950 CEST	443	49783	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:41.611083031 CEST	49783	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:41.611227989 CEST	443	49783	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:41.659224987 CEST	49783	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:41.710719109 CEST	80	49776	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:41.764245033 CEST	49776	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:41.765080929 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:41.812226057 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:41.832633972 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:41.832653046 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:41.833137989 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:41.833823919 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:41.833899975 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:41.833959103 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:41.875420094 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.028322935 CEST	443	49786	172.217.18.100	192.168.2.4
Sep 29, 2024 15:16:42.049643040 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.049681902 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.049706936 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.049743891 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.049746037 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.049766064 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.049794912 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.055515051 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.055562973 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.055577040 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.055592060 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.055636883 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.055649996 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.061989069 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.062083960 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.062108994 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.068176985 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.068236113 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.068252087 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.082235098 CEST	49786	443	192.168.2.4	172.217.18.100
Sep 29, 2024 15:16:42.114295959 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.138037920 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.138986111 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.139033079 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.139158010 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.139184952 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.139249086 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.145417929 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.151580095 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.151638985 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.151774883 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.151799917 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.151879072 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.157875061 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.164366007 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.164400101 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.164539099 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.164563894 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.164625883 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.170546055 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.176444054 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.176481009 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.176517963 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.176538944 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.176692963 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.182231903 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.188396931 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.188438892 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.188465118 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.188503981 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.188664913 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.194169044 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.199930906 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.199964046 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.199995995 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.200004101 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.200015068 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.200054884 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.226655960 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.226730108 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.226754904 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.226779938 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.226804972 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.226804972 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.226828098 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.226866961 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.227406025 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.231168032 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.231218100 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.231228113 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.236603975 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.236666918 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.236675978 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.242064953 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.242130995 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.242141962 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.247374058 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.247435093 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.247443914 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.252985954 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.253055096 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.253063917 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.258269072 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.258332014 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.258341074 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.263601065 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.263659954 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.263669014 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.269036055 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.269095898 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.269104958 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.274203062 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.274262905 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.274272919 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.279069901 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.279135942 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.279145956 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.283675909 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.283727884 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.283736944 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.288311958 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.288352966 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.288363934 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.292841911 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.292880058 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.292890072 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.296921968 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.296962023 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.296972990 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.300930977 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.300981045 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.300993919 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.304768085 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.304809093 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.304819107 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.305001020 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.308675051 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.308743954 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.308753014 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.312463045 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.312525988 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.312535048 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.316298008 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.316354036 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.316364050 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.319400072 CEST	49786	443	192.168.2.4	172.217.18.100
Sep 29, 2024 15:16:42.319418907 CEST	443	49786	172.217.18.100	192.168.2.4
Sep 29, 2024 15:16:42.320409060 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.320432901 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.320466042 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.320477009 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.320518970 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.320653915 CEST	443	49786	172.217.18.100	192.168.2.4
Sep 29, 2024 15:16:42.320667982 CEST	443	49786	172.217.18.100	192.168.2.4
Sep 29, 2024 15:16:42.320718050 CEST	49786	443	192.168.2.4	172.217.18.100
Sep 29, 2024 15:16:42.322493076 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.324769020 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.324793100 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.324817896 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.324829102 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.324870110 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.327075958 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.329427004 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.329458952 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.329485893 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.329495907 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.329535007 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.331599951 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.334096909 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.334120989 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.334147930 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.334158897 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.334202051 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.336406946 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.338712931 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.338747025 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.338773012 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.338781118 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.338846922 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.341047049 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.343419075 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.343460083 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.343487024 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.343497038 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.343542099 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.345798016 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.348162889 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.348201036 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.348213911 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.348222017 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.348267078 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.350449085 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.352600098 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.352638006 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.352654934 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.352663994 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.352701902 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.354960918 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.355112076 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.355154037 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.396800041 CEST	49786	443	192.168.2.4	172.217.18.100
Sep 29, 2024 15:16:42.396923065 CEST	443	49786	172.217.18.100	192.168.2.4
Sep 29, 2024 15:16:42.397576094 CEST	49786	443	192.168.2.4	172.217.18.100
Sep 29, 2024 15:16:42.397595882 CEST	443	49786	172.217.18.100	192.168.2.4
Sep 29, 2024 15:16:42.412890911 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.416518927 CEST	49785	443	192.168.2.4	142.250.186.174
Sep 29, 2024 15:16:42.416538000 CEST	443	49785	142.250.186.174	192.168.2.4
Sep 29, 2024 15:16:42.449242115 CEST	49786	443	192.168.2.4	172.217.18.100
Sep 29, 2024 15:16:42.485281944 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:42.490067005 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:42.587119102 CEST	443	49786	172.217.18.100	192.168.2.4
Sep 29, 2024 15:16:42.587194920 CEST	443	49786	172.217.18.100	192.168.2.4
Sep 29, 2024 15:16:42.587244987 CEST	49786	443	192.168.2.4	172.217.18.100
Sep 29, 2024 15:16:42.590154886 CEST	49786	443	192.168.2.4	172.217.18.100
Sep 29, 2024 15:16:42.590169907 CEST	443	49786	172.217.18.100	192.168.2.4
Sep 29, 2024 15:16:42.625010967 CEST	49789	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:42.625046968 CEST	443	49789	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:42.625104904 CEST	49789	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:42.626327991 CEST	49789	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:42.626339912 CEST	443	49789	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:42.681005955 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:42.699812889 CEST	49776	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:42.704984903 CEST	80	49776	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:42.735220909 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:42.740406990 CEST	49777	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:42.787403107 CEST	443	49777	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:42.894416094 CEST	80	49776	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:42.942359924 CEST	443	49777	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:42.942502022 CEST	443	49777	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:42.942619085 CEST	49777	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:42.943255901 CEST	49777	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:42.943272114 CEST	49776	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:42.943300009 CEST	443	49777	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:42.943335056 CEST	49777	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:42.943429947 CEST	49777	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:43.250176907 CEST	49790	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:43.250217915 CEST	443	49790	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:43.250333071 CEST	49790	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:43.250507116 CEST	49790	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:43.250520945 CEST	443	49790	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:43.321993113 CEST	443	49789	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:43.322722912 CEST	49789	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:43.322731018 CEST	443	49789	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:43.323050976 CEST	443	49789	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:43.323719978 CEST	49789	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:43.323788881 CEST	443	49789	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:43.324163914 CEST	49789	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:43.371397972 CEST	443	49789	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:43.601567030 CEST	443	49789	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:43.601659060 CEST	443	49789	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:43.601778984 CEST	49789	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:43.602758884 CEST	49789	443	192.168.2.4	142.250.184.196
Sep 29, 2024 15:16:43.602767944 CEST	443	49789	142.250.184.196	192.168.2.4
Sep 29, 2024 15:16:43.953474998 CEST	443	49790	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:43.953746080 CEST	49790	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:43.953763008 CEST	443	49790	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:43.954224110 CEST	443	49790	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:43.954567909 CEST	49790	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:43.954649925 CEST	443	49790	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:43.954761028 CEST	49790	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:43.999398947 CEST	443	49790	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:44.244025946 CEST	443	49790	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:44.244342089 CEST	443	49790	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:44.244545937 CEST	49790	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:44.244684935 CEST	49790	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:44.244684935 CEST	49790	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:44.244704962 CEST	443	49790	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:44.244786024 CEST	49790	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:44.614706993 CEST	49791	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:44.619776011 CEST	80	49791	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:44.619910002 CEST	49791	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:44.975440025 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:44.980514050 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:45.195298910 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:45.195344925 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:45.195403099 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:45.195421934 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:45.195446014 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:45.195497990 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:45.195547104 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:45.195782900 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:45.195899010 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:45.195913076 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:45.236922979 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:45.241797924 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:45.436332941 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:45.444494009 CEST	49776	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:45.451937914 CEST	80	49776	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:45.457582951 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:45.462626934 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:45.465383053 CEST	49792	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:45.465490103 CEST	443	49792	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:45.465708971 CEST	49792	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:45.466284990 CEST	49792	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:45.466325045 CEST	443	49792	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:45.521223068 CEST	49783	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:45.521523952 CEST	443	49783	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:45.522707939 CEST	49793	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:45.522749901 CEST	443	49793	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:45.522882938 CEST	49793	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:45.524804115 CEST	49793	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:45.524816036 CEST	443	49793	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:45.646347046 CEST	80	49776	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:45.658952951 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:45.700545073 CEST	49776	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:45.700551033 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:45.959944010 CEST	443	49783	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:45.960082054 CEST	443	49783	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:45.960146904 CEST	49783	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:45.960169077 CEST	443	49783	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:45.960246086 CEST	443	49783	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:45.960335970 CEST	443	49783	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:45.960408926 CEST	49783	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:45.960412025 CEST	443	49783	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:45.960443020 CEST	443	49783	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:45.960479975 CEST	49783	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:45.965425968 CEST	443	49783	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:45.965622902 CEST	49783	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:45.965632915 CEST	443	49783	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:45.971574068 CEST	443	49783	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:45.971793890 CEST	49783	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:45.971801996 CEST	443	49783	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:45.977864027 CEST	443	49783	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:45.977948904 CEST	49783	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:45.977962971 CEST	443	49783	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:46.026952028 CEST	49783	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:46.047187090 CEST	443	49783	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:46.048752069 CEST	443	49783	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:46.048830032 CEST	49783	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:46.048831940 CEST	443	49783	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:46.048863888 CEST	443	49783	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:46.050013065 CEST	49783	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:46.054775000 CEST	443	49783	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:46.060725927 CEST	443	49783	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:46.060797930 CEST	443	49783	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:46.060806036 CEST	49783	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:46.060823917 CEST	443	49783	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:46.060895920 CEST	49783	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:46.066895962 CEST	443	49783	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:46.073260069 CEST	443	49783	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:46.073314905 CEST	49783	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:46.073334932 CEST	443	49783	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:46.079364061 CEST	443	49783	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:46.079472065 CEST	443	49783	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:46.079495907 CEST	49783	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:46.079505920 CEST	443	49783	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:46.079547882 CEST	49783	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:46.079560995 CEST	443	49783	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:46.085485935 CEST	443	49783	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:46.085546017 CEST	49783	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:46.106920004 CEST	443	49792	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:46.127666950 CEST	49783	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:46.127691031 CEST	443	49783	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:46.134658098 CEST	49792	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:46.134720087 CEST	443	49792	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:46.135293961 CEST	443	49792	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:46.135690928 CEST	49792	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:46.135803938 CEST	443	49792	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:46.149085999 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:46.154661894 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:46.157259941 CEST	443	49793	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:46.165601969 CEST	49793	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:46.165616989 CEST	443	49793	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:46.166037083 CEST	443	49793	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:46.167582989 CEST	49793	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:46.167649984 CEST	443	49793	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:46.168123960 CEST	49793	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:46.181911945 CEST	49792	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:46.215410948 CEST	443	49793	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:46.349854946 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:46.402554035 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:46.465531111 CEST	443	49793	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:46.465811014 CEST	443	49793	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:46.465888977 CEST	49793	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:46.504143000 CEST	49793	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:46.504169941 CEST	443	49793	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:46.548341990 CEST	49795	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:46.548398018 CEST	443	49795	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:46.548640013 CEST	49795	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:46.549988985 CEST	49795	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:46.550019026 CEST	443	49795	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:46.607407093 CEST	49776	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:46.612375975 CEST	80	49776	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:46.804693937 CEST	80	49776	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:46.854792118 CEST	49776	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:47.208733082 CEST	443	49795	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:47.209151983 CEST	49795	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:47.209184885 CEST	443	49795	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:47.209530115 CEST	443	49795	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:47.210108042 CEST	49795	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:47.210175037 CEST	443	49795	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:47.210289001 CEST	49795	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:47.255413055 CEST	443	49795	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:47.500082970 CEST	443	49795	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:47.500163078 CEST	443	49795	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:47.500250101 CEST	49795	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:47.512473106 CEST	49795	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:47.512499094 CEST	443	49795	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:47.888703108 CEST	49792	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:47.931443930 CEST	443	49792	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:48.086482048 CEST	443	49792	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:48.086560965 CEST	443	49792	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:48.086622000 CEST	49792	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:48.088037968 CEST	49792	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:48.088094950 CEST	443	49792	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:48.436558008 CEST	49796	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:48.436621904 CEST	443	49796	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:48.436695099 CEST	49796	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:48.437174082 CEST	49796	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:48.437194109 CEST	443	49796	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:49.073235035 CEST	443	49796	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:49.073564053 CEST	49796	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:49.073584080 CEST	443	49796	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:49.074734926 CEST	443	49796	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:49.075292110 CEST	49796	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:49.075292110 CEST	49796	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:49.075309992 CEST	443	49796	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:49.075488091 CEST	443	49796	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:49.123341084 CEST	49796	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:49.359977961 CEST	443	49796	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:49.360697031 CEST	443	49796	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:49.360807896 CEST	49796	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:49.408546925 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:49.408900976 CEST	49796	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:49.408921003 CEST	443	49796	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:49.408951998 CEST	49796	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:49.409015894 CEST	49796	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:49.413458109 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:49.629496098 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:49.629535913 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:49.629548073 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:49.629671097 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:49.629713058 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:49.629952908 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:49.629988909 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:49.630136013 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:49.630332947 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:50.171901941 CEST	80	49791	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:50.171969891 CEST	49791	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:50.183836937 CEST	49791	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:50.184277058 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:50.188725948 CEST	80	49791	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:50.189117908 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:50.383219957 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:50.430011034 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:50.435051918 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:50.446254969 CEST	49797	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:50.446302891 CEST	443	49797	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:50.446367979 CEST	49797	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:50.452107906 CEST	49797	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:50.452121973 CEST	443	49797	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:50.598516941 CEST	49798	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:50.598567963 CEST	443	49798	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:50.598623037 CEST	49798	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:50.599452019 CEST	49798	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:50.599467039 CEST	443	49798	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:50.600186110 CEST	49799	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:50.600286007 CEST	443	49799	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:50.600364923 CEST	49799	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:50.601010084 CEST	49799	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:50.601052046 CEST	443	49799	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:50.631829023 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:50.686331987 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:51.083275080 CEST	443	49797	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:51.083897114 CEST	49797	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:51.083924055 CEST	443	49797	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:51.084386110 CEST	443	49797	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:51.084882021 CEST	49797	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:51.084971905 CEST	443	49797	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:51.131319046 CEST	49797	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:51.234654903 CEST	443	49798	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:51.235002995 CEST	49798	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:51.235025883 CEST	443	49798	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:51.236107111 CEST	443	49799	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:51.236243963 CEST	443	49798	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:51.236293077 CEST	49799	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:51.236331940 CEST	443	49799	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:51.236567020 CEST	49798	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:51.236700058 CEST	49798	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:51.236746073 CEST	443	49799	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:51.236754894 CEST	443	49798	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:51.237262011 CEST	49799	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:51.237345934 CEST	443	49799	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:51.237397909 CEST	49799	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:51.283411026 CEST	443	49799	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:51.291335106 CEST	49799	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:51.291342974 CEST	49798	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:51.461319923 CEST	49776	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:51.466300011 CEST	80	49776	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:51.524954081 CEST	443	49799	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:51.525036097 CEST	443	49799	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:51.525111914 CEST	49799	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:51.525717974 CEST	49799	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:51.525759935 CEST	443	49799	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:51.527810097 CEST	49800	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:51.527853966 CEST	443	49800	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:51.527997971 CEST	49800	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:51.580769062 CEST	49800	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:51.580794096 CEST	443	49800	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:51.659286022 CEST	80	49776	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:51.707442999 CEST	49776	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:51.734985113 CEST	443	49798	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:51.735105038 CEST	443	49798	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:51.735197067 CEST	443	49798	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:51.735227108 CEST	49798	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:51.735245943 CEST	443	49798	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:51.735326052 CEST	49798	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:51.735333920 CEST	443	49798	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:51.758269072 CEST	443	49798	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:51.758455038 CEST	443	49798	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:51.758477926 CEST	49798	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:51.758490086 CEST	443	49798	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:51.758552074 CEST	49798	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:51.758559942 CEST	443	49798	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:51.758672953 CEST	443	49798	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:51.758724928 CEST	49798	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:51.758733988 CEST	443	49798	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:51.758810997 CEST	443	49798	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:51.759063005 CEST	49798	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:51.759071112 CEST	443	49798	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:51.803445101 CEST	49798	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:51.820890903 CEST	443	49798	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:51.823858976 CEST	443	49798	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:51.823971033 CEST	49798	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:51.823987007 CEST	443	49798	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:51.830385923 CEST	443	49798	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:51.830460072 CEST	443	49798	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:51.830482006 CEST	49798	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:51.830492973 CEST	443	49798	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:51.830542088 CEST	49798	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:51.836760044 CEST	443	49798	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:51.842813969 CEST	443	49798	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:51.842875004 CEST	49798	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:51.842884064 CEST	443	49798	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:51.849013090 CEST	443	49798	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:51.849087000 CEST	443	49798	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:51.849104881 CEST	49798	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:51.849112988 CEST	443	49798	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:51.849164963 CEST	49798	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:51.855216980 CEST	443	49798	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:51.855429888 CEST	443	49798	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:51.855524063 CEST	49798	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:51.855530977 CEST	443	49798	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:51.855611086 CEST	443	49798	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:51.855680943 CEST	49798	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:51.902498960 CEST	49798	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:51.902549028 CEST	443	49798	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:51.909853935 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:51.914800882 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:52.112728119 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:52.154464960 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:52.237657070 CEST	443	49800	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:52.281446934 CEST	49800	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:52.796252012 CEST	49800	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:52.796283007 CEST	443	49800	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:52.796802044 CEST	443	49800	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:52.797636986 CEST	49800	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:52.797714949 CEST	443	49800	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:52.797998905 CEST	49800	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:52.839406967 CEST	443	49800	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:53.221410036 CEST	443	49800	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:53.221507072 CEST	443	49800	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:53.221568108 CEST	49800	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:53.222042084 CEST	49800	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:16:53.222064018 CEST	443	49800	142.250.185.142	192.168.2.4
Sep 29, 2024 15:16:53.314806938 CEST	49776	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:53.322525024 CEST	80	49776	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:53.512851000 CEST	80	49776	185.53.179.172	192.168.2.4
Sep 29, 2024 15:16:53.553937912 CEST	49776	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:16:54.407651901 CEST	49797	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:54.455406904 CEST	443	49797	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:54.605457067 CEST	443	49797	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:54.605607033 CEST	443	49797	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:54.605670929 CEST	49797	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:54.606146097 CEST	49797	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:54.606167078 CEST	443	49797	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:55.346381903 CEST	49802	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:55.346445084 CEST	443	49802	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:55.346498013 CEST	49802	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:55.347083092 CEST	49802	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:55.347099066 CEST	443	49802	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:55.978118896 CEST	443	49802	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:55.978385925 CEST	49802	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:55.978430986 CEST	443	49802	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:55.978931904 CEST	443	49802	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:55.979233980 CEST	49802	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:55.979317904 CEST	443	49802	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:55.979360104 CEST	49802	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:56.019403934 CEST	443	49802	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:56.029242039 CEST	49802	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:56.380907059 CEST	443	49802	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:56.381004095 CEST	443	49802	172.217.18.14	192.168.2.4
Sep 29, 2024 15:16:56.381093025 CEST	49802	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:56.387037992 CEST	49802	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:16:56.387084007 CEST	443	49802	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:02.577147007 CEST	49803	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:02.582117081 CEST	80	49803	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:02.583264112 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:02.583599091 CEST	49803	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:02.588191986 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:02.805805922 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:02.805864096 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:02.805881977 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:02.805895090 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:02.805943966 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:02.805969954 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:02.805982113 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:02.806039095 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:02.806080103 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:02.839777946 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:02.844733953 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:03.040004015 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:03.078358889 CEST	49776	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:03.083170891 CEST	80	49776	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:03.086478949 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:03.091315985 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:03.095257998 CEST	49804	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:03.095295906 CEST	443	49804	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:03.095359087 CEST	49804	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:03.095634937 CEST	49804	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:03.095647097 CEST	443	49804	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:03.147069931 CEST	49805	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:03.147119045 CEST	443	49805	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:03.147177935 CEST	49805	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:03.147526026 CEST	49805	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:03.147542953 CEST	443	49805	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:03.162223101 CEST	49806	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:03.162260056 CEST	443	49806	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:03.162322044 CEST	49806	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:03.162501097 CEST	49806	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:03.162520885 CEST	443	49806	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:03.276058912 CEST	80	49776	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:03.294445992 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:03.328800917 CEST	49776	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:03.344835997 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:03.726552963 CEST	443	49804	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:03.726927042 CEST	49804	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:03.726959944 CEST	443	49804	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:03.727423906 CEST	443	49804	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:03.728153944 CEST	49804	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:03.728224993 CEST	443	49804	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:03.774946928 CEST	49804	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:03.806444883 CEST	443	49805	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:03.806826115 CEST	49805	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:03.806859016 CEST	443	49805	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:03.807180882 CEST	443	49805	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:03.807693005 CEST	49805	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:03.807756901 CEST	443	49805	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:03.808087111 CEST	49805	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:03.809938908 CEST	443	49806	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:03.810118914 CEST	49806	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:03.810128927 CEST	443	49806	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:03.810461998 CEST	443	49806	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:03.810884953 CEST	49806	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:03.810949087 CEST	443	49806	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:03.811063051 CEST	49806	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:03.811094046 CEST	443	49806	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:03.851418018 CEST	443	49805	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:04.106767893 CEST	443	49805	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:04.106856108 CEST	443	49805	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:04.107260942 CEST	49805	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:04.107287884 CEST	443	49805	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:04.107319117 CEST	49805	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:04.107862949 CEST	49805	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:04.122301102 CEST	49807	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:04.122351885 CEST	443	49807	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:04.122459888 CEST	49807	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:04.124073029 CEST	49807	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:04.124099970 CEST	443	49807	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:04.315586090 CEST	443	49806	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:04.315629959 CEST	443	49806	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:04.315654993 CEST	443	49806	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:04.315674067 CEST	443	49806	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:04.315701962 CEST	443	49806	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:04.315707922 CEST	49806	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:04.315733910 CEST	443	49806	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:04.315767050 CEST	49806	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:04.317222118 CEST	49806	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:04.321394920 CEST	443	49806	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:04.321425915 CEST	443	49806	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:04.321491957 CEST	49806	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:04.321505070 CEST	443	49806	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:04.327810049 CEST	443	49806	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:04.328042984 CEST	49806	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:04.328053951 CEST	443	49806	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:04.333853006 CEST	443	49806	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:04.334034920 CEST	49806	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:04.334045887 CEST	443	49806	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:04.384437084 CEST	49806	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:04.405939102 CEST	443	49806	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:04.405987024 CEST	443	49806	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:04.406055927 CEST	443	49806	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:04.406070948 CEST	49806	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:04.406085968 CEST	443	49806	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:04.406282902 CEST	49806	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:04.410509109 CEST	443	49806	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:04.416683912 CEST	443	49806	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:04.416704893 CEST	443	49806	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:04.416812897 CEST	49806	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:04.416825056 CEST	443	49806	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:04.416950941 CEST	49806	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:04.422883034 CEST	443	49806	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:04.429294109 CEST	443	49806	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:04.429322958 CEST	443	49806	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:04.429395914 CEST	49806	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:04.429409027 CEST	443	49806	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:04.429512024 CEST	49806	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:04.435543060 CEST	443	49806	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:04.441412926 CEST	443	49806	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:04.441548109 CEST	443	49806	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:04.441561937 CEST	49806	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:04.441694975 CEST	49806	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:04.457802057 CEST	49806	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:04.457833052 CEST	443	49806	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:04.771837950 CEST	443	49807	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:04.822078943 CEST	49807	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:04.939512014 CEST	49807	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:04.939526081 CEST	443	49807	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:04.940100908 CEST	443	49807	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:04.940259933 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:04.941026926 CEST	49807	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:04.941117048 CEST	443	49807	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:04.941673040 CEST	49807	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:04.945435047 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:04.945456028 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:04.983411074 CEST	443	49807	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:05.145020962 CEST	443	49807	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:05.145149946 CEST	443	49807	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:05.145193100 CEST	49807	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:05.255460024 CEST	49807	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:05.255484104 CEST	443	49807	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:05.282840967 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:05.324960947 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:05.585408926 CEST	49776	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:05.591325998 CEST	80	49776	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:05.783898115 CEST	80	49776	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:05.834280968 CEST	49776	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:06.884035110 CEST	49804	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:06.931413889 CEST	443	49804	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:07.087460041 CEST	443	49804	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:07.087677956 CEST	443	49804	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:07.087753057 CEST	49804	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:07.536603928 CEST	49804	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:07.536633968 CEST	443	49804	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:07.539554119 CEST	49808	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:07.539591074 CEST	443	49808	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:07.539700031 CEST	49808	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:07.541214943 CEST	49808	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:07.541228056 CEST	443	49808	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:08.147298098 CEST	80	49803	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:08.147444963 CEST	49803	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:08.166131973 CEST	49803	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:08.171000957 CEST	80	49803	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:08.172023058 CEST	443	49808	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:08.172837973 CEST	49808	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:08.172869921 CEST	443	49808	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:08.173213005 CEST	443	49808	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:08.174974918 CEST	49808	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:08.175060987 CEST	443	49808	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:08.175460100 CEST	49808	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:08.219417095 CEST	443	49808	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:08.239403963 CEST	49810	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:08.244312048 CEST	80	49810	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:08.244549036 CEST	49810	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:08.261107922 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:08.266113043 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:08.463141918 CEST	443	49808	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:08.463324070 CEST	443	49808	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:08.463409901 CEST	49808	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:08.484890938 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:08.484905958 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:08.484918118 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:08.484924078 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:08.484968901 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:08.485002041 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:08.485152960 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:08.485167980 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:08.485204935 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:08.557147980 CEST	49808	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:08.557179928 CEST	443	49808	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:08.723258972 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:08.728176117 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:08.922414064 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:08.956191063 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:08.961153984 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:08.962094069 CEST	49811	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:08.962141991 CEST	443	49811	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:08.962328911 CEST	49811	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:08.962738991 CEST	49811	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:08.962754965 CEST	443	49811	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:09.067728996 CEST	49812	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:09.067766905 CEST	443	49812	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:09.067848921 CEST	49812	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:09.068425894 CEST	49812	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:09.068438053 CEST	443	49812	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:09.069566011 CEST	49813	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:09.069621086 CEST	443	49813	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:09.069807053 CEST	49813	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:09.070168018 CEST	49813	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:09.070187092 CEST	443	49813	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:09.156128883 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:09.200711966 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:09.400352955 CEST	49776	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:09.406475067 CEST	80	49776	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:09.597398996 CEST	80	49776	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:09.615166903 CEST	443	49811	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:09.615547895 CEST	49811	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:09.615575075 CEST	443	49811	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:09.616756916 CEST	443	49811	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:09.617095947 CEST	49811	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:09.617271900 CEST	443	49811	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:09.652708054 CEST	49776	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:09.674698114 CEST	49811	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:09.700993061 CEST	443	49812	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:09.701360941 CEST	49812	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:09.701375961 CEST	443	49812	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:09.701694012 CEST	443	49812	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:09.702370882 CEST	49812	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:09.702429056 CEST	443	49812	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:09.702522039 CEST	49812	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:09.702545881 CEST	443	49812	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:09.720422029 CEST	443	49813	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:09.720643044 CEST	49813	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:09.720666885 CEST	443	49813	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:09.721008062 CEST	443	49813	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:09.721635103 CEST	49813	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:09.721710920 CEST	443	49813	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:09.723521948 CEST	49813	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:09.742719889 CEST	49812	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:09.767410040 CEST	443	49813	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:10.023710012 CEST	443	49813	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:10.023783922 CEST	443	49813	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:10.023910046 CEST	49813	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:10.025299072 CEST	49813	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:10.025324106 CEST	443	49813	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:10.169415951 CEST	49814	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:10.169464111 CEST	443	49814	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:10.169709921 CEST	49814	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:10.169936895 CEST	49814	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:10.169954062 CEST	443	49814	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:10.180293083 CEST	443	49812	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:10.180340052 CEST	443	49812	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:10.180389881 CEST	443	49812	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:10.180428982 CEST	49812	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:10.180448055 CEST	443	49812	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:10.180516958 CEST	443	49812	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:10.180574894 CEST	49812	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:10.180583000 CEST	443	49812	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:10.180640936 CEST	49812	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:10.186238050 CEST	443	49812	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:10.186280966 CEST	443	49812	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:10.186372042 CEST	49812	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:10.186378956 CEST	443	49812	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:10.192591906 CEST	443	49812	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:10.195060968 CEST	49812	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:10.195080042 CEST	443	49812	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:10.198899031 CEST	443	49812	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:10.200469017 CEST	49812	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:10.200476885 CEST	443	49812	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:10.253731966 CEST	49812	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:10.267710924 CEST	443	49812	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:10.269351006 CEST	443	49812	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:10.269427061 CEST	49812	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:10.269437075 CEST	443	49812	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:10.275810957 CEST	443	49812	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:10.275835991 CEST	443	49812	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:10.275866032 CEST	49812	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:10.275872946 CEST	443	49812	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:10.276050091 CEST	49812	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:10.282031059 CEST	443	49812	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:10.288381100 CEST	443	49812	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:10.288419962 CEST	443	49812	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:10.288506985 CEST	49812	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:10.288516045 CEST	443	49812	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:10.288552999 CEST	49812	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:10.294467926 CEST	443	49812	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:10.300765991 CEST	443	49812	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:10.300817966 CEST	49812	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:10.300822973 CEST	443	49812	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:10.300884962 CEST	443	49812	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:10.300930977 CEST	49812	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:10.300935984 CEST	443	49812	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:10.301135063 CEST	443	49812	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:10.301218987 CEST	49812	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:10.383394003 CEST	49812	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:10.383423090 CEST	443	49812	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:10.541038036 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:10.546227932 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:10.747858047 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:10.797717094 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:10.798300028 CEST	443	49814	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:10.893708944 CEST	49814	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:10.967592955 CEST	49814	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:10.967612028 CEST	443	49814	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:10.968122005 CEST	443	49814	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:10.969330072 CEST	49814	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:10.969403028 CEST	443	49814	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:10.969723940 CEST	49814	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:11.015408039 CEST	443	49814	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:11.179240942 CEST	443	49814	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:11.179313898 CEST	443	49814	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:11.179363966 CEST	49814	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:11.523799896 CEST	49814	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:11.523843050 CEST	443	49814	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:11.712053061 CEST	49776	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:11.717067003 CEST	80	49776	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:11.911226988 CEST	80	49776	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:12.089946985 CEST	49776	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:13.148674965 CEST	49811	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:13.191405058 CEST	443	49811	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:13.352976084 CEST	443	49811	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:13.353210926 CEST	443	49811	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:13.353271961 CEST	49811	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:13.353693962 CEST	49811	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:13.353712082 CEST	443	49811	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:13.353775978 CEST	49811	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:13.353775978 CEST	49811	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:13.660381079 CEST	49816	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:13.660439968 CEST	443	49816	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:13.660510063 CEST	49816	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:13.660801888 CEST	49816	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:13.660820007 CEST	443	49816	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:13.817121029 CEST	80	49810	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:13.817291975 CEST	49810	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:14.305097103 CEST	443	49816	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:14.305402040 CEST	49816	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:14.305454969 CEST	443	49816	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:14.306613922 CEST	443	49816	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:14.306992054 CEST	49816	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:14.307159901 CEST	49816	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:14.307163954 CEST	443	49816	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:14.351403952 CEST	443	49816	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:14.366085052 CEST	49816	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:14.613945007 CEST	443	49816	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:14.614113092 CEST	443	49816	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:14.618240118 CEST	49816	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:14.820669889 CEST	49810	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:14.821404934 CEST	49816	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:14.821455002 CEST	443	49816	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:14.825511932 CEST	80	49810	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:15.263086081 CEST	49817	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:15.268053055 CEST	80	49817	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:15.268173933 CEST	49817	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:15.301358938 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:15.306225061 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:15.522397995 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:15.522412062 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:15.522449970 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:15.522480011 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:15.522501945 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:15.522516966 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:15.522548914 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:15.522574902 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:15.522675037 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:15.579567909 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:15.584489107 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:15.778830051 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:15.830091000 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:15.876132965 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:15.881042004 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:15.884195089 CEST	49818	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:15.884253979 CEST	443	49818	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:15.884387970 CEST	49818	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:15.884752035 CEST	49818	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:15.884763956 CEST	443	49818	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:15.966181040 CEST	49819	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:15.966237068 CEST	443	49819	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:15.966303110 CEST	49819	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:15.967406034 CEST	49819	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:15.967422962 CEST	443	49819	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:16.014880896 CEST	49820	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:16.014969110 CEST	443	49820	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:16.015054941 CEST	49820	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:16.015923977 CEST	49820	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:16.015961885 CEST	443	49820	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:16.076760054 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:16.119291067 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:16.293698072 CEST	49821	443	192.168.2.4	172.217.18.100
Sep 29, 2024 15:17:16.293757915 CEST	443	49821	172.217.18.100	192.168.2.4
Sep 29, 2024 15:17:16.293826103 CEST	49821	443	192.168.2.4	172.217.18.100
Sep 29, 2024 15:17:16.294881105 CEST	49821	443	192.168.2.4	172.217.18.100
Sep 29, 2024 15:17:16.294898033 CEST	443	49821	172.217.18.100	192.168.2.4
Sep 29, 2024 15:17:16.554434061 CEST	443	49818	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:16.554699898 CEST	49818	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:16.554722071 CEST	443	49818	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:16.555912018 CEST	443	49818	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:16.556257963 CEST	49818	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:16.556451082 CEST	443	49818	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:16.596259117 CEST	443	49819	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:16.596498013 CEST	49819	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:16.596544981 CEST	443	49819	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:16.596887112 CEST	443	49819	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:16.597300053 CEST	49819	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:16.597368956 CEST	443	49819	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:16.597464085 CEST	49819	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:16.610033035 CEST	49818	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:16.643408060 CEST	443	49819	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:16.653553009 CEST	443	49820	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:16.653759003 CEST	49820	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:16.653817892 CEST	443	49820	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:16.654154062 CEST	443	49820	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:16.654495955 CEST	49820	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:16.654571056 CEST	443	49820	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:16.654634953 CEST	49820	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:16.654673100 CEST	443	49820	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:16.702394962 CEST	49820	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:16.740843058 CEST	49776	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:16.745783091 CEST	80	49776	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:16.892649889 CEST	443	49819	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:16.892796993 CEST	443	49819	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:16.892904043 CEST	49819	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:16.893102884 CEST	49819	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:16.893162012 CEST	443	49819	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:16.893193960 CEST	49819	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:16.893332005 CEST	49819	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:16.894156933 CEST	49824	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:16.894262075 CEST	443	49824	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:16.894340992 CEST	49824	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:16.894644976 CEST	49824	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:16.894680977 CEST	443	49824	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:16.936669111 CEST	443	49821	172.217.18.100	192.168.2.4
Sep 29, 2024 15:17:16.941554070 CEST	49821	443	192.168.2.4	172.217.18.100
Sep 29, 2024 15:17:16.941576004 CEST	443	49821	172.217.18.100	192.168.2.4
Sep 29, 2024 15:17:16.942091942 CEST	443	49821	172.217.18.100	192.168.2.4
Sep 29, 2024 15:17:16.942497969 CEST	49821	443	192.168.2.4	172.217.18.100
Sep 29, 2024 15:17:16.942606926 CEST	443	49821	172.217.18.100	192.168.2.4
Sep 29, 2024 15:17:16.942955971 CEST	80	49776	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:16.982718945 CEST	49821	443	192.168.2.4	172.217.18.100
Sep 29, 2024 15:17:16.996545076 CEST	49776	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:17.222687006 CEST	443	49820	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:17.222726107 CEST	443	49820	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:17.222760916 CEST	443	49820	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:17.222789049 CEST	443	49820	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:17.222791910 CEST	49820	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:17.222815990 CEST	443	49820	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:17.222863913 CEST	49820	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:17.222897053 CEST	443	49820	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:17.222965002 CEST	49820	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:17.228694916 CEST	443	49820	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:17.228746891 CEST	49820	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:17.228763103 CEST	443	49820	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:17.235017061 CEST	443	49820	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:17.235065937 CEST	49820	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:17.235081911 CEST	443	49820	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:17.241183996 CEST	443	49820	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:17.241251945 CEST	49820	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:17.241269112 CEST	443	49820	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:17.295152903 CEST	49820	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:17.311094999 CEST	443	49820	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:17.311878920 CEST	443	49820	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:17.311902046 CEST	443	49820	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:17.311953068 CEST	49820	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:17.311979055 CEST	443	49820	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:17.312252045 CEST	49820	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:17.318248034 CEST	443	49820	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:17.324430943 CEST	443	49820	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:17.324471951 CEST	443	49820	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:17.324534893 CEST	49820	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:17.324552059 CEST	443	49820	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:17.326107025 CEST	49820	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:17.330809116 CEST	443	49820	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:17.337131977 CEST	443	49820	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:17.337158918 CEST	443	49820	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:17.337246895 CEST	49820	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:17.337264061 CEST	443	49820	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:17.338202000 CEST	49820	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:17.343439102 CEST	443	49820	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:17.349663973 CEST	443	49820	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:17.349689007 CEST	443	49820	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:17.349865913 CEST	49820	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:17.349884987 CEST	443	49820	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:17.349951982 CEST	49820	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:17.350713015 CEST	443	49820	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:17.350775003 CEST	443	49820	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:17.350848913 CEST	49820	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:17.527560949 CEST	443	49824	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:17.574340105 CEST	49824	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:17.614012003 CEST	49824	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:17.614063025 CEST	443	49824	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:17.614445925 CEST	443	49824	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:17.617278099 CEST	49824	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:17.617357969 CEST	443	49824	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:17.617948055 CEST	49824	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:17.625567913 CEST	49820	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:17.625607014 CEST	443	49820	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:17.663407087 CEST	443	49824	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:17.811505079 CEST	443	49824	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:17.811619997 CEST	443	49824	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:17.811683893 CEST	49824	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:18.158840895 CEST	49824	443	192.168.2.4	142.250.185.142
Sep 29, 2024 15:17:18.158907890 CEST	443	49824	142.250.185.142	192.168.2.4
Sep 29, 2024 15:17:18.160073996 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:18.165163994 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:18.359338045 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:18.399070978 CEST	49773	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:18.675163984 CEST	49724	80	192.168.2.4	2.16.100.168
Sep 29, 2024 15:17:18.680303097 CEST	80	49724	2.16.100.168	192.168.2.4
Sep 29, 2024 15:17:18.680368900 CEST	49724	80	192.168.2.4	2.16.100.168
Sep 29, 2024 15:17:18.726370096 CEST	49776	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:18.731251001 CEST	80	49776	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:18.923885107 CEST	80	49776	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:18.979101896 CEST	49776	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:20.118915081 CEST	49825	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:20.118956089 CEST	443	49825	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:20.119163036 CEST	49825	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:20.119390965 CEST	49818	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:20.119843006 CEST	49825	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:20.119856119 CEST	443	49825	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:20.163417101 CEST	443	49818	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:20.329623938 CEST	443	49818	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:20.331792116 CEST	443	49818	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:20.331862926 CEST	49818	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:20.366786003 CEST	49818	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:20.366815090 CEST	443	49818	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:20.780770063 CEST	443	49825	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:20.781419992 CEST	49825	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:20.781431913 CEST	443	49825	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:20.781819105 CEST	443	49825	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:20.782397985 CEST	49825	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:20.782484055 CEST	443	49825	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:20.782903910 CEST	49825	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:20.820724964 CEST	80	49817	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:20.820955992 CEST	49817	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:20.827402115 CEST	443	49825	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:21.076082945 CEST	443	49825	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:21.076163054 CEST	443	49825	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:21.076412916 CEST	49825	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:21.076719999 CEST	49825	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:21.076736927 CEST	443	49825	172.217.18.14	192.168.2.4
Sep 29, 2024 15:17:21.076745033 CEST	49825	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:21.076812029 CEST	49825	443	192.168.2.4	172.217.18.14
Sep 29, 2024 15:17:21.245331049 CEST	49817	80	192.168.2.4	185.53.179.172
Sep 29, 2024 15:17:21.253974915 CEST	80	49817	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:22.491871119 CEST	49774	80	192.168.2.4	18.66.121.69
Sep 29, 2024 15:17:22.496710062 CEST	80	49774	18.66.121.69	192.168.2.4
Sep 29, 2024 15:17:23.449649096 CEST	49778	80	192.168.2.4	18.66.121.190
Sep 29, 2024 15:17:23.454500914 CEST	80	49778	18.66.121.190	192.168.2.4
Sep 29, 2024 15:17:26.840051889 CEST	443	49821	172.217.18.100	192.168.2.4
Sep 29, 2024 15:17:26.840122938 CEST	443	49821	172.217.18.100	192.168.2.4
Sep 29, 2024 15:17:26.840204954 CEST	49821	443	192.168.2.4	172.217.18.100
Sep 29, 2024 15:17:28.543598890 CEST	49821	443	192.168.2.4	172.217.18.100
Sep 29, 2024 15:17:28.543638945 CEST	443	49821	172.217.18.100	192.168.2.4
Sep 29, 2024 15:17:33.359596014 CEST	80	49773	185.53.179.172	192.168.2.4
Sep 29, 2024 15:17:33.359750032 CEST	49773	80	192.168.2.4	185.53.179.172

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 15:16:12.285934925 CEST	53	58663	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:12.307084084 CEST	53	49334	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:13.296861887 CEST	53	64056	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:14.220433950 CEST	64967	53	192.168.2.4	1.1.1.1
Sep 29, 2024 15:16:14.220666885 CEST	65520	53	192.168.2.4	1.1.1.1
Sep 29, 2024 15:16:14.318571091 CEST	53	64967	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:14.322228909 CEST	53	65520	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:15.722230911 CEST	54766	53	192.168.2.4	1.1.1.1
Sep 29, 2024 15:16:15.722800016 CEST	62079	53	192.168.2.4	1.1.1.1
Sep 29, 2024 15:16:15.730907917 CEST	53	62079	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:15.735522985 CEST	53	54766	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:15.997689962 CEST	58423	53	192.168.2.4	1.1.1.1
Sep 29, 2024 15:16:15.998089075 CEST	53290	53	192.168.2.4	1.1.1.1
Sep 29, 2024 15:16:16.004843950 CEST	53	58423	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:16.005650043 CEST	53	53290	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:16.082798958 CEST	49512	53	192.168.2.4	1.1.1.1
Sep 29, 2024 15:16:16.083066940 CEST	63983	53	192.168.2.4	1.1.1.1
Sep 29, 2024 15:16:16.110392094 CEST	53	63983	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:16.133352041 CEST	53	49512	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:16.228079081 CEST	54327	53	192.168.2.4	1.1.1.1
Sep 29, 2024 15:16:16.228388071 CEST	59853	53	192.168.2.4	1.1.1.1
Sep 29, 2024 15:16:16.236701965 CEST	53	59853	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:16.236715078 CEST	53	54327	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:16.797142982 CEST	63171	53	192.168.2.4	1.1.1.1
Sep 29, 2024 15:16:16.798511982 CEST	58498	53	192.168.2.4	1.1.1.1
Sep 29, 2024 15:16:16.804995060 CEST	53	63171	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:16.808643103 CEST	53	58498	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:17.365055084 CEST	56482	53	192.168.2.4	1.1.1.1
Sep 29, 2024 15:16:17.365890026 CEST	57334	53	192.168.2.4	1.1.1.1
Sep 29, 2024 15:16:17.372894049 CEST	53	56482	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:17.373665094 CEST	53	57334	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:17.578140020 CEST	61812	53	192.168.2.4	1.1.1.1
Sep 29, 2024 15:16:17.578892946 CEST	53954	53	192.168.2.4	1.1.1.1
Sep 29, 2024 15:16:17.586328983 CEST	53	53954	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:17.586769104 CEST	53	61812	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:19.228494883 CEST	58162	53	192.168.2.4	1.1.1.1
Sep 29, 2024 15:16:19.229017019 CEST	58577	53	192.168.2.4	1.1.1.1
Sep 29, 2024 15:16:19.235712051 CEST	53	58162	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:19.235738039 CEST	53	58577	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:21.013334990 CEST	57484	53	192.168.2.4	1.1.1.1
Sep 29, 2024 15:16:21.013762951 CEST	51706	53	192.168.2.4	1.1.1.1
Sep 29, 2024 15:16:21.020823002 CEST	53	57484	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:21.021682978 CEST	53	51706	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:21.979330063 CEST	54736	53	192.168.2.4	1.1.1.1
Sep 29, 2024 15:16:21.980083942 CEST	60773	53	192.168.2.4	1.1.1.1
Sep 29, 2024 15:16:21.987241983 CEST	53	60773	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:21.987786055 CEST	53	54736	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:22.922007084 CEST	57008	53	192.168.2.4	1.1.1.1
Sep 29, 2024 15:16:22.922056913 CEST	60092	53	192.168.2.4	1.1.1.1
Sep 29, 2024 15:16:22.929651022 CEST	53	57008	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:22.929940939 CEST	53	60092	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:30.333113909 CEST	138	138	192.168.2.4	192.168.2.255
Sep 29, 2024 15:16:30.410540104 CEST	53	51810	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:34.616677999 CEST	56136	53	192.168.2.4	1.1.1.1
Sep 29, 2024 15:16:34.616894007 CEST	52927	53	192.168.2.4	1.1.1.1
Sep 29, 2024 15:16:34.660221100 CEST	53	52927	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:34.666269064 CEST	53	56136	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:36.751626015 CEST	60784	53	192.168.2.4	1.1.1.1
Sep 29, 2024 15:16:36.752301931 CEST	63242	53	192.168.2.4	1.1.1.1
Sep 29, 2024 15:16:36.753792048 CEST	52697	53	192.168.2.4	1.1.1.1
Sep 29, 2024 15:16:36.754158020 CEST	53494	53	192.168.2.4	1.1.1.1
Sep 29, 2024 15:16:36.759768009 CEST	53	63242	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:36.759851933 CEST	53	60784	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:36.760324001 CEST	53	52697	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:36.761046886 CEST	53	53494	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:36.799060106 CEST	51561	53	192.168.2.4	1.1.1.1
Sep 29, 2024 15:16:36.799576998 CEST	57249	53	192.168.2.4	1.1.1.1
Sep 29, 2024 15:16:36.806545019 CEST	53	57249	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:37.013868093 CEST	53	51561	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:37.755601883 CEST	61444	53	192.168.2.4	1.1.1.1
Sep 29, 2024 15:16:37.756046057 CEST	53383	53	192.168.2.4	1.1.1.1
Sep 29, 2024 15:16:37.763195992 CEST	53	53383	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:37.763247967 CEST	53	61444	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:37.804932117 CEST	49754	53	192.168.2.4	1.1.1.1
Sep 29, 2024 15:16:37.805428028 CEST	55600	53	192.168.2.4	1.1.1.1
Sep 29, 2024 15:16:37.812519073 CEST	53	49754	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:37.815236092 CEST	53	55600	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:38.226393938 CEST	55227	53	192.168.2.4	1.1.1.1
Sep 29, 2024 15:16:38.227164984 CEST	58816	53	192.168.2.4	1.1.1.1
Sep 29, 2024 15:16:38.235085964 CEST	53	55227	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:38.235199928 CEST	53	58816	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:41.007390022 CEST	53	59185	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:41.369647980 CEST	64774	53	192.168.2.4	1.1.1.1
Sep 29, 2024 15:16:41.370060921 CEST	54814	53	192.168.2.4	1.1.1.1
Sep 29, 2024 15:16:41.376476049 CEST	53	64774	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:41.376799107 CEST	53	54814	1.1.1.1	192.168.2.4
Sep 29, 2024 15:16:49.332191944 CEST	53	53912	1.1.1.1	192.168.2.4
Sep 29, 2024 15:17:11.987365007 CEST	53	51638	1.1.1.1	192.168.2.4
Sep 29, 2024 15:17:12.527319908 CEST	53	64222	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 29, 2024 15:16:14.220433950 CEST	192.168.2.4	1.1.1.1	0xdc2a	Standard query (0)	notexistsaa.calperlongtermcare.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:14.220666885 CEST	192.168.2.4	1.1.1.1	0x1af1	Standard query (0)	notexistsaa.calperlongtermcare.com	65	IN (0x0001)	false
Sep 29, 2024 15:16:15.722230911 CEST	192.168.2.4	1.1.1.1	0xe67a	Standard query (0)	d38psrni17bvxu.cloudfront.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:15.722800016 CEST	192.168.2.4	1.1.1.1	0xc392	Standard query (0)	d38psrni17bvxu.cloudfront.net	65	IN (0x0001)	false
Sep 29, 2024 15:16:15.997689962 CEST	192.168.2.4	1.1.1.1	0xb5d8	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:15.998089075 CEST	192.168.2.4	1.1.1.1	0xc3fa	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 29, 2024 15:16:16.082798958 CEST	192.168.2.4	1.1.1.1	0x5aa8	Standard query (0)	notexistsaa.calperlongtermcare.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:16.083066940 CEST	192.168.2.4	1.1.1.1	0xf6b1	Standard query (0)	notexistsaa.calperlongtermcare.com	65	IN (0x0001)	false
Sep 29, 2024 15:16:16.228079081 CEST	192.168.2.4	1.1.1.1	0x2096	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:16.228388071 CEST	192.168.2.4	1.1.1.1	0xa72d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 29, 2024 15:16:16.797142982 CEST	192.168.2.4	1.1.1.1	0x50c7	Standard query (0)	d38psrni17bvxu.cloudfront.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:16.798511982 CEST	192.168.2.4	1.1.1.1	0x6fc5	Standard query (0)	d38psrni17bvxu.cloudfront.net	65	IN (0x0001)	false
Sep 29, 2024 15:16:17.365055084 CEST	192.168.2.4	1.1.1.1	0x9075	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:17.365890026 CEST	192.168.2.4	1.1.1.1	0x5729	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Sep 29, 2024 15:16:17.578140020 CEST	192.168.2.4	1.1.1.1	0x6345	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:17.578892946 CEST	192.168.2.4	1.1.1.1	0x20d2	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Sep 29, 2024 15:16:19.228494883 CEST	192.168.2.4	1.1.1.1	0x668d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:19.229017019 CEST	192.168.2.4	1.1.1.1	0xe18f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 29, 2024 15:16:21.013334990 CEST	192.168.2.4	1.1.1.1	0x6a2d	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:21.013762951 CEST	192.168.2.4	1.1.1.1	0x222d	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Sep 29, 2024 15:16:21.979330063 CEST	192.168.2.4	1.1.1.1	0x8d33	Standard query (0)	afs.googleusercontent.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:21.980083942 CEST	192.168.2.4	1.1.1.1	0x9a66	Standard query (0)	afs.googleusercontent.com	65	IN (0x0001)	false
Sep 29, 2024 15:16:22.922007084 CEST	192.168.2.4	1.1.1.1	0x4730	Standard query (0)	afs.googleusercontent.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:22.922056913 CEST	192.168.2.4	1.1.1.1	0x5329	Standard query (0)	afs.googleusercontent.com	65	IN (0x0001)	false
Sep 29, 2024 15:16:34.616677999 CEST	192.168.2.4	1.1.1.1	0x3c6b	Standard query (0)	notexistsaa.calperlongtermcare.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:34.616894007 CEST	192.168.2.4	1.1.1.1	0x3a3b	Standard query (0)	notexistsaa.calperlongtermcare.com	65	IN (0x0001)	false
Sep 29, 2024 15:16:36.751626015 CEST	192.168.2.4	1.1.1.1	0x3f04	Standard query (0)	d38psrni17bvxu.cloudfront.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:36.752301931 CEST	192.168.2.4	1.1.1.1	0x820f	Standard query (0)	d38psrni17bvxu.cloudfront.net	65	IN (0x0001)	false
Sep 29, 2024 15:16:36.753792048 CEST	192.168.2.4	1.1.1.1	0x8cc7	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:36.754158020 CEST	192.168.2.4	1.1.1.1	0xef18	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 29, 2024 15:16:36.799060106 CEST	192.168.2.4	1.1.1.1	0x53ac	Standard query (0)	notexistsaa.calperlongtermcare.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:36.799576998 CEST	192.168.2.4	1.1.1.1	0xd5b6	Standard query (0)	notexistsaa.calperlongtermcare.com	65	IN (0x0001)	false
Sep 29, 2024 15:16:37.755601883 CEST	192.168.2.4	1.1.1.1	0x160e	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:37.756046057 CEST	192.168.2.4	1.1.1.1	0x9e19	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Sep 29, 2024 15:16:37.804932117 CEST	192.168.2.4	1.1.1.1	0x8a7b	Standard query (0)	d38psrni17bvxu.cloudfront.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:37.805428028 CEST	192.168.2.4	1.1.1.1	0x9413	Standard query (0)	d38psrni17bvxu.cloudfront.net	65	IN (0x0001)	false
Sep 29, 2024 15:16:38.226393938 CEST	192.168.2.4	1.1.1.1	0xe7ab	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:38.227164984 CEST	192.168.2.4	1.1.1.1	0xf7e4	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Sep 29, 2024 15:16:41.369647980 CEST	192.168.2.4	1.1.1.1	0x9fc1	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:41.370060921 CEST	192.168.2.4	1.1.1.1	0x6274	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 29, 2024 15:16:14.318571091 CEST	1.1.1.1	192.168.2.4	0xdc2a	No error (0)	notexistsaa.calperlongtermcare.com		185.53.179.172	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:15.735522985 CEST	1.1.1.1	192.168.2.4	0xe67a	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.135	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:15.735522985 CEST	1.1.1.1	192.168.2.4	0xe67a	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.69	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:15.735522985 CEST	1.1.1.1	192.168.2.4	0xe67a	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.138	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:15.735522985 CEST	1.1.1.1	192.168.2.4	0xe67a	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.190	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:16.004843950 CEST	1.1.1.1	192.168.2.4	0xb5d8	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:16.005650043 CEST	1.1.1.1	192.168.2.4	0xc3fa	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 29, 2024 15:16:16.133352041 CEST	1.1.1.1	192.168.2.4	0x5aa8	No error (0)	notexistsaa.calperlongtermcare.com		185.53.179.172	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:16.236701965 CEST	1.1.1.1	192.168.2.4	0xa72d	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 29, 2024 15:16:16.236715078 CEST	1.1.1.1	192.168.2.4	0x2096	No error (0)	www.google.com		172.217.18.100	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:16.804995060 CEST	1.1.1.1	192.168.2.4	0x50c7	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.69	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:16.804995060 CEST	1.1.1.1	192.168.2.4	0x50c7	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.135	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:16.804995060 CEST	1.1.1.1	192.168.2.4	0x50c7	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.138	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:16.804995060 CEST	1.1.1.1	192.168.2.4	0x50c7	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.190	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:17.372894049 CEST	1.1.1.1	192.168.2.4	0x9075	No error (0)	syndicatedsearch.goog		142.250.185.142	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:17.586769104 CEST	1.1.1.1	192.168.2.4	0x6345	No error (0)	syndicatedsearch.goog		142.250.185.78	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:19.235712051 CEST	1.1.1.1	192.168.2.4	0x668d	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:19.235738039 CEST	1.1.1.1	192.168.2.4	0xe18f	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 29, 2024 15:16:21.020823002 CEST	1.1.1.1	192.168.2.4	0x6a2d	No error (0)	syndicatedsearch.goog		142.250.186.174	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:21.987241983 CEST	1.1.1.1	192.168.2.4	0x9a66	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 15:16:21.987786055 CEST	1.1.1.1	192.168.2.4	0x8d33	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 15:16:21.987786055 CEST	1.1.1.1	192.168.2.4	0x8d33	No error (0)	googlehosted.l.googleusercontent.com		142.250.185.129	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:22.929651022 CEST	1.1.1.1	192.168.2.4	0x4730	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 15:16:22.929651022 CEST	1.1.1.1	192.168.2.4	0x4730	No error (0)	googlehosted.l.googleusercontent.com		142.250.185.193	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:22.929940939 CEST	1.1.1.1	192.168.2.4	0x5329	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 15:16:27.170090914 CEST	1.1.1.1	192.168.2.4	0x23e2	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:27.170090914 CEST	1.1.1.1	192.168.2.4	0x23e2	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:28.527569056 CEST	1.1.1.1	192.168.2.4	0x82a0	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 15:16:28.527569056 CEST	1.1.1.1	192.168.2.4	0x82a0	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:34.666269064 CEST	1.1.1.1	192.168.2.4	0x3c6b	No error (0)	notexistsaa.calperlongtermcare.com		185.53.179.172	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:36.759851933 CEST	1.1.1.1	192.168.2.4	0x3f04	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.69	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:36.759851933 CEST	1.1.1.1	192.168.2.4	0x3f04	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.138	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:36.759851933 CEST	1.1.1.1	192.168.2.4	0x3f04	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.190	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:36.759851933 CEST	1.1.1.1	192.168.2.4	0x3f04	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.135	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:36.760324001 CEST	1.1.1.1	192.168.2.4	0x8cc7	No error (0)	www.google.com		142.250.74.196	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:36.761046886 CEST	1.1.1.1	192.168.2.4	0xef18	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 29, 2024 15:16:37.013868093 CEST	1.1.1.1	192.168.2.4	0x53ac	No error (0)	notexistsaa.calperlongtermcare.com		185.53.179.172	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:37.763247967 CEST	1.1.1.1	192.168.2.4	0x160e	No error (0)	syndicatedsearch.goog		172.217.18.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:37.812519073 CEST	1.1.1.1	192.168.2.4	0x8a7b	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.190	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:37.812519073 CEST	1.1.1.1	192.168.2.4	0x8a7b	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.135	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:37.812519073 CEST	1.1.1.1	192.168.2.4	0x8a7b	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.138	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:37.812519073 CEST	1.1.1.1	192.168.2.4	0x8a7b	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.69	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:38.235085964 CEST	1.1.1.1	192.168.2.4	0xe7ab	No error (0)	syndicatedsearch.goog		142.250.185.142	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:41.376476049 CEST	1.1.1.1	192.168.2.4	0x9fc1	No error (0)	www.google.com		172.217.18.100	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:16:41.376799107 CEST	1.1.1.1	192.168.2.4	0x6274	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 29, 2024 15:16:41.831782103 CEST	1.1.1.1	192.168.2.4	0x6f5d	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 15:16:41.831782103 CEST	1.1.1.1	192.168.2.4	0x6f5d	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:17:05.040085077 CEST	1.1.1.1	192.168.2.4	0x4f95	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 15:17:05.040085077 CEST	1.1.1.1	192.168.2.4	0x4f95	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:17:25.233319044 CEST	1.1.1.1	192.168.2.4	0x5e87	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 15:17:25.233319044 CEST	1.1.1.1	192.168.2.4	0x5e87	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

notexistsaa.calperlongtermcare.com

www.google.com

syndicatedsearch.goog

d38psrni17bvxu.cloudfront.net

https:

afs.googleusercontent.com

fs.microsoft.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49773	185.53.179.172	80	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 29, 2024 15:16:34.702893019 CEST	1126	OUT	GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Long-term+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpjxYC9i9y0TgoYIuZ8V_UHRMakU9iohKuhUuqxr8ymSHJsd1j4bjWfISTJnMGI7hFgWr_vhvGP_2LJwczGgGfqI8hF3eyZLCQwcvAFeaUtp6um6oqJ5_8cyL1p-sL7wwR07cSGJTy4bg&pcsa=false HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Sep 29, 2024 15:16:36.385719061 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 13:16:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Buckets: bucket011,bucket088,bucket089 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_f+XM/m8QxqYa6gI0D+4noIe34DOeQ2o2zrg+zAXiPOeBJLQ3nu3bmhNdgghFO8iIAnYqhOeRmg02kLueyVTomg== X-Template: tpl_CleanPeppermintBlack_oneclick X-Language: english Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Pcrew-Ip-Organization: CenturyLink X-Pcrew-Blocked-Reason: X-Domain: calperlongtermcare.com X-Subdomain: notexistsaa Content-Encoding: gzip Data Raw: 63 32 30 0d 0a 1f 8b 08 00 00 00 00 00 04 03 e5 5b 7b 57 e2 c8 b6 ff fb f8 29 aa 99 75 0c de 86 f0 56 04 63 5f 14 6d 75 04 1f 8d ad d2 ab 6f af 90 14 10 c8 83 49 82 80 73 fc ee f7 b7 2b 0f 02 62 9f ee b9 33 77 d6 5d 97 6e 25 a9 5d b5 6b d7 ae fd ae f2 e0 5d f3 ea b8 f3 78 7d c2 86 be 65 1e 6e 1d d0 17 d3 55 5f cd aa 7a cf 74 b4 f1 98 2f 94 54 eb 74 36 6b de 3c 5e fc ea 74 cf 87 4f 5a bb 71 73 72 74 74 d3 68 7e 9a 35 66 9f 1a 17 47 8d cb df a6 cd d3 93 ce c3 ad 9d 3f 73 f3 95 fe dd f5 de c9 45 67 6f 6f fe 68 5f 5b b7 bd 49 6b 51 7e 1a 57 7f 7d 34 ce ec 71 7b c2 75 7b 74 d5 68 5f 68 ea 43 f3 41 fb f5 e6 a2 9d b7 1f 7e ed 5e 5c ee 75 34 e3 a2 59 6d 38 67 0f bf 16 2a d5 e3 c6 ec a4 d1 b8 51 94 6f fd f7 0f ad 9c 55 bd 99 ff f6 a8 ee 0e ce f3 cd Data Ascii: c20[{W)uVc_muoIs+b3w]n%]k]x}enU_zt/Tt6k<^tOZqsrtth~5fG?sEgooh_[IkQ~W}4q{u{th_hCA~^\u4Ym8g*QoU
Sep 29, 2024 15:16:36.385736942 CEST	1236	IN	Data Raw: f7 65 db 39 e7 a5 72 f3 8a df 14 9d e2 b3 3b 78 ff dc 78 30 ae af f8 d1 c5 e5 4d c9 9e 96 7a d6 b0 ad 0f 06 c3 d3 ab aa 71 de b0 1f 7f 1b 5e f1 5b 6b 90 2f 8e 2f a7 7c f1 b9 e3 58 03 45 49 b1 b9 65 da 9e 92 1a fa fe a4 96 cb cd 66 33 79 56 92 1d Data Ascii: e9r;xx0Mzq^[k//\|XEIef3yVw+3U{"qU?bXW8M'%u>lg1)oJs?GL}eT.V->8>3txVdaYOSM2=No}7!Mk:.5:P$_
Sep 29, 2024 15:16:36.385747910 CEST	448	IN	Data Raw: 58 88 78 55 93 c1 91 98 fe 30 68 82 85 51 7b 86 69 f8 8b e0 9d 53 90 62 86 2f 86 cd 86 8e c5 05 24 c5 a2 e4 21 47 8e e8 70 6b eb 40 78 67 43 57 52 6a df 4b 31 e1 ea 29 9f f0 8c 00 61 e8 22 91 c3 6c 1d e8 c6 13 d3 4c 84 e3 4a 2a 12 1f b4 d3 ba e8 Data Ascii: XxU0hQ{iSb/$!Gpk@xgCWRjK1)a"lLJ*\>cdecM\J8Od@9b@K}#V#{MVq'z$cL!6]1_,cgZ$30MvKn9'(7w(~m ty_I'5cN=41ug&;n#-d(
Sep 29, 2024 15:16:36.385827065 CEST	1236	IN	Data Raw: 8f e2 dc 59 cc e3 22 44 c6 28 58 82 24 19 e4 2d 3b c8 60 b8 4f 9d be f5 50 80 18 af c1 b9 07 50 69 89 3d 9e 51 b2 a7 56 4f 2c 6e 13 14 cc 39 a6 b0 d8 5b f6 17 64 75 a8 4c 70 89 69 69 c2 5f f2 c5 bd bd 9e 9e 9c 31 e8 04 ae 08 78 a9 54 7a 05 6c 0a Data Ascii: Y"D(X$-;`OPPi=QVO,n9[duLpii_1xTzl^Vz5\|5zSj;r<3QHLH2IE)$E"0Bbq.2R(o\Ra79aK.)9O0'C}%3!>Bm{bBZa;;(OP:I1&<
Sep 29, 2024 15:16:36.385844946 CEST	1236	IN	Data Raw: e9 a5 4d 81 5e a6 72 f1 fe a7 f0 f6 c1 77 06 03 1c 2d a9 ba 28 7e eb d4 b6 3d a5 34 0a 7d b9 ad 39 3a bf bb 3d 3f 46 61 13 25 79 db 4f af 3b c4 1d ea 1f 5a b8 37 86 04 d0 a0 23 f9 a0 37 ba 5d 7c ba 6a cb 1e a2 46 1b 27 46 8b 34 6d c9 ce ce 4e fd Data Ascii: M^rw-(~=4}9:=?Fa%yO;Z7#7]\|jF'F4mN%#yH2(w@'tL@G^C/SL;.7IAZ(!aRXEZJR4:#hrTLo)?=$WHR]z8!lnA ylB^
Sep 29, 2024 15:16:36.385858059 CEST	944	IN	Data Raw: 22 b3 52 44 44 5f 92 59 0f 42 4b c9 17 0a 33 59 98 8d 19 5d 5e 09 8b 48 54 3e 96 a8 92 28 c6 29 28 1f 88 96 a8 20 b4 59 bc 85 6e fd bd c7 28 ff 2c 35 f1 7f 1b 75 d8 bf 57 cd fe 7f 9c 87 6c 87 27 17 10 bc ed f1 4c 89 8f aa de 8b a3 2a f6 02 af ba Data Ascii: "RDD_YBK3Y]^HT>()( Yn(,5uWl'L*j?\|e~K%&^lR-KEEWvUAoFQA?5k0%3{('ehq^q%Cg^7)xx'&j,AVxXrP9y}P{q[z
Sep 29, 2024 15:16:36.386147976 CEST	944	IN	Data Raw: 22 b3 52 44 44 5f 92 59 0f 42 4b c9 17 0a 33 59 98 8d 19 5d 5e 09 8b 48 54 3e 96 a8 92 28 c6 29 28 1f 88 96 a8 20 b4 59 bc 85 6e fd bd c7 28 ff 2c 35 f1 7f 1b 75 d8 bf 57 cd fe 7f 9c 87 6c 87 27 17 10 bc ed f1 4c 89 8f aa de 8b a3 2a f6 02 af ba Data Ascii: "RDD_YBK3Y]^HT>()( Yn(,5uWl'L*j?\|e~K%&^lR-KEEWvUAoFQA?5k0%3{('ehq^q%Cg^7)xx'&j,AVxXrP9y}P{q[z
Sep 29, 2024 15:16:36.387850046 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 13:16:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Buckets: bucket011,bucket088,bucket089 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_f+XM/m8QxqYa6gI0D+4noIe34DOeQ2o2zrg+zAXiPOeBJLQ3nu3bmhNdgghFO8iIAnYqhOeRmg02kLueyVTomg== X-Template: tpl_CleanPeppermintBlack_oneclick X-Language: english Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Pcrew-Ip-Organization: CenturyLink X-Pcrew-Blocked-Reason: X-Domain: calperlongtermcare.com X-Subdomain: notexistsaa Content-Encoding: gzip Data Raw: 63 32 30 0d 0a 1f 8b 08 00 00 00 00 00 04 03 e5 5b 7b 57 e2 c8 b6 ff fb f8 29 aa 99 75 0c de 86 f0 56 04 63 5f 14 6d 75 04 1f 8d ad d2 ab 6f af 90 14 10 c8 83 49 82 80 73 fc ee f7 b7 2b 0f 02 62 9f ee b9 33 77 d6 5d 97 6e 25 a9 5d b5 6b d7 ae fd ae f2 e0 5d f3 ea b8 f3 78 7d c2 86 be 65 1e 6e 1d d0 17 d3 55 5f cd aa 7a cf 74 b4 f1 98 2f 94 54 eb 74 36 6b de 3c 5e fc ea 74 cf 87 4f 5a bb 71 73 72 74 74 d3 68 7e 9a 35 66 9f 1a 17 47 8d cb df a6 cd d3 93 ce c3 ad 9d 3f 73 f3 95 fe dd f5 de c9 45 67 6f 6f fe 68 5f 5b b7 bd 49 6b 51 7e 1a 57 7f 7d 34 ce ec 71 7b c2 75 7b 74 d5 68 5f 68 ea 43 f3 41 fb f5 e6 a2 9d b7 1f 7e ed 5e 5c ee 75 34 e3 a2 59 6d 38 67 0f bf 16 2a d5 e3 c6 ec a4 d1 b8 51 94 6f fd f7 0f ad 9c 55 bd 99 ff f6 a8 ee 0e ce f3 cd Data Ascii: c20[{W)uVc_muoIs+b3w]n%]k]x}enU_zt/Tt6k<^tOZqsrtth~5fG?sEgooh_[IkQ~W}4q{u{th_hCA~^\u4Ym8g*QoU
Sep 29, 2024 15:16:36.389823914 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 13:16:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Buckets: bucket011,bucket088,bucket089 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_f+XM/m8QxqYa6gI0D+4noIe34DOeQ2o2zrg+zAXiPOeBJLQ3nu3bmhNdgghFO8iIAnYqhOeRmg02kLueyVTomg== X-Template: tpl_CleanPeppermintBlack_oneclick X-Language: english Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Pcrew-Ip-Organization: CenturyLink X-Pcrew-Blocked-Reason: X-Domain: calperlongtermcare.com X-Subdomain: notexistsaa Content-Encoding: gzip Data Raw: 63 32 30 0d 0a 1f 8b 08 00 00 00 00 00 04 03 e5 5b 7b 57 e2 c8 b6 ff fb f8 29 aa 99 75 0c de 86 f0 56 04 63 5f 14 6d 75 04 1f 8d ad d2 ab 6f af 90 14 10 c8 83 49 82 80 73 fc ee f7 b7 2b 0f 02 62 9f ee b9 33 77 d6 5d 97 6e 25 a9 5d b5 6b d7 ae fd ae f2 e0 5d f3 ea b8 f3 78 7d c2 86 be 65 1e 6e 1d d0 17 d3 55 5f cd aa 7a cf 74 b4 f1 98 2f 94 54 eb 74 36 6b de 3c 5e fc ea 74 cf 87 4f 5a bb 71 73 72 74 74 d3 68 7e 9a 35 66 9f 1a 17 47 8d cb df a6 cd d3 93 ce c3 ad 9d 3f 73 f3 95 fe dd f5 de c9 45 67 6f 6f fe 68 5f 5b b7 bd 49 6b 51 7e 1a 57 7f 7d 34 ce ec 71 7b c2 75 7b 74 d5 68 5f 68 ea 43 f3 41 fb f5 e6 a2 9d b7 1f 7e ed 5e 5c ee 75 34 e3 a2 59 6d 38 67 0f bf 16 2a d5 e3 c6 ec a4 d1 b8 51 94 6f fd f7 0f ad 9c 55 bd 99 ff f6 a8 ee 0e ce f3 cd Data Ascii: c20[{W)uVc_muoIs+b3w]n%]k]x}enU_zt/Tt6k<^tOZqsrtth~5fG?sEgooh_[IkQ~W}4q{u{th_hCA~^\u4Ym8g*QoU
Sep 29, 2024 15:16:36.471762896 CEST	1210	OUT	GET /track.php?domain=calperlongtermcare.com&toggle=browserjs&uid=MTcyNzYxNTc5NS4yNjM3OmRkNDlhZjNmMDUyYjU0NmNhNzY4NDUxMWMzNDdkNTQ4ZWFmNzFhNzkyMmNjYjNmNGM3MDUyY2YxNDBlNDRhZGU6NjZmOTUzMzM0MDYzNg%3D%3D HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Long-term+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpjxYC9i9y0TgoYIuZ8V_UHRMakU9iohKuhUuqxr8ymSHJsd1j4bjWfISTJnMGI7hFgWr_vhvGP_2LJwczGgGfqI8hF3eyZLCQwcvAFeaUtp6um6oqJ5_8cyL1p-sL7wwR07cSGJTy4bg&pcsa=false Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Sep 29, 2024 15:16:36.671135902 CEST	608	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 13:16:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 29, 2024 15:16:36.752842903 CEST	1081	OUT	GET /ls.php?t=66f95333&token=f06df9e8ddd462c8afb5845161eee5e6a6511e54 HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Long-term+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpjxYC9i9y0TgoYIuZ8V_UHRMakU9iohKuhUuqxr8ymSHJsd1j4bjWfISTJnMGI7hFgWr_vhvGP_2LJwczGgGfqI8hF3eyZLCQwcvAFeaUtp6um6oqJ5_8cyL1p-sL7wwR07cSGJTy4bg&pcsa=false Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Sep 29, 2024 15:16:36.954138994 CEST	906	IN	HTTP/1.1 201 Created Server: nginx Date: Sun, 29 Sep 2024 13:16:36 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Log-Success: 66f95334bb06144e9a0a4645 Charset: utf-8 Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Max-Age: 86400 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_JbpaT52Lfn47YJJ5Q1qyVthA6tEe99+wRAT+rS+leFpR8QIY7gUJROfjPRdodEjdZocjJpZOm4wLify07rk5/Q== Data Raw: 31 30 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"success":true}0
Sep 29, 2024 15:16:41.015538931 CEST	1229	OUT	GET /track.php?domain=calperlongtermcare.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTc5NS4yNjM3OmRkNDlhZjNmMDUyYjU0NmNhNzY4NDUxMWMzNDdkNTQ4ZWFmNzFhNzkyMmNjYjNmNGM3MDUyY2YxNDBlNDRhZGU6NjZmOTUzMzM0MDYzNg%3D%3D HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Long-term+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpjxYC9i9y0TgoYIuZ8V_UHRMakU9iohKuhUuqxr8ymSHJsd1j4bjWfISTJnMGI7hFgWr_vhvGP_2LJwczGgGfqI8hF3eyZLCQwcvAFeaUtp6um6oqJ5_8cyL1p-sL7wwR07cSGJTy4bg&pcsa=false Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Sep 29, 2024 15:16:41.214591026 CEST	610	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 13:16:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 29, 2024 15:16:42.485281944 CEST	1089	OUT	GET /favicon.ico HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Long-term+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpjxYC9i9y0TgoYIuZ8V_UHRMakU9iohKuhUuqxr8ymSHJsd1j4bjWfISTJnMGI7hFgWr_vhvGP_2LJwczGgGfqI8hF3eyZLCQwcvAFeaUtp6um6oqJ5_8cyL1p-sL7wwR07cSGJTy4bg&pcsa=false Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Sep 29, 2024 15:16:42.681005955 CEST	230	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 13:16:42 GMT Content-Type: image/x-icon Content-Length: 0 Connection: keep-alive Last-Modified: Thu, 26 Sep 2024 07:56:43 GMT ETag: "66f513bb-0" Accept-Ranges: bytes
Sep 29, 2024 15:16:44.975440025 CEST	1130	OUT	GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Mental+Health+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj2Fwx1CP69y51eGq-AiAZrdjjEEEm-kgI4GG27mh0rqrtgT08SvO_YxhRixDnAmYj1ePjmTSEcyDkXkXf2_m-yoK-uk8je2jQwTOwoAJueqS2Nl_BXbBpVJ72-oiVSQZKMuVZ8IvWr4&pcsa=false HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Sep 29, 2024 15:16:45.195298910 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 13:16:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Buckets: bucket011,bucket088,bucket089 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_kM+7+VlP015CDBtP22ni0FDlSCJJ86d/YS38UreZx7282CfhdmwF5BN0iSf8yikrvj4kpa/YD5NNLqVIr+geFQ== X-Template: tpl_CleanPeppermintBlack_oneclick X-Language: english Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Pcrew-Ip-Organization: CenturyLink X-Pcrew-Blocked-Reason: X-Domain: calperlongtermcare.com X-Subdomain: notexistsaa Content-Encoding: gzip Data Raw: 31 62 64 0d 0a 1f 8b 08 00 00 00 00 00 04 03 e5 5b ff 57 da ca b6 ff f9 fa 57 4c 39 eb 1a 7c 85 f0 4d 14 41 ec 45 f1 eb 29 51 5b b4 6a 57 5f d7 90 0c 10 08 09 27 09 02 f6 fa bf bf cf 9e 7c 21 20 f6 b6 67 9d be b3 de 7a b4 4a 32 7b 66 cf 9e 3d fb fb 8c fb 6f 9a 97 47 ed fb ab 63 d6 f7 47 d6 c1 c6 3e 7d 31 83 fb 3c cb 8d 8e e5 e8 c3 a1 98 d7 53 ad 93 e9 b4 79 7d 7f f1 bb f3 70 de 7f d4 b5 c6 f5 f1 e1 e1 75 a3 f9 71 da 98 7e 6c 5c 1c 36 de ff 31 69 9e 1c b7 ef 3e d8 f9 33 37 5f ee de 5c ed 1e 5f b4 77 77 67 f7 f6 d5 e8 43 67 dc 9a 6f 3f 0e 2b bf df 9b 67 f6 50 1b 0b c3 1e 5c 36 b4 0b 9d df 35 ef f4 df af 2f b4 bc 7d f7 fb c3 c5 fb dd b6 6e 5e 34 2b 0d e7 ec ee f7 42 b9 72 d4 98 1e 37 1a d7 f5 fa d7 61 eb ed ee db 5b eb 2a 5f 28 1f 35 0f fd ab Data Ascii: 1bd[WWL9\|MAE)Q[jW_'\|! gzJ2{f=oGcG>}1<Sy}puq~l\61i>37_\_wwgCgo?+gP\65/}n^4+Br7a[*_(5
Sep 29, 2024 15:16:45.195344925 CEST	202	IN	Data Raw: 62 d1 36 f3 27 4d eb e3 d1 c5 45 65 c7 c8 dd 7f 2c 55 6e 5c f1 30 db 2d 56 8a 47 dd be 31 9a 9e 94 0f b5 bc f9 b1 5b 99 9b 43 f7 71 b0 3d 1c f3 dc 7d b3 ac 69 ef ff b8 3d 77 df f6 c4 09 10 a7 d8 6c 64 d9 5e 3d d5 f7 fd 71 35 97 9b 4e a7 ea b4 a4 Data Ascii: b6'MEe,Un\0-VG1[Cq=}i=wld^=q5N:n/W)fqWO;E8`8Lz}a\|,RL)_a1]OVR$"D=hqi!M]dKz:Da^
Sep 29, 2024 15:16:45.195403099 CEST	1236	IN	Data Raw: 31 30 30 30 0d 0a df 35 ed 61 d6 77 b2 5d d3 af db 4e 8c db 37 7d 4b 1c a0 db 58 b8 96 63 f7 7c e1 8e 74 ee 0a 55 77 46 fb b9 00 2a 97 23 97 e4 f9 73 4b b0 91 30 4c 5e 4f 79 ba 2b e4 a2 55 ee 81 e8 af 9e cf dd 3c fb b6 f1 8f 0e d7 87 3d d7 99 d8 Data Ascii: 10005aw]N7}KXc\|tUwF*#sK0L^Oy+U<=FM\+rF2\,vgUu~rxUd]1g:8'?Pf(_[\|^,Y)$/"'3}17epvh,~>Uyh6c<
Sep 29, 2024 15:16:45.195446014 CEST	1236	IN	Data Raw: f5 d4 80 3f f2 40 62 aa 8f 8e 69 a4 f3 5b b5 14 73 ec 23 cb d4 87 d8 23 d3 36 9c a9 ea 8c 85 8d 5c 6b ec 9a 8f 5c 9f ab 94 51 2a 19 a6 84 ef d9 b1 83 de 73 6a 09 32 c6 ca 5e 3e 13 68 40 bd 54 ca 67 c8 78 d4 8b f9 7c 06 0a 24 bf 21 7e 93 0e 77 91 Data Ascii: ?@bi[s##6\k\Qsj2^>h@Tgx\|$!~w,f>[p4KoAaY\U@C+8Cnf>R0S^"'8QT8#wYX(z:h\FBNYmcV(/W2D5S{J#nAcwv
Sep 29, 2024 15:16:45.195497990 CEST	448	IN	Data Raw: 9c 2c 9e 62 8c 11 de c3 2f 51 25 1b 75 ef 7c 41 c9 28 ae f0 60 63 bc 2b 8c 39 84 dd bb 71 2d ea b9 9e bd 4a ee 9d ef d5 31 68 d9 c1 f1 c0 c1 29 0e e6 1c 91 5f 43 0a 41 ee 5f 1a 5f 05 d9 1e 35 bc 17 28 ee f7 d1 ba 9d cf 20 ac 21 79 88 bb e8 14 47 Data Ascii: ,b/Q%u\|A(`c+9q-J1h)_CA__5( !yGd:7(\Bbwv_H;ypIK>BIze'KF<h'%TA^EPKP+Q$9Le$8X3@LIrFT}rg:Kgg7[^5II
Sep 29, 2024 15:16:45.236922979 CEST	1214	OUT	GET /track.php?domain=calperlongtermcare.com&toggle=browserjs&uid=MTcyNzYxNTgwNS4wODA5OjkzM2NiZGEwODhjNzQyZTkxMzk3Y2Q5N2QzODliZDM5NDFjNzhmMTU5ZjkzZDAwNTQwMGNkMDNiYzQ1NGE5MGQ6NjZmOTUzM2QxM2MxOA%3D%3D HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Mental+Health+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj2Fwx1CP69y51eGq-AiAZrdjjEEEm-kgI4GG27mh0rqrtgT08SvO_YxhRixDnAmYj1ePjmTSEcyDkXkXf2_m-yoK-uk8je2jQwTOwoAJueqS2Nl_BXbBpVJ72-oiVSQZKMuVZ8IvWr4&pcsa=false Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Sep 29, 2024 15:16:45.436332941 CEST	608	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 13:16:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 29, 2024 15:16:45.457582951 CEST	1085	OUT	GET /ls.php?t=66f9533d&token=f43d8d86d39ec9063ea817064e929bdd606d7640 HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Mental+Health+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj2Fwx1CP69y51eGq-AiAZrdjjEEEm-kgI4GG27mh0rqrtgT08SvO_YxhRixDnAmYj1ePjmTSEcyDkXkXf2_m-yoK-uk8je2jQwTOwoAJueqS2Nl_BXbBpVJ72-oiVSQZKMuVZ8IvWr4&pcsa=false Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Sep 29, 2024 15:16:45.658952951 CEST	906	IN	HTTP/1.1 201 Created Server: nginx Date: Sun, 29 Sep 2024 13:16:45 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Log-Success: 66f9533d5cf953b47601ad37 Charset: utf-8 Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Max-Age: 86400 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_WAYjp9PaEcUvZ2NIIh73i2NaMy/8qmlSelsfmmAW41sM4HnpWq8689kYGwQrTuAaOFb+yBrrnSXuNBEXWd7XMg== Data Raw: 31 30 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"success":true}0
Sep 29, 2024 15:16:46.149085999 CEST	1233	OUT	GET /track.php?domain=calperlongtermcare.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTgwNS4wODA5OjkzM2NiZGEwODhjNzQyZTkxMzk3Y2Q5N2QzODliZDM5NDFjNzhmMTU5ZjkzZDAwNTQwMGNkMDNiYzQ1NGE5MGQ6NjZmOTUzM2QxM2MxOA%3D%3D HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Mental+Health+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj2Fwx1CP69y51eGq-AiAZrdjjEEEm-kgI4GG27mh0rqrtgT08SvO_YxhRixDnAmYj1ePjmTSEcyDkXkXf2_m-yoK-uk8je2jQwTOwoAJueqS2Nl_BXbBpVJ72-oiVSQZKMuVZ8IvWr4&pcsa=false Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Sep 29, 2024 15:16:46.349854946 CEST	610	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 13:16:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 29, 2024 15:16:49.408546925 CEST	1127	OUT	GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Disability+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj8QvgQXu7ghwdodehT82JgRTn3vllMykC0FwxvyfTQJr6A0SuG7m0lQBPeY8be8shRgjOY8aIA_Dc4-x7TvuvAzvS8PHi2SQZ6LVKYyrfVusdKdQ6CTxo02n5nKSQlxTjJhvzl1MnjA&pcsa=false HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Sep 29, 2024 15:16:49.629496098 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 13:16:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Buckets: bucket011,bucket088,bucket089 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_TmnPL7M3r0JQtxD9iVDrrfr6FXVNWTKdEPPJRoYLD7+WsgEQwKu10FvGSkSYSzv041PRWM4lGUZm35H9oJirNw== X-Template: tpl_CleanPeppermintBlack_oneclick X-Language: english Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Pcrew-Ip-Organization: CenturyLink X-Pcrew-Blocked-Reason: X-Domain: calperlongtermcare.com X-Subdomain: notexistsaa Content-Encoding: gzip Data Raw: 63 32 30 0d 0a 1f 8b 08 00 00 00 00 00 04 03 ed 5b fd 5b da 4a f6 ff 79 fd 2b a6 dc 67 0d 6e 21 bc fb 02 c6 7e 51 b4 6a 05 b5 c5 2a f6 e9 f6 19 92 01 22 21 e1 26 41 c0 bb fe ef df cf 99 bc 10 10 bb ed 7d 6e 77 7f 59 5a 25 99 33 73 e6 cc 99 f3 3e e3 fe 9b c6 e5 51 bb 73 75 cc 06 fe c8 3a d8 d8 a7 2f 66 70 9f 67 b9 d1 b5 1c 7d 38 14 73 2d d5 3c 99 4e 1b d7 9d f3 0f ce fd d9 e0 51 6f d5 af 8f 0f 0f af eb 8d 4f d3 fa f4 53 fd fc b0 7e f1 fb a4 71 72 dc be fb 68 e7 4f dd 7c a5 77 73 b5 73 7c de de d9 99 75 ec ab d1 c7 ee b8 39 2f 3f 0e 77 3f 74 cc 53 7b d8 1a 0b c3 7e b8 ac b7 ce 75 7e d7 b8 d3 3f 5c 9f b7 f2 f6 dd 87 fb f3 8b 9d b6 6e 9e 37 76 eb ce e9 dd 87 42 65 f7 a8 3e 3d ae d7 af 35 ed 5b 7b 64 5f 5d ec 34 4b 6e fe fc da 9f 35 f6 cc cf 0d Data Ascii: c20[[Jy+gn!~Qj*"!&A}nwYZ%3s>Qsu:/fpg}8s-<NQoOS~qrhO\|wss\|u9/?w?tS{~u~?\n7vBe>=5[{d_]4Kn5
Sep 29, 2024 15:16:50.184277058 CEST	1211	OUT	GET /track.php?domain=calperlongtermcare.com&toggle=browserjs&uid=MTcyNzYxNTgwOS41MTQyOjk4ODg5ZDBkOTNhZmViZDZjZmJlMDcyMzEwZmU1NTA3NWRiMmMxYzExOGZkODQ5OTAxMWM4Yjg0OTlmZGZiNTU6NjZmOTUzNDE3ZDhhYg%3D%3D HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Disability+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj8QvgQXu7ghwdodehT82JgRTn3vllMykC0FwxvyfTQJr6A0SuG7m0lQBPeY8be8shRgjOY8aIA_Dc4-x7TvuvAzvS8PHi2SQZ6LVKYyrfVusdKdQ6CTxo02n5nKSQlxTjJhvzl1MnjA&pcsa=false Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Sep 29, 2024 15:16:50.383219957 CEST	608	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 13:16:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 29, 2024 15:16:50.430011034 CEST	1082	OUT	GET /ls.php?t=66f95341&token=879f150f85d7f9141d1410d530ddca2c0f697246 HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Disability+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj8QvgQXu7ghwdodehT82JgRTn3vllMykC0FwxvyfTQJr6A0SuG7m0lQBPeY8be8shRgjOY8aIA_Dc4-x7TvuvAzvS8PHi2SQZ6LVKYyrfVusdKdQ6CTxo02n5nKSQlxTjJhvzl1MnjA&pcsa=false Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Sep 29, 2024 15:16:50.631829023 CEST	906	IN	HTTP/1.1 201 Created Server: nginx Date: Sun, 29 Sep 2024 13:16:50 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Log-Success: 66f95342a28be301f60c0d5b Charset: utf-8 Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Max-Age: 86400 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_TLgrquj3OOeNGYlAEnoKpmK9e0qkU5UwKTmLqce+EpeSpB6Ol9U/0pUcAw51Rc+bvzk7DiYrLSNUfVigZrDGFw== Data Raw: 31 30 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"success":true}0
Sep 29, 2024 15:16:51.909853935 CEST	1230	OUT	GET /track.php?domain=calperlongtermcare.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTgwOS41MTQyOjk4ODg5ZDBkOTNhZmViZDZjZmJlMDcyMzEwZmU1NTA3NWRiMmMxYzExOGZkODQ5OTAxMWM4Yjg0OTlmZGZiNTU6NjZmOTUzNDE3ZDhhYg%3D%3D HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Disability+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj8QvgQXu7ghwdodehT82JgRTn3vllMykC0FwxvyfTQJr6A0SuG7m0lQBPeY8be8shRgjOY8aIA_Dc4-x7TvuvAzvS8PHi2SQZ6LVKYyrfVusdKdQ6CTxo02n5nKSQlxTjJhvzl1MnjA&pcsa=false Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Sep 29, 2024 15:16:52.112728119 CEST	610	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 13:16:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 29, 2024 15:17:02.583264112 CEST	1140	OUT	GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Mental+Health+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj2Fwx1CP69y51eGq-AiAZrdjjEEEm-kgI4GG27mh0rqrtgT08SvO_YxhRixDnAmYj1ePjmTSEcyDkXkXf2_m-yoK-uk8je2jQwTOwoAJueqS2Nl_BXbBpVJ72-oiVSQZKMuVZ8IvWr4&pcsa=false&nb=0&nm=1 HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Sep 29, 2024 15:17:02.805805922 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 13:17:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Buckets: bucket011,bucket088,bucket089 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_nupjbsLdFEbo+Ce0aZMf27khmx0B7Jk2VnptzgmmePUx33ni1z8fcFwVLq1ZiKJ0694WtgMwcoBIyxjgTcRxWQ== X-Template: tpl_CleanPeppermintBlack_oneclick X-Language: english Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Pcrew-Ip-Organization: CenturyLink X-Pcrew-Blocked-Reason: X-Domain: calperlongtermcare.com X-Subdomain: notexistsaa Content-Encoding: gzip Data Raw: 63 32 30 0d 0a 1f 8b 08 00 00 00 00 00 04 03 e5 5b 79 77 da c8 96 ff fb f9 53 28 f4 79 16 9e 80 d8 6d 0c 96 f3 b0 f1 1a 83 97 e0 8d 9c 8c 4f 21 15 20 10 12 2d 09 03 ee e7 ef 3e bf 5b 5a 10 18 e7 25 7d 3a d3 67 ce 90 d8 48 75 ab 6e dd ba 75 f7 2a ef 7d a8 5f 1e b6 1e af 8e a4 be 37 32 f7 37 f6 e8 4b d2 99 c7 d2 4c ef 98 b6 36 1c f2 b9 9a 68 1c 4f a7 f5 eb c7 f3 cf 76 fb ac ff ac 35 6b d7 47 07 07 d7 b5 fa 97 69 6d fa a5 76 7e 50 bb f8 7d 52 3f 3e 6a 3d dc 58 d9 53 27 5b ea de 5e ed 1c 9d b7 76 76 66 8f d6 d5 e8 a6 33 6e cc 8b cf c3 f2 e7 47 e3 d4 1a 36 c7 5c b7 06 97 b5 e6 b9 c6 1e ea 0f da e7 eb f3 66 d6 7a f8 dc 3e bf d8 69 69 c6 79 bd 5c b3 4f 1f 3e e7 4a e5 c3 da f4 a8 56 bb 56 d5 27 6b 32 1e 74 dc 0b fd f8 a8 63 7f 3c e4 59 d6 6e 74 f3 Data Ascii: c20[ywS(ymO! ->[Z%}:gHunu*}_727KL6hOv5kGimv~P}R?>j=XS'[^vvf3nG6\fz>iiy\O>JVV'k2tc<Ynt
Sep 29, 2024 15:17:02.839777946 CEST	1224	OUT	GET /track.php?domain=calperlongtermcare.com&toggle=browserjs&uid=MTcyNzYxNTgyMi42ODg3OmQ4OTczZDQ3MDMwYjk0NzQ3ODhiOTVmZTk5NjdkZWM1MWI2ZmM3Yzg4NTgyMzEwZjE1NWE4MWQ5YjZiYWNiY2I6NjZmOTUzNGVhODIyNg%3D%3D HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Mental+Health+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj2Fwx1CP69y51eGq-AiAZrdjjEEEm-kgI4GG27mh0rqrtgT08SvO_YxhRixDnAmYj1ePjmTSEcyDkXkXf2_m-yoK-uk8je2jQwTOwoAJueqS2Nl_BXbBpVJ72-oiVSQZKMuVZ8IvWr4&pcsa=false&nb=0&nm=1 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Sep 29, 2024 15:17:03.040004015 CEST	608	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 13:17:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 29, 2024 15:17:03.086478949 CEST	1095	OUT	GET /ls.php?t=66f9534e&token=045d16523d9232997a06f47047c84c5614864402 HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Mental+Health+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj2Fwx1CP69y51eGq-AiAZrdjjEEEm-kgI4GG27mh0rqrtgT08SvO_YxhRixDnAmYj1ePjmTSEcyDkXkXf2_m-yoK-uk8je2jQwTOwoAJueqS2Nl_BXbBpVJ72-oiVSQZKMuVZ8IvWr4&pcsa=false&nb=0&nm=1 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Sep 29, 2024 15:17:03.294445992 CEST	906	IN	HTTP/1.1 201 Created Server: nginx Date: Sun, 29 Sep 2024 13:17:03 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Log-Success: 66f9534f853a182a830af4c0 Charset: utf-8 Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Max-Age: 86400 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_sizbWaSLB5am710EtQeogxt1dSDpYzSyXEgP1w9KIk+MVsoYUhq3U6VugXGxtV757IYjnMwoOLZB0cu27xWQjA== Data Raw: 31 30 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"success":true}0
Sep 29, 2024 15:17:04.940259933 CEST	1243	OUT	GET /track.php?domain=calperlongtermcare.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTgyMi42ODg3OmQ4OTczZDQ3MDMwYjk0NzQ3ODhiOTVmZTk5NjdkZWM1MWI2ZmM3Yzg4NTgyMzEwZjE1NWE4MWQ5YjZiYWNiY2I6NjZmOTUzNGVhODIyNg%3D%3D HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Mental+Health+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj2Fwx1CP69y51eGq-AiAZrdjjEEEm-kgI4GG27mh0rqrtgT08SvO_YxhRixDnAmYj1ePjmTSEcyDkXkXf2_m-yoK-uk8je2jQwTOwoAJueqS2Nl_BXbBpVJ72-oiVSQZKMuVZ8IvWr4&pcsa=false&nb=0&nm=1 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Sep 29, 2024 15:17:05.282840967 CEST	610	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 13:17:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 29, 2024 15:17:08.261107922 CEST	1137	OUT	GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Disability+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj8QvgQXu7ghwdodehT82JgRTn3vllMykC0FwxvyfTQJr6A0SuG7m0lQBPeY8be8shRgjOY8aIA_Dc4-x7TvuvAzvS8PHi2SQZ6LVKYyrfVusdKdQ6CTxo02n5nKSQlxTjJhvzl1MnjA&pcsa=false&nb=0&nm=2 HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Sep 29, 2024 15:17:08.484890938 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 13:17:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Buckets: bucket011,bucket088,bucket089 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_Fi3MhY9VKONruHQxSIQEPDfxFnXFkw8yH7GV/8aB0gYZUhyWPAGy2M4kVZ3gv6ifEaSmzYaHyAr9B/AbS3vKLQ== X-Template: tpl_CleanPeppermintBlack_oneclick X-Language: english Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Pcrew-Ip-Organization: CenturyLink X-Pcrew-Blocked-Reason: X-Domain: calperlongtermcare.com X-Subdomain: notexistsaa Content-Encoding: gzip Data Raw: 63 32 30 0d 0a 1f 8b 08 00 00 00 00 00 04 03 e5 5b e9 77 da c8 96 ff fc fc 57 28 f4 79 16 9e 06 81 58 6c 8c 8d 33 d8 e0 2d 06 2f c1 0b ce c9 e4 14 52 01 02 21 d1 92 30 4b 3f ff ef f3 bb a5 05 81 71 5e f2 4e 67 fa c3 90 13 90 ea 56 dd ba 75 eb ee 55 3e fc 50 bb 3e 69 b5 6f ea 52 df 1b 99 47 5b 87 f4 23 e9 cc 63 69 a6 77 4c 5b 1b 0e f9 bc 92 68 9c 4e a7 b5 db f6 e5 27 fb f9 a2 ff a2 35 ab b7 f5 e3 e3 db 6a ed f3 b4 3a fd 5c bd 3c ae 5e fd 31 a9 9d d6 5b 4f 77 56 f6 dc c9 16 bb f7 37 7b f5 cb d6 de de ac 6d dd 8c ee 3a e3 c6 bc f0 32 2c 7d 6a 1b e7 d6 b0 39 e6 ba 35 b8 ae 36 2f 35 f6 54 7b d2 3e dd 5e 36 b3 d6 d3 a7 e7 cb ab bd 96 66 5c d6 4a 55 fb fc e9 93 5a 2c 9d 54 a7 f5 6a f5 b6 52 f9 76 6a e4 1b fd f6 fe c3 a7 eb a6 33 39 bf 9d 7d be b8 Data Ascii: c20[wW(yXl3-/R!0K?q^NgVuU>P>ioRG[#ciwL[hN'5j:\<^1[OwV7{m:2,}j956/5T{>^6f\JUZ,TjRvj39}
Sep 29, 2024 15:17:08.723258972 CEST	1213	OUT	GET /track.php?domain=calperlongtermcare.com&toggle=browserjs&uid=MTcyNzYxNTgyOC4zNjY6YTVhM2Y5OWYyNmIzZTBhOWQxZWYyZTEwMjcyNWJjYzJjZTNkMWFiN2QwNGNlNTViOGRkMzk3YmIwZjgwM2MyYTo2NmY5NTM1NDU5NTkw HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Disability+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj8QvgQXu7ghwdodehT82JgRTn3vllMykC0FwxvyfTQJr6A0SuG7m0lQBPeY8be8shRgjOY8aIA_Dc4-x7TvuvAzvS8PHi2SQZ6LVKYyrfVusdKdQ6CTxo02n5nKSQlxTjJhvzl1MnjA&pcsa=false&nb=0&nm=2 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Sep 29, 2024 15:17:08.922414064 CEST	608	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 13:17:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 29, 2024 15:17:08.956191063 CEST	1092	OUT	GET /ls.php?t=66f95354&token=002ca744dbc126b8105f96b660f7b6a2674c7bd7 HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Disability+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj8QvgQXu7ghwdodehT82JgRTn3vllMykC0FwxvyfTQJr6A0SuG7m0lQBPeY8be8shRgjOY8aIA_Dc4-x7TvuvAzvS8PHi2SQZ6LVKYyrfVusdKdQ6CTxo02n5nKSQlxTjJhvzl1MnjA&pcsa=false&nb=0&nm=2 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Sep 29, 2024 15:17:09.156128883 CEST	906	IN	HTTP/1.1 201 Created Server: nginx Date: Sun, 29 Sep 2024 13:17:09 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Log-Success: 66f953555b514368680555cd Charset: utf-8 Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Max-Age: 86400 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_bDKxmXGXhMgp86rla2gKWQVrQP+b090/jF8MPBvWU4Godjw86lU8pI9y4uTzRlm5GWiO3KYBn7zydv+YA4qocQ== Data Raw: 31 30 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"success":true}0
Sep 29, 2024 15:17:10.541038036 CEST	1232	OUT	GET /track.php?domain=calperlongtermcare.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTgyOC4zNjY6YTVhM2Y5OWYyNmIzZTBhOWQxZWYyZTEwMjcyNWJjYzJjZTNkMWFiN2QwNGNlNTViOGRkMzk3YmIwZjgwM2MyYTo2NmY5NTM1NDU5NTkw HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Disability+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj8QvgQXu7ghwdodehT82JgRTn3vllMykC0FwxvyfTQJr6A0SuG7m0lQBPeY8be8shRgjOY8aIA_Dc4-x7TvuvAzvS8PHi2SQZ6LVKYyrfVusdKdQ6CTxo02n5nKSQlxTjJhvzl1MnjA&pcsa=false&nb=0&nm=2 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Sep 29, 2024 15:17:10.747858047 CEST	610	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 13:17:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 29, 2024 15:17:15.301358938 CEST	1136	OUT	GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Long-term+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpjxYC9i9y0TgoYIuZ8V_UHRMakU9iohKuhUuqxr8ymSHJsd1j4bjWfISTJnMGI7hFgWr_vhvGP_2LJwczGgGfqI8hF3eyZLCQwcvAFeaUtp6um6oqJ5_8cyL1p-sL7wwR07cSGJTy4bg&pcsa=false&nb=0&nm=1 HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Sep 29, 2024 15:17:15.522397995 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 13:17:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Buckets: bucket011,bucket088,bucket089 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_UUknYYnHrGLWnN9nOcjli4kUwtHE/MSr/AC9k8cqUfvWE890DdmCLKW2jvFabCit4G2o0npIg7lPZNARrAY9Mg== X-Template: tpl_CleanPeppermintBlack_oneclick X-Language: english Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Pcrew-Ip-Organization: CenturyLink X-Pcrew-Blocked-Reason: X-Domain: calperlongtermcare.com X-Subdomain: notexistsaa Content-Encoding: gzip Data Raw: 63 32 30 0d 0a 1f 8b 08 00 00 00 00 00 04 03 ed 5b ed 5b da ca b6 ff 7c fc 2b a6 ec e7 1a bc 1b 02 09 a8 08 c6 5e 14 5b b5 82 da 62 15 fb f4 f6 09 c9 00 81 90 b0 93 20 e0 3e fe ef f7 b7 26 2f 04 c4 9e f6 dc dd 73 be 1c fa 14 92 59 33 6b d6 ac 59 ef 33 1e be 69 5c 9d b4 3b d7 a7 6c 10 8c ed a3 ad 43 fa 61 a6 1e e8 79 dd ec da ae 31 1a f1 85 96 69 be 9b cd 1a 37 9d 8b 0f ee c3 f9 e0 d1 68 d5 6f 4e 8f 8f 6f ea 8d 4f b3 fa ec 53 fd e2 b8 7e f9 c7 b4 f1 ee b4 7d ff d1 29 9e 79 c5 dd de ed f5 fe e9 45 7b 7f 7f de 71 ae c7 1f bb 93 e6 a2 fc 38 aa 7c e8 58 67 ce a8 35 e1 a6 33 bc aa b7 2e 0c fd be 71 6f 7c b8 b9 68 15 9d fb 0f 0f 17 97 fb 6d c3 ba 68 54 ea ee d9 fd 07 65 b7 72 52 9f 9d d6 eb 37 9a f6 ed f6 76 e4 74 3a ce 99 f7 fe f2 ce 69 1d 38 57 Data Ascii: c20[[\|+^[b >&/sY3kY3i\;lCay1i7hoNoOS~})yE{q8\|Xg53.qo\|hmhTerR7vt:i8W
Sep 29, 2024 15:17:15.579567909 CEST	1212	OUT	GET /track.php?domain=calperlongtermcare.com&toggle=browserjs&uid=MTcyNzYxNTgzNS40MDc6NzY2N2VhYmE2OGEzNWE1M2Q3N2M3OWI1MDE1OTc0ODNkNmYxMjc2M2M0YTc1N2Q4NWI3ZjkyYjk3NmYyODMyNDo2NmY5NTM1YjYzNWQ2 HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Long-term+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpjxYC9i9y0TgoYIuZ8V_UHRMakU9iohKuhUuqxr8ymSHJsd1j4bjWfISTJnMGI7hFgWr_vhvGP_2LJwczGgGfqI8hF3eyZLCQwcvAFeaUtp6um6oqJ5_8cyL1p-sL7wwR07cSGJTy4bg&pcsa=false&nb=0&nm=1 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Sep 29, 2024 15:17:15.778830051 CEST	608	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 13:17:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 29, 2024 15:17:15.876132965 CEST	1091	OUT	GET /ls.php?t=66f9535b&token=b12389aec88761c69130efd9163b459583a6c7b3 HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Long-term+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpjxYC9i9y0TgoYIuZ8V_UHRMakU9iohKuhUuqxr8ymSHJsd1j4bjWfISTJnMGI7hFgWr_vhvGP_2LJwczGgGfqI8hF3eyZLCQwcvAFeaUtp6um6oqJ5_8cyL1p-sL7wwR07cSGJTy4bg&pcsa=false&nb=0&nm=1 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Sep 29, 2024 15:17:16.076760054 CEST	906	IN	HTTP/1.1 201 Created Server: nginx Date: Sun, 29 Sep 2024 13:17:15 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Log-Success: 66f9535b257585ee08042990 Charset: utf-8 Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Max-Age: 86400 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_gW5PKOmeYFOUV3o4MOUOUbXA/ivPtS8OMY7urHXezTlCTsl0ICbmMzKDHkrOJpx+iGb6aBYJdCjy0Y1RUbCT+Q== Data Raw: 31 30 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"success":true}0
Sep 29, 2024 15:17:18.160073996 CEST	1231	OUT	GET /track.php?domain=calperlongtermcare.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTgzNS40MDc6NzY2N2VhYmE2OGEzNWE1M2Q3N2M3OWI1MDE1OTc0ODNkNmYxMjc2M2M0YTc1N2Q4NWI3ZjkyYjk3NmYyODMyNDo2NmY5NTM1YjYzNWQ2 HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Long-term+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpjxYC9i9y0TgoYIuZ8V_UHRMakU9iohKuhUuqxr8ymSHJsd1j4bjWfISTJnMGI7hFgWr_vhvGP_2LJwczGgGfqI8hF3eyZLCQwcvAFeaUtp6um6oqJ5_8cyL1p-sL7wwR07cSGJTy4bg&pcsa=false&nb=0&nm=1 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Sep 29, 2024 15:17:18.359338045 CEST	610	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 13:17:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49774	18.66.121.69	80	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 29, 2024 15:16:36.766150951 CEST	447	OUT	GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1 Host: d38psrni17bvxu.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://notexistsaa.calperlongtermcare.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 29, 2024 15:16:37.384196997 CEST	441	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 11375 Connection: keep-alive Server: nginx Date: Sun, 29 Sep 2024 11:04:53 GMT Last-Modified: Thu, 21 Mar 2024 11:48:11 GMT Accept-Ranges: bytes ETag: "65fc1e7b-2c6f" X-Cache: Hit from cloudfront Via: 1.1 1aa52a2a71a599aaf6b3df3a9c53b268.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: jit8khb1MGawZKUiFchBs9M-X8iI48MlWCEca0b1wtuXYqNfWKmrHQ== Age: 7904
Sep 29, 2024 15:16:37.384229898 CEST	1236	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 dc 00 00 02 58 08 03 00 00 00 4f 6d d4 16 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 00 50 4c 54 45 00 00 00 ff Data Ascii: PNGIHDRXOmtEXtSoftwareAdobe ImageReadyqe<PLTEcdtIK^IK]IK\03IHK_acsceubdtcet0=@SHK]IL]HK\MPbNQbORc.0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes-0 5!6"7#8
Sep 29, 2024 15:16:37.384313107 CEST	224	IN	Data Raw: a4 aa 57 2a 20 af c2 1d de 89 88 54 d3 3e 08 77 78 27 22 52 4c fb 60 dc e1 9d 88 48 2d ed c3 70 87 77 22 22 a5 b4 0f c7 1d de 89 88 54 d2 3e 0a 77 78 27 22 12 d9 08 bb 47 e2 0e ef 44 44 ea 68 af 83 3b bc 13 11 29 a3 bd 1e ee f0 4e 44 a4 8a f6 ba Data Ascii: W* T>wx'"RL`H-pw""T>wx'"GDDh;)ND;"DDjho{'~X""74wx'"OND$v/H6;dqw""}+DD2io;ND$;@DDh;=ND$P;Q
Sep 29, 2024 15:16:37.384324074 CEST	1236	IN	Data Raw: 7e b2 47 16 ee f0 4e 44 24 86 f6 90 b8 c3 3b 11 91 10 da c3 e2 0e ef 44 44 22 68 0f 8d 3b bc 13 11 09 a0 3d 3c ee f0 4e 44 94 9d f6 18 b8 c3 3b 11 51 a3 22 38 1c 05 77 78 27 22 ca 4a 7b 2c dc e1 9d 88 28 23 ed f1 70 87 77 22 a2 6c b4 c7 c4 1d de Data Ascii: ~GND$;DD"h;=<ND;Q"8wx'"J{,(#pw"l2wx'"B{l(qw"wx'"JJ{*(!pw"d NDnwx'"h7;MD&qw"2+;MD&qw"v;A
Sep 29, 2024 15:16:37.384350061 CEST	1236	IN	Data Raw: d9 70 8f c4 3b b8 57 c4 db 7b c4 31 99 7c b8 e7 a2 3d 23 ee 51 78 07 f7 aa b8 ac 4a 7d 71 2d 35 09 ee bb bf b8 2d 9f b0 19 71 8f c0 3b b8 57 c6 81 77 e2 bb 3d 03 ee bb 77 9e c8 e9 6b 56 dc 83 f3 0e ee 95 bd 0b 66 b4 be 77 59 15 d1 71 cf 4c 7b 76 Data Ascii: p;W{1\|=#QxJ}q-5-q;Ww=wkVfwYqL{vU)~{v}7Gw=-h{{1F,E.`{_s1W&Bh{ s.vA=hn5wQS;}mwbNI(.v;S
Sep 29, 2024 15:16:37.384366035 CEST	1236	IN	Data Raw: ab d7 99 71 8f c0 7b 2d da cd e2 ce fb 1d 24 ab 4f 4f 16 8b 7b 97 f7 4b 1a 68 8f 85 7b 60 de 6b d2 6e 17 77 0e bc 93 a4 6e 9f 2c 19 f7 d0 bc 47 a2 3d 1e ee 1d de 7f 95 9a 76 c3 b8 73 24 92 e4 f4 ce 64 e1 b8 ef 08 f8 1a 5f 34 da 63 e2 7e f0 e0 37 Data Ascii: q{-$OO{Kh{`knwn,G=vs$d_4c~7v;aCH{\v;$=*qoGLpo{d#?+l19G=oipq=ipv~;$!;wP>?xApo7
Sep 29, 2024 15:16:37.384377003 CEST	1236	IN	Data Raw: 20 53 1f f7 0e ef df 7f 4b 26 ed 3d de ff c4 32 ee 5c 4b 25 15 5d b0 8c 7b 26 da 6b bd c6 37 82 f6 91 b8 8f 3c f8 9e 8f f6 aa 91 91 13 d8 4e 84 ee 81 70 cf 48 fb c8 cd f7 91 b4 d7 c0 7d d8 c9 c8 c3 79 69 ef e7 dd 0e ee 5c 4b 25 35 5d 67 13 f7 dc Data Ascii: SK&=2\K%]{&k7<NpH}yi\K%5]gF]>&O`;2\|;l'BK: W-q:X{k5'#7aikg#6pg)v}dZcR;
Sep 29, 2024 15:16:37.384388924 CEST	896	IN	Data Raw: 05 f7 35 7d 84 11 a4 b3 6d e0 be ae 7f fd c6 d7 f2 ea 9a 15 f7 f1 b3 fb f7 7f ed fe 87 c0 9d 0f 77 e2 d3 dd 16 ee cf df 3f be 7f ff d9 f1 42 71 ef d2 de 2d 20 ef da 71 7f 11 1f 48 73 2f 82 fb 1a da 7b 8d 17 88 fb 15 da 7b dd fb 10 b8 63 3b a1 bb Data Ascii: 5}mw?Bq- qHs/{{c;Wi@{8uv;#p_O{F=sNq=Naxv"t{5xwbhb}w=q?DxW;&n,aGw^b"}4ywhoVo'Sm+z'sNq
Sep 29, 2024 15:16:37.384525061 CEST	1236	IN	Data Raw: cb bc 3f 24 1b 77 46 0e 10 f5 7a 51 36 ee d2 68 bf 3a 53 ac 21 ed cd 71 ef f2 2e 8f f6 1e ef f7 3f 24 18 77 b6 64 88 56 fa 48 30 ee 12 69 ef f1 de 98 76 1f dc 9f 5a 3a 33 b6 5f 28 ef ff 84 ed 44 e8 ee db b7 85 d2 be 7f ec cc d2 53 d1 71 7f 6a a9 Data Ascii: ?$wFzQ6h:S!q.?$wdVH0ivZ:3_(DSqjEcya\*LPO;Y}qq7Kk{,;Q2,"Rio]=D6l_]ho]+gL~w)}/JWi;Y}w>x_C{
Sep 29, 2024 15:16:37.384536982 CEST	1236	IN	Data Raw: 02 b6 13 29 ea 37 36 70 af 45 7b 72 de 9d 3c da 5b f0 2e 0b 77 46 0e 10 8d e8 13 03 b8 d7 a6 3d 31 ef 4e 22 ed de bc 2f 60 3b 11 ba a7 c4 bd 11 ed 49 79 4f 83 fb c7 0d ff f3 7d 79 5f c0 76 22 74 4f 87 7b 63 da 13 f2 ee a4 d2 ee c5 bb 20 dc 59 b4 Data Ascii: )76pE{r<[.wF=1N"/`;IyO}y_v"tO{c YDxwri}='I1N)poE{lD{SiON{#c;7}=.h{,/6pgG;]*%IiB{-8"~+(G
Sep 29, 2024 15:16:37.389214993 CEST	308	IN	Data Raw: 24 81 f7 dc b8 37 1e fc 28 09 77 74 27 32 64 7b 40 dc 25 f0 ee 0c d1 9e 1e 77 74 27 b2 63 7b 50 dc f3 f3 ee 0c d1 0e ee 44 e0 2e 06 f7 dc af f1 39 43 b4 b3 e7 4e 04 ef 82 70 cf cb bb 33 44 7b 62 dc 39 0b 49 14 bd cb ba 71 cf c9 bb 33 44 3b e7 dc Data Ascii: $7(wt'2d{@%wt'c{PD.9CNp3D{b9Iq3D;]FF:C'1VQS{&hO;=Yxwil'Bwg=-3QiO;(]&pO{Jg"tDrqO3D{*eZ'=Nd=R3pOC{"YgD6uOSwVQI5ct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49776	185.53.179.172	80	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 29, 2024 15:16:37.042032957 CEST	580	OUT	GET /track.php?domain=calperlongtermcare.com&toggle=browserjs&uid=MTcyNzYxNTc5NS4yNjM3OmRkNDlhZjNmMDUyYjU0NmNhNzY4NDUxMWMzNDdkNTQ4ZWFmNzFhNzkyMmNjYjNmNGM3MDUyY2YxNDBlNDRhZGU6NjZmOTUzMzM0MDYzNg%3D%3D HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Sep 29, 2024 15:16:37.708262920 CEST	608	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 13:16:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 29, 2024 15:16:41.508909941 CEST	599	OUT	GET /track.php?domain=calperlongtermcare.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTc5NS4yNjM3OmRkNDlhZjNmMDUyYjU0NmNhNzY4NDUxMWMzNDdkNTQ4ZWFmNzFhNzkyMmNjYjNmNGM3MDUyY2YxNDBlNDRhZGU6NjZmOTUzMzM0MDYzNg%3D%3D HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Sep 29, 2024 15:16:41.710719109 CEST	610	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 13:16:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 29, 2024 15:16:42.699812889 CEST	398	OUT	GET /favicon.ico HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Sep 29, 2024 15:16:42.894416094 CEST	230	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 13:16:42 GMT Content-Type: image/x-icon Content-Length: 0 Connection: keep-alive Last-Modified: Thu, 26 Sep 2024 07:56:43 GMT ETag: "66f513bb-0" Accept-Ranges: bytes
Sep 29, 2024 15:16:45.444494009 CEST	580	OUT	GET /track.php?domain=calperlongtermcare.com&toggle=browserjs&uid=MTcyNzYxNTgwNS4wODA5OjkzM2NiZGEwODhjNzQyZTkxMzk3Y2Q5N2QzODliZDM5NDFjNzhmMTU5ZjkzZDAwNTQwMGNkMDNiYzQ1NGE5MGQ6NjZmOTUzM2QxM2MxOA%3D%3D HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Sep 29, 2024 15:16:45.646347046 CEST	608	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 13:16:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 29, 2024 15:16:46.607407093 CEST	599	OUT	GET /track.php?domain=calperlongtermcare.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTgwNS4wODA5OjkzM2NiZGEwODhjNzQyZTkxMzk3Y2Q5N2QzODliZDM5NDFjNzhmMTU5ZjkzZDAwNTQwMGNkMDNiYzQ1NGE5MGQ6NjZmOTUzM2QxM2MxOA%3D%3D HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Sep 29, 2024 15:16:46.804693937 CEST	610	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 13:16:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 29, 2024 15:16:51.461319923 CEST	580	OUT	GET /track.php?domain=calperlongtermcare.com&toggle=browserjs&uid=MTcyNzYxNTgwOS41MTQyOjk4ODg5ZDBkOTNhZmViZDZjZmJlMDcyMzEwZmU1NTA3NWRiMmMxYzExOGZkODQ5OTAxMWM4Yjg0OTlmZGZiNTU6NjZmOTUzNDE3ZDhhYg%3D%3D HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Sep 29, 2024 15:16:51.659286022 CEST	608	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 13:16:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 29, 2024 15:16:53.314806938 CEST	599	OUT	GET /track.php?domain=calperlongtermcare.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTgwOS41MTQyOjk4ODg5ZDBkOTNhZmViZDZjZmJlMDcyMzEwZmU1NTA3NWRiMmMxYzExOGZkODQ5OTAxMWM4Yjg0OTlmZGZiNTU6NjZmOTUzNDE3ZDhhYg%3D%3D HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Sep 29, 2024 15:16:53.512851000 CEST	610	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 13:16:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 29, 2024 15:17:03.078358889 CEST	580	OUT	GET /track.php?domain=calperlongtermcare.com&toggle=browserjs&uid=MTcyNzYxNTgyMi42ODg3OmQ4OTczZDQ3MDMwYjk0NzQ3ODhiOTVmZTk5NjdkZWM1MWI2ZmM3Yzg4NTgyMzEwZjE1NWE4MWQ5YjZiYWNiY2I6NjZmOTUzNGVhODIyNg%3D%3D HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Sep 29, 2024 15:17:03.276058912 CEST	608	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 13:17:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 29, 2024 15:17:05.585408926 CEST	599	OUT	GET /track.php?domain=calperlongtermcare.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTgyMi42ODg3OmQ4OTczZDQ3MDMwYjk0NzQ3ODhiOTVmZTk5NjdkZWM1MWI2ZmM3Yzg4NTgyMzEwZjE1NWE4MWQ5YjZiYWNiY2I6NjZmOTUzNGVhODIyNg%3D%3D HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Sep 29, 2024 15:17:05.783898115 CEST	610	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 13:17:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 29, 2024 15:17:09.400352955 CEST	572	OUT	GET /track.php?domain=calperlongtermcare.com&toggle=browserjs&uid=MTcyNzYxNTgyOC4zNjY6YTVhM2Y5OWYyNmIzZTBhOWQxZWYyZTEwMjcyNWJjYzJjZTNkMWFiN2QwNGNlNTViOGRkMzk3YmIwZjgwM2MyYTo2NmY5NTM1NDU5NTkw HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Sep 29, 2024 15:17:09.597398996 CEST	608	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 13:17:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 29, 2024 15:17:11.712053061 CEST	591	OUT	GET /track.php?domain=calperlongtermcare.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTgyOC4zNjY6YTVhM2Y5OWYyNmIzZTBhOWQxZWYyZTEwMjcyNWJjYzJjZTNkMWFiN2QwNGNlNTViOGRkMzk3YmIwZjgwM2MyYTo2NmY5NTM1NDU5NTkw HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Sep 29, 2024 15:17:11.911226988 CEST	610	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 13:17:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 29, 2024 15:17:16.740843058 CEST	572	OUT	GET /track.php?domain=calperlongtermcare.com&toggle=browserjs&uid=MTcyNzYxNTgzNS40MDc6NzY2N2VhYmE2OGEzNWE1M2Q3N2M3OWI1MDE1OTc0ODNkNmYxMjc2M2M0YTc1N2Q4NWI3ZjkyYjk3NmYyODMyNDo2NmY5NTM1YjYzNWQ2 HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Sep 29, 2024 15:17:16.942955971 CEST	608	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 13:17:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 29, 2024 15:17:18.726370096 CEST	591	OUT	GET /track.php?domain=calperlongtermcare.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTgzNS40MDc6NzY2N2VhYmE2OGEzNWE1M2Q3N2M3OWI1MDE1OTc0ODNkNmYxMjc2M2M0YTc1N2Q4NWI3ZjkyYjk3NmYyODMyNDo2NmY5NTM1YjYzNWQ2 HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
Sep 29, 2024 15:17:18.923885107 CEST	610	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 13:17:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49778	18.66.121.190	80	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 29, 2024 15:16:37.820928097 CEST	333	OUT	GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1 Host: d38psrni17bvxu.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 29, 2024 15:16:38.440191031 CEST	441	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 11375 Connection: keep-alive Server: nginx Date: Sun, 29 Sep 2024 11:04:53 GMT Last-Modified: Thu, 21 Mar 2024 11:48:11 GMT Accept-Ranges: bytes ETag: "65fc1e7b-2c6f" X-Cache: Hit from cloudfront Via: 1.1 7b314c2b827b3a655861e27775634208.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: ezhO9WEkyM2F24wD6p_eIZ2CD-ajOdBjP0K52uXkQANATTs3CY_xrQ== Age: 7905
Sep 29, 2024 15:16:38.440280914 CEST	1236	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 dc 00 00 02 58 08 03 00 00 00 4f 6d d4 16 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 00 50 4c 54 45 00 00 00 ff Data Ascii: PNGIHDRXOmtEXtSoftwareAdobe ImageReadyqe<PLTEcdtIK^IK]IK\03IHK_acsceubdtcet0=@SHK]IL]HK\MPbNQbORc.0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes-0 5!6"7#8
Sep 29, 2024 15:16:38.440320015 CEST	1236	IN	Data Raw: a4 aa 57 2a 20 af c2 1d de 89 88 54 d3 3e 08 77 78 27 22 52 4c fb 60 dc e1 9d 88 48 2d ed c3 70 87 77 22 22 a5 b4 0f c7 1d de 89 88 54 d2 3e 0a 77 78 27 22 12 d9 08 bb 47 e2 0e ef 44 44 ea 68 af 83 3b bc 13 11 29 a3 bd 1e ee f0 4e 44 a4 8a f6 ba Data Ascii: W* T>wx'"RL`H-pw""T>wx'"GDDh;)ND;"DDjho{'~X""74wx'"OND$v/H6;dqw""}+DD2io;ND$;@DDh;=ND$P;Q~GND$;
Sep 29, 2024 15:16:38.440330982 CEST	448	IN	Data Raw: 3d 32 ee c9 79 07 77 74 27 af 58 35 e9 71 8f 4b 7b 74 dc 3b bc 7f 09 dc d1 9d b0 1d dc d3 d2 9e 00 f7 f9 f9 53 bb c0 1d dd 49 70 3f 67 c5 a4 c6 3d 3e ed 49 70 4f c8 3b b8 5f e9 4e c4 22 8e c9 48 c5 3d 05 ed 89 70 4f c6 3b b8 5f 8d eb 4c 54 b3 cf Data Ascii: =2ywt'X5qK{t;SIp?g=>IpO;_N"H=pO;_LTZd'W;.T'}~K=IqO;;aXS;fI\]J{ZwpGwj+$i{Tf="py[gwp2=p;W{1\|=#
Sep 29, 2024 15:16:38.440388918 CEST	1236	IN	Data Raw: 4e d6 49 28 dc 85 d1 2e 0f f7 76 bc 83 3b b6 53 b3 b8 ce 14 06 77 71 b4 4b c4 bd 0d ef e0 be 1a d7 52 09 dd 53 e1 2e 90 76 99 b8 fb f3 0e ee d8 4e e8 9e 1a f7 db 7e 7c 42 22 a3 32 71 f7 e5 1d dc af c4 c8 01 aa 1d 97 55 5b e1 7e db 4b 42 11 95 8a Data Ascii: NI(.v;SwqKRS.vN~\|B"2qU[~KB#.v1r(O9C{/^q]i{<Rht;=i?k>ht7Fl6D~jc;]pWOw
Sep 29, 2024 15:16:38.440402031 CEST	1236	IN	Data Raw: 50 be 3e 3f 09 ee 03 78 7f 41 1e ed e9 70 6f c0 bb 37 ed 25 e0 ce 75 26 ca d5 ed 93 e0 3e b0 da cf 35 25 a3 3d 25 ee 35 79 6f 41 7b 11 b8 73 24 92 f2 f4 ce 24 b8 b7 e6 7d f6 50 42 70 53 e2 5e 83 f7 56 b4 97 81 3b ba 13 b6 0b c4 bd c3 fb 76 49 b4 Data Ascii: P>?xApo7%u&>5%=%5yoA{s$$}PBpS^V;vI}-i/wS.L{iO9I+daM&hs:qGwvWk~)2q=p_{(K;(U=]^x4>='J{Ys$R$
Sep 29, 2024 15:16:38.440507889 CEST	1236	IN	Data Raw: 8b a4 7d 85 f7 1a 07 64 5a e0 de e5 fd d9 63 52 3b fe 85 dd 5c 4b 25 ca 93 85 cb aa 7f 29 95 f6 4e cf 1e 58 6a 88 75 43 dc 5f ff e0 dc f9 37 a4 f2 be f5 b9 b9 93 52 63 ed 13 ad f4 b0 d8 65 3a f7 dc 56 a9 b4 bf 71 fe dc 07 af 47 c4 bd 43 7b 37 99 Data Ascii: }dZcR;\K%)NXjuC_7Rce:VqGC{7o}Y;r"yHkYaV5.yJ{Cx_]6\|n_(wG(.wt'l ho{-_?WWi;].}w*zp@k>
Sep 29, 2024 15:16:38.440520048 CEST	1236	IN	Data Raw: 0d f7 7a b4 27 e6 dd 89 a3 bd 0d ef 73 d8 4e 84 ee 89 71 af 4f 7b b7 b3 c6 70 6f 44 bb 3f ef 3a 71 87 02 b2 57 39 b8 6f bd a7 a9 6e 89 78 77 29 fe 87 1a d3 ee cb bb 46 dc b9 96 4a e8 ae 17 f7 ad 5f f7 d1 2d 89 ba ee ae bb c6 ce 0a a4 dd 8f f7 39 Data Ascii: z'sNqO{poD?:qW9onxw)FJ_-9l'G{?sW{>n'}dw#ea;'y?;qxoM{[:qoO{$JU`7]7z7Z=y_K>
Sep 29, 2024 15:16:38.440531015 CEST	328	IN	Data Raw: c3 a2 0e dc 83 f3 3e 16 52 dd 41 b8 07 a5 3d 30 ef b5 68 17 82 fb e2 0f 58 a9 44 cd fa c1 a2 1a dc 83 f2 3e 16 5a dd 4a dc 97 22 34 96 94 76 29 b8 33 8a 80 a8 59 07 16 35 e1 1e 8c f7 b1 18 ea f6 e1 be 14 a9 b1 84 b4 8b c1 9d 8d 77 a2 26 bd b9 a8 Data Ascii: >RA=0hXD>ZJ"4v)3Y5w& :"6vA;:h_E%h;ixJ.:ycIh;J]h*P{$vY;.{;%9T{cSf5y.wt'dxOG{RI8
Sep 29, 2024 15:16:38.440541029 CEST	1236	IN	Data Raw: b3 e0 3e 98 f7 96 b4 cb c4 1d dd 89 2a 7a 73 d1 1c ee 03 79 cf 41 7b 26 dc ab 79 6f 4d bb 50 dc d1 9d 48 85 ed ed 71 af e4 3d 0f ed d9 70 ef e7 3d 00 ed 52 71 47 77 a2 0d c9 5c a9 0b 21 14 1a 8f f1 cc 92 2a dc d7 f3 1e 84 76 b1 b8 a3 3b 91 02 db Data Ascii: >zsyA{&yoMPHq=p=RqGw\!v;\|g}@=3KKcw]0N$pxK{v:w?aE-I?tn[G;2D\|=zGDwB{fw'`sHGV/1w
Sep 29, 2024 15:16:38.445173025 CEST	1236	IN	Data Raw: 15 ef ce 10 ed 31 71 47 77 22 19 fd e7 74 4e dc 15 f1 ee 0c d1 1e 15 77 0e cd 10 49 e8 ab d3 99 71 ef f0 2e f7 35 be 27 ab 70 37 40 7b 5c dc f9 78 27 32 bc 25 d3 00 77 25 bc 3b 43 b4 c7 c6 9d 6f 77 22 cb b6 d7 c7 7d 4a f2 63 ab 4f ae c5 dd 08 ed Data Ascii: 1qGw"tNwIq.5'p7@{\x'2%w%;Cow"}JcOqGw&wxw3Gw;?1Np3D{K](3>'`qbG"qD6mG&pGw"O#wgTQ:-w59C'R\|

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	185.53.179.172	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:16:15 UTC	677	OUT	GET / HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:16:15 UTC	1135	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Alt-Svc: h3=":8443"; ma=2592000 Content-Type: text/html; charset=UTF-8 Date: Sun, 29 Sep 2024 13:16:15 GMT Host: {http.reverse_proxy.upstream.hostport} Server: Caddy Server: nginx Vary: Accept-Encoding X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_k+DcGgdTfMe4qvDcpKsLuXCUtPLF82oXuZp62V1+6PjTZsT8wxDTD7TGbQkAybJsAYPxkkfJsY/UBZS+Q+dgnQ== X-Buckets: bucket011,bucket088,bucket089 X-Domain: calperlongtermcare.com X-Forwarded-Host: notexistsaa.calperlongtermcare.com X-Language: english X-Pcrew-Blocked-Reason: X-Pcrew-Ip-Organization: CenturyLink X-Ssl-C: v1 X-Ssl-Proxy: v3 X-Subdomain: notexistsaa X-Template: tpl_CleanPeppermintBlack_twoclick Connection: close Transfer-Encoding: chunked
2024-09-29 13:16:15 UTC	2372	IN	Data Raw: 33 62 65 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4c 71 75 44 46 45 54 58 52 6e 30 48 72 30 35 66 55 50 37 45 4a 54 37 37 78 59 6e 50 6d 52 62 70 4d 79 34 76 6b 38 4b 59 69 48 6e 6b 4e 70 65 64 6e 6a 4f 41 4e 4a 63 61 58 44 58 63 4b 51 4a 4e 30 6e 58 4b 5a 4a 4c 37 54 63 69 4a 44 38 41 6f 48 58 4b 31 35 38 43 41 77 45 41 41 51 3d 3d 5f 6b 2b 44 63 47 67 64 54 66 4d 65 34 71 76 44 63 70 4b 73 4c 75 58 43 55 74 50 4c 46 38 32 6f 58 75 5a 70 36 32 56 31 2b 36 50 6a 54 5a 73 54 38 77 78 44 54 44 37 54 47 62 51 6b 41 79 62 4a 73 41 59 50 78 6b 6b 66 4a 73 59 2f 55 42 5a 53 2b 51 Data Ascii: 3beb<!DOCTYPE html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_k+DcGgdTfMe4qvDcpKsLuXCUtPLF82oXuZp62V1+6PjTZsT8wxDTD7TGbQkAybJsAYPxkkfJsY/UBZS+Q
2024-09-29 13:16:15 UTC	1724	IN	Data Raw: 63 48 6f 6c 64 65 72 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 32 72 65 6d 3b 0a 7d 0a 0a 2e 61 64 73 48 6f 6c 64 65 72 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 31 72 65 6d 20 30 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 32 72 65 6d 3b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 0a 7d 0a 0a 2e 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 23 36 32 36 35 37 34 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 32 72 65 6d 20 31 72 65 6d 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 72 65 6d 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 34 34 30 70 78 3b 0a 7d 0a 0a 2e 66 6f 6f 74 65 72 20 61 3a 6c 69 6e 6b 2c 0a 2e 66 6f 6f 74 65 72 Data Ascii: cHolder { padding-top: 2rem;}.adsHolder { margin: 1rem 0; padding-top: 2rem; overflow:hidden;}.footer { color:#626574; padding:2rem 1rem; font-size:.8rem; margin:0 auto; max-width:440px;}.footer a:link,.footer
2024-09-29 13:16:15 UTC	4744	IN	Data Raw: 76 63 6d 63 76 4d 6a 41 77 4d 43 39 7a 64 6d 63 69 49 47 68 6c 61 57 64 6f 64 44 30 69 4d 6a 51 69 49 48 5a 70 5a 58 64 43 62 33 67 39 49 6a 41 67 4d 43 41 79 4e 43 41 79 4e 43 49 67 64 32 6c 6b 64 47 67 39 49 6a 49 30 49 6a 34 38 63 47 46 30 61 43 42 6b 50 53 4a 4e 4d 43 41 77 61 44 49 30 64 6a 49 30 53 44 42 36 49 69 42 6d 61 57 78 73 50 53 4a 75 62 32 35 6c 49 69 38 2b 50 48 42 68 64 47 67 67 5a 44 30 69 54 54 55 75 4f 44 67 67 4e 43 34 78 4d 6b 77 78 4d 79 34 33 4e 69 41 78 4d 6d 77 74 4e 79 34 34 4f 43 41 33 4c 6a 67 34 54 44 67 67 4d 6a 4a 73 4d 54 41 74 4d 54 42 4d 4f 43 41 79 65 69 49 76 50 6a 77 76 63 33 5a 6e 50 67 3d 3d 27 29 3b 0a 7d 3c 2f 73 74 79 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 Data Ascii: vcmcvMjAwMC9zdmciIGhlaWdodD0iMjQiIHZpZXdCb3g9IjAgMCAyNCAyNCIgd2lkdGg9IjI0Ij48cGF0aCBkPSJNMCAwaDI0djI0SDB6IiBmaWxsPSJub25lIi8+PHBhdGggZD0iTTUuODggNC4xMkwxMy43NiAxMmwtNy44OCA3Ljg4TDggMjJsMTAtMTBMOCAyeiIvPjwvc3ZnPg==');}</style> <meta name="og:descripti
2024-09-29 13:16:15 UTC	5930	IN	Data Raw: 43 6f 6d 70 6f 6e 65 6e 74 28 73 74 61 74 75 73 2e 65 72 72 6f 72 5f 63 6f 64 65 29 20 2b 20 22 26 75 69 64 3d 22 20 2b 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 75 6e 69 71 75 65 54 72 61 63 6b 69 6e 67 49 44 29 29 3b 69 66 20 28 5b 31 38 2c 20 31 39 5d 2e 69 6e 64 65 78 4f 66 28 70 61 72 73 65 49 6e 74 28 73 74 61 74 75 73 2e 65 72 72 6f 72 5f 63 6f 64 65 29 29 20 21 3d 20 2d 31 20 26 26 20 66 61 6c 6c 62 61 63 6b 54 72 69 67 67 65 72 65 64 20 3d 3d 20 66 61 6c 73 65 29 20 7b 66 61 6c 6c 62 61 63 6b 54 72 69 67 67 65 72 65 64 20 3d 20 74 72 75 65 3b 69 66 20 28 74 79 70 65 6f 66 20 6c 6f 61 64 46 65 65 64 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 29 20 7b 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 27 2f 2f Data Ascii: Component(status.error_code) + "&uid=" + encodeURIComponent(uniqueTrackingID));if ([18, 19].indexOf(parseInt(status.error_code)) != -1 && fallbackTriggered == false) {fallbackTriggered = true;if (typeof loadFeed === "function") {window.location.href = '//
2024-09-29 13:16:15 UTC	575	IN	Data Raw: 6e 63 74 69 6f 6e 20 67 65 74 4c 6f 61 64 46 65 65 64 41 72 67 75 6d 65 6e 74 73 28 29 20 7b 0a 20 20 20 20 20 20 20 20 6c 65 74 20 61 72 67 75 6d 65 6e 74 73 20 3d 20 5b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 67 65 4f 70 74 69 6f 6e 73 0a 20 20 20 20 20 20 20 20 5d 3b 0a 0a 20 20 20 20 20 20 20 20 6c 65 74 20 70 6f 73 73 69 62 6c 65 41 72 67 75 6d 65 6e 74 73 20 3d 20 5b 27 61 64 62 6c 6f 63 6b 27 2c 20 27 61 64 62 6c 6f 63 6b 31 27 2c 20 27 61 64 62 6c 6f 63 6b 32 27 2c 20 27 74 63 62 6c 6f 63 6b 27 2c 20 27 73 65 61 72 63 68 62 6f 78 42 6c 6f 63 6b 27 2c 20 27 72 74 62 6c 6f 63 6b 27 2c 20 27 72 73 62 6c 6f 63 6b 27 2c 20 27 73 65 61 72 63 68 62 6c 6f 63 6b 27 5d 3b 0a 20 20 20 20 20 20 20 20 66 6f 72 20 28 6c 65 74 20 69 20 3d 20 30 3b 20 69 20 Data Ascii: nction getLoadFeedArguments() { let arguments = [ pageOptions ]; let possibleArguments = ['adblock', 'adblock1', 'adblock2', 'tcblock', 'searchboxBlock', 'rtblock', 'rsblock', 'searchblock']; for (let i = 0; i
2024-09-29 13:16:15 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-09-29 13:16:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49735	185.53.179.172	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:16:15 UTC	824	OUT	GET /track.php?domain=calperlongtermcare.com&toggle=browserjs&uid=MTcyNzYxNTc3NS4yNDM4OmRmMjk1NDRhMGE4OWQ3MjlkMjZmNGVkMzcyMmQwZjM0NGI5ZWY3ODU1OTYzY2UyMzk2YmQxNzBlNGJiZDY3OGY6NjZmOTUzMWYzYjg3Ng%3D%3D HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" device-memory: 8 rtt: 250 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 dpr: 1 downlink: 1.6 ect: 4g sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notexistsaa.calperlongtermcare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:16:15 UTC	726	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Alt-Svc: h3=":8443"; ma=2592000 Content-Type: text/html; charset=UTF-8 Date: Sun, 29 Sep 2024 13:16:15 GMT Host: {http.reverse_proxy.upstream.hostport} Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: browserjs X-Forwarded-Host: notexistsaa.calperlongtermcare.com X-Ssl-C: v1 X-Ssl-Proxy: v3 Connection: close Transfer-Encoding: chunked
2024-09-29 13:16:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49739	18.66.121.135	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:16:16 UTC	658	OUT	GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1 Host: d38psrni17bvxu.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://notexistsaa.calperlongtermcare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:16:16 UTC	436	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 11375 Connection: close Server: nginx Date: Sun, 29 Sep 2024 11:32:41 GMT Last-Modified: Thu, 21 Mar 2024 11:48:11 GMT Accept-Ranges: bytes ETag: "65fc1e7b-2c6f" X-Cache: Hit from cloudfront Via: 1.1 db1cc9ceb7681bf2a56c0f22acac3a36.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: R2F9hspA_BupwvhVZDArpDlTJklD0vJhW7ZnsElEfSWhvFB_MH0J7A== Age: 6215
2024-09-29 13:16:16 UTC	11375	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 dc 00 00 02 58 08 03 00 00 00 4f 6d d4 16 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 00 50 4c 54 45 00 00 00 ff ff ff 63 64 74 49 4b 5e 49 4b 5d 49 4b 5c 30 33 49 48 4b 5f 61 63 73 63 65 75 62 64 74 63 65 74 15 19 30 3d 40 53 48 4b 5d 49 4c 5d 48 4b 5c 4d 50 62 4e 51 62 4f 52 63 12 17 2e 14 19 30 22 26 3b 28 2c 40 2b 2f 42 30 34 49 2e 32 46 2f 33 47 2d 31 44 30 34 48 2e 32 45 30 34 47 31 35 48 32 36 49 35 39 4c 38 3c 50 36 3a 4d 39 3d 51 37 3b 4e 3a 3e 52 3a 3e 51 3b 3f 52 3c 40 53 49 4c 5c 62 65 75 61 64 74 62 65 74 63 66 74 62 65 73 13 18 2d 15 1a 30 1b 20 35 1c 21 36 1d 22 37 1e 23 38 1d 22 36 1f 24 39 20 25 3a 21 26 3b Data Ascii: PNGIHDRXOmtEXtSoftwareAdobe ImageReadyqe<PLTEcdtIK^IK]IK\03IHK_acsceubdtcet0=@SHK]IL]HK\MPbNQbORc.0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes-0 5!6"7#8"6$9 %:!&;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49742	142.250.186.164	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:16:16 UTC	670	OUT	GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://notexistsaa.calperlongtermcare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:16:16 UTC	844	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 153207 Date: Sun, 29 Sep 2024 13:16:16 GMT Expires: Sun, 29 Sep 2024 13:16:16 GMT Cache-Control: private, max-age=3600 ETag: "5807633318253471531" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-29 13:16:16 UTC	546	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 68 61 73 68 3a 22 31 37 33 38 33 36 33 33 34 36 34 33 37 30 36 31 35 35 35 33 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 30 30 30 32 2c 31 37 33 30 31 34 33 37 2c 31 37 33 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17300002,17301437,173
2024-09-29 13:16:16 UTC	1390	IN	Data Raw: 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 69 35 75 5a 58 51 73 64 Data Ascii: rovidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsd
2024-09-29 13:16:16 UTC	1390	IN	Data Raw: 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 Data Ascii: )return a;c.prototype.toString=function(){return this.ne};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8ClampedArray
2024-09-29 13:16:16 UTC	1390	IN	Data Raw: 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 61 3d 6c 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 70 61 29 70 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e 64 65 Data Ascii: +" is not extensible");return a}:null}var pa=la;function qa(a,b){a.prototype=ka(b.prototype);a.prototype.constructor=a;if(pa)pa(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.de
2024-09-29 13:16:16 UTC	1390	IN	Data Raw: 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 55 66 28 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 62 64 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 67 67 28 68 2c 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 62 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 63 65 28 32 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 64 3d 66 75 6e 63 74 69 6f Data Ascii: e "function":h=!0;break a;default:h=!1}h?this.Uf(g):this.Ld(g)}};b.prototype.Uf=function(g){var h=void 0;try{h=g.then}catch(k){this.bd(k);return}typeof h=="function"?this.gg(h,g):this.Ld(g)};b.prototype.bd=function(g){this.ce(2,g)};b.prototype.Ld=functio
2024-09-29 13:16:16 UTC	1390	IN	Data Raw: 72 20 6c 2c 6d 2c 70 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 69 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 0a 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 42 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 Data Ascii: r l,m,p=new b(function(r,t){l=r;m=t});this.ib(k(g,l),k(h,m));return p};b.prototype.catch=function(g){return this.then(void 0,g)};b.prototype.ib=function(g,h){function k(){switch(l.B){case 1:g(l.Xa);break;case 2:h(l.Xa);break;default:throw Error("Unexpect
2024-09-29 13:16:16 UTC	1390	IN	Data Raw: 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 73 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 63 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a 65 63 74 2e 73 65 61 6c Data Ascii: ction"}function e(k){if(!sa(k,g)){var l=new c;ca(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var k=Object.seal
2024-09-29 13:16:16 UTC	1390	IN	Data Raw: 3a 6d 2c 69 6e 64 65 78 3a 68 2c 49 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 49 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 75 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 Data Ascii: :m,index:h,I:p}}return{id:l,list:m,index:-1,I:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=u(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Objec
2024-09-29 13:16:16 UTC	1390	IN	Data Raw: 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 Data Ascii: urn h.key})};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,h.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.prototype.entries;v
2024-09-29 13:16:16 UTC	1390	IN	Data Raw: 69 66 28 64 5b 2d 2d 63 5d 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 65 3c 3d 30 7d 7d 29 3b 0a 71 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 73 61 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 5b 64 2c 62 5b 64 5d 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 Data Ascii: if(d[--c]!=b[--e])return!1;return e<=0}});q("Object.entries",function(a){return a?a:function(b){var c=[],d;for(d in b)sa(b,d)&&c.push([d,b[d]]);return c}});q("Array.prototype.find",function(a){return a?a:function(b,c){a:{var d=this;d instanceof String&&(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49741	185.53.179.172	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:16:16 UTC	695	OUT	GET /ls.php?t=66f9531f&token=1753bcdf7e1334ef35daf0f89f8347a35bd1b0fb HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" device-memory: 8 rtt: 250 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 dpr: 1 downlink: 1.6 ect: 4g sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notexistsaa.calperlongtermcare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:16:17 UTC	1052	IN	HTTP/1.1 201 Created Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Origin: Access-Control-Max-Age: 86400 Alt-Svc: h3=":8443"; ma=2592000 Charset: utf-8 Content-Type: text/javascript;charset=UTF-8 Date: Sun, 29 Sep 2024 13:16:16 GMT Host: {http.reverse_proxy.upstream.hostport} Server: Caddy Server: nginx X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_LF5pJQe5K6TVozvSQaPtATJtMcC0chfHeQUxXZoITiXHIBtrwm+nvg2WR7o4EchrpmIIAmvSiBdJvEbMImpu4A== X-Forwarded-Host: notexistsaa.calperlongtermcare.com X-Log-Success: 66f95320769810fa390925a4 X-Ssl-C: v1 X-Ssl-Proxy: v3 Connection: close Transfer-Encoding: chunked
2024-09-29 13:16:17 UTC	22	IN	Data Raw: 31 30 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d 0d 0a Data Ascii: 10{"success":true}
2024-09-29 13:16:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49743	185.53.179.172	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:16:16 UTC	551	OUT	GET /track.php?domain=calperlongtermcare.com&toggle=browserjs&uid=MTcyNzYxNTc3NS4yNDM4OmRmMjk1NDRhMGE4OWQ3MjlkMjZmNGVkMzcyMmQwZjM0NGI5ZWY3ODU1OTYzY2UyMzk2YmQxNzBlNGJiZDY3OGY6NjZmOTUzMWYzYjg3Ng%3D%3D HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:16:17 UTC	726	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Alt-Svc: h3=":8443"; ma=2592000 Content-Type: text/html; charset=UTF-8 Date: Sun, 29 Sep 2024 13:16:17 GMT Host: {http.reverse_proxy.upstream.hostport} Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: browserjs X-Forwarded-Host: notexistsaa.calperlongtermcare.com X-Ssl-C: v1 X-Ssl-Proxy: v3 Connection: close Transfer-Encoding: chunked
2024-09-29 13:16:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49745	18.66.121.69	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:16:17 UTC	404	OUT	GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1 Host: d38psrni17bvxu.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:16:17 UTC	436	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 11375 Connection: close Server: nginx Date: Sun, 29 Sep 2024 11:32:41 GMT Last-Modified: Thu, 21 Mar 2024 11:48:11 GMT Accept-Ranges: bytes ETag: "65fc1e7b-2c6f" X-Cache: Hit from cloudfront Via: 1.1 d71acb203a3e8fc7db2c1cf9725d51da.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: 1shYAJIXgQ-hd5dz8QCB9B9ya8r86qazbHT7xmQ8OShVkyJd0T152Q== Age: 6216
2024-09-29 13:16:17 UTC	11375	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 dc 00 00 02 58 08 03 00 00 00 4f 6d d4 16 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 00 50 4c 54 45 00 00 00 ff ff ff 63 64 74 49 4b 5e 49 4b 5d 49 4b 5c 30 33 49 48 4b 5f 61 63 73 63 65 75 62 64 74 63 65 74 15 19 30 3d 40 53 48 4b 5d 49 4c 5d 48 4b 5c 4d 50 62 4e 51 62 4f 52 63 12 17 2e 14 19 30 22 26 3b 28 2c 40 2b 2f 42 30 34 49 2e 32 46 2f 33 47 2d 31 44 30 34 48 2e 32 45 30 34 47 31 35 48 32 36 49 35 39 4c 38 3c 50 36 3a 4d 39 3d 51 37 3b 4e 3a 3e 52 3a 3e 51 3b 3f 52 3c 40 53 49 4c 5c 62 65 75 61 64 74 62 65 74 63 66 74 62 65 73 13 18 2d 15 1a 30 1b 20 35 1c 21 36 1d 22 37 1e 23 38 1d 22 36 1f 24 39 20 25 3a 21 26 3b Data Ascii: PNGIHDRXOmtEXtSoftwareAdobe ImageReadyqe<PLTEcdtIK^IK]IK\03IHK_acsceubdtcet0=@SHK]IL]HK\MPbNQbORc.0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes-0 5!6"7#8"6$9 %:!&;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49748	142.250.185.78	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:16:18 UTC	1885	OUT	GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2C000003%2C000517%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet12_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fnotexistsaa.calperlongtermcare.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1LjI2MzJ8YTg1OWE2YWE0Yzc1ZjU3ZmE2N2M2N2QxZGU4YTBkNjk0OTA1Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&terms=Long-term%20care%2Cmental%20health%20care%2Cdisability%20care%2Celderly%20care%2Cin%20home%20care&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2556349329685648&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266%2C72717107&format=r3%7Cs&nocache=5811727615776546&num=0&output=afd_ads&domain_name=notexistsaa.calperlongtermcare.com&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1727615776549& [TRUNCATED] Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://notexistsaa.calperlongtermcare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:16:18 UTC	807	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Disposition: inline Date: Sun, 29 Sep 2024 13:16:18 GMT Expires: Sun, 29 Sep 2024 13:16:18 GMT Cache-Control: private, max-age=3600 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-AyizMq8uEmpuM-B328j9mw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Server: gws X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-29 13:16:18 UTC	583	IN	Data Raw: 33 61 39 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 73 74 79 6c 65 20 69 64 3d 22 73 73 72 2d 62 6f 69 6c 65 72 70 6c 61 74 65 22 3e 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 72 67 69 6e 3a 30 3b 7d 2e 64 69 76 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 20 2e 64 69 76 3a 6c 61 73 Data Ascii: 3a90<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:las
2024-09-29 13:16:18 UTC	1390	IN	Data Raw: 69 5f 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 76 5f 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 Data Ascii: i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit
2024-09-29 13:16:18 UTC	1390	IN	Data Raw: 5f 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 6f 5f 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 78 5f 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 79 5f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 7a 2d 69 6e 64 65 78 3a 31 3b 7d 2e 6b 5f 3e 64 69 76 3a 6e 6f 74 28 2e 79 5f 29 20 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 Data Ascii: _{overflow:hidden;}.o_{white-space:nowrap;}.x_{cursor:pointer;}.y_{display:none; position:absolute; z-index:1;}.k_>div:not(.y_) {display:-webkit-inline-box; display:-moz-inline-box; display:-ms-inline-flexbox; display:-webkit-inline-flex; display:inline-f
2024-09-29 13:16:18 UTC	1390	IN	Data Raw: 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 42 6f 74 74 6f 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 43 65 6e 74 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 Data Ascii: start; align-items:flex-start;}.flexAlignBottom{-ms-flex-align:end; -webkit-box-align:end; -webkit-align-items:flex-end; align-items:flex-end;}.flexAlignCenter{-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center
2024-09-29 13:16:18 UTC	1390	IN	Data Raw: 65 72 2d 72 61 64 69 75 73 3a 31 35 70 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 31 70 78 3b 7d 2e 73 69 31 32 38 7b 68 65 69 67 68 74 3a 31 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 64 69 76 3e 64 69 76 2e 73 69 31 32 38 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 2e 73 69 31 33 33 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 30 31 63 33 36 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e Data Ascii: er-radius:15px;height:30px;width:1px;}.si128{height:1px;width:100%; -ms-flex-negative:1;-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}div>div.si128:last-child{display:none;}.si133{background-color:#101c36;border-radius:2px;font-size:12px;lin
2024-09-29 13:16:18 UTC	1390	IN	Data Raw: 77 72 61 70 3b 22 20 64 61 74 61 2d 61 64 2d 63 6f 6e 74 61 69 6e 65 72 3d 22 31 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 72 73 73 41 74 74 72 43 6f 6e 74 61 69 6e 65 72 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 70 5f 20 73 69 31 33 33 20 73 70 61 6e 22 3e 52 65 6c 61 74 65 64 20 73 65 61 72 63 68 65 73 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 65 31 22 20 63 6c 61 73 73 3d 22 69 Data Ascii: wrap;" data-ad-container="1"><div class="i_ div rssAttrContainer" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><span class="p_ si133 span">Related searches</span></div><div id="e1" class="i
2024-09-29 13:16:18 UTC	1390	IN	Data Raw: 63 65 6e 74 65 72 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 36 39 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 61 Data Ascii: center;"><div class="i_ div si69" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;-ms-flex-pack:center; -webkit-box-pack:center; -webkit-justify-content:center; justify-content:center;-ms-flex-a
2024-09-29 13:16:18 UTC	1390	IN	Data Raw: 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 6f 74 65 78 69 73 74 73 61 61 2e 63 61 6c 70 65 72 6c 6f 6e 67 74 65 72 6d 63 61 72 65 2e 63 6f 6d 2f 3f 74 73 3d 66 45 4e 73 5a 57 46 75 55 47 56 77 63 47 56 79 62 57 6c 75 64 45 4a 73 59 57 4e 72 66 48 77 31 59 32 55 34 4e 48 78 69 64 57 4e 72 5a 58 51 77 4d 54 45 73 59 6e 56 6a 61 32 56 30 4d 44 67 34 4c 47 4a 31 59 32 74 6c 64 44 41 34 4f 58 78 38 66 48 78 38 66 44 59 32 5a 6a 6b 31 4d 7a 46 6d 4d 32 49 34 4e 44 6c 38 66 48 77 78 4e 7a 49 33 4e 6a 45 31 4e 7a 63 31 4c Data Ascii: webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><a href="http://notexistsaa.calperlongtermcare.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzc1L
2024-09-29 13:16:18 UTC	1390	IN	Data Raw: 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 64 69 76 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 63 6c 61 73 73 3d 22 64 69 76 20 71 5f 20 73 69 31 30 32 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 66 73 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 Data Ascii: center; align-items:center;"><div class="i_ div" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><div aria-hidden="true" tabindex="-1" class="div q_ si102"><img src="https://afs.googleusercont
2024-09-29 13:16:18 UTC	1390	IN	Data Raw: 59 7a 67 33 4e 48 78 38 66 48 78 38 4d 58 78 38 4d 48 77 77 66 48 78 38 66 44 46 38 66 48 78 38 66 44 42 38 4d 48 78 38 66 48 78 38 66 48 78 38 66 48 77 77 66 44 42 38 66 44 42 38 66 48 77 77 66 44 42 38 56 7a 45 77 50 58 78 38 4d 58 78 58 4d 54 41 39 66 44 45 33 4e 54 4e 69 59 32 52 6d 4e 32 55 78 4d 7a 4d 30 5a 57 59 7a 4e 57 52 68 5a 6a 42 6d 4f 44 6c 6d 4f 44 4d 30 4e 32 45 7a 4e 57 4a 6b 4d 57 49 77 5a 6d 4a 38 4d 48 78 6b 63 43 31 30 5a 57 46 74 61 57 35 30 5a 58 4a 75 5a 58 51 78 4d 6c 38 7a 63 47 68 38 4d 48 77 77 66 48 78 38 26 61 6d 70 3b 71 75 65 72 79 3d 44 69 73 61 62 69 6c 69 74 79 2b 43 61 72 65 26 61 6d 70 3b 61 66 64 54 6f 6b 65 6e 3d 43 68 4d 49 6e 5a 2d 64 70 70 37 6f 69 41 4d 56 4a 6f 48 39 42 78 33 6b 44 69 77 6b 45 6d 77 42 6c 4c 71 Data Ascii: Yzg3NHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&query=Disability+Care&afdToken=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49749	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:16:19 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 13:16:20 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=98922 Date: Sun, 29 Sep 2024 13:16:20 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49750	142.250.185.78	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:16:19 UTC	555	OUT	GET /adsense/domains/caf.js?pac=2 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:16:20 UTC	845	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 153223 Date: Sun, 29 Sep 2024 13:16:20 GMT Expires: Sun, 29 Sep 2024 13:16:20 GMT Cache-Control: private, max-age=3600 ETag: "17209215320339076777" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-29 13:16:20 UTC	545	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 73 79 6e 64 69 63 61 74 65 64 73 65 61 72 63 68 2e 67 6f 6f 67 22 2c 68 61 73 68 3a 22 31 37 33 38 33 36 33 33 34 36 34 33 37 30 36 31 35 35 35 33 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 30 30 30 33 2c 31 37 33 30 31 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17300003,17301
2024-09-29 13:16:20 UTC	1390	IN	Data Raw: 74 72 75 65 2c 22 5f 75 73 65 53 65 72 76 65 72 50 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 Data Ascii: true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRv
2024-09-29 13:16:20 UTC	1390	IN	Data Raw: 21 30 2c 76 61 6c 75 65 3a 67 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 Data Ascii: !0,value:g})}if(a)return a;c.prototype.toString=function(){return this.ne};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array U
2024-09-29 13:16:20 UTC	1390	IN	Data Raw: 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 61 3d 6c 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 70 61 29 70 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 Data Ascii: w new TypeError(a+" is not extensible");return a}:null}var pa=la;function qa(a,b){a.prototype=ka(b.prototype);a.prototype.constructor=a;if(pa)pa(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(
2024-09-29 13:16:20 UTC	1390	IN	Data Raw: 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 55 66 28 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 62 64 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 67 67 28 68 2c 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 62 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 63 65 28 32 2c 67 29 7d 3b 62 2e 70 72 6f Data Ascii: =null;break a;case "function":h=!0;break a;default:h=!1}h?this.Uf(g):this.Ld(g)}};b.prototype.Uf=function(g){var h=void 0;try{h=g.then}catch(k){this.bd(k);return}typeof h=="function"?this.gg(h,g):this.Ld(g)};b.prototype.bd=function(g){this.ce(2,g)};b.pro
2024-09-29 13:16:20 UTC	1390	IN	Data Raw: 63 68 28 77 29 7b 6d 28 77 29 7d 7d 3a 74 7d 76 61 72 20 6c 2c 6d 2c 70 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 69 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 0a 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 42 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f Data Ascii: ch(w){m(w)}}:t}var l,m,p=new b(function(r,t){l=r;m=t});this.ib(k(g,l),k(h,m));return p};b.prototype.catch=function(g){return this.then(void 0,g)};b.prototype.ib=function(g,h){function k(){switch(l.B){case 1:g(l.Xa);break;case 2:h(l.Xa);break;default:thro
2024-09-29 13:16:20 UTC	1390	IN	Data Raw: 21 3d 3d 6e 75 6c 6c 7c 7c 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 73 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 63 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b Data Ascii: !==null\|\|l==="function"}function e(k){if(!sa(k,g)){var l=new c;ca(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{
2024-09-29 13:16:20 UTC	1390	IN	Data Raw: 29 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 68 2c 49 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 49 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 75 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 Data Ascii: )return{id:l,list:m,index:h,I:p}}return{id:l,list:m,index:-1,I:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=u(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entr
2024-09-29 13:16:20 UTC	1390	IN	Data Raw: 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 Data Ascii: s,function(h){return h.key})};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,h.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.pr
2024-09-29 13:16:20 UTC	1390	IN	Data Raw: 6c 65 6e 67 74 68 3b 65 3e 30 26 26 63 3e 30 3b 29 69 66 28 64 5b 2d 2d 63 5d 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 65 3c 3d 30 7d 7d 29 3b 0a 71 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 73 61 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 5b 64 2c 62 5b 64 5d 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 Data Ascii: length;e>0&&c>0;)if(d[--c]!=b[--e])return!1;return e<=0}});q("Object.entries",function(a){return a?a:function(b){var c=[],d;for(d in b)sa(b,d)&&c.push([d,b[d]]);return c}});q("Array.prototype.find",function(a){return a?a:function(b,c){a:{var d=this;d ins

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49751	142.250.184.196	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:16:19 UTC	476	OUT	GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:16:20 UTC	844	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 153198 Date: Sun, 29 Sep 2024 13:16:20 GMT Expires: Sun, 29 Sep 2024 13:16:20 GMT Cache-Control: private, max-age=3600 ETag: "4454758832833526012" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-29 13:16:20 UTC	546	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 68 61 73 68 3a 22 31 37 33 38 33 36 33 33 34 36 34 33 37 30 36 31 35 35 35 33 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 31 34 33 31 2c 31 37 33 30 31 34 33 33 2c 31 37 33 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17301431,17301433,173
2024-09-29 13:16:20 UTC	1390	IN	Data Raw: 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 69 35 75 5a 58 51 73 64 48 4a 68 62 6e 4e 73 59 58 Data Ascii: main":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYX
2024-09-29 13:16:20 UTC	1390	IN	Data Raw: 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 Data Ascii: ;c.prototype.toString=function(){return this.ne};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8ClampedArray Int16Arra
2024-09-29 13:16:20 UTC	1390	IN	Data Raw: 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 61 3d 6c 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 70 61 29 70 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 Data Ascii: extensible");return a}:null}var pa=la;function qa(a,b){a.prototype=ka(b.prototype);a.prototype.constructor=a;if(pa)pa(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.definePrope
2024-09-29 13:16:20 UTC	1390	IN	Data Raw: 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 55 66 28 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 62 64 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 67 67 28 68 2c 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 62 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 63 65 28 32 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 Data Ascii: on":h=!0;break a;default:h=!1}h?this.Uf(g):this.Ld(g)}};b.prototype.Uf=function(g){var h=void 0;try{h=g.then}catch(k){this.bd(k);return}typeof h=="function"?this.gg(h,g):this.Ld(g)};b.prototype.bd=function(g){this.ce(2,g)};b.prototype.Ld=function(g){this
2024-09-29 13:16:20 UTC	1390	IN	Data Raw: 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 69 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 0a 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 42 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 65 64 20 73 74 61 74 65 3a Data Ascii: ew b(function(r,t){l=r;m=t});this.ib(k(g,l),k(h,m));return p};b.prototype.catch=function(g){return this.then(void 0,g)};b.prototype.ib=function(g,h){function k(){switch(l.B){case 1:g(l.Xa);break;case 2:h(l.Xa);break;default:throw Error("Unexpected state:
2024-09-29 13:16:20 UTC	1390	IN	Data Raw: 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 73 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 63 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6c 3d 4f 62 Data Ascii: nction e(k){if(!sa(k,g)){var l=new c;ca(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var k=Object.seal({}),l=Ob
2024-09-29 13:16:20 UTC	1390	IN	Data Raw: 68 2c 49 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 49 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 75 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 Data Ascii: h,I:p}}return{id:l,list:m,index:-1,I:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=u(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Object.seal!="
2024-09-29 13:16:20 UTC	1390	IN	Data Raw: 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 20 67 3d 30 3b 72 65 Data Ascii: })};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,h.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.prototype.entries;var g=0;re
2024-09-29 13:16:20 UTC	1390	IN	Data Raw: 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 65 3c 3d 30 7d 7d 29 3b 0a 71 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 73 61 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 5b 64 2c 62 5b 64 5d 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 64 3d 53 74 72 69 6e 67 28 Data Ascii: !=b[--e])return!1;return e<=0}});q("Object.entries",function(a){return a?a:function(b){var c=[],d;for(d in b)sa(b,d)&&c.push([d,b[d]]);return c}});q("Array.prototype.find",function(a){return a?a:function(b,c){a:{var d=this;d instanceof String&&(d=String(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49753	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:16:20 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 13:16:21 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=98951 Date: Sun, 29 Sep 2024 13:16:21 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-29 13:16:21 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49754	185.53.179.172	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:16:21 UTC	943	OUT	GET /track.php?domain=calperlongtermcare.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTc3NS4yNDM4OmRmMjk1NDRhMGE4OWQ3MjlkMjZmNGVkMzcyMmQwZjM0NGI5ZWY3ODU1OTYzY2UyMzk2YmQxNzBlNGJiZDY3OGY6NjZmOTUzMWYzYjg3Ng%3D%3D HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" device-memory: 8 rtt: 250 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 dpr: 1 downlink: 1.6 ect: 3g sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notexistsaa.calperlongtermcare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
2024-09-29 13:16:21 UTC	728	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Alt-Svc: h3=":8443"; ma=2592000 Content-Type: text/html; charset=UTF-8 Date: Sun, 29 Sep 2024 13:16:21 GMT Host: {http.reverse_proxy.upstream.hostport} Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: answercheck X-Forwarded-Host: notexistsaa.calperlongtermcare.com X-Ssl-C: v1 X-Ssl-Proxy: v3 Connection: close Transfer-Encoding: chunked
2024-09-29 13:16:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49755	142.250.186.174	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:16:21 UTC	373	OUT	GET /adsense/domains/caf.js?pac=2 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:16:21 UTC	844	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 153223 Date: Sun, 29 Sep 2024 13:16:21 GMT Expires: Sun, 29 Sep 2024 13:16:21 GMT Cache-Control: private, max-age=3600 ETag: "4492878693876391607" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-29 13:16:21 UTC	546	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 73 79 6e 64 69 63 61 74 65 64 73 65 61 72 63 68 2e 67 6f 6f 67 22 2c 68 61 73 68 3a 22 31 37 33 38 33 36 33 33 34 36 34 33 37 30 36 31 35 35 35 33 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 30 30 30 32 2c 31 37 33 30 31 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17300002,17301
2024-09-29 13:16:21 UTC	1390	IN	Data Raw: 72 75 65 2c 22 5f 75 73 65 53 65 72 76 65 72 50 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c Data Ascii: rue,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvL
2024-09-29 13:16:21 UTC	1390	IN	Data Raw: 30 2c 76 61 6c 75 65 3a 67 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 Data Ascii: 0,value:g})}if(a)return a;c.prototype.toString=function(){return this.ne};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Ui
2024-09-29 13:16:21 UTC	1390	IN	Data Raw: 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 61 3d 6c 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 70 61 29 70 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 Data Ascii: new TypeError(a+" is not extensible");return a}:null}var pa=la;function qa(a,b){a.prototype=ka(b.prototype);a.prototype.constructor=a;if(pa)pa(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b
2024-09-29 13:16:21 UTC	1390	IN	Data Raw: 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 55 66 28 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 62 64 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 67 67 28 68 2c 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 62 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 63 65 28 32 2c 67 29 7d 3b 62 2e 70 72 6f 74 Data Ascii: null;break a;case "function":h=!0;break a;default:h=!1}h?this.Uf(g):this.Ld(g)}};b.prototype.Uf=function(g){var h=void 0;try{h=g.then}catch(k){this.bd(k);return}typeof h=="function"?this.gg(h,g):this.Ld(g)};b.prototype.bd=function(g){this.ce(2,g)};b.prot
2024-09-29 13:16:21 UTC	1390	IN	Data Raw: 68 28 77 29 7b 6d 28 77 29 7d 7d 3a 74 7d 76 61 72 20 6c 2c 6d 2c 70 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 69 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 0a 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 42 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 Data Ascii: h(w){m(w)}}:t}var l,m,p=new b(function(r,t){l=r;m=t});this.ib(k(g,l),k(h,m));return p};b.prototype.catch=function(g){return this.then(void 0,g)};b.prototype.ib=function(g,h){function k(){switch(l.B){case 1:g(l.Xa);break;case 2:h(l.Xa);break;default:throw
2024-09-29 13:16:21 UTC	1390	IN	Data Raw: 3d 3d 6e 75 6c 6c 7c 7c 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 73 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 63 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 Data Ascii: ==null\|\|l==="function"}function e(k){if(!sa(k,g)){var l=new c;ca(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{v
2024-09-29 13:16:21 UTC	1390	IN	Data Raw: 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 68 2c 49 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 49 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 75 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 Data Ascii: return{id:l,list:m,index:h,I:p}}return{id:l,list:m,index:-1,I:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=u(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entri
2024-09-29 13:16:21 UTC	1390	IN	Data Raw: 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f Data Ascii: ,function(h){return h.key})};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,h.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.pro
2024-09-29 13:16:21 UTC	1390	IN	Data Raw: 65 6e 67 74 68 3b 65 3e 30 26 26 63 3e 30 3b 29 69 66 28 64 5b 2d 2d 63 5d 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 65 3c 3d 30 7d 7d 29 3b 0a 71 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 73 61 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 5b 64 2c 62 5b 64 5d 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 Data Ascii: ength;e>0&&c>0;)if(d[--c]!=b[--e])return!1;return e<=0}});q("Object.entries",function(a){return a?a:function(b){var c=[],d;for(d in b)sa(b,d)&&c.push([d,b[d]]);return c}});q("Array.prototype.find",function(a){return a?a:function(b,c){a:{var d=this;d inst

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49756	185.53.179.172	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:16:22 UTC	670	OUT	GET /track.php?domain=calperlongtermcare.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTc3NS4yNDM4OmRmMjk1NDRhMGE4OWQ3MjlkMjZmNGVkMzcyMmQwZjM0NGI5ZWY3ODU1OTYzY2UyMzk2YmQxNzBlNGJiZDY3OGY6NjZmOTUzMWYzYjg3Ng%3D%3D HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
2024-09-29 13:16:22 UTC	728	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Alt-Svc: h3=":8443"; ma=2592000 Content-Type: text/html; charset=UTF-8 Date: Sun, 29 Sep 2024 13:16:22 GMT Host: {http.reverse_proxy.upstream.hostport} Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: answercheck X-Forwarded-Host: notexistsaa.calperlongtermcare.com X-Ssl-C: v1 X-Ssl-Proxy: v3 Connection: close Transfer-Encoding: chunked
2024-09-29 13:16:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49757	185.53.179.172	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:16:22 UTC	806	OUT	GET /favicon.ico HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" device-memory: 8 rtt: 250 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 dpr: 1 downlink: 1.6 ect: 3g sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://notexistsaa.calperlongtermcare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
2024-09-29 13:16:22 UTC	403	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Alt-Svc: h3=":8443"; ma=2592000 Content-Length: 0 Content-Type: image/x-icon Date: Sun, 29 Sep 2024 13:16:22 GMT Etag: "66f513bb-0" Host: {http.reverse_proxy.upstream.hostport} Last-Modified: Thu, 26 Sep 2024 07:56:43 GMT Server: Caddy Server: nginx X-Forwarded-Host: notexistsaa.calperlongtermcare.com X-Ssl-C: v1 X-Ssl-Proxy: v3 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49759	142.250.185.129	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:16:22 UTC	748	OUT	GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:16:22 UTC	800	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 391 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sun, 29 Sep 2024 06:26:08 GMT Expires: Mon, 30 Sep 2024 05:26:08 GMT Cache-Control: public, max-age=82800 Last-Modified: Thu, 20 Jul 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Age: 24614 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-29 13:16:22 UTC	391	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 30 30 22 20 68 65 69 67 68 74 3d 22 32 30 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 35 2e 35 20 31 34 68 2d 2e 37 39 6c 2d 2e 32 38 2d 2e 32 37 43 31 35 2e 34 31 20 31 32 2e 35 39 20 31 36 20 31 31 2e 31 31 20 31 36 20 39 2e 35 20 31 36 20 35 2e 39 31 20 31 33 2e 30 39 20 33 20 39 2e 35 20 33 53 33 20 35 2e 39 31 20 33 20 39 2e 35 20 35 2e 39 31 20 31 36 20 39 2e 35 20 31 36 63 31 2e 36 31 20 30 20 33 2e 30 39 2d 2e 35 39 20 34 2e 32 33 2d 31 2e 35 37 6c 2e 32 37 2e 32 38 76 2e 37 39 6c 35 20 34 2e 39 39 4c Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49758	142.250.185.129	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:16:22 UTC	749	OUT	GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:16:22 UTC	799	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 200 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sun, 29 Sep 2024 10:57:16 GMT Expires: Mon, 30 Sep 2024 09:57:16 GMT Cache-Control: public, max-age=82800 Age: 8346 Last-Modified: Thu, 02 Nov 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-29 13:16:22 UTC	200	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 77 69 64 74 68 3d 22 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 35 2e 38 38 20 34 2e 31 32 4c 31 33 2e 37 36 20 31 32 6c 2d 37 2e 38 38 20 37 2e 38 38 4c 38 20 32 32 6c 31 30 2d 31 30 4c 38 20 32 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49746	142.250.185.142	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:16:23 UTC	899	OUT	GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=7r0oy54bkrbw&aqid=IlP5Zr_nHbyXovsP1eGuiA4&psid=7840396037&pbt=bs&adbx=375&adby=93&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=8%7C0%7C1411%7C1901%7C1188&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://notexistsaa.calperlongtermcare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:16:23 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-NDsOdiuirwzHtno25lfmlg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 29 Sep 2024 13:16:23 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49762	142.250.185.193	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:16:23 UTC	507	OUT	GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:16:23 UTC	800	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 391 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sun, 29 Sep 2024 06:26:08 GMT Expires: Mon, 30 Sep 2024 05:26:08 GMT Cache-Control: public, max-age=82800 Last-Modified: Thu, 20 Jul 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Age: 24615 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-29 13:16:23 UTC	391	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 30 30 22 20 68 65 69 67 68 74 3d 22 32 30 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 35 2e 35 20 31 34 68 2d 2e 37 39 6c 2d 2e 32 38 2d 2e 32 37 43 31 35 2e 34 31 20 31 32 2e 35 39 20 31 36 20 31 31 2e 31 31 20 31 36 20 39 2e 35 20 31 36 20 35 2e 39 31 20 31 33 2e 30 39 20 33 20 39 2e 35 20 33 53 33 20 35 2e 39 31 20 33 20 39 2e 35 20 35 2e 39 31 20 31 36 20 39 2e 35 20 31 36 63 31 2e 36 31 20 30 20 33 2e 30 39 2d 2e 35 39 20 34 2e 32 33 2d 31 2e 35 37 6c 2e 32 37 2e 32 38 76 2e 37 39 6c 35 20 34 2e 39 39 4c Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49760	142.250.185.193	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:16:23 UTC	508	OUT	GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:16:23 UTC	799	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 200 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sun, 29 Sep 2024 10:57:16 GMT Expires: Mon, 30 Sep 2024 09:57:16 GMT Cache-Control: public, max-age=82800 Age: 8347 Last-Modified: Thu, 02 Nov 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-29 13:16:23 UTC	200	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 77 69 64 74 68 3d 22 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 35 2e 38 38 20 34 2e 31 32 4c 31 33 2e 37 36 20 31 32 6c 2d 37 2e 38 38 20 37 2e 38 38 4c 38 20 32 32 6c 31 30 2d 31 30 4c 38 20 32 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49761	185.53.179.172	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:16:23 UTC	469	OUT	GET /favicon.ico HTTP/1.1 Host: notexistsaa.calperlongtermcare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=911125d09fe5fc33:T=1727615778:RT=1727615778:S=ALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw
2024-09-29 13:16:23 UTC	403	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Alt-Svc: h3=":8443"; ma=2592000 Content-Length: 0 Content-Type: image/x-icon Date: Sun, 29 Sep 2024 13:16:23 GMT Etag: "66f513bb-0" Host: {http.reverse_proxy.upstream.hostport} Last-Modified: Thu, 26 Sep 2024 07:56:43 GMT Server: Caddy Server: nginx X-Forwarded-Host: notexistsaa.calperlongtermcare.com X-Ssl-C: v1 X-Ssl-Proxy: v3 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49763	142.250.185.142	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:16:24 UTC	899	OUT	GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=tbn7nkmvzgmz&aqid=IlP5Zr_nHbyXovsP1eGuiA4&psid=7840396037&pbt=bv&adbx=375&adby=93&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=8%7C0%7C1411%7C1901%7C1188&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://notexistsaa.calperlongtermcare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:16:24 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-1JjQ0C-g5VKplfPLlUXkBQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 29 Sep 2024 13:16:24 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49775	142.250.74.196	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:16:37 UTC	442	OUT	GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://notexistsaa.calperlongtermcare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:16:37 UTC	844	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 153207 Date: Sun, 29 Sep 2024 13:16:37 GMT Expires: Sun, 29 Sep 2024 13:16:37 GMT Cache-Control: private, max-age=3600 ETag: "5949355403315751752" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-29 13:16:37 UTC	546	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 68 61 73 68 3a 22 31 37 33 38 33 36 33 33 34 36 34 33 37 30 36 31 35 35 35 33 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 30 30 30 30 2c 31 37 33 30 31 34 33 37 2c 31 37 33 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17300000,17301437,173
2024-09-29 13:16:37 UTC	1390	IN	Data Raw: 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 69 35 75 5a 58 51 73 64 Data Ascii: rovidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsd
2024-09-29 13:16:37 UTC	1390	IN	Data Raw: 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 Data Ascii: )return a;c.prototype.toString=function(){return this.ne};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8ClampedArray
2024-09-29 13:16:37 UTC	1390	IN	Data Raw: 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 61 3d 6c 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 70 61 29 70 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e 64 65 Data Ascii: +" is not extensible");return a}:null}var pa=la;function qa(a,b){a.prototype=ka(b.prototype);a.prototype.constructor=a;if(pa)pa(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.de
2024-09-29 13:16:37 UTC	1390	IN	Data Raw: 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 55 66 28 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 62 64 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 67 67 28 68 2c 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 62 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 63 65 28 32 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 64 3d 66 75 6e 63 74 69 6f Data Ascii: e "function":h=!0;break a;default:h=!1}h?this.Uf(g):this.Ld(g)}};b.prototype.Uf=function(g){var h=void 0;try{h=g.then}catch(k){this.bd(k);return}typeof h=="function"?this.gg(h,g):this.Ld(g)};b.prototype.bd=function(g){this.ce(2,g)};b.prototype.Ld=functio
2024-09-29 13:16:37 UTC	1390	IN	Data Raw: 72 20 6c 2c 6d 2c 70 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 69 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 0a 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 42 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 Data Ascii: r l,m,p=new b(function(r,t){l=r;m=t});this.ib(k(g,l),k(h,m));return p};b.prototype.catch=function(g){return this.then(void 0,g)};b.prototype.ib=function(g,h){function k(){switch(l.B){case 1:g(l.Xa);break;case 2:h(l.Xa);break;default:throw Error("Unexpect
2024-09-29 13:16:37 UTC	1390	IN	Data Raw: 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 73 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 63 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a 65 63 74 2e 73 65 61 6c Data Ascii: ction"}function e(k){if(!sa(k,g)){var l=new c;ca(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var k=Object.seal
2024-09-29 13:16:37 UTC	1390	IN	Data Raw: 3a 6d 2c 69 6e 64 65 78 3a 68 2c 49 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 49 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 75 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 Data Ascii: :m,index:h,I:p}}return{id:l,list:m,index:-1,I:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=u(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Objec
2024-09-29 13:16:37 UTC	1390	IN	Data Raw: 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 Data Ascii: urn h.key})};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,h.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.prototype.entries;v
2024-09-29 13:16:37 UTC	1390	IN	Data Raw: 69 66 28 64 5b 2d 2d 63 5d 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 65 3c 3d 30 7d 7d 29 3b 0a 71 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 73 61 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 5b 64 2c 62 5b 64 5d 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 Data Ascii: if(d[--c]!=b[--e])return!1;return e<=0}});q("Object.entries",function(a){return a?a:function(b){var c=[],d;for(d in b)sa(b,d)&&c.push([d,b[d]]);return c}});q("Array.prototype.find",function(a){return a?a:function(b,c){a:{var d=this;d instanceof String&&(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49780	142.250.185.142	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:16:38 UTC	722	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://notexistsaa.calperlongtermcare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:16:39 UTC	1037	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/html Content-Security-Policy: script-src 'nonce-GXRfXd2FoOScjndNzkKtpA' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui; base-uri 'none' Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 1560 Date: Sun, 29 Sep 2024 13:16:39 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-29 13:16:39 UTC	353	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 52 4f 42 4f 54 53 22 20 63 6f 6e 74 65 6e 74 3d 22 4e 4f 49 4e 44 45 58 2c 20 4e 4f 46 4f 4c 4c 4f 57 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 61 64 42 6c 6f 63 6b 22 3e 3c 2f 64 69 76 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 47 58 52 66 58 64 32 46 6f 4f 53 63 6a 6e 64 4e 7a 6b 4b 74 70 41 22 3e 69 66 20 28 77 69 6e 64 6f 77 2e 6e Data Ascii: <!doctype html><html><head><meta name="ROBOTS" content="NOINDEX, NOFOLLOW"><meta name="format-detection" content="telephone=no"><meta content="origin" name="referrer"></head><body><div id="adBlock"></div><script nonce="GXRfXd2FoOScjndNzkKtpA">if (window.n
2024-09-29 13:16:39 UTC	1207	IN	Data Raw: 61 64 73 65 6e 73 65 2f 73 65 61 72 63 68 2f 61 64 73 2e 6a 73 22 3b 76 61 72 20 68 72 65 66 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 69 66 20 28 21 21 68 72 65 66 20 26 26 20 28 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 3f 70 61 63 3d 27 29 20 3e 20 30 20 7c 7c 20 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 26 70 61 63 3d 27 29 20 3e 20 30 29 29 20 7b 69 66 20 28 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 3f 70 61 63 3d 31 27 29 20 3e 20 30 20 7c 7c 20 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 26 70 61 63 3d 31 27 29 20 3e 20 30 29 20 7b 73 63 72 69 70 74 2e 73 72 63 20 2b 3d 20 27 3f 70 61 63 3d 31 27 3b 7d 20 65 6c 73 65 20 69 66 20 28 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 3f 70 61 63 3d 32 27 29 20 3e 20 30 20 7c 7c 20 Data Ascii: adsense/search/ads.js";var href = window.location.href;if (!!href && (href.indexOf('?pac=') > 0 \|\| href.indexOf('&pac=') > 0)) {if (href.indexOf('?pac=1') > 0 \|\| href.indexOf('&pac=1') > 0) {script.src += '?pac=1';} else if (href.indexOf('?pac=2') > 0 \|\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49779	142.250.185.142	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:16:38 UTC	2794	OUT	GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2C000003%2C000517%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet12_3ph&r=m&sct=ID%3D911125d09fe5fc33%3AT%3D1727615778%3ART%3D1727615778%3AS%3DALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw&sc_status=6&hl=en&rpbu=http%3A%2F%2Fnotexistsaa.calperlongtermcare.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1Nzk1LjI4MDJ8MGIxNjc0MTZjODk3ZjI1MzFlNTAwMzc2ZDU2YzViMWI3MDBlMmY2OXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&terms=Long-term%20care%2Cmental%20health%20care%2Cdisability%20care%2Celderly%20care%2Cin%20home%20care&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2556349329685648&q=Long-term%20Care&afdt=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpjxYC9i9y0TgoYIuZ8V_UHRMakU9iohKuhUuqxr8ymSHJsd1j4bjWfISTJnMGI7hFgWr_vhvGP_2LJwczGgGfqI8hF3eyZLCQwcvAF [TRUNCATED] Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://notexistsaa.calperlongtermcare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:16:39 UTC	807	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Disposition: inline Date: Sun, 29 Sep 2024 13:16:38 GMT Expires: Sun, 29 Sep 2024 13:16:38 GMT Cache-Control: private, max-age=3600 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-JwjdjXw4R0Ab-oV0aFDAYg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Server: gws X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-29 13:16:39 UTC	583	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 73 74 79 6c 65 20 69 64 3d 22 73 73 72 2d 62 6f 69 6c 65 72 70 6c 61 74 65 22 3e 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 72 67 69 6e 3a 30 3b 7d 2e 64 69 76 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 20 2e 64 69 76 3a 6c 61 73 Data Ascii: 8000<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:las
2024-09-29 13:16:39 UTC	1390	IN	Data Raw: 69 5f 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 76 5f 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 Data Ascii: i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit
2024-09-29 13:16:39 UTC	1390	IN	Data Raw: 5f 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 6f 5f 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 78 5f 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 79 5f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 7a 2d 69 6e 64 65 78 3a 31 3b 7d 2e 6b 5f 3e 64 69 76 3a 6e 6f 74 28 2e 79 5f 29 20 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 Data Ascii: _{overflow:hidden;}.o_{white-space:nowrap;}.x_{cursor:pointer;}.y_{display:none; position:absolute; z-index:1;}.k_>div:not(.y_) {display:-webkit-inline-box; display:-moz-inline-box; display:-ms-inline-flexbox; display:-webkit-inline-flex; display:inline-f
2024-09-29 13:16:39 UTC	1390	IN	Data Raw: 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 42 6f 74 74 6f 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 43 65 6e 74 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 Data Ascii: start; align-items:flex-start;}.flexAlignBottom{-ms-flex-align:end; -webkit-box-align:end; -webkit-align-items:flex-end; align-items:flex-end;}.flexAlignCenter{-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center
2024-09-29 13:16:39 UTC	1390	IN	Data Raw: 3a 35 30 70 78 3b 63 6f 6c 6f 72 3a 23 63 63 63 63 63 63 3b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 2e 73 69 32 37 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 36 66 30 30 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 33 36 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 7d 2e 73 69 33 34 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 70 78 3b 7d 2e 73 69 34 32 7b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d Data Ascii: :50px;color:#cccccc;width:100%; -ms-flex-negative:1;-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.si27:hover{color:#ff6f00;text-decoration:underline;}.si36{height:100%;}.si34{margin-bottom:0px;}.si42{width:100%; -ms-flex-negative:1;-webkit-
2024-09-29 13:16:39 UTC	1390	IN	Data Raw: 74 74 6f 6d 3a 33 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 70 78 3b 7d 2e 73 69 31 38 7b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 31 38 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 31 39 7b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 32 30 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 32 31 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 38 36 62 66 32 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 Data Ascii: ttom:3px;padding-top:3px;}.si18{color:#dddddd;}.si18:hover{text-decoration:underline;}.si19{color:#dddddd;}.si20{font-family:Roboto,arial,sans-serif;font-size:12px;line-height:20px;color:#dddddd;}.si21{font-weight:700;background-color:#186bf2;border-radiu
2024-09-29 13:16:39 UTC	1390	IN	Data Raw: 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 70 78 3b 63 6f 6c 6f 72 3a 23 38 36 38 35 38 61 3b 7d 2e 73 69 32 36 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 7d 2e 73 69 37 32 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 52 6f 62 6f 74 6f 20 4c 69 67 68 74 22 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 Data Ascii: px;padding-bottom:1px;padding-left:1px;padding-right:1px;padding-top:1px;color:#86858a;}.si26{font-family:Roboto,arial,sans-serif;font-size:14px;line-height:24px;color:#ffffff;}.si72{font-family:"Roboto Light",arial,sans-serif;font-size:12px;line-height:2
2024-09-29 13:16:39 UTC	1390	IN	Data Raw: 73 69 6f 6e 4c 69 6e 6b 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4e 4f 49 4e 44 45 58 2c 20 4e 4f 46 4f 4c 4c 4f 57 22 20 6e 61 6d 65 3d 22 52 4f 42 4f 54 53 22 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 20 20 20 20 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 20 3c 64 69 76 20 69 64 3d 22 61 64 42 6c 6f 63 6b 22 3e 20 20 20 3c 64 69 76 20 69 64 3d 22 73 73 72 61 64 2d 6d 61 73 74 65 72 Data Ascii: sionLink:hover{text-decoration:underline;}</style> <meta content="NOINDEX, NOFOLLOW" name="ROBOTS"> <meta content="telephone=no" name="format-detection"> <meta content="origin" name="referrer"> </head> <body> <div id="adBlock"> <div id="ssrad-master
2024-09-29 13:16:39 UTC	1390	IN	Data Raw: 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 33 39 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f Data Ascii: -pack:start; -webkit-justify-content:flex-start; justify-content:flex-start;-ms-flex-align:stretch; -webkit-box-align:stretch; -webkit-align-items:stretch; align-items:stretch;"><div class="i_ div si39" style="-ms-flex-direction:row; -webkit-box-orient:ho
2024-09-29 13:16:39 UTC	1390	IN	Data Raw: 72 61 6e 73 66 6f 72 6d 3a 69 6e 68 65 72 69 74 3b 27 20 63 6c 61 73 73 3d 22 73 69 31 33 30 20 73 70 61 6e 22 3e 43 61 72 65 3c 2f 73 70 61 6e 3e 20 7c 20 43 65 6e 74 72 61 6c 20 54 72 75 73 74 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 34 31 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 33 36 20 76 5f 22 20 73 74 79 6c 65 3d 22 2d 6d Data Ascii: ransform:inherit;' class="si130 span">Care</span> \| Central Trust</span></a></div><div class="i_ div si41" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><div class="i_ div si36 v_" style="-m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49781	142.250.185.142	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:16:39 UTC	772	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://notexistsaa.calperlongtermcare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
2024-09-29 13:16:40 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Sun, 29 Sep 2024 13:16:40 GMT Expires: Sun, 29 Sep 2024 13:16:40 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49782	142.250.185.142	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:16:40 UTC	555	OUT	GET /adsense/domains/caf.js?pac=0 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:16:40 UTC	845	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 153214 Date: Sun, 29 Sep 2024 13:16:40 GMT Expires: Sun, 29 Sep 2024 13:16:40 GMT Cache-Control: private, max-age=3600 ETag: "16762785716741463394" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-29 13:16:40 UTC	545	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 73 79 6e 64 69 63 61 74 65 64 73 65 61 72 63 68 2e 67 6f 6f 67 22 2c 68 61 73 68 3a 22 31 37 33 38 33 36 33 33 34 36 34 33 37 30 36 31 35 35 35 33 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 31 34 33 31 2c 31 37 33 30 31 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17301431,17301
2024-09-29 13:16:40 UTC	1390	IN	Data Raw: 65 53 65 72 76 65 72 50 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 Data Ascii: eServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpb
2024-09-29 13:16:40 UTC	1390	IN	Data Raw: 67 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 Data Ascii: g})}if(a)return a;c.prototype.toString=function(){return this.ne};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8Clamp
2024-09-29 13:16:40 UTC	1390	IN	Data Raw: 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 61 3d 6c 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 70 61 29 70 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f Data Ascii: eError(a+" is not extensible");return a}:null}var pa=la;function qa(a,b){a.prototype=ka(b.prototype);a.prototype.constructor=a;if(pa)pa(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&O
2024-09-29 13:16:40 UTC	1390	IN	Data Raw: 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 55 66 28 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 62 64 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 67 67 28 68 2c 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 62 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 63 65 28 32 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 64 Data Ascii: ak a;case "function":h=!0;break a;default:h=!1}h?this.Uf(g):this.Ld(g)}};b.prototype.Uf=function(g){var h=void 0;try{h=g.then}catch(k){this.bd(k);return}typeof h=="function"?this.gg(h,g):this.Ld(g)};b.prototype.bd=function(g){this.ce(2,g)};b.prototype.Ld
2024-09-29 13:16:40 UTC	1390	IN	Data Raw: 29 7d 7d 3a 74 7d 76 61 72 20 6c 2c 6d 2c 70 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 69 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 0a 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 42 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 Data Ascii: )}}:t}var l,m,p=new b(function(r,t){l=r;m=t});this.ib(k(g,l),k(h,m));return p};b.prototype.catch=function(g){return this.then(void 0,g)};b.prototype.ib=function(g,h){function k(){switch(l.B){case 1:g(l.Xa);break;case 2:h(l.Xa);break;default:throw Error("
2024-09-29 13:16:40 UTC	1390	IN	Data Raw: 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 73 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 63 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a Data Ascii: l==="function"}function e(k){if(!sa(k,g)){var l=new c;ca(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var k=Obj
2024-09-29 13:16:40 UTC	1390	IN	Data Raw: 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 68 2c 49 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 49 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 75 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 Data Ascii: d:l,list:m,index:h,I:p}}return{id:l,list:m,index:-1,I:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=u(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|type
2024-09-29 13:16:40 UTC	1390	IN	Data Raw: 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 Data Ascii: n(h){return h.key})};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,h.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.prototype.e
2024-09-29 13:16:40 UTC	1390	IN	Data Raw: 30 26 26 63 3e 30 3b 29 69 66 28 64 5b 2d 2d 63 5d 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 65 3c 3d 30 7d 7d 29 3b 0a 71 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 73 61 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 5b 64 2c 62 5b 64 5d 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 Data Ascii: 0&&c>0;)if(d[--c]!=b[--e])return!1;return e<=0}});q("Object.entries",function(a){return a?a:function(b){var c=[],d;for(d in b)sa(b,d)&&c.push([d,b[d]]);return c}});q("Array.prototype.find",function(a){return a?a:function(b,c){a:{var d=this;d instanceof S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49785	142.250.186.174	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:16:41 UTC	373	OUT	GET /adsense/domains/caf.js?pac=0 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:16:42 UTC	845	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 153214 Date: Sun, 29 Sep 2024 13:16:41 GMT Expires: Sun, 29 Sep 2024 13:16:41 GMT Cache-Control: private, max-age=3600 ETag: "17644445104357918825" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-29 13:16:42 UTC	545	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 73 79 6e 64 69 63 61 74 65 64 73 65 61 72 63 68 2e 67 6f 6f 67 22 2c 68 61 73 68 3a 22 31 37 33 38 33 36 33 33 34 36 34 33 37 30 36 31 35 35 35 33 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 31 34 33 37 2c 31 37 33 30 31 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17301437,17301
2024-09-29 13:16:42 UTC	1390	IN	Data Raw: 65 53 65 72 76 65 72 50 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 Data Ascii: eServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpb
2024-09-29 13:16:42 UTC	1390	IN	Data Raw: 67 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 Data Ascii: g})}if(a)return a;c.prototype.toString=function(){return this.ne};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8Clamp
2024-09-29 13:16:42 UTC	1390	IN	Data Raw: 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 61 3d 6c 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 70 61 29 70 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f Data Ascii: eError(a+" is not extensible");return a}:null}var pa=la;function qa(a,b){a.prototype=ka(b.prototype);a.prototype.constructor=a;if(pa)pa(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&O
2024-09-29 13:16:42 UTC	1390	IN	Data Raw: 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 55 66 28 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 62 64 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 67 67 28 68 2c 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 62 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 63 65 28 32 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 64 Data Ascii: ak a;case "function":h=!0;break a;default:h=!1}h?this.Uf(g):this.Ld(g)}};b.prototype.Uf=function(g){var h=void 0;try{h=g.then}catch(k){this.bd(k);return}typeof h=="function"?this.gg(h,g):this.Ld(g)};b.prototype.bd=function(g){this.ce(2,g)};b.prototype.Ld
2024-09-29 13:16:42 UTC	1390	IN	Data Raw: 29 7d 7d 3a 74 7d 76 61 72 20 6c 2c 6d 2c 70 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 69 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 0a 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 42 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 Data Ascii: )}}:t}var l,m,p=new b(function(r,t){l=r;m=t});this.ib(k(g,l),k(h,m));return p};b.prototype.catch=function(g){return this.then(void 0,g)};b.prototype.ib=function(g,h){function k(){switch(l.B){case 1:g(l.Xa);break;case 2:h(l.Xa);break;default:throw Error("
2024-09-29 13:16:42 UTC	1390	IN	Data Raw: 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 73 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 63 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a Data Ascii: l==="function"}function e(k){if(!sa(k,g)){var l=new c;ca(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var k=Obj
2024-09-29 13:16:42 UTC	1390	IN	Data Raw: 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 68 2c 49 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 49 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 75 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 Data Ascii: d:l,list:m,index:h,I:p}}return{id:l,list:m,index:-1,I:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=u(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|type
2024-09-29 13:16:42 UTC	1390	IN	Data Raw: 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 Data Ascii: n(h){return h.key})};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,h.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.prototype.e
2024-09-29 13:16:42 UTC	1390	IN	Data Raw: 30 26 26 63 3e 30 3b 29 69 66 28 64 5b 2d 2d 63 5d 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 65 3c 3d 30 7d 7d 29 3b 0a 71 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 73 61 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 5b 64 2c 62 5b 64 5d 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 Data Ascii: 0&&c>0;)if(d[--c]!=b[--e])return!1;return e<=0}});q("Object.entries",function(a){return a?a:function(b){var c=[],d;for(d in b)sa(b,d)&&c.push([d,b[d]]);return c}});q("Array.prototype.find",function(a){return a?a:function(b,c){a:{var d=this;d instanceof S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49786	172.217.18.100	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:16:42 UTC	698	OUT	GET /images/afs/snowman.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:16:42 UTC	670	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 166 Date: Sun, 29 Sep 2024 13:16:42 GMT Expires: Sun, 29 Sep 2024 13:16:42 GMT Cache-Control: private, max-age=31536000 Last-Modified: Wed, 15 Nov 2023 17:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-29 13:16:42 UTC	166	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 04 03 00 00 00 a5 2c e4 b4 00 00 00 12 50 4c 54 45 00 00 00 97 9f 9f 9a a0 a5 9a a0 a6 9a a0 a6 97 9f a7 fa 03 72 95 00 00 00 06 74 52 4e 53 00 20 bf ef ff 20 e0 82 3c 7e 00 00 00 3d 49 44 41 54 78 01 63 18 7e 80 51 d9 49 00 ab 84 b0 8b 8b 21 56 09 15 17 17 27 ac 12 2e 2e 2e ce 58 25 4c 80 32 a4 19 15 ec e2 62 8a 55 82 55 c5 28 80 26 e1 30 1a 56 a3 61 35 ec 00 00 2d a2 14 b9 af 08 13 f6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR00,PLTErtRNS <~=IDATxc~QI!V'...X%L2bUU(&0Va5-IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49777	172.217.18.14	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:16:42 UTC	902	OUT	GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=652pedqnoxbl&aqid=N1P5ZtuRBKSDhcIPk9SNsAQ&psid=7840396037&pbt=bs&adbx=366.5&adby=109&adbh=1355&adbw=530&adbah=475%2C439%2C439&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=51%7C0%7C1341%7C1513%7C243&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://notexistsaa.calperlongtermcare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:16:42 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-VpQhAgA608VqDSyO_7LGOg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 29 Sep 2024 13:16:42 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49789	142.250.184.196	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:16:43 UTC	457	OUT	GET /images/afs/snowman.png HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:16:43 UTC	670	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 166 Date: Sun, 29 Sep 2024 13:16:43 GMT Expires: Sun, 29 Sep 2024 13:16:43 GMT Cache-Control: private, max-age=31536000 Last-Modified: Wed, 15 Nov 2023 17:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-29 13:16:43 UTC	166	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 04 03 00 00 00 a5 2c e4 b4 00 00 00 12 50 4c 54 45 00 00 00 97 9f 9f 9a a0 a5 9a a0 a6 9a a0 a6 97 9f a7 fa 03 72 95 00 00 00 06 74 52 4e 53 00 20 bf ef ff 20 e0 82 3c 7e 00 00 00 3d 49 44 41 54 78 01 63 18 7e 80 51 d9 49 00 ab 84 b0 8b 8b 21 56 09 15 17 17 27 ac 12 2e 2e 2e ce 58 25 4c 80 32 a4 19 15 ec e2 62 8a 55 82 55 c5 28 80 26 e1 30 1a 56 a3 61 35 ec 00 00 2d a2 14 b9 af 08 13 f6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR00,PLTErtRNS <~=IDATxc~QI!V'...X%L2bUU(&0Va5-IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49790	172.217.18.14	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:16:43 UTC	902	OUT	GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=x4y35lt9lpng&aqid=N1P5ZtuRBKSDhcIPk9SNsAQ&psid=7840396037&pbt=bv&adbx=366.5&adby=109&adbh=1355&adbw=530&adbah=475%2C439%2C439&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=51%7C0%7C1341%7C1513%7C243&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://notexistsaa.calperlongtermcare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:16:44 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-qJNbA5UJ6cu9jsJAkFJy_A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 29 Sep 2024 13:16:44 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49783	142.250.185.142	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:16:45 UTC	2805	OUT	GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2C000003%2C000517%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet12_3ph&r=m&sct=ID%3D911125d09fe5fc33%3AT%3D1727615778%3ART%3D1727615778%3AS%3DALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw&sc_status=6&hl=en&rpbu=http%3A%2F%2Fnotexistsaa.calperlongtermcare.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1ODA1LjA5NTl8OTRiYzNhNGIyNzJhZjViZGU2M2QzNjkyMTg1MjVlOWRiNGI1ZmNkNXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&terms=Long-term%20care%2Cmental%20health%20care%2Cdisability%20care%2Celderly%20care%2Cin%20home%20care&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2556349329685648&q=Mental%20Health%20Care&afdt=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj2Fwx1CP69y51eGq-AiAZrdjjEEEm-kgI4GG27mh0rqrtgT08SvO_YxhRixDnAmYj1ePjmTSEcyDkXkXf2_m-yoK-uk8je2 [TRUNCATED] Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://notexistsaa.calperlongtermcare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:16:45 UTC	807	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Disposition: inline Date: Sun, 29 Sep 2024 13:16:45 GMT Expires: Sun, 29 Sep 2024 13:16:45 GMT Cache-Control: private, max-age=3600 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-K2hsnxWPQOCa_Rkel-MwGw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Server: gws X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-29 13:16:45 UTC	583	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 73 74 79 6c 65 20 69 64 3d 22 73 73 72 2d 62 6f 69 6c 65 72 70 6c 61 74 65 22 3e 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 72 67 69 6e 3a 30 3b 7d 2e 64 69 76 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 20 2e 64 69 76 3a 6c 61 73 Data Ascii: 8000<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:las
2024-09-29 13:16:45 UTC	1390	IN	Data Raw: 69 5f 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 76 5f 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 Data Ascii: i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit
2024-09-29 13:16:45 UTC	1390	IN	Data Raw: 5f 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 6f 5f 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 78 5f 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 79 5f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 7a 2d 69 6e 64 65 78 3a 31 3b 7d 2e 6b 5f 3e 64 69 76 3a 6e 6f 74 28 2e 79 5f 29 20 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 Data Ascii: _{overflow:hidden;}.o_{white-space:nowrap;}.x_{cursor:pointer;}.y_{display:none; position:absolute; z-index:1;}.k_>div:not(.y_) {display:-webkit-inline-box; display:-moz-inline-box; display:-ms-inline-flexbox; display:-webkit-inline-flex; display:inline-f
2024-09-29 13:16:45 UTC	1390	IN	Data Raw: 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 42 6f 74 74 6f 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 43 65 6e 74 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 Data Ascii: start; align-items:flex-start;}.flexAlignBottom{-ms-flex-align:end; -webkit-box-align:end; -webkit-align-items:flex-end; align-items:flex-end;}.flexAlignCenter{-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center
2024-09-29 13:16:45 UTC	1390	IN	Data Raw: 3a 35 30 70 78 3b 63 6f 6c 6f 72 3a 23 63 63 63 63 63 63 3b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 2e 73 69 32 37 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 36 66 30 30 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 33 36 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 7d 2e 73 69 33 34 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 70 78 3b 7d 2e 73 69 34 32 7b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d Data Ascii: :50px;color:#cccccc;width:100%; -ms-flex-negative:1;-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.si27:hover{color:#ff6f00;text-decoration:underline;}.si36{height:100%;}.si34{margin-bottom:0px;}.si42{width:100%; -ms-flex-negative:1;-webkit-
2024-09-29 13:16:45 UTC	1390	IN	Data Raw: 74 74 6f 6d 3a 33 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 70 78 3b 7d 2e 73 69 31 38 7b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 31 38 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 31 39 7b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 32 30 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 32 31 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 38 36 62 66 32 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 Data Ascii: ttom:3px;padding-top:3px;}.si18{color:#dddddd;}.si18:hover{text-decoration:underline;}.si19{color:#dddddd;}.si20{font-family:Roboto,arial,sans-serif;font-size:12px;line-height:20px;color:#dddddd;}.si21{font-weight:700;background-color:#186bf2;border-radiu
2024-09-29 13:16:45 UTC	1390	IN	Data Raw: 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 70 78 3b 63 6f 6c 6f 72 3a 23 38 36 38 35 38 61 3b 7d 2e 73 69 32 36 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 7d 2e 73 69 37 32 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 52 6f 62 6f 74 6f 20 4c 69 67 68 74 22 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 Data Ascii: px;padding-bottom:1px;padding-left:1px;padding-right:1px;padding-top:1px;color:#86858a;}.si26{font-family:Roboto,arial,sans-serif;font-size:14px;line-height:24px;color:#ffffff;}.si72{font-family:"Roboto Light",arial,sans-serif;font-size:12px;line-height:2
2024-09-29 13:16:45 UTC	1390	IN	Data Raw: 73 69 6f 6e 4c 69 6e 6b 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4e 4f 49 4e 44 45 58 2c 20 4e 4f 46 4f 4c 4c 4f 57 22 20 6e 61 6d 65 3d 22 52 4f 42 4f 54 53 22 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 20 20 20 20 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 20 3c 64 69 76 20 69 64 3d 22 61 64 42 6c 6f 63 6b 22 3e 20 20 20 3c 64 69 76 20 69 64 3d 22 73 73 72 61 64 2d 6d 61 73 74 65 72 Data Ascii: sionLink:hover{text-decoration:underline;}</style> <meta content="NOINDEX, NOFOLLOW" name="ROBOTS"> <meta content="telephone=no" name="format-detection"> <meta content="origin" name="referrer"> </head> <body> <div id="adBlock"> <div id="ssrad-master
2024-09-29 13:16:45 UTC	1390	IN	Data Raw: 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 33 39 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f Data Ascii: -pack:start; -webkit-justify-content:flex-start; justify-content:flex-start;-ms-flex-align:stretch; -webkit-box-align:stretch; -webkit-align-items:stretch; align-items:stretch;"><div class="i_ div si39" style="-ms-flex-direction:row; -webkit-box-orient:ho
2024-09-29 13:16:45 UTC	1390	IN	Data Raw: 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 33 36 20 76 5f 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 76 65 72 74 69 63 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 Data Ascii: n:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><div class="i_ div si36 v_" style="-ms-flex-direction:column; -webkit-box-orient:vertical; -webkit-flex-direction:column; flex-direction:column;-ms-flex-pack:start; -we

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49793	142.250.185.142	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:16:46 UTC	772	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://notexistsaa.calperlongtermcare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
2024-09-29 13:16:46 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Sun, 29 Sep 2024 13:16:46 GMT Expires: Sun, 29 Sep 2024 13:16:46 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49795	142.250.185.142	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:16:47 UTC	772	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://notexistsaa.calperlongtermcare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
2024-09-29 13:16:47 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Sun, 29 Sep 2024 13:16:47 GMT Expires: Sun, 29 Sep 2024 13:16:47 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49792	172.217.18.14	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:16:47 UTC	899	OUT	GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=wrxx7vj7ui9r&aqid=PVP5ZprLKp3amLAP2f_WyQ0&psid=7840396037&pbt=bs&adbx=366.5&adby=109&adbh=1355&adbw=530&adbah=475%2C439%2C439&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=19%7C0%7C582%7C22%7C260&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://notexistsaa.calperlongtermcare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:16:48 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-3n4TaeuGFndYV5fkq0zDqQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 29 Sep 2024 13:16:47 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49796	172.217.18.14	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:16:49 UTC	899	OUT	GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=nvga0ho65dvd&aqid=PVP5ZprLKp3amLAP2f_WyQ0&psid=7840396037&pbt=bv&adbx=366.5&adby=109&adbh=1355&adbw=530&adbah=475%2C439%2C439&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=19%7C0%7C582%7C22%7C260&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://notexistsaa.calperlongtermcare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:16:49 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-d2eed1tyldonwAL2sIMNGA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 29 Sep 2024 13:16:49 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49798	142.250.185.142	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:16:51 UTC	2796	OUT	GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2C000003%2C000517%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet12_3ph&r=m&sct=ID%3D911125d09fe5fc33%3AT%3D1727615778%3ART%3D1727615778%3AS%3DALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw&sc_status=6&hl=en&rpbu=http%3A%2F%2Fnotexistsaa.calperlongtermcare.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1ODA5LjUzMDN8NGI0OWVhZmExNDM5M2M2OTA2ZjFjMmEwNTI5ZDEwZmM4ZTViNGE3Y3x8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&terms=Long-term%20care%2Cmental%20health%20care%2Cdisability%20care%2Celderly%20care%2Cin%20home%20care&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2556349329685648&q=Disability%20Care&afdt=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj8QvgQXu7ghwdodehT82JgRTn3vllMykC0FwxvyfTQJr6A0SuG7m0lQBPeY8be8shRgjOY8aIA_Dc4-x7TvuvAzvS8PHi2SQZ6LV [TRUNCATED] Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://notexistsaa.calperlongtermcare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:16:51 UTC	807	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Disposition: inline Date: Sun, 29 Sep 2024 13:16:51 GMT Expires: Sun, 29 Sep 2024 13:16:51 GMT Cache-Control: private, max-age=3600 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-LWsvinsvuqsGHJrhXzdC7w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Server: gws X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-29 13:16:51 UTC	583	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 73 74 79 6c 65 20 69 64 3d 22 73 73 72 2d 62 6f 69 6c 65 72 70 6c 61 74 65 22 3e 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 72 67 69 6e 3a 30 3b 7d 2e 64 69 76 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 20 2e 64 69 76 3a 6c 61 73 Data Ascii: 8000<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:las
2024-09-29 13:16:51 UTC	1390	IN	Data Raw: 69 5f 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 76 5f 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 Data Ascii: i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit
2024-09-29 13:16:51 UTC	1390	IN	Data Raw: 5f 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 6f 5f 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 78 5f 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 79 5f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 7a 2d 69 6e 64 65 78 3a 31 3b 7d 2e 6b 5f 3e 64 69 76 3a 6e 6f 74 28 2e 79 5f 29 20 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 Data Ascii: _{overflow:hidden;}.o_{white-space:nowrap;}.x_{cursor:pointer;}.y_{display:none; position:absolute; z-index:1;}.k_>div:not(.y_) {display:-webkit-inline-box; display:-moz-inline-box; display:-ms-inline-flexbox; display:-webkit-inline-flex; display:inline-f
2024-09-29 13:16:51 UTC	1390	IN	Data Raw: 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 42 6f 74 74 6f 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 43 65 6e 74 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 Data Ascii: start; align-items:flex-start;}.flexAlignBottom{-ms-flex-align:end; -webkit-box-align:end; -webkit-align-items:flex-end; align-items:flex-end;}.flexAlignCenter{-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center
2024-09-29 13:16:51 UTC	1390	IN	Data Raw: 3a 35 30 70 78 3b 63 6f 6c 6f 72 3a 23 63 63 63 63 63 63 3b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 2e 73 69 32 37 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 36 66 30 30 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 33 36 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 7d 2e 73 69 33 34 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 70 78 3b 7d 2e 73 69 34 32 7b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d Data Ascii: :50px;color:#cccccc;width:100%; -ms-flex-negative:1;-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.si27:hover{color:#ff6f00;text-decoration:underline;}.si36{height:100%;}.si34{margin-bottom:0px;}.si42{width:100%; -ms-flex-negative:1;-webkit-
2024-09-29 13:16:51 UTC	1390	IN	Data Raw: 74 74 6f 6d 3a 33 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 70 78 3b 7d 2e 73 69 31 38 7b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 31 38 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 31 39 7b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 32 30 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 32 31 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 38 36 62 66 32 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 Data Ascii: ttom:3px;padding-top:3px;}.si18{color:#dddddd;}.si18:hover{text-decoration:underline;}.si19{color:#dddddd;}.si20{font-family:Roboto,arial,sans-serif;font-size:12px;line-height:20px;color:#dddddd;}.si21{font-weight:700;background-color:#186bf2;border-radiu
2024-09-29 13:16:51 UTC	1390	IN	Data Raw: 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 70 78 3b 63 6f 6c 6f 72 3a 23 38 36 38 35 38 61 3b 7d 2e 73 69 32 36 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 7d 2e 73 69 37 32 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 52 6f 62 6f 74 6f 20 4c 69 67 68 74 22 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 Data Ascii: px;padding-bottom:1px;padding-left:1px;padding-right:1px;padding-top:1px;color:#86858a;}.si26{font-family:Roboto,arial,sans-serif;font-size:14px;line-height:24px;color:#ffffff;}.si72{font-family:"Roboto Light",arial,sans-serif;font-size:12px;line-height:2
2024-09-29 13:16:51 UTC	1390	IN	Data Raw: 73 69 6f 6e 4c 69 6e 6b 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4e 4f 49 4e 44 45 58 2c 20 4e 4f 46 4f 4c 4c 4f 57 22 20 6e 61 6d 65 3d 22 52 4f 42 4f 54 53 22 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 20 20 20 20 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 20 3c 64 69 76 20 69 64 3d 22 61 64 42 6c 6f 63 6b 22 3e 20 20 20 3c 64 69 76 20 69 64 3d 22 73 73 72 61 64 2d 6d 61 73 74 65 72 Data Ascii: sionLink:hover{text-decoration:underline;}</style> <meta content="NOINDEX, NOFOLLOW" name="ROBOTS"> <meta content="telephone=no" name="format-detection"> <meta content="origin" name="referrer"> </head> <body> <div id="adBlock"> <div id="ssrad-master
2024-09-29 13:16:51 UTC	1390	IN	Data Raw: 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 33 39 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f Data Ascii: -pack:start; -webkit-justify-content:flex-start; justify-content:flex-start;-ms-flex-align:stretch; -webkit-box-align:stretch; -webkit-align-items:stretch; align-items:stretch;"><div class="i_ div si39" style="-ms-flex-direction:row; -webkit-box-orient:ho
2024-09-29 13:16:51 UTC	1390	IN	Data Raw: 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 33 34 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 Data Ascii: align:stretch; -webkit-align-items:stretch; align-items:stretch;"><div class="i_ div si34" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;-ms-flex-pack:start; -webkit-box-pack:start; -webkit-ju

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49799	142.250.185.142	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:16:51 UTC	772	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://notexistsaa.calperlongtermcare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
2024-09-29 13:16:51 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Sun, 29 Sep 2024 13:16:51 GMT Expires: Sun, 29 Sep 2024 13:16:51 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49800	142.250.185.142	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:16:52 UTC	772	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://notexistsaa.calperlongtermcare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
2024-09-29 13:16:53 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Sun, 29 Sep 2024 13:16:53 GMT Expires: Sun, 29 Sep 2024 13:16:53 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49797	172.217.18.14	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:16:54 UTC	900	OUT	GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=x6hufqxvfipd&aqid=Q1P5ZvaiHpLaovsPw5qRoAI&psid=7840396037&pbt=bs&adbx=366.5&adby=109&adbh=1355&adbw=530&adbah=475%2C439%2C439&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=35%7C0%7C1325%7C3%7C1026&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://notexistsaa.calperlongtermcare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:16:54 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-37PHaQKafmg26hzsumJ9vw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 29 Sep 2024 13:16:54 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49802	172.217.18.14	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:16:55 UTC	900	OUT	GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=k4vgtt2ky74x&aqid=Q1P5ZvaiHpLaovsPw5qRoAI&psid=7840396037&pbt=bv&adbx=366.5&adby=109&adbh=1355&adbw=530&adbah=475%2C439%2C439&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=35%7C0%7C1325%7C3%7C1026&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://notexistsaa.calperlongtermcare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:16:56 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-smBHZnmzmeWencQFwOWDng' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 29 Sep 2024 13:16:56 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49805	142.250.185.142	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:03 UTC	772	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://notexistsaa.calperlongtermcare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
2024-09-29 13:17:04 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Sun, 29 Sep 2024 13:17:04 GMT Expires: Sun, 29 Sep 2024 13:17:04 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49806	142.250.185.142	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:03 UTC	2824	OUT	GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2C000003%2C000517%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet12_3ph&r=m&sct=ID%3D911125d09fe5fc33%3AT%3D1727615778%3ART%3D1727615778%3AS%3DALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw&sc_status=6&hl=en&rpbu=http%3A%2F%2Fnotexistsaa.calperlongtermcare.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1ODIyLjcwNDh8ZTk2YWU4MWVhZDQ1MGVkOTgwMDFhNGRjZjFhMDE5OTg3ZDYzZmRlOXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&terms=Long-term%20care%2Cmental%20health%20care%2Cdisability%20care%2Celderly%20care%2Cin%20home%20care&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2556349329685648&q=Mental%20Health%20Care&afdt=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj2Fwx1CP69y51eGq-AiAZrdjjEEEm-kgI4GG27mh0rqrtgT08SvO_YxhRixDnAmYj1ePjmTSEcyDkXkXf2_m-yoK-uk8je2 [TRUNCATED] Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://notexistsaa.calperlongtermcare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:17:04 UTC	807	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Disposition: inline Date: Sun, 29 Sep 2024 13:17:03 GMT Expires: Sun, 29 Sep 2024 13:17:03 GMT Cache-Control: private, max-age=3600 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-N95uuwhJYtrz3QsZOYZQEw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Server: gws X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-29 13:17:04 UTC	583	IN	Data Raw: 37 66 30 38 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 73 74 79 6c 65 20 69 64 3d 22 73 73 72 2d 62 6f 69 6c 65 72 70 6c 61 74 65 22 3e 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 72 67 69 6e 3a 30 3b 7d 2e 64 69 76 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 20 2e 64 69 76 3a 6c 61 73 Data Ascii: 7f08<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:las
2024-09-29 13:17:04 UTC	1390	IN	Data Raw: 69 5f 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 76 5f 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 Data Ascii: i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit
2024-09-29 13:17:04 UTC	1390	IN	Data Raw: 5f 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 6f 5f 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 78 5f 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 79 5f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 7a 2d 69 6e 64 65 78 3a 31 3b 7d 2e 6b 5f 3e 64 69 76 3a 6e 6f 74 28 2e 79 5f 29 20 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 Data Ascii: _{overflow:hidden;}.o_{white-space:nowrap;}.x_{cursor:pointer;}.y_{display:none; position:absolute; z-index:1;}.k_>div:not(.y_) {display:-webkit-inline-box; display:-moz-inline-box; display:-ms-inline-flexbox; display:-webkit-inline-flex; display:inline-f
2024-09-29 13:17:04 UTC	1390	IN	Data Raw: 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 42 6f 74 74 6f 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 43 65 6e 74 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 Data Ascii: start; align-items:flex-start;}.flexAlignBottom{-ms-flex-align:end; -webkit-box-align:end; -webkit-align-items:flex-end; align-items:flex-end;}.flexAlignCenter{-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center
2024-09-29 13:17:04 UTC	1390	IN	Data Raw: 3a 35 30 70 78 3b 63 6f 6c 6f 72 3a 23 63 63 63 63 63 63 3b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 2e 73 69 32 37 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 36 66 30 30 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 33 36 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 7d 2e 73 69 33 34 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 70 78 3b 7d 2e 73 69 34 32 7b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d Data Ascii: :50px;color:#cccccc;width:100%; -ms-flex-negative:1;-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.si27:hover{color:#ff6f00;text-decoration:underline;}.si36{height:100%;}.si34{margin-bottom:0px;}.si42{width:100%; -ms-flex-negative:1;-webkit-
2024-09-29 13:17:04 UTC	1390	IN	Data Raw: 74 74 6f 6d 3a 33 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 70 78 3b 7d 2e 73 69 31 38 7b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 31 38 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 31 39 7b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 32 30 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 32 31 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 38 36 62 66 32 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 Data Ascii: ttom:3px;padding-top:3px;}.si18{color:#dddddd;}.si18:hover{text-decoration:underline;}.si19{color:#dddddd;}.si20{font-family:Roboto,arial,sans-serif;font-size:12px;line-height:20px;color:#dddddd;}.si21{font-weight:700;background-color:#186bf2;border-radiu
2024-09-29 13:17:04 UTC	1390	IN	Data Raw: 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 70 78 3b 63 6f 6c 6f 72 3a 23 38 36 38 35 38 61 3b 7d 2e 73 69 32 36 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 7d 2e 73 69 37 32 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 52 6f 62 6f 74 6f 20 4c 69 67 68 74 22 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 Data Ascii: px;padding-bottom:1px;padding-left:1px;padding-right:1px;padding-top:1px;color:#86858a;}.si26{font-family:Roboto,arial,sans-serif;font-size:14px;line-height:24px;color:#ffffff;}.si72{font-family:"Roboto Light",arial,sans-serif;font-size:12px;line-height:2
2024-09-29 13:17:04 UTC	1390	IN	Data Raw: 73 69 6f 6e 4c 69 6e 6b 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4e 4f 49 4e 44 45 58 2c 20 4e 4f 46 4f 4c 4c 4f 57 22 20 6e 61 6d 65 3d 22 52 4f 42 4f 54 53 22 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 20 20 20 20 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 20 3c 64 69 76 20 69 64 3d 22 61 64 42 6c 6f 63 6b 22 3e 20 20 20 3c 64 69 76 20 69 64 3d 22 73 73 72 61 64 2d 6d 61 73 74 65 72 Data Ascii: sionLink:hover{text-decoration:underline;}</style> <meta content="NOINDEX, NOFOLLOW" name="ROBOTS"> <meta content="telephone=no" name="format-detection"> <meta content="origin" name="referrer"> </head> <body> <div id="adBlock"> <div id="ssrad-master
2024-09-29 13:17:04 UTC	1390	IN	Data Raw: 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 33 39 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f Data Ascii: -pack:start; -webkit-justify-content:flex-start; justify-content:flex-start;-ms-flex-align:stretch; -webkit-box-align:stretch; -webkit-align-items:stretch; align-items:stretch;"><div class="i_ div si39" style="-ms-flex-direction:row; -webkit-box-orient:ho
2024-09-29 13:17:04 UTC	1390	IN	Data Raw: 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 33 36 20 76 5f 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 76 65 72 74 69 63 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 Data Ascii: n:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><div class="i_ div si36 v_" style="-ms-flex-direction:column; -webkit-box-orient:vertical; -webkit-flex-direction:column; flex-direction:column;-ms-flex-pack:start; -we

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49807	142.250.185.142	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:04 UTC	772	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://notexistsaa.calperlongtermcare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
2024-09-29 13:17:05 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Sun, 29 Sep 2024 13:17:05 GMT Expires: Sun, 29 Sep 2024 13:17:05 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49804	172.217.18.14	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:06 UTC	899	OUT	GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=qp3lescnt109&aqid=UFP5ZsDdA8r_mLAPmKangAU&psid=7840396037&pbt=bs&adbx=366.5&adby=109&adbh=1355&adbw=530&adbah=475%2C439%2C439&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=33%7C0%7C1292%7C9%7C898&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://notexistsaa.calperlongtermcare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:17:07 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-fgYq4C91QJcy_0m62N7pqA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 29 Sep 2024 13:17:06 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49808	172.217.18.14	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:08 UTC	899	OUT	GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=jppmr26ecf6p&aqid=UFP5ZsDdA8r_mLAPmKangAU&psid=7840396037&pbt=bv&adbx=366.5&adby=109&adbh=1355&adbw=530&adbah=475%2C439%2C439&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=33%7C0%7C1292%7C9%7C898&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://notexistsaa.calperlongtermcare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:17:08 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-7P2kznAIsYDvAncjB-PWFA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 29 Sep 2024 13:17:08 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49812	142.250.185.142	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:09 UTC	2818	OUT	GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2C000003%2C000517%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet12_3ph&r=m&sct=ID%3D911125d09fe5fc33%3AT%3D1727615778%3ART%3D1727615778%3AS%3DALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw&sc_status=6&hl=en&rpbu=http%3A%2F%2Fnotexistsaa.calperlongtermcare.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1ODI4LjM4NHw4OGY2NjdhMTA4YmE2ODUwMWExZTMxZDkxY2U1Zjc3YzdkNmI3MjI5fHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHx8fDB8MHx8MHx8fDB8MHxXMTA9fHwxfFcxMD18MTc1M2JjZGY3ZTEzMzRlZjM1ZGFmMGY4OWY4MzQ3YTM1YmQxYjBmYnwwfGRwLXRlYW1pbnRlcm5ldDEyXzNwaHwwfDB8fHw%253D&terms=Long-term%20care%2Cmental%20health%20care%2Cdisability%20care%2Celderly%20care%2Cin%20home%20care&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2556349329685648&q=Disability%20Care&afdt=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpj8QvgQXu7ghwdodehT82JgRTn3vllMykC0FwxvyfTQJr6A0SuG7m0lQBPeY8be8shRgjOY8aIA_Dc4-x7TvuvAzvS8PHi2SQ [TRUNCATED] Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://notexistsaa.calperlongtermcare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:17:10 UTC	807	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Disposition: inline Date: Sun, 29 Sep 2024 13:17:09 GMT Expires: Sun, 29 Sep 2024 13:17:09 GMT Cache-Control: private, max-age=3600 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-98QqdvBSEufJ5Ap_5KDiug' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Server: gws X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-29 13:17:10 UTC	583	IN	Data Raw: 37 64 35 32 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 73 74 79 6c 65 20 69 64 3d 22 73 73 72 2d 62 6f 69 6c 65 72 70 6c 61 74 65 22 3e 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 72 67 69 6e 3a 30 3b 7d 2e 64 69 76 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 20 2e 64 69 76 3a 6c 61 73 Data Ascii: 7d52<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:las
2024-09-29 13:17:10 UTC	1390	IN	Data Raw: 69 5f 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 76 5f 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 Data Ascii: i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit
2024-09-29 13:17:10 UTC	1390	IN	Data Raw: 5f 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 6f 5f 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 78 5f 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 79 5f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 7a 2d 69 6e 64 65 78 3a 31 3b 7d 2e 6b 5f 3e 64 69 76 3a 6e 6f 74 28 2e 79 5f 29 20 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 Data Ascii: _{overflow:hidden;}.o_{white-space:nowrap;}.x_{cursor:pointer;}.y_{display:none; position:absolute; z-index:1;}.k_>div:not(.y_) {display:-webkit-inline-box; display:-moz-inline-box; display:-ms-inline-flexbox; display:-webkit-inline-flex; display:inline-f
2024-09-29 13:17:10 UTC	1390	IN	Data Raw: 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 42 6f 74 74 6f 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 43 65 6e 74 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 Data Ascii: start; align-items:flex-start;}.flexAlignBottom{-ms-flex-align:end; -webkit-box-align:end; -webkit-align-items:flex-end; align-items:flex-end;}.flexAlignCenter{-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center
2024-09-29 13:17:10 UTC	1390	IN	Data Raw: 3a 35 30 70 78 3b 63 6f 6c 6f 72 3a 23 63 63 63 63 63 63 3b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 2e 73 69 32 37 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 36 66 30 30 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 33 36 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 7d 2e 73 69 33 34 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 70 78 3b 7d 2e 73 69 34 32 7b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d Data Ascii: :50px;color:#cccccc;width:100%; -ms-flex-negative:1;-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.si27:hover{color:#ff6f00;text-decoration:underline;}.si36{height:100%;}.si34{margin-bottom:0px;}.si42{width:100%; -ms-flex-negative:1;-webkit-
2024-09-29 13:17:10 UTC	1390	IN	Data Raw: 74 74 6f 6d 3a 33 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 70 78 3b 7d 2e 73 69 31 38 7b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 31 38 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 31 39 7b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 32 30 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 32 31 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 38 36 62 66 32 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 Data Ascii: ttom:3px;padding-top:3px;}.si18{color:#dddddd;}.si18:hover{text-decoration:underline;}.si19{color:#dddddd;}.si20{font-family:Roboto,arial,sans-serif;font-size:12px;line-height:20px;color:#dddddd;}.si21{font-weight:700;background-color:#186bf2;border-radiu
2024-09-29 13:17:10 UTC	1390	IN	Data Raw: 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 70 78 3b 63 6f 6c 6f 72 3a 23 38 36 38 35 38 61 3b 7d 2e 73 69 32 36 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 7d 2e 73 69 37 32 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 52 6f 62 6f 74 6f 20 4c 69 67 68 74 22 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 Data Ascii: px;padding-bottom:1px;padding-left:1px;padding-right:1px;padding-top:1px;color:#86858a;}.si26{font-family:Roboto,arial,sans-serif;font-size:14px;line-height:24px;color:#ffffff;}.si72{font-family:"Roboto Light",arial,sans-serif;font-size:12px;line-height:2
2024-09-29 13:17:10 UTC	1390	IN	Data Raw: 73 69 6f 6e 4c 69 6e 6b 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4e 4f 49 4e 44 45 58 2c 20 4e 4f 46 4f 4c 4c 4f 57 22 20 6e 61 6d 65 3d 22 52 4f 42 4f 54 53 22 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 20 20 20 20 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 20 3c 64 69 76 20 69 64 3d 22 61 64 42 6c 6f 63 6b 22 3e 20 20 20 3c 64 69 76 20 69 64 3d 22 73 73 72 61 64 2d 6d 61 73 74 65 72 Data Ascii: sionLink:hover{text-decoration:underline;}</style> <meta content="NOINDEX, NOFOLLOW" name="ROBOTS"> <meta content="telephone=no" name="format-detection"> <meta content="origin" name="referrer"> </head> <body> <div id="adBlock"> <div id="ssrad-master
2024-09-29 13:17:10 UTC	1390	IN	Data Raw: 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 33 39 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f Data Ascii: -pack:start; -webkit-justify-content:flex-start; justify-content:flex-start;-ms-flex-align:stretch; -webkit-box-align:stretch; -webkit-align-items:stretch; align-items:stretch;"><div class="i_ div si39" style="-ms-flex-direction:row; -webkit-box-orient:ho
2024-09-29 13:17:10 UTC	1390	IN	Data Raw: 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 33 34 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 Data Ascii: align:stretch; -webkit-align-items:stretch; align-items:stretch;"><div class="i_ div si34" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;-ms-flex-pack:start; -webkit-box-pack:start; -webkit-ju

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49813	142.250.185.142	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:09 UTC	772	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://notexistsaa.calperlongtermcare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
2024-09-29 13:17:10 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Sun, 29 Sep 2024 13:17:09 GMT Expires: Sun, 29 Sep 2024 13:17:09 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49814	142.250.185.142	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:10 UTC	772	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://notexistsaa.calperlongtermcare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
2024-09-29 13:17:11 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Sun, 29 Sep 2024 13:17:11 GMT Expires: Sun, 29 Sep 2024 13:17:11 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49811	172.217.18.14	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:13 UTC	900	OUT	GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=h91sp5te7cyh&aqid=VVP5ZrfLOfbYmLAP9e-o4QE&psid=7840396037&pbt=bs&adbx=366.5&adby=109&adbh=1355&adbw=530&adbah=475%2C439%2C439&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=27%7C0%7C1317%7C5%7C1290&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://notexistsaa.calperlongtermcare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:17:13 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-a7GmkrgN5hD7x2dRMo40pg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 29 Sep 2024 13:17:13 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49816	172.217.18.14	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:14 UTC	900	OUT	GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=sdde6wtalo4n&aqid=VVP5ZrfLOfbYmLAP9e-o4QE&psid=7840396037&pbt=bv&adbx=366.5&adby=109&adbh=1355&adbw=530&adbah=475%2C439%2C439&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=27%7C0%7C1317%7C5%7C1290&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://notexistsaa.calperlongtermcare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:17:14 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-UsVtnP3upt8GPeJliQ5uRQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 29 Sep 2024 13:17:14 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49819	142.250.185.142	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:16 UTC	772	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://notexistsaa.calperlongtermcare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
2024-09-29 13:17:16 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Sun, 29 Sep 2024 13:17:16 GMT Expires: Sun, 29 Sep 2024 13:17:16 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49820	142.250.185.142	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:16 UTC	2812	OUT	GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2C000003%2C000517%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet12_3ph&r=m&sct=ID%3D911125d09fe5fc33%3AT%3D1727615778%3ART%3D1727615778%3AS%3DALNI_Ma455YbcJO0Iqs7g8kP4k6bsR5vpw&sc_status=6&hl=en&rpbu=http%3A%2F%2Fnotexistsaa.calperlongtermcare.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2Zjk1MzFmM2I4NDl8fHwxNzI3NjE1ODM1LjQyMjZ8MjY3MjMxZjJhM2ExNjA5OTk3ZDc3MWU3YTEzZWM2YWQ0NTlhNzNmYnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NTNiY2RmN2UxMzM0ZWYzNWRhZjBmODlmODM0N2EzNWJkMWIwZmJ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&terms=Long-term%20care%2Cmental%20health%20care%2Cdisability%20care%2Celderly%20care%2Cin%20home%20care&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2556349329685648&q=Long-term%20Care&afdt=ChMInZ-dpp7oiAMVJoH9Bx3kDiwkEmwBlLqpjxYC9i9y0TgoYIuZ8V_UHRMakU9iohKuhUuqxr8ymSHJsd1j4bjWfISTJnMGI7hFgWr_vhvGP_2LJwczGgGfqI8hF3eyZLCQwcvAF [TRUNCATED] Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://notexistsaa.calperlongtermcare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:17:17 UTC	807	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Disposition: inline Date: Sun, 29 Sep 2024 13:17:16 GMT Expires: Sun, 29 Sep 2024 13:17:16 GMT Cache-Control: private, max-age=3600 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-25_qhX9zLyHjdh5yKGwgSA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Server: gws X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-29 13:17:17 UTC	583	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 73 74 79 6c 65 20 69 64 3d 22 73 73 72 2d 62 6f 69 6c 65 72 70 6c 61 74 65 22 3e 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 72 67 69 6e 3a 30 3b 7d 2e 64 69 76 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 20 2e 64 69 76 3a 6c 61 73 Data Ascii: 8000<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:las
2024-09-29 13:17:17 UTC	1390	IN	Data Raw: 69 5f 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 76 5f 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 Data Ascii: i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit
2024-09-29 13:17:17 UTC	1390	IN	Data Raw: 5f 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 6f 5f 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 78 5f 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 79 5f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 7a 2d 69 6e 64 65 78 3a 31 3b 7d 2e 6b 5f 3e 64 69 76 3a 6e 6f 74 28 2e 79 5f 29 20 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 Data Ascii: _{overflow:hidden;}.o_{white-space:nowrap;}.x_{cursor:pointer;}.y_{display:none; position:absolute; z-index:1;}.k_>div:not(.y_) {display:-webkit-inline-box; display:-moz-inline-box; display:-ms-inline-flexbox; display:-webkit-inline-flex; display:inline-f
2024-09-29 13:17:17 UTC	1390	IN	Data Raw: 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 42 6f 74 74 6f 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 43 65 6e 74 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 Data Ascii: start; align-items:flex-start;}.flexAlignBottom{-ms-flex-align:end; -webkit-box-align:end; -webkit-align-items:flex-end; align-items:flex-end;}.flexAlignCenter{-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center
2024-09-29 13:17:17 UTC	1390	IN	Data Raw: 3a 35 30 70 78 3b 63 6f 6c 6f 72 3a 23 63 63 63 63 63 63 3b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 2e 73 69 32 37 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 36 66 30 30 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 33 36 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 7d 2e 73 69 33 34 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 70 78 3b 7d 2e 73 69 34 32 7b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d Data Ascii: :50px;color:#cccccc;width:100%; -ms-flex-negative:1;-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.si27:hover{color:#ff6f00;text-decoration:underline;}.si36{height:100%;}.si34{margin-bottom:0px;}.si42{width:100%; -ms-flex-negative:1;-webkit-
2024-09-29 13:17:17 UTC	1390	IN	Data Raw: 74 74 6f 6d 3a 33 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 70 78 3b 7d 2e 73 69 31 38 7b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 31 38 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 31 39 7b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 32 30 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 32 31 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 38 36 62 66 32 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 Data Ascii: ttom:3px;padding-top:3px;}.si18{color:#dddddd;}.si18:hover{text-decoration:underline;}.si19{color:#dddddd;}.si20{font-family:Roboto,arial,sans-serif;font-size:12px;line-height:20px;color:#dddddd;}.si21{font-weight:700;background-color:#186bf2;border-radiu
2024-09-29 13:17:17 UTC	1390	IN	Data Raw: 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 70 78 3b 63 6f 6c 6f 72 3a 23 38 36 38 35 38 61 3b 7d 2e 73 69 32 36 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 7d 2e 73 69 37 32 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 52 6f 62 6f 74 6f 20 4c 69 67 68 74 22 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 Data Ascii: px;padding-bottom:1px;padding-left:1px;padding-right:1px;padding-top:1px;color:#86858a;}.si26{font-family:Roboto,arial,sans-serif;font-size:14px;line-height:24px;color:#ffffff;}.si72{font-family:"Roboto Light",arial,sans-serif;font-size:12px;line-height:2
2024-09-29 13:17:17 UTC	1390	IN	Data Raw: 73 69 6f 6e 4c 69 6e 6b 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4e 4f 49 4e 44 45 58 2c 20 4e 4f 46 4f 4c 4c 4f 57 22 20 6e 61 6d 65 3d 22 52 4f 42 4f 54 53 22 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 20 20 20 20 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 20 3c 64 69 76 20 69 64 3d 22 61 64 42 6c 6f 63 6b 22 3e 20 20 20 3c 64 69 76 20 69 64 3d 22 73 73 72 61 64 2d 6d 61 73 74 65 72 Data Ascii: sionLink:hover{text-decoration:underline;}</style> <meta content="NOINDEX, NOFOLLOW" name="ROBOTS"> <meta content="telephone=no" name="format-detection"> <meta content="origin" name="referrer"> </head> <body> <div id="adBlock"> <div id="ssrad-master
2024-09-29 13:17:17 UTC	1390	IN	Data Raw: 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 33 39 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f Data Ascii: -pack:start; -webkit-justify-content:flex-start; justify-content:flex-start;-ms-flex-align:stretch; -webkit-box-align:stretch; -webkit-align-items:stretch; align-items:stretch;"><div class="i_ div si39" style="-ms-flex-direction:row; -webkit-box-orient:ho
2024-09-29 13:17:17 UTC	1390	IN	Data Raw: 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 20 61 6c 69 67 6e 2d 69 74 65 6d Data Ascii: al; -webkit-flex-direction:column; flex-direction:column;-ms-flex-pack:start; -webkit-box-pack:start; -webkit-justify-content:flex-start; justify-content:flex-start;-ms-flex-align:stretch; -webkit-box-align:stretch; -webkit-align-items:stretch; align-item

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49824	142.250.185.142	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:17 UTC	772	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://notexistsaa.calperlongtermcare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
2024-09-29 13:17:17 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Sun, 29 Sep 2024 13:17:17 GMT Expires: Sun, 29 Sep 2024 13:17:17 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49818	172.217.18.14	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:20 UTC	900	OUT	GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=qwy65mgg467a&aqid=XFP5Zv-sN6CahcIP4t748Ac&psid=7840396037&pbt=bs&adbx=366.5&adby=109&adbh=1355&adbw=530&adbah=475%2C439%2C439&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=23%7C0%7C1709%7C18%7C699&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://notexistsaa.calperlongtermcare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:17:20 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-iJLF0d-Zm4XGC8fXz8LjVw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 29 Sep 2024 13:17:20 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49825	172.217.18.14	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:20 UTC	900	OUT	GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=u7l3x2p49ukq&aqid=XFP5Zv-sN6CahcIP4t748Ac&psid=7840396037&pbt=bv&adbx=366.5&adby=109&adbh=1355&adbw=530&adbah=475%2C439%2C439&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=23%7C0%7C1709%7C18%7C699&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://notexistsaa.calperlongtermcare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:17:21 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-AiGqNTCnXt-SPXcgvA5eMA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 29 Sep 2024 13:17:20 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 1900, Parent PID: 1016

General

Target ID:	0
Start time:	09:16:07
Start date:	29/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3328, Parent PID: 1900

General

Target ID:	2
Start time:	09:16:10
Start date:	29/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=2036,i,9510549417315578312,17399682177661513637,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6372, Parent PID: 1016

General

Target ID:	3
Start time:	09:16:13
Start date:	29/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://notexistsaa.calperlongtermcare.com/"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://notexistsaa.calperlongtermcare.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Windows Analysis Report
https://notexistsaa.calperlongtermcare.com/