Edit tour

Windows Analysis Report
https://www.img2.ymlp294.net/

Overview

General Information

Sample URL:	https://www.img2.ymlp294.net/
Analysis ID:	1522246
Tags:	urlscan
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

HTML page contains hidden javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6952 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6452 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2516 --field-trial-handle=2496,i,12955688402611608546,14653998491514946388,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6108 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.img2.ymlp294.net/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://www.img2.ymlp294.net/

HTTP Parser: Base64 decoded: <svg fill='#D7D7D7' style="float: right" xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Source: https://www.img2.ymlp294.net/	HTTP Parser: No favicon
Source: https://www.img2.ymlp294.net/	HTTP Parser: No favicon
Source: https://www.img2.ymlp294.net/	HTTP Parser: No favicon
Source: https://www.img2.ymlp294.net/	HTTP Parser: No favicon
Source: https://www.img2.ymlp294.net/	HTTP Parser: No favicon
Source: https://www.mydomaincontact.com/index.php?domain_name=ymlp294.net	HTTP Parser: No favicon
Source: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Fingerprint+Locations&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpjzMvxrMe1MfQMonph0Kai1gFEmEE1q5_eIJKInVdvCRBrbZWX-ZJYk23DHqqOKJHB-3-9A-OVvXX3ePbUZarflKV7IxIS-_BAvv-xqE3hQeViGAwRwxXnJXylB6_t2l64A&pcsa=false	HTTP Parser: No favicon
Source: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Fingerprint+Locations&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpjzMvxrMe1MfQMonph0Kai1gFEmEE1q5_eIJKInVdvCRBrbZWX-ZJYk23DHqqOKJHB-3-9A-OVvXX3ePbUZarflKV7IxIS-_BAvv-xqE3hQeViGAwRwxXnJXylB6_t2l64A&pcsa=false	HTTP Parser: No favicon
Source: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Fingerprint+Locations&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpjzMvxrMe1MfQMonph0Kai1gFEmEE1q5_eIJKInVdvCRBrbZWX-ZJYk23DHqqOKJHB-3-9A-OVvXX3ePbUZarflKV7IxIS-_BAvv-xqE3hQeViGAwRwxXnJXylB6_t2l64A&pcsa=false	HTTP Parser: No favicon
Source: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Electronic+Fingerprints+For+Employment&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpj-Cc0S-fYKtdlAPXzRH6TCYLSLzizC_juBVXQxkI0WCgwbhC_qeRF5PWSO8b88HUrnUPuQ1qym33YKdH2odkkjj0_xXrGGYqyh4hLOm8gLi7kkIExQyZWypGx-K802lAew&pcsa=false	HTTP Parser: No favicon
Source: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Electronic+Fingerprints+For+Employment&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpj-Cc0S-fYKtdlAPXzRH6TCYLSLzizC_juBVXQxkI0WCgwbhC_qeRF5PWSO8b88HUrnUPuQ1qym33YKdH2odkkjj0_xXrGGYqyh4hLOm8gLi7kkIExQyZWypGx-K802lAew&pcsa=false	HTTP Parser: No favicon
Source: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Electronic+Fingerprints+For+Employment&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpj-Cc0S-fYKtdlAPXzRH6TCYLSLzizC_juBVXQxkI0WCgwbhC_qeRF5PWSO8b88HUrnUPuQ1qym33YKdH2odkkjj0_xXrGGYqyh4hLOm8gLi7kkIExQyZWypGx-K802lAew&pcsa=false	HTTP Parser: No favicon
Source: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Electronic+Fingerprints+For+Employment&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpj-Cc0S-fYKtdlAPXzRH6TCYLSLzizC_juBVXQxkI0WCgwbhC_qeRF5PWSO8b88HUrnUPuQ1qym33YKdH2odkkjj0_xXrGGYqyh4hLOm8gLi7kkIExQyZWypGx-K802lAew&pcsa=false	HTTP Parser: No favicon
Source: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Reset+Password&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmYBlLqpjy4j-ezD1zWrFP6RH-dyPE5lTBqxgA0qK4FhwM0BmGo80V6Za76RLHCNjfMDf_wqrTtxma-QcwyTatvF5ivGxGP_kMNdLRRttz7dQeTQmZFmv5A9tMGaFRpYIY0-p0IkVpc&pcsa=false	HTTP Parser: No favicon
Source: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Reset+Password&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmYBlLqpjy4j-ezD1zWrFP6RH-dyPE5lTBqxgA0qK4FhwM0BmGo80V6Za76RLHCNjfMDf_wqrTtxma-QcwyTatvF5ivGxGP_kMNdLRRttz7dQeTQmZFmv5A9tMGaFRpYIY0-p0IkVpc&pcsa=false	HTTP Parser: No favicon
Source: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Reset+Password&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmYBlLqpjy4j-ezD1zWrFP6RH-dyPE5lTBqxgA0qK4FhwM0BmGo80V6Za76RLHCNjfMDf_wqrTtxma-QcwyTatvF5ivGxGP_kMNdLRRttz7dQeTQmZFmv5A9tMGaFRpYIY0-p0IkVpc&pcsa=false	HTTP Parser: No favicon
Source: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Electronic+Fingerprints+For+Employment&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpj-Cc0S-fYKtdlAPXzRH6TCYLSLzizC_juBVXQxkI0WCgwbhC_qeRF5PWSO8b88HUrnUPuQ1qym33YKdH2odkkjj0_xXrGGYqyh4hLOm8gLi7kkIExQyZWypGx-K802lAew&pcsa=false&nb=0&nm=3	HTTP Parser: No favicon
Source: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Electronic+Fingerprints+For+Employment&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpj-Cc0S-fYKtdlAPXzRH6TCYLSLzizC_juBVXQxkI0WCgwbhC_qeRF5PWSO8b88HUrnUPuQ1qym33YKdH2odkkjj0_xXrGGYqyh4hLOm8gLi7kkIExQyZWypGx-K802lAew&pcsa=false&nb=0&nm=3	HTTP Parser: No favicon
Source: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Electronic+Fingerprints+For+Employment&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpj-Cc0S-fYKtdlAPXzRH6TCYLSLzizC_juBVXQxkI0WCgwbhC_qeRF5PWSO8b88HUrnUPuQ1qym33YKdH2odkkjj0_xXrGGYqyh4hLOm8gLi7kkIExQyZWypGx-K802lAew&pcsa=false&nb=0&nm=3	HTTP Parser: No favicon
Source: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Reset+Password&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmYBlLqpjy4j-ezD1zWrFP6RH-dyPE5lTBqxgA0qK4FhwM0BmGo80V6Za76RLHCNjfMDf_wqrTtxma-QcwyTatvF5ivGxGP_kMNdLRRttz7dQeTQmZFmv5A9tMGaFRpYIY0-p0IkVpc&pcsa=false&nb=0&nm=2	HTTP Parser: No favicon
Source: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Reset+Password&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmYBlLqpjy4j-ezD1zWrFP6RH-dyPE5lTBqxgA0qK4FhwM0BmGo80V6Za76RLHCNjfMDf_wqrTtxma-QcwyTatvF5ivGxGP_kMNdLRRttz7dQeTQmZFmv5A9tMGaFRpYIY0-p0IkVpc&pcsa=false&nb=0&nm=2	HTTP Parser: No favicon
Source: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Reset+Password&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmYBlLqpjy4j-ezD1zWrFP6RH-dyPE5lTBqxgA0qK4FhwM0BmGo80V6Za76RLHCNjfMDf_wqrTtxma-QcwyTatvF5ivGxGP_kMNdLRRttz7dQeTQmZFmv5A9tMGaFRpYIY0-p0IkVpc&pcsa=false&nb=0&nm=2	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49721 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.img2.ymlp294.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.php?domain=ymlp294.net&toggle=browserjs&uid=MTcyNzYxNTg0MC40MTUxOjgzOGE1Y2JhNGQwMmJlYTdmZGM0ODQzZjNkNTRiOWZkZjk2MTcyNWRlNzJlZmVkY2RhM2JiMjdmYmFkYjA0OWE6NjZmOTUzNjA2NTU5MQ%3D%3D HTTP/1.1Host: www.img2.ymlp294.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"device-memory: 8rtt: 200sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36viewport-width: 1280dpr: 1downlink: 1.7ect: 4gsec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.img2.ymlp294.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ls.php?t=66f95360&token=bd6d6dfed5562124a7653afd94f1958354c6c8b6 HTTP/1.1Host: www.img2.ymlp294.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"device-memory: 8rtt: 200sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36viewport-width: 1280dpr: 1downlink: 1.7ect: 4gsec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.img2.ymlp294.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.img2.ymlp294.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1Host: d38psrni17bvxu.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.img2.ymlp294.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.php?domain=ymlp294.net&toggle=browserjs&uid=MTcyNzYxNTg0MC40MTUxOjgzOGE1Y2JhNGQwMmJlYTdmZGM0ODQzZjNkNTRiOWZkZjk2MTcyNWRlNzJlZmVkY2RhM2JiMjdmYmFkYjA0OWE6NjZmOTUzNjA2NTU5MQ%3D%3D HTTP/1.1Host: www.img2.ymlp294.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1Host: d38psrni17bvxu.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=bucket007%2C000003%2C000802%2Cbucket066%2Cbucket077&client=dp-teaminternet12_3ph&r=m&hl=en&rpbu=https%3A%2F%2Fwww.img2.ymlp294.net%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%253D%253D&terms=Fingerprint%20Locations%2CElectronic%20Fingerprints%20For%20Employment%2CReset%20Password&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2558334540730768&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301511%2C17301516%2C17301266%2C72717107&format=r3%7Cs&nocache=6051727615841252&num=0&output=afd_ads&domain_name=www.img2.ymlp294.net&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727615841260&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=791&frm=0&uio=--&cont=tc&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=https%3A%2F%2Fwww.img2.ymlp294.net%2F HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.img2.ymlp294.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?pac=0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /track.php?domain=ymlp294.net&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTg0MC40MTUxOjgzOGE1Y2JhNGQwMmJlYTdmZGM0ODQzZjNkNTRiOWZkZjk2MTcyNWRlNzJlZmVkY2RhM2JiMjdmYmFkYjA0OWE6NjZmOTUzNjA2NTU5MQ%3D%3D HTTP/1.1Host: www.img2.ymlp294.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"device-memory: 8rtt: 200sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36viewport-width: 1280dpr: 1downlink: 1.7ect: 4gsec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.img2.ymlp294.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.img2.ymlp294.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"device-memory: 8rtt: 200sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36viewport-width: 1280dpr: 1downlink: 1.7ect: 4gsec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.img2.ymlp294.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
Source: global traffic	HTTP traffic detected: GET /track.php?domain=ymlp294.net&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTg0MC40MTUxOjgzOGE1Y2JhNGQwMmJlYTdmZGM0ODQzZjNkNTRiOWZkZjk2MTcyNWRlNzJlZmVkY2RhM2JiMjdmYmFkYjA0OWE6NjZmOTUzNjA2NTU5MQ%3D%3D HTTP/1.1Host: www.img2.ymlp294.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=n5amcn7arpgx&aqid=Y1P5Zq6eA9SqjuwP5a_K2AQ&psid=7840396037&pbt=bs&adbx=375&adby=130&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=19%7C0%7C1081%7C1666%7C825&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.img2.ymlp294.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.img2.ymlp294.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=g1363e58m8bp&aqid=Y1P5Zq6eA9SqjuwP5a_K2AQ&psid=7840396037&pbt=bv&adbx=375&adby=130&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=19%7C0%7C1081%7C1666%7C825&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.img2.ymlp294.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index.php?domain_name=ymlp294.net HTTP/1.1Host: www.mydomaincontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/select2/select2.css HTTP/1.1Host: www.mydomaincontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.mydomaincontact.com/index.php?domain_name=ymlp294.netAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-0f144a28a2be3a0109e2a843e82c7f6c=1
Source: global traffic	HTTP traffic detected: GET /forms/style.css HTTP/1.1Host: www.mydomaincontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.mydomaincontact.com/index.php?domain_name=ymlp294.netAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-0f144a28a2be3a0109e2a843e82c7f6c=1
Source: global traffic	HTTP traffic detected: GET /scripts/jquery.js HTTP/1.1Host: www.mydomaincontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mydomaincontact.com/index.php?domain_name=ymlp294.netAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-0f144a28a2be3a0109e2a843e82c7f6c=1
Source: global traffic	HTTP traffic detected: GET /scripts/select2/select2.min.js HTTP/1.1Host: www.mydomaincontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mydomaincontact.com/index.php?domain_name=ymlp294.netAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-0f144a28a2be3a0109e2a843e82c7f6c=1
Source: global traffic	HTTP traffic detected: GET /forms/script.js HTTP/1.1Host: www.mydomaincontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mydomaincontact.com/index.php?domain_name=ymlp294.netAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-0f144a28a2be3a0109e2a843e82c7f6c=1
Source: global traffic	HTTP traffic detected: GET /scripts/select2/select2.min.js HTTP/1.1Host: www.mydomaincontact.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-0f144a28a2be3a0109e2a843e82c7f6c=1
Source: global traffic	HTTP traffic detected: GET /forms/script-addon.js HTTP/1.1Host: www.mydomaincontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mydomaincontact.com/index.php?domain_name=ymlp294.netAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-0f144a28a2be3a0109e2a843e82c7f6c=1
Source: global traffic	HTTP traffic detected: GET /images/trust.svg HTTP/1.1Host: www.mydomaincontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mydomaincontact.com/index.php?domain_name=ymlp294.netAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-0f144a28a2be3a0109e2a843e82c7f6c=1
Source: global traffic	HTTP traffic detected: GET /scripts/jquery.js HTTP/1.1Host: www.mydomaincontact.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-0f144a28a2be3a0109e2a843e82c7f6c=1
Source: global traffic	HTTP traffic detected: GET /forms/script.js HTTP/1.1Host: www.mydomaincontact.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-0f144a28a2be3a0109e2a843e82c7f6c=1
Source: global traffic	HTTP traffic detected: GET /scripts/select2/select2.png HTTP/1.1Host: www.mydomaincontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mydomaincontact.com/scripts/select2/select2.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-0f144a28a2be3a0109e2a843e82c7f6c=1
Source: global traffic	HTTP traffic detected: GET /forms/script-addon.js HTTP/1.1Host: www.mydomaincontact.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-0f144a28a2be3a0109e2a843e82c7f6c=1
Source: global traffic	HTTP traffic detected: GET /images/trust.svg HTTP/1.1Host: www.mydomaincontact.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-0f144a28a2be3a0109e2a843e82c7f6c=1
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.mydomaincontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mydomaincontact.com/index.php?domain_name=ymlp294.netAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-0f144a28a2be3a0109e2a843e82c7f6c=1
Source: global traffic	HTTP traffic detected: GET /scripts/select2/select2.png HTTP/1.1Host: www.mydomaincontact.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-0f144a28a2be3a0109e2a843e82c7f6c=1
Source: global traffic	HTTP traffic detected: GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Fingerprint+Locations&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpjzMvxrMe1MfQMonph0Kai1gFEmEE1q5_eIJKInVdvCRBrbZWX-ZJYk23DHqqOKJHB-3-9A-OVvXX3ePbUZarflKV7IxIS-_BAvv-xqE3hQeViGAwRwxXnJXylB6_t2l64A&pcsa=false HTTP/1.1Host: www.img2.ymlp294.netConnection: keep-alivedevice-memory: 8dpr: 1viewport-width: 1280rtt: 200downlink: 1.55ect: 3gsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
Source: global traffic	HTTP traffic detected: GET /track.php?domain=ymlp294.net&toggle=browserjs&uid=MTcyNzYxNTg2Ny4yNjUzOjY1MTQ0ZDg1ZTNhODhkNTRhMDZjNTdlMGQ2ZDMxMWM2MTRlNGVmYmE1MGFhODdmYjk2ZDIwZjE3ZjU2OTUyZWM6NjZmOTUzN2I0MGM4Mg%3D%3D HTTP/1.1Host: www.img2.ymlp294.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"device-memory: 8rtt: 200sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36viewport-width: 1280dpr: 1downlink: 1.7ect: 3gsec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Fingerprint+Locations&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpjzMvxrMe1MfQMonph0Kai1gFEmEE1q5_eIJKInVdvCRBrbZWX-ZJYk23DHqqOKJHB-3-9A-OVvXX3ePbUZarflKV7IxIS-_BAvv-xqE3hQeViGAwRwxXnJXylB6_t2l64A&pcsa=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.img2.ymlp294.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ls.php?t=66f9537b&token=b5549628c8b4e918624c8865b1d93e21353a6bcd HTTP/1.1Host: www.img2.ymlp294.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"device-memory: 8rtt: 200sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36viewport-width: 1280dpr: 1downlink: 1.7ect: 3gsec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Fingerprint+Locations&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpjzMvxrMe1MfQMonph0Kai1gFEmEE1q5_eIJKInVdvCRBrbZWX-ZJYk23DHqqOKJHB-3-9A-OVvXX3ePbUZarflKV7IxIS-_BAvv-xqE3hQeViGAwRwxXnJXylB6_t2l64A&pcsa=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
Source: global traffic	HTTP traffic detected: GET /track.php?domain=ymlp294.net&toggle=browserjs&uid=MTcyNzYxNTg2Ny4yNjUzOjY1MTQ0ZDg1ZTNhODhkNTRhMDZjNTdlMGQ2ZDMxMWM2MTRlNGVmYmE1MGFhODdmYjk2ZDIwZjE3ZjU2OTUyZWM6NjZmOTUzN2I0MGM4Mg%3D%3D HTTP/1.1Host: www.img2.ymlp294.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
Source: global traffic	HTTP traffic detected: GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=bucket007%2C000003%2C000802%2Cbucket066%2Cbucket077&client=dp-teaminternet12_3ph&r=m&sct=ID%3D4562ec206474b9d1%3AT%3D1727615843%3ART%3D1727615843%3AS%3DALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w&sc_status=6&hl=en&rpbu=https%3A%2F%2Fwww.img2.ymlp294.net%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NjcuMjkyNnw4NjcyM2UyMGEwMWJmNjY2OGNjOWJkMWM4YmI0ZDRkMDRmNTYyNmE4fHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%253D%253D&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Fingerprint%20Locations&afdt=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpjzMvxrMe1MfQMonph0Kai1gFEmEE1q5_eIJKInVdvCRBrbZWX-ZJYk23DHqqOKJHB-3-9A-OVvXX3ePbUZarflKV7IxIS-_BAvv-xqE3hQeViGAwRwxXnJXylB6_t2l64A&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301511%2C17301516%2C17301266%2C72717108&format=n3&ad=n3&nocache=2691727615867280&num=0&output=afd_ads&domain_name=www.img2.ymlp294.net&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727615867284&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=791&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=https%3A%2F%2Fwww.img2.ymlp294.net%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%253D%253D%26query%3DFingerprint%2BLocations%26afdToken%3DChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpjzMvxrMe1MfQMonph0Kai1gFEmEE1q5_eIJKInVdvCRBrbZWX-ZJYk23DHqqOKJHB-3-9A-OVvXX3ePbUZarflKV7IxIS-_BAvv-xqE3hQeViGAwRwxXnJXylB6_t2l64A%26pcsa%3Dfalse HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.img2.ymlp294.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.img2.ymlp294.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /track.php?domain=ymlp294.net&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTg2Ny4yNjUzOjY1MTQ0ZDg1ZTNhODhkNTRhMDZjNTdlMGQ2ZDMxMWM2MTRlNGVmYmE1MGFhODdmYjk2ZDIwZjE3ZjU2OTUyZWM6NjZmOTUzN2I0MGM4Mg%3D%3D HTTP/1.1Host: www.img2.ymlp294.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"device-memory: 8rtt: 200sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36viewport-width: 1280dpr: 1downlink: 1.7ect: 3gsec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Fingerprint+Locations&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpjzMvxrMe1MfQMonph0Kai1gFEmEE1q5_eIJKInVdvCRBrbZWX-ZJYk23DHqqOKJHB-3-9A-OVvXX3ePbUZarflKV7IxIS-_BAvv-xqE3hQeViGAwRwxXnJXylB6_t2l64A&pcsa=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
Source: global traffic	HTTP traffic detected: GET /images/afs/snowman.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.php?domain=ymlp294.net&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTg2Ny4yNjUzOjY1MTQ0ZDg1ZTNhODhkNTRhMDZjNTdlMGQ2ZDMxMWM2MTRlNGVmYmE1MGFhODdmYjk2ZDIwZjE3ZjU2OTUyZWM6NjZmOTUzN2I0MGM4Mg%3D%3D HTTP/1.1Host: www.img2.ymlp294.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=bsnfbs2pc9cm&aqid=fVP5ZobCDJPBiM0PuI7i4AU&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1399&adbw=530&adbah=506%2C439%2C452&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=34%7C0%7C1415%7C12%7C1298&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.img2.ymlp294.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/afs/snowman.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=bqfm95q26fno&aqid=fVP5ZobCDJPBiM0PuI7i4AU&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1399&adbw=530&adbah=506%2C439%2C452&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=34%7C0%7C1415%7C12%7C1298&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.img2.ymlp294.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Electronic+Fingerprints+For+Employment&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpj-Cc0S-fYKtdlAPXzRH6TCYLSLzizC_juBVXQxkI0WCgwbhC_qeRF5PWSO8b88HUrnUPuQ1qym33YKdH2odkkjj0_xXrGGYqyh4hLOm8gLi7kkIExQyZWypGx-K802lAew&pcsa=false HTTP/1.1Host: www.img2.ymlp294.netConnection: keep-alivedevice-memory: 8dpr: 1viewport-width: 1280rtt: 200downlink: 1.55ect: 3gsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
Source: global traffic	HTTP traffic detected: GET /track.php?domain=ymlp294.net&toggle=browserjs&uid=MTcyNzYxNTg3NS4yNjU6NGUxYjkxNWRmYjAwNGI3MmU5YTU4NTU0ODg4ZTc0NDkzMzU0ZWQwZTgzNjMwZTA5Zjc4M2NjMjRhOTAzZThkZDo2NmY5NTM4MzQwYjAw HTTP/1.1Host: www.img2.ymlp294.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"device-memory: 8rtt: 200sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36viewport-width: 1280dpr: 1downlink: 1.6ect: 4gsec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Electronic+Fingerprints+For+Employment&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpj-Cc0S-fYKtdlAPXzRH6TCYLSLzizC_juBVXQxkI0WCgwbhC_qeRF5PWSO8b88HUrnUPuQ1qym33YKdH2odkkjj0_xXrGGYqyh4hLOm8gLi7kkIExQyZWypGx-K802lAew&pcsa=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
Source: global traffic	HTTP traffic detected: GET /ls.php?t=66f95383&token=4f819d0b1c8d2702f8643e095678b9fa9c21146d HTTP/1.1Host: www.img2.ymlp294.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"device-memory: 8rtt: 200sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36viewport-width: 1280dpr: 1downlink: 1.6ect: 4gsec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Electronic+Fingerprints+For+Employment&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpj-Cc0S-fYKtdlAPXzRH6TCYLSLzizC_juBVXQxkI0WCgwbhC_qeRF5PWSO8b88HUrnUPuQ1qym33YKdH2odkkjj0_xXrGGYqyh4hLOm8gLi7kkIExQyZWypGx-K802lAew&pcsa=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
Source: global traffic	HTTP traffic detected: GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=bucket007%2C000003%2C000802%2Cbucket066%2Cbucket077&client=dp-teaminternet12_3ph&r=m&sct=ID%3D4562ec206474b9d1%3AT%3D1727615843%3ART%3D1727615843%3AS%3DALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w&sc_status=6&hl=en&rpbu=https%3A%2F%2Fwww.img2.ymlp294.net%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NzUuMjk0NXw5ZDZkMzNjOWFjODlkYTU4ODJmMjA1MjJlZjc4NzJkYjQ0NmM0YWExfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%253D%253D&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Electronic%20Fingerprints%20For%20Employment&afdt=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpj-Cc0S-fYKtdlAPXzRH6TCYLSLzizC_juBVXQxkI0WCgwbhC_qeRF5PWSO8b88HUrnUPuQ1qym33YKdH2odkkjj0_xXrGGYqyh4hLOm8gLi7kkIExQyZWypGx-K802lAew&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301511%2C17301516%2C17301266%2C72717108&format=n3&ad=n3&nocache=4911727621801914&num=0&output=afd_ads&domain_name=www.img2.ymlp294.net&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727621801918&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=791&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=https%3A%2F%2Fwww.img2.ymlp294.net%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%253D%253D%26query%3DElectronic%2BFingerprints%2BFor%2BEmployment%26afdToken%3DChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpj-Cc0S-fYKtdlAPXzRH6TCYLSLzizC_juBVXQxkI0WCgwbhC_qeRF5PWSO8b88HUrnUPuQ1qym33YKdH2odkkjj0_xXrGGYqyh4hLOm8gLi7kkIExQyZWypGx-K802lAew%26pcsa%3Dfalse HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.img2.ymlp294.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.img2.ymlp294.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /track.php?domain=ymlp294.net&toggle=browserjs&uid=MTcyNzYxNTg3NS4yNjU6NGUxYjkxNWRmYjAwNGI3MmU5YTU4NTU0ODg4ZTc0NDkzMzU0ZWQwZTgzNjMwZTA5Zjc4M2NjMjRhOTAzZThkZDo2NmY5NTM4MzQwYjAw HTTP/1.1Host: www.img2.ymlp294.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.img2.ymlp294.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /track.php?domain=ymlp294.net&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTg3NS4yNjU6NGUxYjkxNWRmYjAwNGI3MmU5YTU4NTU0ODg4ZTc0NDkzMzU0ZWQwZTgzNjMwZTA5Zjc4M2NjMjRhOTAzZThkZDo2NmY5NTM4MzQwYjAw HTTP/1.1Host: www.img2.ymlp294.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"device-memory: 8rtt: 200sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36viewport-width: 1280dpr: 1downlink: 1.6ect: 4gsec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Electronic+Fingerprints+For+Employment&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpj-Cc0S-fYKtdlAPXzRH6TCYLSLzizC_juBVXQxkI0WCgwbhC_qeRF5PWSO8b88HUrnUPuQ1qym33YKdH2odkkjj0_xXrGGYqyh4hLOm8gLi7kkIExQyZWypGx-K802lAew&pcsa=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
Source: global traffic	HTTP traffic detected: GET /track.php?domain=ymlp294.net&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTg3NS4yNjU6NGUxYjkxNWRmYjAwNGI3MmU5YTU4NTU0ODg4ZTc0NDkzMzU0ZWQwZTgzNjMwZTA5Zjc4M2NjMjRhOTAzZThkZDo2NmY5NTM4MzQwYjAw HTTP/1.1Host: www.img2.ymlp294.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=syu0w21o6xw1&aqid=hVP5ZpuFENaJhcIP17bpuAI&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1399&adbw=530&adbah=475%2C470%2C452&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=45%7C0%7C-5924759%7C8%7C5927820&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.img2.ymlp294.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Reset+Password&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmYBlLqpjy4j-ezD1zWrFP6RH-dyPE5lTBqxgA0qK4FhwM0BmGo80V6Za76RLHCNjfMDf_wqrTtxma-QcwyTatvF5ivGxGP_kMNdLRRttz7dQeTQmZFmv5A9tMGaFRpYIY0-p0IkVpc&pcsa=false HTTP/1.1Host: www.img2.ymlp294.netConnection: keep-alivedevice-memory: 8dpr: 1viewport-width: 1280rtt: 200downlink: 1.55ect: 4gsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=tb4qk3210bh9&aqid=hVP5ZpuFENaJhcIP17bpuAI&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1399&adbw=530&adbah=475%2C470%2C452&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=45%7C0%7C-5924759%7C8%7C5927820&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.img2.ymlp294.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.php?domain=ymlp294.net&toggle=browserjs&uid=MTcyNzYxNTg4Mi4wMjA1OmU1ZmU2NWQ5OGZiNjhkZjc3YjkwNGE4YTRjZTBiMjU4MDAxNzdiOTNmMzA2M2M1ZjY3NWM1NDYwZTBmY2Q5ZmI6NjZmOTUzOGEwNTAzNA%3D%3D HTTP/1.1Host: www.img2.ymlp294.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"device-memory: 8rtt: 200sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36viewport-width: 1280dpr: 1downlink: 1.65ect: 3gsec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Reset+Password&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmYBlLqpjy4j-ezD1zWrFP6RH-dyPE5lTBqxgA0qK4FhwM0BmGo80V6Za76RLHCNjfMDf_wqrTtxma-QcwyTatvF5ivGxGP_kMNdLRRttz7dQeTQmZFmv5A9tMGaFRpYIY0-p0IkVpc&pcsa=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
Source: global traffic	HTTP traffic detected: GET /track.php?domain=ymlp294.net&toggle=browserjs&uid=MTcyNzYxNTg4Mi4wMjA1OmU1ZmU2NWQ5OGZiNjhkZjc3YjkwNGE4YTRjZTBiMjU4MDAxNzdiOTNmMzA2M2M1ZjY3NWM1NDYwZTBmY2Q5ZmI6NjZmOTUzOGEwNTAzNA%3D%3D HTTP/1.1Host: www.img2.ymlp294.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
Source: global traffic	HTTP traffic detected: GET /ls.php?t=66f9538a&token=aec1ed8204995796494a9b7188d7c6fd94eefef9 HTTP/1.1Host: www.img2.ymlp294.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"device-memory: 8rtt: 200sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36viewport-width: 1280dpr: 1downlink: 1.65ect: 3gsec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Reset+Password&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmYBlLqpjy4j-ezD1zWrFP6RH-dyPE5lTBqxgA0qK4FhwM0BmGo80V6Za76RLHCNjfMDf_wqrTtxma-QcwyTatvF5ivGxGP_kMNdLRRttz7dQeTQmZFmv5A9tMGaFRpYIY0-p0IkVpc&pcsa=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
Source: global traffic	HTTP traffic detected: GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=bucket007%2C000003%2C000802%2Cbucket066%2Cbucket077&client=dp-teaminternet12_3ph&r=m&sct=ID%3D4562ec206474b9d1%3AT%3D1727615843%3ART%3D1727615843%3AS%3DALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w&sc_status=6&hl=en&rpbu=https%3A%2F%2Fwww.img2.ymlp294.net%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4ODIuMDQ5fDZiYmMzNzc1M2Q5NWVhM2ExOGI2MDhmMmQ3MjNiZjlhYmUyYjcyMWV8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fFpIQXRkR1ZoYldsdWRHVnlibVYwTVRKZk0zQm98YWQ3M2E5NjdiNGEzOThlOGUxN2Y0ODdkODQ0YWE3ZTU5YTMxNDFmZXwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fGJkNmQ2ZGZlZDU1NjIxMjRhNzY1M2FmZDk0ZjE5NTgzNTRjNmM4YjZ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Reset%20Password&afdt=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmYBlLqpjy4j-ezD1zWrFP6RH-dyPE5lTBqxgA0qK4FhwM0BmGo80V6Za76RLHCNjfMDf_wqrTtxma-QcwyTatvF5ivGxGP_kMNdLRRttz7dQeTQmZFmv5A9tMGaFRpYIY0-p0IkVpc&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301511%2C17301516%2C17301266%2C72717107&format=n3&ad=n3&nocache=771727621809364&num=0&output=afd_ads&domain_name=www.img2.ymlp294.net&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727621809365&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=791&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=https%3A%2F%2Fwww.img2.ymlp294.net%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%253D%253D%26query%3DReset%2BPassword%26afdToken%3DChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmYBlLqpjy4j-ezD1zWrFP6RH-dyPE5lTBqxgA0qK4FhwM0BmGo80V6Za76RLHCNjfMDf_wqrTtxma-QcwyTatvF5ivGxGP_kMNdLRRttz7dQeTQmZFmv5A9tMGaFRpYIY0-p0IkVpc%26pcsa%3Dfalse HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.img2.ymlp294.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.img2.ymlp294.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.img2.ymlp294.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /track.php?domain=ymlp294.net&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTg4Mi4wMjA1OmU1ZmU2NWQ5OGZiNjhkZjc3YjkwNGE4YTRjZTBiMjU4MDAxNzdiOTNmMzA2M2M1ZjY3NWM1NDYwZTBmY2Q5ZmI6NjZmOTUzOGEwNTAzNA%3D%3D HTTP/1.1Host: www.img2.ymlp294.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"device-memory: 8rtt: 200sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36viewport-width: 1280dpr: 1downlink: 1.65ect: 3gsec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Reset+Password&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmYBlLqpjy4j-ezD1zWrFP6RH-dyPE5lTBqxgA0qK4FhwM0BmGo80V6Za76RLHCNjfMDf_wqrTtxma-QcwyTatvF5ivGxGP_kMNdLRRttz7dQeTQmZFmv5A9tMGaFRpYIY0-p0IkVpc&pcsa=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
Source: global traffic	HTTP traffic detected: GET /track.php?domain=ymlp294.net&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTg4Mi4wMjA1OmU1ZmU2NWQ5OGZiNjhkZjc3YjkwNGE4YTRjZTBiMjU4MDAxNzdiOTNmMzA2M2M1ZjY3NWM1NDYwZTBmY2Q5ZmI6NjZmOTUzOGEwNTAzNA%3D%3D HTTP/1.1Host: www.img2.ymlp294.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=hkg4uphoyq5s&aqid=jFP5ZrXSHfWhjuwP6ITRgQs&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1337&adbw=530&adbah=475%2C439%2C421&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=30%7C0%7C-5925445%7C3%7C5928413&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.img2.ymlp294.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=sftwhdqlk819&aqid=jFP5ZrXSHfWhjuwP6ITRgQs&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1337&adbw=530&adbah=475%2C439%2C421&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=30%7C0%7C-5925445%7C3%7C5928413&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.img2.ymlp294.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Electronic+Fingerprints+For+Employment&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpj-Cc0S-fYKtdlAPXzRH6TCYLSLzizC_juBVXQxkI0WCgwbhC_qeRF5PWSO8b88HUrnUPuQ1qym33YKdH2odkkjj0_xXrGGYqyh4hLOm8gLi7kkIExQyZWypGx-K802lAew&pcsa=false&nb=0&nm=3 HTTP/1.1Host: www.img2.ymlp294.netConnection: keep-alivedevice-memory: 8dpr: 1viewport-width: 1280rtt: 200downlink: 1.55ect: 3gsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
Source: global traffic	HTTP traffic detected: GET /track.php?domain=ymlp294.net&toggle=browserjs&uid=MTcyNzYxNTg5Ny4yODQ0OjdjZTY4M2Y0YTRlNjk4N2E2Mzg0NzVjYmI3MjdlZTUyMDc3MzkxNDQ1M2I1MzU5MWQ1NTRkZTQ4NDlkY2YwY2Y6NjZmOTUzOTk0NTZlNQ%3D%3D HTTP/1.1Host: www.img2.ymlp294.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"device-memory: 8rtt: 200sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36viewport-width: 1280dpr: 1downlink: 1.5ect: 3gsec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Electronic+Fingerprints+For+Employment&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpj-Cc0S-fYKtdlAPXzRH6TCYLSLzizC_juBVXQxkI0WCgwbhC_qeRF5PWSO8b88HUrnUPuQ1qym33YKdH2odkkjj0_xXrGGYqyh4hLOm8gLi7kkIExQyZWypGx-K802lAew&pcsa=false&nb=0&nm=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
Source: global traffic	HTTP traffic detected: GET /ls.php?t=66f95399&token=75f7e2c880a2e54b3081700c67546bdb0654fb6b HTTP/1.1Host: www.img2.ymlp294.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"device-memory: 8rtt: 200sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36viewport-width: 1280dpr: 1downlink: 1.5ect: 3gsec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Electronic+Fingerprints+For+Employment&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpj-Cc0S-fYKtdlAPXzRH6TCYLSLzizC_juBVXQxkI0WCgwbhC_qeRF5PWSO8b88HUrnUPuQ1qym33YKdH2odkkjj0_xXrGGYqyh4hLOm8gLi7kkIExQyZWypGx-K802lAew&pcsa=false&nb=0&nm=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
Source: global traffic	HTTP traffic detected: GET /track.php?domain=ymlp294.net&toggle=browserjs&uid=MTcyNzYxNTg5Ny4yODQ0OjdjZTY4M2Y0YTRlNjk4N2E2Mzg0NzVjYmI3MjdlZTUyMDc3MzkxNDQ1M2I1MzU5MWQ1NTRkZTQ4NDlkY2YwY2Y6NjZmOTUzOTk0NTZlNQ%3D%3D HTTP/1.1Host: www.img2.ymlp294.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
Source: global traffic	HTTP traffic detected: GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=bucket007%2C000003%2C000802%2Cbucket066%2Cbucket077&client=dp-teaminternet12_3ph&r=m&sct=ID%3D4562ec206474b9d1%3AT%3D1727615843%3ART%3D1727615843%3AS%3DALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w&sc_status=6&hl=en&rpbu=https%3A%2F%2Fwww.img2.ymlp294.net%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4OTcuMzA0N3wwY2Q5YmZlMTQwODhiMTY1OTBlMTQ2ZDU4NDBlMzk0YmJlZjczNTQ4fHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%253D%253D&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Electronic%20Fingerprints%20For%20Employment&afdt=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpj-Cc0S-fYKtdlAPXzRH6TCYLSLzizC_juBVXQxkI0WCgwbhC_qeRF5PWSO8b88HUrnUPuQ1qym33YKdH2odkkjj0_xXrGGYqyh4hLOm8gLi7kkIExQyZWypGx-K802lAew&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301511%2C17301516%2C17301266%2C72717108&format=n3&ad=n3&nocache=1821727621823569&num=0&output=afd_ads&domain_name=www.img2.ymlp294.net&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727621823571&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=791&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=https%3A%2F%2Fwww.img2.ymlp294.net%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%253D%253D%26query%3DElectronic%2BFingerprints%2BFor%2BEmployment%26afdToken%3DChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpj-Cc0S-fYKtdlAPXzRH6TCYLSLzizC_juBVXQxkI0WCgwbhC_qeRF5PWSO8b88HUrnUPuQ1qym33YKdH2odkkjj0_xXrGGYqyh4hLOm8gLi7kkIExQyZWypGx-K802lAew%26pcsa%3Dfalse%26nb%3D0%26nm%3D3 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.img2.ymlp294.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.img2.ymlp294.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.img2.ymlp294.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /track.php?domain=ymlp294.net&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTg5Ny4yODQ0OjdjZTY4M2Y0YTRlNjk4N2E2Mzg0NzVjYmI3MjdlZTUyMDc3MzkxNDQ1M2I1MzU5MWQ1NTRkZTQ4NDlkY2YwY2Y6NjZmOTUzOTk0NTZlNQ%3D%3D HTTP/1.1Host: www.img2.ymlp294.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"device-memory: 8rtt: 200sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36viewport-width: 1280dpr: 1downlink: 1.5ect: 3gsec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Electronic+Fingerprints+For+Employment&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpj-Cc0S-fYKtdlAPXzRH6TCYLSLzizC_juBVXQxkI0WCgwbhC_qeRF5PWSO8b88HUrnUPuQ1qym33YKdH2odkkjj0_xXrGGYqyh4hLOm8gLi7kkIExQyZWypGx-K802lAew&pcsa=false&nb=0&nm=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=n70hm4rxrp4a&aqid=mlP5ZtqHO7aOmLAPw7LuMA&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1399&adbw=530&adbah=506%2C439%2C452&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=13%7C0%7C-5925114%7C6%7C5928063&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.img2.ymlp294.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=got8iyyqmh0d&aqid=mlP5ZtqHO7aOmLAPw7LuMA&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1399&adbw=530&adbah=506%2C439%2C452&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=13%7C0%7C-5925114%7C6%7C5928063&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.img2.ymlp294.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.php?domain=ymlp294.net&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTg5Ny4yODQ0OjdjZTY4M2Y0YTRlNjk4N2E2Mzg0NzVjYmI3MjdlZTUyMDc3MzkxNDQ1M2I1MzU5MWQ1NTRkZTQ4NDlkY2YwY2Y6NjZmOTUzOTk0NTZlNQ%3D%3D HTTP/1.1Host: www.img2.ymlp294.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
Source: global traffic	HTTP traffic detected: GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Reset+Password&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmYBlLqpjy4j-ezD1zWrFP6RH-dyPE5lTBqxgA0qK4FhwM0BmGo80V6Za76RLHCNjfMDf_wqrTtxma-QcwyTatvF5ivGxGP_kMNdLRRttz7dQeTQmZFmv5A9tMGaFRpYIY0-p0IkVpc&pcsa=false&nb=0&nm=2 HTTP/1.1Host: www.img2.ymlp294.netConnection: keep-alivedevice-memory: 8dpr: 1viewport-width: 1280rtt: 200downlink: 1.55ect: 3gsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
Source: global traffic	HTTP traffic detected: GET /track.php?domain=ymlp294.net&toggle=browserjs&uid=MTcyNzYxNTkwNi42NTU2OmU4NmYyOTg4Njk1NjAxOWFkYWJkODE0ZjQzZGZjNGFiMDBjYmQwNGIzNGU0ZDQ5MWY0YTNjYjQxMTJlNjZmZmQ6NjZmOTUzYTJhMDBjNw%3D%3D HTTP/1.1Host: www.img2.ymlp294.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"device-memory: 8rtt: 200sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36viewport-width: 1280dpr: 1downlink: 1.75ect: 3gsec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Reset+Password&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmYBlLqpjy4j-ezD1zWrFP6RH-dyPE5lTBqxgA0qK4FhwM0BmGo80V6Za76RLHCNjfMDf_wqrTtxma-QcwyTatvF5ivGxGP_kMNdLRRttz7dQeTQmZFmv5A9tMGaFRpYIY0-p0IkVpc&pcsa=false&nb=0&nm=2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
Source: global traffic	HTTP traffic detected: GET /track.php?domain=ymlp294.net&toggle=browserjs&uid=MTcyNzYxNTkwNi42NTU2OmU4NmYyOTg4Njk1NjAxOWFkYWJkODE0ZjQzZGZjNGFiMDBjYmQwNGIzNGU0ZDQ5MWY0YTNjYjQxMTJlNjZmZmQ6NjZmOTUzYTJhMDBjNw%3D%3D HTTP/1.1Host: www.img2.ymlp294.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
Source: global traffic	HTTP traffic detected: GET /ls.php?t=66f953a2&token=52ad4a7a34c0593e17d3b0474ac3dddd1154ba71 HTTP/1.1Host: www.img2.ymlp294.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"device-memory: 8rtt: 200sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36viewport-width: 1280dpr: 1downlink: 1.75ect: 3gsec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Reset+Password&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmYBlLqpjy4j-ezD1zWrFP6RH-dyPE5lTBqxgA0qK4FhwM0BmGo80V6Za76RLHCNjfMDf_wqrTtxma-QcwyTatvF5ivGxGP_kMNdLRRttz7dQeTQmZFmv5A9tMGaFRpYIY0-p0IkVpc&pcsa=false&nb=0&nm=2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
Source: global traffic	HTTP traffic detected: GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=bucket007%2C000003%2C000802%2Cbucket066%2Cbucket077&client=dp-teaminternet12_3ph&r=m&sct=ID%3D4562ec206474b9d1%3AT%3D1727615843%3ART%3D1727615843%3AS%3DALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w&sc_status=6&hl=en&rpbu=https%3A%2F%2Fwww.img2.ymlp294.net%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU5MDYuNjgzfGM3NzIxNzBmYzVmYWMzODMwOGY5OTY4ZGRiY2ZlMzAzMjFjNWM3M2R8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fFpIQXRkR1ZoYldsdWRHVnlibVYwTVRKZk0zQm98YWQ3M2E5NjdiNGEzOThlOGUxN2Y0ODdkODQ0YWE3ZTU5YTMxNDFmZXwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fGJkNmQ2ZGZlZDU1NjIxMjRhNzY1M2FmZDk0ZjE5NTgzNTRjNmM4YjZ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Reset%20Password&afdt=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmYBlLqpjy4j-ezD1zWrFP6RH-dyPE5lTBqxgA0qK4FhwM0BmGo80V6Za76RLHCNjfMDf_wqrTtxma-QcwyTatvF5ivGxGP_kMNdLRRttz7dQeTQmZFmv5A9tMGaFRpYIY0-p0IkVpc&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301511%2C17301516%2C17301266%2C72717108&format=n3&ad=n3&nocache=3421727621832972&num=0&output=afd_ads&domain_name=www.img2.ymlp294.net&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727621832973&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=791&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=https%3A%2F%2Fwww.img2.ymlp294.net%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%253D%253D%26query%3DReset%2BPassword%26afdToken%3DChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmYBlLqpjy4j-ezD1zWrFP6RH-dyPE5lTBqxgA0qK4FhwM0BmGo80V6Za76RLHCNjfMDf_wqrTtxma-QcwyTatvF5ivGxGP_kMNdLRRttz7dQeTQmZFmv5A9tMGaFRpYIY0-p0IkVpc%26pcsa%3Dfalse%26nb%3D0%26nm%3D2 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.img2.ymlp294.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.img2.ymlp294.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.img2.ymlp294.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?pac=0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "17209215320339076777"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.php?domain=ymlp294.net&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTkwNi42NTU2OmU4NmYyOTg4Njk1NjAxOWFkYWJkODE0ZjQzZGZjNGFiMDBjYmQwNGIzNGU0ZDQ5MWY0YTNjYjQxMTJlNjZmZmQ6NjZmOTUzYTJhMDBjNw%3D%3D HTTP/1.1Host: www.img2.ymlp294.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"device-memory: 8rtt: 200sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36viewport-width: 1280dpr: 1downlink: 1.75ect: 3gsec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Reset+Password&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmYBlLqpjy4j-ezD1zWrFP6RH-dyPE5lTBqxgA0qK4FhwM0BmGo80V6Za76RLHCNjfMDf_wqrTtxma-QcwyTatvF5ivGxGP_kMNdLRRttz7dQeTQmZFmv5A9tMGaFRpYIY0-p0IkVpc&pcsa=false&nb=0&nm=2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
Source: global traffic	HTTP traffic detected: GET /track.php?domain=ymlp294.net&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTkwNi42NTU2OmU4NmYyOTg4Njk1NjAxOWFkYWJkODE0ZjQzZGZjNGFiMDBjYmQwNGIzNGU0ZDQ5MWY0YTNjYjQxMTJlNjZmZmQ6NjZmOTUzYTJhMDBjNw%3D%3D HTTP/1.1Host: www.img2.ymlp294.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=i8ybilfl95ge&aqid=pFP5ZvPBE52smLAP8MiVmQc&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1283&adbw=530&adbah=421%2C439%2C421&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=19%7C0%7C1911%7C2342%7C1358&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.img2.ymlp294.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=6b36oyq3osjk&aqid=pFP5ZvPBE52smLAP8MiVmQc&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1283&adbw=530&adbah=421%2C439%2C421&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=19%7C0%7C1911%7C2342%7C1358&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.img2.ymlp294.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.img2.ymlp294.net
Source: global traffic	DNS traffic detected: DNS query: d38psrni17bvxu.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: syndicatedsearch.goog
Source: global traffic	DNS traffic detected: DNS query: afs.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: www.mydomaincontact.com

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 29 Sep 2024 13:17:38 GMTContent-Type: text/htmlContent-Length: 548Connection: closeServer: nginx

Source: chromecache_122.1.dr, chromecache_82.1.dr	String found in binary or memory: http://jquery.com/
Source: chromecache_122.1.dr, chromecache_82.1.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_122.1.dr, chromecache_82.1.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_118.1.dr, chromecache_91.1.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_118.1.dr, chromecache_91.1.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl-2.0.html
Source: chromecache_90.1.dr	String found in binary or memory: http://www.quirksmode.org/css/box.html
Source: chromecache_89.1.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqk78ae6L3G1i5T1Z-yGJz7RNqzP5
Source: chromecache_80.1.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqkKTm5hl0Bdd3GeZRwl2zcavlLrk
Source: chromecache_81.1.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqkOwXi1XGDT7qOzD0l3vVrpT_p35
Source: chromecache_110.1.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqks-xoQKj1PVnSm7HLz4WrHBNTTG
Source: chromecache_116.1.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrql2QQ1074oLKAImcie-DptzoQzKL
Source: chromecache_89.1.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrql7u7gTdMbOc7l89ot9K3wQPpnK0
Source: chromecache_81.1.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqlFTAdUqt4JKbv3DCPgAwtBLjfMH
Source: chromecache_81.1.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqlHJs_WQPrFBwP8PlzesjmeY3e8N
Source: chromecache_110.1.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqlaz_ZltwgRbhbdqDo60aEg8teXZ
Source: chromecache_80.1.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqlrfdCicjI2oJw5E96f0da1GsUlD
Source: chromecache_116.1.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqmMVOSwTxivNY2JNiNsNMAUCA7gN
Source: chromecache_89.1.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqmZqXqpzQfXnlAd4l59dyezCnrdB
Source: chromecache_80.1.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqmqLOOxGEB1gXXJi7GieFOd9Q_4H
Source: chromecache_116.1.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqmvwUjw5ZZMYvfGY8P6YFHZNzitC
Source: chromecache_110.1.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqnL_FtexnSfHWxL2W8jnz7umi2w9
Source: chromecache_86.1.dr, chromecache_125.1.dr, chromecache_103.1.dr, chromecache_108.1.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=
Source: chromecache_130.1.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Source
Source: chromecache_115.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/mate/v17/m8JdjftRd7WZ6zS2W7XS.woff2)
Source: chromecache_115.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/mate/v17/m8JdjftRd7WZ6zq2Ww.woff2)
Source: chromecache_115.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/matesc/v22/-nF8OGQ1-uoVr2wK-iLT9g.woff2)
Source: chromecache_115.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/matesc/v22/-nF8OGQ1-uoVr2wK-izT9qOk.woff2)
Source: chromecache_115.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_115.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_115.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_115.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_115.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_115.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_115.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_98.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7jsDJT9g.woff2)
Source: chromecache_98.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7ksDJT9g.woff2)
Source: chromecache_98.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7nsDI.woff2)
Source: chromecache_98.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7osDJT9g.woff2)
Source: chromecache_98.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7psDJT9g.woff2)
Source: chromecache_98.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7qsDJT9g.woff2)
Source: chromecache_98.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7rsDJT9g.woff2)
Source: chromecache_98.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qN67lqDY.woff2)
Source: chromecache_98.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qNK7lqDY.woff2)
Source: chromecache_98.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qNa7lqDY.woff2)
Source: chromecache_98.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qNq7lqDY.woff2)
Source: chromecache_98.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qO67lqDY.woff2)
Source: chromecache_98.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2)
Source: chromecache_98.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2)
Source: chromecache_98.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourceserifpro/v17/neIXzD-0qpwxpaWvjeD0X88SAOeasasatS-qxLUv.woff2)
Source: chromecache_98.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourceserifpro/v17/neIXzD-0qpwxpaWvjeD0X88SAOeasasatSGqxLUv.woff2)
Source: chromecache_98.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourceserifpro/v17/neIXzD-0qpwxpaWvjeD0X88SAOeasasatSKqxLUv.woff2)
Source: chromecache_98.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourceserifpro/v17/neIXzD-0qpwxpaWvjeD0X88SAOeasasatSOqxLUv.woff2)
Source: chromecache_98.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourceserifpro/v17/neIXzD-0qpwxpaWvjeD0X88SAOeasasatSiqxLUv.woff2)
Source: chromecache_98.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourceserifpro/v17/neIXzD-0qpwxpaWvjeD0X88SAOeasasatSyqxA.woff2)
Source: chromecache_116.1.dr	String found in binary or memory: https://help.close.com/
Source: chromecache_86.1.dr, chromecache_125.1.dr, chromecache_103.1.dr, chromecache_108.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_86.1.dr, chromecache_125.1.dr, chromecache_103.1.dr, chromecache_108.1.dr	String found in binary or memory: https://partner.googleadservices.com/gampad/cookie.js
Source: chromecache_89.1.dr	String found in binary or memory: https://support.streamlabswater.com/
Source: chromecache_86.1.dr, chromecache_125.1.dr, chromecache_103.1.dr, chromecache_108.1.dr	String found in binary or memory: https://syndicatedsearch.goog
Source: chromecache_81.1.dr, chromecache_110.1.dr, chromecache_80.1.dr	String found in binary or memory: https://www.acicservices.com/
Source: chromecache_116.1.dr	String found in binary or memory: https://www.asktech.support/
Source: chromecache_89.1.dr	String found in binary or memory: https://www.bestbrowsertools.net/download/free
Source: chromecache_110.1.dr	String found in binary or memory: https://www.clearchecks.com/employees/check
Source: chromecache_80.1.dr	String found in binary or memory: https://www.google.com/images/afs/snowman.png
Source: chromecache_86.1.dr, chromecache_125.1.dr, chromecache_103.1.dr, chromecache_108.1.dr	String found in binary or memory: https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=5
Source: chromecache_116.1.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwi1yOnYnuiIAxX1kIMHHWhCNLAYABAAGgJlZg
Source: chromecache_116.1.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwi1yOnYnuiIAxX1kIMHHWhCNLAYABABGgJlZg
Source: chromecache_116.1.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwi1yOnYnuiIAxX1kIMHHWhCNLAYABACGgJlZg
Source: chromecache_110.1.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwjG9MTRnuiIAxWTIKIDHTiHGFwYABAAGgJsZQ
Source: chromecache_110.1.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwjG9MTRnuiIAxWTIKIDHTiHGFwYABABGgJsZQ
Source: chromecache_110.1.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwjG9MTRnuiIAxWTIKIDHTiHGFwYABACGgJsZQ
Source: chromecache_80.1.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwjavN3fnuiIAxU2BwYAHUOZGwYYABAAGgJ3cw
Source: chromecache_80.1.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwjavN3fnuiIAxU2BwYAHUOZGwYYABABGgJ3cw
Source: chromecache_80.1.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwjavN3fnuiIAxU2BwYAHUOZGwYYABACGgJ3cw
Source: chromecache_81.1.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwjb27DVnuiIAxXWREECHVdbGicYABAAGgJ3cw
Source: chromecache_81.1.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwjb27DVnuiIAxXWREECHVdbGicYABABGgJ3cw
Source: chromecache_81.1.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwjb27DVnuiIAxXWREECHVdbGicYABACGgJ3cw
Source: chromecache_89.1.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwjzo5jknuiIAxUdFgYAHXBkJXMYABAAGgJ3cw
Source: chromecache_89.1.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwjzo5jknuiIAxUdFgYAHXBkJXMYABABGgJ3cw
Source: chromecache_89.1.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwjzo5jknuiIAxUdFgYAHXBkJXMYABACGgJ3cw
Source: chromecache_86.1.dr, chromecache_125.1.dr, chromecache_103.1.dr, chromecache_108.1.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/16521530460/?gad_source=1&adview_type=3
Source: chromecache_135.1.dr, chromecache_101.1.dr, chromecache_85.1.dr, chromecache_128.1.dr, chromecache_129.1.dr, chromecache_132.1.dr	String found in binary or memory: https://www.mydomaincontact.com/index.php?domain_name=ymlp294.net
Source: chromecache_116.1.dr	String found in binary or memory: https://www.national1tracks.com/
Source: chromecache_81.1.dr, chromecache_110.1.dr, chromecache_80.1.dr	String found in binary or memory: https://www.printscan.com/
Source: chromecache_81.1.dr, chromecache_80.1.dr	String found in binary or memory: https://www.revealbackground.com/

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49721 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@23/99@38/17

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2516 --field-trial-handle=2496,i,12955688402611608546,14653998491514946388,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.img2.ymlp294.net/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2516 --field-trial-handle=2496,i,12955688402611608546,14653998491514946388,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
http://jquery.org/license	0%	URL Reputation	safe
http://sizzlejs.com/	0%	URL Reputation	safe
http://jquery.com/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
212218.parkingcrew.net	76.223.26.96	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
syndicatedsearch.goog	142.250.186.142	true	false	unknown
www.google.com	216.58.206.68	true	false	unknown
www.mydomaincontact.com	108.128.52.91	true	false	unknown
googlehosted.l.googleusercontent.com	216.58.206.33	true	false	unknown
d38psrni17bvxu.cloudfront.net	18.66.121.190	true	false	unknown
afs.googleusercontent.com	unknown	unknown	false	unknown
www.img2.ymlp294.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true	false	unknown
https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Reset+Password&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmYBlLqpjy4j-ezD1zWrFP6RH-dyPE5lTBqxgA0qK4FhwM0BmGo80V6Za76RLHCNjfMDf_wqrTtxma-QcwyTatvF5ivGxGP_kMNdLRRttz7dQeTQmZFmv5A9tMGaFRpYIY0-p0IkVpc&pcsa=false&nb=0&nm=2	false	unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=bsnfbs2pc9cm&aqid=fVP5ZobCDJPBiM0PuI7i4AU&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1399&adbw=530&adbah=506%2C439%2C452&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=34%7C0%7C1415%7C12%7C1298&lle=0&ifv=1&hpt=1	false	unknown
https://www.img2.ymlp294.net/ls.php?t=66f95383&token=4f819d0b1c8d2702f8643e095678b9fa9c21146d	false	unknown
https://www.img2.ymlp294.net/track.php?domain=ymlp294.net&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTg5Ny4yODQ0OjdjZTY4M2Y0YTRlNjk4N2E2Mzg0NzVjYmI3MjdlZTUyMDc3MzkxNDQ1M2I1MzU5MWQ1NTRkZTQ4NDlkY2YwY2Y6NjZmOTUzOTk0NTZlNQ%3D%3D	false	unknown
https://www.img2.ymlp294.net/track.php?domain=ymlp294.net&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTg4Mi4wMjA1OmU1ZmU2NWQ5OGZiNjhkZjc3YjkwNGE4YTRjZTBiMjU4MDAxNzdiOTNmMzA2M2M1ZjY3NWM1NDYwZTBmY2Q5ZmI6NjZmOTUzOGEwNTAzNA%3D%3D	false	unknown
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff	false	unknown
https://www.img2.ymlp294.net/track.php?domain=ymlp294.net&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTg2Ny4yNjUzOjY1MTQ0ZDg1ZTNhODhkNTRhMDZjNTdlMGQ2ZDMxMWM2MTRlNGVmYmE1MGFhODdmYjk2ZDIwZjE3ZjU2OTUyZWM6NjZmOTUzN2I0MGM4Mg%3D%3D	false	unknown
https://www.mydomaincontact.com/forms/script.js	false	unknown
https://www.mydomaincontact.com/scripts/jquery.js	false	unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=syu0w21o6xw1&aqid=hVP5ZpuFENaJhcIP17bpuAI&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1399&adbw=530&adbah=475%2C470%2C452&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=45%7C0%7C-5924759%7C8%7C5927820&lle=0&ifv=1&hpt=1	false	unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=i8ybilfl95ge&aqid=pFP5ZvPBE52smLAP8MiVmQc&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1283&adbw=530&adbah=421%2C439%2C421&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=19%7C0%7C1911%7C2342%7C1358&lle=0&ifv=1&hpt=1	false	unknown
https://www.mydomaincontact.com/favicon.ico	false	unknown
https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Electronic+Fingerprints+For+Employment&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpj-Cc0S-fYKtdlAPXzRH6TCYLSLzizC_juBVXQxkI0WCgwbhC_qeRF5PWSO8b88HUrnUPuQ1qym33YKdH2odkkjj0_xXrGGYqyh4hLOm8gLi7kkIExQyZWypGx-K802lAew&pcsa=false	false	unknown
https://www.mydomaincontact.com/forms/script-addon.js	false	unknown
https://www.google.com/images/afs/snowman.png	false	unknown
https://www.mydomaincontact.com/scripts/select2/select2.min.js	false	unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=6b36oyq3osjk&aqid=pFP5ZvPBE52smLAP8MiVmQc&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1283&adbw=530&adbah=421%2C439%2C421&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=19%7C0%7C1911%7C2342%7C1358&lle=0&ifv=1&hpt=1	false	unknown
https://www.mydomaincontact.com/images/trust.svg	false	unknown
https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Electronic+Fingerprints+For+Employment&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpj-Cc0S-fYKtdlAPXzRH6TCYLSLzizC_juBVXQxkI0WCgwbhC_qeRF5PWSO8b88HUrnUPuQ1qym33YKdH2odkkjj0_xXrGGYqyh4hLOm8gLi7kkIExQyZWypGx-K802lAew&pcsa=false&nb=0&nm=3	false	unknown
https://www.img2.ymlp294.net/track.php?domain=ymlp294.net&toggle=browserjs&uid=MTcyNzYxNTg0MC40MTUxOjgzOGE1Y2JhNGQwMmJlYTdmZGM0ODQzZjNkNTRiOWZkZjk2MTcyNWRlNzJlZmVkY2RhM2JiMjdmYmFkYjA0OWE6NjZmOTUzNjA2NTU5MQ%3D%3D	false	unknown
https://www.img2.ymlp294.net/ls.php?t=66f95360&token=bd6d6dfed5562124a7653afd94f1958354c6c8b6	false	unknown
https://syndicatedsearch.goog/afs/ads/i/iframe.html	false	unknown
https://www.mydomaincontact.com/forms/style.css	false	unknown
https://www.img2.ymlp294.net/track.php?domain=ymlp294.net&toggle=browserjs&uid=MTcyNzYxNTkwNi42NTU2OmU4NmYyOTg4Njk1NjAxOWFkYWJkODE0ZjQzZGZjNGFiMDBjYmQwNGIzNGU0ZDQ5MWY0YTNjYjQxMTJlNjZmZmQ6NjZmOTUzYTJhMDBjNw%3D%3D	false	unknown
https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Fingerprint+Locations&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpjzMvxrMe1MfQMonph0Kai1gFEmEE1q5_eIJKInVdvCRBrbZWX-ZJYk23DHqqOKJHB-3-9A-OVvXX3ePbUZarflKV7IxIS-_BAvv-xqE3hQeViGAwRwxXnJXylB6_t2l64A&pcsa=false	false	unknown
https://www.img2.ymlp294.net/track.php?domain=ymlp294.net&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTg3NS4yNjU6NGUxYjkxNWRmYjAwNGI3MmU5YTU4NTU0ODg4ZTc0NDkzMzU0ZWQwZTgzNjMwZTA5Zjc4M2NjMjRhOTAzZThkZDo2NmY5NTM4MzQwYjAw	false	unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=hkg4uphoyq5s&aqid=jFP5ZrXSHfWhjuwP6ITRgQs&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1337&adbw=530&adbah=475%2C439%2C421&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=30%7C0%7C-5925445%7C3%7C5928413&lle=0&ifv=1&hpt=1	false	unknown
https://www.img2.ymlp294.net/favicon.ico	false	unknown
https://www.img2.ymlp294.net/ls.php?t=66f953a2&token=52ad4a7a34c0593e17d3b0474ac3dddd1154ba71	false	unknown
https://www.img2.ymlp294.net/track.php?domain=ymlp294.net&toggle=browserjs&uid=MTcyNzYxNTg5Ny4yODQ0OjdjZTY4M2Y0YTRlNjk4N2E2Mzg0NzVjYmI3MjdlZTUyMDc3MzkxNDQ1M2I1MzU5MWQ1NTRkZTQ4NDlkY2YwY2Y6NjZmOTUzOTk0NTZlNQ%3D%3D	false	unknown
https://www.img2.ymlp294.net/track.php?domain=ymlp294.net&toggle=browserjs&uid=MTcyNzYxNTg4Mi4wMjA1OmU1ZmU2NWQ5OGZiNjhkZjc3YjkwNGE4YTRjZTBiMjU4MDAxNzdiOTNmMzA2M2M1ZjY3NWM1NDYwZTBmY2Q5ZmI6NjZmOTUzOGEwNTAzNA%3D%3D	false	unknown
https://www.img2.ymlp294.net/ls.php?t=66f9537b&token=b5549628c8b4e918624c8865b1d93e21353a6bcd	false	unknown
https://www.img2.ymlp294.net/ls.php?t=66f95399&token=75f7e2c880a2e54b3081700c67546bdb0654fb6b	false	unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=g1363e58m8bp&aqid=Y1P5Zq6eA9SqjuwP5a_K2AQ&psid=7840396037&pbt=bv&adbx=375&adby=130&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=19%7C0%7C1081%7C1666%7C825&lle=0&ifv=1&hpt=1	false	unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=tb4qk3210bh9&aqid=hVP5ZpuFENaJhcIP17bpuAI&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1399&adbw=530&adbah=475%2C470%2C452&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=45%7C0%7C-5924759%7C8%7C5927820&lle=0&ifv=1&hpt=1	false	unknown
https://www.img2.ymlp294.net/	false	unknown
https://d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png	false	unknown
https://www.img2.ymlp294.net/track.php?domain=ymlp294.net&toggle=browserjs&uid=MTcyNzYxNTg2Ny4yNjUzOjY1MTQ0ZDg1ZTNhODhkNTRhMDZjNTdlMGQ2ZDMxMWM2MTRlNGVmYmE1MGFhODdmYjk2ZDIwZjE3ZjU2OTUyZWM6NjZmOTUzN2I0MGM4Mg%3D%3D	false	unknown
https://www.img2.ymlp294.net/ls.php?t=66f9538a&token=aec1ed8204995796494a9b7188d7c6fd94eefef9	false	unknown
https://www.mydomaincontact.com/index.php?domain_name=ymlp294.net	false	unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=n5amcn7arpgx&aqid=Y1P5Zq6eA9SqjuwP5a_K2AQ&psid=7840396037&pbt=bs&adbx=375&adby=130&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=19%7C0%7C1081%7C1666%7C825&lle=0&ifv=1&hpt=1	false	unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=bqfm95q26fno&aqid=fVP5ZobCDJPBiM0PuI7i4AU&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1399&adbw=530&adbah=506%2C439%2C452&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=34%7C0%7C1415%7C12%7C1298&lle=0&ifv=1&hpt=1	false	unknown
https://www.mydomaincontact.com/scripts/select2/select2.css	false	unknown
https://www.img2.ymlp294.net/track.php?domain=ymlp294.net&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTkwNi42NTU2OmU4NmYyOTg4Njk1NjAxOWFkYWJkODE0ZjQzZGZjNGFiMDBjYmQwNGIzNGU0ZDQ5MWY0YTNjYjQxMTJlNjZmZmQ6NjZmOTUzYTJhMDBjNw%3D%3D	false	unknown
https://syndicatedsearch.goog/adsense/domains/caf.js?pac=0	false	unknown
https://www.img2.ymlp294.net/track.php?domain=ymlp294.net&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTg0MC40MTUxOjgzOGE1Y2JhNGQwMmJlYTdmZGM0ODQzZjNkNTRiOWZkZjk2MTcyNWRlNzJlZmVkY2RhM2JiMjdmYmFkYjA0OWE6NjZmOTUzNjA2NTU5MQ%3D%3D	false	unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=got8iyyqmh0d&aqid=mlP5ZtqHO7aOmLAPw7LuMA&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1399&adbw=530&adbah=506%2C439%2C452&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=13%7C0%7C-5925114%7C6%7C5928063&lle=0&ifv=1&hpt=1	false	unknown
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff	false	unknown
https://www.img2.ymlp294.net/track.php?domain=ymlp294.net&toggle=browserjs&uid=MTcyNzYxNTg3NS4yNjU6NGUxYjkxNWRmYjAwNGI3MmU5YTU4NTU0ODg4ZTc0NDkzMzU0ZWQwZTgzNjMwZTA5Zjc4M2NjMjRhOTAzZThkZDo2NmY5NTM4MzQwYjAw	false	unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=n70hm4rxrp4a&aqid=mlP5ZtqHO7aOmLAPw7LuMA&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1399&adbw=530&adbah=506%2C439%2C452&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=13%7C0%7C-5925114%7C6%7C5928063&lle=0&ifv=1&hpt=1	false	unknown
https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Reset+Password&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmYBlLqpjy4j-ezD1zWrFP6RH-dyPE5lTBqxgA0qK4FhwM0BmGo80V6Za76RLHCNjfMDf_wqrTtxma-QcwyTatvF5ivGxGP_kMNdLRRttz7dQeTQmZFmv5A9tMGaFRpYIY0-p0IkVpc&pcsa=false	false	unknown
https://www.mydomaincontact.com/scripts/select2/select2.png	false	unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=sftwhdqlk819&aqid=jFP5ZrXSHfWhjuwP6ITRgQs&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1337&adbw=530&adbah=475%2C439%2C421&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=30%7C0%7C-5925445%7C3%7C5928413&lle=0&ifv=1&hpt=1	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.asktech.support/	chromecache_116.1.dr	false		unknown
http://jquery.org/license	chromecache_122.1.dr, chromecache_82.1.dr	false	URL Reputation: safe	unknown
https://syndicatedsearch.goog	chromecache_86.1.dr, chromecache_125.1.dr, chromecache_103.1.dr, chromecache_108.1.dr	false		unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrql7u7gTdMbOc7l89ot9K3wQPpnK0	chromecache_89.1.dr	false		unknown
https://www.clearchecks.com/employees/check	chromecache_110.1.dr	false		unknown
https://www.bestbrowsertools.net/download/free	chromecache_89.1.dr	false		unknown
http://sizzlejs.com/	chromecache_122.1.dr, chromecache_82.1.dr	false	URL Reputation: safe	unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqlFTAdUqt4JKbv3DCPgAwtBLjfMH	chromecache_81.1.dr	false		unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqmMVOSwTxivNY2JNiNsNMAUCA7gN	chromecache_116.1.dr	false		unknown
https://www.acicservices.com/	chromecache_81.1.dr, chromecache_110.1.dr, chromecache_80.1.dr	false		unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqmqLOOxGEB1gXXJi7GieFOd9Q_4H	chromecache_80.1.dr	false		unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqlHJs_WQPrFBwP8PlzesjmeY3e8N	chromecache_81.1.dr	false		unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqkKTm5hl0Bdd3GeZRwl2zcavlLrk	chromecache_80.1.dr	false		unknown
https://help.close.com/	chromecache_116.1.dr	false		unknown
http://www.gnu.org/licenses/gpl-2.0.html	chromecache_118.1.dr, chromecache_91.1.dr	false		unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqlaz_ZltwgRbhbdqDo60aEg8teXZ	chromecache_110.1.dr	false		unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqks-xoQKj1PVnSm7HLz4WrHBNTTG	chromecache_110.1.dr	false		unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqkOwXi1XGDT7qOzD0l3vVrpT_p35	chromecache_81.1.dr	false		unknown
http://www.quirksmode.org/css/box.html	chromecache_90.1.dr	false		unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqk78ae6L3G1i5T1Z-yGJz7RNqzP5	chromecache_89.1.dr	false		unknown
https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=5	chromecache_86.1.dr, chromecache_125.1.dr, chromecache_103.1.dr, chromecache_108.1.dr	false		unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqnL_FtexnSfHWxL2W8jnz7umi2w9	chromecache_110.1.dr	false		unknown
http://www.apache.org/licenses/LICENSE-2.0	chromecache_118.1.dr, chromecache_91.1.dr	false		unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqmvwUjw5ZZMYvfGY8P6YFHZNzitC	chromecache_116.1.dr	false		unknown
https://www.revealbackground.com/	chromecache_81.1.dr, chromecache_80.1.dr	false		unknown
https://www.printscan.com/	chromecache_81.1.dr, chromecache_110.1.dr, chromecache_80.1.dr	false		unknown
https://www.national1tracks.com/	chromecache_116.1.dr	false		unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqmZqXqpzQfXnlAd4l59dyezCnrdB	chromecache_89.1.dr	false		unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqlrfdCicjI2oJw5E96f0da1GsUlD	chromecache_80.1.dr	false		unknown
https://support.streamlabswater.com/	chromecache_89.1.dr	false		unknown
http://jquery.com/	chromecache_122.1.dr, chromecache_82.1.dr	false	URL Reputation: safe	unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrql2QQ1074oLKAImcie-DptzoQzKL	chromecache_116.1.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
18.66.121.138	unknown	United States	3	MIT-GATEWAYSUS	false
172.217.18.14	unknown	United States	15169	GOOGLEUS	false
216.58.206.33	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
108.128.52.91	www.mydomaincontact.com	United States	16509	AMAZON-02US	false
76.223.26.96	212218.parkingcrew.net	United States	16509	AMAZON-02US	false
18.66.121.190	d38psrni17bvxu.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
54.171.84.62	unknown	United States	16509	AMAZON-02US	false
142.250.184.228	unknown	United States	15169	GOOGLEUS	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false
216.58.206.46	unknown	United States	15169	GOOGLEUS	false
142.250.185.193	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.181.228	unknown	United States	15169	GOOGLEUS	false
142.250.186.142	syndicatedsearch.goog	United States	15169	GOOGLEUS	false
142.250.186.164	unknown	United States	15169	GOOGLEUS	false
142.250.184.238	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.7

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1522246
Start date and time:	2024-09-29 15:16:22 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 47s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.img2.ymlp294.net/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	16
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@23/99@38/17
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.mydomaincontact.com/index.php?domain_name=ymlp294.net Browse: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Fingerprint+Locations&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpjzMvxrMe1MfQMonph0Kai1gFEmEE1q5_eIJKInVdvCRBrbZWX-ZJYk23DHqqOKJHB-3-9A-OVvXX3ePbUZarflKV7IxIS-_BAvv-xqE3hQeViGAwRwxXnJXylB6_t2l64A&pcsa=false Browse: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Electronic+Fingerprints+For+Employment&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpj-Cc0S-fYKtdlAPXzRH6TCYLSLzizC_juBVXQxkI0WCgwbhC_qeRF5PWSO8b88HUrnUPuQ1qym33YKdH2odkkjj0_xXrGGYqyh4hLOm8gLi7kkIExQyZWypGx-K802lAew&pcsa=false Browse: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Reset+Password&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmYBlLqpjy4j-ezD1zWrFP6RH-dyPE5lTBqxgA0qK4FhwM0BmGo80V6Za76RLHCNjfMDf_wqrTtxma-QcwyTatvF5ivGxGP_kMNdLRRttz7dQeTQmZFmv5A9tMGaFRpYIY0-p0IkVpc&pcsa=false Browse: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Electronic+Fingerprints+For+Employment&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpj-Cc0S-fYKtdlAPXzRH6TCYLSLzizC_juBVXQxkI0WCgwbhC_qeRF5PWSO8b88HUrnUPuQ1qym33YKdH2odkkjj0_xXrGGYqyh4hLOm8gLi7kkIExQyZWypGx-K802lAew&pcsa=false&nb=0&nm=3 Browse: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Reset+Password&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmYBlLqpjy4j-ezD1zWrFP6RH-dyPE5lTBqxgA0qK4FhwM0BmGo80V6Za76RLHCNjfMDf_wqrTtxma-QcwyTatvF5ivGxGP_kMNdLRRttz7dQeTQmZFmv5A9tMGaFRpYIY0-p0IkVpc&pcsa=false&nb=0&nm=2

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, sppsvc.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.18.3, 142.250.185.142, 142.250.110.84, 34.104.35.123, 142.250.185.162, 142.250.185.66, 4.245.163.56, 2.16.100.168, 88.221.110.91, 142.250.185.138, 216.58.206.67, 52.165.164.15, 172.217.18.10, 216.58.206.74, 142.250.186.42, 142.250.185.202, 142.250.184.234, 142.250.185.234, 172.217.16.138, 142.250.184.202, 142.250.181.234, 142.250.74.202, 216.58.206.42, 142.250.186.170, 142.250.185.170, 142.250.185.74, 142.250.185.106, 93.184.221.240, 20.3.187.198, 172.217.23.106, 142.250.185.163, 20.114.59.183, 142.250.185.131
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, partner.googleadservices.com, clientservices.googleapis.com, time.windows.com, a767.dspw65.akamai.net, wu.azureedge.net, clients2.google.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, fonts.gstatic.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://www.img2.ymlp294.net/

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://www.img2.ymlp294.net/ Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaG Model: jbxai	{ "brand":["PrintScan"], "contains_trigger_text":true, "trigger_text":"Visit Website", "prominent_button_name":"Visit Website", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaG Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Visit Website", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.mydomaincontact.com/index.php?domain_name=ymlp294.net Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Submit", "text_input_field_labels":[], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.img2.ymlp294.net/ Model: jbxai	{ "brand":["Globi"], "contains_trigger_text":true, "trigger_text":"Sign into X Sign in with Google Sign in with Apple Phone, email, or username Next Forgot password? Dont have an account? Sign up", "prominent_button_name":"Sign in with Google", "text_input_field_labels":["Phone", "email", "username"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":true, "has_visible_qrcode":false}

URL: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaG Model: jbxai	{ "brand":["PrintScan", "ClearChecks"], "contains_trigger_text":true, "trigger_text":"Visit Website", "prominent_button_name":"Visit Website", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.img2.ymlp294.net/ Model: jbxai	{ "phishing_score":8, "brands":"unknown", "legit_domain":"ymlp.com", "classification":"unknown", "reasons":["The URL 'www.img2.ymlp294.net' does not match the legitimate domain 'ymlp.com'.", "The presence of '294' in the domain is suspicious and not typically associated with legitimate domains.", "The subdomain 'img2' is unusual and could be an attempt to mimic a legitimate service.", "The brand is unknown, making it difficult to verify the legitimacy based on brand association alone.", "The use of multiple input fields (Phone, email, username) is common in phishing attempts to gather personal information."], "brand_matches":[], "url_match":false, "brand_input":"unknown", "input_fields":"Phone, email, username"}

URL: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaG Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Visit Website", "text_input_field_labels":[], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaG Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Visit Website", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaG Model: jbxai	{ "brand":["Printscan Fingerprinting"], "contains_trigger_text":true, "trigger_text":"Visit Website", "prominent_button_name":"Visit Website", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	548
Entropy (8bit):	4.688532577858027
Encrypted:	false
SSDEEP:	12:TjeRHVIdtklI5r8INGlTF5TF5TF5TF5TF5TFK:neRH68DTPTPTPTPTPTc
MD5:	370E16C3B7DBA286CFF055F93B9A94D8
SHA1:	65F3537C3C798F7DA146C55AEF536F7B5D0CB943
SHA-256:	D465172175D35D493FB1633E237700022BD849FA123164790B168B8318ACB090
SHA-512:	75CD6A0AC7D6081D35140ABBEA018D1A2608DD936E2E21F61BF69E063F6FA16DD31C62392F5703D7A7C828EE3D4ECC838E73BFF029A98CED8986ACB5C8364966
Malicious:	false
Reputation:	low
URL:	https://www.mydomaincontact.com/favicon.ico
Preview:	<html>..<head><title>404 Not Found</title></head>..<body>..<center><h1>404 Not Found</h1></center>..<hr><center>nginx</center>..</body>..</html>.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->..

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (7971)
Category:	downloaded
Size (bytes):	19529
Entropy (8bit):	5.573188022049409
Encrypted:	false
SSDEEP:	384:TiFexcYoHMfOT7iM3b8zf34EgA26EHeDCtkGarTqWUtymBpimpRu6:TiFexCMfUh4f8uEHSCtkGarT7UQSwmpt
MD5:	39B252D4975B041E9413F662F869EF5E
SHA1:	7405F4B790D52E560C0C41E289AAC8A07A15B727
SHA-256:	D6970AB33D181B6269B16E24F50D5E88D6139221CA642707DE6FCE6D74F9B6FD
SHA-512:	442FB616A0E5FF4B2923695BE1ECD27771812A1B1195296C73A39654BA300B415CD442F2C96ACFF4AD3486F7179C3ED514715C60B2A0B3D61861A438B146E74C
Malicious:	false
Reputation:	low
URL:	https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Electronic+Fingerprints+For+Employment&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpj-Cc0S-fYKtdlAPXzRH6TCYLSLzizC_juBVXQxkI0WCgwbhC_qeRF5PWSO8b88HUrnUPuQ1qym33YKdH2odkkjj0_xXrGGYqyh4hLOm8gLi7kkIExQyZWypGx-K802lAew&pcsa=false&nb=0&nm=3
Preview:	<!DOCTYPE html>.<html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_EJUO9GzRKDwjsg/LEwsSe5duO2BE4p37oq1TMDpmeAlzGXkYNyP/9d8ZvKxL7/+CXurwtYvpCF1a/ohE8qCXcA==" xmlns="http://www.w3.org/1999/xhtml" lang="en">.<head>. <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"/>. <title>ymlp294.net</title>. <style media="screen">.#sale_link,.#sale_link_bold,.#sale_link_below {. color: rgb(0,0,0);. text-align: right;. font: 14px arial, sans-serif;. height: 20px;. padding: 10px 0 5px 0;. width: 900px;. margin: 0 auto;. z-index: 20;.}.#sale_link a,.#sale_link_below a {. text-decoration: underline;. color: rgb(0,0,0);. font-size: 14px;.}.#sale_link_bold a {..font-weight: bold;. text-decoration: underline;. color: rgb(0,0,0);. font-size: 14p

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.202819531114783
Encrypted:	false
SSDEEP:	3:YWQRAW64:YWQmq
MD5:	7363E85FE9EDEE6F053A4B319588C086
SHA1:	A15E2127145548437173FC17F3E980E3F3DEE2D0
SHA-256:	C955E57777EC0D73639DCA6748560D00AA5EB8E12F13EBB2ED9656ADD3908F97
SHA-512:	A2FD24056E3EC2F1628F89EB2F1B36A9FC2437AE58D34190630FE065DF2BBEDAF9BD8AEE5F8949A002070052CA68CC6C0167214DD55DF289783CFF682B808D85
Malicious:	false
Reputation:	low
URL:	https://www.img2.ymlp294.net/ls.php?t=66f9537b&token=b5549628c8b4e918624c8865b1d93e21353a6bcd
Preview:	{"success":true}

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1879)
Category:	dropped
Size (bytes):	153214
Entropy (8bit):	5.5436425399747336
Encrypted:	false
SSDEEP:	1536:5ni6+zNKofjr9PyfpK7fDH+7pSU6GZvu85pistHWvR3+2xwHzgmcfpUWgQABuucP:hqM7vptHWpu22H9dBuDj3dmChm9Abj
MD5:	F5B7C2B515720924FA63037CEF10BA02
SHA1:	205A8C037532CC669803599827543FD131277138
SHA-256:	EFAEADE5A7436B576EDA114ABCB86CED39F97724F8EEBB505E34A950E72D8A89
SHA-512:	8A3B966B1F2A415CA1370A8A04D04AC916D7DCAD425D155DCECBD37775240B754DF8C60A5AFA13CC7E9D59C9DC2A836B744414ED48383B80BB2364B500AFE480
Malicious:	false
Reputation:	low
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17301437,17301439,17301442,17301511,17301515,17301516,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":0,"afs_gpp_api":0}}};var n;function ba(a){var b=0;return functi

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (376), with no line terminators
Category:	downloaded
Size (bytes):	376
Entropy (8bit):	5.443521980295236
Encrypted:	false
SSDEEP:	6:xWzPHdiEQTMDTVBqo+dV204J6PsYF7M+dm5GK3TMDTVUWDbn6W204J6PsYFAen:xWxiEqMvV2dz4W7HzKjMvVUC54W7n
MD5:	3F18C1A437018B8D58B3BE1E5B61034B
SHA1:	DFFB8C9CC5BE646BBD17238355FBFD679721B55E
SHA-256:	69CC844BF5D491B03E18A8AB4EA06AEAD0874D5E96B0AA33DBD38B92DD1FD1F5
SHA-512:	8A99E7084B04DA79158A83531CDF154C3A383B73AECC75CD2AD3680BAF222B12A72A021DF25003BBE088DBBAD1B139AAAB7673068EF46287C7FB5295C422F02D
Malicious:	false
Reputation:	low
URL:	https://partner.googleadservices.com/gampad/cookie.js?domain=www.img2.ymlp294.net&client=dp-teaminternet12_3ph&product=SAS&callback=__sasCookie&cookie_types=v1%2Cv2
Preview:	__sasCookie({"_cookies_":[{"_value_":"ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w","_expires_":1761311843,"_path_":"/","_domain_":"ymlp294.net","_version_":1},{"_value_":"UID=00000efe9cb611e0:T=1727615843:RT=1727615843:S=ALNI_MaibpLkWCHApcy1MmfC9bdlpUvo_g","_expires_":1761311843,"_path_":"/","_domain_":"ymlp294.net","_version_":2}]});

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text
Category:	downloaded
Size (bytes):	3575
Entropy (8bit):	5.203314832627559
Encrypted:	false
SSDEEP:	48:bvDuWsSjVmvr6jOu3I080ZUQzauCqbw76n6ka1AV09s5pIrKa675xN1t81n:LDuhwaz0ZzvJKV1Eyrf69VMn
MD5:	4DE1BD402918C1508D23952003CAF622
SHA1:	3B313A0E761AFD4028CBBC78E0E96AF18F84F615
SHA-256:	D2E64AB640BF751C2AEE576081ABB6CD73F1528B660E5A1A9CDD95BF1EE75E12
SHA-512:	0396EF5EB88AAEEFF285738E9621AC8765716A200E3488BCCD2E6CA539D0E32D349D78F6279EF72BFE2205B94D5ECDE0975EB2CFE8D332C1EF02F1AF860FA1FB
Malicious:	false
Reputation:	low
URL:	https://www.mydomaincontact.com/forms/style.css
Preview:	*{margin:0;padding:0}..body {..background:#eceff1;..color: #263238;..font-family: 'Source Sans Pro', sans-serif;..text-rendering: optimizeLegibility;..font-size:1.2rem;..line-height:1.5rem;.}..h1,h2,h3,h3,h4,h5,h6 {font-family:'Source Serif Pro',serif}...wrapper {..width:95%;..max-width:600px;..margin:2rem auto;..text-align:center;.}...priceHolder {..text-align:left;.}..h1 {..color:#E64A19;..text-transform:uppercase;..font-size:1.2rem;..letter-spacing: 1px;..max-width:100%;..overflow-x:hidden;..word-wrap: break-word;.}..p {..margin:1.5rem auto;.}...error {..border:1px solid #e64a19;..color:#e64a19;..background:#fefefe;..padding:1rem .5rem;.}...correct {..color:#8bc34a;.}..a:link,.a:visited {..color:#455A64;.}..a:hover,.a:active {..color:#8BC34A;.}...formElement {..margin:.5rem 0;.}..label {..font-family:'Source Sans Pro',sans-serif;..display:block;..font-size:1rem;..text-align: left;..height:2rem;..line-height:2rem;..padding-left:1px;.}...inputtext,..inputprice {..font-family: 'Source

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	20199
Entropy (8bit):	3.70382459042729
Encrypted:	false
SSDEEP:	384:jDjzWdNWunWE3JcL3R2G//ttrIHGOesh6UK5gK5KU:jDnu024d
MD5:	A096EECE85B9F9EB151647D759FFBA89
SHA1:	B8349BE8DCCD1BF51ECD157AC9E4FB85EAF72B94
SHA-256:	81FBC2D1C4FD135BD8367182A98AE01F40B7DA6A0279185A177841EB7D8C823F
SHA-512:	5DD48140CD98833F0DD030D827F384D0C5846CBAC6824CD6767E6867A11533CC4549DF57915FDEF8741ABCAF12F258F39F71B20D65AA7F7EA45CE9A7FAED470C
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 288 38"><style type="text/css">...st0{fill:#b0bec5;}.</style><path class="st0" d="M244.7 12.2v2.1c0 0.3-0.1 0.6-0.2 0.8s-0.4 0.3-0.6 0.3c-0.2 0-0.4-0.1-0.6-0.3s-0.2-0.4-0.2-0.8v-2.5c0-0.4 0-0.7 0-0.9s-0.1-0.4-0.2-0.5 -0.3-0.2-0.6-0.2c-0.5 0-0.9 0.2-1 0.5s-0.2 0.9-0.2 1.5v2.2c0 0.3-0.1 0.6-0.2 0.8s-0.3 0.3-0.6 0.3c-0.2 0-0.4-0.1-0.6-0.3s-0.2-0.4-0.2-0.8V9.8c0-0.3 0.1-0.5 0.2-0.7s0.3-0.2 0.5-0.2c0.2 0 0.4 0.1 0.5 0.2s0.2 0.3 0.2 0.6v0.2c0.3-0.3 0.6-0.6 0.9-0.7s0.7-0.2 1.1-0.2c0.4 0 0.7 0.1 1 0.2s0.5 0.4 0.7 0.7c0.3-0.3 0.6-0.6 0.9-0.7s0.7-0.2 1-0.2c0.4 0 0.8 0.1 1.1 0.3s0.6 0.4 0.7 0.7c0.1 0.3 0.2 0.7 0.2 1.4v3.1c0 0.3-0.1 0.6-0.2 0.8s-0.4 0.3-0.6 0.3c-0.2 0-0.4-0.1-0.6-0.3s-0.2-0.4-0.2-0.8v-2.7c0-0.3 0-0.6 0-0.8s-0.1-0.4-0.2-0.5 -0.3-0.2-0.6-0.2c-0.2 0-0.4 0.1-0.6 0.2s-0.3 0.3-0.4 0.5C244.8 11 244.7 11.5 244.7 12.2z"/><path class="st0" d="M254 14.4c-0.4 0.3-0.8 0.5-1.1 0.7s-0.8 0.2-1.2 0.2c-0.4 0-0.8-0.1-1.1-0.2s-0.5-0.4-0.7-0.7 -0.3-

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	396
Entropy (8bit):	4.993257872070729
Encrypted:	false
SSDEEP:	6:jU0LELWVMroRLLJULlpbKSy1wibxjpwVKRbq9Bi/z2tkywW/GBWlK:jkWlRLLsltTibx6UdqGL2AK9lK
MD5:	D19F13ABB39098BE07569E078047DE48
SHA1:	583C6CB1BFF82BA7FD8FE0F12FDF8DC988EFD4B6
SHA-256:	3D0F73C914640E6ACD493F58A3BBE324F76230010C5B594653D6BD08D4BE9424
SHA-512:	0D3F62B83F43140C91B472A0AEA2F814675009BEDDD216B4C836CD80582545ACE0ED42215C2E660CA2151B12E2433199F45744751E61A285221459DE405359FF
Malicious:	false
Reputation:	low
Preview:	// -- additional script for the sale offer version of the form..$(document).ready(function() {. $("#currency").select2({minimumResultsForSearch: -1});.});...function isSalePriceValid() {. $("#priceHolder").removeClass('inputError');. var val = $('#price').val();..var isInt = /^\d+$/.test(val);..if (val && !isInt) {. $("#priceHolder").addClass('inputError');..}..return isInt;.}.

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1879)
Category:	downloaded
Size (bytes):	153223
Entropy (8bit):	5.543759110505886
Encrypted:	false
SSDEEP:	1536:Ini6+zNKofjr9PyfpK7fDH+7pSU6GZvu85pistHWvR3+2xwHzgmcfpUWgQABuucP:cqM7vptHWpu22H9dBuDj3dmChm9Abj
MD5:	398EA7CE50C2EC9C14A132162C8899B3
SHA1:	A01E721FCFAFD4C61F70FDBCA1CCF14739A45E64
SHA-256:	E960FB37D63CC696A05DD764A8C0A4452EA82B60B72F9362B5A0F744A1264C34
SHA-512:	8851BF4A8DBC213B46378D546B68F5B6686A838CEC201E70253D360661804E724AA66C1574396B5A6C24EA21FDE568E6BE2CAE0EC90A40A74F17CC7EED95837C
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/adsense/domains/caf.js?pac=0
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17300003,17301431,17301433,17301436,17301511,17301515,17301516,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":0,"afs_gpp_api":0}}};var n;function ba(a){var b=0;retu

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	391
Entropy (8bit):	4.7474201749507134
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slzTPl2O4UYaeLIT4W+KS4S1UpMTQpi6jUs8sh6B+BSmK0C:t6qFPUPkHSt1UiT6i6jUs8b0I0C
MD5:	8959DDCD9712196961D93F58064ED655
SHA1:	62AB1E38E7E9FBF58A04381B76C2D96A9C829F24
SHA-256:	17C7A89BF169C2EE400E31B042CEA68513F06B9CD7D1E8990DBEC800F0D771C7
SHA-512:	5E9EFFA313C30B351345DB963238B4AFD0728CA302FD79A853C80C89F042266D44CC1D29492520FB0FA80B47135E54E6963DFC21972F6B236B84C1DA2FAD809D
Malicious:	false
Reputation:	low
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L20.49 19l-4.99-5zm-6 0C7.01 14 5 11.99 5 9.5S7.01 5 9.5 5 14 7.01 14 9.5 11.99 14 9.5 14z"/><path d="M0 0h24v24H0z" fill="none"/></svg>.

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (16779)
Category:	downloaded
Size (bytes):	37240
Entropy (8bit):	5.399213521820403
Encrypted:	false
SSDEEP:	384:2ni0XP/zfuiS4u/uHeDC06RXt6RA8F6RyBzvDBzvZIFBzvqeYTMFFGPOQB:2iIP/z9og2ytB8FTB/IF0eYTMFFRQB
MD5:	E2536FDC338184F74E6572205AC71A38
SHA1:	246EA47839834C1FE80462A8BA3EA0B381AC78F5
SHA-256:	05A3858BD3CCD14E04E124B6D8B2A537A475CD09CE7A0C42D37D442EC4D691C1
SHA-512:	98D32ADD2BEF0DDFF7BDBC8034D982E179A02C6FE748FD2FD7C065A48CDCCA791334538C58DF5BB06C1B5FD29B6CC7C56D17FC55E58F8A445A4E530B5EF83DDA
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=bucket007%2C000003%2C000802%2Cbucket066%2Cbucket077&client=dp-teaminternet12_3ph&r=m&sct=ID%3D4562ec206474b9d1%3AT%3D1727615843%3ART%3D1727615843%3AS%3DALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w&sc_status=6&hl=en&rpbu=https%3A%2F%2Fwww.img2.ymlp294.net%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NjcuMjkyNnw4NjcyM2UyMGEwMWJmNjY2OGNjOWJkMWM4YmI0ZDRkMDRmNTYyNmE4fHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%253D%253D&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Fingerprint%20Locations&afdt=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpjzMvxrMe1MfQMonph0Kai1gFEmEE1q5_eIJKInVdvCRBrbZWX-ZJYk23DHqqOKJHB-3-9A-OVvXX3ePbUZarflKV7IxIS-_BAvv-xqE3hQeViGAwRwxXnJXylB6_t2l64A&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301511%2C17301516%2C17301266%2C72717108&format=n3&ad=n3&nocache=2691727615867280&num=0&output=afd_ads&domain_name=www.img2.ymlp294.net&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727615867284&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=791&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=https%3A%2F%2Fwww.img2.ymlp294.net%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%253D%253D%26query%3DFingerprint%2BLocations%26afdToken%3DChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpjzMvxrMe1MfQMonph0Kai1gFEmEE1q5_eIJKInVdvCRBrbZWX-ZJYk23DHqqOKJHB-3-9A-OVvXX3ePbUZarflKV7IxIS-_BAvv-xqE3hQeViGAwRwxXnJXylB6_t2l64A%26pcsa%3Dfalse
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 40, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	613
Entropy (8bit):	7.624191679264559
Encrypted:	false
SSDEEP:	12:6v/7svvOiEe0IOQEjoZzIAOLhymOh+T+qFYKRacX3Y0OJxAG0f7:FvOC0I/EjizPOlZ3HFYMR3T
MD5:	2CA61B76E22053571DD8611E5AAC4900
SHA1:	2D350341A645AD33AB5604ACA16C05F22A83FF51
SHA-256:	D6B5D8D83DBC18FB8D77C8761D331CD9E5123C9684950BAB0406E98A24AC5AE8
SHA-512:	89B2BCBCE382E8B7C4D27BAA07ABED6F1D8D0F5A8F29B62A98F05FB1DE46D5E40F4C8146047614E92EFDCD235B80B842F8B08E9DA36A5FDB376E83F9EE2B09EA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...(............,IDATx....K.a....J....b](...v.d...<....P....!R.q.T..H.#..G..y.R......Ht0L.>....9.,m)..y.u..}.;....)I.J..,...Q(...X....V..&...Oh.F.!.{.n.{....,...%]...Gc..5x.>@.3...&....2.....%..C..,b.E...u.9=T6.7..)...E......".....lo.y[.e..C....&... D....m.#.......Q..j.......v@..Te.M.......;.....G9...b...}.1.....T...: .hC.f <t.;LT..A........N+....^@...no-../..F.e0aG.3X.....1.(....J.B..[..lgp...?..$8.N....Z4....5......d^..e0aw!..2nA.`.r.."...o.F...A...kW .<..`..R..~...~..J<....Sp..)..:tB...}.2E\|.L.........`.W.W.1....{!s....-..s.Z..[....P.o\|.}.q.......IEND.B`.

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	20199
Entropy (8bit):	3.70382459042729
Encrypted:	false
SSDEEP:	384:jDjzWdNWunWE3JcL3R2G//ttrIHGOesh6UK5gK5KU:jDnu024d
MD5:	A096EECE85B9F9EB151647D759FFBA89
SHA1:	B8349BE8DCCD1BF51ECD157AC9E4FB85EAF72B94
SHA-256:	81FBC2D1C4FD135BD8367182A98AE01F40B7DA6A0279185A177841EB7D8C823F
SHA-512:	5DD48140CD98833F0DD030D827F384D0C5846CBAC6824CD6767E6867A11533CC4549DF57915FDEF8741ABCAF12F258F39F71B20D65AA7F7EA45CE9A7FAED470C
Malicious:	false
Reputation:	low
URL:	https://www.mydomaincontact.com/images/trust.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 288 38"><style type="text/css">...st0{fill:#b0bec5;}.</style><path class="st0" d="M244.7 12.2v2.1c0 0.3-0.1 0.6-0.2 0.8s-0.4 0.3-0.6 0.3c-0.2 0-0.4-0.1-0.6-0.3s-0.2-0.4-0.2-0.8v-2.5c0-0.4 0-0.7 0-0.9s-0.1-0.4-0.2-0.5 -0.3-0.2-0.6-0.2c-0.5 0-0.9 0.2-1 0.5s-0.2 0.9-0.2 1.5v2.2c0 0.3-0.1 0.6-0.2 0.8s-0.3 0.3-0.6 0.3c-0.2 0-0.4-0.1-0.6-0.3s-0.2-0.4-0.2-0.8V9.8c0-0.3 0.1-0.5 0.2-0.7s0.3-0.2 0.5-0.2c0.2 0 0.4 0.1 0.5 0.2s0.2 0.3 0.2 0.6v0.2c0.3-0.3 0.6-0.6 0.9-0.7s0.7-0.2 1.1-0.2c0.4 0 0.7 0.1 1 0.2s0.5 0.4 0.7 0.7c0.3-0.3 0.6-0.6 0.9-0.7s0.7-0.2 1-0.2c0.4 0 0.8 0.1 1.1 0.3s0.6 0.4 0.7 0.7c0.1 0.3 0.2 0.7 0.2 1.4v3.1c0 0.3-0.1 0.6-0.2 0.8s-0.4 0.3-0.6 0.3c-0.2 0-0.4-0.1-0.6-0.3s-0.2-0.4-0.2-0.8v-2.7c0-0.3 0-0.6 0-0.8s-0.1-0.4-0.2-0.5 -0.3-0.2-0.6-0.2c-0.2 0-0.4 0.1-0.6 0.2s-0.3 0.3-0.4 0.5C244.8 11 244.7 11.5 244.7 12.2z"/><path class="st0" d="M254 14.4c-0.4 0.3-0.8 0.5-1.1 0.7s-0.8 0.2-1.2 0.2c-0.4 0-0.8-0.1-1.1-0.2s-0.5-0.4-0.7-0.7 -0.3-

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	200
Entropy (8bit):	5.025855206845441
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slhohC/vmI4SmK0xhFELE47zF:t6qnoU/vmRI0xQTF
MD5:	11B3089D616633CA6B73B57AA877EEB4
SHA1:	07632F63E06B30D9B63C97177D3A8122629BDA9B
SHA-256:	809FB4619D2A2F1A85DBDA8CC69A7F1659215212D708A098D62150EEE57070C1
SHA-512:	079B0E35B479DFDBE64A987661000F4A034B10688E26F2A5FE6AAA807E81CCC5593D40609B731AB3340E687D83DD08DE4B8B1E01CDAC9D4523A9F6BB3ACFCBA0
Malicious:	false
Reputation:	low
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.202819531114783
Encrypted:	false
SSDEEP:	3:YWQRAW64:YWQmq
MD5:	7363E85FE9EDEE6F053A4B319588C086
SHA1:	A15E2127145548437173FC17F3E980E3F3DEE2D0
SHA-256:	C955E57777EC0D73639DCA6748560D00AA5EB8E12F13EBB2ED9656ADD3908F97
SHA-512:	A2FD24056E3EC2F1628F89EB2F1B36A9FC2437AE58D34190630FE065DF2BBEDAF9BD8AEE5F8949A002070052CA68CC6C0167214DD55DF289783CFF682B808D85
Malicious:	false
Reputation:	low
URL:	https://www.img2.ymlp294.net/ls.php?t=66f95383&token=4f819d0b1c8d2702f8643e095678b9fa9c21146d
Preview:	{"success":true}

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3856
Entropy (8bit):	5.408297976823041
Encrypted:	false
SSDEEP:	96:6OEaM7Vc+uuOEaMzNKOEaF9Vc+uGOEaiN1OEaNPlOEaNVFZKOEaNHOEaNk3yOEaU:dMDEMn3GXNP6NfNANk3FNNN8YNYn
MD5:	FD90B2E322504D22FF0E849CCC595CCA
SHA1:	DD1F1D5AF0D1E50FC41F1297EFEA6B5CD01124C9
SHA-256:	3CE2554E586B71B83AEFAA869E6675614E2C910B111A5194660230E9C7303A78
SHA-512:	EB03995040AF10B83E28A662F702D2BEFADCE38948FE9460DF1FB06B7F0A2B50BFA9606759BD8B7650D0B385E3653F18DAA3626E0E6EEBB4B71B79AB268A905A
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Mate%20SC%7CMate%7CRoboto%7CRoboto%20Light&display=swap
Preview:	/* latin-ext /.@font-face {. font-family: 'Mate';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/mate/v17/m8JdjftRd7WZ6zS2W7XS.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Mate';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/mate/v17/m8JdjftRd7WZ6zq2Ww.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Mate SC';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/matesc/v22/-nF8OGQ1-uoVr2wK-izT9qOk.woff2) format('woff2');. unicode-range: U+01

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (16425)
Category:	downloaded
Size (bytes):	35077
Entropy (8bit):	5.354928834332004
Encrypted:	false
SSDEEP:	384:2ni0XP/zfuiS4u/uHeDCxWfhhCWGCjHWlFPeFLxpsF/WFdPOA:2iIP/z9ogCWCHC6xI/TA
MD5:	87D8BDAD4D4403B529F4F39E1CD4291A
SHA1:	9D57DB015555150402F83B7EBBEE2BFBD85AF20E
SHA-256:	252772406EB50D7F7FFD85C49FDD60815E21EA9DDCCA614F4530969E1103709C
SHA-512:	24A97BE3D2152F9A71C2771ABDAFA9ED6E90E162E6654226AF6C7862FC40D651B501AE3DF5A278A5E5D23A0856CB1F1A8A36943E77A6E4438F2C9C47037462F5
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=bucket007%2C000003%2C000802%2Cbucket066%2Cbucket077&client=dp-teaminternet12_3ph&r=m&sct=ID%3D4562ec206474b9d1%3AT%3D1727615843%3ART%3D1727615843%3AS%3DALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w&sc_status=6&hl=en&rpbu=https%3A%2F%2Fwww.img2.ymlp294.net%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4ODIuMDQ5fDZiYmMzNzc1M2Q5NWVhM2ExOGI2MDhmMmQ3MjNiZjlhYmUyYjcyMWV8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fFpIQXRkR1ZoYldsdWRHVnlibVYwTVRKZk0zQm98YWQ3M2E5NjdiNGEzOThlOGUxN2Y0ODdkODQ0YWE3ZTU5YTMxNDFmZXwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fGJkNmQ2ZGZlZDU1NjIxMjRhNzY1M2FmZDk0ZjE5NTgzNTRjNmM4YjZ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Reset%20Password&afdt=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmYBlLqpjy4j-ezD1zWrFP6RH-dyPE5lTBqxgA0qK4FhwM0BmGo80V6Za76RLHCNjfMDf_wqrTtxma-QcwyTatvF5ivGxGP_kMNdLRRttz7dQeTQmZFmv5A9tMGaFRpYIY0-p0IkVpc&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301511%2C17301516%2C17301266%2C72717107&format=n3&ad=n3&nocache=771727621809364&num=0&output=afd_ads&domain_name=www.img2.ymlp294.net&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727621809365&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=791&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=https%3A%2F%2Fwww.img2.ymlp294.net%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%253D%253D%26query%3DReset%2BPassword%26afdToken%3DChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmYBlLqpjy4j-ezD1zWrFP6RH-dyPE5lTBqxgA0qK4FhwM0BmGo80V6Za76RLHCNjfMDf_wqrTtxma-QcwyTatvF5ivGxGP_kMNdLRRttz7dQeTQmZFmv5A9tMGaFRpYIY0-p0IkVpc%26pcsa%3Dfalse
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 21528, version 1.0
Category:	downloaded
Size (bytes):	21528
Entropy (8bit):	7.988581564927641
Encrypted:	false
SSDEEP:	384:47KwKbMXQq5EvJxCscVSq5aR3lYjLW9Sh0G64JKxH8emqhgvdnKa/HyrTX:46bMgqGRYscWR3CjLWiBHQ8lcgvdnKaG
MD5:	780E2060AB7A6A4FA797405755B62441
SHA1:	A99F5EA68F7A617ACCE6F3FD49411142E3B54CF7
SHA-256:	CC308BE27791DC58E7CE19F0D245EF66B8EB6975B8C7AE22D97C09927C84DC48
SHA-512:	C6635045E38101A8975C6885882BA5FF7093444F6679480EFF8B8F935CCD124A38204EEC7CB27C4B48B08D7191BCCEB3F6E66AFC1880C27036A7467B06F4F2C3
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/sourceserifpro/v17/neIXzD-0qpwxpaWvjeD0X88SAOeasasatSyqxA.woff2
Preview:	wOF2......T........ ..S...........................4...L..0.`..J.....`..-.....6.$.... .............~.Y=..N....r.@jk...l.......!.....!R..m.;Dl.e....kv.U......;...(.;<G.."F^.MV.0 ....a1e2k2on:.q.x...Me&\|.NlR+.,,2\|..u>.!.P:..z.}F....e.........(.EEA.I.L.GT.-..Bc..N....(Z{...{..BL.I}..D.T...... .......1..U..\|jl..6X.c...,@...<....>+.<.V........x.w.=..{.%H.P3.L7..61....J..k.f...e."...9.v.\|@..._..A.....rO..,.......NB..x..R...........x.A.y.PD.g...-.h7s...1..y2.K.,E..2._.......ip.%...T..E.p...Y.5.u..N....{...I...Q.h..ntWX..(].OM....=.s=.Z._.........%.3_.0.!... ....E....c.!.@..k......=.k.....c.D".H..P.L..\|.._..%,..4.....Pe.x0..Ip...........j.\|....Y.+T#).m@.\..].X.;.e..h..5....U\..T9Q.....E(.(.J.....6Wf.......ep......y.)s..hw.....=...........[.#@.......6.".b.i.I.Co"gRf.".......D...w.........M...R.B~.h.a..4..]}n...QY..#\\.m...2.TY]..P&...,.n..5c.T0Q3..:....Y...v{.X........!...\......K.n...Z......cD......{..t.,.$b.G....l. ..x.q.3..U...",..qR...A.2b .IH4 .'

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32041)
Category:	downloaded
Size (bytes):	41867
Entropy (8bit):	5.139963739750686
Encrypted:	false
SSDEEP:	768:7JgANQPl//TgGMg4/+gqQWXAnpCZEQbE1WRdZfnKMuVevvr:7J01Tg+xhwsZEsE1W3ZfRuVevT
MD5:	F4B4F7EC0C9C4D1401993B2CF8C1DC88
SHA1:	A1B00107E47786E175117AD1654389B48DEC3059
SHA-256:	6B6C6918ABBFF3B44705AB10617401964194CAA770DE984A087FFB85588FE13E
SHA-512:	D93964ED3A6EDB822DF6858470D058BEF7087B3DBBDBCFAA48E8124FD9B69E1FBA9E6C05A05E2B900B706FE284CA2099046B47C5719C60FC659AE808E9224F0A
Malicious:	false
Reputation:	low
URL:	https://www.mydomaincontact.com/scripts/select2/select2.min.js
Preview:	/.Copyright 2012 Igor Vaynberg..Version: 3.3.2 Timestamp: Mon Mar 25 12:14:18 PDT 2013..This software is licensed under the Apache License, Version 2.0 (the "Apache License") or the GNU.General Public License version 2 (the "GPL License"). You may choose either license to govern your.use of this software only upon the condition that you accept all of the terms of either the Apache.License or the GPL License...You may obtain a copy of the Apache License and the GPL License at:..http://www.apache.org/licenses/LICENSE-2.0.http://www.gnu.org/licenses/gpl-2.0.html..Unless required by applicable law or agreed to in writing, software distributed under the Apache License.or the GPL Licesnse is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,.either express or implied. See the Apache License and the GPL License for the specific language governing.permissions and limitations under the Apache License and the GPL License../.(function(a){a.fn.each2===void 0&&a.fn.ext

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (376), with no line terminators
Category:	dropped
Size (bytes):	376
Entropy (8bit):	5.429269564504949
Encrypted:	false
SSDEEP:	6:xWzPzzRs0DTa5TDrbirwUB20+kPsYF7M+dm5cmU3Ta5TDrbbayb20+kPsYFAen:xWHzRs0vSD3ih/p7HtSD37p7n
MD5:	F609434E2577414A3DE6D9013E5C80F2
SHA1:	30ED9AE69990461E45498DDA603536A83DA4DDF5
SHA-256:	1DD323DB1F6D321BAE5A540E5C903BB9C9641FC035C424C790A9EC5890D722FC
SHA-512:	83808C7DC73018C0D94F3E0238FDF1CDCB371F18C6BFFEE8F3582E5310C260ECF8D49569FB90810D94C316C4A43DA35F7DEB7D5B9DB2F7BB0BF884E2A6E6AA0B
Malicious:	false
Reputation:	low
Preview:	__sasCookie({"_cookies_":[{"_value_":"ID=c4bde386a7e54149:T=1727615845:RT=1727615845:S=ALNI_MZdze9WD51nCdMKCpLevt2EqtMcAA","_expires_":1761311845,"_path_":"/","_domain_":"ymlp294.net","_version_":1},{"_value_":"UID=00000efe9ce9c0eb:T=1727615845:RT=1727615845:S=ALNI_MZ9SPeFvx_3MfV_Z_K6zciUNNeXIA","_expires_":1761311845,"_path_":"/","_domain_":"ymlp294.net","_version_":2}]});

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19684, version 1.0
Category:	downloaded
Size (bytes):	19684
Entropy (8bit):	7.988639555000283
Encrypted:	false
SSDEEP:	384:ONwiXfXdhL8GpPfyGjRzz40RK4dqy5n393AFCdIXSXxk+ukfD+EPzDF7z9XkZfYz:+f3AGpPrRzz4h4dqy393AFuXx+EbD1xJ
MD5:	29F5BA8FC1F2AC21FA0ED86EC404BCDE
SHA1:	ADDA13FABCBFE7C004AA99A5642012A927B20F3F
SHA-256:	251342FF1E3A31CD968101F7492ECD6B59E0058190A38B77E15A64928FC44593
SHA-512:	5149122690C7BE981EBA0018B751DD9615EBF24839912BA377ABE252E026AC441F14DC68BCF5A80E3733644107F971F107DAC0E0D322FD8ECA0222E74E9AB34E
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/mate/v17/m8JdjftRd7WZ6zq2Ww.woff2
Preview:	wOF2......L...........L..............................8....`..d.l........X.....l..6.$..T. ..R..w..=....6.'.....[.Q..Y...6.`..S.......X.V.C..Pi.....]..DJ.....\..%N.P..]..S..[^fCh.x..........X,.......rv..ms............cq.h.y.O...J2..IE.[.{...3.m.kr....O{.>t.{O..M.=&.p.P~.?$.W.8.Q.J/.<E..RtD.O..&..=<?......f.1j.m..l#V.......>Q.;..N.>O...<O......kx.g?.}3....P.x.....5...!B(..)......$.H.........J..{...Z-...B.%..........!.......-........;.....f...7..PX...>.tM."k".N.+<._..7..2....#....hW?.......j.....r.B.Y./..2...OD.S.~.@`.no......\.6...l.0...G!.............6@.(.!....=...Z]5.c.i..\|+....t~m.......)...N...l.>t.3y5gV!...T...AR..`<...Q..A.O.$<.>......!f!9`.n....w...n...nSZl7q9._..o".d..dI?u....ZV.$..>Vf...T.!............,0....Q.2._+...C..Z}Y#...c...k...R...c.* ...W..._..... D.\q.u7.r...<...0..A0.M.A@..6-...>..q)SaO.N..-.N*.......c..P..;........U..mM.......d......2.`-..fD5"...D.hD.....i..$.'......b7.9....a .z6.....\..Y[[...!....-..s ...6.>.......-..q

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	166
Entropy (8bit):	5.852184084844084
Encrypted:	false
SSDEEP:	3:yionv//thPlGARtjmA66MF5DpwloyzFZp0xdkgl08mzsPS98WInwgblSHxp2p/Hb:6v/lhPIARoA6b5tQoEZCkglFmRhawgB5
MD5:	D2D649B406D7A325683E2CCBD3297E43
SHA1:	819D6E6BF4CE1219BF83DEB5CB33A04A57E12C07
SHA-256:	E9BDAE625005100947D641A34F00BDD51B435D2C5979DF3F3F32F0D812CB17F7
SHA-512:	19E7F5D74C422DB0DC24B1748C174931CCC59EA0F80EE7F92293C7EF05956D477C8287F21CB10FCFF6867E10AC81C96DC138F9C5FF1F83F3AC4FC66A7F7D1AE0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0......,.....PLTE....................r.....tRNS. ... ..<~...=IDATx.c.~.Q.I......!V....'......X%L.2.....b.U.U.(.&.0.V.a5...-...........IEND.B`.

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65168)
Category:	dropped
Size (bytes):	85260
Entropy (8bit):	5.370957781359195
Encrypted:	false
SSDEEP:	1536:pKgIKzw+DiSMW4QQtIyY/UFHVsBm8r7e7dyIClTwYA17jaO8lfBBcXq+X4mhEEw7:9j3MIoF1kLHfTEI8zvvM
MD5:	B04A3BCCD23DDEB7982143707A63CCF9
SHA1:	4A5DC1389AAD050A44EE5E81408238A317AB3413
SHA-256:	764B9E9F3AD386AAA5CDEAE9368353994DE61C0BEDE087C8F7E3579CB443DE3B
SHA-512:	3F844A06577168DE05B187E727DD07B9A20CF0453CD00E28AEFDEEFCF783DC680EBD941ECD79A53AB26510AF1F855984C2DDC77565EF0DB11D4BA6E46F59D748
Malicious:	false
Reputation:	low
Preview:	/!. jQuery JavaScript Library v1.5.1. * http://jquery.com/. . Copyright 2011, John Resig. * Dual licensed under the MIT or GPL Version 2 licenses.. * http://jquery.org/license. . Includes Sizzle.js. * http://sizzlejs.com/. * Copyright 2011, The Dojo Foundation. * Released under the MIT, BSD, and GPL Licenses.. . Date: Wed Feb 23 13:55:29 2011 -0500. */.(function(a,b){function cg(a){return d.isWindow(a)?a:a.nodeType===9?a.defaultView\|\|a.parentWindow:!1}function cd(a){if(!bZ[a]){var b=d("<"+a+">").appendTo("body"),c=b.css("display");b.remove();if(c==="none"\|\|c==="")c="block";bZ[a]=c}return bZ[a]}function cc(a,b){var c={};d.each(cb.concat.apply([],cb.slice(0,b)),function(){c[this]=a});return c}function bY(){try{return new a.ActiveXObject("Microsoft.XMLHTTP")}catch(b){}}function bX(){try{return new a.XMLHttpRequest}catch(b){}}function bW(){d(a).unload(function(){for(var a in bU)bU[a](0,1)})}function bQ(a,c){a.dataFilter&&(c=a.dataFilter(c,a.dataType));var e=a.dataTypes,f={},g,h

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	200
Entropy (8bit):	5.025855206845441
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slhohC/vmI4SmK0xhFELE47zF:t6qnoU/vmRI0xQTF
MD5:	11B3089D616633CA6B73B57AA877EEB4
SHA1:	07632F63E06B30D9B63C97177D3A8122629BDA9B
SHA-256:	809FB4619D2A2F1A85DBDA8CC69A7F1659215212D708A098D62150EEE57070C1
SHA-512:	079B0E35B479DFDBE64A987661000F4A034B10688E26F2A5FE6AAA807E81CCC5593D40609B731AB3340E687D83DD08DE4B8B1E01CDAC9D4523A9F6BB3ACFCBA0
Malicious:	false
Reputation:	low
URL:	https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19600, version 1.0
Category:	downloaded
Size (bytes):	19600
Entropy (8bit):	7.987896864926305
Encrypted:	false
SSDEEP:	384:DO9QOKK1ov0/vS0RMIy5z+s3O4mszugwVSy8ypC+eFfPYDE:q9QRN0/vTRv1t5s9wMyp2dPYDE
MD5:	A97AF381DD8B174164F0BD1D5BF5B123
SHA1:	C8B72AEE9FC4FA425761C2DA454F95D45B42F506
SHA-256:	4A9FA9C4ECB0EAEC0AF1E4949930232604B331CD076CA7EFBA2A4E2EFDBAA367
SHA-512:	A0833DBE283F89503A173F47C4C0C9F61FBE2553E62FD2151786F63AEADDA7FD1DDAF5BBF5B77B74D269D43B140887CA683F11D0DDAE8DC980416D55F09D8261
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/matesc/v22/-nF8OGQ1-uoVr2wK-iLT9g.woff2
Preview:	wOF2......L...........L,.............................<..,.`..l...........t........6.$..\|. ..f..i..K.w.5l.....8.K..E.q...z$.`..b......%p"C.4....$%.........D.2.N.T..A.R6+.&.w..#..q.l.t....v5+O..d..w9.>.`.P(........ptJP...>W.......'........h...Q....@.ZL.PQ..b...U.p....s}..v..X.....nf..}....'..(4.<O...../0t/......P...v.F...E.+.....X{.=..(.Rl...c. w...o...j!-..t:.dP....W..]_..o.fZ.W.:... g2.2i7..9s~v.w.!.L....MVYEB.Qg..KXI[e...O0....`..$.re.q....<o.-....K....t. 8T.4e.G.....O....t...$-.~Q..2..fm...p.K8..y.<.H.N.../]v.}...L.:E.6.N..\G.{f.&.rR.Wc.... vk/...v...A......$..m'.{...J..m.I..L..'g....oN........(yC\|...P]y.^...g..?..!...".\|...q.h...'..+.M!..@.z%{C.}9....W.).u{.e5..z. L.{..P.>.M...#V...LF..:....$.V)M.g..4.~...... ..t.O..........{.^..@......h.......8...g..d...`...`.%x.O..........r...wwz....06....z..v..L.....4....+....(d...."....d.hA...x..L+Q.8Rb..A8 .F3..1.d...9=..vW....Nv..i..A$.{...,..,.<..4..27..wFF...4}.JQ.%,~.\|@..N ..............{...^..v

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1879)
Category:	dropped
Size (bytes):	153207
Entropy (8bit):	5.543693145362615
Encrypted:	false
SSDEEP:	1536:0ni6+zNKofjr9PyfpK7fDH+7pSU6GZvu85pistHWvR3+2xwHzgmcfpUWgQABuucP:4qM7vptHWpu22H9dBuDj3dmChm9Abj
MD5:	2609A64DE5BF4C9822B604B3B4166059
SHA1:	17A8C4743EB499BC76571945CDAEF29D1A32A7B0
SHA-256:	FC16D108E957833C3DE8065818A6DC11EEFAC53A0D726A8ADF6CE5D13F7738FD
SHA-512:	B28DCBFC41E231FD4E108E853589EA7B0B97241DBE01A9AAF79D97C436F545F1CAFEFDF8192C55E6ECA76D07E19171F232D3556F8AB9F314F0D3008840EB0638
Malicious:	false
Reputation:	low
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17300002,17301437,17301439,17301442,17301511,17301516,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":0,"afs_gpp_api":0}}};var n;function ba(a){var b=0;return function(){re

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	396
Entropy (8bit):	4.993257872070729
Encrypted:	false
SSDEEP:	6:jU0LELWVMroRLLJULlpbKSy1wibxjpwVKRbq9Bi/z2tkywW/GBWlK:jkWlRLLsltTibx6UdqGL2AK9lK
MD5:	D19F13ABB39098BE07569E078047DE48
SHA1:	583C6CB1BFF82BA7FD8FE0F12FDF8DC988EFD4B6
SHA-256:	3D0F73C914640E6ACD493F58A3BBE324F76230010C5B594653D6BD08D4BE9424
SHA-512:	0D3F62B83F43140C91B472A0AEA2F814675009BEDDD216B4C836CD80582545ACE0ED42215C2E660CA2151B12E2433199F45744751E61A285221459DE405359FF
Malicious:	false
Reputation:	low
URL:	https://www.mydomaincontact.com/forms/script-addon.js
Preview:	// -- additional script for the sale offer version of the form..$(document).ready(function() {. $("#currency").select2({minimumResultsForSearch: -1});.});...function isSalePriceValid() {. $("#priceHolder").removeClass('inputError');. var val = $('#price').val();..var isInt = /^\d+$/.test(val);..if (val && !isInt) {. $("#priceHolder").addClass('inputError');..}..return isInt;.}.

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (14344)
Category:	downloaded
Size (bytes):	15260
Entropy (8bit):	5.517510270228108
Encrypted:	false
SSDEEP:	192:2E12iMpgbLLgh3VLWrUMnRcMnTMnPfzGcC47f:2ni0d3htMeMTMPrGcr7f
MD5:	AF17821217C2667B6F9A35EBB18D4129
SHA1:	CBA134831A955EBFCB64EF285F2724BA1419F22B
SHA-256:	6D622D1C1B35039FD8B4045E88375D9C363CE98B3A20FF5B89B1E70900EEFBD4
SHA-512:	3F9A2CDBE8E0B63700925D363F91ABDFCB2B3257C086E8618F33A04093B265ABDE96ABDAC6A737130EFC6029815652BAE17BEAA23FBCC431D7344FD03D76E231
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=bucket007%2C000003%2C000802%2Cbucket066%2Cbucket077&client=dp-teaminternet12_3ph&r=m&hl=en&rpbu=https%3A%2F%2Fwww.img2.ymlp294.net%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%253D%253D&terms=Fingerprint%20Locations%2CElectronic%20Fingerprints%20For%20Employment%2CReset%20Password&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2558334540730768&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301511%2C17301516%2C17301266%2C72717107&format=r3%7Cs&nocache=6051727615841252&num=0&output=afd_ads&domain_name=www.img2.ymlp294.net&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727615841260&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=791&frm=0&uio=--&cont=tc&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=https%3A%2F%2Fwww.img2.ymlp294.net%2F
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (7915)
Category:	downloaded
Size (bytes):	19473
Entropy (8bit):	5.572722936529227
Encrypted:	false
SSDEEP:	384:TiyexcYoHMfOT7iM3b8zfI0EgA26EHeDCtkGarTqWU6nZpimdRu6:TiyexCMfUh4f3uEHSCtkGarT7U6Zwmdt
MD5:	1F03F117841FD9F5A368CC26B33008D9
SHA1:	FD6A4B75115280BEFD1EA109A847DE9EDA462445
SHA-256:	0C500C083974D413F9CE59EB23A54077308DC3E7337312EB5B423426A40F493E
SHA-512:	0DBD95AF722B85A4E5E6B216989B926D66A66D895C00AA37819FB69E3026C9ACFA980C49B74DC4D673FB4777CE293F977537271AF3A0D8CC11CF5B9C5E629031
Malicious:	false
Reputation:	low
URL:	https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Reset+Password&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmYBlLqpjy4j-ezD1zWrFP6RH-dyPE5lTBqxgA0qK4FhwM0BmGo80V6Za76RLHCNjfMDf_wqrTtxma-QcwyTatvF5ivGxGP_kMNdLRRttz7dQeTQmZFmv5A9tMGaFRpYIY0-p0IkVpc&pcsa=false
Preview:	<!DOCTYPE html>.<html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_OFYQBG5ffbSN0NxhrcyZja3cwcUl1/8yYnwmXrEom2X1zLnT5T7USV95Bo4i2D6mFlO0YtHO6sjTG2aqh7yVVw==" xmlns="http://www.w3.org/1999/xhtml" lang="en">.<head>. <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"/>. <title>ymlp294.net</title>. <style media="screen">.#sale_link,.#sale_link_bold,.#sale_link_below {. color: rgb(0,0,0);. text-align: right;. font: 14px arial, sans-serif;. height: 20px;. padding: 10px 0 5px 0;. width: 900px;. margin: 0 auto;. z-index: 20;.}.#sale_link a,.#sale_link_below a {. text-decoration: underline;. color: rgb(0,0,0);. font-size: 14px;.}.#sale_link_bold a {..font-weight: bold;. text-decoration: underline;. color: rgb(0,0,0);. font-size: 14p

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (7915)
Category:	downloaded
Size (bytes):	19473
Entropy (8bit):	5.573484304116136
Encrypted:	false
SSDEEP:	384:TiyexcYoHMfOT7iM3b8zf/AEgA26EHeDCtkGarTqWUKmZpimdRu6:TiyexCMfUh4fMuEHSCtkGarT7UKywmdt
MD5:	4D940041ADD4E5C01D390E80ED167AB8
SHA1:	B56C594F64E828ADCDF843F214FFDB980AE22182
SHA-256:	03A45F135E4C34E66273BAA4E0B508F63FC0BE03434C4B1807BBDE397EB1511B
SHA-512:	F094739E5DF8045E50CE5C34CCC7FE6A5879A020A410D3DDA9964B50D9A0121E7FEE9D842CCBC278A14D546E9A96C2410F3F0555FF2EC2AD0FBC834EC387EA94
Malicious:	false
Reputation:	low
URL:	https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Reset+Password&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmYBlLqpjy4j-ezD1zWrFP6RH-dyPE5lTBqxgA0qK4FhwM0BmGo80V6Za76RLHCNjfMDf_wqrTtxma-QcwyTatvF5ivGxGP_kMNdLRRttz7dQeTQmZFmv5A9tMGaFRpYIY0-p0IkVpc&pcsa=false&nb=0&nm=2
Preview:	<!DOCTYPE html>.<html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_NSExLo2wvMQanmNE0x+omlwjVC/TeRoeQL8HfkPp8zSBGRShkrecOl3YttDHuw/efZSqoB3g3csgX3lJn5AAnA==" xmlns="http://www.w3.org/1999/xhtml" lang="en">.<head>. <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"/>. <title>ymlp294.net</title>. <style media="screen">.#sale_link,.#sale_link_bold,.#sale_link_below {. color: rgb(0,0,0);. text-align: right;. font: 14px arial, sans-serif;. height: 20px;. padding: 10px 0 5px 0;. width: 900px;. margin: 0 auto;. z-index: 20;.}.#sale_link a,.#sale_link_below a {. text-decoration: underline;. color: rgb(0,0,0);. font-size: 14px;.}.#sale_link_bold a {..font-weight: bold;. text-decoration: underline;. color: rgb(0,0,0);. font-size: 14p

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	5277
Entropy (8bit):	4.569889717024253
Encrypted:	false
SSDEEP:	96:sV5XTZR5pfyZbdmO9Z+B4eBlsrZXeUN1yHS6B+dSSD:A5XTZRbqHd9DSSD
MD5:	991DF6B7E461EAFA8C583C71A69EE08E
SHA1:	F60AE3E65ECD305A1C021280943791A17BBCA72E
SHA-256:	F43FDED8050B9DB56BD03BF913F7F24210F235EBB7238421340902D24DED40DD
SHA-512:	5C50FA399E54DC867DF4FE1180469B22FBC875C0FE8AEBCE7F2F933B4CEB15B5F4842A96F42D64523D3E8983B8474528A923FBC346CACA28D77594EEE8AE2CF3
Malicious:	false
Reputation:	low
URL:	https://www.mydomaincontact.com/index.php?domain_name=ymlp294.net
Preview:	<!DOCTYPE html>.<html>.<head>. <meta charset="UTF-8">. <title>Sale offer for: ymlp294.net</title>. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">. <link href="https://fonts.googleapis.com/css?family=Source+Sans+Pro:400,400i\|Source+Serif+Pro:600&subset=latin-ext" rel="stylesheet" />. <link rel="stylesheet" href="/scripts/select2/select2.css" />..<script type="text/javascript" src="/scripts/jquery.js"></script>..<script type="text/javascript" src="/scripts/select2/select2.min.js"></script>. <link rel="stylesheet" href="/forms/style.css" />.</head>.<body>.<div class="wrapper">..<h1>ymlp294.net</h1>.. <p>If you want to buy this domain, please fill out this form.</p>.. <form method="post" id="contactform" name="contactform">. <input type="hidden" name="domain" value="ymlp294.net" />...<div class="formElements">.. ..<div class="formElement">. ...<label for="name">Name</label>. ...<input name="name" class="inputte

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	166
Entropy (8bit):	5.852184084844084
Encrypted:	false
SSDEEP:	3:yionv//thPlGARtjmA66MF5DpwloyzFZp0xdkgl08mzsPS98WInwgblSHxp2p/Hb:6v/lhPIARoA6b5tQoEZCkglFmRhawgB5
MD5:	D2D649B406D7A325683E2CCBD3297E43
SHA1:	819D6E6BF4CE1219BF83DEB5CB33A04A57E12C07
SHA-256:	E9BDAE625005100947D641A34F00BDD51B435D2C5979DF3F3F32F0D812CB17F7
SHA-512:	19E7F5D74C422DB0DC24B1748C174931CCC59EA0F80EE7F92293C7EF05956D477C8287F21CB10FCFF6867E10AC81C96DC138F9C5FF1F83F3AC4FC66A7F7D1AE0
Malicious:	false
Reputation:	low
URL:	https://www.google.com/images/afs/snowman.png
Preview:	.PNG........IHDR...0...0......,.....PLTE....................r.....tRNS. ... ..<~...=IDATx.c.~.Q.I......!V....'......X%L.2.....b.U.U.(.&.0.V.a5...-...........IEND.B`.

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (7937)
Category:	downloaded
Size (bytes):	19495
Entropy (8bit):	5.571804103081793
Encrypted:	false
SSDEEP:	384:Ti6excYoHMfOT7iM3b8zfVS6EgA26EHeDCtkGarTqWULvymtpimORu6:Ti6exCMfUh4foCuEHSCtkGarT7ULa0wt
MD5:	8AD046C0B914FE385F567630FBF9127A
SHA1:	60DB6CE9C76C71ED4607B9378D41BFDB0BDDA931
SHA-256:	5E61151B5EBFE881A579716A3E15B77B7A4CCAB57DE4648A6E383601834AAE21
SHA-512:	DF85B1E1A2B348F8358F5D89290B323A989D32840DD33091C502320F015FCEEBC9D7D60653FD58F1EE5AE77422293078E7607358A54F5BC22C6C3D3FFAD59420
Malicious:	false
Reputation:	low
URL:	https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Fingerprint+Locations&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpjzMvxrMe1MfQMonph0Kai1gFEmEE1q5_eIJKInVdvCRBrbZWX-ZJYk23DHqqOKJHB-3-9A-OVvXX3ePbUZarflKV7IxIS-_BAvv-xqE3hQeViGAwRwxXnJXylB6_t2l64A&pcsa=false
Preview:	<!DOCTYPE html>.<html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_DoECcl9LgnGEtwUlPngEDz+IFZLnGWTBP8a+5/4T+m0GXm+t7Nj+T/sTI5MlYiojybXt6DXyvpCSZ3xyMR0eQA==" xmlns="http://www.w3.org/1999/xhtml" lang="en">.<head>. <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"/>. <title>ymlp294.net</title>. <style media="screen">.#sale_link,.#sale_link_bold,.#sale_link_below {. color: rgb(0,0,0);. text-align: right;. font: 14px arial, sans-serif;. height: 20px;. padding: 10px 0 5px 0;. width: 900px;. margin: 0 auto;. z-index: 20;.}.#sale_link a,.#sale_link_below a {. text-decoration: underline;. color: rgb(0,0,0);. font-size: 14px;.}.#sale_link_bold a {..font-weight: bold;. text-decoration: underline;. color: rgb(0,0,0);. font-size: 14p

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.202819531114783
Encrypted:	false
SSDEEP:	3:YWQRAW64:YWQmq
MD5:	7363E85FE9EDEE6F053A4B319588C086
SHA1:	A15E2127145548437173FC17F3E980E3F3DEE2D0
SHA-256:	C955E57777EC0D73639DCA6748560D00AA5EB8E12F13EBB2ED9656ADD3908F97
SHA-512:	A2FD24056E3EC2F1628F89EB2F1B36A9FC2437AE58D34190630FE065DF2BBEDAF9BD8AEE5F8949A002070052CA68CC6C0167214DD55DF289783CFF682B808D85
Malicious:	false
Reputation:	low
URL:	https://www.img2.ymlp294.net/ls.php?t=66f95399&token=75f7e2c880a2e54b3081700c67546bdb0654fb6b
Preview:	{"success":true}

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	172
Entropy (8bit):	5.212204664713075
Encrypted:	false
SSDEEP:	3:lwZ4cndk1szKYo0B47GAOxvi3xaIYQ1pxoLJm/tgaGa1r/MDo/:ItYsmfa1viha/SpxoLJIzdQDy
MD5:	32081FF2D7AF11D9922150075AD68B96
SHA1:	C799211B03A271EAB532AFC4FE8D4C34A37DF1E4
SHA-256:	51FA91230C27FCB21E78E4A301736E7CE2F5568D50B495519AC234F4F459A8DC
SHA-512:	9E306DB2F439CA25475EB82449960FEC32FA5E83BCBBBB4A4CCB508819BC0713F7119B75649A1F7180E4B45FD6DC258350BD362C305E8B69371A951304B5147B
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSVgn41mTv-y3JjxIFDZRU-s8SBQ14bxIZEgUNrgUHKxIFDVPydWESBQ2SBVTOEgUNd7DIgxIFDTVnGxESBQ3eP5O-EgUNkWGVThIFDa5eyPYSBQ0xPZQw?alt=proto
Preview:	Cn8KCw2UVPrPGgQIBxgBCgsNeG8SGRoECAkYAQoLDa4FBysaBAgJGAEKCw1T8nVhGgQIDRgBCgsNkgVUzhoECDwYAQoLDXewyIMaBAgfGAEKBw01ZxsRGgAKCw3eP5O+GgQIIhgBCgcNkWGVThoACgcNrl7I9hoACgcNMT2UMBoA

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (7976)
Category:	downloaded
Size (bytes):	16384
Entropy (8bit):	5.616886107763983
Encrypted:	false
SSDEEP:	384:TiJ/YoHMfOTqNM3d8Wp0EgA26EHeDCtkGarTqWUCMRdpimzRu6:TifMfPyfwuEHSCtkGarT7UVdwmzc6
MD5:	3350F71C226F32FBC53BF75A54A086C6
SHA1:	06A2B4525D2BE04F5A52697A4831F2851B806FDA
SHA-256:	9A8216F9A2FB1FABACA4AEF65AD05220B9564D2A4AC471B88855B375805F515F
SHA-512:	32939830E673F1992F1B5BCAD5C553C8FB2B98B8D1328C7A3004C4ECCE56E21C4759D2BAC1DC58D9F846977CC6BAA45F19801ED886F248D1BB5206D09FE6F245
Malicious:	false
Reputation:	low
URL:	https://www.img2.ymlp294.net/
Preview:	<!DOCTYPE html>.<html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_CuC42C1KVbuBIp1e1BiU77m8NWwUIIw17frLzNomxRRgNL+9THehVAGGnhdBZV8NSSOh3fUYB9O8g9iro7vsHw==" xmlns="http://www.w3.org/1999/xhtml" lang="en">.<head>. <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"/>. <title>ymlp294.net</title>. <style media="screen">..asset_star0 {..background: url('//d38psrni17bvxu.cloudfront.net/themes/assets/star0.gif') no-repeat center;..width: 13px;..height: 12px;..display: inline-block;.}...asset_star1 {..background: url('//d38psrni17bvxu.cloudfront.net/themes/assets/star1.gif') no-repeat center;..width: 13px;..height: 12px;..display: inline-block;.}...asset_starH {..background: url('//d38psrni17bvxu.cloudfront.net/themes/assets/starH.gif') no-repeat center;..width: 13px;..height: 12

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (16243)
Category:	downloaded
Size (bytes):	36560
Entropy (8bit):	5.380592087612083
Encrypted:	false
SSDEEP:	384:2ni0XP/zfuiS4u/uHeDCDTBRCRAvL/R1nSPOC:2iIP/z9og9TBvLbnVC
MD5:	F61A27A96A6C97EA700B4B61E760E8BC
SHA1:	2A6E0764C1779D8C6FEA65D8CEE57BC37007D0E2
SHA-256:	132A8B7ED23CB1F0A1065F7FC870FA1FDB01F3B80FFD9A3D6DDDED524E009613
SHA-512:	C9EF425B44C94F0BE130F632DD7C24145A8D29175E871E5430598D22272E8101C0296D59FC76996D05B09E4C19C86BF099E20060286117EB535AB51D33DE99B8
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=bucket007%2C000003%2C000802%2Cbucket066%2Cbucket077&client=dp-teaminternet12_3ph&r=m&sct=ID%3D4562ec206474b9d1%3AT%3D1727615843%3ART%3D1727615843%3AS%3DALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w&sc_status=6&hl=en&rpbu=https%3A%2F%2Fwww.img2.ymlp294.net%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4OTcuMzA0N3wwY2Q5YmZlMTQwODhiMTY1OTBlMTQ2ZDU4NDBlMzk0YmJlZjczNTQ4fHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%253D%253D&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Electronic%20Fingerprints%20For%20Employment&afdt=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpj-Cc0S-fYKtdlAPXzRH6TCYLSLzizC_juBVXQxkI0WCgwbhC_qeRF5PWSO8b88HUrnUPuQ1qym33YKdH2odkkjj0_xXrGGYqyh4hLOm8gLi7kkIExQyZWypGx-K802lAew&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301511%2C17301516%2C17301266%2C72717108&format=n3&ad=n3&nocache=1821727621823569&num=0&output=afd_ads&domain_name=www.img2.ymlp294.net&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727621823571&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=791&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=https%3A%2F%2Fwww.img2.ymlp294.net%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%253D%253D%26query%3DElectronic%2BFingerprints%2BFor%2BEmployment%26afdToken%3DChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpj-Cc0S-fYKtdlAPXzRH6TCYLSLzizC_juBVXQxkI0WCgwbhC_qeRF5PWSO8b88HUrnUPuQ1qym33YKdH2odkkjj0_xXrGGYqyh4hLOm8gLi7kkIExQyZWypGx-K802lAew%26pcsa%3Dfalse%26nb%3D0%26nm%3D3
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (16191)
Category:	downloaded
Size (bytes):	36501
Entropy (8bit):	5.384087528016173
Encrypted:	false
SSDEEP:	384:2ni0XP/zfuiS4u/uHeDCmYNdiR+RARTRtTUjiHOa:2iIP/z9ogTv6RvTUjVa
MD5:	1AB0A45D9EE82669022A692D06986AE4
SHA1:	DA564A0C384421426AE625906665528B7CF5633C
SHA-256:	1BDFAE708F6A2D020C5779D85BC19425D8917CBCC28C012048D5AF1E6C25A094
SHA-512:	F511E8C322B99A3A929E8A756EC6664FA705FE9ECF27AE09E5A2A37242046E3EF35E2665CA514F89B8A9FDBFEB4BB3BC2E458B2CCF113FD6CD09513923606D24
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=bucket007%2C000003%2C000802%2Cbucket066%2Cbucket077&client=dp-teaminternet12_3ph&r=m&sct=ID%3D4562ec206474b9d1%3AT%3D1727615843%3ART%3D1727615843%3AS%3DALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w&sc_status=6&hl=en&rpbu=https%3A%2F%2Fwww.img2.ymlp294.net%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NzUuMjk0NXw5ZDZkMzNjOWFjODlkYTU4ODJmMjA1MjJlZjc4NzJkYjQ0NmM0YWExfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%253D%253D&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Electronic%20Fingerprints%20For%20Employment&afdt=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpj-Cc0S-fYKtdlAPXzRH6TCYLSLzizC_juBVXQxkI0WCgwbhC_qeRF5PWSO8b88HUrnUPuQ1qym33YKdH2odkkjj0_xXrGGYqyh4hLOm8gLi7kkIExQyZWypGx-K802lAew&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301511%2C17301516%2C17301266%2C72717108&format=n3&ad=n3&nocache=4911727621801914&num=0&output=afd_ads&domain_name=www.img2.ymlp294.net&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727621801918&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=791&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=https%3A%2F%2Fwww.img2.ymlp294.net%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%253D%253D%26query%3DElectronic%2BFingerprints%2BFor%2BEmployment%26afdToken%3DChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpj-Cc0S-fYKtdlAPXzRH6TCYLSLzizC_juBVXQxkI0WCgwbhC_qeRF5PWSO8b88HUrnUPuQ1qym33YKdH2odkkjj0_xXrGGYqyh4hLOm8gLi7kkIExQyZWypGx-K802lAew%26pcsa%3Dfalse
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65168)
Category:	downloaded
Size (bytes):	85260
Entropy (8bit):	5.370957781359195
Encrypted:	false
SSDEEP:	1536:pKgIKzw+DiSMW4QQtIyY/UFHVsBm8r7e7dyIClTwYA17jaO8lfBBcXq+X4mhEEw7:9j3MIoF1kLHfTEI8zvvM
MD5:	B04A3BCCD23DDEB7982143707A63CCF9
SHA1:	4A5DC1389AAD050A44EE5E81408238A317AB3413
SHA-256:	764B9E9F3AD386AAA5CDEAE9368353994DE61C0BEDE087C8F7E3579CB443DE3B
SHA-512:	3F844A06577168DE05B187E727DD07B9A20CF0453CD00E28AEFDEEFCF783DC680EBD941ECD79A53AB26510AF1F855984C2DDC77565EF0DB11D4BA6E46F59D748
Malicious:	false
Reputation:	low
URL:	https://www.mydomaincontact.com/scripts/jquery.js
Preview:	/!. jQuery JavaScript Library v1.5.1. * http://jquery.com/. . Copyright 2011, John Resig. * Dual licensed under the MIT or GPL Version 2 licenses.. * http://jquery.org/license. . Includes Sizzle.js. * http://sizzlejs.com/. * Copyright 2011, The Dojo Foundation. * Released under the MIT, BSD, and GPL Licenses.. . Date: Wed Feb 23 13:55:29 2011 -0500. */.(function(a,b){function cg(a){return d.isWindow(a)?a:a.nodeType===9?a.defaultView\|\|a.parentWindow:!1}function cd(a){if(!bZ[a]){var b=d("<"+a+">").appendTo("body"),c=b.css("display");b.remove();if(c==="none"\|\|c==="")c="block";bZ[a]=c}return bZ[a]}function cc(a,b){var c={};d.each(cb.concat.apply([],cb.slice(0,b)),function(){c[this]=a});return c}function bY(){try{return new a.ActiveXObject("Microsoft.XMLHTTP")}catch(b){}}function bX(){try{return new a.XMLHttpRequest}catch(b){}}function bW(){d(a).unload(function(){for(var a in bU)bU[a](0,1)})}function bQ(a,c){a.dataFilter&&(c=a.dataFilter(c,a.dataType));var e=a.dataTypes,f={},g,h

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 40, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	613
Entropy (8bit):	7.624191679264559
Encrypted:	false
SSDEEP:	12:6v/7svvOiEe0IOQEjoZzIAOLhymOh+T+qFYKRacX3Y0OJxAG0f7:FvOC0I/EjizPOlZ3HFYMR3T
MD5:	2CA61B76E22053571DD8611E5AAC4900
SHA1:	2D350341A645AD33AB5604ACA16C05F22A83FF51
SHA-256:	D6B5D8D83DBC18FB8D77C8761D331CD9E5123C9684950BAB0406E98A24AC5AE8
SHA-512:	89B2BCBCE382E8B7C4D27BAA07ABED6F1D8D0F5A8F29B62A98F05FB1DE46D5E40F4C8146047614E92EFDCD235B80B842F8B08E9DA36A5FDB376E83F9EE2B09EA
Malicious:	false
Reputation:	low
URL:	https://www.mydomaincontact.com/scripts/select2/select2.png
Preview:	.PNG........IHDR...<...(............,IDATx....K.a....J....b](...v.d...<....P....!R.q.T..H.#..G..y.R......Ht0L.>....9.,m)..y.u..}.;....)I.J..,...Q(...X....V..&...Oh.F.!.{.n.{....,...%]...Gc..5x.>@.3...&....2.....%..C..,b.E...u.9=T6.7..)...E......".....lo.y[.e..C....&... D....m.#.......Q..j.......v@..Te.M.......;.....G9...b...}.1.....T...: .hC.f <t.;LT..A........N+....^@...no-../..F.e0aG.3X.....1.(....J.B..[..lgp...?..$8.N....Z4....5......d^..e0aw!..2nA.`.r.."...o.F...A...kW .<..`..R..~...~..J<....Sp..)..:tB...}.2E\|.L.........`.W.W.1....{!s....-..s.Z..[....P.o\|.}.q.......IEND.B`.

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.202819531114783
Encrypted:	false
SSDEEP:	3:YWQRAW64:YWQmq
MD5:	7363E85FE9EDEE6F053A4B319588C086
SHA1:	A15E2127145548437173FC17F3E980E3F3DEE2D0
SHA-256:	C955E57777EC0D73639DCA6748560D00AA5EB8E12F13EBB2ED9656ADD3908F97
SHA-512:	A2FD24056E3EC2F1628F89EB2F1B36A9FC2437AE58D34190630FE065DF2BBEDAF9BD8AEE5F8949A002070052CA68CC6C0167214DD55DF289783CFF682B808D85
Malicious:	false
Reputation:	low
URL:	https://www.img2.ymlp294.net/ls.php?t=66f95360&token=bd6d6dfed5562124a7653afd94f1958354c6c8b6
Preview:	{"success":true}

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (7959)
Category:	downloaded
Size (bytes):	19517
Entropy (8bit):	5.57136077382104
Encrypted:	false
SSDEEP:	384:TiJexcYoHMfOT7iM3b8zfdJHLEgA26EHeDCtkGarTqWUHyUJBpimnRu6:TiJexCMfUh4fHuEHSCtkGarT7USMwmnt
MD5:	BB5A2EEDC87604553CF8F7F4BBF997B0
SHA1:	9C4996442AF8CA672A51DE1A8CC295B007A00B78
SHA-256:	9944152B6B58939875F47A639FE5E2ED9AAE3F6D54D44EDDB6294F6B4369B116
SHA-512:	0875B3E99F13216E8ED1812A76B311D24834914542E6B6A9B6F1A2968724985150E3F11D65DAE8573EED95F22DF2A571D887B5EE6CF4BA984F78DFD69E9F0EDF
Malicious:	false
Reputation:	low
URL:	https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Electronic+Fingerprints+For+Employment&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpj-Cc0S-fYKtdlAPXzRH6TCYLSLzizC_juBVXQxkI0WCgwbhC_qeRF5PWSO8b88HUrnUPuQ1qym33YKdH2odkkjj0_xXrGGYqyh4hLOm8gLi7kkIExQyZWypGx-K802lAew&pcsa=false
Preview:	<!DOCTYPE html>.<html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_XLxZrfq1JhapJYC0a4Hvng/9yo0/WD4uIF7cqbYzjY4BHNKmdoEhh9BndqXmtWZiem1dOr/n+HZcCZCmLPc8Mw==" xmlns="http://www.w3.org/1999/xhtml" lang="en">.<head>. <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"/>. <title>ymlp294.net</title>. <style media="screen">.#sale_link,.#sale_link_bold,.#sale_link_below {. color: rgb(0,0,0);. text-align: right;. font: 14px arial, sans-serif;. height: 20px;. padding: 10px 0 5px 0;. width: 900px;. margin: 0 auto;. z-index: 20;.}.#sale_link a,.#sale_link_below a {. text-decoration: underline;. color: rgb(0,0,0);. font-size: 14px;.}.#sale_link_bold a {..font-weight: bold;. text-decoration: underline;. color: rgb(0,0,0);. font-size: 14p

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1879)
Category:	downloaded
Size (bytes):	153207
Entropy (8bit):	5.543688579486448
Encrypted:	false
SSDEEP:	1536:ani6+zNKofjr9PyfpK7fDH+7pSU6GZvu85pistHWvR3+2xwHzgmcfpUWgQABuucP:2qM7vptHWpu22H9dBuDj3dmChm9Abj
MD5:	A6F24455552F8F72D89D98B70004F440
SHA1:	8CBF4AF6EC520201E69FBF8A9C8C23CFA5C19F10
SHA-256:	028447D5DC9E1069FF975629C73D65757DF46A4CF6B640AF842E12543288870D
SHA-512:	9B72F154BC27AB6AE3ADDEF2F0F052F0A76D77202E4137C84933887D038066ECFE75670906E0E97DD3B1E759585567D040C7F31866BD84D65A5F7DB0FF4D593B
Malicious:	false
Reputation:	low
URL:	https://www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17300003,17301431,17301433,17301436,17301511,17301516,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":0,"afs_gpp_api":0}}};var n;function ba(a){var b=0;return function(){re

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1500 x 600, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	11375
Entropy (8bit):	7.645494653990172
Encrypted:	false
SSDEEP:	192:Wg3JLNIdFb540f7mqTiLHrBjcCTN1MbaJD/RBse6ogkORdLv2Ha/:vD4N54IsHVjdN1tD7lODL/
MD5:	0CB2E5165DC9324EB462199F04E1FFA9
SHA1:	9E0F89847EC8A98D98A6020BC5C4ED32B7A48BF8
SHA-256:	67DFF0AAD873050F12609885F2264417CCDD0D438311000A704C89F0865F7865
SHA-512:	7A285C4A87B9F9093B7BA720D8FE08E0AD7E2EBDE9EF8C8D11B70AFA08245AF8F8A7281C7B3FBE8BAD21C3AFDE4F32634D3BD416822892AA47BA82C12F4B8191
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......X.....Om......tEXtSoftware.Adobe ImageReadyq.e<....PLTE......cdtIK^IK]IK\03IHK_acsceubdtcet..0=@SHK]IL]HK\MPbNQbORc.....0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes..-..0. 5.!6."7.#8."6.$9 %:!&;"'<"';$)>#(<%?$)=&+@%>',A&+?(-B).C(-A).B/C+0D,1E05I15G<@R=ASIM_HL]KO`HL\MQbaeu.....-../.....0../.....0../..1..1..2..3..4. 5.!6.#8.$9.%: &;"':$)<&+>',?(-@).A/B+0C,1D/A-2E.3F/4G05H16I/4F05G38K6;N49K;@S;@R<ASGL^bfuaetbft.....0.!5."6.#7.$8.%9 &:!';"(<!':#)=#)<$=&,@&,?+1E)/B06IGL]GL\HM]bfs..-.....0..1. 4.!5."6.#7.$8 '< ';*0B.4F06H06G..-..0.!5 (< (;...................................................................................................................................................................................................................................................t....tRNS..............................................................................................................................................

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.202819531114783
Encrypted:	false
SSDEEP:	3:YWQRAW64:YWQmq
MD5:	7363E85FE9EDEE6F053A4B319588C086
SHA1:	A15E2127145548437173FC17F3E980E3F3DEE2D0
SHA-256:	C955E57777EC0D73639DCA6748560D00AA5EB8E12F13EBB2ED9656ADD3908F97
SHA-512:	A2FD24056E3EC2F1628F89EB2F1B36A9FC2437AE58D34190630FE065DF2BBEDAF9BD8AEE5F8949A002070052CA68CC6C0167214DD55DF289783CFF682B808D85
Malicious:	false
Reputation:	low
URL:	https://www.img2.ymlp294.net/ls.php?t=66f9538a&token=aec1ed8204995796494a9b7188d7c6fd94eefef9
Preview:	{"success":true}

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (34085)
Category:	downloaded
Size (bytes):	34754
Entropy (8bit):	5.323864567958465
Encrypted:	false
SSDEEP:	384:2ni0XP/zfuiS4u/uHeDCC9JSSZQxmvJdvLxIq1JqT1PnMxqpbO4:2iIP/z9ogw9JSfxmvJdDxIMJo1PnMxp4
MD5:	11AD1DD6D22A529979CDB5B593CF0B2B
SHA1:	253CA1D42D450769205B09526FD50A4892EA1D2F
SHA-256:	E8DF04D4B4A94E70BD7D3268CA41E1CE68963DA67E2AEB7780C1F4F68DBBB8CF
SHA-512:	C6EE8B9B3FC02A6C08A7B2A851935E7D7382C8080FB311075D4E5EB7806B0E78D0CB982615E01842B6E5A28561C8AAF0DF5C09023B211388C33842DDED22867A
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=bucket007%2C000003%2C000802%2Cbucket066%2Cbucket077&client=dp-teaminternet12_3ph&r=m&sct=ID%3D4562ec206474b9d1%3AT%3D1727615843%3ART%3D1727615843%3AS%3DALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w&sc_status=6&hl=en&rpbu=https%3A%2F%2Fwww.img2.ymlp294.net%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU5MDYuNjgzfGM3NzIxNzBmYzVmYWMzODMwOGY5OTY4ZGRiY2ZlMzAzMjFjNWM3M2R8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fFpIQXRkR1ZoYldsdWRHVnlibVYwTVRKZk0zQm98YWQ3M2E5NjdiNGEzOThlOGUxN2Y0ODdkODQ0YWE3ZTU5YTMxNDFmZXwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fGJkNmQ2ZGZlZDU1NjIxMjRhNzY1M2FmZDk0ZjE5NTgzNTRjNmM4YjZ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Reset%20Password&afdt=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmYBlLqpjy4j-ezD1zWrFP6RH-dyPE5lTBqxgA0qK4FhwM0BmGo80V6Za76RLHCNjfMDf_wqrTtxma-QcwyTatvF5ivGxGP_kMNdLRRttz7dQeTQmZFmv5A9tMGaFRpYIY0-p0IkVpc&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301511%2C17301516%2C17301266%2C72717108&format=n3&ad=n3&nocache=3421727621832972&num=0&output=afd_ads&domain_name=www.img2.ymlp294.net&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727621832973&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=791&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=https%3A%2F%2Fwww.img2.ymlp294.net%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%253D%253D%26query%3DReset%2BPassword%26afdToken%3DChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmYBlLqpjy4j-ezD1zWrFP6RH-dyPE5lTBqxgA0qK4FhwM0BmGo80V6Za76RLHCNjfMDf_wqrTtxma-QcwyTatvF5ivGxGP_kMNdLRRttz7dQeTQmZFmv5A9tMGaFRpYIY0-p0IkVpc%26pcsa%3Dfalse%26nb%3D0%26nm%3D2
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	19226
Entropy (8bit):	4.874083143056483
Encrypted:	false
SSDEEP:	192:Gui2TWIjfVST5V889hD+qS76Pq/oio1+44e8ePYFCcWlbTh+DQ7Fpr:tplC5Vh93S7NQwFCwQ7b
MD5:	2F85AD713B0814F8FB08A8ED985341F6
SHA1:	4107AD786D6453B57F4E8EBFE5FBB1CAE4E4E883
SHA-256:	C3AAA5487A549B0A206ABADE1658C0C39C17E32E637930FE49F9E1D04104C306
SHA-512:	9517BFC0C1AB5EF5C3C3A339C352758047661FB4AC9CB121B4298B3FB4EB87731ECE953B6134FF0286C12DCEBE3D6E230E1A8C40C50781DAED4DFCC9BCB16BEA
Malicious:	false
Reputation:	low
URL:	https://www.mydomaincontact.com/scripts/select2/select2.css
Preview:	/.Version: 3.3.2 Timestamp: Mon Mar 25 12:14:18 PDT 2013./..select2-container {. position: relative;. display: inline-block;. /* inline-block for ie7 /. zoom: 1;. display: inline;. vertical-align: middle;.}...select2-container,..select2-drop,..select2-search,..select2-search input{. /. Force border-box so that % widths fit the parent. container without overlap because of margin/padding... More Info : http://www.quirksmode.org/css/box.html. /. -webkit-box-sizing: border-box; /* webkit /. -khtml-box-sizing: border-box; / konqueror /. -moz-box-sizing: border-box; / firefox /. -ms-box-sizing: border-box; / ie /. box-sizing: border-box; / css3 */.}...select2-container .select2-choice {. display: block;. height: 26px;. padding: 0 0 0 8px;. overflow: hidden;. position: relative;.. border: 1px solid #aaa;. white-space: nowrap;. line-height: 26px;. color: #444;. text-decoration: none;.. -webkit-bord

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32041)
Category:	dropped
Size (bytes):	41867
Entropy (8bit):	5.139963739750686
Encrypted:	false
SSDEEP:	768:7JgANQPl//TgGMg4/+gqQWXAnpCZEQbE1WRdZfnKMuVevvr:7J01Tg+xhwsZEsE1W3ZfRuVevT
MD5:	F4B4F7EC0C9C4D1401993B2CF8C1DC88
SHA1:	A1B00107E47786E175117AD1654389B48DEC3059
SHA-256:	6B6C6918ABBFF3B44705AB10617401964194CAA770DE984A087FFB85588FE13E
SHA-512:	D93964ED3A6EDB822DF6858470D058BEF7087B3DBBDBCFAA48E8124FD9B69E1FBA9E6C05A05E2B900B706FE284CA2099046B47C5719C60FC659AE808E9224F0A
Malicious:	false
Reputation:	low
Preview:	/.Copyright 2012 Igor Vaynberg..Version: 3.3.2 Timestamp: Mon Mar 25 12:14:18 PDT 2013..This software is licensed under the Apache License, Version 2.0 (the "Apache License") or the GNU.General Public License version 2 (the "GPL License"). You may choose either license to govern your.use of this software only upon the condition that you accept all of the terms of either the Apache.License or the GPL License...You may obtain a copy of the Apache License and the GPL License at:..http://www.apache.org/licenses/LICENSE-2.0.http://www.gnu.org/licenses/gpl-2.0.html..Unless required by applicable law or agreed to in writing, software distributed under the Apache License.or the GPL Licesnse is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,.either express or implied. See the Apache License and the GPL License for the specific language governing.permissions and limitations under the Apache License and the GPL License../.(function(a){a.fn.each2===void 0&&a.fn.ext

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	2421
Entropy (8bit):	4.370448549978702
Encrypted:	false
SSDEEP:	48:NTKG+zF59LHXeccv25U4g5dtFfMqvypShod4bVwPJ/B:UGQF5xXeO5Ng5b9MqvypShowOB/B
MD5:	A0FE7E3DDFD6C99FAA882D3E34249AFC
SHA1:	F075F7DFD190D85C6B90170F55A790700E0D958D
SHA-256:	33C4474DD73BF42D1BEA3A5B81EB2F784A251FF43031FE89FF729E98EBC1867C
SHA-512:	E3BFB96B37F4E9D54E38F7D81A7A1136A835069A0C5EF237BEA9EA373257EA7AA0190C32F37601764FF6DF6B37D201AD53FE74034CE89712EF0116699884DE2C
Malicious:	false
Reputation:	low
Preview:	$(document).ready(function() {. $('input.inputtext:first').focus();....// -- initiate sale or send offer..$("input.submit").click(function(e) {...e.preventDefault();...$(this).addClass("spinner");...$(".inputError").removeClass("inputError");.. // -- check required fields. $("input.required, textarea.required").each(function() {. if (!$(this).val()) {. errorOnField($(this));. } else if ($(this).hasClass("textarea") && $(this).val().length < 10) {. errorOnField($(this));. } else if ($(this).is(':checkbox') && !$(this).is(':checked')) {. errorOnField($(this));. }. });.. // -- check recaptcha. if ($("div.g-recaptcha").length == 1 && !grecaptcha.getResponse()) {. errorOnField($("div.captcha"));. }.. if ($(".inputError").length > 0) {. $(this).removeClass("spinner");. } else {. var domain = $("input[name='domain'

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2421
Entropy (8bit):	4.370448549978702
Encrypted:	false
SSDEEP:	48:NTKG+zF59LHXeccv25U4g5dtFfMqvypShod4bVwPJ/B:UGQF5xXeO5Ng5b9MqvypShowOB/B
MD5:	A0FE7E3DDFD6C99FAA882D3E34249AFC
SHA1:	F075F7DFD190D85C6B90170F55A790700E0D958D
SHA-256:	33C4474DD73BF42D1BEA3A5B81EB2F784A251FF43031FE89FF729E98EBC1867C
SHA-512:	E3BFB96B37F4E9D54E38F7D81A7A1136A835069A0C5EF237BEA9EA373257EA7AA0190C32F37601764FF6DF6B37D201AD53FE74034CE89712EF0116699884DE2C
Malicious:	false
Reputation:	low
URL:	https://www.mydomaincontact.com/forms/script.js
Preview:	$(document).ready(function() {. $('input.inputtext:first').focus();....// -- initiate sale or send offer..$("input.submit").click(function(e) {...e.preventDefault();...$(this).addClass("spinner");...$(".inputError").removeClass("inputError");.. // -- check required fields. $("input.required, textarea.required").each(function() {. if (!$(this).val()) {. errorOnField($(this));. } else if ($(this).hasClass("textarea") && $(this).val().length < 10) {. errorOnField($(this));. } else if ($(this).is(':checkbox') && !$(this).is(':checked')) {. errorOnField($(this));. }. });.. // -- check recaptcha. if ($("div.g-recaptcha").length == 1 && !grecaptcha.getResponse()) {. errorOnField($("div.captcha"));. }.. if ($(".inputError").length > 0) {. $(this).removeClass("spinner");. } else {. var domain = $("input[name='domain'

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1559)
Category:	downloaded
Size (bytes):	1560
Entropy (8bit):	5.363714183604841
Encrypted:	false
SSDEEP:	48:0JhSmOnK8lwSb6YS4tyPWp2PXihm0wQR2FgbnYfblV:8SDbL1tzAXr+0P
MD5:	037862475DABD47EC199D21BE49F2E05
SHA1:	11F849C1A6B56AA07D4CC3C0B5D65D9BA1480223
SHA-256:	E6615F890BC9D7EC003577082AF1A9385AB77E391986A8013204990862A590EC
SHA-512:	EF6931FAE0A3843D4FE8D7C1C28FEA63D174D21F0A845D3C2E9B463EBB33EA0ACADF3D2F86BA29BC0F3C72C9CF092200F6E2281D6EC8E4312B85BC6A010045A3
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads/i/iframe.html
Preview:	<!doctype html><html><head><meta name="ROBOTS" content="NOINDEX, NOFOLLOW"><meta name="format-detection" content="telephone=no"><meta content="origin" name="referrer"></head><body><div id="adBlock"></div><script nonce="EECWLKqQZ-MZ4SM_Lf2Uuw">if (window.name.match(/^{"name":"master-\d+"/)) {var script = document.createElement('script');script.src = "/adsense/search/ads.js";var href = window.location.href;if (!!href && (href.indexOf('?pac=') > 0 \|\| href.indexOf('&pac=') > 0)) {if (href.indexOf('?pac=1') > 0 \|\| href.indexOf('&pac=1') > 0) {script.src += '?pac=1';} else if (href.indexOf('?pac=2') > 0 \|\| href.indexOf('&pac=2') > 0) {script.src += '?pac=2';} else {script.src += '?pac=0';}}document.head.appendChild(script);window.IS_GOOGLE_AFS_IFRAME_ = true;}function populate(el) {var adBlock = document.getElementById('adBlock');adBlock.innerHTML += el;}function getMaster() {var m = null;var pIndex = window.name.indexOf('\|');if (pIndex > -1 && window.name.charAt(0) != '{') {try {m = window.

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14892, version 1.0
Category:	downloaded
Size (bytes):	14892
Entropy (8bit):	7.98489201092774
Encrypted:	false
SSDEEP:	384:LKrbeS3uuEGg7o6yDdWa/TQcNc+rAsmnsTJ39cUZi:LKneSe4/6yDFU6rAGJZE
MD5:	9EC6DEAF6BADA919E20B98F9F7B718B1
SHA1:	501D36403AD8205E4644532600019ECB10F5CB0A
SHA-256:	7B348B30EA1FE43857E68FC462C29E5C6E63C97666AF75135C4396A272E54762
SHA-512:	03849431CEF204A1584FFE6F23DBE86730AFD076146AB3D1855B9C3402168A97FAA8A529E69FAE45EA24CFF7110C2930CB4744162BA0ED95D95600F6E777B322
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
Preview:	wOF2......:,.......\|..9..........................n..B....`..b...L.4..d..6.$..D. ..f..4..v%..........D..dd.do......:d..M....E.&..J..G....3.Mxp....i....V..u$.[O.;MU.:j.?..{+/<....s....^[..d.d.....t A....`..z....IN^.......2......mY.kF...\...UYU..........$.O=5..2q..L.2.1.c.....`x~n=.'Ur.66V.f]./..L1..P..<.0.<.8.....Z/.+.H....y..F....h5....V.j.....l..O#.:-Q....9g....:..?..8v];u,O..'....c.\r......].&w.....%@..Z.^....$.,dJ....W.{.....h8}4..S/.sZ...f."$..`a.$Mb.....;.W.."..y.H.<.g.......oNS..MO....X.%.8..y.\...ly..w..?-.~.o.ZZ~G.....B.....@...._....g.fF_...d-...aA_..#k.I.....x...P.}z..JQ&E........).P\|."g.#.)Q.T...}.PD.T+<}c+.\|\|0...2.F..hD.X.J.O.eJ:.%ZW.m.K.Jd..c.7.....T.cr.2....DD.........2..y..?/g...... ={..c /.....X.0.F.F.PX.P..!..K..K.....i.%....B.."...A....F.........4..........S........z$`.T..h...E..........._%=..).)......x)...A.J..K...?.V.......w.Y}..N.....}..>.......%.f.O..o.{..=wz.e_&.O\..*..Q..c.'...X&.1wS.R..AY...G.....Q.f...z..E..u8&V

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.202819531114783
Encrypted:	false
SSDEEP:	3:YWQRAW64:YWQmq
MD5:	7363E85FE9EDEE6F053A4B319588C086
SHA1:	A15E2127145548437173FC17F3E980E3F3DEE2D0
SHA-256:	C955E57777EC0D73639DCA6748560D00AA5EB8E12F13EBB2ED9656ADD3908F97
SHA-512:	A2FD24056E3EC2F1628F89EB2F1B36A9FC2437AE58D34190630FE065DF2BBEDAF9BD8AEE5F8949A002070052CA68CC6C0167214DD55DF289783CFF682B808D85
Malicious:	false
Reputation:	low
URL:	https://www.img2.ymlp294.net/ls.php?t=66f953a2&token=52ad4a7a34c0593e17d3b0474ac3dddd1154ba71
Preview:	{"success":true}

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1500 x 600, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	11375
Entropy (8bit):	7.645494653990172
Encrypted:	false
SSDEEP:	192:Wg3JLNIdFb540f7mqTiLHrBjcCTN1MbaJD/RBse6ogkORdLv2Ha/:vD4N54IsHVjdN1tD7lODL/
MD5:	0CB2E5165DC9324EB462199F04E1FFA9
SHA1:	9E0F89847EC8A98D98A6020BC5C4ED32B7A48BF8
SHA-256:	67DFF0AAD873050F12609885F2264417CCDD0D438311000A704C89F0865F7865
SHA-512:	7A285C4A87B9F9093B7BA720D8FE08E0AD7E2EBDE9EF8C8D11B70AFA08245AF8F8A7281C7B3FBE8BAD21C3AFDE4F32634D3BD416822892AA47BA82C12F4B8191
Malicious:	false
Reputation:	low
URL:	https://d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
Preview:	.PNG........IHDR.......X.....Om......tEXtSoftware.Adobe ImageReadyq.e<....PLTE......cdtIK^IK]IK\03IHK_acsceubdtcet..0=@SHK]IL]HK\MPbNQbORc.....0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes..-..0. 5.!6."7.#8."6.$9 %:!&;"'<"';$)>#(<%?$)=&+@%>',A&+?(-B).C(-A).B/C+0D,1E05I15G<@R=ASIM_HL]KO`HL\MQbaeu.....-../.....0../.....0../..1..1..2..3..4. 5.!6.#8.$9.%: &;"':$)<&+>',?(-@).A/B+0C,1D/A-2E.3F/4G05H16I/4F05G38K6;N49K;@S;@R<ASGL^bfuaetbft.....0.!5."6.#7.$8.%9 &:!';"(<!':#)=#)<$=&,@&,?+1E)/B06IGL]GL\HM]bfs..-.....0..1. 4.!5."6.#7.$8 '< ';*0B.4F06H06G..-..0.!5 (< (;...................................................................................................................................................................................................................................................t....tRNS..............................................................................................................................................

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6884
Entropy (8bit):	5.51529394758214
Encrypted:	false
SSDEEP:	192:mkv2kHkOki3tkyk2YkbS0lQB3JGSCNWAP333RaOZ:mk2YlJtz8fzha1
MD5:	6CFE913CB732DFF779F3B703AE6B0C55
SHA1:	B43734FB769B83074AF46E4DCA2177832E09AB36
SHA-256:	B8E3079C72BE18C5A86E197CB4E5E39EA40770EA43A47EBB2B31A60F54FFAFB5
SHA-512:	AB4290A4C932D57042AFC7AE9A41F46FEA3B48E5D5658492639E3F8777EBD241475B0886742C0B61154F930929F48930573DF99D88179B104BEE6998A2E3A743
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Source+Sans+Pro:400,400i\|Source+Serif+Pro:600&subset=latin-ext"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Source Sans Pro';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7qsDJT9g.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Source Sans Pro';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7jsDJT9g.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Source Sans Pro';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7rsDJT9g.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Source Sans Pro';. font-style: italic;. font-weight: 400;. src: url(https://fonts

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	391
Entropy (8bit):	4.7474201749507134
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slzTPl2O4UYaeLIT4W+KS4S1UpMTQpi6jUs8sh6B+BSmK0C:t6qFPUPkHSt1UiT6i6jUs8b0I0C
MD5:	8959DDCD9712196961D93F58064ED655
SHA1:	62AB1E38E7E9FBF58A04381B76C2D96A9C829F24
SHA-256:	17C7A89BF169C2EE400E31B042CEA68513F06B9CD7D1E8990DBEC800F0D771C7
SHA-512:	5E9EFFA313C30B351345DB963238B4AFD0728CA302FD79A853C80C89F042266D44CC1D29492520FB0FA80B47135E54E6963DFC21972F6B236B84C1DA2FAD809D
Malicious:	false
Reputation:	low
URL:	https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L20.49 19l-4.99-5zm-6 0C7.01 14 5 11.99 5 9.5S7.01 5 9.5 5 14 7.01 14 9.5 11.99 14 9.5 14z"/><path d="M0 0h24v24H0z" fill="none"/></svg>.

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 15:17:10.026629925 CEST	49671	443	192.168.2.7	204.79.197.203
Sep 29, 2024 15:17:10.338912964 CEST	49671	443	192.168.2.7	204.79.197.203
Sep 29, 2024 15:17:10.948153973 CEST	49671	443	192.168.2.7	204.79.197.203
Sep 29, 2024 15:17:12.151381016 CEST	49671	443	192.168.2.7	204.79.197.203
Sep 29, 2024 15:17:12.323168039 CEST	49675	443	192.168.2.7	104.98.116.138
Sep 29, 2024 15:17:12.323242903 CEST	49674	443	192.168.2.7	104.98.116.138
Sep 29, 2024 15:17:12.416897058 CEST	49672	443	192.168.2.7	104.98.116.138
Sep 29, 2024 15:17:14.557516098 CEST	49671	443	192.168.2.7	204.79.197.203
Sep 29, 2024 15:17:18.573992968 CEST	49677	443	192.168.2.7	20.50.201.200
Sep 29, 2024 15:17:19.088500023 CEST	49677	443	192.168.2.7	20.50.201.200
Sep 29, 2024 15:17:19.369748116 CEST	49671	443	192.168.2.7	204.79.197.203
Sep 29, 2024 15:17:19.722542048 CEST	49704	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:19.722600937 CEST	443	49704	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:19.722858906 CEST	49705	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:19.722898960 CEST	443	49705	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:19.722908974 CEST	49704	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:19.723038912 CEST	49705	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:19.723368883 CEST	49704	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:19.723381996 CEST	443	49704	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:19.723601103 CEST	49705	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:19.723613024 CEST	443	49705	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:19.888546944 CEST	49677	443	192.168.2.7	20.50.201.200
Sep 29, 2024 15:17:20.277647018 CEST	443	49704	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:20.278379917 CEST	49704	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:20.278398991 CEST	443	49704	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:20.279362917 CEST	443	49704	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:20.279443026 CEST	49704	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:20.280599117 CEST	49704	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:20.280661106 CEST	443	49704	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:20.280847073 CEST	49704	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:20.280854940 CEST	443	49704	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:20.286465883 CEST	443	49705	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:20.286735058 CEST	49705	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:20.286748886 CEST	443	49705	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:20.287741899 CEST	443	49705	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:20.287816048 CEST	49705	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:20.289199114 CEST	49705	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:20.289249897 CEST	443	49705	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:20.386861086 CEST	49704	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:20.387064934 CEST	49705	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:20.387080908 CEST	443	49705	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:20.568774939 CEST	443	49704	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:20.568814993 CEST	443	49704	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:20.568901062 CEST	49704	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:20.568918943 CEST	443	49704	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:20.569195032 CEST	443	49704	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:20.569241047 CEST	49704	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:20.569262981 CEST	443	49704	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:20.569679022 CEST	443	49704	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:20.569689035 CEST	443	49704	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:20.569767952 CEST	49704	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:20.569777012 CEST	443	49704	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:20.570664883 CEST	443	49704	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:20.570672989 CEST	443	49704	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:20.570791006 CEST	49704	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:20.570799112 CEST	443	49704	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:20.570816040 CEST	443	49704	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:20.570849895 CEST	49704	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:20.570856094 CEST	443	49704	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:20.570916891 CEST	49704	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:20.570926905 CEST	443	49704	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:20.570936918 CEST	443	49704	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:20.570976973 CEST	49704	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:20.577735901 CEST	49704	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:20.577759027 CEST	443	49704	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:20.593250990 CEST	49705	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:20.619909048 CEST	49705	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:20.667412043 CEST	443	49705	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:20.852637053 CEST	443	49705	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:20.852750063 CEST	443	49705	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:20.852802038 CEST	49705	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:20.853463888 CEST	49705	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:20.853483915 CEST	443	49705	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:20.875355005 CEST	49708	443	192.168.2.7	18.66.121.190
Sep 29, 2024 15:17:20.875394106 CEST	443	49708	18.66.121.190	192.168.2.7
Sep 29, 2024 15:17:20.875473976 CEST	49708	443	192.168.2.7	18.66.121.190
Sep 29, 2024 15:17:20.875945091 CEST	49708	443	192.168.2.7	18.66.121.190
Sep 29, 2024 15:17:20.875957012 CEST	443	49708	18.66.121.190	192.168.2.7
Sep 29, 2024 15:17:20.899256945 CEST	49709	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:20.899270058 CEST	443	49709	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:20.899662971 CEST	49709	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:20.900587082 CEST	49709	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:20.900593042 CEST	443	49709	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:20.908094883 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:20.908138990 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:20.908812046 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:20.909012079 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:20.909029007 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.077557087 CEST	49712	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:21.077662945 CEST	443	49712	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:21.077759027 CEST	49712	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:21.078036070 CEST	49712	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:21.078078032 CEST	443	49712	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:21.258877993 CEST	49713	443	192.168.2.7	142.250.181.228
Sep 29, 2024 15:17:21.258909941 CEST	443	49713	142.250.181.228	192.168.2.7
Sep 29, 2024 15:17:21.259036064 CEST	49713	443	192.168.2.7	142.250.181.228
Sep 29, 2024 15:17:21.259402037 CEST	49713	443	192.168.2.7	142.250.181.228
Sep 29, 2024 15:17:21.259412050 CEST	443	49713	142.250.181.228	192.168.2.7
Sep 29, 2024 15:17:21.385842085 CEST	49677	443	192.168.2.7	20.50.201.200
Sep 29, 2024 15:17:21.426654100 CEST	443	49709	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:21.430385113 CEST	49709	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:21.430397034 CEST	443	49709	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:21.430726051 CEST	443	49709	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:21.432698011 CEST	49709	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:21.432749987 CEST	443	49709	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:21.433990002 CEST	49709	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:21.479404926 CEST	443	49709	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:21.541858912 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.590532064 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:21.590910912 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:21.590934038 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.592360973 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.592375040 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.592426062 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:21.596986055 CEST	443	49708	18.66.121.190	192.168.2.7
Sep 29, 2024 15:17:21.600621939 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:21.600698948 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.600788116 CEST	49708	443	192.168.2.7	18.66.121.190
Sep 29, 2024 15:17:21.600801945 CEST	443	49708	18.66.121.190	192.168.2.7
Sep 29, 2024 15:17:21.601902962 CEST	443	49708	18.66.121.190	192.168.2.7
Sep 29, 2024 15:17:21.601958036 CEST	49708	443	192.168.2.7	18.66.121.190
Sep 29, 2024 15:17:21.606971979 CEST	443	49712	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:21.618154049 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:21.618174076 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.626899958 CEST	49712	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:21.626976967 CEST	443	49712	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:21.628035069 CEST	443	49712	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:21.628102064 CEST	49712	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:21.630811930 CEST	49708	443	192.168.2.7	18.66.121.190
Sep 29, 2024 15:17:21.630883932 CEST	443	49708	18.66.121.190	192.168.2.7
Sep 29, 2024 15:17:21.631236076 CEST	49712	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:21.631311893 CEST	443	49712	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:21.635387897 CEST	49708	443	192.168.2.7	18.66.121.190
Sep 29, 2024 15:17:21.635397911 CEST	443	49708	18.66.121.190	192.168.2.7
Sep 29, 2024 15:17:21.663060904 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:21.667691946 CEST	443	49709	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:21.667789936 CEST	443	49709	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:21.667860985 CEST	49709	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:21.673571110 CEST	49712	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:21.673618078 CEST	443	49712	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:21.680236101 CEST	49712	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:21.690089941 CEST	49708	443	192.168.2.7	18.66.121.190
Sep 29, 2024 15:17:21.727401972 CEST	443	49712	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:21.776412010 CEST	49709	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:21.776444912 CEST	443	49709	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:21.818053007 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.818103075 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.818152905 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.818154097 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:21.818167925 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.818192959 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:21.818206072 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.818243027 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:21.823923111 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.823983908 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.824213028 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:21.824222088 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.830373049 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.830424070 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:21.830431938 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.835625887 CEST	49714	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:21.835659027 CEST	443	49714	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:21.835782051 CEST	49714	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:21.836477995 CEST	49714	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:21.836484909 CEST	443	49714	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:21.836683035 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.836740971 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:21.836749077 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.868524075 CEST	443	49708	18.66.121.190	192.168.2.7
Sep 29, 2024 15:17:21.868551016 CEST	443	49708	18.66.121.190	192.168.2.7
Sep 29, 2024 15:17:21.868561029 CEST	443	49708	18.66.121.190	192.168.2.7
Sep 29, 2024 15:17:21.868580103 CEST	443	49708	18.66.121.190	192.168.2.7
Sep 29, 2024 15:17:21.868587017 CEST	443	49708	18.66.121.190	192.168.2.7
Sep 29, 2024 15:17:21.868603945 CEST	49708	443	192.168.2.7	18.66.121.190
Sep 29, 2024 15:17:21.868629932 CEST	443	49708	18.66.121.190	192.168.2.7
Sep 29, 2024 15:17:21.868644953 CEST	443	49708	18.66.121.190	192.168.2.7
Sep 29, 2024 15:17:21.868654013 CEST	49708	443	192.168.2.7	18.66.121.190
Sep 29, 2024 15:17:21.868690968 CEST	49708	443	192.168.2.7	18.66.121.190
Sep 29, 2024 15:17:21.877070904 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:21.895545959 CEST	443	49713	142.250.181.228	192.168.2.7
Sep 29, 2024 15:17:21.904493093 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.907294989 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.907335997 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.907357931 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:21.907373905 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.907413006 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:21.911179066 CEST	443	49712	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:21.911272049 CEST	443	49712	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:21.911324978 CEST	49712	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:21.913861036 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.914880991 CEST	49713	443	192.168.2.7	142.250.181.228
Sep 29, 2024 15:17:21.914906025 CEST	443	49713	142.250.181.228	192.168.2.7
Sep 29, 2024 15:17:21.915791035 CEST	49708	443	192.168.2.7	18.66.121.190
Sep 29, 2024 15:17:21.915806055 CEST	443	49708	18.66.121.190	192.168.2.7
Sep 29, 2024 15:17:21.915947914 CEST	443	49713	142.250.181.228	192.168.2.7
Sep 29, 2024 15:17:21.916008949 CEST	49713	443	192.168.2.7	142.250.181.228
Sep 29, 2024 15:17:21.917722940 CEST	49713	443	192.168.2.7	142.250.181.228
Sep 29, 2024 15:17:21.917781115 CEST	443	49713	142.250.181.228	192.168.2.7
Sep 29, 2024 15:17:21.919892073 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.919924974 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.919955015 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:21.919965982 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.920003891 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:21.926218033 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.932524920 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.932566881 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:21.932573080 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.932585001 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.932615042 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:21.938730955 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.944689035 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.944808006 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.944864988 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:21.944876909 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.945135117 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:21.950544119 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.952799082 CEST	49712	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:21.952833891 CEST	443	49712	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:21.956522942 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.956561089 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:21.956568003 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.962549925 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.962593079 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:21.962595940 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.962608099 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.962640047 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:21.968348980 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.968409061 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.968527079 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:21.968533993 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.989890099 CEST	49715	443	192.168.2.7	18.66.121.138
Sep 29, 2024 15:17:21.989917040 CEST	443	49715	18.66.121.138	192.168.2.7
Sep 29, 2024 15:17:21.990000963 CEST	49715	443	192.168.2.7	18.66.121.138
Sep 29, 2024 15:17:21.990508080 CEST	49715	443	192.168.2.7	18.66.121.138
Sep 29, 2024 15:17:21.990516901 CEST	443	49715	18.66.121.138	192.168.2.7
Sep 29, 2024 15:17:21.991210938 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.991240025 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.991272926 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:21.991283894 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.991312981 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:21.991321087 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.993993998 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.994055033 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:21.994060993 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.999640942 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:21.999691963 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:21.999700069 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.005208015 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.005275965 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:22.005284071 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.010451078 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.010489941 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:22.010499001 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.015928984 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.016094923 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:22.016100883 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.021451950 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.021516085 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:22.021522999 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.026887894 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.026946068 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:22.026952028 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.027169943 CEST	49672	443	192.168.2.7	104.98.116.138
Sep 29, 2024 15:17:22.032105923 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.032155991 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:22.032162905 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.037581921 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.037636995 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:22.037653923 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.042910099 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.042957067 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:22.042963982 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.047904968 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.048026085 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:22.048043013 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.052459002 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.052666903 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:22.052680969 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.057106018 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.057183981 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:22.057190895 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.061342955 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.061413050 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:22.061428070 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.065558910 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.065642118 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:22.065655947 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.071340084 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.071405888 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:22.071424007 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.073513031 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.073755980 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:22.073762894 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.077299118 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.077384949 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:22.077424049 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.081219912 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.081295013 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:22.081336021 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.085047960 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.085095882 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:22.085103989 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.088282108 CEST	49674	443	192.168.2.7	104.98.116.138
Sep 29, 2024 15:17:22.088294983 CEST	49675	443	192.168.2.7	104.98.116.138
Sep 29, 2024 15:17:22.088305950 CEST	49713	443	192.168.2.7	142.250.181.228
Sep 29, 2024 15:17:22.088315964 CEST	443	49713	142.250.181.228	192.168.2.7
Sep 29, 2024 15:17:22.088881016 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.088917017 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.088942051 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:22.088957071 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.088999987 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:22.091224909 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.093394995 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.093432903 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.093461037 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:22.093468904 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.093534946 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:22.096329927 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.098028898 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.098072052 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.098108053 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:22.098114967 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.098160028 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:22.100569963 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.102639914 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.102678061 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.102698088 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:22.102705956 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.102746010 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:22.104969978 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.107223988 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.107290983 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:22.107299089 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.109658003 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.109694958 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.109731913 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:22.109740019 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.109812975 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:22.113980055 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.114312887 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.114340067 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.114360094 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:22.114377022 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.114420891 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:22.116631985 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.119308949 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.119337082 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.119390011 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:22.119399071 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.119633913 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:22.121201038 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.123548985 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.123570919 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.123614073 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:22.123624086 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.123683929 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:22.123689890 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.123732090 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.123861074 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:22.137069941 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 29, 2024 15:17:22.137092113 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 29, 2024 15:17:22.282372952 CEST	49717	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:22.282381058 CEST	443	49717	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:22.282485962 CEST	49717	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:22.283003092 CEST	49717	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:22.283009052 CEST	443	49717	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:22.294073105 CEST	49713	443	192.168.2.7	142.250.181.228
Sep 29, 2024 15:17:22.435956001 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:22.436050892 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:22.436152935 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:22.436459064 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:22.436494112 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:22.465934992 CEST	443	49714	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:22.470571995 CEST	49714	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:22.470585108 CEST	443	49714	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:22.471523046 CEST	443	49714	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:22.471596003 CEST	49714	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:22.473318100 CEST	49714	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:22.473368883 CEST	443	49714	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:22.516239882 CEST	49714	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:22.516252041 CEST	443	49714	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:22.564353943 CEST	49714	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:22.717972994 CEST	443	49715	18.66.121.138	192.168.2.7
Sep 29, 2024 15:17:22.718561888 CEST	49715	443	192.168.2.7	18.66.121.138
Sep 29, 2024 15:17:22.718585014 CEST	443	49715	18.66.121.138	192.168.2.7
Sep 29, 2024 15:17:22.719614983 CEST	443	49715	18.66.121.138	192.168.2.7
Sep 29, 2024 15:17:22.719695091 CEST	49715	443	192.168.2.7	18.66.121.138
Sep 29, 2024 15:17:22.720701933 CEST	49715	443	192.168.2.7	18.66.121.138
Sep 29, 2024 15:17:22.720773935 CEST	443	49715	18.66.121.138	192.168.2.7
Sep 29, 2024 15:17:22.720989943 CEST	49715	443	192.168.2.7	18.66.121.138
Sep 29, 2024 15:17:22.720997095 CEST	443	49715	18.66.121.138	192.168.2.7
Sep 29, 2024 15:17:22.890454054 CEST	49715	443	192.168.2.7	18.66.121.138
Sep 29, 2024 15:17:22.919403076 CEST	443	49717	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:22.919646025 CEST	49717	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:22.919671059 CEST	443	49717	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:22.920680046 CEST	443	49717	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:22.920741081 CEST	49717	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:22.921262980 CEST	49717	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:22.921324015 CEST	443	49717	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:22.921468019 CEST	49717	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:22.921490908 CEST	443	49717	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:22.970444918 CEST	49717	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:22.970455885 CEST	443	49717	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:22.995654106 CEST	443	49715	18.66.121.138	192.168.2.7
Sep 29, 2024 15:17:22.995676994 CEST	443	49715	18.66.121.138	192.168.2.7
Sep 29, 2024 15:17:22.995683908 CEST	443	49715	18.66.121.138	192.168.2.7
Sep 29, 2024 15:17:22.995721102 CEST	443	49715	18.66.121.138	192.168.2.7
Sep 29, 2024 15:17:22.995740891 CEST	49715	443	192.168.2.7	18.66.121.138
Sep 29, 2024 15:17:22.995749950 CEST	443	49715	18.66.121.138	192.168.2.7
Sep 29, 2024 15:17:22.995774984 CEST	443	49715	18.66.121.138	192.168.2.7
Sep 29, 2024 15:17:22.995779991 CEST	49715	443	192.168.2.7	18.66.121.138
Sep 29, 2024 15:17:22.995789051 CEST	443	49715	18.66.121.138	192.168.2.7
Sep 29, 2024 15:17:22.995807886 CEST	49715	443	192.168.2.7	18.66.121.138
Sep 29, 2024 15:17:22.995832920 CEST	49715	443	192.168.2.7	18.66.121.138
Sep 29, 2024 15:17:22.997318983 CEST	49715	443	192.168.2.7	18.66.121.138
Sep 29, 2024 15:17:22.997337103 CEST	443	49715	18.66.121.138	192.168.2.7
Sep 29, 2024 15:17:23.013384104 CEST	49717	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:23.067445040 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.069433928 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.069463015 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.070435047 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.070528984 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.070804119 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.070885897 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.070957899 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.070969105 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.085562944 CEST	49719	443	192.168.2.7	184.28.90.27
Sep 29, 2024 15:17:23.085608959 CEST	443	49719	184.28.90.27	192.168.2.7
Sep 29, 2024 15:17:23.085678101 CEST	49719	443	192.168.2.7	184.28.90.27
Sep 29, 2024 15:17:23.087471962 CEST	49719	443	192.168.2.7	184.28.90.27
Sep 29, 2024 15:17:23.087490082 CEST	443	49719	184.28.90.27	192.168.2.7
Sep 29, 2024 15:17:23.190049887 CEST	443	49717	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:23.190078974 CEST	443	49717	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:23.190105915 CEST	443	49717	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:23.190114975 CEST	49717	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:23.190126896 CEST	443	49717	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:23.190135956 CEST	443	49717	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:23.190170050 CEST	49717	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:23.190181971 CEST	443	49717	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:23.190221071 CEST	49717	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:23.195681095 CEST	443	49717	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:23.195806980 CEST	443	49717	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:23.195851088 CEST	49717	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:23.195861101 CEST	443	49717	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:23.201827049 CEST	443	49717	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:23.201867104 CEST	49717	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:23.201870918 CEST	443	49717	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:23.208205938 CEST	443	49717	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:23.208247900 CEST	49717	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:23.208252907 CEST	443	49717	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:23.208345890 CEST	443	49717	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:23.208579063 CEST	49717	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:23.210042953 CEST	49717	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:23.210061073 CEST	443	49717	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:23.275408030 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.275482893 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.293668985 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:23.293705940 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:23.293870926 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:23.294441938 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:23.294452906 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:23.346105099 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.346153975 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.346184969 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.346214056 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.346231937 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.346250057 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.346276999 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.352134943 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.352169991 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.352188110 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.352195978 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.352236032 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.352241993 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.359486103 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.359534025 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.359540939 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.364584923 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.364655018 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.364662886 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.433311939 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.433362007 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.433374882 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.435055017 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.435094118 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.435100079 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.441277981 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.441343069 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.441350937 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.447460890 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.447518110 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.447546005 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.453627110 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.453697920 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.453720093 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.460055113 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.460254908 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.460274935 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.466309071 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.466372013 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.466438055 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.472172976 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.472246885 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.472295046 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.477941990 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.478023052 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.478085995 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.483848095 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.483918905 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.483973026 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.489638090 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.489727974 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.489779949 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.495642900 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.495670080 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.495707989 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.495757103 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.495811939 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.501324892 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.520921946 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.520962954 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.521004915 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.521063089 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.521117926 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.521136999 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.526674986 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.526709080 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.526727915 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.526777029 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.526824951 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.532063961 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.537507057 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.537552118 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.537558079 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.537591934 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.537645102 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.543000937 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.548341990 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.548388004 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.548439026 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.548485041 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.548535109 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.553771019 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.558849096 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.558944941 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.558967113 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.564064026 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.564129114 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.564146042 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.564158916 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.564282894 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.569474936 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.574333906 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.574383974 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.574398041 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.574413061 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.574467897 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.579107046 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.583686113 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.583736897 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.583743095 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.583759069 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.583815098 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.587913990 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.592031956 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.592075109 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.592084885 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.592098951 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.592179060 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.595886946 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.599775076 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.599807024 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.599829912 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.599838018 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.600022078 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.603697062 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.607563019 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.607608080 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.607618093 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.607625008 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.607683897 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.611377001 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.615237951 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.615272045 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.615284920 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.615293026 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.615356922 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.617378950 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.619663000 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.619714975 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.619721889 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.622080088 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.622112989 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.622164965 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.622195005 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.622242928 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.624344110 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.626754045 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.626811028 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.626825094 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.628982067 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.629021883 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.629039049 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.629053116 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.629097939 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.629111052 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.631347895 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.631426096 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.631441116 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.633656025 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.633734941 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.633769989 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.636065006 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.636126041 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.636156082 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.638336897 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.638412952 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.638447046 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.640625000 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.640681028 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.640708923 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.642941952 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.642992973 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.643006086 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.645200968 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.645248890 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.645256996 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.647466898 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.647514105 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.647521019 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.649888039 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.649951935 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.649961948 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.649979115 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.650019884 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.650516987 CEST	49718	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:23.650547028 CEST	443	49718	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:23.757354975 CEST	443	49719	184.28.90.27	192.168.2.7
Sep 29, 2024 15:17:23.757451057 CEST	49719	443	192.168.2.7	184.28.90.27
Sep 29, 2024 15:17:23.767741919 CEST	49719	443	192.168.2.7	184.28.90.27
Sep 29, 2024 15:17:23.767805099 CEST	443	49719	184.28.90.27	192.168.2.7
Sep 29, 2024 15:17:23.768084049 CEST	443	49719	184.28.90.27	192.168.2.7
Sep 29, 2024 15:17:23.898986101 CEST	49719	443	192.168.2.7	184.28.90.27
Sep 29, 2024 15:17:23.944082022 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:23.946407080 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:23.946445942 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:23.946779966 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:23.951420069 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:23.951555967 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:23.951662064 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:23.994956970 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.227907896 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.227962971 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.227993011 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.228023052 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.228050947 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.228070021 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.228070021 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.228097916 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.228285074 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.233730078 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.233881950 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.234003067 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.234025955 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.240243912 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.240381956 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.240406990 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.246648073 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.248080015 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.248099089 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.298971891 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.318598032 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.318656921 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.318706036 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.318763018 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.318792105 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.319017887 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.323558092 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.329945087 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.330043077 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.330066919 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.337342978 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.337387085 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.337477922 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.337502956 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.337721109 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.342519999 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.348706961 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.348778963 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.348782063 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.348802090 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.348870039 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.355112076 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.360358953 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.360404968 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.360487938 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.360522032 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.360596895 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.366777897 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.372343063 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.372386932 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.372410059 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.372442007 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.372489929 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.378213882 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.381208897 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.381434917 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.381464958 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.384042025 CEST	49719	443	192.168.2.7	184.28.90.27
Sep 29, 2024 15:17:24.409507036 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.409538984 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.409559011 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.409610987 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.409634113 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.409694910 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.409707069 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.409729958 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.409770012 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.409775972 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.409857988 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.410489082 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.415157080 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.415236950 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.415256977 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.420957088 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.421047926 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.421070099 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.427275896 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.427334070 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.427351952 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.431411028 CEST	443	49719	184.28.90.27	192.168.2.7
Sep 29, 2024 15:17:24.432615042 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.432735920 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.432759047 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.437891006 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.438036919 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.438061953 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.443619967 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.443677902 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.443697929 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.448693991 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.448760033 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.448782921 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.453969955 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.454034090 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.454055071 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.458822966 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.458914995 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.458940983 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.463392973 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.463663101 CEST	443	49698	104.98.116.138	192.168.2.7
Sep 29, 2024 15:17:24.463747025 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.463756084 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.463774920 CEST	49698	443	192.168.2.7	104.98.116.138
Sep 29, 2024 15:17:24.467897892 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.467973948 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.467983961 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.471952915 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.472011089 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.472021103 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.476181984 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.476290941 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.476301908 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.480056047 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.480129004 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.480135918 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.483913898 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.484006882 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.484013081 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.489974022 CEST	49677	443	192.168.2.7	20.50.201.200
Sep 29, 2024 15:17:24.502847910 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.502876997 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.502897024 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.502904892 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.502963066 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.502988100 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.503037930 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.503042936 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.503086090 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.503138065 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.503174067 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.503177881 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.503204107 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.503247023 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.503253937 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.503334045 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.503355026 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.503379107 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.503390074 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.503515005 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.505913019 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.507333994 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.507363081 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.507405996 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.507427931 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.507657051 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.509768009 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.518340111 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.518376112 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.518402100 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.518426895 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.518429995 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.518449068 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.518460989 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.518512964 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.518732071 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.518949986 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.519000053 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.519023895 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.519035101 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.519095898 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.521251917 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.524542093 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.524568081 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.524595022 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.524601936 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.524697065 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.525861979 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.528824091 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.528856039 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.528878927 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.528884888 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.528954983 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.530664921 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.534385920 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.534462929 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.534467936 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.534734964 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.534812927 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.535469055 CEST	49720	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.535482883 CEST	443	49720	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.576594114 CEST	443	49719	184.28.90.27	192.168.2.7
Sep 29, 2024 15:17:24.576651096 CEST	443	49719	184.28.90.27	192.168.2.7
Sep 29, 2024 15:17:24.576903105 CEST	49719	443	192.168.2.7	184.28.90.27
Sep 29, 2024 15:17:24.576997042 CEST	49719	443	192.168.2.7	184.28.90.27
Sep 29, 2024 15:17:24.577045918 CEST	443	49719	184.28.90.27	192.168.2.7
Sep 29, 2024 15:17:24.577078104 CEST	49719	443	192.168.2.7	184.28.90.27
Sep 29, 2024 15:17:24.577095032 CEST	443	49719	184.28.90.27	192.168.2.7
Sep 29, 2024 15:17:24.620434046 CEST	49721	443	192.168.2.7	184.28.90.27
Sep 29, 2024 15:17:24.620480061 CEST	443	49721	184.28.90.27	192.168.2.7
Sep 29, 2024 15:17:24.620562077 CEST	49721	443	192.168.2.7	184.28.90.27
Sep 29, 2024 15:17:24.621371031 CEST	49721	443	192.168.2.7	184.28.90.27
Sep 29, 2024 15:17:24.621382952 CEST	443	49721	184.28.90.27	192.168.2.7
Sep 29, 2024 15:17:24.897018909 CEST	49722	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.897080898 CEST	443	49722	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.897156000 CEST	49722	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.897865057 CEST	49722	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:24.897881985 CEST	443	49722	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:24.936022043 CEST	49723	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:24.936080933 CEST	443	49723	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:24.936199903 CEST	49723	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:24.936495066 CEST	49723	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:24.936508894 CEST	443	49723	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:25.256717920 CEST	443	49721	184.28.90.27	192.168.2.7
Sep 29, 2024 15:17:25.256865025 CEST	49721	443	192.168.2.7	184.28.90.27
Sep 29, 2024 15:17:25.280107021 CEST	49721	443	192.168.2.7	184.28.90.27
Sep 29, 2024 15:17:25.280133963 CEST	443	49721	184.28.90.27	192.168.2.7
Sep 29, 2024 15:17:25.280378103 CEST	443	49721	184.28.90.27	192.168.2.7
Sep 29, 2024 15:17:25.283128977 CEST	49721	443	192.168.2.7	184.28.90.27
Sep 29, 2024 15:17:25.327403069 CEST	443	49721	184.28.90.27	192.168.2.7
Sep 29, 2024 15:17:25.493369102 CEST	443	49723	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:25.504290104 CEST	49723	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:25.504321098 CEST	443	49723	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:25.504700899 CEST	443	49723	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:25.509257078 CEST	49723	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:25.509336948 CEST	443	49723	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:25.511023045 CEST	49723	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:25.527273893 CEST	443	49722	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:25.528834105 CEST	49722	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:25.528866053 CEST	443	49722	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:25.529210091 CEST	443	49722	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:25.532330990 CEST	49722	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:25.532403946 CEST	443	49722	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:25.533309937 CEST	443	49721	184.28.90.27	192.168.2.7
Sep 29, 2024 15:17:25.533380985 CEST	443	49721	184.28.90.27	192.168.2.7
Sep 29, 2024 15:17:25.533610106 CEST	49721	443	192.168.2.7	184.28.90.27
Sep 29, 2024 15:17:25.542484045 CEST	49721	443	192.168.2.7	184.28.90.27
Sep 29, 2024 15:17:25.542510033 CEST	443	49721	184.28.90.27	192.168.2.7
Sep 29, 2024 15:17:25.551414013 CEST	443	49723	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:25.697565079 CEST	49722	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:25.750755072 CEST	443	49723	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:25.750901937 CEST	443	49723	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:25.751316071 CEST	49723	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:25.752444983 CEST	49723	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:25.752465010 CEST	443	49723	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:25.806761980 CEST	49726	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:25.806813955 CEST	443	49726	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:25.806873083 CEST	49726	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:25.814341068 CEST	49726	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:25.814357996 CEST	443	49726	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:25.829850912 CEST	49727	443	192.168.2.7	216.58.206.33
Sep 29, 2024 15:17:25.829896927 CEST	443	49727	216.58.206.33	192.168.2.7
Sep 29, 2024 15:17:25.830017090 CEST	49727	443	192.168.2.7	216.58.206.33
Sep 29, 2024 15:17:25.830319881 CEST	49728	443	192.168.2.7	216.58.206.33
Sep 29, 2024 15:17:25.830363989 CEST	443	49728	216.58.206.33	192.168.2.7
Sep 29, 2024 15:17:25.830492973 CEST	49728	443	192.168.2.7	216.58.206.33
Sep 29, 2024 15:17:25.831111908 CEST	49727	443	192.168.2.7	216.58.206.33
Sep 29, 2024 15:17:25.831131935 CEST	443	49727	216.58.206.33	192.168.2.7
Sep 29, 2024 15:17:25.831571102 CEST	49728	443	192.168.2.7	216.58.206.33
Sep 29, 2024 15:17:25.831587076 CEST	443	49728	216.58.206.33	192.168.2.7
Sep 29, 2024 15:17:25.841001987 CEST	49729	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:25.841032982 CEST	443	49729	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:25.841258049 CEST	49729	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:25.876991987 CEST	49729	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:25.877021074 CEST	443	49729	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:26.346075058 CEST	443	49726	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:26.346374989 CEST	49726	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:26.346390009 CEST	443	49726	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:26.346771955 CEST	443	49726	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:26.347433090 CEST	49726	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:26.347502947 CEST	443	49726	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:26.347851992 CEST	49726	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:26.395409107 CEST	443	49726	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:26.414081097 CEST	443	49729	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:26.569988966 CEST	443	49726	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:26.570058107 CEST	443	49726	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:26.570468903 CEST	49726	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:26.575367928 CEST	443	49727	216.58.206.33	192.168.2.7
Sep 29, 2024 15:17:26.578648090 CEST	443	49728	216.58.206.33	192.168.2.7
Sep 29, 2024 15:17:26.600334883 CEST	49729	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:26.779419899 CEST	443	49727	216.58.206.33	192.168.2.7
Sep 29, 2024 15:17:26.782250881 CEST	49727	443	192.168.2.7	216.58.206.33
Sep 29, 2024 15:17:26.783406973 CEST	443	49728	216.58.206.33	192.168.2.7
Sep 29, 2024 15:17:26.783469915 CEST	49728	443	192.168.2.7	216.58.206.33
Sep 29, 2024 15:17:26.951436996 CEST	49729	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:26.951520920 CEST	443	49729	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:26.952060938 CEST	443	49729	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:26.952516079 CEST	49728	443	192.168.2.7	216.58.206.33
Sep 29, 2024 15:17:26.952533007 CEST	443	49728	216.58.206.33	192.168.2.7
Sep 29, 2024 15:17:26.952832937 CEST	49727	443	192.168.2.7	216.58.206.33
Sep 29, 2024 15:17:26.952855110 CEST	443	49727	216.58.206.33	192.168.2.7
Sep 29, 2024 15:17:26.953155041 CEST	443	49728	216.58.206.33	192.168.2.7
Sep 29, 2024 15:17:26.953174114 CEST	443	49728	216.58.206.33	192.168.2.7
Sep 29, 2024 15:17:26.953227043 CEST	49728	443	192.168.2.7	216.58.206.33
Sep 29, 2024 15:17:26.953248024 CEST	443	49728	216.58.206.33	192.168.2.7
Sep 29, 2024 15:17:26.953290939 CEST	49728	443	192.168.2.7	216.58.206.33
Sep 29, 2024 15:17:26.953313112 CEST	49728	443	192.168.2.7	216.58.206.33
Sep 29, 2024 15:17:26.953341007 CEST	443	49727	216.58.206.33	192.168.2.7
Sep 29, 2024 15:17:26.953357935 CEST	443	49727	216.58.206.33	192.168.2.7
Sep 29, 2024 15:17:26.953392029 CEST	49727	443	192.168.2.7	216.58.206.33
Sep 29, 2024 15:17:26.953402996 CEST	443	49727	216.58.206.33	192.168.2.7
Sep 29, 2024 15:17:26.953434944 CEST	49727	443	192.168.2.7	216.58.206.33
Sep 29, 2024 15:17:26.953443050 CEST	49727	443	192.168.2.7	216.58.206.33
Sep 29, 2024 15:17:26.953888893 CEST	443	49728	216.58.206.33	192.168.2.7
Sep 29, 2024 15:17:26.954087973 CEST	443	49727	216.58.206.33	192.168.2.7
Sep 29, 2024 15:17:26.954437971 CEST	49729	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:26.954530001 CEST	443	49729	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:26.957295895 CEST	49729	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:26.958482981 CEST	49727	443	192.168.2.7	216.58.206.33
Sep 29, 2024 15:17:26.958560944 CEST	443	49727	216.58.206.33	192.168.2.7
Sep 29, 2024 15:17:26.958765030 CEST	49727	443	192.168.2.7	216.58.206.33
Sep 29, 2024 15:17:26.958776951 CEST	443	49727	216.58.206.33	192.168.2.7
Sep 29, 2024 15:17:26.960633039 CEST	49728	443	192.168.2.7	216.58.206.33
Sep 29, 2024 15:17:26.960720062 CEST	443	49728	216.58.206.33	192.168.2.7
Sep 29, 2024 15:17:26.960750103 CEST	49728	443	192.168.2.7	216.58.206.33
Sep 29, 2024 15:17:26.962811947 CEST	49726	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:26.962821007 CEST	443	49726	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:27.003408909 CEST	443	49729	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:27.003431082 CEST	443	49728	216.58.206.33	192.168.2.7
Sep 29, 2024 15:17:27.142692089 CEST	443	49727	216.58.206.33	192.168.2.7
Sep 29, 2024 15:17:27.142750025 CEST	49727	443	192.168.2.7	216.58.206.33
Sep 29, 2024 15:17:27.146589041 CEST	49727	443	192.168.2.7	216.58.206.33
Sep 29, 2024 15:17:27.146616936 CEST	443	49727	216.58.206.33	192.168.2.7
Sep 29, 2024 15:17:27.171413898 CEST	443	49728	216.58.206.33	192.168.2.7
Sep 29, 2024 15:17:27.171503067 CEST	49728	443	192.168.2.7	216.58.206.33
Sep 29, 2024 15:17:27.173976898 CEST	443	49728	216.58.206.33	192.168.2.7
Sep 29, 2024 15:17:27.174041033 CEST	443	49728	216.58.206.33	192.168.2.7
Sep 29, 2024 15:17:27.174093962 CEST	49728	443	192.168.2.7	216.58.206.33
Sep 29, 2024 15:17:27.176579952 CEST	49728	443	192.168.2.7	216.58.206.33
Sep 29, 2024 15:17:27.176624060 CEST	443	49728	216.58.206.33	192.168.2.7
Sep 29, 2024 15:17:27.182509899 CEST	443	49729	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:27.182735920 CEST	443	49729	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:27.182796001 CEST	49729	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:27.196343899 CEST	49729	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:27.196366072 CEST	443	49729	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:27.241878033 CEST	49730	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:27.242006063 CEST	443	49730	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:27.242089987 CEST	49730	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:27.242494106 CEST	49730	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:27.242539883 CEST	443	49730	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:27.270951986 CEST	49714	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:27.271956921 CEST	49731	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:27.272006035 CEST	443	49731	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:27.272085905 CEST	49731	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:27.272716045 CEST	49731	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:27.272727966 CEST	443	49731	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:27.306416988 CEST	49732	443	192.168.2.7	142.250.185.193
Sep 29, 2024 15:17:27.306440115 CEST	443	49732	142.250.185.193	192.168.2.7
Sep 29, 2024 15:17:27.306516886 CEST	49732	443	192.168.2.7	142.250.185.193
Sep 29, 2024 15:17:27.307239056 CEST	49733	443	192.168.2.7	142.250.185.193
Sep 29, 2024 15:17:27.307287931 CEST	443	49733	142.250.185.193	192.168.2.7
Sep 29, 2024 15:17:27.307362080 CEST	49733	443	192.168.2.7	142.250.185.193
Sep 29, 2024 15:17:27.307921886 CEST	49733	443	192.168.2.7	142.250.185.193
Sep 29, 2024 15:17:27.307940006 CEST	443	49733	142.250.185.193	192.168.2.7
Sep 29, 2024 15:17:27.308703899 CEST	49732	443	192.168.2.7	142.250.185.193
Sep 29, 2024 15:17:27.308713913 CEST	443	49732	142.250.185.193	192.168.2.7
Sep 29, 2024 15:17:27.315397978 CEST	443	49714	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:27.466466904 CEST	443	49714	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:27.466557980 CEST	443	49714	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:27.466599941 CEST	49714	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:27.487616062 CEST	49714	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:27.487643957 CEST	443	49714	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:27.798371077 CEST	443	49730	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:27.798896074 CEST	49730	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:27.798929930 CEST	443	49730	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:27.799293995 CEST	443	49730	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:27.799943924 CEST	49730	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:27.800019979 CEST	443	49730	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:27.800101042 CEST	49730	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:27.847407103 CEST	443	49730	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:27.902859926 CEST	443	49731	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:27.903141022 CEST	49731	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:27.903167009 CEST	443	49731	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:27.903821945 CEST	443	49731	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:27.904153109 CEST	49731	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:27.904217958 CEST	443	49731	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:27.904289961 CEST	49731	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:27.947418928 CEST	443	49731	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:28.028461933 CEST	443	49730	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:28.028551102 CEST	443	49730	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:28.028604984 CEST	49730	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:28.029266119 CEST	49730	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:28.029289007 CEST	443	49730	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:28.033516884 CEST	443	49732	142.250.185.193	192.168.2.7
Sep 29, 2024 15:17:28.033957005 CEST	49732	443	192.168.2.7	142.250.185.193
Sep 29, 2024 15:17:28.033977985 CEST	443	49732	142.250.185.193	192.168.2.7
Sep 29, 2024 15:17:28.034349918 CEST	443	49732	142.250.185.193	192.168.2.7
Sep 29, 2024 15:17:28.034364939 CEST	443	49732	142.250.185.193	192.168.2.7
Sep 29, 2024 15:17:28.034425020 CEST	49732	443	192.168.2.7	142.250.185.193
Sep 29, 2024 15:17:28.034431934 CEST	443	49732	142.250.185.193	192.168.2.7
Sep 29, 2024 15:17:28.034470081 CEST	49732	443	192.168.2.7	142.250.185.193
Sep 29, 2024 15:17:28.035068989 CEST	443	49732	142.250.185.193	192.168.2.7
Sep 29, 2024 15:17:28.035362959 CEST	49732	443	192.168.2.7	142.250.185.193
Sep 29, 2024 15:17:28.035429955 CEST	443	49732	142.250.185.193	192.168.2.7
Sep 29, 2024 15:17:28.035558939 CEST	49732	443	192.168.2.7	142.250.185.193
Sep 29, 2024 15:17:28.035564899 CEST	443	49732	142.250.185.193	192.168.2.7
Sep 29, 2024 15:17:28.047868967 CEST	443	49733	142.250.185.193	192.168.2.7
Sep 29, 2024 15:17:28.048075914 CEST	49733	443	192.168.2.7	142.250.185.193
Sep 29, 2024 15:17:28.048113108 CEST	443	49733	142.250.185.193	192.168.2.7
Sep 29, 2024 15:17:28.048491955 CEST	443	49733	142.250.185.193	192.168.2.7
Sep 29, 2024 15:17:28.048504114 CEST	443	49733	142.250.185.193	192.168.2.7
Sep 29, 2024 15:17:28.048870087 CEST	49733	443	192.168.2.7	142.250.185.193
Sep 29, 2024 15:17:28.048890114 CEST	443	49733	142.250.185.193	192.168.2.7
Sep 29, 2024 15:17:28.048964977 CEST	49733	443	192.168.2.7	142.250.185.193
Sep 29, 2024 15:17:28.049207926 CEST	443	49733	142.250.185.193	192.168.2.7
Sep 29, 2024 15:17:28.049400091 CEST	49733	443	192.168.2.7	142.250.185.193
Sep 29, 2024 15:17:28.049483061 CEST	443	49733	142.250.185.193	192.168.2.7
Sep 29, 2024 15:17:28.049510956 CEST	49733	443	192.168.2.7	142.250.185.193
Sep 29, 2024 15:17:28.095411062 CEST	443	49733	142.250.185.193	192.168.2.7
Sep 29, 2024 15:17:28.096158028 CEST	49732	443	192.168.2.7	142.250.185.193
Sep 29, 2024 15:17:28.096271038 CEST	49733	443	192.168.2.7	142.250.185.193
Sep 29, 2024 15:17:28.096309900 CEST	443	49733	142.250.185.193	192.168.2.7
Sep 29, 2024 15:17:28.188465118 CEST	443	49731	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:28.188539982 CEST	443	49731	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:28.188957930 CEST	49731	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:28.189133883 CEST	49731	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:28.189133883 CEST	49731	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:28.189148903 CEST	443	49731	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:28.189529896 CEST	49731	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:28.295039892 CEST	49733	443	192.168.2.7	142.250.185.193
Sep 29, 2024 15:17:28.305171967 CEST	443	49732	142.250.185.193	192.168.2.7
Sep 29, 2024 15:17:28.305268049 CEST	443	49732	142.250.185.193	192.168.2.7
Sep 29, 2024 15:17:28.305612087 CEST	49732	443	192.168.2.7	142.250.185.193
Sep 29, 2024 15:17:28.308111906 CEST	49732	443	192.168.2.7	142.250.185.193
Sep 29, 2024 15:17:28.308120966 CEST	443	49732	142.250.185.193	192.168.2.7
Sep 29, 2024 15:17:28.321676970 CEST	443	49733	142.250.185.193	192.168.2.7
Sep 29, 2024 15:17:28.321763039 CEST	443	49733	142.250.185.193	192.168.2.7
Sep 29, 2024 15:17:28.323235989 CEST	49733	443	192.168.2.7	142.250.185.193
Sep 29, 2024 15:17:28.323576927 CEST	49733	443	192.168.2.7	142.250.185.193
Sep 29, 2024 15:17:28.323601007 CEST	443	49733	142.250.185.193	192.168.2.7
Sep 29, 2024 15:17:28.969938993 CEST	49671	443	192.168.2.7	204.79.197.203
Sep 29, 2024 15:17:30.456379890 CEST	49677	443	192.168.2.7	20.50.201.200
Sep 29, 2024 15:17:31.817234039 CEST	443	49713	142.250.181.228	192.168.2.7
Sep 29, 2024 15:17:31.817313910 CEST	443	49713	142.250.181.228	192.168.2.7
Sep 29, 2024 15:17:31.817411900 CEST	49713	443	192.168.2.7	142.250.181.228
Sep 29, 2024 15:17:32.565530062 CEST	49713	443	192.168.2.7	142.250.181.228
Sep 29, 2024 15:17:32.565565109 CEST	443	49713	142.250.181.228	192.168.2.7
Sep 29, 2024 15:17:32.614402056 CEST	49736	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:32.614468098 CEST	443	49736	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:32.614581108 CEST	49736	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:32.614756107 CEST	49737	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:32.614799976 CEST	443	49737	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:32.614861965 CEST	49737	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:32.614973068 CEST	49736	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:32.614989996 CEST	443	49736	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:32.615236998 CEST	49737	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:32.615253925 CEST	443	49737	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:32.921106100 CEST	49698	443	192.168.2.7	104.98.116.138
Sep 29, 2024 15:17:32.921840906 CEST	49738	443	192.168.2.7	104.98.116.138
Sep 29, 2024 15:17:32.921947002 CEST	443	49738	104.98.116.138	192.168.2.7
Sep 29, 2024 15:17:32.922096014 CEST	49738	443	192.168.2.7	104.98.116.138
Sep 29, 2024 15:17:32.922792912 CEST	49738	443	192.168.2.7	104.98.116.138
Sep 29, 2024 15:17:32.922822952 CEST	443	49738	104.98.116.138	192.168.2.7
Sep 29, 2024 15:17:32.926160097 CEST	443	49698	104.98.116.138	192.168.2.7
Sep 29, 2024 15:17:33.317128897 CEST	443	49737	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:33.317378044 CEST	49737	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:33.317404032 CEST	443	49737	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:33.318489075 CEST	443	49737	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:33.318556070 CEST	49737	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:33.319009066 CEST	443	49736	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:33.319236040 CEST	49736	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:33.319276094 CEST	443	49736	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:33.319583893 CEST	49737	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:33.319674015 CEST	443	49737	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:33.319751024 CEST	49737	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:33.320390940 CEST	443	49736	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:33.320460081 CEST	49736	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:33.321185112 CEST	49736	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:33.321274042 CEST	443	49736	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:33.359741926 CEST	49737	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:33.359770060 CEST	443	49737	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:33.375742912 CEST	49736	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:33.375787973 CEST	443	49736	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:33.407740116 CEST	49737	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:33.423732042 CEST	49736	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:33.582325935 CEST	443	49737	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:33.582350016 CEST	443	49737	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:33.582360029 CEST	443	49737	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:33.582469940 CEST	443	49737	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:33.582501888 CEST	49737	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:33.582525969 CEST	49737	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:33.583719015 CEST	49737	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:33.583734989 CEST	443	49737	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:33.610341072 CEST	49740	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:33.610395908 CEST	443	49740	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:33.610460043 CEST	49740	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:33.611097097 CEST	49741	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:33.611141920 CEST	443	49741	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:33.611221075 CEST	49741	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:33.611752033 CEST	49742	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:33.611759901 CEST	443	49742	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:33.611881018 CEST	49736	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:33.611895084 CEST	49742	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:33.612339020 CEST	49740	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:33.612351894 CEST	443	49740	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:33.612675905 CEST	49741	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:33.612689018 CEST	443	49741	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:33.612910986 CEST	49742	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:33.612917900 CEST	443	49742	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:33.655457973 CEST	443	49736	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:33.868098021 CEST	443	49736	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:33.868124962 CEST	443	49736	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:33.868133068 CEST	443	49736	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:33.868170977 CEST	443	49736	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:33.868186951 CEST	443	49736	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:33.868191004 CEST	49736	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:33.868196964 CEST	443	49736	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:33.868227959 CEST	443	49736	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:33.868242979 CEST	443	49736	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:33.868252039 CEST	49736	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:33.868261099 CEST	443	49736	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:33.868283033 CEST	49736	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:33.868311882 CEST	443	49736	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:33.868354082 CEST	49736	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.170198917 CEST	49736	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.170260906 CEST	443	49736	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.322010040 CEST	443	49741	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.322303057 CEST	49741	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.322328091 CEST	443	49741	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.322706938 CEST	443	49741	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.323373079 CEST	49741	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.323441982 CEST	443	49741	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.323545933 CEST	443	49740	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.323844910 CEST	49740	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.323873997 CEST	443	49740	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.324167967 CEST	49741	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.324217081 CEST	443	49740	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.324893951 CEST	49740	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.324958086 CEST	443	49740	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.325134993 CEST	49740	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.327737093 CEST	443	49742	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.327943087 CEST	49742	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.327951908 CEST	443	49742	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.328991890 CEST	443	49742	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.329050064 CEST	49742	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.329360008 CEST	49742	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.329423904 CEST	443	49742	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.329485893 CEST	49742	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.329493046 CEST	443	49742	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.367405891 CEST	443	49741	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.367441893 CEST	443	49740	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.380733967 CEST	49742	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.577553988 CEST	443	49741	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.577575922 CEST	443	49741	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.577620983 CEST	49741	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.577630997 CEST	443	49741	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.577641010 CEST	443	49741	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.577687979 CEST	49741	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.578495979 CEST	49741	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.578504086 CEST	443	49741	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.662837982 CEST	443	49740	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.662859917 CEST	443	49740	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.662873030 CEST	443	49740	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.662919044 CEST	49740	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.662964106 CEST	443	49740	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.662978888 CEST	49740	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.663011074 CEST	49740	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.666073084 CEST	443	49742	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.666100979 CEST	443	49742	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.666110039 CEST	443	49742	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.666122913 CEST	443	49742	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.666130066 CEST	443	49742	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.666141033 CEST	443	49742	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.666188955 CEST	49742	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.666223049 CEST	443	49742	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.666239977 CEST	49742	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.666271925 CEST	49742	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.668576956 CEST	443	49740	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.668608904 CEST	443	49740	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.668653965 CEST	49740	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.668664932 CEST	443	49740	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.668692112 CEST	49740	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.673516989 CEST	443	49742	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.673538923 CEST	443	49742	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.673620939 CEST	49742	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.673628092 CEST	443	49742	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.715728045 CEST	49742	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.715749979 CEST	49740	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.717430115 CEST	443	49742	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.717437983 CEST	443	49742	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.717499971 CEST	49742	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.717510939 CEST	443	49742	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.717524052 CEST	443	49742	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.717592001 CEST	49742	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.718116045 CEST	49742	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.718128920 CEST	443	49742	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.723160982 CEST	49747	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.723280907 CEST	443	49747	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.723371029 CEST	49747	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.723795891 CEST	49747	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.723833084 CEST	443	49747	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.749367952 CEST	443	49740	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.749388933 CEST	443	49740	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.749490023 CEST	49740	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.749490023 CEST	49740	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.749536037 CEST	443	49740	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.749592066 CEST	49740	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.754477978 CEST	443	49740	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.754494905 CEST	443	49740	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.754543066 CEST	49740	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.754558086 CEST	443	49740	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.754579067 CEST	49740	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.754596949 CEST	49740	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.755757093 CEST	443	49740	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.755781889 CEST	443	49740	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.755825996 CEST	443	49740	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.755825996 CEST	49740	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.755836010 CEST	443	49740	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.755872965 CEST	49740	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.755899906 CEST	443	49740	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.755911112 CEST	49748	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:34.755934954 CEST	443	49748	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:34.755951881 CEST	49740	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.755987883 CEST	49748	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:34.772207975 CEST	49748	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:34.772218943 CEST	443	49748	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:34.789375067 CEST	49740	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.789411068 CEST	443	49740	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.917399883 CEST	49749	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.917449951 CEST	443	49749	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.917517900 CEST	49749	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.919770956 CEST	49749	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.919783115 CEST	443	49749	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.920577049 CEST	49750	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.920586109 CEST	443	49750	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:34.921900988 CEST	49750	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.928468943 CEST	49750	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:34.928477049 CEST	443	49750	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:35.431513071 CEST	443	49747	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:35.435558081 CEST	49747	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:35.435648918 CEST	443	49747	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:35.436029911 CEST	443	49747	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:35.436597109 CEST	49747	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:35.436662912 CEST	443	49747	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:35.437125921 CEST	49747	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:35.466366053 CEST	49752	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:35.466419935 CEST	443	49752	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:35.466568947 CEST	49752	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:35.467032909 CEST	49752	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:35.467050076 CEST	443	49752	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:35.473428965 CEST	443	49748	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:35.473639011 CEST	49748	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:35.473648071 CEST	443	49748	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:35.474754095 CEST	443	49748	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:35.474808931 CEST	49748	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:35.475263119 CEST	49748	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:35.475321054 CEST	443	49748	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:35.475542068 CEST	49748	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:35.475548029 CEST	443	49748	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:35.479448080 CEST	443	49747	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:35.526751041 CEST	49748	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:35.627249002 CEST	443	49749	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:35.629513979 CEST	49749	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:35.629528046 CEST	443	49749	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:35.629879951 CEST	443	49749	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:35.656537056 CEST	49749	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:35.656601906 CEST	443	49749	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:35.656960011 CEST	49749	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:35.662569046 CEST	443	49750	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:35.678985119 CEST	49750	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:35.679006100 CEST	443	49750	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:35.680115938 CEST	443	49750	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:35.680248976 CEST	49750	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:35.687000036 CEST	443	49747	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:35.687020063 CEST	443	49747	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:35.687083006 CEST	443	49747	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:35.687086105 CEST	49747	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:35.687130928 CEST	49747	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:35.699407101 CEST	443	49749	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:35.745117903 CEST	49750	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:35.745212078 CEST	443	49750	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:35.750550032 CEST	49750	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:35.750566006 CEST	443	49750	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:35.796808004 CEST	49750	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:35.805490971 CEST	49747	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:35.805546045 CEST	443	49747	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:35.809711933 CEST	443	49748	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:35.809746981 CEST	443	49748	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:35.809757948 CEST	443	49748	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:35.809772968 CEST	443	49748	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:35.809818983 CEST	49748	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:35.809819937 CEST	443	49748	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:35.809855938 CEST	443	49748	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:35.809873104 CEST	49748	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:35.809873104 CEST	49748	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:35.809899092 CEST	49748	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:35.816098928 CEST	443	49748	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:35.816118002 CEST	443	49748	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:35.816178083 CEST	49748	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:35.816194057 CEST	443	49748	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:35.816206932 CEST	49748	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:35.856858015 CEST	443	49748	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:35.856928110 CEST	49748	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:35.856940985 CEST	443	49748	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:35.856976032 CEST	443	49748	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:35.856987000 CEST	443	49748	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:35.857036114 CEST	49748	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:35.863845110 CEST	49748	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:35.863861084 CEST	443	49748	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:35.885668039 CEST	443	49749	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:35.885859966 CEST	443	49749	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:35.885998964 CEST	49749	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:35.886497021 CEST	49749	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:35.886508942 CEST	443	49749	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:36.013911009 CEST	443	49750	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:36.013940096 CEST	443	49750	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:36.013947010 CEST	443	49750	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:36.013981104 CEST	443	49750	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:36.013998985 CEST	443	49750	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:36.014008999 CEST	443	49750	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:36.014043093 CEST	49750	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:36.014043093 CEST	49750	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:36.014061928 CEST	443	49750	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:36.014097929 CEST	49750	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:36.014106035 CEST	49750	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:36.024250984 CEST	443	49750	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:36.024324894 CEST	443	49750	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:36.024348021 CEST	49750	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:36.024427891 CEST	49750	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:36.024574995 CEST	49750	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:36.024588108 CEST	443	49750	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:36.198707104 CEST	443	49752	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:36.210264921 CEST	49752	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:36.210284948 CEST	443	49752	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:36.211313009 CEST	443	49752	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:36.211378098 CEST	49752	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:36.212224007 CEST	49752	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:36.212285042 CEST	443	49752	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:36.212421894 CEST	49752	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:36.212430954 CEST	443	49752	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:36.259788990 CEST	49752	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:36.540990114 CEST	443	49752	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:36.541017056 CEST	443	49752	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:36.541024923 CEST	443	49752	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:36.541053057 CEST	443	49752	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:36.541064978 CEST	443	49752	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:36.541073084 CEST	443	49752	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:36.541254044 CEST	49752	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:36.541254044 CEST	49752	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:36.541284084 CEST	443	49752	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:36.541342974 CEST	49752	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:36.553752899 CEST	443	49752	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:36.553769112 CEST	443	49752	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:36.553869963 CEST	49752	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:36.553880930 CEST	443	49752	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:36.594774961 CEST	49752	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:36.621879101 CEST	443	49752	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:36.621886969 CEST	443	49752	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:36.621917963 CEST	443	49752	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:36.621956110 CEST	49752	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:36.621968031 CEST	443	49752	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:36.621999979 CEST	49752	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:36.622061014 CEST	49752	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:36.644696951 CEST	443	49752	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:36.644711018 CEST	443	49752	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:36.644829988 CEST	49752	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:36.644839048 CEST	443	49752	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:36.644927979 CEST	49752	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:36.646334887 CEST	443	49752	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:36.646348953 CEST	443	49752	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:36.646409988 CEST	49752	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:36.646418095 CEST	443	49752	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:36.646497965 CEST	49752	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:36.646523952 CEST	443	49752	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:36.646598101 CEST	443	49752	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:36.646621943 CEST	49752	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:36.646687984 CEST	49752	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:36.662272930 CEST	49752	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:36.667799950 CEST	49753	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:36.667896032 CEST	443	49753	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:36.667977095 CEST	49753	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:36.669493914 CEST	49753	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:36.669529915 CEST	443	49753	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:36.670720100 CEST	49752	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:36.670737982 CEST	443	49752	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:36.686561108 CEST	49755	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:36.686584949 CEST	443	49755	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:36.686723948 CEST	49755	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:36.686989069 CEST	49755	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:36.687002897 CEST	443	49755	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:36.698892117 CEST	49756	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:36.698935032 CEST	443	49756	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:36.699139118 CEST	49756	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:36.699697018 CEST	49756	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:36.699733019 CEST	443	49756	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:36.704005957 CEST	49757	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:36.704022884 CEST	443	49757	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:36.704113960 CEST	49757	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:36.704521894 CEST	49757	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:36.704530954 CEST	443	49757	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:37.385303974 CEST	443	49755	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:37.386082888 CEST	49755	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:37.386110067 CEST	443	49755	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:37.386471033 CEST	443	49755	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:37.387094975 CEST	49755	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:37.387166977 CEST	443	49755	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:37.387479067 CEST	49755	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:37.391788006 CEST	443	49753	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:37.392278910 CEST	49753	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:37.392360926 CEST	443	49753	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:37.392724037 CEST	443	49753	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:37.393435955 CEST	49753	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:37.393512964 CEST	443	49753	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:37.394615889 CEST	49753	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:37.400528908 CEST	443	49756	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:37.401066065 CEST	49756	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:37.401093006 CEST	443	49756	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:37.401432037 CEST	443	49756	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:37.402098894 CEST	49756	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:37.402169943 CEST	443	49756	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:37.403280020 CEST	49756	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:37.424125910 CEST	443	49757	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:37.424580097 CEST	49757	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:37.424592972 CEST	443	49757	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:37.425669909 CEST	443	49757	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:37.425730944 CEST	49757	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:37.426295042 CEST	49757	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:37.426353931 CEST	443	49757	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:37.426619053 CEST	49757	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:37.426625013 CEST	443	49757	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:37.435403109 CEST	443	49755	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:37.435446024 CEST	443	49753	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:37.447401047 CEST	443	49756	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:37.477631092 CEST	49757	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:37.640187979 CEST	443	49755	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:37.640222073 CEST	443	49755	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:37.640300989 CEST	443	49755	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:37.640331030 CEST	49755	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:37.640459061 CEST	49755	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:37.641158104 CEST	49755	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:37.641191006 CEST	443	49755	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:37.649907112 CEST	443	49753	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:37.649971008 CEST	443	49753	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:37.650027037 CEST	49753	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:37.653182030 CEST	49753	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:37.653198957 CEST	443	49753	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:37.654041052 CEST	443	49756	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:37.654102087 CEST	443	49756	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:37.654154062 CEST	49756	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:37.665283918 CEST	49758	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:37.665326118 CEST	443	49758	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:37.665376902 CEST	49758	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:37.665756941 CEST	49758	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:37.665769100 CEST	443	49758	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:37.666316986 CEST	49756	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:37.666333914 CEST	443	49756	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:37.675925970 CEST	49759	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:37.675946951 CEST	443	49759	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:37.676002026 CEST	49759	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:37.676366091 CEST	49759	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:37.676378965 CEST	443	49759	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:37.763045073 CEST	443	49757	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:37.763072968 CEST	443	49757	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:37.763081074 CEST	443	49757	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:37.763113976 CEST	443	49757	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:37.763128042 CEST	443	49757	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:37.763129950 CEST	49757	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:37.763142109 CEST	443	49757	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:37.763158083 CEST	443	49757	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:37.763180017 CEST	49757	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:37.763201952 CEST	49757	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:37.780411005 CEST	443	49757	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:37.780456066 CEST	49757	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:37.780461073 CEST	443	49757	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:37.780482054 CEST	443	49757	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:37.780514956 CEST	49757	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:37.781565905 CEST	49757	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:37.781575918 CEST	443	49757	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:38.364526033 CEST	443	49758	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:38.364850998 CEST	49758	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:38.364918947 CEST	443	49758	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:38.365293026 CEST	443	49758	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:38.365626097 CEST	49758	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:38.365705013 CEST	443	49758	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:38.365758896 CEST	49758	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:38.394681931 CEST	443	49759	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:38.394927979 CEST	49759	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:38.394990921 CEST	443	49759	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:38.395350933 CEST	443	49759	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:38.395636082 CEST	49759	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:38.395709038 CEST	443	49759	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:38.395780087 CEST	49759	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:38.407402039 CEST	443	49758	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:38.418613911 CEST	49758	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:38.443399906 CEST	443	49759	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:38.450618982 CEST	49759	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:38.646023035 CEST	443	49758	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:38.646109104 CEST	443	49758	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:38.646161079 CEST	49758	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:38.668509960 CEST	443	49759	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:38.668587923 CEST	443	49759	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:38.668649912 CEST	49759	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:39.270478010 CEST	49758	443	192.168.2.7	108.128.52.91
Sep 29, 2024 15:17:39.270519972 CEST	443	49758	108.128.52.91	192.168.2.7
Sep 29, 2024 15:17:39.271316051 CEST	49759	443	192.168.2.7	54.171.84.62
Sep 29, 2024 15:17:39.271354914 CEST	443	49759	54.171.84.62	192.168.2.7
Sep 29, 2024 15:17:42.370237112 CEST	49677	443	192.168.2.7	20.50.201.200
Sep 29, 2024 15:17:46.593344927 CEST	49760	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:46.593413115 CEST	443	49760	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:46.593478918 CEST	49760	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:46.593641996 CEST	49761	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:46.593703032 CEST	443	49761	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:46.593969107 CEST	49761	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:46.594127893 CEST	49760	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:46.594140053 CEST	443	49760	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:46.594304085 CEST	49761	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:46.594321012 CEST	443	49761	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:47.128240108 CEST	443	49761	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:47.128490925 CEST	49761	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:47.128515959 CEST	443	49761	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:47.129051924 CEST	443	49761	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:47.129348040 CEST	49761	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:47.129417896 CEST	443	49761	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:47.129506111 CEST	49761	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:47.129519939 CEST	443	49761	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:47.130994081 CEST	443	49760	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:47.131207943 CEST	49760	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:47.131232023 CEST	443	49760	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:47.131717920 CEST	443	49760	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:47.132067919 CEST	49760	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:47.132128954 CEST	443	49760	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:47.186384916 CEST	49760	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:47.405698061 CEST	443	49761	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:47.405735016 CEST	443	49761	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:47.405766010 CEST	443	49761	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:47.405791044 CEST	49761	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:47.405821085 CEST	443	49761	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:47.405867100 CEST	49761	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:47.406059980 CEST	443	49761	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:47.406115055 CEST	49761	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:47.410517931 CEST	443	49761	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:47.410577059 CEST	49761	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:47.493376017 CEST	443	49761	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:47.493458986 CEST	49761	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:47.493490934 CEST	443	49761	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:47.493510008 CEST	443	49761	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:47.493560076 CEST	49761	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:47.840184927 CEST	49761	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:47.840223074 CEST	443	49761	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:47.851747036 CEST	49760	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:47.851843119 CEST	443	49760	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:48.076528072 CEST	443	49760	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:48.076649904 CEST	443	49760	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:48.076765060 CEST	49760	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:48.087976933 CEST	49760	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:48.088021040 CEST	443	49760	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:48.132178068 CEST	49762	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:48.132236958 CEST	443	49762	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:48.132328987 CEST	49762	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:48.132949114 CEST	49762	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:48.132972002 CEST	443	49762	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:48.148540974 CEST	49763	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:48.148586035 CEST	443	49763	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:48.148653030 CEST	49763	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:48.149590969 CEST	49763	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:48.149605036 CEST	443	49763	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:48.287060976 CEST	49722	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:48.295281887 CEST	49764	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:48.295324087 CEST	443	49764	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:48.295408010 CEST	49764	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:48.295954943 CEST	49764	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:48.295969009 CEST	443	49764	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:48.331415892 CEST	443	49722	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:48.395838022 CEST	49765	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:48.395896912 CEST	443	49765	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:48.396090984 CEST	49765	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:48.396588087 CEST	49765	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:48.396605968 CEST	443	49765	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:48.476897001 CEST	443	49722	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:48.477092028 CEST	443	49722	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:48.477204084 CEST	49722	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:48.477274895 CEST	443	49722	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:48.477308989 CEST	443	49722	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:48.477509975 CEST	49722	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:48.514476061 CEST	49766	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:48.514544010 CEST	443	49766	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:48.514624119 CEST	49766	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:48.624397993 CEST	49766	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:48.624413967 CEST	443	49766	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:48.634123087 CEST	49722	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:48.634182930 CEST	443	49722	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:48.726871014 CEST	443	49762	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:48.727247953 CEST	49762	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:48.727281094 CEST	443	49762	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:48.728713989 CEST	443	49762	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:48.729826927 CEST	49762	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:48.730283022 CEST	443	49762	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:48.730402946 CEST	49762	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:48.771410942 CEST	443	49762	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:48.785597086 CEST	443	49763	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:48.788592100 CEST	49763	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:48.788629055 CEST	443	49763	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:48.788985014 CEST	443	49763	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:48.790337086 CEST	49763	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:48.790460110 CEST	443	49763	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:48.845366955 CEST	49763	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:48.944108963 CEST	443	49765	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:48.944550037 CEST	443	49764	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:48.944936037 CEST	49765	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:48.944957018 CEST	443	49765	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:48.945084095 CEST	49764	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:48.945107937 CEST	443	49764	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:48.945341110 CEST	443	49765	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:48.945442915 CEST	443	49764	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:48.945885897 CEST	49765	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:48.945957899 CEST	443	49765	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:48.946708918 CEST	49764	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:48.946779013 CEST	443	49764	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:48.947227955 CEST	49765	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:48.947400093 CEST	49764	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:48.947429895 CEST	443	49764	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:48.960174084 CEST	443	49762	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:48.960314035 CEST	443	49762	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:48.960617065 CEST	49762	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:48.965461969 CEST	49762	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:48.965496063 CEST	443	49762	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:48.991410017 CEST	443	49765	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:49.175518990 CEST	443	49765	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:49.175652981 CEST	443	49765	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:49.175865889 CEST	49765	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:49.178215027 CEST	49765	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:49.178237915 CEST	443	49765	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:49.343303919 CEST	443	49766	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:49.343657017 CEST	49766	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:49.343689919 CEST	443	49766	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:49.344041109 CEST	443	49766	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:49.344394922 CEST	49766	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:49.344474077 CEST	443	49766	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:49.344588041 CEST	49766	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:49.391413927 CEST	443	49766	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:49.441104889 CEST	443	49764	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:49.441160917 CEST	443	49764	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:49.441198111 CEST	443	49764	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:49.441215992 CEST	49764	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:49.441241980 CEST	443	49764	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:49.441283941 CEST	49764	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:49.441288948 CEST	443	49764	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:49.447638988 CEST	443	49764	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:49.447680950 CEST	443	49764	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:49.447695971 CEST	49764	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:49.447704077 CEST	443	49764	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:49.447745085 CEST	49764	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:49.447750092 CEST	443	49764	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:49.453355074 CEST	443	49764	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:49.453412056 CEST	49764	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:49.453421116 CEST	443	49764	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:49.459892988 CEST	443	49764	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:49.459947109 CEST	49764	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:49.459953070 CEST	443	49764	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:49.500363111 CEST	49764	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:49.531630039 CEST	443	49764	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:49.531692982 CEST	443	49764	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:49.531724930 CEST	443	49764	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:49.531773090 CEST	49764	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:49.531796932 CEST	443	49764	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:49.531841040 CEST	49764	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:49.538033009 CEST	443	49764	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:49.542865992 CEST	443	49764	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:49.542901993 CEST	443	49764	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:49.542920113 CEST	49764	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:49.542937040 CEST	443	49764	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:49.542977095 CEST	49764	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:49.549124956 CEST	443	49764	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:49.555139065 CEST	443	49764	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:49.555203915 CEST	49764	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:49.555221081 CEST	443	49764	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:49.561383009 CEST	443	49764	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:49.561444044 CEST	443	49764	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:49.561445951 CEST	49764	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:49.561458111 CEST	443	49764	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:49.561506987 CEST	49764	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:49.567034006 CEST	443	49764	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:49.567198038 CEST	443	49764	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:49.567271948 CEST	49764	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:49.567403078 CEST	49764	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:49.567421913 CEST	443	49764	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:49.627955914 CEST	443	49766	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:49.628042936 CEST	443	49766	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:49.628561020 CEST	49766	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:49.697765112 CEST	49766	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:49.697798967 CEST	443	49766	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:49.709429026 CEST	49767	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:49.709486961 CEST	443	49767	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:49.709896088 CEST	49767	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:49.711405993 CEST	49767	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:49.711415052 CEST	443	49767	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:50.255292892 CEST	443	49767	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:50.297533035 CEST	49767	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:50.497795105 CEST	49767	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:50.497828007 CEST	443	49767	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:50.498311996 CEST	443	49767	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:50.499515057 CEST	49767	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:50.499633074 CEST	443	49767	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:50.500462055 CEST	49767	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:50.500484943 CEST	443	49767	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:50.735064030 CEST	443	49767	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:50.735200882 CEST	443	49767	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:50.735256910 CEST	49767	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:50.760907888 CEST	49767	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:50.760937929 CEST	443	49767	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:51.450455904 CEST	49771	443	192.168.2.7	142.250.186.164
Sep 29, 2024 15:17:51.450508118 CEST	443	49771	142.250.186.164	192.168.2.7
Sep 29, 2024 15:17:51.450587034 CEST	49771	443	192.168.2.7	142.250.186.164
Sep 29, 2024 15:17:51.451122046 CEST	49771	443	192.168.2.7	142.250.186.164
Sep 29, 2024 15:17:51.451139927 CEST	443	49771	142.250.186.164	192.168.2.7
Sep 29, 2024 15:17:51.723526955 CEST	49772	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:51.723575115 CEST	443	49772	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:51.723643064 CEST	49772	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:51.723869085 CEST	49772	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:51.723874092 CEST	443	49772	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:52.079229116 CEST	443	49771	142.250.186.164	192.168.2.7
Sep 29, 2024 15:17:52.085258961 CEST	49771	443	192.168.2.7	142.250.186.164
Sep 29, 2024 15:17:52.085284948 CEST	443	49771	142.250.186.164	192.168.2.7
Sep 29, 2024 15:17:52.086391926 CEST	443	49771	142.250.186.164	192.168.2.7
Sep 29, 2024 15:17:52.086457968 CEST	49771	443	192.168.2.7	142.250.186.164
Sep 29, 2024 15:17:52.087089062 CEST	49771	443	192.168.2.7	142.250.186.164
Sep 29, 2024 15:17:52.087157011 CEST	443	49771	142.250.186.164	192.168.2.7
Sep 29, 2024 15:17:52.087352991 CEST	49771	443	192.168.2.7	142.250.186.164
Sep 29, 2024 15:17:52.087363958 CEST	443	49771	142.250.186.164	192.168.2.7
Sep 29, 2024 15:17:52.136739969 CEST	49771	443	192.168.2.7	142.250.186.164
Sep 29, 2024 15:17:52.278234005 CEST	443	49772	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:52.285069942 CEST	49772	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:52.285096884 CEST	443	49772	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:52.285495043 CEST	443	49772	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:52.285985947 CEST	49772	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:52.286051035 CEST	443	49772	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:52.286329031 CEST	49772	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:52.331403971 CEST	443	49772	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:52.357702971 CEST	443	49771	142.250.186.164	192.168.2.7
Sep 29, 2024 15:17:52.357774019 CEST	443	49771	142.250.186.164	192.168.2.7
Sep 29, 2024 15:17:52.358216047 CEST	49771	443	192.168.2.7	142.250.186.164
Sep 29, 2024 15:17:52.362118006 CEST	49771	443	192.168.2.7	142.250.186.164
Sep 29, 2024 15:17:52.362135887 CEST	443	49771	142.250.186.164	192.168.2.7
Sep 29, 2024 15:17:52.367948055 CEST	49775	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:52.367996931 CEST	443	49775	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:52.368227959 CEST	49775	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:52.368367910 CEST	49775	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:52.368381023 CEST	443	49775	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:52.451586962 CEST	49763	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:52.495417118 CEST	443	49763	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:52.515909910 CEST	443	49772	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:52.516025066 CEST	443	49772	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:52.516360998 CEST	49772	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:52.533169985 CEST	49772	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:52.533205986 CEST	443	49772	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:52.648571968 CEST	443	49763	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:52.648648024 CEST	443	49763	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:52.651871920 CEST	49763	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:52.974123955 CEST	49763	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:52.974157095 CEST	443	49763	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:52.993663073 CEST	49776	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:52.993711948 CEST	443	49776	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:52.993777990 CEST	49776	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:52.994173050 CEST	49776	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:52.994187117 CEST	443	49776	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:53.005959988 CEST	443	49775	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:53.006351948 CEST	49775	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:53.006375074 CEST	443	49775	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:53.006654024 CEST	443	49775	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:53.007062912 CEST	49775	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:53.007124901 CEST	443	49775	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:53.007270098 CEST	49775	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:53.051399946 CEST	443	49775	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:53.058073997 CEST	49775	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:53.289081097 CEST	443	49775	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:53.289329052 CEST	443	49775	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:53.289383888 CEST	49775	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:53.291300058 CEST	49775	443	192.168.2.7	142.250.184.228
Sep 29, 2024 15:17:53.291315079 CEST	443	49775	142.250.184.228	192.168.2.7
Sep 29, 2024 15:17:53.623034954 CEST	443	49776	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:53.623406887 CEST	49776	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:53.623425007 CEST	443	49776	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:53.623766899 CEST	443	49776	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:53.624160051 CEST	49776	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:53.624226093 CEST	443	49776	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:53.624463081 CEST	49776	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:53.667402983 CEST	443	49776	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:53.909626961 CEST	443	49776	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:53.909830093 CEST	443	49776	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:53.910125971 CEST	49776	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:53.910343885 CEST	49776	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:53.910372019 CEST	443	49776	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:53.910384893 CEST	49776	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:53.910418987 CEST	49776	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:54.584549904 CEST	49777	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:54.584587097 CEST	443	49777	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:54.584836960 CEST	49778	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:54.584846973 CEST	443	49778	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:54.584856987 CEST	49777	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:54.585149050 CEST	49778	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:54.585308075 CEST	49778	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:54.585308075 CEST	49777	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:54.585315943 CEST	443	49778	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:54.585326910 CEST	443	49777	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:55.124128103 CEST	443	49777	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:55.124814034 CEST	49777	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:55.124838114 CEST	443	49777	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:55.125181913 CEST	443	49777	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:55.130623102 CEST	49777	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:55.130703926 CEST	443	49777	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:55.130911112 CEST	49777	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:55.130923033 CEST	443	49777	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:55.138328075 CEST	443	49778	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:55.139868975 CEST	49778	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:55.139878988 CEST	443	49778	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:55.140239000 CEST	443	49778	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:55.142503023 CEST	49778	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:55.142574072 CEST	443	49778	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:55.196757078 CEST	49778	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:55.409212112 CEST	443	49777	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:55.409280062 CEST	443	49777	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:55.409307003 CEST	443	49777	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:55.409331083 CEST	49777	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:55.409354925 CEST	443	49777	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:55.409396887 CEST	49777	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:55.409749031 CEST	443	49777	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:55.409796000 CEST	49777	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:55.410213947 CEST	443	49777	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:55.410264015 CEST	49777	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:55.676348925 CEST	443	49777	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:55.676422119 CEST	49777	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:55.676440001 CEST	443	49777	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:55.676496983 CEST	443	49777	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:55.676538944 CEST	49777	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:55.677403927 CEST	49777	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:55.677418947 CEST	443	49777	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:55.690738916 CEST	49778	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:55.690798044 CEST	443	49778	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:55.919575930 CEST	443	49778	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:55.919703007 CEST	443	49778	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:55.919761896 CEST	49778	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:55.931221962 CEST	49778	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:55.931247950 CEST	443	49778	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:56.063373089 CEST	49779	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:56.063416004 CEST	443	49779	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:56.063477993 CEST	49779	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:56.063954115 CEST	49779	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:56.063967943 CEST	443	49779	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:56.070704937 CEST	49780	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:56.070748091 CEST	443	49780	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:56.070822001 CEST	49780	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:56.072207928 CEST	49780	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:56.072227955 CEST	443	49780	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:56.375541925 CEST	49781	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:56.375653982 CEST	443	49781	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:56.375755072 CEST	49781	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:56.376446962 CEST	49782	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:56.376467943 CEST	443	49782	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:56.376562119 CEST	49782	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:56.377331018 CEST	49781	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:56.377358913 CEST	443	49781	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:56.377751112 CEST	49782	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:56.377774954 CEST	443	49782	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:56.610898972 CEST	443	49779	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:56.662240982 CEST	49779	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:56.683480024 CEST	49779	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:56.683506012 CEST	443	49779	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:56.684114933 CEST	443	49779	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:56.684715033 CEST	49779	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:56.684803963 CEST	443	49779	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:56.685333967 CEST	49779	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:56.685333967 CEST	49779	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:56.685368061 CEST	443	49779	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:56.701327085 CEST	443	49780	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:56.704469919 CEST	49780	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:56.704495907 CEST	443	49780	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:56.704865932 CEST	443	49780	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:56.705240965 CEST	49780	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:56.705312967 CEST	443	49780	142.250.186.142	192.168.2.7
Sep 29, 2024 15:17:56.757224083 CEST	49780	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:17:56.925232887 CEST	443	49779	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:56.925374985 CEST	443	49779	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:56.925445080 CEST	49779	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:56.926690102 CEST	49779	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:56.926708937 CEST	443	49779	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:57.006736040 CEST	443	49781	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:57.007129908 CEST	49781	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:57.007184029 CEST	443	49781	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:57.007584095 CEST	443	49781	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:57.007950068 CEST	49781	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:57.008027077 CEST	443	49781	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:57.008140087 CEST	49781	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:57.008167982 CEST	443	49781	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:57.026534081 CEST	443	49782	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:57.026833057 CEST	49782	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:57.026858091 CEST	443	49782	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:57.027196884 CEST	443	49782	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:57.027669907 CEST	49782	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:57.027740002 CEST	443	49782	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:57.027918100 CEST	49782	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:57.075396061 CEST	443	49782	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:57.214368105 CEST	49783	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:57.214397907 CEST	443	49783	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:57.214462042 CEST	49783	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:57.214762926 CEST	49783	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:57.214775085 CEST	443	49783	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:57.314662933 CEST	443	49782	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:57.314735889 CEST	443	49782	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:57.314799070 CEST	49782	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:57.341810942 CEST	49782	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:57.341876030 CEST	443	49782	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:57.389157057 CEST	49784	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:57.389206886 CEST	443	49784	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:57.389417887 CEST	49784	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:57.390522957 CEST	49784	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:57.390558004 CEST	443	49784	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:57.507754087 CEST	443	49781	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:57.507884026 CEST	443	49781	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:57.507976055 CEST	443	49781	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:57.508040905 CEST	49781	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:57.508055925 CEST	443	49781	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:57.508109093 CEST	443	49781	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:57.508157015 CEST	49781	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:57.508198977 CEST	443	49781	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:57.508286953 CEST	49781	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:57.508302927 CEST	443	49781	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:57.513499022 CEST	443	49781	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:57.513575077 CEST	49781	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:57.513590097 CEST	443	49781	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:57.529473066 CEST	443	49781	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:57.529894114 CEST	49781	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:57.529936075 CEST	443	49781	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:57.560893059 CEST	443	49781	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:57.561008930 CEST	49781	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:57.561072111 CEST	443	49781	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:57.615447998 CEST	49781	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:57.673348904 CEST	443	49781	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:57.674036026 CEST	443	49781	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:57.674061060 CEST	443	49781	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:57.674102068 CEST	49781	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:57.674118996 CEST	443	49781	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:57.674160957 CEST	49781	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:57.677834034 CEST	443	49781	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:57.677931070 CEST	443	49781	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:57.677958965 CEST	443	49781	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:57.677973986 CEST	49781	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:57.677980900 CEST	443	49781	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:57.678019047 CEST	49781	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:57.678778887 CEST	443	49781	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:57.679239035 CEST	443	49781	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:57.679289103 CEST	49781	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:57.679291964 CEST	443	49781	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:57.679471016 CEST	443	49781	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:57.679678917 CEST	443	49781	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:57.679717064 CEST	49781	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:57.679719925 CEST	443	49781	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:57.679755926 CEST	49781	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:57.679867983 CEST	443	49781	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:57.680123091 CEST	443	49781	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:57.680322886 CEST	49781	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:57.875694036 CEST	443	49783	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:57.925493002 CEST	49783	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:57.994462967 CEST	49783	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:57.994477987 CEST	443	49783	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:57.995013952 CEST	443	49783	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:57.995557070 CEST	49783	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:57.995626926 CEST	443	49783	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:57.996906996 CEST	49783	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:58.043401957 CEST	443	49783	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:58.087793112 CEST	49781	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:58.087866068 CEST	443	49781	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:58.115607977 CEST	443	49784	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:58.139430046 CEST	49784	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:58.139497995 CEST	443	49784	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:58.140095949 CEST	443	49784	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:58.143249989 CEST	49784	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:58.143322945 CEST	443	49784	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:58.143620968 CEST	49784	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:58.154314995 CEST	49785	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:58.154361010 CEST	443	49785	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:58.154428005 CEST	49785	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:58.155267954 CEST	49785	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:58.155284882 CEST	443	49785	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:58.191406012 CEST	443	49784	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:58.225629091 CEST	443	49783	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:58.225737095 CEST	443	49783	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:58.225790024 CEST	49783	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:58.227113008 CEST	49783	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:58.227129936 CEST	443	49783	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:58.408984900 CEST	443	49784	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:58.409111977 CEST	443	49784	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:58.409164906 CEST	49784	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:58.410094023 CEST	49784	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:17:58.410115004 CEST	443	49784	216.58.206.46	192.168.2.7
Sep 29, 2024 15:17:58.693377018 CEST	443	49785	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:58.700710058 CEST	49785	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:58.700726032 CEST	443	49785	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:58.701087952 CEST	443	49785	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:58.724076986 CEST	49785	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:58.724159956 CEST	443	49785	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:58.725150108 CEST	49785	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:58.725173950 CEST	443	49785	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:58.954834938 CEST	443	49785	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:58.954946995 CEST	443	49785	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:58.954998016 CEST	49785	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:58.958053112 CEST	49785	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:58.958076954 CEST	443	49785	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:59.365787029 CEST	49787	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:59.365835905 CEST	443	49787	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:59.365916967 CEST	49787	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:59.368371964 CEST	49787	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:59.368402958 CEST	443	49787	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:59.902981043 CEST	443	49787	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:59.903520107 CEST	49787	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:59.903563976 CEST	443	49787	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:59.903919935 CEST	443	49787	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:59.904825926 CEST	49787	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:59.904896021 CEST	443	49787	76.223.26.96	192.168.2.7
Sep 29, 2024 15:17:59.905306101 CEST	49787	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:17:59.951401949 CEST	443	49787	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:00.144018888 CEST	443	49787	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:00.144100904 CEST	443	49787	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:00.144238949 CEST	49787	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:00.743778944 CEST	49787	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:00.743846893 CEST	443	49787	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:00.745790005 CEST	49780	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:18:00.787429094 CEST	443	49780	142.250.186.142	192.168.2.7
Sep 29, 2024 15:18:00.944277048 CEST	443	49780	142.250.186.142	192.168.2.7
Sep 29, 2024 15:18:00.944355965 CEST	443	49780	142.250.186.142	192.168.2.7
Sep 29, 2024 15:18:00.944499016 CEST	49780	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:18:00.944940090 CEST	49780	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:18:00.944992065 CEST	443	49780	142.250.186.142	192.168.2.7
Sep 29, 2024 15:18:00.945018053 CEST	49780	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:18:00.945060015 CEST	49780	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:18:01.250616074 CEST	49788	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:18:01.250729084 CEST	443	49788	142.250.186.142	192.168.2.7
Sep 29, 2024 15:18:01.250842094 CEST	49788	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:18:01.251157045 CEST	49788	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:18:01.251185894 CEST	443	49788	142.250.186.142	192.168.2.7
Sep 29, 2024 15:18:01.289683104 CEST	49789	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:01.289740086 CEST	443	49789	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:01.289815903 CEST	49789	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:01.307447910 CEST	49790	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:01.307471037 CEST	443	49790	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:01.307723045 CEST	49790	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:01.307903051 CEST	49789	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:01.307920933 CEST	443	49789	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:01.309257030 CEST	49790	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:01.309271097 CEST	443	49790	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:01.838440895 CEST	443	49789	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:01.846705914 CEST	443	49790	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:01.869887114 CEST	49790	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:01.869920015 CEST	443	49790	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:01.870187998 CEST	49789	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:01.870197058 CEST	443	49789	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:01.870464087 CEST	443	49790	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:01.870637894 CEST	443	49789	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:01.870987892 CEST	49790	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:01.871062040 CEST	443	49790	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:01.874577045 CEST	49789	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:01.874655008 CEST	443	49789	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:01.875152111 CEST	49790	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:01.875174046 CEST	443	49790	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:01.880295992 CEST	443	49788	142.250.186.142	192.168.2.7
Sep 29, 2024 15:18:01.881198883 CEST	49788	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:18:01.881259918 CEST	443	49788	142.250.186.142	192.168.2.7
Sep 29, 2024 15:18:01.881808996 CEST	443	49788	142.250.186.142	192.168.2.7
Sep 29, 2024 15:18:01.882340908 CEST	49788	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:18:01.882421017 CEST	443	49788	142.250.186.142	192.168.2.7
Sep 29, 2024 15:18:01.882565975 CEST	49788	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:18:01.917058945 CEST	49789	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:01.923414946 CEST	443	49788	142.250.186.142	192.168.2.7
Sep 29, 2024 15:18:02.158406973 CEST	443	49790	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:02.158474922 CEST	443	49790	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:02.158524036 CEST	443	49790	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:02.158540010 CEST	49790	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:02.158560991 CEST	443	49790	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:02.158627987 CEST	49790	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:02.158946991 CEST	443	49790	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:02.159023046 CEST	49790	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:02.163167000 CEST	443	49790	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:02.163233995 CEST	49790	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:02.167813063 CEST	443	49788	142.250.186.142	192.168.2.7
Sep 29, 2024 15:18:02.168173075 CEST	443	49788	142.250.186.142	192.168.2.7
Sep 29, 2024 15:18:02.168250084 CEST	49788	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:18:02.247246027 CEST	443	49790	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:02.247350931 CEST	49790	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:02.247361898 CEST	443	49790	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:02.247404099 CEST	443	49790	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:02.247417927 CEST	49790	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:02.247443914 CEST	49790	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:02.539932966 CEST	49788	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:18:02.540009022 CEST	443	49788	142.250.186.142	192.168.2.7
Sep 29, 2024 15:18:03.273284912 CEST	49790	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:03.273339033 CEST	443	49790	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:03.279021978 CEST	49789	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:03.279153109 CEST	443	49789	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:03.506478071 CEST	443	49789	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:03.506581068 CEST	443	49789	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:03.506625891 CEST	49789	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:03.508307934 CEST	49789	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:03.508327007 CEST	443	49789	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:03.517877102 CEST	49791	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:03.517930031 CEST	443	49791	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:03.517998934 CEST	49791	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:03.518331051 CEST	49791	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:03.518345118 CEST	443	49791	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:03.538450956 CEST	49792	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:03.538481951 CEST	443	49792	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:03.538561106 CEST	49792	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:03.541069984 CEST	49792	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:03.541104078 CEST	443	49792	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:03.545145988 CEST	49793	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:18:03.545212030 CEST	443	49793	142.250.186.142	192.168.2.7
Sep 29, 2024 15:18:03.545272112 CEST	49793	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:18:03.545450926 CEST	49793	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:18:03.545483112 CEST	443	49793	142.250.186.142	192.168.2.7
Sep 29, 2024 15:18:03.600208044 CEST	49794	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:03.600248098 CEST	443	49794	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:03.600404024 CEST	49794	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:03.600537062 CEST	49795	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:03.600564003 CEST	443	49795	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:03.600611925 CEST	49795	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:03.600860119 CEST	49794	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:03.600876093 CEST	443	49794	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:03.601016998 CEST	49795	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:03.601039886 CEST	443	49795	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.061244965 CEST	443	49791	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:04.061645031 CEST	49791	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:04.061708927 CEST	443	49791	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:04.062114000 CEST	443	49791	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:04.063101053 CEST	49791	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:04.063267946 CEST	443	49791	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:04.063945055 CEST	49791	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:04.067447901 CEST	443	49792	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:04.091526031 CEST	49792	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:04.091584921 CEST	443	49792	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:04.091959000 CEST	443	49792	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:04.093643904 CEST	49792	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:04.093712091 CEST	443	49792	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:04.094573975 CEST	49792	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:04.111398935 CEST	443	49791	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:04.139389992 CEST	443	49792	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:04.193890095 CEST	443	49793	142.250.186.142	192.168.2.7
Sep 29, 2024 15:18:04.194571018 CEST	49793	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:18:04.194634914 CEST	443	49793	142.250.186.142	192.168.2.7
Sep 29, 2024 15:18:04.195113897 CEST	443	49793	142.250.186.142	192.168.2.7
Sep 29, 2024 15:18:04.196270943 CEST	49793	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:18:04.196353912 CEST	443	49793	142.250.186.142	192.168.2.7
Sep 29, 2024 15:18:04.229650974 CEST	443	49795	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.230464935 CEST	443	49794	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.231003046 CEST	49795	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:04.231013060 CEST	443	49795	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.231303930 CEST	443	49795	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.231410980 CEST	49794	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:04.231435061 CEST	443	49794	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.231882095 CEST	443	49794	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.232266903 CEST	49795	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:04.232314110 CEST	443	49795	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.233205080 CEST	49794	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:04.233288050 CEST	443	49794	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.233581066 CEST	49795	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:04.233599901 CEST	443	49795	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.233653069 CEST	49794	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:04.239057064 CEST	49793	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:18:04.275403023 CEST	443	49794	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.291363955 CEST	443	49791	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:04.291460991 CEST	443	49791	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:04.291738033 CEST	49791	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:04.297327995 CEST	49791	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:04.297373056 CEST	443	49791	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:04.333328009 CEST	443	49792	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:04.333431959 CEST	443	49792	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:04.334259033 CEST	49792	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:04.334770918 CEST	49792	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:04.334784031 CEST	443	49792	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:04.520636082 CEST	443	49794	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.520720959 CEST	443	49794	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.522120953 CEST	49794	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:04.522149086 CEST	443	49794	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.522177935 CEST	49794	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:04.522450924 CEST	49794	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:04.534166098 CEST	49796	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:04.534198999 CEST	443	49796	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.534413099 CEST	49796	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:04.538182974 CEST	49796	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:04.538192987 CEST	443	49796	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.732961893 CEST	443	49795	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.733007908 CEST	443	49795	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.733036995 CEST	443	49795	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.733064890 CEST	443	49795	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.733102083 CEST	49795	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:04.733105898 CEST	443	49795	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.733124018 CEST	443	49795	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.733149052 CEST	49795	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:04.733207941 CEST	49795	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:04.739159107 CEST	443	49795	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.739289045 CEST	443	49795	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.739610910 CEST	49795	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:04.739617109 CEST	443	49795	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.755079985 CEST	443	49795	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.755131960 CEST	443	49795	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.755157948 CEST	443	49795	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.755182981 CEST	49795	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:04.755188942 CEST	443	49795	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.755228996 CEST	49795	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:04.819622993 CEST	443	49795	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.820359945 CEST	49795	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:04.820365906 CEST	443	49795	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.822082043 CEST	443	49795	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.822151899 CEST	49795	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:04.822158098 CEST	443	49795	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.828416109 CEST	443	49795	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.828526020 CEST	49795	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:04.828531981 CEST	443	49795	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.834722996 CEST	443	49795	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.834861040 CEST	49795	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:04.834865093 CEST	443	49795	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.841099024 CEST	443	49795	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.841259003 CEST	49795	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:04.841264009 CEST	443	49795	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.847476959 CEST	443	49795	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.847637892 CEST	49795	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:04.847662926 CEST	443	49795	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.853589058 CEST	443	49795	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.853790045 CEST	49795	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:04.853801012 CEST	443	49795	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.853853941 CEST	443	49795	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.853954077 CEST	49795	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:04.854239941 CEST	49795	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:04.854254961 CEST	443	49795	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:04.864602089 CEST	49797	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:04.864700079 CEST	443	49797	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:04.865010023 CEST	49797	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:04.865989923 CEST	49797	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:04.866025925 CEST	443	49797	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:05.184144020 CEST	443	49796	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:05.184545040 CEST	49796	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:05.184570074 CEST	443	49796	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:05.184880972 CEST	443	49796	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:05.185539961 CEST	49796	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:05.185707092 CEST	443	49796	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:05.185915947 CEST	49796	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:05.227399111 CEST	443	49796	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:05.245722055 CEST	49796	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:06.280467987 CEST	443	49796	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:06.280544043 CEST	443	49796	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:06.280751944 CEST	49796	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:06.280956984 CEST	49796	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:06.280973911 CEST	443	49796	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:06.285749912 CEST	443	49797	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:06.288220882 CEST	49797	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:06.288276911 CEST	443	49797	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:06.289474964 CEST	443	49797	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:06.292308092 CEST	49797	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:06.292598009 CEST	443	49797	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:06.292857885 CEST	49797	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:06.292886972 CEST	443	49797	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:06.529297113 CEST	443	49797	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:06.529429913 CEST	443	49797	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:06.529491901 CEST	49797	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:06.530791044 CEST	49797	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:06.530811071 CEST	443	49797	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:06.679908991 CEST	49798	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:06.679960966 CEST	443	49798	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:06.680059910 CEST	49798	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:06.680700064 CEST	49798	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:06.680720091 CEST	443	49798	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:07.211798906 CEST	443	49798	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:07.255072117 CEST	49798	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:07.280397892 CEST	49798	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:07.280431986 CEST	443	49798	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:07.281018972 CEST	443	49798	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:07.296156883 CEST	49798	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:07.296313047 CEST	443	49798	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:07.296782017 CEST	49798	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:07.343409061 CEST	443	49798	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:07.522208929 CEST	443	49798	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:07.522300005 CEST	443	49798	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:07.522365093 CEST	49798	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:07.555214882 CEST	49798	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:07.555264950 CEST	443	49798	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:08.838751078 CEST	49793	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:18:08.841684103 CEST	49799	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:18:08.841747999 CEST	443	49799	142.250.186.142	192.168.2.7
Sep 29, 2024 15:18:08.841828108 CEST	49799	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:18:08.842108965 CEST	49799	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:18:08.842118979 CEST	443	49799	142.250.186.142	192.168.2.7
Sep 29, 2024 15:18:08.879437923 CEST	443	49793	142.250.186.142	192.168.2.7
Sep 29, 2024 15:18:09.046648026 CEST	443	49793	142.250.186.142	192.168.2.7
Sep 29, 2024 15:18:09.046752930 CEST	443	49793	142.250.186.142	192.168.2.7
Sep 29, 2024 15:18:09.046854973 CEST	49793	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:18:09.054215908 CEST	49793	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:18:09.054261923 CEST	443	49793	142.250.186.142	192.168.2.7
Sep 29, 2024 15:18:09.627835035 CEST	443	49799	142.250.186.142	192.168.2.7
Sep 29, 2024 15:18:09.668800116 CEST	49799	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:18:09.668826103 CEST	443	49799	142.250.186.142	192.168.2.7
Sep 29, 2024 15:18:09.669579983 CEST	443	49799	142.250.186.142	192.168.2.7
Sep 29, 2024 15:18:09.671431065 CEST	49799	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:18:09.671566010 CEST	443	49799	142.250.186.142	192.168.2.7
Sep 29, 2024 15:18:09.673297882 CEST	49799	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:18:09.719400883 CEST	443	49799	142.250.186.142	192.168.2.7
Sep 29, 2024 15:18:09.917056084 CEST	443	49799	142.250.186.142	192.168.2.7
Sep 29, 2024 15:18:09.917156935 CEST	443	49799	142.250.186.142	192.168.2.7
Sep 29, 2024 15:18:09.917355061 CEST	49799	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:18:09.918229103 CEST	49799	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:18:09.918251038 CEST	443	49799	142.250.186.142	192.168.2.7
Sep 29, 2024 15:18:09.918263912 CEST	49799	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:18:09.918299913 CEST	49799	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:18:15.664340019 CEST	443	49738	104.98.116.138	192.168.2.7
Sep 29, 2024 15:18:15.664454937 CEST	49738	443	192.168.2.7	104.98.116.138
Sep 29, 2024 15:18:16.624185085 CEST	49801	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:16.624232054 CEST	443	49801	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:16.624356985 CEST	49801	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:16.624891043 CEST	49802	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:16.624900103 CEST	443	49802	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:16.624960899 CEST	49802	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:16.626002073 CEST	49802	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:16.626013041 CEST	443	49802	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:16.626312017 CEST	49801	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:16.626317978 CEST	443	49801	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:17.156843901 CEST	443	49802	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:17.157130957 CEST	49802	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:17.157150030 CEST	443	49802	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:17.157613039 CEST	443	49802	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:17.157955885 CEST	49802	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:17.158056021 CEST	443	49802	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:17.158143997 CEST	49802	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:17.158157110 CEST	443	49802	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:17.166460037 CEST	443	49801	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:17.166693926 CEST	49801	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:17.166707993 CEST	443	49801	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:17.167160988 CEST	443	49801	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:17.167553902 CEST	49801	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:17.168040037 CEST	443	49801	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:17.210988045 CEST	49801	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:17.413086891 CEST	443	49802	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:17.413141012 CEST	443	49802	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:17.413186073 CEST	443	49802	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:17.413242102 CEST	443	49802	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:17.413280964 CEST	49802	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:17.413304090 CEST	443	49802	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:17.413326979 CEST	49802	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:17.413590908 CEST	49802	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:17.414299011 CEST	443	49802	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:17.414438963 CEST	49802	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:17.500065088 CEST	443	49802	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:17.500227928 CEST	443	49802	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:17.500255108 CEST	49802	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:17.500339031 CEST	49802	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:17.502165079 CEST	49802	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:17.502185106 CEST	443	49802	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:17.504441023 CEST	49801	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:17.504499912 CEST	443	49801	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:17.739248991 CEST	443	49801	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:17.739356041 CEST	443	49801	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:17.741614103 CEST	49801	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:17.742609978 CEST	49801	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:17.742630005 CEST	443	49801	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:17.754323006 CEST	49804	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:17.754374027 CEST	443	49804	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:17.754543066 CEST	49804	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:17.755111933 CEST	49804	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:17.755131006 CEST	443	49804	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:17.766247034 CEST	49805	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:18:17.766287088 CEST	443	49805	142.250.186.142	192.168.2.7
Sep 29, 2024 15:18:17.766453981 CEST	49805	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:18:17.770230055 CEST	49805	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:18:17.770247936 CEST	443	49805	142.250.186.142	192.168.2.7
Sep 29, 2024 15:18:17.793648958 CEST	49807	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:17.793657064 CEST	49806	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:17.793690920 CEST	443	49807	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:17.793735027 CEST	443	49806	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:17.794228077 CEST	49806	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:17.794266939 CEST	49807	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:17.794605017 CEST	49806	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:17.794631958 CEST	49807	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:17.794632912 CEST	443	49806	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:17.794646978 CEST	443	49807	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:17.811032057 CEST	49808	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:17.811127901 CEST	443	49808	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:17.811263084 CEST	49808	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:17.811620951 CEST	49808	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:17.811655045 CEST	443	49808	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:18.292365074 CEST	443	49804	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:18.320470095 CEST	49804	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:18.320502043 CEST	443	49804	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:18.322489977 CEST	443	49804	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:18.343416929 CEST	49804	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:18.343705893 CEST	443	49804	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:18.343729019 CEST	49804	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:18.343743086 CEST	443	49804	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:18.349664927 CEST	443	49808	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:18.350585938 CEST	49808	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:18.350651979 CEST	443	49808	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:18.351615906 CEST	443	49808	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:18.352066994 CEST	49808	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:18.352164984 CEST	443	49808	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:18.352418900 CEST	49808	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:18.386322975 CEST	49804	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:18.395412922 CEST	443	49808	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:18.407902002 CEST	443	49805	142.250.186.142	192.168.2.7
Sep 29, 2024 15:18:18.451688051 CEST	443	49807	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:18.451781988 CEST	49805	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:18:18.456630945 CEST	443	49806	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:18.497895002 CEST	49807	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:18.500412941 CEST	49806	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:18.560029984 CEST	49805	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:18:18.560060978 CEST	443	49805	142.250.186.142	192.168.2.7
Sep 29, 2024 15:18:18.560174942 CEST	49806	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:18.560204983 CEST	443	49806	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:18.560290098 CEST	49807	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:18.560306072 CEST	443	49807	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:18.560707092 CEST	443	49805	142.250.186.142	192.168.2.7
Sep 29, 2024 15:18:18.560870886 CEST	443	49806	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:18.562087059 CEST	443	49807	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:18.579731941 CEST	443	49804	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:18.580085039 CEST	443	49804	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:18.580137968 CEST	49804	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:18.586566925 CEST	443	49808	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:18.586815119 CEST	443	49808	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:18.586878061 CEST	49808	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:18.607242107 CEST	49806	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:18.608760118 CEST	49807	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:18.610991001 CEST	49805	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:18:18.806528091 CEST	49807	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:18.806730986 CEST	443	49807	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:18.807168007 CEST	49806	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:18.807404995 CEST	443	49806	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:18.808492899 CEST	49805	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:18:18.808715105 CEST	443	49805	142.250.186.142	192.168.2.7
Sep 29, 2024 15:18:18.811044931 CEST	49807	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:18.811125994 CEST	443	49807	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:18.811330080 CEST	49806	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:18.816448927 CEST	49808	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:18.816521883 CEST	443	49808	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:18.819322109 CEST	49804	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:18.819340944 CEST	443	49804	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:18.855403900 CEST	443	49806	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:18.856379986 CEST	49805	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:18:19.006958961 CEST	443	49806	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:19.007065058 CEST	443	49806	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:19.007117987 CEST	49806	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:19.016730070 CEST	49806	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:19.016763926 CEST	443	49806	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:19.045921087 CEST	49809	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:19.045995951 CEST	443	49809	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:19.046067953 CEST	49809	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:19.046482086 CEST	49809	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:19.046502113 CEST	443	49809	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:19.208178043 CEST	443	49807	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:19.208228111 CEST	443	49807	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:19.208251953 CEST	443	49807	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:19.208261967 CEST	49807	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:19.208280087 CEST	443	49807	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:19.208319902 CEST	49807	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:19.208328962 CEST	443	49807	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:19.215327024 CEST	443	49807	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:19.215380907 CEST	49807	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:19.215398073 CEST	443	49807	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:19.215492010 CEST	443	49807	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:19.215529919 CEST	49807	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:19.215544939 CEST	443	49807	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:19.222615004 CEST	443	49807	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:19.222666025 CEST	49807	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:19.222673893 CEST	443	49807	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:19.229916096 CEST	443	49807	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:19.229963064 CEST	49807	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:19.229970932 CEST	443	49807	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:19.278382063 CEST	49807	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:19.296782970 CEST	443	49807	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:19.297823906 CEST	443	49807	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:19.297858953 CEST	443	49807	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:19.297885895 CEST	49807	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:19.297910929 CEST	443	49807	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:19.298007965 CEST	49807	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:19.305490971 CEST	443	49807	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:19.312736034 CEST	443	49807	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:19.312781096 CEST	49807	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:19.312805891 CEST	443	49807	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:19.319889069 CEST	443	49807	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:19.319966078 CEST	443	49807	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:19.319972992 CEST	49807	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:19.319994926 CEST	443	49807	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:19.320100069 CEST	49807	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:19.327294111 CEST	443	49807	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:19.333744049 CEST	443	49807	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:19.333806992 CEST	49807	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:19.333821058 CEST	443	49807	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:19.340200901 CEST	443	49807	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:19.340289116 CEST	443	49807	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:19.340301991 CEST	49807	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:19.340313911 CEST	443	49807	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:19.340516090 CEST	49807	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:19.340523005 CEST	443	49807	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:19.340585947 CEST	443	49807	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:19.340631962 CEST	49807	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:19.424472094 CEST	49807	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:19.424499035 CEST	443	49807	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:19.566414118 CEST	49810	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:19.566488028 CEST	443	49810	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:19.566556931 CEST	49810	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:19.566854954 CEST	49810	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:19.566871881 CEST	443	49810	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:19.685169935 CEST	443	49809	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:19.685403109 CEST	49809	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:19.685440063 CEST	443	49809	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:19.685791969 CEST	443	49809	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:19.686228037 CEST	49809	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:19.686306000 CEST	443	49809	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:19.686449051 CEST	49809	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:19.731400967 CEST	443	49809	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:20.016824961 CEST	443	49809	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:20.017241955 CEST	443	49809	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:20.017304897 CEST	49809	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:20.021424055 CEST	49809	443	192.168.2.7	216.58.206.46
Sep 29, 2024 15:18:20.021451950 CEST	443	49809	216.58.206.46	192.168.2.7
Sep 29, 2024 15:18:20.118829966 CEST	443	49810	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:20.138420105 CEST	49810	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:20.138434887 CEST	443	49810	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:20.138849020 CEST	443	49810	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:20.170595884 CEST	49810	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:20.170712948 CEST	443	49810	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:20.171061993 CEST	49810	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:20.171084881 CEST	443	49810	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:20.408211946 CEST	443	49810	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:20.408329010 CEST	443	49810	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:20.408390999 CEST	49810	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:20.705610037 CEST	49810	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:20.705651045 CEST	443	49810	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:21.438937902 CEST	49811	443	192.168.2.7	142.250.181.228
Sep 29, 2024 15:18:21.438985109 CEST	443	49811	142.250.181.228	192.168.2.7
Sep 29, 2024 15:18:21.439120054 CEST	49811	443	192.168.2.7	142.250.181.228
Sep 29, 2024 15:18:21.439598083 CEST	49811	443	192.168.2.7	142.250.181.228
Sep 29, 2024 15:18:21.439611912 CEST	443	49811	142.250.181.228	192.168.2.7
Sep 29, 2024 15:18:22.068254948 CEST	443	49811	142.250.181.228	192.168.2.7
Sep 29, 2024 15:18:22.068525076 CEST	49811	443	192.168.2.7	142.250.181.228
Sep 29, 2024 15:18:22.068546057 CEST	443	49811	142.250.181.228	192.168.2.7
Sep 29, 2024 15:18:22.068881989 CEST	443	49811	142.250.181.228	192.168.2.7
Sep 29, 2024 15:18:22.069955111 CEST	49811	443	192.168.2.7	142.250.181.228
Sep 29, 2024 15:18:22.070024014 CEST	443	49811	142.250.181.228	192.168.2.7
Sep 29, 2024 15:18:22.120347977 CEST	49811	443	192.168.2.7	142.250.181.228
Sep 29, 2024 15:18:22.257924080 CEST	49805	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:18:22.303409100 CEST	443	49805	142.250.186.142	192.168.2.7
Sep 29, 2024 15:18:22.456696987 CEST	443	49805	142.250.186.142	192.168.2.7
Sep 29, 2024 15:18:22.456787109 CEST	443	49805	142.250.186.142	192.168.2.7
Sep 29, 2024 15:18:22.456835985 CEST	49805	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:18:22.538961887 CEST	49805	443	192.168.2.7	142.250.186.142
Sep 29, 2024 15:18:22.538994074 CEST	443	49805	142.250.186.142	192.168.2.7
Sep 29, 2024 15:18:22.833606005 CEST	49812	443	192.168.2.7	142.250.184.238
Sep 29, 2024 15:18:22.833657026 CEST	443	49812	142.250.184.238	192.168.2.7
Sep 29, 2024 15:18:22.833724022 CEST	49812	443	192.168.2.7	142.250.184.238
Sep 29, 2024 15:18:22.834342003 CEST	49812	443	192.168.2.7	142.250.184.238
Sep 29, 2024 15:18:22.834357977 CEST	443	49812	142.250.184.238	192.168.2.7
Sep 29, 2024 15:18:23.481559038 CEST	443	49812	142.250.184.238	192.168.2.7
Sep 29, 2024 15:18:23.487222910 CEST	49812	443	192.168.2.7	142.250.184.238
Sep 29, 2024 15:18:23.487232924 CEST	443	49812	142.250.184.238	192.168.2.7
Sep 29, 2024 15:18:23.487519026 CEST	443	49812	142.250.184.238	192.168.2.7
Sep 29, 2024 15:18:23.489619970 CEST	49812	443	192.168.2.7	142.250.184.238
Sep 29, 2024 15:18:23.489691019 CEST	443	49812	142.250.184.238	192.168.2.7
Sep 29, 2024 15:18:23.491422892 CEST	49812	443	192.168.2.7	142.250.184.238
Sep 29, 2024 15:18:23.535393000 CEST	443	49812	142.250.184.238	192.168.2.7
Sep 29, 2024 15:18:23.542211056 CEST	49812	443	192.168.2.7	142.250.184.238
Sep 29, 2024 15:18:23.774394035 CEST	443	49812	142.250.184.238	192.168.2.7
Sep 29, 2024 15:18:23.774461031 CEST	443	49812	142.250.184.238	192.168.2.7
Sep 29, 2024 15:18:23.778960943 CEST	49812	443	192.168.2.7	142.250.184.238
Sep 29, 2024 15:18:23.779632092 CEST	49812	443	192.168.2.7	142.250.184.238
Sep 29, 2024 15:18:23.779655933 CEST	443	49812	142.250.184.238	192.168.2.7
Sep 29, 2024 15:18:24.114239931 CEST	49813	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:24.114329100 CEST	443	49813	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:24.122268915 CEST	49813	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:24.159117937 CEST	49814	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:24.159178972 CEST	443	49814	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:24.159286022 CEST	49814	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:24.159728050 CEST	49814	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:24.159728050 CEST	49813	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:24.159765959 CEST	443	49814	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:24.159795046 CEST	443	49813	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:24.704212904 CEST	443	49814	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:24.712913990 CEST	443	49813	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:24.839590073 CEST	49813	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:24.880963087 CEST	49814	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:24.912465096 CEST	49813	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:24.912497044 CEST	443	49813	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:24.912686110 CEST	49814	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:24.912703991 CEST	443	49814	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:24.913045883 CEST	443	49813	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:24.913228989 CEST	443	49814	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:24.913795948 CEST	49813	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:24.913872004 CEST	443	49813	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:24.914452076 CEST	49814	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:24.914531946 CEST	443	49814	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:24.914618015 CEST	49813	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:24.955440998 CEST	443	49813	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:25.027064085 CEST	49814	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:25.152270079 CEST	443	49813	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:25.152384996 CEST	443	49813	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:25.152440071 CEST	49813	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:25.157047987 CEST	49813	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:25.157089949 CEST	443	49813	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:25.955609083 CEST	49815	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:25.955652952 CEST	443	49815	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:25.955744028 CEST	49815	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:25.956059933 CEST	49816	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:25.956105947 CEST	443	49816	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:25.956181049 CEST	49816	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:25.956301928 CEST	49815	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:25.956319094 CEST	443	49815	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:25.956541061 CEST	49816	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:25.956553936 CEST	443	49816	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:26.509047031 CEST	443	49815	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:26.509500980 CEST	49815	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:26.509514093 CEST	443	49815	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:26.509856939 CEST	443	49815	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:26.513676882 CEST	49815	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:26.513808966 CEST	443	49815	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:26.513874054 CEST	49815	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:26.513885021 CEST	443	49815	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:26.514220953 CEST	443	49816	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:26.549772978 CEST	49816	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:26.549817085 CEST	443	49816	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:26.550559044 CEST	443	49816	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:26.551558018 CEST	49816	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:26.551656008 CEST	443	49816	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:26.603593111 CEST	49815	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:26.638355970 CEST	49816	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:26.797842979 CEST	443	49815	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:26.798177004 CEST	443	49815	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:26.798274040 CEST	443	49815	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:26.798286915 CEST	49815	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:26.798311949 CEST	443	49815	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:26.798389912 CEST	49815	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:26.798664093 CEST	443	49815	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:26.798682928 CEST	443	49815	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:26.798713923 CEST	49815	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:26.798777103 CEST	49815	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:26.799551010 CEST	443	49815	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:26.799571037 CEST	443	49815	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:26.799617052 CEST	49815	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:26.799616098 CEST	443	49815	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:26.799690008 CEST	49815	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:26.889159918 CEST	443	49815	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:26.889343023 CEST	443	49815	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:26.889365911 CEST	49815	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:26.889514923 CEST	49815	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:26.890186071 CEST	49815	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:26.890206099 CEST	443	49815	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:26.896934986 CEST	49816	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:26.897010088 CEST	443	49816	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:27.138521910 CEST	443	49816	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:27.138681889 CEST	443	49816	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:27.138746977 CEST	49816	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:27.139205933 CEST	49816	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:27.139231920 CEST	443	49816	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:27.155760050 CEST	49817	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:27.155797958 CEST	443	49817	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:27.155965090 CEST	49817	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:27.156409025 CEST	49817	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:27.156425953 CEST	443	49817	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:27.161748886 CEST	49818	443	192.168.2.7	142.250.184.238
Sep 29, 2024 15:18:27.161777020 CEST	443	49818	142.250.184.238	192.168.2.7
Sep 29, 2024 15:18:27.161905050 CEST	49818	443	192.168.2.7	142.250.184.238
Sep 29, 2024 15:18:27.162303925 CEST	49818	443	192.168.2.7	142.250.184.238
Sep 29, 2024 15:18:27.162324905 CEST	443	49818	142.250.184.238	192.168.2.7
Sep 29, 2024 15:18:27.236876965 CEST	49819	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:27.236916065 CEST	443	49819	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:27.236969948 CEST	49819	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:27.237129927 CEST	49820	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:27.237198114 CEST	443	49820	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:27.237256050 CEST	49820	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:27.237409115 CEST	49819	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:27.237426043 CEST	443	49819	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:27.237591028 CEST	49820	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:27.237618923 CEST	443	49820	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:27.482137918 CEST	49814	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:27.523442984 CEST	443	49814	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:27.692578077 CEST	443	49817	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:27.708534002 CEST	443	49814	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:27.708640099 CEST	443	49814	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:27.708743095 CEST	49814	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:27.736208916 CEST	49817	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:27.736226082 CEST	443	49817	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:27.736780882 CEST	443	49817	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:27.737190008 CEST	49817	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:27.737272978 CEST	443	49817	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:27.737637043 CEST	49817	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:27.775247097 CEST	49814	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:27.775290966 CEST	443	49814	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:27.783396959 CEST	443	49817	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:27.821234941 CEST	443	49818	142.250.184.238	192.168.2.7
Sep 29, 2024 15:18:27.889848948 CEST	443	49820	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:27.898185968 CEST	443	49819	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:27.927839994 CEST	49818	443	192.168.2.7	142.250.184.238
Sep 29, 2024 15:18:27.990288019 CEST	443	49817	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:27.990468979 CEST	443	49817	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:27.990554094 CEST	49817	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:28.068329096 CEST	49819	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:28.068357944 CEST	443	49819	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:28.068459034 CEST	49820	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:28.068490028 CEST	443	49820	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:28.068546057 CEST	49818	443	192.168.2.7	142.250.184.238
Sep 29, 2024 15:18:28.068558931 CEST	443	49818	142.250.184.238	192.168.2.7
Sep 29, 2024 15:18:28.069026947 CEST	443	49819	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:28.069113970 CEST	443	49820	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:28.070472002 CEST	49819	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:28.070557117 CEST	443	49819	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:28.071135998 CEST	49820	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:28.071216106 CEST	443	49820	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:28.071861982 CEST	443	49818	142.250.184.238	192.168.2.7
Sep 29, 2024 15:18:28.071980953 CEST	49817	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:28.072002888 CEST	443	49817	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:28.074157953 CEST	49818	443	192.168.2.7	142.250.184.238
Sep 29, 2024 15:18:28.074266911 CEST	443	49818	142.250.184.238	192.168.2.7
Sep 29, 2024 15:18:28.074956894 CEST	49819	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:28.074990034 CEST	443	49819	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:28.075021982 CEST	49820	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:28.115396023 CEST	443	49820	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:28.121001959 CEST	49818	443	192.168.2.7	142.250.184.238
Sep 29, 2024 15:18:28.275863886 CEST	443	49820	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:28.275955915 CEST	443	49820	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:28.276004076 CEST	49820	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:28.332667112 CEST	49820	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:28.332704067 CEST	443	49820	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:28.470921993 CEST	49821	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:28.470947981 CEST	443	49821	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:28.471138954 CEST	49821	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:28.564605951 CEST	443	49819	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:28.564670086 CEST	443	49819	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:28.564717054 CEST	443	49819	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:28.564764977 CEST	443	49819	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:28.564768076 CEST	49819	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:28.564794064 CEST	443	49819	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:28.564811945 CEST	49819	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:28.564835072 CEST	443	49819	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:28.564872980 CEST	49819	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:28.564878941 CEST	443	49819	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:28.570353031 CEST	443	49819	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:28.570738077 CEST	49819	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:28.570763111 CEST	443	49819	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:28.576653004 CEST	443	49819	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:28.576731920 CEST	49819	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:28.576746941 CEST	443	49819	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:28.583152056 CEST	443	49819	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:28.583216906 CEST	49819	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:28.583235025 CEST	443	49819	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:28.651957989 CEST	443	49819	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:28.652060032 CEST	49819	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:28.652084112 CEST	443	49819	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:28.653568029 CEST	443	49819	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:28.653621912 CEST	49819	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:28.653636932 CEST	443	49819	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:28.659780025 CEST	443	49819	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:28.659841061 CEST	49819	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:28.659852982 CEST	443	49819	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:28.666163921 CEST	443	49819	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:28.666213036 CEST	49819	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:28.666237116 CEST	443	49819	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:28.672399044 CEST	443	49819	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:28.672545910 CEST	49819	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:28.672568083 CEST	443	49819	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:28.678786993 CEST	443	49819	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:28.678881884 CEST	49819	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:28.678904057 CEST	443	49819	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:28.684957981 CEST	443	49819	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:28.685132027 CEST	49819	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:28.685143948 CEST	443	49819	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:28.685185909 CEST	443	49819	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:28.685228109 CEST	49819	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:28.694230080 CEST	49821	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:28.694259882 CEST	443	49821	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:29.099781036 CEST	49819	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:29.099811077 CEST	443	49819	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:29.110229015 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:29.110266924 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:29.111241102 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:29.111241102 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:29.111279011 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:29.332282066 CEST	443	49821	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:29.346239090 CEST	49821	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:29.346256971 CEST	443	49821	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:29.346719980 CEST	443	49821	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:29.366485119 CEST	49821	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:29.366485119 CEST	49821	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:29.366499901 CEST	443	49821	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:29.366595030 CEST	443	49821	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:29.433017015 CEST	49821	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:29.631373882 CEST	443	49821	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:29.631484985 CEST	443	49821	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:29.631644964 CEST	49821	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:29.632244110 CEST	49821	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:29.632265091 CEST	443	49821	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:29.762783051 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:29.766256094 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:29.766268969 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:29.766608953 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:29.767066002 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:29.767066002 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:29.767076969 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:29.767136097 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:29.843548059 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.045164108 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.045208931 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.045264006 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.045303106 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.045304060 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.045325994 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.045335054 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.045373917 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.050926924 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.050988913 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.051074028 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.051085949 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.057379961 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.057496071 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.057502985 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.063697100 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.063818932 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.063824892 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.135879993 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.135912895 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.135942936 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.135960102 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.135972023 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.136009932 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.140058041 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.140147924 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.140153885 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.146512985 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.146620035 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.146625996 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.152772903 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.152870893 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.152882099 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.159065008 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.159128904 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.159135103 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.166311026 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.166393042 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.166399956 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.174045086 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.174103975 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.174110889 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.178098917 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.178205967 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.178215027 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.183063984 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.183160067 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.183176041 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.188752890 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.188800097 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.188806057 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.194380999 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.194442987 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.194463968 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.194473028 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.194540024 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.200253010 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.227178097 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.227216959 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.227232933 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.227241039 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.227293015 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.227299929 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.227503061 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.227535009 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.227571964 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.227577925 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.227612972 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.231908083 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.237310886 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.237350941 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.237359047 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.237366915 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.237423897 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.243210077 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.248759031 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.248826981 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.248857975 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.248866081 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.248996973 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.254242897 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.259217978 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.259277105 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.259284973 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.264480114 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.264563084 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.264571905 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.269777060 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.269808054 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.269855022 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.269861937 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.269908905 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.274663925 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.279223919 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.279254913 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.279288054 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.279298067 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.279345989 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.283504963 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.288206100 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.288233995 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.288280964 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.288290024 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.288345098 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.293957949 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.295758009 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.295806885 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.295814991 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.299774885 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.299803019 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.299854040 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.299860954 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.299902916 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.303639889 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.307426929 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.307452917 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.307475090 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.307487965 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.307528019 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.311301947 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.313693047 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.313721895 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.313740015 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.313747883 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.313791037 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.313796997 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.317867994 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.317912102 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.317919016 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.318290949 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.318335056 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.318341017 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.320636034 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.320700884 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.320708990 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.322833061 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.322885990 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.322894096 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.325205088 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.325251102 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.325258970 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.327455997 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.327501059 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.327507973 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.329768896 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.329813957 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.329822063 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.332058907 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.332104921 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.332110882 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.334372044 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.334415913 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.334423065 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.337044954 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.337090015 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.337099075 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.339951038 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.339992046 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.339998007 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.341404915 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.341450930 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.341458082 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.344851017 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.344903946 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.344914913 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.345889091 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.345938921 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.345946074 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.350263119 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.350312948 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.350318909 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.350364923 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:30.350409985 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.447710991 CEST	49822	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:30.447742939 CEST	443	49822	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:31.766896963 CEST	49823	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:31.766971111 CEST	443	49823	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:31.767188072 CEST	49823	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:31.770278931 CEST	49823	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:31.770303965 CEST	443	49823	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:31.782264948 CEST	49824	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:31.782308102 CEST	443	49824	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:31.782459974 CEST	49824	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:31.783339024 CEST	49824	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:31.783349037 CEST	443	49824	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:31.993031979 CEST	443	49811	142.250.181.228	192.168.2.7
Sep 29, 2024 15:18:31.993103027 CEST	443	49811	142.250.181.228	192.168.2.7
Sep 29, 2024 15:18:31.994455099 CEST	49811	443	192.168.2.7	142.250.181.228
Sep 29, 2024 15:18:32.345309019 CEST	443	49824	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:32.378807068 CEST	49824	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:32.378820896 CEST	443	49824	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:32.379359007 CEST	443	49824	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:32.385529041 CEST	49824	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:32.385633945 CEST	443	49824	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:32.386965036 CEST	49824	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:32.386996031 CEST	443	49824	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:32.429882050 CEST	443	49823	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:32.487631083 CEST	49823	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:32.487693071 CEST	443	49823	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:32.488348961 CEST	443	49823	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:32.496604919 CEST	49823	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:32.496762991 CEST	443	49823	172.217.18.14	192.168.2.7
Sep 29, 2024 15:18:32.540911913 CEST	49823	443	192.168.2.7	172.217.18.14
Sep 29, 2024 15:18:32.621123075 CEST	443	49824	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:32.621228933 CEST	443	49824	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:32.621283054 CEST	49824	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:32.760020018 CEST	49824	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:32.760035038 CEST	443	49824	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:32.908610106 CEST	49811	443	192.168.2.7	142.250.181.228
Sep 29, 2024 15:18:32.908638000 CEST	443	49811	142.250.181.228	192.168.2.7
Sep 29, 2024 15:18:33.917387962 CEST	49825	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:33.917426109 CEST	443	49825	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:33.917503119 CEST	49825	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:33.920284033 CEST	49825	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:33.920299053 CEST	443	49825	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:34.462538958 CEST	443	49825	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:34.620718002 CEST	49825	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:34.959466934 CEST	49825	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:34.959501982 CEST	443	49825	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:34.960977077 CEST	443	49825	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:34.962291956 CEST	49825	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:34.962477922 CEST	443	49825	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:34.964790106 CEST	49825	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:34.973319054 CEST	49826	443	192.168.2.7	142.250.184.238
Sep 29, 2024 15:18:34.973356009 CEST	443	49826	142.250.184.238	192.168.2.7
Sep 29, 2024 15:18:34.973423004 CEST	49826	443	192.168.2.7	142.250.184.238
Sep 29, 2024 15:18:34.973447084 CEST	49818	443	192.168.2.7	142.250.184.238
Sep 29, 2024 15:18:34.973794937 CEST	49826	443	192.168.2.7	142.250.184.238
Sep 29, 2024 15:18:34.973808050 CEST	443	49826	142.250.184.238	192.168.2.7
Sep 29, 2024 15:18:35.011401892 CEST	443	49825	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:35.019412994 CEST	443	49818	142.250.184.238	192.168.2.7
Sep 29, 2024 15:18:35.176218033 CEST	443	49818	142.250.184.238	192.168.2.7
Sep 29, 2024 15:18:35.176413059 CEST	443	49818	142.250.184.238	192.168.2.7
Sep 29, 2024 15:18:35.176482916 CEST	49818	443	192.168.2.7	142.250.184.238
Sep 29, 2024 15:18:35.180820942 CEST	49818	443	192.168.2.7	142.250.184.238
Sep 29, 2024 15:18:35.180854082 CEST	443	49818	142.250.184.238	192.168.2.7
Sep 29, 2024 15:18:35.194619894 CEST	443	49825	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:35.194725037 CEST	443	49825	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:35.194799900 CEST	49825	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:35.195854902 CEST	49825	443	192.168.2.7	76.223.26.96
Sep 29, 2024 15:18:35.195873976 CEST	443	49825	76.223.26.96	192.168.2.7
Sep 29, 2024 15:18:35.613996983 CEST	443	49826	142.250.184.238	192.168.2.7
Sep 29, 2024 15:18:35.614466906 CEST	49826	443	192.168.2.7	142.250.184.238
Sep 29, 2024 15:18:35.614480019 CEST	443	49826	142.250.184.238	192.168.2.7
Sep 29, 2024 15:18:35.614850044 CEST	443	49826	142.250.184.238	192.168.2.7
Sep 29, 2024 15:18:35.615309000 CEST	49826	443	192.168.2.7	142.250.184.238
Sep 29, 2024 15:18:35.615374088 CEST	443	49826	142.250.184.238	192.168.2.7
Sep 29, 2024 15:18:35.615621090 CEST	49826	443	192.168.2.7	142.250.184.238
Sep 29, 2024 15:18:35.663402081 CEST	443	49826	142.250.184.238	192.168.2.7
Sep 29, 2024 15:18:35.908154011 CEST	443	49826	142.250.184.238	192.168.2.7
Sep 29, 2024 15:18:35.908303976 CEST	443	49826	142.250.184.238	192.168.2.7
Sep 29, 2024 15:18:35.908360958 CEST	49826	443	192.168.2.7	142.250.184.238
Sep 29, 2024 15:18:35.909189939 CEST	49826	443	192.168.2.7	142.250.184.238
Sep 29, 2024 15:18:35.909189939 CEST	49826	443	192.168.2.7	142.250.184.238
Sep 29, 2024 15:18:35.909207106 CEST	443	49826	142.250.184.238	192.168.2.7
Sep 29, 2024 15:18:35.909252882 CEST	49826	443	192.168.2.7	142.250.184.238

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 15:17:18.323323011 CEST	53	51898	1.1.1.1	192.168.2.7
Sep 29, 2024 15:17:18.326004982 CEST	53	56386	1.1.1.1	192.168.2.7
Sep 29, 2024 15:17:19.468487978 CEST	53	54206	1.1.1.1	192.168.2.7
Sep 29, 2024 15:17:19.518738031 CEST	64978	53	192.168.2.7	1.1.1.1
Sep 29, 2024 15:17:19.518938065 CEST	63255	53	192.168.2.7	1.1.1.1
Sep 29, 2024 15:17:19.689286947 CEST	53	63255	1.1.1.1	192.168.2.7
Sep 29, 2024 15:17:19.721807003 CEST	53	64978	1.1.1.1	192.168.2.7
Sep 29, 2024 15:17:20.859898090 CEST	52597	53	192.168.2.7	1.1.1.1
Sep 29, 2024 15:17:20.860219002 CEST	64273	53	192.168.2.7	1.1.1.1
Sep 29, 2024 15:17:20.863019943 CEST	50168	53	192.168.2.7	1.1.1.1
Sep 29, 2024 15:17:20.863220930 CEST	53765	53	192.168.2.7	1.1.1.1
Sep 29, 2024 15:17:20.870166063 CEST	53	64273	1.1.1.1	192.168.2.7
Sep 29, 2024 15:17:20.872287035 CEST	53	52597	1.1.1.1	192.168.2.7
Sep 29, 2024 15:17:20.899863005 CEST	52783	53	192.168.2.7	1.1.1.1
Sep 29, 2024 15:17:20.900156975 CEST	58023	53	192.168.2.7	1.1.1.1
Sep 29, 2024 15:17:20.907030106 CEST	53	52783	1.1.1.1	192.168.2.7
Sep 29, 2024 15:17:20.907258987 CEST	53	58023	1.1.1.1	192.168.2.7
Sep 29, 2024 15:17:21.075995922 CEST	53	50168	1.1.1.1	192.168.2.7
Sep 29, 2024 15:17:21.076946974 CEST	53	53765	1.1.1.1	192.168.2.7
Sep 29, 2024 15:17:21.246464968 CEST	57369	53	192.168.2.7	1.1.1.1
Sep 29, 2024 15:17:21.246766090 CEST	52134	53	192.168.2.7	1.1.1.1
Sep 29, 2024 15:17:21.257617950 CEST	53	52134	1.1.1.1	192.168.2.7
Sep 29, 2024 15:17:21.258102894 CEST	53	57369	1.1.1.1	192.168.2.7
Sep 29, 2024 15:17:21.824750900 CEST	56388	53	192.168.2.7	1.1.1.1
Sep 29, 2024 15:17:21.825252056 CEST	51333	53	192.168.2.7	1.1.1.1
Sep 29, 2024 15:17:21.831846952 CEST	53	56388	1.1.1.1	192.168.2.7
Sep 29, 2024 15:17:21.834443092 CEST	53	51333	1.1.1.1	192.168.2.7
Sep 29, 2024 15:17:21.976619005 CEST	59791	53	192.168.2.7	1.1.1.1
Sep 29, 2024 15:17:21.977235079 CEST	62168	53	192.168.2.7	1.1.1.1
Sep 29, 2024 15:17:21.985129118 CEST	53	59791	1.1.1.1	192.168.2.7
Sep 29, 2024 15:17:21.988800049 CEST	53	62168	1.1.1.1	192.168.2.7
Sep 29, 2024 15:17:22.273658037 CEST	60343	53	192.168.2.7	1.1.1.1
Sep 29, 2024 15:17:22.274012089 CEST	54260	53	192.168.2.7	1.1.1.1
Sep 29, 2024 15:17:22.280589104 CEST	53	60343	1.1.1.1	192.168.2.7
Sep 29, 2024 15:17:22.281424999 CEST	53	54260	1.1.1.1	192.168.2.7
Sep 29, 2024 15:17:22.428350925 CEST	49725	53	192.168.2.7	1.1.1.1
Sep 29, 2024 15:17:22.428596020 CEST	54377	53	192.168.2.7	1.1.1.1
Sep 29, 2024 15:17:22.435381889 CEST	53	54377	1.1.1.1	192.168.2.7
Sep 29, 2024 15:17:22.435404062 CEST	53	49725	1.1.1.1	192.168.2.7
Sep 29, 2024 15:17:23.552341938 CEST	123	123	192.168.2.7	13.95.65.251
Sep 29, 2024 15:17:24.075970888 CEST	123	123	13.95.65.251	192.168.2.7
Sep 29, 2024 15:17:25.114286900 CEST	123	123	192.168.2.7	13.95.65.251
Sep 29, 2024 15:17:25.285811901 CEST	123	123	13.95.65.251	192.168.2.7
Sep 29, 2024 15:17:25.327912092 CEST	52025	53	192.168.2.7	1.1.1.1
Sep 29, 2024 15:17:25.328377962 CEST	50692	53	192.168.2.7	1.1.1.1
Sep 29, 2024 15:17:25.336575985 CEST	53	50692	1.1.1.1	192.168.2.7
Sep 29, 2024 15:17:25.337418079 CEST	53	52025	1.1.1.1	192.168.2.7
Sep 29, 2024 15:17:25.816581011 CEST	56338	53	192.168.2.7	1.1.1.1
Sep 29, 2024 15:17:25.817229986 CEST	63495	53	192.168.2.7	1.1.1.1
Sep 29, 2024 15:17:25.823848009 CEST	53	56338	1.1.1.1	192.168.2.7
Sep 29, 2024 15:17:25.824676037 CEST	53	63495	1.1.1.1	192.168.2.7
Sep 29, 2024 15:17:27.297358990 CEST	65276	53	192.168.2.7	1.1.1.1
Sep 29, 2024 15:17:27.297538042 CEST	60482	53	192.168.2.7	1.1.1.1
Sep 29, 2024 15:17:27.304430008 CEST	53	65276	1.1.1.1	192.168.2.7
Sep 29, 2024 15:17:27.305383921 CEST	53	60482	1.1.1.1	192.168.2.7
Sep 29, 2024 15:17:32.594743967 CEST	52860	53	192.168.2.7	1.1.1.1
Sep 29, 2024 15:17:32.594926119 CEST	56306	53	192.168.2.7	1.1.1.1
Sep 29, 2024 15:17:32.612641096 CEST	53	56306	1.1.1.1	192.168.2.7
Sep 29, 2024 15:17:32.613627911 CEST	53	52860	1.1.1.1	192.168.2.7
Sep 29, 2024 15:17:33.617777109 CEST	53	51373	1.1.1.1	192.168.2.7
Sep 29, 2024 15:17:34.725425959 CEST	56778	53	192.168.2.7	1.1.1.1
Sep 29, 2024 15:17:34.725789070 CEST	54038	53	192.168.2.7	1.1.1.1
Sep 29, 2024 15:17:34.732582092 CEST	53	56778	1.1.1.1	192.168.2.7
Sep 29, 2024 15:17:34.744363070 CEST	53	54038	1.1.1.1	192.168.2.7
Sep 29, 2024 15:17:36.675930023 CEST	53	49977	1.1.1.1	192.168.2.7
Sep 29, 2024 15:17:37.071280003 CEST	53	53681	1.1.1.1	192.168.2.7
Sep 29, 2024 15:17:49.715282917 CEST	53	53496	1.1.1.1	192.168.2.7
Sep 29, 2024 15:17:51.437683105 CEST	62066	53	192.168.2.7	1.1.1.1
Sep 29, 2024 15:17:51.437899113 CEST	54957	53	192.168.2.7	1.1.1.1
Sep 29, 2024 15:17:51.446444035 CEST	53	62066	1.1.1.1	192.168.2.7
Sep 29, 2024 15:17:51.446542025 CEST	53	54957	1.1.1.1	192.168.2.7
Sep 29, 2024 15:17:56.051439047 CEST	53	57469	1.1.1.1	192.168.2.7
Sep 29, 2024 15:18:17.645670891 CEST	53	65359	1.1.1.1	192.168.2.7
Sep 29, 2024 15:18:19.190745115 CEST	138	138	192.168.2.7	192.168.2.255
Sep 29, 2024 15:18:19.275552988 CEST	53	58185	1.1.1.1	192.168.2.7
Sep 29, 2024 15:18:22.824963093 CEST	58185	53	192.168.2.7	1.1.1.1
Sep 29, 2024 15:18:22.825141907 CEST	57966	53	192.168.2.7	1.1.1.1
Sep 29, 2024 15:18:22.831697941 CEST	53	58185	1.1.1.1	192.168.2.7
Sep 29, 2024 15:18:22.832722902 CEST	53	57966	1.1.1.1	192.168.2.7
Sep 29, 2024 15:18:23.905419111 CEST	52099	53	192.168.2.7	1.1.1.1
Sep 29, 2024 15:18:23.906189919 CEST	51449	53	192.168.2.7	1.1.1.1
Sep 29, 2024 15:18:24.105293036 CEST	53	52099	1.1.1.1	192.168.2.7
Sep 29, 2024 15:18:24.105710030 CEST	53	51449	1.1.1.1	192.168.2.7
Sep 29, 2024 15:18:25.894128084 CEST	51913	53	192.168.2.7	1.1.1.1
Sep 29, 2024 15:18:25.894678116 CEST	64114	53	192.168.2.7	1.1.1.1
Sep 29, 2024 15:18:25.940845966 CEST	53	51913	1.1.1.1	192.168.2.7
Sep 29, 2024 15:18:26.097408056 CEST	53	64114	1.1.1.1	192.168.2.7
Sep 29, 2024 15:18:27.201488018 CEST	64691	53	192.168.2.7	1.1.1.1
Sep 29, 2024 15:18:27.209749937 CEST	53	64691	1.1.1.1	192.168.2.7
Sep 29, 2024 15:18:27.227766037 CEST	53461	53	192.168.2.7	1.1.1.1
Sep 29, 2024 15:18:27.235816002 CEST	53	53461	1.1.1.1	192.168.2.7

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Sep 29, 2024 15:18:26.097489119 CEST	192.168.2.7	1.1.1.1	c261	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 29, 2024 15:17:19.518738031 CEST	192.168.2.7	1.1.1.1	0x37f3	Standard query (0)	www.img2.ymlp294.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:17:19.518938065 CEST	192.168.2.7	1.1.1.1	0xa06f	Standard query (0)	www.img2.ymlp294.net	65	IN (0x0001)	false
Sep 29, 2024 15:17:20.859898090 CEST	192.168.2.7	1.1.1.1	0x596c	Standard query (0)	d38psrni17bvxu.cloudfront.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:17:20.860219002 CEST	192.168.2.7	1.1.1.1	0xff94	Standard query (0)	d38psrni17bvxu.cloudfront.net	65	IN (0x0001)	false
Sep 29, 2024 15:17:20.863019943 CEST	192.168.2.7	1.1.1.1	0x2b2e	Standard query (0)	www.img2.ymlp294.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:17:20.863220930 CEST	192.168.2.7	1.1.1.1	0x510d	Standard query (0)	www.img2.ymlp294.net	65	IN (0x0001)	false
Sep 29, 2024 15:17:20.899863005 CEST	192.168.2.7	1.1.1.1	0x8931	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:17:20.900156975 CEST	192.168.2.7	1.1.1.1	0x1944	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 29, 2024 15:17:21.246464968 CEST	192.168.2.7	1.1.1.1	0xb5de	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:17:21.246766090 CEST	192.168.2.7	1.1.1.1	0x81b3	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 29, 2024 15:17:21.824750900 CEST	192.168.2.7	1.1.1.1	0x7a69	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:17:21.825252056 CEST	192.168.2.7	1.1.1.1	0xef9	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Sep 29, 2024 15:17:21.976619005 CEST	192.168.2.7	1.1.1.1	0x98b4	Standard query (0)	d38psrni17bvxu.cloudfront.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:17:21.977235079 CEST	192.168.2.7	1.1.1.1	0xd3ab	Standard query (0)	d38psrni17bvxu.cloudfront.net	65	IN (0x0001)	false
Sep 29, 2024 15:17:22.273658037 CEST	192.168.2.7	1.1.1.1	0x6c18	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:17:22.274012089 CEST	192.168.2.7	1.1.1.1	0x76fc	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Sep 29, 2024 15:17:22.428350925 CEST	192.168.2.7	1.1.1.1	0x2472	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:17:22.428596020 CEST	192.168.2.7	1.1.1.1	0x6310	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 29, 2024 15:17:25.327912092 CEST	192.168.2.7	1.1.1.1	0x30b8	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:17:25.328377962 CEST	192.168.2.7	1.1.1.1	0x28d2	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Sep 29, 2024 15:17:25.816581011 CEST	192.168.2.7	1.1.1.1	0xbb01	Standard query (0)	afs.googleusercontent.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:17:25.817229986 CEST	192.168.2.7	1.1.1.1	0x850a	Standard query (0)	afs.googleusercontent.com	65	IN (0x0001)	false
Sep 29, 2024 15:17:27.297358990 CEST	192.168.2.7	1.1.1.1	0xbf4b	Standard query (0)	afs.googleusercontent.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:17:27.297538042 CEST	192.168.2.7	1.1.1.1	0x738b	Standard query (0)	afs.googleusercontent.com	65	IN (0x0001)	false
Sep 29, 2024 15:17:32.594743967 CEST	192.168.2.7	1.1.1.1	0xa071	Standard query (0)	www.mydomaincontact.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:17:32.594926119 CEST	192.168.2.7	1.1.1.1	0x6fa4	Standard query (0)	www.mydomaincontact.com	65	IN (0x0001)	false
Sep 29, 2024 15:17:34.725425959 CEST	192.168.2.7	1.1.1.1	0x9174	Standard query (0)	www.mydomaincontact.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:17:34.725789070 CEST	192.168.2.7	1.1.1.1	0x56cb	Standard query (0)	www.mydomaincontact.com	65	IN (0x0001)	false
Sep 29, 2024 15:17:51.437683105 CEST	192.168.2.7	1.1.1.1	0x1d27	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:17:51.437899113 CEST	192.168.2.7	1.1.1.1	0xf618	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 29, 2024 15:18:22.824963093 CEST	192.168.2.7	1.1.1.1	0x6278	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:18:22.825141907 CEST	192.168.2.7	1.1.1.1	0x4173	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Sep 29, 2024 15:18:23.905419111 CEST	192.168.2.7	1.1.1.1	0xf081	Standard query (0)	www.img2.ymlp294.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:18:23.906189919 CEST	192.168.2.7	1.1.1.1	0x8046	Standard query (0)	www.img2.ymlp294.net	65	IN (0x0001)	false
Sep 29, 2024 15:18:25.894128084 CEST	192.168.2.7	1.1.1.1	0x39c	Standard query (0)	www.img2.ymlp294.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:18:25.894678116 CEST	192.168.2.7	1.1.1.1	0x6e45	Standard query (0)	www.img2.ymlp294.net	65	IN (0x0001)	false
Sep 29, 2024 15:18:27.201488018 CEST	192.168.2.7	1.1.1.1	0xa73f	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:18:27.227766037 CEST	192.168.2.7	1.1.1.1	0x90df	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 29, 2024 15:17:19.689286947 CEST	1.1.1.1	192.168.2.7	0xa06f	No error (0)	www.img2.ymlp294.net	212218.parkingcrew.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 15:17:19.721807003 CEST	1.1.1.1	192.168.2.7	0x37f3	No error (0)	www.img2.ymlp294.net	212218.parkingcrew.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 15:17:19.721807003 CEST	1.1.1.1	192.168.2.7	0x37f3	No error (0)	212218.parkingcrew.net		76.223.26.96	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:17:19.721807003 CEST	1.1.1.1	192.168.2.7	0x37f3	No error (0)	212218.parkingcrew.net		13.248.148.254	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:17:20.872287035 CEST	1.1.1.1	192.168.2.7	0x596c	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.190	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:17:20.872287035 CEST	1.1.1.1	192.168.2.7	0x596c	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.135	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:17:20.872287035 CEST	1.1.1.1	192.168.2.7	0x596c	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.138	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:17:20.872287035 CEST	1.1.1.1	192.168.2.7	0x596c	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.69	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:17:20.907030106 CEST	1.1.1.1	192.168.2.7	0x8931	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:17:20.907258987 CEST	1.1.1.1	192.168.2.7	0x1944	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 29, 2024 15:17:21.075995922 CEST	1.1.1.1	192.168.2.7	0x2b2e	No error (0)	www.img2.ymlp294.net	212218.parkingcrew.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 15:17:21.075995922 CEST	1.1.1.1	192.168.2.7	0x2b2e	No error (0)	212218.parkingcrew.net		76.223.26.96	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:17:21.075995922 CEST	1.1.1.1	192.168.2.7	0x2b2e	No error (0)	212218.parkingcrew.net		13.248.148.254	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:17:21.076946974 CEST	1.1.1.1	192.168.2.7	0x510d	No error (0)	www.img2.ymlp294.net	212218.parkingcrew.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 15:17:21.257617950 CEST	1.1.1.1	192.168.2.7	0x81b3	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 29, 2024 15:17:21.258102894 CEST	1.1.1.1	192.168.2.7	0xb5de	No error (0)	www.google.com		142.250.181.228	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:17:21.831846952 CEST	1.1.1.1	192.168.2.7	0x7a69	No error (0)	syndicatedsearch.goog		142.250.186.142	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:17:21.985129118 CEST	1.1.1.1	192.168.2.7	0x98b4	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.138	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:17:21.985129118 CEST	1.1.1.1	192.168.2.7	0x98b4	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.190	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:17:21.985129118 CEST	1.1.1.1	192.168.2.7	0x98b4	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.69	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:17:21.985129118 CEST	1.1.1.1	192.168.2.7	0x98b4	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.135	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:17:22.280589104 CEST	1.1.1.1	192.168.2.7	0x6c18	No error (0)	syndicatedsearch.goog		216.58.206.46	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:17:22.435381889 CEST	1.1.1.1	192.168.2.7	0x6310	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 29, 2024 15:17:22.435404062 CEST	1.1.1.1	192.168.2.7	0x2472	No error (0)	www.google.com		142.250.184.228	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:17:25.337418079 CEST	1.1.1.1	192.168.2.7	0x30b8	No error (0)	syndicatedsearch.goog		142.250.185.142	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:17:25.823848009 CEST	1.1.1.1	192.168.2.7	0xbb01	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 15:17:25.823848009 CEST	1.1.1.1	192.168.2.7	0xbb01	No error (0)	googlehosted.l.googleusercontent.com		216.58.206.33	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:17:25.824676037 CEST	1.1.1.1	192.168.2.7	0x850a	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 15:17:27.304430008 CEST	1.1.1.1	192.168.2.7	0xbf4b	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 15:17:27.304430008 CEST	1.1.1.1	192.168.2.7	0xbf4b	No error (0)	googlehosted.l.googleusercontent.com		142.250.185.193	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:17:27.305383921 CEST	1.1.1.1	192.168.2.7	0x738b	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 15:17:32.613627911 CEST	1.1.1.1	192.168.2.7	0xa071	No error (0)	www.mydomaincontact.com		108.128.52.91	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:17:32.613627911 CEST	1.1.1.1	192.168.2.7	0xa071	No error (0)	www.mydomaincontact.com		52.49.37.73	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:17:32.613627911 CEST	1.1.1.1	192.168.2.7	0xa071	No error (0)	www.mydomaincontact.com		54.171.84.62	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:17:34.732582092 CEST	1.1.1.1	192.168.2.7	0x9174	No error (0)	www.mydomaincontact.com		54.171.84.62	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:17:34.732582092 CEST	1.1.1.1	192.168.2.7	0x9174	No error (0)	www.mydomaincontact.com		52.49.37.73	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:17:34.732582092 CEST	1.1.1.1	192.168.2.7	0x9174	No error (0)	www.mydomaincontact.com		108.128.52.91	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:17:51.446444035 CEST	1.1.1.1	192.168.2.7	0x1d27	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:17:51.446542025 CEST	1.1.1.1	192.168.2.7	0xf618	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 29, 2024 15:18:11.284641027 CEST	1.1.1.1	192.168.2.7	0xd105	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:18:11.284641027 CEST	1.1.1.1	192.168.2.7	0xd105	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:18:22.831697941 CEST	1.1.1.1	192.168.2.7	0x6278	No error (0)	syndicatedsearch.goog		142.250.184.238	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:18:24.105293036 CEST	1.1.1.1	192.168.2.7	0xf081	No error (0)	www.img2.ymlp294.net	212218.parkingcrew.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 15:18:24.105293036 CEST	1.1.1.1	192.168.2.7	0xf081	No error (0)	212218.parkingcrew.net		76.223.26.96	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:18:24.105293036 CEST	1.1.1.1	192.168.2.7	0xf081	No error (0)	212218.parkingcrew.net		13.248.148.254	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:18:24.105710030 CEST	1.1.1.1	192.168.2.7	0x8046	No error (0)	www.img2.ymlp294.net	212218.parkingcrew.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 15:18:25.940845966 CEST	1.1.1.1	192.168.2.7	0x39c	No error (0)	www.img2.ymlp294.net	212218.parkingcrew.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 15:18:25.940845966 CEST	1.1.1.1	192.168.2.7	0x39c	No error (0)	212218.parkingcrew.net		76.223.26.96	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:18:25.940845966 CEST	1.1.1.1	192.168.2.7	0x39c	No error (0)	212218.parkingcrew.net		13.248.148.254	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:18:26.097408056 CEST	1.1.1.1	192.168.2.7	0x6e45	No error (0)	www.img2.ymlp294.net	212218.parkingcrew.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 15:18:27.209749937 CEST	1.1.1.1	192.168.2.7	0xa73f	No error (0)	syndicatedsearch.goog		172.217.18.14	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.img2.ymlp294.net

https:

www.google.com

d38psrni17bvxu.cloudfront.net

syndicatedsearch.goog

afs.googleusercontent.com

www.mydomaincontact.com

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49704	76.223.26.96	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:20 UTC	663	OUT	GET / HTTP/1.1 Host: www.img2.ymlp294.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:17:20 UTC	882	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Alt-Svc: h3=":50944"; ma=2592000 Content-Type: text/html; charset=UTF-8 Date: Sun, 29 Sep 2024 13:17:20 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_CuC42C1KVbuBIp1e1BiU77m8NWwUIIw17frLzNomxRRgNL+9THehVAGGnhdBZV8NSSOh3fUYB9O8g9iro7vsHw== X-Domain: ymlp294.net X-Pcrew-Blocked-Reason: X-Pcrew-Ip-Organization: CenturyLink X-Subdomain: www.img2 Connection: close Transfer-Encoding: chunked
2024-09-29 13:17:20 UTC	2372	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4c 71 75 44 46 45 54 58 52 6e 30 48 72 30 35 66 55 50 37 45 4a 54 37 37 78 59 6e 50 6d 52 62 70 4d 79 34 76 6b 38 4b 59 69 48 6e 6b 4e 70 65 64 6e 6a 4f 41 4e 4a 63 61 58 44 58 63 4b 51 4a 4e 30 6e 58 4b 5a 4a 4c 37 54 63 69 4a 44 38 41 6f 48 58 4b 31 35 38 43 41 77 45 41 41 51 3d 3d 5f 43 75 43 34 32 43 31 4b 56 62 75 42 49 70 31 65 31 42 69 55 37 37 6d 38 4e 57 77 55 49 49 77 31 37 66 72 4c 7a 4e 6f 6d 78 52 52 67 4e 4c 2b 39 54 48 65 68 56 41 47 47 6e 68 64 42 5a 56 38 4e 53 53 4f 68 33 66 55 59 42 39 4f 38 67 39 69 72 6f Data Ascii: 4000<!DOCTYPE html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_CuC42C1KVbuBIp1e1BiU77m8NWwUIIw17frLzNomxRRgNL+9THehVAGGnhdBZV8NSSOh3fUYB9O8g9iro
2024-09-29 13:17:20 UTC	1724	IN	Data Raw: 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 32 72 65 6d 3b 0a 7d 0a 0a 2e 61 64 73 48 6f 6c 64 65 72 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 31 72 65 6d 20 30 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 32 72 65 6d 3b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 0a 7d 0a 0a 2e 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 23 36 32 36 35 37 34 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 32 72 65 6d 20 31 72 65 6d 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 72 65 6d 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 34 34 30 70 78 3b 0a 7d 0a 0a 2e 66 6f 6f 74 65 72 20 61 3a 6c 69 6e 6b 2c 0a 2e 66 6f 6f 74 65 72 20 61 3a 76 69 73 69 74 65 64 20 Data Ascii: padding-top: 2rem;}.adsHolder { margin: 1rem 0; padding-top: 2rem; overflow:hidden;}.footer { color:#626574; padding:2rem 1rem; font-size:.8rem; margin:0 auto; max-width:440px;}.footer a:link,.footer a:visited
2024-09-29 13:17:20 UTC	4744	IN	Data Raw: 39 7a 64 6d 63 69 49 47 68 6c 61 57 64 6f 64 44 30 69 4d 6a 51 69 49 48 5a 70 5a 58 64 43 62 33 67 39 49 6a 41 67 4d 43 41 79 4e 43 41 79 4e 43 49 67 64 32 6c 6b 64 47 67 39 49 6a 49 30 49 6a 34 38 63 47 46 30 61 43 42 6b 50 53 4a 4e 4d 43 41 77 61 44 49 30 64 6a 49 30 53 44 42 36 49 69 42 6d 61 57 78 73 50 53 4a 75 62 32 35 6c 49 69 38 2b 50 48 42 68 64 47 67 67 5a 44 30 69 54 54 55 75 4f 44 67 67 4e 43 34 78 4d 6b 77 78 4d 79 34 33 4e 69 41 78 4d 6d 77 74 4e 79 34 34 4f 43 41 33 4c 6a 67 34 54 44 67 67 4d 6a 4a 73 4d 54 41 74 4d 54 42 4d 4f 43 41 79 65 69 49 76 50 6a 77 76 63 33 5a 6e 50 67 3d 3d 27 29 3b 0a 7d 3c 2f 73 74 79 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 54 Data Ascii: 9zdmciIGhlaWdodD0iMjQiIHZpZXdCb3g9IjAgMCAyNCAyNCIgd2lkdGg9IjI0Ij48cGF0aCBkPSJNMCAwaDI0djI0SDB6IiBmaWxsPSJub25lIi8+PHBhdGggZD0iTTUuODggNC4xMkwxMy43NiAxMmwtNy44OCA3Ljg4TDggMjJsMTAtMTBMOCAyeiIvPjwvc3ZnPg==');}</style> <meta name="description" content="T
2024-09-29 13:17:20 UTC	5930	IN	Data Raw: 72 6d 73 7d 3b 69 66 20 28 21 61 64 73 4c 6f 61 64 65 64 20 7c 7c 20 28 63 6f 6e 74 61 69 6e 65 72 4e 61 6d 65 20 69 6e 20 63 6f 6e 74 61 69 6e 65 72 4e 61 6d 65 73 29 29 20 7b 61 6a 61 78 51 75 65 72 79 28 73 63 72 69 70 74 50 61 74 68 20 2b 20 22 2f 74 72 61 63 6b 2e 70 68 70 22 2b 20 22 3f 74 6f 67 67 6c 65 3d 61 64 6c 6f 61 64 65 64 22 2b 20 22 26 75 69 64 3d 22 20 2b 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 75 6e 69 71 75 65 54 72 61 63 6b 69 6e 67 49 44 29 2b 20 22 26 64 6f 6d 61 69 6e 3d 22 20 2b 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 6f 6d 61 69 6e 29 2b 20 22 26 64 61 74 61 3d 22 20 2b 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 64 61 74 61 29 Data Ascii: rms};if (!adsLoaded \|\| (containerName in containerNames)) {ajaxQuery(scriptPath + "/track.php"+ "?toggle=adloaded"+ "&uid=" + encodeURIComponent(uniqueTrackingID)+ "&domain=" + encodeURIComponent(domain)+ "&data=" + encodeURIComponent(JSON.stringify(data)
2024-09-29 13:17:20 UTC	1620	IN	Data Raw: 61 2e 6c 65 6e 67 74 68 29 20 7b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 6e 65 77 20 63 28 61 5b 30 5d 29 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 6e 65 77 20 63 28 61 5b 30 5d 2c 20 61 5b 31 5d 29 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 20 6e 65 77 20 63 28 61 5b 30 5d 2c 20 61 5b 31 5d 2c 20 61 5b 32 5d 29 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 20 6e 65 77 20 63 28 61 5b 30 5d 2c 20 61 5b 31 5d 2c 20 61 5b 32 5d 2c 20 61 5b 33 5d 29 3b 63 61 73 65 20 35 3a 72 65 74 75 72 6e 20 6e 65 77 20 63 28 61 5b 30 5d 2c 20 61 5b 31 5d 2c 20 61 5b 32 5d 2c 20 61 5b 33 5d 2c 20 61 5b 34 5d 29 3b 7d 72 65 74 75 72 6e 20 63 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 20 61 29 3b 7d 3b 7d 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 Data Ascii: a.length) {case 1:return new c(a[0]);case 2:return new c(a[0], a[1]);case 3:return new c(a[0], a[1], a[2]);case 4:return new c(a[0], a[1], a[2], a[3]);case 5:return new c(a[0], a[1], a[2], a[3], a[4]);}return c.apply(null, a);};}</script><script type="te
2024-09-29 13:17:20 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-09-29 13:17:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49705	76.223.26.96	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:20 UTC	785	OUT	GET /track.php?domain=ymlp294.net&toggle=browserjs&uid=MTcyNzYxNTg0MC40MTUxOjgzOGE1Y2JhNGQwMmJlYTdmZGM0ODQzZjNkNTRiOWZkZjk2MTcyNWRlNzJlZmVkY2RhM2JiMjdmYmFkYjA0OWE6NjZmOTUzNjA2NTU5MQ%3D%3D HTTP/1.1 Host: www.img2.ymlp294.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" device-memory: 8 rtt: 200 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 dpr: 1 downlink: 1.7 ect: 4g sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.img2.ymlp294.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:17:20 UTC	597	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Alt-Svc: h3=":50944"; ma=2592000 Content-Type: text/html; charset=UTF-8 Date: Sun, 29 Sep 2024 13:17:20 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: browserjs Connection: close Transfer-Encoding: chunked
2024-09-29 13:17:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49709	76.223.26.96	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:21 UTC	667	OUT	GET /ls.php?t=66f95360&token=bd6d6dfed5562124a7653afd94f1958354c6c8b6 HTTP/1.1 Host: www.img2.ymlp294.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" device-memory: 8 rtt: 200 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 dpr: 1 downlink: 1.7 ect: 4g sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.img2.ymlp294.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:17:21 UTC	882	IN	HTTP/1.1 201 Created Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Origin: Access-Control-Max-Age: 86400 Alt-Svc: h3=":50944"; ma=2592000 Charset: utf-8 Content-Type: text/javascript;charset=UTF-8 Date: Sun, 29 Sep 2024 13:17:21 GMT Server: Caddy Server: nginx X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_J8Kgi5cyauxB6ZmG3i8CSywoaccY+p8s8jCGI8ZfrhJP/0gxUSrTlaOHfEJoaFDgzBBUyrHoVAE+xiQWvjRMQA== Connection: close Transfer-Encoding: chunked
2024-09-29 13:17:21 UTC	22	IN	Data Raw: 31 30 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d 0d 0a Data Ascii: 10{"success":true}
2024-09-29 13:17:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49711	216.58.206.68	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:21 UTC	644	OUT	GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.img2.ymlp294.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:17:21 UTC	844	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 153207 Date: Sun, 29 Sep 2024 13:17:21 GMT Expires: Sun, 29 Sep 2024 13:17:21 GMT Cache-Control: private, max-age=3600 ETag: "3643616061527688295" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-29 13:17:21 UTC	546	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 68 61 73 68 3a 22 31 37 33 38 33 36 33 33 34 36 34 33 37 30 36 31 35 35 35 33 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 30 30 30 33 2c 31 37 33 30 31 34 33 31 2c 31 37 33 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17300003,17301431,173
2024-09-29 13:17:21 UTC	1390	IN	Data Raw: 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 69 35 75 5a 58 51 73 64 Data Ascii: rovidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsd
2024-09-29 13:17:21 UTC	1390	IN	Data Raw: 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 Data Ascii: )return a;c.prototype.toString=function(){return this.ne};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8ClampedArray
2024-09-29 13:17:21 UTC	1390	IN	Data Raw: 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 61 3d 6c 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 70 61 29 70 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e 64 65 Data Ascii: +" is not extensible");return a}:null}var pa=la;function qa(a,b){a.prototype=ka(b.prototype);a.prototype.constructor=a;if(pa)pa(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.de
2024-09-29 13:17:21 UTC	1390	IN	Data Raw: 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 55 66 28 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 62 64 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 67 67 28 68 2c 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 62 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 63 65 28 32 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 64 3d 66 75 6e 63 74 69 6f Data Ascii: e "function":h=!0;break a;default:h=!1}h?this.Uf(g):this.Ld(g)}};b.prototype.Uf=function(g){var h=void 0;try{h=g.then}catch(k){this.bd(k);return}typeof h=="function"?this.gg(h,g):this.Ld(g)};b.prototype.bd=function(g){this.ce(2,g)};b.prototype.Ld=functio
2024-09-29 13:17:21 UTC	1390	IN	Data Raw: 72 20 6c 2c 6d 2c 70 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 69 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 0a 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 42 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 Data Ascii: r l,m,p=new b(function(r,t){l=r;m=t});this.ib(k(g,l),k(h,m));return p};b.prototype.catch=function(g){return this.then(void 0,g)};b.prototype.ib=function(g,h){function k(){switch(l.B){case 1:g(l.Xa);break;case 2:h(l.Xa);break;default:throw Error("Unexpect
2024-09-29 13:17:21 UTC	1390	IN	Data Raw: 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 73 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 63 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a 65 63 74 2e 73 65 61 6c Data Ascii: ction"}function e(k){if(!sa(k,g)){var l=new c;ca(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var k=Object.seal
2024-09-29 13:17:21 UTC	1390	IN	Data Raw: 3a 6d 2c 69 6e 64 65 78 3a 68 2c 49 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 49 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 75 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 Data Ascii: :m,index:h,I:p}}return{id:l,list:m,index:-1,I:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=u(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Objec
2024-09-29 13:17:21 UTC	1390	IN	Data Raw: 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 Data Ascii: urn h.key})};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,h.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.prototype.entries;v
2024-09-29 13:17:21 UTC	1390	IN	Data Raw: 69 66 28 64 5b 2d 2d 63 5d 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 65 3c 3d 30 7d 7d 29 3b 0a 71 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 73 61 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 5b 64 2c 62 5b 64 5d 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 Data Ascii: if(d[--c]!=b[--e])return!1;return e<=0}});q("Object.entries",function(a){return a?a:function(b){var c=[],d;for(d in b)sa(b,d)&&c.push([d,b[d]]);return c}});q("Array.prototype.find",function(a){return a?a:function(b,c){a:{var d=this;d instanceof String&&(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49708	18.66.121.190	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:21 UTC	644	OUT	GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1 Host: d38psrni17bvxu.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.img2.ymlp294.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:17:21 UTC	436	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 11375 Connection: close Server: nginx Date: Sun, 29 Sep 2024 11:32:41 GMT Last-Modified: Thu, 21 Mar 2024 11:48:11 GMT Accept-Ranges: bytes ETag: "65fc1e7b-2c6f" X-Cache: Hit from cloudfront Via: 1.1 f49c99d2326b14738507e1c2ddcae1dc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: ZUUOkRg4_abIL9rEPhkkpwEtLSFXXUVF_N8Q7jCqlLTG4_WzkQDV5A== Age: 6280
2024-09-29 13:17:21 UTC	11375	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 dc 00 00 02 58 08 03 00 00 00 4f 6d d4 16 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 00 50 4c 54 45 00 00 00 ff ff ff 63 64 74 49 4b 5e 49 4b 5d 49 4b 5c 30 33 49 48 4b 5f 61 63 73 63 65 75 62 64 74 63 65 74 15 19 30 3d 40 53 48 4b 5d 49 4c 5d 48 4b 5c 4d 50 62 4e 51 62 4f 52 63 12 17 2e 14 19 30 22 26 3b 28 2c 40 2b 2f 42 30 34 49 2e 32 46 2f 33 47 2d 31 44 30 34 48 2e 32 45 30 34 47 31 35 48 32 36 49 35 39 4c 38 3c 50 36 3a 4d 39 3d 51 37 3b 4e 3a 3e 52 3a 3e 51 3b 3f 52 3c 40 53 49 4c 5c 62 65 75 61 64 74 62 65 74 63 66 74 62 65 73 13 18 2d 15 1a 30 1b 20 35 1c 21 36 1d 22 37 1e 23 38 1d 22 36 1f 24 39 20 25 3a 21 26 3b Data Ascii: PNGIHDRXOmtEXtSoftwareAdobe ImageReadyqe<PLTEcdtIK^IK]IK\03IHK_acsceubdtcet0=@SHK]IL]HK\MPbNQbORc.0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes-0 5!6"7#8"6$9 %:!&;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	49712	76.223.26.96	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:21 UTC	526	OUT	GET /track.php?domain=ymlp294.net&toggle=browserjs&uid=MTcyNzYxNTg0MC40MTUxOjgzOGE1Y2JhNGQwMmJlYTdmZGM0ODQzZjNkNTRiOWZkZjk2MTcyNWRlNzJlZmVkY2RhM2JiMjdmYmFkYjA0OWE6NjZmOTUzNjA2NTU5MQ%3D%3D HTTP/1.1 Host: www.img2.ymlp294.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:17:21 UTC	597	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Alt-Svc: h3=":50944"; ma=2592000 Content-Type: text/html; charset=UTF-8 Date: Sun, 29 Sep 2024 13:17:21 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: browserjs Connection: close Transfer-Encoding: chunked
2024-09-29 13:17:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	49715	18.66.121.138	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:22 UTC	404	OUT	GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1 Host: d38psrni17bvxu.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:17:22 UTC	436	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 11375 Connection: close Server: nginx Date: Sun, 29 Sep 2024 11:32:41 GMT Last-Modified: Thu, 21 Mar 2024 11:48:11 GMT Accept-Ranges: bytes ETag: "65fc1e7b-2c6f" X-Cache: Hit from cloudfront Via: 1.1 615f944336054ae07b8e7c415ddbad44.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: rgBCbN3W7Zz5wf-oWCeYZVbEIg6baWpxFv7N3iShLqF-tOWeTWRI-A== Age: 6281
2024-09-29 13:17:22 UTC	11375	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 dc 00 00 02 58 08 03 00 00 00 4f 6d d4 16 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 00 50 4c 54 45 00 00 00 ff ff ff 63 64 74 49 4b 5e 49 4b 5d 49 4b 5c 30 33 49 48 4b 5f 61 63 73 63 65 75 62 64 74 63 65 74 15 19 30 3d 40 53 48 4b 5d 49 4c 5d 48 4b 5c 4d 50 62 4e 51 62 4f 52 63 12 17 2e 14 19 30 22 26 3b 28 2c 40 2b 2f 42 30 34 49 2e 32 46 2f 33 47 2d 31 44 30 34 48 2e 32 45 30 34 47 31 35 48 32 36 49 35 39 4c 38 3c 50 36 3a 4d 39 3d 51 37 3b 4e 3a 3e 52 3a 3e 51 3b 3f 52 3c 40 53 49 4c 5c 62 65 75 61 64 74 62 65 74 63 66 74 62 65 73 13 18 2d 15 1a 30 1b 20 35 1c 21 36 1d 22 37 1e 23 38 1d 22 36 1f 24 39 20 25 3a 21 26 3b Data Ascii: PNGIHDRXOmtEXtSoftwareAdobe ImageReadyqe<PLTEcdtIK^IK]IK\03IHK_acsceubdtcet0=@SHK]IL]HK\MPbNQbORc.0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes-0 5!6"7#8"6$9 %:!&;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	49717	216.58.206.46	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:22 UTC	1901	OUT	GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=bucket007%2C000003%2C000802%2Cbucket066%2Cbucket077&client=dp-teaminternet12_3ph&r=m&hl=en&rpbu=https%3A%2F%2Fwww.img2.ymlp294.net%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%253D%253D&terms=Fingerprint%20Locations%2CElectronic%20Fingerprints%20For%20Employment%2CReset%20Password&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2558334540730768&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301511%2C17301516%2C17301266%2C72717107&format=r3%7Cs&nocache=6051727615841252&num=0&output=afd_ads&domain_name=www.img2.ymlp294.net&v=3&bsl [TRUNCATED] Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.img2.ymlp294.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:17:23 UTC	807	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Disposition: inline Date: Sun, 29 Sep 2024 13:17:23 GMT Expires: Sun, 29 Sep 2024 13:17:23 GMT Cache-Control: private, max-age=3600 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-AK4inQ09oiVHoTFLsMvRWw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Server: gws X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-29 13:17:23 UTC	583	IN	Data Raw: 33 62 39 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 73 74 79 6c 65 20 69 64 3d 22 73 73 72 2d 62 6f 69 6c 65 72 70 6c 61 74 65 22 3e 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 72 67 69 6e 3a 30 3b 7d 2e 64 69 76 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 20 2e 64 69 76 3a 6c 61 73 Data Ascii: 3b9c<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:las
2024-09-29 13:17:23 UTC	1390	IN	Data Raw: 69 5f 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 76 5f 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 Data Ascii: i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit
2024-09-29 13:17:23 UTC	1390	IN	Data Raw: 5f 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 6f 5f 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 78 5f 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 79 5f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 7a 2d 69 6e 64 65 78 3a 31 3b 7d 2e 6b 5f 3e 64 69 76 3a 6e 6f 74 28 2e 79 5f 29 20 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 Data Ascii: _{overflow:hidden;}.o_{white-space:nowrap;}.x_{cursor:pointer;}.y_{display:none; position:absolute; z-index:1;}.k_>div:not(.y_) {display:-webkit-inline-box; display:-moz-inline-box; display:-ms-inline-flexbox; display:-webkit-inline-flex; display:inline-f
2024-09-29 13:17:23 UTC	1390	IN	Data Raw: 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 42 6f 74 74 6f 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 43 65 6e 74 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 Data Ascii: start; align-items:flex-start;}.flexAlignBottom{-ms-flex-align:end; -webkit-box-align:end; -webkit-align-items:flex-end; align-items:flex-end;}.flexAlignCenter{-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center
2024-09-29 13:17:23 UTC	1390	IN	Data Raw: 65 72 2d 72 61 64 69 75 73 3a 31 35 70 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 31 70 78 3b 7d 2e 73 69 31 32 38 7b 68 65 69 67 68 74 3a 31 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 64 69 76 3e 64 69 76 2e 73 69 31 32 38 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 2e 73 69 31 33 33 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 30 31 63 33 36 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e Data Ascii: er-radius:15px;height:30px;width:1px;}.si128{height:1px;width:100%; -ms-flex-negative:1;-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}div>div.si128:last-child{display:none;}.si133{background-color:#101c36;border-radius:2px;font-size:12px;lin
2024-09-29 13:17:23 UTC	1390	IN	Data Raw: 77 72 61 70 3b 22 20 64 61 74 61 2d 61 64 2d 63 6f 6e 74 61 69 6e 65 72 3d 22 31 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 72 73 73 41 74 74 72 43 6f 6e 74 61 69 6e 65 72 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 70 5f 20 73 69 31 33 33 20 73 70 61 6e 22 3e 52 65 6c 61 74 65 64 20 73 65 61 72 63 68 65 73 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 65 31 22 20 63 6c 61 73 73 3d 22 69 Data Ascii: wrap;" data-ad-container="1"><div class="i_ div rssAttrContainer" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><span class="p_ si133 span">Related searches</span></div><div id="e1" class="i
2024-09-29 13:17:23 UTC	1390	IN	Data Raw: 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 36 39 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 63 65 6e 74 Data Ascii: r; -webkit-box-align:center; -webkit-align-items:center; align-items:center;"><div class="i_ div si69" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;-ms-flex-pack:center; -webkit-box-pack:cent
2024-09-29 13:17:23 UTC	1390	IN	Data Raw: 22 65 33 22 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 63 6c 69 63 6b 74 72 61 63 6b 65 64 41 64 5f 6a 73 20 73 69 31 30 31 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 69 6d 67 32 2e 79 6d 6c 70 32 39 34 2e 6e 65 74 2f 3f 74 73 3d 66 45 4e 73 5a 57 46 75 55 47 56 77 63 47 56 79 62 57 6c 75 64 45 4a 73 59 57 4e 72 66 48 77 31 59 32 55 34 4e 48 78 69 64 57 4e 72 5a 58 51 77 4e 6a 59 73 59 6e 56 6a 61 32 Data Ascii: "e3" class="i_ div clicktrackedAd_js si101" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><a href="https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2
2024-09-29 13:17:23 UTC	1390	IN	Data Raw: 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e Data Ascii: :center; -webkit-box-pack:center; -webkit-justify-content:center; justify-content:center;-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center;"><div class="i_ div" style="-ms-flex-direction:row; -webkit-box-orien
2024-09-29 13:17:23 UTC	1390	IN	Data Raw: 77 63 47 56 79 62 57 6c 75 64 45 4a 73 59 57 4e 72 66 48 77 31 59 32 55 34 4e 48 78 69 64 57 4e 72 5a 58 51 77 4e 6a 59 73 59 6e 56 6a 61 32 56 30 4d 44 63 33 66 48 78 38 66 48 78 38 4e 6a 5a 6d 4f 54 55 7a 4e 6a 41 32 4e 54 55 30 4f 58 78 38 66 44 45 33 4d 6a 63 32 4d 54 55 34 4e 44 41 75 4e 44 55 33 4d 58 78 6c 4d 44 67 33 59 7a 41 31 59 6d 4d 7a 59 7a 45 77 4d 44 6b 78 5a 47 49 79 4e 6a 46 6a 4f 54 63 33 4e 7a 4a 6a 4f 54 67 32 59 7a 46 6b 5a 47 45 77 59 54 56 68 66 48 78 38 66 48 77 78 66 48 77 77 66 44 42 38 66 48 78 38 4d 58 78 38 66 48 78 38 4d 48 77 77 66 48 78 38 66 48 78 38 66 48 78 61 53 45 46 30 5a 45 64 57 61 47 4a 58 62 48 56 6b 52 31 5a 35 59 6d 31 57 4d 45 31 55 53 6d 5a 4e 4d 30 4a 76 66 47 46 6b 4e 7a 4e 68 4f 54 59 33 59 6a 52 68 4d 7a Data Ascii: wcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	49718	142.250.184.228	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:23 UTC	464	OUT	GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:17:23 UTC	844	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 153207 Date: Sun, 29 Sep 2024 13:17:23 GMT Expires: Sun, 29 Sep 2024 13:17:23 GMT Cache-Control: private, max-age=3600 ETag: "5807633318253471531" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-29 13:17:23 UTC	546	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 68 61 73 68 3a 22 31 37 33 38 33 36 33 33 34 36 34 33 37 30 36 31 35 35 35 33 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 30 30 30 32 2c 31 37 33 30 31 34 33 37 2c 31 37 33 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17300002,17301437,173
2024-09-29 13:17:23 UTC	1390	IN	Data Raw: 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 69 35 75 5a 58 51 73 64 Data Ascii: rovidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsd
2024-09-29 13:17:23 UTC	1390	IN	Data Raw: 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 Data Ascii: )return a;c.prototype.toString=function(){return this.ne};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8ClampedArray
2024-09-29 13:17:23 UTC	1390	IN	Data Raw: 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 61 3d 6c 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 70 61 29 70 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e 64 65 Data Ascii: +" is not extensible");return a}:null}var pa=la;function qa(a,b){a.prototype=ka(b.prototype);a.prototype.constructor=a;if(pa)pa(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.de
2024-09-29 13:17:23 UTC	1390	IN	Data Raw: 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 55 66 28 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 62 64 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 67 67 28 68 2c 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 62 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 63 65 28 32 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 64 3d 66 75 6e 63 74 69 6f Data Ascii: e "function":h=!0;break a;default:h=!1}h?this.Uf(g):this.Ld(g)}};b.prototype.Uf=function(g){var h=void 0;try{h=g.then}catch(k){this.bd(k);return}typeof h=="function"?this.gg(h,g):this.Ld(g)};b.prototype.bd=function(g){this.ce(2,g)};b.prototype.Ld=functio
2024-09-29 13:17:23 UTC	1390	IN	Data Raw: 72 20 6c 2c 6d 2c 70 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 69 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 0a 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 42 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 Data Ascii: r l,m,p=new b(function(r,t){l=r;m=t});this.ib(k(g,l),k(h,m));return p};b.prototype.catch=function(g){return this.then(void 0,g)};b.prototype.ib=function(g,h){function k(){switch(l.B){case 1:g(l.Xa);break;case 2:h(l.Xa);break;default:throw Error("Unexpect
2024-09-29 13:17:23 UTC	1390	IN	Data Raw: 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 73 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 63 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a 65 63 74 2e 73 65 61 6c Data Ascii: ction"}function e(k){if(!sa(k,g)){var l=new c;ca(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var k=Object.seal
2024-09-29 13:17:23 UTC	1390	IN	Data Raw: 3a 6d 2c 69 6e 64 65 78 3a 68 2c 49 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 49 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 75 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 Data Ascii: :m,index:h,I:p}}return{id:l,list:m,index:-1,I:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=u(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Objec
2024-09-29 13:17:23 UTC	1390	IN	Data Raw: 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 Data Ascii: urn h.key})};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,h.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.prototype.entries;v
2024-09-29 13:17:23 UTC	1390	IN	Data Raw: 69 66 28 64 5b 2d 2d 63 5d 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 65 3c 3d 30 7d 7d 29 3b 0a 71 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 73 61 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 5b 64 2c 62 5b 64 5d 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 Data Ascii: if(d[--c]!=b[--e])return!1;return e<=0}});q("Object.entries",function(a){return a?a:function(b){var c=[],d;for(d in b)sa(b,d)&&c.push([d,b[d]]);return c}});q("Array.prototype.find",function(a){return a?a:function(b,c){a:{var d=this;d instanceof String&&(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.7	49720	216.58.206.46	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:23 UTC	555	OUT	GET /adsense/domains/caf.js?pac=0 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:17:24 UTC	845	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 153223 Date: Sun, 29 Sep 2024 13:17:24 GMT Expires: Sun, 29 Sep 2024 13:17:24 GMT Cache-Control: private, max-age=3600 ETag: "17209215320339076777" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-29 13:17:24 UTC	545	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 73 79 6e 64 69 63 61 74 65 64 73 65 61 72 63 68 2e 67 6f 6f 67 22 2c 68 61 73 68 3a 22 31 37 33 38 33 36 33 33 34 36 34 33 37 30 36 31 35 35 35 33 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 30 30 30 33 2c 31 37 33 30 31 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17300003,17301
2024-09-29 13:17:24 UTC	1390	IN	Data Raw: 74 72 75 65 2c 22 5f 75 73 65 53 65 72 76 65 72 50 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 Data Ascii: true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRv
2024-09-29 13:17:24 UTC	1390	IN	Data Raw: 21 30 2c 76 61 6c 75 65 3a 67 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 Data Ascii: !0,value:g})}if(a)return a;c.prototype.toString=function(){return this.ne};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array U
2024-09-29 13:17:24 UTC	1390	IN	Data Raw: 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 61 3d 6c 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 70 61 29 70 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 Data Ascii: w new TypeError(a+" is not extensible");return a}:null}var pa=la;function qa(a,b){a.prototype=ka(b.prototype);a.prototype.constructor=a;if(pa)pa(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(
2024-09-29 13:17:24 UTC	1390	IN	Data Raw: 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 55 66 28 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 62 64 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 67 67 28 68 2c 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 62 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 63 65 28 32 2c 67 29 7d 3b 62 2e 70 72 6f Data Ascii: =null;break a;case "function":h=!0;break a;default:h=!1}h?this.Uf(g):this.Ld(g)}};b.prototype.Uf=function(g){var h=void 0;try{h=g.then}catch(k){this.bd(k);return}typeof h=="function"?this.gg(h,g):this.Ld(g)};b.prototype.bd=function(g){this.ce(2,g)};b.pro
2024-09-29 13:17:24 UTC	1390	IN	Data Raw: 63 68 28 77 29 7b 6d 28 77 29 7d 7d 3a 74 7d 76 61 72 20 6c 2c 6d 2c 70 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 69 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 0a 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 42 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f Data Ascii: ch(w){m(w)}}:t}var l,m,p=new b(function(r,t){l=r;m=t});this.ib(k(g,l),k(h,m));return p};b.prototype.catch=function(g){return this.then(void 0,g)};b.prototype.ib=function(g,h){function k(){switch(l.B){case 1:g(l.Xa);break;case 2:h(l.Xa);break;default:thro
2024-09-29 13:17:24 UTC	1390	IN	Data Raw: 21 3d 3d 6e 75 6c 6c 7c 7c 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 73 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 63 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b Data Ascii: !==null\|\|l==="function"}function e(k){if(!sa(k,g)){var l=new c;ca(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{
2024-09-29 13:17:24 UTC	1390	IN	Data Raw: 29 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 68 2c 49 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 49 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 75 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 Data Ascii: )return{id:l,list:m,index:h,I:p}}return{id:l,list:m,index:-1,I:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=u(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entr
2024-09-29 13:17:24 UTC	1390	IN	Data Raw: 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 Data Ascii: s,function(h){return h.key})};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,h.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.pr
2024-09-29 13:17:24 UTC	1390	IN	Data Raw: 6c 65 6e 67 74 68 3b 65 3e 30 26 26 63 3e 30 3b 29 69 66 28 64 5b 2d 2d 63 5d 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 65 3c 3d 30 7d 7d 29 3b 0a 71 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 73 61 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 5b 64 2c 62 5b 64 5d 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 Data Ascii: length;e>0&&c>0;)if(d[--c]!=b[--e])return!1;return e<=0}});q("Object.entries",function(a){return a?a:function(b){var c=[],d;for(d in b)sa(b,d)&&c.push([d,b[d]]);return c}});q("Array.prototype.find",function(a){return a?a:function(b,c){a:{var d=this;d ins

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.7	49719	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:24 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 13:17:24 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=98858 Date: Sun, 29 Sep 2024 13:17:24 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.7	49721	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:25 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 13:17:25 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=98887 Date: Sun, 29 Sep 2024 13:17:25 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-29 13:17:25 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.7	49723	76.223.26.96	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:25 UTC	904	OUT	GET /track.php?domain=ymlp294.net&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTg0MC40MTUxOjgzOGE1Y2JhNGQwMmJlYTdmZGM0ODQzZjNkNTRiOWZkZjk2MTcyNWRlNzJlZmVkY2RhM2JiMjdmYmFkYjA0OWE6NjZmOTUzNjA2NTU5MQ%3D%3D HTTP/1.1 Host: www.img2.ymlp294.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" device-memory: 8 rtt: 200 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 dpr: 1 downlink: 1.7 ect: 4g sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.img2.ymlp294.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
2024-09-29 13:17:25 UTC	599	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Alt-Svc: h3=":50944"; ma=2592000 Content-Type: text/html; charset=UTF-8 Date: Sun, 29 Sep 2024 13:17:25 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: answercheck Connection: close Transfer-Encoding: chunked
2024-09-29 13:17:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.7	49726	76.223.26.96	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:26 UTC	778	OUT	GET /favicon.ico HTTP/1.1 Host: www.img2.ymlp294.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" device-memory: 8 rtt: 200 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 dpr: 1 downlink: 1.7 ect: 4g sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.img2.ymlp294.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
2024-09-29 13:17:26 UTC	274	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Alt-Svc: h3=":50944"; ma=2592000 Content-Length: 0 Content-Type: image/x-icon Date: Sun, 29 Sep 2024 13:17:26 GMT Etag: "66e18132-0" Last-Modified: Wed, 11 Sep 2024 11:38:26 GMT Server: Caddy Server: nginx Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.7	49729	76.223.26.96	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:26 UTC	645	OUT	GET /track.php?domain=ymlp294.net&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTg0MC40MTUxOjgzOGE1Y2JhNGQwMmJlYTdmZGM0ODQzZjNkNTRiOWZkZjk2MTcyNWRlNzJlZmVkY2RhM2JiMjdmYmFkYjA0OWE6NjZmOTUzNjA2NTU5MQ%3D%3D HTTP/1.1 Host: www.img2.ymlp294.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
2024-09-29 13:17:27 UTC	599	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Alt-Svc: h3=":50944"; ma=2592000 Content-Type: text/html; charset=UTF-8 Date: Sun, 29 Sep 2024 13:17:27 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: answercheck Connection: close Transfer-Encoding: chunked
2024-09-29 13:17:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.7	49727	216.58.206.33	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:26 UTC	736	OUT	GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:17:27 UTC	800	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 391 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sun, 29 Sep 2024 06:26:08 GMT Expires: Mon, 30 Sep 2024 05:26:08 GMT Cache-Control: public, max-age=82800 Last-Modified: Thu, 20 Jul 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Age: 24679 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-29 13:17:27 UTC	391	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 30 30 22 20 68 65 69 67 68 74 3d 22 32 30 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 35 2e 35 20 31 34 68 2d 2e 37 39 6c 2d 2e 32 38 2d 2e 32 37 43 31 35 2e 34 31 20 31 32 2e 35 39 20 31 36 20 31 31 2e 31 31 20 31 36 20 39 2e 35 20 31 36 20 35 2e 39 31 20 31 33 2e 30 39 20 33 20 39 2e 35 20 33 53 33 20 35 2e 39 31 20 33 20 39 2e 35 20 35 2e 39 31 20 31 36 20 39 2e 35 20 31 36 63 31 2e 36 31 20 30 20 33 2e 30 39 2d 2e 35 39 20 34 2e 32 33 2d 31 2e 35 37 6c 2e 32 37 2e 32 38 76 2e 37 39 6c 35 20 34 2e 39 39 4c Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.7	49728	216.58.206.33	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:26 UTC	737	OUT	GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:17:27 UTC	799	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 200 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sun, 29 Sep 2024 10:57:16 GMT Expires: Mon, 30 Sep 2024 09:57:16 GMT Cache-Control: public, max-age=82800 Age: 8411 Last-Modified: Thu, 02 Nov 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-29 13:17:27 UTC	200	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 77 69 64 74 68 3d 22 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 35 2e 38 38 20 34 2e 31 32 4c 31 33 2e 37 36 20 31 32 6c 2d 37 2e 38 38 20 37 2e 38 38 4c 38 20 32 32 6c 31 30 2d 31 30 4c 38 20 32 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.7	49714	142.250.186.142	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:27 UTC	886	OUT	GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=n5amcn7arpgx&aqid=Y1P5Zq6eA9SqjuwP5a_K2AQ&psid=7840396037&pbt=bs&adbx=375&adby=130&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=19%7C0%7C1081%7C1666%7C825&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.img2.ymlp294.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:17:27 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-LLmBFtgMda2X6lfs_KDtAA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 29 Sep 2024 13:17:27 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.7	49730	76.223.26.96	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:27 UTC	455	OUT	GET /favicon.ico HTTP/1.1 Host: www.img2.ymlp294.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
2024-09-29 13:17:28 UTC	274	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Alt-Svc: h3=":50944"; ma=2592000 Content-Length: 0 Content-Type: image/x-icon Date: Sun, 29 Sep 2024 13:17:27 GMT Etag: "66e18132-0" Last-Modified: Wed, 11 Sep 2024 11:38:26 GMT Server: Caddy Server: nginx Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.7	49731	142.250.186.142	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:27 UTC	886	OUT	GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=g1363e58m8bp&aqid=Y1P5Zq6eA9SqjuwP5a_K2AQ&psid=7840396037&pbt=bv&adbx=375&adby=130&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=19%7C0%7C1081%7C1666%7C825&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.img2.ymlp294.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:17:28 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-3WILB81UdE26cKYsySCa_w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 29 Sep 2024 13:17:28 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.7	49732	142.250.185.193	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:28 UTC	495	OUT	GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:17:28 UTC	800	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 391 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sun, 29 Sep 2024 06:26:08 GMT Expires: Mon, 30 Sep 2024 05:26:08 GMT Cache-Control: public, max-age=82800 Last-Modified: Thu, 20 Jul 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Age: 24680 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-29 13:17:28 UTC	391	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 30 30 22 20 68 65 69 67 68 74 3d 22 32 30 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 35 2e 35 20 31 34 68 2d 2e 37 39 6c 2d 2e 32 38 2d 2e 32 37 43 31 35 2e 34 31 20 31 32 2e 35 39 20 31 36 20 31 31 2e 31 31 20 31 36 20 39 2e 35 20 31 36 20 35 2e 39 31 20 31 33 2e 30 39 20 33 20 39 2e 35 20 33 53 33 20 35 2e 39 31 20 33 20 39 2e 35 20 35 2e 39 31 20 31 36 20 39 2e 35 20 31 36 63 31 2e 36 31 20 30 20 33 2e 30 39 2d 2e 35 39 20 34 2e 32 33 2d 31 2e 35 37 6c 2e 32 37 2e 32 38 76 2e 37 39 6c 35 20 34 2e 39 39 4c Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.7	49733	142.250.185.193	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:28 UTC	496	OUT	GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:17:28 UTC	799	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 200 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sun, 29 Sep 2024 10:57:16 GMT Expires: Mon, 30 Sep 2024 09:57:16 GMT Cache-Control: public, max-age=82800 Age: 8412 Last-Modified: Thu, 02 Nov 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-29 13:17:28 UTC	200	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 77 69 64 74 68 3d 22 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 35 2e 38 38 20 34 2e 31 32 4c 31 33 2e 37 36 20 31 32 6c 2d 37 2e 38 38 20 37 2e 38 38 4c 38 20 32 32 6c 31 30 2d 31 30 4c 38 20 32 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.7	49737	108.128.52.91	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:33 UTC	679	OUT	GET /index.php?domain_name=ymlp294.net HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:17:33 UTC	263	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 13:17:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: pct-0f144a28a2be3a0109e2a843e82c7f6c=1; expires=Sun, 29-Sep-2024 14:17:33 GMT; Max-Age=3600
2024-09-29 13:17:33 UTC	5285	IN	Data Raw: 31 34 39 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 61 6c 65 20 6f 66 66 65 72 20 66 6f 72 3a 20 79 6d 6c 70 32 39 34 2e 6e 65 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c Data Ascii: 149d<!DOCTYPE html><html><head> <meta charset="UTF-8"> <title>Sale offer for: ymlp294.net</title> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <link href="https://fonts.googleapis.com/css?famil
2024-09-29 13:17:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.7	49736	108.128.52.91	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:33 UTC	653	OUT	GET /scripts/select2/select2.css HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.mydomaincontact.com/index.php?domain_name=ymlp294.net Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-0f144a28a2be3a0109e2a843e82c7f6c=1
2024-09-29 13:17:33 UTC	228	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 13:17:33 GMT Content-Type: text/css Content-Length: 19226 Connection: close Server: nginx Last-Modified: Wed, 04 Sep 2024 11:48:32 GMT ETag: "66d84910-4b1a" Accept-Ranges: bytes
2024-09-29 13:17:33 UTC	16156	IN	Data Raw: 2f 2a 0a 56 65 72 73 69 6f 6e 3a 20 33 2e 33 2e 32 20 54 69 6d 65 73 74 61 6d 70 3a 20 4d 6f 6e 20 4d 61 72 20 32 35 20 31 32 3a 31 34 3a 31 38 20 50 44 54 20 32 30 31 33 0a 2a 2f 0a 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 20 20 2f 2a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 20 66 6f 72 20 69 65 37 20 2a 2f 0a 20 20 20 20 7a 6f 6f 6d 3a 20 31 3b 0a 20 20 20 20 2a 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 0a 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 7d 0a 0a 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2c 0a 2e 73 65 6c 65 Data Ascii: /Version: 3.3.2 Timestamp: Mon Mar 25 12:14:18 PDT 2013/.select2-container { position: relative; display: inline-block; /* inline-block for ie7 / zoom: 1; display: inline; vertical-align: middle;}.select2-container,.sele
2024-09-29 13:17:33 UTC	3070	IN	Data Raw: 20 20 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 34 65 34 65 34 3b 0a 20 20 20 20 66 69 6c 74 65 72 3a 20 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 20 73 74 61 72 74 43 6f 6c 6f 72 73 74 72 3d 27 23 65 65 65 65 65 65 27 2c 20 65 6e 64 43 6f 6c 6f 72 73 74 72 3d 27 23 66 34 66 34 66 34 27 2c 20 47 72 61 64 69 65 6e 74 54 79 70 65 3d 30 20 29 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 6e 74 28 6c 69 6e 65 Data Ascii: -ms-user-select: none; user-select: none; background-color: #e4e4e4; filter: progid:DXImageTransform.Microsoft.gradient( startColorstr='#eeeeee', endColorstr='#f4f4f4', GradientType=0 ); background-image: -webkit-gradient(line

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.7	49741	108.128.52.91	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:34 UTC	641	OUT	GET /forms/style.css HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.mydomaincontact.com/index.php?domain_name=ymlp294.net Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-0f144a28a2be3a0109e2a843e82c7f6c=1
2024-09-29 13:17:34 UTC	226	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 13:17:34 GMT Content-Type: text/css Content-Length: 3575 Connection: close Server: nginx Last-Modified: Wed, 04 Sep 2024 11:48:32 GMT ETag: "66d84910-df7" Accept-Ranges: bytes
2024-09-29 13:17:34 UTC	3575	IN	Data Raw: 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 0a 0a 62 6f 64 79 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 23 65 63 65 66 66 31 3b 0a 09 63 6f 6c 6f 72 3a 20 23 32 36 33 32 33 38 3b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 53 6f 75 72 63 65 20 53 61 6e 73 20 50 72 6f 27 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 09 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 20 6f 70 74 69 6d 69 7a 65 4c 65 67 69 62 69 6c 69 74 79 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 72 65 6d 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 72 65 6d 3b 0a 7d 0a 0a 68 31 2c 68 32 2c 68 33 2c 68 33 2c 68 34 2c 68 35 2c 68 36 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 53 6f 75 72 63 65 20 53 65 72 69 66 20 50 72 6f 27 2c 73 65 72 69 66 7d 0a 0a 2e Data Ascii: *{margin:0;padding:0}body {background:#eceff1;color: #263238;font-family: 'Source Sans Pro', sans-serif;text-rendering: optimizeLegibility;font-size:1.2rem;line-height:1.5rem;}h1,h2,h3,h3,h4,h5,h6 {font-family:'Source Serif Pro',serif}.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.7	49740	108.128.52.91	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:34 UTC	629	OUT	GET /scripts/jquery.js HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mydomaincontact.com/index.php?domain_name=ymlp294.net Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-0f144a28a2be3a0109e2a843e82c7f6c=1
2024-09-29 13:17:34 UTC	243	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 13:17:34 GMT Content-Type: application/javascript Content-Length: 85260 Connection: close Server: nginx Last-Modified: Wed, 04 Sep 2024 11:48:32 GMT ETag: "66d84910-14d0c" Accept-Ranges: bytes
2024-09-29 13:17:34 UTC	16141	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 31 2e 35 2e 31 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2c 20 4a 6f 68 6e 20 52 65 73 69 67 0a 20 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6f 72 20 47 50 4c 20 56 65 72 73 69 6f 6e 20 32 20 6c 69 63 65 6e 73 65 73 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2c 20 54 68 65 20 44 Data Ascii: /! jQuery JavaScript Library v1.5.1 * http://jquery.com/ * * Copyright 2011, John Resig * Dual licensed under the MIT or GPL Version 2 licenses. * http://jquery.org/license * * Includes Sizzle.js * http://sizzlejs.com/ * Copyright 2011, The D
2024-09-29 13:17:34 UTC	16379	IN	Data Raw: 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 79 6c 65 22 29 29 2c 68 72 65 66 4e 6f 72 6d 61 6c 69 7a 65 64 3a 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 29 3d 3d 3d 22 2f 61 22 2c 6f 70 61 63 69 74 79 3a 2f 5e 30 2e 35 35 24 2f 2e 74 65 73 74 28 66 2e 73 74 79 6c 65 2e 6f 70 61 63 69 74 79 29 2c 63 73 73 46 6c 6f 61 74 3a 21 21 66 2e 73 74 79 6c 65 2e 63 73 73 46 6c 6f 61 74 2c 63 68 65 63 6b 4f 6e 3a 69 2e 76 61 6c 75 65 3d 3d 3d 22 6f 6e 22 2c 6f 70 74 53 65 6c 65 63 74 65 64 3a 68 2e 73 65 6c 65 63 74 65 64 2c 64 65 6c 65 74 65 45 78 70 61 6e 64 6f 3a 21 30 2c 6f 70 74 44 69 73 61 62 6c 65 64 3a 21 31 2c 63 68 65 63 6b 43 6c 6f 6e 65 3a 21 31 2c 6e 6f 43 6c 6f 6e 65 45 76 65 6e 74 3a 21 30 2c 6e 6f 43 6c 6f 6e 65 43 68 65 63 6b 65 Data Ascii: etAttribute("style")),hrefNormalized:f.getAttribute("href")==="/a",opacity:/^0.55$/.test(f.style.opacity),cssFloat:!!f.style.cssFloat,checkOn:i.value==="on",optSelected:h.selected,deleteExpando:!0,optDisabled:!1,checkClone:!1,noCloneEvent:!0,noCloneChecke
2024-09-29 13:17:34 UTC	16384	IN	Data Raw: 65 74 75 70 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 64 2e 65 76 65 6e 74 2e 61 64 64 28 74 68 69 73 2c 62 2c 63 26 26 63 2e 73 65 6c 65 63 74 6f 72 3f 79 3a 78 2c 61 29 7d 2c 74 65 61 72 64 6f 77 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 64 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 74 68 69 73 2c 62 2c 61 26 26 61 2e 73 65 6c 65 63 74 6f 72 3f 79 3a 78 29 7d 7d 7d 29 2c 64 2e 73 75 70 70 6f 72 74 2e 73 75 62 6d 69 74 42 75 62 62 6c 65 73 7c 7c 28 64 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2e 73 75 62 6d 69 74 3d 7b 73 65 74 75 70 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 74 68 69 73 2e 6e 6f 64 65 4e 61 6d 65 26 26 74 68 69 73 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 21 3d 3d 22 66 6f 72 6d 22 29 64 2e 65 76 65 6e Data Ascii: etup:function(c){d.event.add(this,b,c&&c.selector?y:x,a)},teardown:function(a){d.event.remove(this,b,a&&a.selector?y:x)}}}),d.support.submitBubbles\|\|(d.event.special.submit={setup:function(a,b){if(this.nodeName&&this.nodeName.toLowerCase()!=="form")d.even
2024-09-29 13:17:34 UTC	16384	IN	Data Raw: 28 21 67 26 26 21 6b 2e 69 73 58 4d 4c 28 65 29 29 7b 76 61 72 20 68 3d 2f 5e 28 5c 77 2b 24 29 7c 5e 5c 2e 28 5b 5c 77 5c 2d 5d 2b 24 29 7c 5e 23 28 5b 5c 77 5c 2d 5d 2b 24 29 2f 2e 65 78 65 63 28 62 29 3b 69 66 28 68 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 31 7c 7c 65 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 39 29 29 7b 69 66 28 68 5b 31 5d 29 72 65 74 75 72 6e 20 70 28 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 62 29 2c 66 29 3b 69 66 28 68 5b 32 5d 26 26 6c 2e 66 69 6e 64 2e 43 4c 41 53 53 26 26 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 70 28 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 68 5b 32 5d 29 2c 66 29 7d 69 66 28 65 2e 6e 6f 64 65 Data Ascii: (!g&&!k.isXML(e)){var h=/^(\w+$)\|^\.([\w\-]+$)\|^#([\w\-]+$)/.exec(b);if(h&&(e.nodeType===1\|\|e.nodeType===9)){if(h[1])return p(e.getElementsByTagName(b),f);if(h[2]&&l.find.CLASS&&e.getElementsByClassName)return p(e.getElementsByClassName(h[2]),f)}if(e.node
2024-09-29 13:17:34 UTC	16384	IN	Data Raw: 62 49 3d 7b 7d 2c 62 4a 2c 62 4b 3b 74 72 79 7b 62 4a 3d 63 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 7d 63 61 74 63 68 28 62 4c 29 7b 62 4a 3d 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 2c 62 4a 2e 68 72 65 66 3d 22 22 2c 62 4a 3d 62 4a 2e 68 72 65 66 7d 62 4b 3d 62 46 2e 65 78 65 63 28 62 4a 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 2c 64 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 6c 6f 61 64 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 65 29 7b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 26 26 62 47 29 72 65 74 75 72 6e 20 62 47 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 69 66 28 21 74 68 69 73 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 74 68 69 73 3b 76 61 72 20 66 3d 61 2e 69 6e 64 65 78 4f Data Ascii: bI={},bJ,bK;try{bJ=c.location.href}catch(bL){bJ=c.createElement("a"),bJ.href="",bJ=bJ.href}bK=bF.exec(bJ.toLowerCase()),d.fn.extend({load:function(a,c,e){if(typeof a!=="string"&&bG)return bG.apply(this,arguments);if(!this.length)return this;var f=a.indexO
2024-09-29 13:17:34 UTC	3588	IN	Data Raw: 6f 6c 6c 4c 65 66 74 29 29 3b 72 65 74 75 72 6e 7b 74 6f 70 3a 6c 2c 6c 65 66 74 3a 6d 7d 7d 2c 64 2e 6f 66 66 73 65 74 3d 7b 69 6e 69 74 69 61 6c 69 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 63 2e 62 6f 64 79 2c 62 3d 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 65 2c 66 2c 67 2c 68 2c 69 3d 70 61 72 73 65 46 6c 6f 61 74 28 64 2e 63 73 73 28 61 2c 22 6d 61 72 67 69 6e 54 6f 70 22 29 29 7c 7c 30 2c 6a 3d 22 3c 64 69 76 20 73 74 79 6c 65 3d 27 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 62 6f 72 64 65 72 3a 35 70 78 20 73 6f 6c 69 64 20 23 30 30 30 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 70 78 3b 68 65 69 67 68 74 3a 31 70 78 Data Ascii: ollLeft));return{top:l,left:m}},d.offset={initialize:function(){var a=c.body,b=c.createElement("div"),e,f,g,h,i=parseFloat(d.css(a,"marginTop"))\|\|0,j="<div style='position:absolute;top:0;left:0;margin:0;border:5px solid #000;padding:0;width:1px;height:1px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.7	49742	108.128.52.91	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:34 UTC	642	OUT	GET /scripts/select2/select2.min.js HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mydomaincontact.com/index.php?domain_name=ymlp294.net Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-0f144a28a2be3a0109e2a843e82c7f6c=1
2024-09-29 13:17:34 UTC	242	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 13:17:34 GMT Content-Type: application/javascript Content-Length: 41867 Connection: close Server: nginx Last-Modified: Wed, 04 Sep 2024 11:48:32 GMT ETag: "66d84910-a38b" Accept-Ranges: bytes
2024-09-29 13:17:34 UTC	16142	IN	Data Raw: 2f 2a 0a 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 49 67 6f 72 20 56 61 79 6e 62 65 72 67 0a 0a 56 65 72 73 69 6f 6e 3a 20 33 2e 33 2e 32 20 54 69 6d 65 73 74 61 6d 70 3a 20 4d 6f 6e 20 4d 61 72 20 32 35 20 31 32 3a 31 34 3a 31 38 20 50 44 54 20 32 30 31 33 0a 0a 54 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 73 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 2c 20 56 65 72 73 69 6f 6e 20 32 2e 30 20 28 74 68 65 20 22 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 22 29 20 6f 72 20 74 68 65 20 47 4e 55 0a 47 65 6e 65 72 61 6c 20 50 75 62 6c 69 63 20 4c 69 63 65 6e 73 65 20 76 65 72 73 69 6f 6e 20 32 20 28 74 68 65 20 22 47 50 4c 20 4c 69 63 65 6e 73 65 22 29 2e 20 59 6f 75 20 6d 61 79 20 63 68 6f 6f 73 65 Data Ascii: /*Copyright 2012 Igor VaynbergVersion: 3.3.2 Timestamp: Mon Mar 25 12:14:18 PDT 2013This software is licensed under the Apache License, Version 2.0 (the "Apache License") or the GNUGeneral Public License version 2 (the "GPL License"). You may choose
2024-09-29 13:17:34 UTC	16379	IN	Data Raw: 66 28 74 68 69 73 2e 6f 70 65 6e 65 64 28 29 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 49 64 2c 63 3d 22 73 63 72 6f 6c 6c 2e 22 2b 62 2c 64 3d 22 72 65 73 69 7a 65 2e 22 2b 62 2c 65 3d 22 6f 72 69 65 6e 74 61 74 69 6f 6e 63 68 61 6e 67 65 2e 22 2b 62 3b 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 2e 70 61 72 65 6e 74 73 28 29 2e 61 64 64 28 77 69 6e 64 6f 77 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 28 74 68 69 73 29 2e 75 6e 62 69 6e 64 28 63 29 2e 75 6e 62 69 6e 64 28 64 29 2e 75 6e 62 69 6e 64 28 65 29 7d 29 2c 74 68 69 73 2e 63 6c 65 61 72 44 72 6f 70 64 6f 77 6e 41 6c 69 67 6e 6d 65 6e 74 50 72 65 66 65 72 65 6e 63 65 28 29 2c 61 28 22 23 73 65 6c 65 63 74 32 2d 64 72 6f 70 2d 6d 61 73 6b 22 29 2e 68 69 64 65 28 Data Ascii: f(this.opened()){var b=this.containerId,c="scroll."+b,d="resize."+b,e="orientationchange."+b;this.container.parents().add(window).each(function(){a(this).unbind(c).unbind(d).unbind(e)}),this.clearDropdownAlignmentPreference(),a("#select2-drop-mask").hide(
2024-09-29 13:17:34 UTC	9346	IN	Data Raw: 7d 7d 7d 29 29 2c 74 68 69 73 2e 73 65 61 72 63 68 2e 62 69 6e 64 28 22 6b 65 79 75 70 22 2c 74 68 69 73 2e 62 69 6e 64 28 74 68 69 73 2e 72 65 73 69 7a 65 53 65 61 72 63 68 29 29 2c 74 68 69 73 2e 73 65 61 72 63 68 2e 62 69 6e 64 28 22 62 6c 75 72 22 2c 74 68 69 73 2e 62 69 6e 64 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 61 63 74 69 76 65 22 29 2c 74 68 69 73 2e 73 65 61 72 63 68 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 73 65 6c 65 63 74 32 2d 66 6f 63 75 73 65 64 22 29 2c 74 68 69 73 2e 6f 70 65 6e 65 64 28 29 7c 7c 74 68 69 73 2e 63 6c 65 61 72 53 65 61 72 63 68 28 29 2c 61 2e 73 74 6f 70 49 6d 6d 65 64 69 61 74 65 50 Data Ascii: }}})),this.search.bind("keyup",this.bind(this.resizeSearch)),this.search.bind("blur",this.bind(function(a){this.container.removeClass("select2-container-active"),this.search.removeClass("select2-focused"),this.opened()\|\|this.clearSearch(),a.stopImmediateP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.7	49747	108.128.52.91	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:35 UTC	627	OUT	GET /forms/script.js HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mydomaincontact.com/index.php?domain_name=ymlp294.net Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-0f144a28a2be3a0109e2a843e82c7f6c=1
2024-09-29 13:17:35 UTC	240	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 13:17:35 GMT Content-Type: application/javascript Content-Length: 2421 Connection: close Server: nginx Last-Modified: Wed, 04 Sep 2024 11:48:32 GMT ETag: "66d84910-975" Accept-Ranges: bytes
2024-09-29 13:17:35 UTC	2421	IN	Data Raw: 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 24 28 27 69 6e 70 75 74 2e 69 6e 70 75 74 74 65 78 74 3a 66 69 72 73 74 27 29 2e 66 6f 63 75 73 28 29 3b 0a 0a 0a 09 2f 2f 20 2d 2d 20 69 6e 69 74 69 61 74 65 20 73 61 6c 65 20 6f 72 20 73 65 6e 64 20 6f 66 66 65 72 0a 09 24 28 22 69 6e 70 75 74 2e 73 75 62 6d 69 74 22 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 09 09 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 0a 09 09 24 28 74 68 69 73 29 2e 61 64 64 43 6c 61 73 73 28 22 73 70 69 6e 6e 65 72 22 29 3b 0a 09 09 24 28 22 2e 69 6e 70 75 74 45 72 72 6f 72 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 69 6e 70 75 74 45 72 72 6f 72 22 29 3b 0a 0a 20 20 20 20 20 20 20 20 Data Ascii: $(document).ready(function() { $('input.inputtext:first').focus();// -- initiate sale or send offer$("input.submit").click(function(e) {e.preventDefault();$(this).addClass("spinner");$(".inputError").removeClass("inputError");

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.7	49748	54.171.84.62	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:35 UTC	425	OUT	GET /scripts/select2/select2.min.js HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-0f144a28a2be3a0109e2a843e82c7f6c=1
2024-09-29 13:17:35 UTC	242	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 13:17:35 GMT Content-Type: application/javascript Content-Length: 41867 Connection: close Server: nginx Last-Modified: Wed, 04 Sep 2024 11:48:32 GMT ETag: "66d84910-a38b" Accept-Ranges: bytes
2024-09-29 13:17:35 UTC	16142	IN	Data Raw: 2f 2a 0a 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 49 67 6f 72 20 56 61 79 6e 62 65 72 67 0a 0a 56 65 72 73 69 6f 6e 3a 20 33 2e 33 2e 32 20 54 69 6d 65 73 74 61 6d 70 3a 20 4d 6f 6e 20 4d 61 72 20 32 35 20 31 32 3a 31 34 3a 31 38 20 50 44 54 20 32 30 31 33 0a 0a 54 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 73 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 2c 20 56 65 72 73 69 6f 6e 20 32 2e 30 20 28 74 68 65 20 22 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 22 29 20 6f 72 20 74 68 65 20 47 4e 55 0a 47 65 6e 65 72 61 6c 20 50 75 62 6c 69 63 20 4c 69 63 65 6e 73 65 20 76 65 72 73 69 6f 6e 20 32 20 28 74 68 65 20 22 47 50 4c 20 4c 69 63 65 6e 73 65 22 29 2e 20 59 6f 75 20 6d 61 79 20 63 68 6f 6f 73 65 Data Ascii: /*Copyright 2012 Igor VaynbergVersion: 3.3.2 Timestamp: Mon Mar 25 12:14:18 PDT 2013This software is licensed under the Apache License, Version 2.0 (the "Apache License") or the GNUGeneral Public License version 2 (the "GPL License"). You may choose
2024-09-29 13:17:35 UTC	16379	IN	Data Raw: 66 28 74 68 69 73 2e 6f 70 65 6e 65 64 28 29 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 49 64 2c 63 3d 22 73 63 72 6f 6c 6c 2e 22 2b 62 2c 64 3d 22 72 65 73 69 7a 65 2e 22 2b 62 2c 65 3d 22 6f 72 69 65 6e 74 61 74 69 6f 6e 63 68 61 6e 67 65 2e 22 2b 62 3b 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 2e 70 61 72 65 6e 74 73 28 29 2e 61 64 64 28 77 69 6e 64 6f 77 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 28 74 68 69 73 29 2e 75 6e 62 69 6e 64 28 63 29 2e 75 6e 62 69 6e 64 28 64 29 2e 75 6e 62 69 6e 64 28 65 29 7d 29 2c 74 68 69 73 2e 63 6c 65 61 72 44 72 6f 70 64 6f 77 6e 41 6c 69 67 6e 6d 65 6e 74 50 72 65 66 65 72 65 6e 63 65 28 29 2c 61 28 22 23 73 65 6c 65 63 74 32 2d 64 72 6f 70 2d 6d 61 73 6b 22 29 2e 68 69 64 65 28 Data Ascii: f(this.opened()){var b=this.containerId,c="scroll."+b,d="resize."+b,e="orientationchange."+b;this.container.parents().add(window).each(function(){a(this).unbind(c).unbind(d).unbind(e)}),this.clearDropdownAlignmentPreference(),a("#select2-drop-mask").hide(
2024-09-29 13:17:35 UTC	9346	IN	Data Raw: 7d 7d 7d 29 29 2c 74 68 69 73 2e 73 65 61 72 63 68 2e 62 69 6e 64 28 22 6b 65 79 75 70 22 2c 74 68 69 73 2e 62 69 6e 64 28 74 68 69 73 2e 72 65 73 69 7a 65 53 65 61 72 63 68 29 29 2c 74 68 69 73 2e 73 65 61 72 63 68 2e 62 69 6e 64 28 22 62 6c 75 72 22 2c 74 68 69 73 2e 62 69 6e 64 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 61 63 74 69 76 65 22 29 2c 74 68 69 73 2e 73 65 61 72 63 68 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 73 65 6c 65 63 74 32 2d 66 6f 63 75 73 65 64 22 29 2c 74 68 69 73 2e 6f 70 65 6e 65 64 28 29 7c 7c 74 68 69 73 2e 63 6c 65 61 72 53 65 61 72 63 68 28 29 2c 61 2e 73 74 6f 70 49 6d 6d 65 64 69 61 74 65 50 Data Ascii: }}})),this.search.bind("keyup",this.bind(this.resizeSearch)),this.search.bind("blur",this.bind(function(a){this.container.removeClass("select2-container-active"),this.search.removeClass("select2-focused"),this.opened()\|\|this.clearSearch(),a.stopImmediateP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.7	49749	108.128.52.91	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:35 UTC	633	OUT	GET /forms/script-addon.js HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mydomaincontact.com/index.php?domain_name=ymlp294.net Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-0f144a28a2be3a0109e2a843e82c7f6c=1
2024-09-29 13:17:35 UTC	239	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 13:17:35 GMT Content-Type: application/javascript Content-Length: 396 Connection: close Server: nginx Last-Modified: Wed, 04 Sep 2024 11:48:32 GMT ETag: "66d84910-18c" Accept-Ranges: bytes
2024-09-29 13:17:35 UTC	396	IN	Data Raw: 2f 2f 20 2d 2d 20 61 64 64 69 74 69 6f 6e 61 6c 20 73 63 72 69 70 74 20 66 6f 72 20 74 68 65 20 73 61 6c 65 20 6f 66 66 65 72 20 76 65 72 73 69 6f 6e 20 6f 66 20 74 68 65 20 66 6f 72 6d 0a 0a 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 24 28 22 23 63 75 72 72 65 6e 63 79 22 29 2e 73 65 6c 65 63 74 32 28 7b 6d 69 6e 69 6d 75 6d 52 65 73 75 6c 74 73 46 6f 72 53 65 61 72 63 68 3a 20 2d 31 7d 29 3b 0a 7d 29 3b 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 53 61 6c 65 50 72 69 63 65 56 61 6c 69 64 28 29 20 7b 0a 20 20 20 20 24 28 22 23 70 72 69 63 65 48 6f 6c 64 65 72 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 69 6e 70 75 74 45 72 72 6f 72 27 29 3b 0a 20 20 20 20 76 61 72 20 76 61 6c 20 3d 20 24 28 Data Ascii: // -- additional script for the sale offer version of the form$(document).ready(function() { $("#currency").select2({minimumResultsForSearch: -1});});function isSalePriceValid() { $("#priceHolder").removeClass('inputError'); var val = $(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.7	49750	108.128.52.91	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:35 UTC	688	OUT	GET /images/trust.svg HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mydomaincontact.com/index.php?domain_name=ymlp294.net Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-0f144a28a2be3a0109e2a843e82c7f6c=1
2024-09-29 13:17:36 UTC	233	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 13:17:35 GMT Content-Type: image/svg+xml Content-Length: 20199 Connection: close Server: nginx Last-Modified: Wed, 04 Sep 2024 11:48:32 GMT ETag: "66d84910-4ee7" Accept-Ranges: bytes
2024-09-29 13:17:36 UTC	16151	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 38 38 20 33 38 22 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 09 2e 73 74 30 7b 66 69 6c 6c 3a 23 62 30 62 65 63 35 3b 7d 0a 3c 2f 73 74 79 6c 65 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 32 34 34 2e 37 20 31 32 2e 32 76 32 2e 31 63 30 20 30 2e 33 2d 30 2e 31 20 30 2e 36 2d 30 2e 32 20 30 2e 38 73 2d 30 2e 34 20 30 2e 33 2d 30 2e 36 20 30 2e 33 63 2d 30 2e 32 20 30 2d 30 2e 34 2d 30 2e 31 2d 30 2e 36 2d 30 2e 33 73 2d 30 2e 32 2d 30 2e 34 2d 30 2e 32 2d 30 2e 38 76 2d 32 2e 35 63 30 2d 30 2e 34 20 30 2d 30 2e 37 20 30 2d 30 2e 39 73 2d 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 288 38"><style type="text/css">.st0{fill:#b0bec5;}</style><path class="st0" d="M244.7 12.2v2.1c0 0.3-0.1 0.6-0.2 0.8s-0.4 0.3-0.6 0.3c-0.2 0-0.4-0.1-0.6-0.3s-0.2-0.4-0.2-0.8v-2.5c0-0.4 0-0.7 0-0.9s-0
2024-09-29 13:17:36 UTC	4048	IN	Data Raw: 33 2d 30 2e 32 20 30 2e 32 2d 30 2e 31 20 30 2e 34 2d 30 2e 31 63 30 2e 31 20 30 20 30 2e 33 20 30 20 30 2e 34 20 30 2e 31 73 30 2e 32 20 30 2e 31 20 30 2e 33 20 30 2e 32 20 30 2e 32 20 30 2e 32 20 30 2e 32 20 30 2e 33 20 30 2e 31 20 30 2e 32 20 30 2e 31 20 30 2e 34 20 30 20 30 2e 33 2d 30 2e 31 20 30 2e 34 20 2d 30 2e 31 20 30 2e 32 2d 30 2e 32 20 30 2e 33 20 2d 30 2e 32 20 30 2e 32 2d 30 2e 33 20 30 2e 32 20 2d 30 2e 33 20 30 2e 31 2d 30 2e 34 20 30 2e 31 63 2d 30 2e 31 20 30 2d 30 2e 33 20 30 2d 30 2e 34 2d 30 2e 31 73 2d 30 2e 32 2d 30 2e 31 2d 30 2e 33 2d 30 2e 32 20 2d 30 2e 32 2d 30 2e 32 2d 30 2e 32 2d 30 2e 33 53 31 35 37 2e 33 20 31 30 2e 35 20 31 35 37 2e 33 20 31 30 2e 34 7a 4d 31 35 37 2e 34 20 31 32 2e 37 68 31 2e 38 76 37 2e 34 68 2d 31 2e Data Ascii: 3-0.2 0.2-0.1 0.4-0.1c0.1 0 0.3 0 0.4 0.1s0.2 0.1 0.3 0.2 0.2 0.2 0.2 0.3 0.1 0.2 0.1 0.4 0 0.3-0.1 0.4 -0.1 0.2-0.2 0.3 -0.2 0.2-0.3 0.2 -0.3 0.1-0.4 0.1c-0.1 0-0.3 0-0.4-0.1s-0.2-0.1-0.3-0.2 -0.2-0.2-0.2-0.3S157.3 10.5 157.3 10.4zM157.4 12.7h1.8v7.4h-1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.7	49752	54.171.84.62	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:36 UTC	412	OUT	GET /scripts/jquery.js HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-0f144a28a2be3a0109e2a843e82c7f6c=1
2024-09-29 13:17:36 UTC	243	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 13:17:36 GMT Content-Type: application/javascript Content-Length: 85260 Connection: close Server: nginx Last-Modified: Wed, 04 Sep 2024 11:48:32 GMT ETag: "66d84910-14d0c" Accept-Ranges: bytes
2024-09-29 13:17:36 UTC	16141	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 31 2e 35 2e 31 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2c 20 4a 6f 68 6e 20 52 65 73 69 67 0a 20 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6f 72 20 47 50 4c 20 56 65 72 73 69 6f 6e 20 32 20 6c 69 63 65 6e 73 65 73 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2c 20 54 68 65 20 44 Data Ascii: /! jQuery JavaScript Library v1.5.1 * http://jquery.com/ * * Copyright 2011, John Resig * Dual licensed under the MIT or GPL Version 2 licenses. * http://jquery.org/license * * Includes Sizzle.js * http://sizzlejs.com/ * Copyright 2011, The D
2024-09-29 13:17:36 UTC	16379	IN	Data Raw: 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 79 6c 65 22 29 29 2c 68 72 65 66 4e 6f 72 6d 61 6c 69 7a 65 64 3a 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 29 3d 3d 3d 22 2f 61 22 2c 6f 70 61 63 69 74 79 3a 2f 5e 30 2e 35 35 24 2f 2e 74 65 73 74 28 66 2e 73 74 79 6c 65 2e 6f 70 61 63 69 74 79 29 2c 63 73 73 46 6c 6f 61 74 3a 21 21 66 2e 73 74 79 6c 65 2e 63 73 73 46 6c 6f 61 74 2c 63 68 65 63 6b 4f 6e 3a 69 2e 76 61 6c 75 65 3d 3d 3d 22 6f 6e 22 2c 6f 70 74 53 65 6c 65 63 74 65 64 3a 68 2e 73 65 6c 65 63 74 65 64 2c 64 65 6c 65 74 65 45 78 70 61 6e 64 6f 3a 21 30 2c 6f 70 74 44 69 73 61 62 6c 65 64 3a 21 31 2c 63 68 65 63 6b 43 6c 6f 6e 65 3a 21 31 2c 6e 6f 43 6c 6f 6e 65 45 76 65 6e 74 3a 21 30 2c 6e 6f 43 6c 6f 6e 65 43 68 65 63 6b 65 Data Ascii: etAttribute("style")),hrefNormalized:f.getAttribute("href")==="/a",opacity:/^0.55$/.test(f.style.opacity),cssFloat:!!f.style.cssFloat,checkOn:i.value==="on",optSelected:h.selected,deleteExpando:!0,optDisabled:!1,checkClone:!1,noCloneEvent:!0,noCloneChecke
2024-09-29 13:17:36 UTC	16384	IN	Data Raw: 65 74 75 70 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 64 2e 65 76 65 6e 74 2e 61 64 64 28 74 68 69 73 2c 62 2c 63 26 26 63 2e 73 65 6c 65 63 74 6f 72 3f 79 3a 78 2c 61 29 7d 2c 74 65 61 72 64 6f 77 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 64 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 74 68 69 73 2c 62 2c 61 26 26 61 2e 73 65 6c 65 63 74 6f 72 3f 79 3a 78 29 7d 7d 7d 29 2c 64 2e 73 75 70 70 6f 72 74 2e 73 75 62 6d 69 74 42 75 62 62 6c 65 73 7c 7c 28 64 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2e 73 75 62 6d 69 74 3d 7b 73 65 74 75 70 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 74 68 69 73 2e 6e 6f 64 65 4e 61 6d 65 26 26 74 68 69 73 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 21 3d 3d 22 66 6f 72 6d 22 29 64 2e 65 76 65 6e Data Ascii: etup:function(c){d.event.add(this,b,c&&c.selector?y:x,a)},teardown:function(a){d.event.remove(this,b,a&&a.selector?y:x)}}}),d.support.submitBubbles\|\|(d.event.special.submit={setup:function(a,b){if(this.nodeName&&this.nodeName.toLowerCase()!=="form")d.even
2024-09-29 13:17:36 UTC	16384	IN	Data Raw: 28 21 67 26 26 21 6b 2e 69 73 58 4d 4c 28 65 29 29 7b 76 61 72 20 68 3d 2f 5e 28 5c 77 2b 24 29 7c 5e 5c 2e 28 5b 5c 77 5c 2d 5d 2b 24 29 7c 5e 23 28 5b 5c 77 5c 2d 5d 2b 24 29 2f 2e 65 78 65 63 28 62 29 3b 69 66 28 68 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 31 7c 7c 65 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 39 29 29 7b 69 66 28 68 5b 31 5d 29 72 65 74 75 72 6e 20 70 28 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 62 29 2c 66 29 3b 69 66 28 68 5b 32 5d 26 26 6c 2e 66 69 6e 64 2e 43 4c 41 53 53 26 26 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 70 28 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 68 5b 32 5d 29 2c 66 29 7d 69 66 28 65 2e 6e 6f 64 65 Data Ascii: (!g&&!k.isXML(e)){var h=/^(\w+$)\|^\.([\w\-]+$)\|^#([\w\-]+$)/.exec(b);if(h&&(e.nodeType===1\|\|e.nodeType===9)){if(h[1])return p(e.getElementsByTagName(b),f);if(h[2]&&l.find.CLASS&&e.getElementsByClassName)return p(e.getElementsByClassName(h[2]),f)}if(e.node
2024-09-29 13:17:36 UTC	16384	IN	Data Raw: 62 49 3d 7b 7d 2c 62 4a 2c 62 4b 3b 74 72 79 7b 62 4a 3d 63 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 7d 63 61 74 63 68 28 62 4c 29 7b 62 4a 3d 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 2c 62 4a 2e 68 72 65 66 3d 22 22 2c 62 4a 3d 62 4a 2e 68 72 65 66 7d 62 4b 3d 62 46 2e 65 78 65 63 28 62 4a 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 2c 64 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 6c 6f 61 64 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 65 29 7b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 26 26 62 47 29 72 65 74 75 72 6e 20 62 47 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 69 66 28 21 74 68 69 73 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 74 68 69 73 3b 76 61 72 20 66 3d 61 2e 69 6e 64 65 78 4f Data Ascii: bI={},bJ,bK;try{bJ=c.location.href}catch(bL){bJ=c.createElement("a"),bJ.href="",bJ=bJ.href}bK=bF.exec(bJ.toLowerCase()),d.fn.extend({load:function(a,c,e){if(typeof a!=="string"&&bG)return bG.apply(this,arguments);if(!this.length)return this;var f=a.indexO
2024-09-29 13:17:36 UTC	3588	IN	Data Raw: 6f 6c 6c 4c 65 66 74 29 29 3b 72 65 74 75 72 6e 7b 74 6f 70 3a 6c 2c 6c 65 66 74 3a 6d 7d 7d 2c 64 2e 6f 66 66 73 65 74 3d 7b 69 6e 69 74 69 61 6c 69 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 63 2e 62 6f 64 79 2c 62 3d 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 65 2c 66 2c 67 2c 68 2c 69 3d 70 61 72 73 65 46 6c 6f 61 74 28 64 2e 63 73 73 28 61 2c 22 6d 61 72 67 69 6e 54 6f 70 22 29 29 7c 7c 30 2c 6a 3d 22 3c 64 69 76 20 73 74 79 6c 65 3d 27 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 62 6f 72 64 65 72 3a 35 70 78 20 73 6f 6c 69 64 20 23 30 30 30 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 70 78 3b 68 65 69 67 68 74 3a 31 70 78 Data Ascii: ollLeft));return{top:l,left:m}},d.offset={initialize:function(){var a=c.body,b=c.createElement("div"),e,f,g,h,i=parseFloat(d.css(a,"marginTop"))\|\|0,j="<div style='position:absolute;top:0;left:0;margin:0;border:5px solid #000;padding:0;width:1px;height:1px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.7	49755	54.171.84.62	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:37 UTC	410	OUT	GET /forms/script.js HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-0f144a28a2be3a0109e2a843e82c7f6c=1
2024-09-29 13:17:37 UTC	240	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 13:17:37 GMT Content-Type: application/javascript Content-Length: 2421 Connection: close Server: nginx Last-Modified: Wed, 04 Sep 2024 11:48:32 GMT ETag: "66d84910-975" Accept-Ranges: bytes
2024-09-29 13:17:37 UTC	2421	IN	Data Raw: 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 24 28 27 69 6e 70 75 74 2e 69 6e 70 75 74 74 65 78 74 3a 66 69 72 73 74 27 29 2e 66 6f 63 75 73 28 29 3b 0a 0a 0a 09 2f 2f 20 2d 2d 20 69 6e 69 74 69 61 74 65 20 73 61 6c 65 20 6f 72 20 73 65 6e 64 20 6f 66 66 65 72 0a 09 24 28 22 69 6e 70 75 74 2e 73 75 62 6d 69 74 22 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 09 09 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 0a 09 09 24 28 74 68 69 73 29 2e 61 64 64 43 6c 61 73 73 28 22 73 70 69 6e 6e 65 72 22 29 3b 0a 09 09 24 28 22 2e 69 6e 70 75 74 45 72 72 6f 72 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 69 6e 70 75 74 45 72 72 6f 72 22 29 3b 0a 0a 20 20 20 20 20 20 20 20 Data Ascii: $(document).ready(function() { $('input.inputtext:first').focus();// -- initiate sale or send offer$("input.submit").click(function(e) {e.preventDefault();$(this).addClass("spinner");$(".inputError").removeClass("inputError");

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.7	49753	108.128.52.91	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:37 UTC	693	OUT	GET /scripts/select2/select2.png HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mydomaincontact.com/scripts/select2/select2.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-0f144a28a2be3a0109e2a843e82c7f6c=1
2024-09-29 13:17:37 UTC	226	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 13:17:37 GMT Content-Type: image/png Content-Length: 613 Connection: close Server: nginx Last-Modified: Wed, 04 Sep 2024 11:48:32 GMT ETag: "66d84910-265" Accept-Ranges: bytes
2024-09-29 13:17:37 UTC	613	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 28 08 06 00 00 00 a2 bb 99 ff 00 00 02 2c 49 44 41 54 78 da ed d9 cf 4b 14 61 1c c7 f1 b5 08 4a 8c 85 d6 2e 62 5d 2a 28 c9 88 0e 11 76 a9 64 d6 0d a2 3c 14 fd a0 1f 50 04 fd 03 86 21 52 07 71 b7 54 e8 d0 a1 48 04 23 08 bc 47 14 11 79 ed 52 d8 af a5 8b 94 85 81 48 74 30 4c 98 3e bd 85 ef e1 39 b8 2c 6d 29 db d7 79 e0 75 98 d9 85 7d de 3b cf cc 0e b3 29 49 cb 4a 12 bc 2c 83 ff c7 51 28 14 ee e3 58 b0 1d e1 1e 56 b8 0b 26 ea 12 84 4f 68 c2 46 14 21 0c 7b 0c 6e c6 7b 08 93 98 80 2c fa a0 d7 25 5d 8f d7 90 19 47 63 8a e1 35 78 0b 3e 40 e6 33 b6 bb 0c 26 ac 05 93 c1 32 1e 0b 96 f7 99 25 0f e6 43 d3 c8 2c 62 f0 45 08 13 d8 80 75 c1 39 3d 54 36 98 37 9d c4 29 9c 08 9c 45 ba c2 09 0d e3 f1 22 1f Data Ascii: PNGIHDR<(,IDATxKaJ.b]*(vd<P!RqTH#GyRHt0L>9,m)yu};)IJ,Q(XV&OhF!{n{,%]Gc5x>@3&2%C,bEu9=T67)E"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.7	49756	54.171.84.62	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:37 UTC	416	OUT	GET /forms/script-addon.js HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-0f144a28a2be3a0109e2a843e82c7f6c=1
2024-09-29 13:17:37 UTC	239	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 13:17:37 GMT Content-Type: application/javascript Content-Length: 396 Connection: close Server: nginx Last-Modified: Wed, 04 Sep 2024 11:48:32 GMT ETag: "66d84910-18c" Accept-Ranges: bytes
2024-09-29 13:17:37 UTC	396	IN	Data Raw: 2f 2f 20 2d 2d 20 61 64 64 69 74 69 6f 6e 61 6c 20 73 63 72 69 70 74 20 66 6f 72 20 74 68 65 20 73 61 6c 65 20 6f 66 66 65 72 20 76 65 72 73 69 6f 6e 20 6f 66 20 74 68 65 20 66 6f 72 6d 0a 0a 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 24 28 22 23 63 75 72 72 65 6e 63 79 22 29 2e 73 65 6c 65 63 74 32 28 7b 6d 69 6e 69 6d 75 6d 52 65 73 75 6c 74 73 46 6f 72 53 65 61 72 63 68 3a 20 2d 31 7d 29 3b 0a 7d 29 3b 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 53 61 6c 65 50 72 69 63 65 56 61 6c 69 64 28 29 20 7b 0a 20 20 20 20 24 28 22 23 70 72 69 63 65 48 6f 6c 64 65 72 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 69 6e 70 75 74 45 72 72 6f 72 27 29 3b 0a 20 20 20 20 76 61 72 20 76 61 6c 20 3d 20 24 28 Data Ascii: // -- additional script for the sale offer version of the form$(document).ready(function() { $("#currency").select2({minimumResultsForSearch: -1});});function isSalePriceValid() { $("#priceHolder").removeClass('inputError'); var val = $(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.7	49757	54.171.84.62	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:37 UTC	411	OUT	GET /images/trust.svg HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-0f144a28a2be3a0109e2a843e82c7f6c=1
2024-09-29 13:17:37 UTC	233	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 13:17:37 GMT Content-Type: image/svg+xml Content-Length: 20199 Connection: close Server: nginx Last-Modified: Wed, 04 Sep 2024 11:48:32 GMT ETag: "66d84910-4ee7" Accept-Ranges: bytes
2024-09-29 13:17:37 UTC	16151	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 38 38 20 33 38 22 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 09 2e 73 74 30 7b 66 69 6c 6c 3a 23 62 30 62 65 63 35 3b 7d 0a 3c 2f 73 74 79 6c 65 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 32 34 34 2e 37 20 31 32 2e 32 76 32 2e 31 63 30 20 30 2e 33 2d 30 2e 31 20 30 2e 36 2d 30 2e 32 20 30 2e 38 73 2d 30 2e 34 20 30 2e 33 2d 30 2e 36 20 30 2e 33 63 2d 30 2e 32 20 30 2d 30 2e 34 2d 30 2e 31 2d 30 2e 36 2d 30 2e 33 73 2d 30 2e 32 2d 30 2e 34 2d 30 2e 32 2d 30 2e 38 76 2d 32 2e 35 63 30 2d 30 2e 34 20 30 2d 30 2e 37 20 30 2d 30 2e 39 73 2d 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 288 38"><style type="text/css">.st0{fill:#b0bec5;}</style><path class="st0" d="M244.7 12.2v2.1c0 0.3-0.1 0.6-0.2 0.8s-0.4 0.3-0.6 0.3c-0.2 0-0.4-0.1-0.6-0.3s-0.2-0.4-0.2-0.8v-2.5c0-0.4 0-0.7 0-0.9s-0
2024-09-29 13:17:37 UTC	4048	IN	Data Raw: 33 2d 30 2e 32 20 30 2e 32 2d 30 2e 31 20 30 2e 34 2d 30 2e 31 63 30 2e 31 20 30 20 30 2e 33 20 30 20 30 2e 34 20 30 2e 31 73 30 2e 32 20 30 2e 31 20 30 2e 33 20 30 2e 32 20 30 2e 32 20 30 2e 32 20 30 2e 32 20 30 2e 33 20 30 2e 31 20 30 2e 32 20 30 2e 31 20 30 2e 34 20 30 20 30 2e 33 2d 30 2e 31 20 30 2e 34 20 2d 30 2e 31 20 30 2e 32 2d 30 2e 32 20 30 2e 33 20 2d 30 2e 32 20 30 2e 32 2d 30 2e 33 20 30 2e 32 20 2d 30 2e 33 20 30 2e 31 2d 30 2e 34 20 30 2e 31 63 2d 30 2e 31 20 30 2d 30 2e 33 20 30 2d 30 2e 34 2d 30 2e 31 73 2d 30 2e 32 2d 30 2e 31 2d 30 2e 33 2d 30 2e 32 20 2d 30 2e 32 2d 30 2e 32 2d 30 2e 32 2d 30 2e 33 53 31 35 37 2e 33 20 31 30 2e 35 20 31 35 37 2e 33 20 31 30 2e 34 7a 4d 31 35 37 2e 34 20 31 32 2e 37 68 31 2e 38 76 37 2e 34 68 2d 31 2e Data Ascii: 3-0.2 0.2-0.1 0.4-0.1c0.1 0 0.3 0 0.4 0.1s0.2 0.1 0.3 0.2 0.2 0.2 0.2 0.3 0.1 0.2 0.1 0.4 0 0.3-0.1 0.4 -0.1 0.2-0.2 0.3 -0.2 0.2-0.3 0.2 -0.3 0.1-0.4 0.1c-0.1 0-0.3 0-0.4-0.1s-0.2-0.1-0.3-0.2 -0.2-0.2-0.2-0.3S157.3 10.5 157.3 10.4zM157.4 12.7h1.8v7.4h-1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.7	49758	108.128.52.91	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:38 UTC	683	OUT	GET /favicon.ico HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mydomaincontact.com/index.php?domain_name=ymlp294.net Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-0f144a28a2be3a0109e2a843e82c7f6c=1
2024-09-29 13:17:38 UTC	143	IN	HTTP/1.1 404 Not Found Date: Sun, 29 Sep 2024 13:17:38 GMT Content-Type: text/html Content-Length: 548 Connection: close Server: nginx
2024-09-29 13:17:38 UTC	548	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.7	49759	54.171.84.62	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:38 UTC	422	OUT	GET /scripts/select2/select2.png HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-0f144a28a2be3a0109e2a843e82c7f6c=1
2024-09-29 13:17:38 UTC	226	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 13:17:38 GMT Content-Type: image/png Content-Length: 613 Connection: close Server: nginx Last-Modified: Wed, 04 Sep 2024 11:48:32 GMT ETag: "66d84910-265" Accept-Ranges: bytes
2024-09-29 13:17:38 UTC	613	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 28 08 06 00 00 00 a2 bb 99 ff 00 00 02 2c 49 44 41 54 78 da ed d9 cf 4b 14 61 1c c7 f1 b5 08 4a 8c 85 d6 2e 62 5d 2a 28 c9 88 0e 11 76 a9 64 d6 0d a2 3c 14 fd a0 1f 50 04 fd 03 86 21 52 07 71 b7 54 e8 d0 a1 48 04 23 08 bc 47 14 11 79 ed 52 d8 af a5 8b 94 85 81 48 74 30 4c 98 3e bd 85 ef e1 39 b8 2c 6d 29 db d7 79 e0 75 98 d9 85 7d de 3b cf cc 0e b3 29 49 cb 4a 12 bc 2c 83 ff c7 51 28 14 ee e3 58 b0 1d e1 1e 56 b8 0b 26 ea 12 84 4f 68 c2 46 14 21 0c 7b 0c 6e c6 7b 08 93 98 80 2c fa a0 d7 25 5d 8f d7 90 19 47 63 8a e1 35 78 0b 3e 40 e6 33 b6 bb 0c 26 ac 05 93 c1 32 1e 0b 96 f7 99 25 0f e6 43 d3 c8 2c 62 f0 45 08 13 d8 80 75 c1 39 3d 54 36 98 37 9d c4 29 9c 08 9c 45 ba c2 09 0d e3 f1 22 1f Data Ascii: PNGIHDR<(,IDATxKaJ.b]*(vd<P!RqTH#GyRHt0L>9,m)yu};)IJ,Q(XV&OhF!{n{,%]Gc5x>@3&2%C,bEu9=T67)E"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.7	49761	76.223.26.96	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:47 UTC	1485	OUT	GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Fingerprint+Locations&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpjzMvxrMe1MfQMonph0Kai1gFEmEE1q5_eIJKInVdvCRBrbZWX-ZJYk23DHqqOKJHB-3-9A-OVvXX3ePbUZarflKV7IxIS-_BAvv-xqE3hQeViGAwRwxXnJXylB6_t2l64A&pcsa=false HTTP/1.1 Host: www.img2.ymlp294.net Connection: keep-alive device-memory: 8 dpr: 1 viewport-width: 1280 rtt: 200 downlink: 1.55 ect: 3g sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
2024-09-29 13:17:47 UTC	882	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Alt-Svc: h3=":50944"; ma=2592000 Content-Type: text/html; charset=UTF-8 Date: Sun, 29 Sep 2024 13:17:47 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_DoECcl9LgnGEtwUlPngEDz+IFZLnGWTBP8a+5/4T+m0GXm+t7Nj+T/sTI5MlYiojybXt6DXyvpCSZ3xyMR0eQA== X-Domain: ymlp294.net X-Pcrew-Blocked-Reason: X-Pcrew-Ip-Organization: CenturyLink X-Subdomain: www.img2 Connection: close Transfer-Encoding: chunked
2024-09-29 13:17:47 UTC	2372	IN	Data Raw: 34 63 32 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4c 71 75 44 46 45 54 58 52 6e 30 48 72 30 35 66 55 50 37 45 4a 54 37 37 78 59 6e 50 6d 52 62 70 4d 79 34 76 6b 38 4b 59 69 48 6e 6b 4e 70 65 64 6e 6a 4f 41 4e 4a 63 61 58 44 58 63 4b 51 4a 4e 30 6e 58 4b 5a 4a 4c 37 54 63 69 4a 44 38 41 6f 48 58 4b 31 35 38 43 41 77 45 41 41 51 3d 3d 5f 44 6f 45 43 63 6c 39 4c 67 6e 47 45 74 77 55 6c 50 6e 67 45 44 7a 2b 49 46 5a 4c 6e 47 57 54 42 50 38 61 2b 35 2f 34 54 2b 6d 30 47 58 6d 2b 74 37 4e 6a 2b 54 2f 73 54 49 35 4d 6c 59 69 6f 6a 79 62 58 74 36 44 58 79 76 70 43 53 5a 33 78 79 4d Data Ascii: 4c27<!DOCTYPE html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_DoECcl9LgnGEtwUlPngEDz+IFZLnGWTBP8a+5/4T+m0GXm+t7Nj+T/sTI5MlYiojybXt6DXyvpCSZ3xyM
2024-09-29 13:17:47 UTC	1724	IN	Data Raw: 0a 7d 0a 23 73 61 6c 65 5f 64 69 73 63 72 65 65 74 20 61 20 7b 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 72 67 62 28 32 34 30 2c 32 34 30 2c 32 34 30 29 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 7d 0a 0a 23 73 61 6c 65 5f 70 72 6f 6d 69 6e 65 6e 74 20 7b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 36 38 70 78 3b 0a 7d 0a 23 73 61 6c 65 5f 70 72 6f 6d 69 6e 65 6e 74 20 23 67 72 65 79 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 28 31 34 35 2c 31 34 30 2c 31 33 37 29 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 72 67 62 28 32 35 35 2c 32 35 35 2c 32 35 35 29 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0a 20 20 20 20 66 Data Ascii: }#sale_discreet a { text-decoration: none; color: rgb(240,240,240); font-size: 14px;}#sale_prominent { height: 68px;}#sale_prominent #grey { background: rgb(145,140,137); color: rgb(255,255,255); text-align: right; f
2024-09-29 13:17:47 UTC	4744	IN	Data Raw: 6c 61 79 3a 6e 6f 6e 65 3b 0a 7d 0a 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 20 3a 20 34 38 30 70 78 29 20 7b 0a 09 23 73 61 6c 65 5f 64 69 61 67 6f 6e 61 6c 5f 6f 72 61 6e 67 65 20 7b 0a 09 09 77 69 64 74 68 3a 20 34 30 30 70 78 3b 0a 09 09 68 65 69 67 68 74 3a 37 30 70 78 3b 0a 09 09 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 0a 09 09 72 69 67 68 74 3a 2d 31 32 30 70 78 3b 0a 09 09 74 6f 70 3a 34 32 70 78 3b 0a 09 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 0a 09 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 32 30 3b 0a 09 7d 0a 0a 09 23 73 61 6c 65 5f 64 69 61 67 6f 6e 61 6c 5f 6f 72 61 6e 67 65 20 61 20 7b 0a 09 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 Data Ascii: lay:none;}@media only screen and (min-width : 480px) {#sale_diagonal_orange {width: 400px;height:70px;position:fixed;right:-120px;top:42px;line-height:20px; z-index: 20;}#sale_diagonal_orange a {-webkit-transform: rotat
2024-09-29 13:17:47 UTC	5930	IN	Data Raw: 6f 6e 43 6c 69 63 6b 3d 22 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 27 2f 70 72 69 76 61 63 79 2e 68 74 6d 6c 27 2c 20 27 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 27 2c 20 27 77 69 64 74 68 3d 38 39 30 2c 68 65 69 67 68 74 3d 33 33 30 2c 6c 65 66 74 3d 32 30 30 2c 74 6f 70 3d 32 30 30 2c 6d 65 6e 75 62 61 72 3d 6e 6f 2c 73 74 61 74 75 73 3d 79 65 73 2c 74 6f 6f 6c 62 61 72 3d 6e 6f 27 29 2e 66 6f 63 75 73 28 29 22 20 63 6c 61 73 73 3d 22 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 22 3e 0a 20 20 20 20 50 72 69 76 61 63 79 20 50 6f 6c 69 63 79 0a 3c 2f 61 3e 0a 3c 62 72 2f 3e 3c 62 72 2f 3e 0a 3c 62 72 2f 3e 3c 62 72 2f 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 Data Ascii: onClick="window.open('/privacy.html', 'privacy-policy', 'width=890,height=330,left=200,top=200,menubar=no,status=yes,toolbar=no').focus()" class="privacy-policy"> Privacy Policy</a><br/><br/><br/><br/> </div></div><script type="text/javascri
2024-09-29 13:17:47 UTC	4731	IN	Data Raw: 3d 79 65 73 26 75 69 64 3d 22 20 2b 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 75 6e 69 71 75 65 54 72 61 63 6b 69 6e 67 49 44 29 29 3b 7d 7d 20 65 6c 73 65 20 7b 61 6a 61 78 51 75 65 72 79 28 73 63 72 69 70 74 50 61 74 68 20 2b 20 22 2f 74 72 61 63 6b 2e 70 68 70 3f 64 6f 6d 61 69 6e 3d 22 20 2b 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 6f 6d 61 69 6e 29 20 2b 20 22 26 63 61 66 3d 31 26 74 6f 67 67 6c 65 3d 61 6e 73 77 65 72 63 68 65 63 6b 26 61 6e 73 77 65 72 3d 72 65 6a 65 63 74 65 64 26 75 69 64 3d 22 20 2b 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 75 6e 69 71 75 65 54 72 61 63 6b 69 6e 67 49 44 29 29 3b 7d 7d 7d 3b 6c 65 74 20 78 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 6f 62 6a 31 2c 20 6f 62 6a Data Ascii: =yes&uid=" + encodeURIComponent(uniqueTrackingID));}} else {ajaxQuery(scriptPath + "/track.php?domain=" + encodeURIComponent(domain) + "&caf=1&toggle=answercheck&answer=rejected&uid=" + encodeURIComponent(uniqueTrackingID));}}};let x = function (obj1, obj
2024-09-29 13:17:47 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-09-29 13:17:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.7	49760	76.223.26.96	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:47 UTC	1544	OUT	GET /track.php?domain=ymlp294.net&toggle=browserjs&uid=MTcyNzYxNTg2Ny4yNjUzOjY1MTQ0ZDg1ZTNhODhkNTRhMDZjNTdlMGQ2ZDMxMWM2MTRlNGVmYmE1MGFhODdmYjk2ZDIwZjE3ZjU2OTUyZWM6NjZmOTUzN2I0MGM4Mg%3D%3D HTTP/1.1 Host: www.img2.ymlp294.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" device-memory: 8 rtt: 200 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 dpr: 1 downlink: 1.7 ect: 3g sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Fingerprint+Locations&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpjzMvxrMe1MfQMonph0Kai1gFEmEE1q5_eIJKInVdvCRBrbZWX-ZJYk23DHqqOKJHB-3-9A-OVvXX3ePbUZarflKV7IxIS-_BAvv-xqE3hQeViGAwRwxXnJXylB6_t2l64A&pcsa=false Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
2024-09-29 13:17:48 UTC	597	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Alt-Svc: h3=":50944"; ma=2592000 Content-Type: text/html; charset=UTF-8 Date: Sun, 29 Sep 2024 13:17:47 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: browserjs Connection: close Transfer-Encoding: chunked
2024-09-29 13:17:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.7	49722	216.58.206.46	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:48 UTC	709	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.img2.ymlp294.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:17:48 UTC	1037	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/html Content-Security-Policy: script-src 'nonce-EECWLKqQZ-MZ4SM_Lf2Uuw' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui; base-uri 'none' Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 1560 Date: Sun, 29 Sep 2024 13:17:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-29 13:17:48 UTC	353	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 52 4f 42 4f 54 53 22 20 63 6f 6e 74 65 6e 74 3d 22 4e 4f 49 4e 44 45 58 2c 20 4e 4f 46 4f 4c 4c 4f 57 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 61 64 42 6c 6f 63 6b 22 3e 3c 2f 64 69 76 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 45 45 43 57 4c 4b 71 51 5a 2d 4d 5a 34 53 4d 5f 4c 66 32 55 75 77 22 3e 69 66 20 28 77 69 6e 64 6f 77 2e 6e Data Ascii: <!doctype html><html><head><meta name="ROBOTS" content="NOINDEX, NOFOLLOW"><meta name="format-detection" content="telephone=no"><meta content="origin" name="referrer"></head><body><div id="adBlock"></div><script nonce="EECWLKqQZ-MZ4SM_Lf2Uuw">if (window.n
2024-09-29 13:17:48 UTC	1207	IN	Data Raw: 61 64 73 65 6e 73 65 2f 73 65 61 72 63 68 2f 61 64 73 2e 6a 73 22 3b 76 61 72 20 68 72 65 66 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 69 66 20 28 21 21 68 72 65 66 20 26 26 20 28 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 3f 70 61 63 3d 27 29 20 3e 20 30 20 7c 7c 20 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 26 70 61 63 3d 27 29 20 3e 20 30 29 29 20 7b 69 66 20 28 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 3f 70 61 63 3d 31 27 29 20 3e 20 30 20 7c 7c 20 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 26 70 61 63 3d 31 27 29 20 3e 20 30 29 20 7b 73 63 72 69 70 74 2e 73 72 63 20 2b 3d 20 27 3f 70 61 63 3d 31 27 3b 7d 20 65 6c 73 65 20 69 66 20 28 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 3f 70 61 63 3d 32 27 29 20 3e 20 30 20 7c 7c 20 Data Ascii: adsense/search/ads.js";var href = window.location.href;if (!!href && (href.indexOf('?pac=') > 0 \|\| href.indexOf('&pac=') > 0)) {if (href.indexOf('?pac=1') > 0 \|\| href.indexOf('&pac=1') > 0) {script.src += '?pac=1';} else if (href.indexOf('?pac=2') > 0 \|\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.7	49762	76.223.26.96	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:48 UTC	1426	OUT	GET /ls.php?t=66f9537b&token=b5549628c8b4e918624c8865b1d93e21353a6bcd HTTP/1.1 Host: www.img2.ymlp294.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" device-memory: 8 rtt: 200 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 dpr: 1 downlink: 1.7 ect: 3g sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Fingerprint+Locations&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpjzMvxrMe1MfQMonph0Kai1gFEmEE1q5_eIJKInVdvCRBrbZWX-ZJYk23DHqqOKJHB-3-9A-OVvXX3ePbUZarflKV7IxIS-_BAvv-xqE3hQeViGAwRwxXnJXylB6_t2l64A&pcsa=false Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
2024-09-29 13:17:48 UTC	882	IN	HTTP/1.1 201 Created Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Origin: Access-Control-Max-Age: 86400 Alt-Svc: h3=":50944"; ma=2592000 Charset: utf-8 Content-Type: text/javascript;charset=UTF-8 Date: Sun, 29 Sep 2024 13:17:48 GMT Server: Caddy Server: nginx X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_Gli5BTPy/NJxncxGlbcJv8miJvSdFeTu+kKDM2H5GYMDm+m1VC5dFJa2dp6Oib6Pd+A0bS0I0798XTQto358pA== Connection: close Transfer-Encoding: chunked
2024-09-29 13:17:48 UTC	22	IN	Data Raw: 31 30 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d 0d 0a Data Ascii: 10{"success":true}
2024-09-29 13:17:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.7	49765	76.223.26.96	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:48 UTC	626	OUT	GET /track.php?domain=ymlp294.net&toggle=browserjs&uid=MTcyNzYxNTg2Ny4yNjUzOjY1MTQ0ZDg1ZTNhODhkNTRhMDZjNTdlMGQ2ZDMxMWM2MTRlNGVmYmE1MGFhODdmYjk2ZDIwZjE3ZjU2OTUyZWM6NjZmOTUzN2I0MGM4Mg%3D%3D HTTP/1.1 Host: www.img2.ymlp294.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
2024-09-29 13:17:49 UTC	597	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Alt-Svc: h3=":50944"; ma=2592000 Content-Type: text/html; charset=UTF-8 Date: Sun, 29 Sep 2024 13:17:49 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: browserjs Connection: close Transfer-Encoding: chunked
2024-09-29 13:17:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.7	49764	216.58.206.46	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:48 UTC	2800	OUT	GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=bucket007%2C000003%2C000802%2Cbucket066%2Cbucket077&client=dp-teaminternet12_3ph&r=m&sct=ID%3D4562ec206474b9d1%3AT%3D1727615843%3ART%3D1727615843%3AS%3DALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w&sc_status=6&hl=en&rpbu=https%3A%2F%2Fwww.img2.ymlp294.net%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NjcuMjkyNnw4NjcyM2UyMGEwMWJmNjY2OGNjOWJkMWM4YmI0ZDRkMDRmNTYyNmE4fHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%253D%253D&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Fingerprint%20Locations&afdt=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpjzMvxrMe1MfQMonph0Kai1gFEmEE1q5_eIJKInVdvCRBrbZWX-ZJYk23DHqqOKJHB-3-9A-OVvXX3ePbUZarflKV7IxIS-_BAvv-xqE3hQeViGAwRwxXnJXylB6_t2l64A&o [TRUNCATED] Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.img2.ymlp294.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:17:49 UTC	807	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Disposition: inline Date: Sun, 29 Sep 2024 13:17:49 GMT Expires: Sun, 29 Sep 2024 13:17:49 GMT Cache-Control: private, max-age=3600 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-DfOE0n6TJMvuFQW__Leg8w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Server: gws X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-29 13:17:49 UTC	583	IN	Data Raw: 37 64 37 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 73 74 79 6c 65 20 69 64 3d 22 73 73 72 2d 62 6f 69 6c 65 72 70 6c 61 74 65 22 3e 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 72 67 69 6e 3a 30 3b 7d 2e 64 69 76 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 20 2e 64 69 76 3a 6c 61 73 Data Ascii: 7d7c<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:las
2024-09-29 13:17:49 UTC	1390	IN	Data Raw: 69 5f 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 76 5f 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 Data Ascii: i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit
2024-09-29 13:17:49 UTC	1390	IN	Data Raw: 5f 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 6f 5f 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 78 5f 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 79 5f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 7a 2d 69 6e 64 65 78 3a 31 3b 7d 2e 6b 5f 3e 64 69 76 3a 6e 6f 74 28 2e 79 5f 29 20 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 Data Ascii: _{overflow:hidden;}.o_{white-space:nowrap;}.x_{cursor:pointer;}.y_{display:none; position:absolute; z-index:1;}.k_>div:not(.y_) {display:-webkit-inline-box; display:-moz-inline-box; display:-ms-inline-flexbox; display:-webkit-inline-flex; display:inline-f
2024-09-29 13:17:49 UTC	1390	IN	Data Raw: 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 42 6f 74 74 6f 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 43 65 6e 74 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 Data Ascii: start; align-items:flex-start;}.flexAlignBottom{-ms-flex-align:end; -webkit-box-align:end; -webkit-align-items:flex-end; align-items:flex-end;}.flexAlignCenter{-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center
2024-09-29 13:17:49 UTC	1390	IN	Data Raw: 3a 35 30 70 78 3b 63 6f 6c 6f 72 3a 23 63 63 63 63 63 63 3b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 2e 73 69 32 37 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 36 66 30 30 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 33 36 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 7d 2e 73 69 33 34 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 70 78 3b 7d 2e 73 69 34 32 7b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d Data Ascii: :50px;color:#cccccc;width:100%; -ms-flex-negative:1;-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.si27:hover{color:#ff6f00;text-decoration:underline;}.si36{height:100%;}.si34{margin-bottom:0px;}.si42{width:100%; -ms-flex-negative:1;-webkit-
2024-09-29 13:17:49 UTC	1390	IN	Data Raw: 74 74 6f 6d 3a 33 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 70 78 3b 7d 2e 73 69 31 38 7b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 31 38 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 31 39 7b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 32 30 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 32 31 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 38 36 62 66 32 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 Data Ascii: ttom:3px;padding-top:3px;}.si18{color:#dddddd;}.si18:hover{text-decoration:underline;}.si19{color:#dddddd;}.si20{font-family:Roboto,arial,sans-serif;font-size:12px;line-height:20px;color:#dddddd;}.si21{font-weight:700;background-color:#186bf2;border-radiu
2024-09-29 13:17:49 UTC	1390	IN	Data Raw: 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 70 78 3b 63 6f 6c 6f 72 3a 23 38 36 38 35 38 61 3b 7d 2e 73 69 32 36 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 7d 2e 73 69 37 32 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 52 6f 62 6f 74 6f 20 4c 69 67 68 74 22 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 Data Ascii: px;padding-bottom:1px;padding-left:1px;padding-right:1px;padding-top:1px;color:#86858a;}.si26{font-family:Roboto,arial,sans-serif;font-size:14px;line-height:24px;color:#ffffff;}.si72{font-family:"Roboto Light",arial,sans-serif;font-size:12px;line-height:2
2024-09-29 13:17:49 UTC	1390	IN	Data Raw: 73 69 6f 6e 4c 69 6e 6b 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4e 4f 49 4e 44 45 58 2c 20 4e 4f 46 4f 4c 4c 4f 57 22 20 6e 61 6d 65 3d 22 52 4f 42 4f 54 53 22 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 20 20 20 20 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 20 3c 64 69 76 20 69 64 3d 22 61 64 42 6c 6f 63 6b 22 3e 20 20 20 3c 64 69 76 20 69 64 3d 22 73 73 72 61 64 2d 6d 61 73 74 65 72 Data Ascii: sionLink:hover{text-decoration:underline;}</style> <meta content="NOINDEX, NOFOLLOW" name="ROBOTS"> <meta content="telephone=no" name="format-detection"> <meta content="origin" name="referrer"> </head> <body> <div id="adBlock"> <div id="ssrad-master
2024-09-29 13:17:49 UTC	1390	IN	Data Raw: 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 33 39 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f Data Ascii: -pack:start; -webkit-justify-content:flex-start; justify-content:flex-start;-ms-flex-align:stretch; -webkit-box-align:stretch; -webkit-align-items:stretch; align-items:stretch;"><div class="i_ div si39" style="-ms-flex-direction:row; -webkit-box-orient:ho
2024-09-29 13:17:49 UTC	1390	IN	Data Raw: 73 74 79 6c 65 3d 27 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 69 6e 68 65 72 69 74 3b 27 20 63 6c 61 73 73 3d 22 73 69 31 33 30 20 73 70 61 6e 22 3e 46 69 6e 67 65 72 70 72 69 6e 74 69 6e 67 3c 2f 73 70 61 6e 3e 20 2d 20 46 42 49 20 3c 73 70 61 6e 20 73 74 79 6c 65 3d 27 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 69 6e 68 65 72 69 74 3b 27 20 63 6c 61 73 73 3d 22 73 69 31 33 30 20 73 70 61 6e 22 3e 46 69 6e 67 65 72 70 72 69 6e 74 20 4c 6f 63 61 74 69 6f 6e 73 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 34 31 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 Data Ascii: style='display:inline;text-transform:inherit;' class="si130 span">Fingerprinting</span> - FBI <span style='display:inline;text-transform:inherit;' class="si130 span">Fingerprint Locations</span></span></a></div><div class="i_ div si41" style="-ms-flex-dir

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.7	49766	216.58.206.46	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:49 UTC	759	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.img2.ymlp294.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
2024-09-29 13:17:49 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Sun, 29 Sep 2024 13:17:49 GMT Expires: Sun, 29 Sep 2024 13:17:49 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.7	49767	76.223.26.96	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:50 UTC	1563	OUT	GET /track.php?domain=ymlp294.net&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTg2Ny4yNjUzOjY1MTQ0ZDg1ZTNhODhkNTRhMDZjNTdlMGQ2ZDMxMWM2MTRlNGVmYmE1MGFhODdmYjk2ZDIwZjE3ZjU2OTUyZWM6NjZmOTUzN2I0MGM4Mg%3D%3D HTTP/1.1 Host: www.img2.ymlp294.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" device-memory: 8 rtt: 200 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 dpr: 1 downlink: 1.7 ect: 3g sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Fingerprint+Locations&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpjzMvxrMe1MfQMonph0Kai1gFEmEE1q5_eIJKInVdvCRBrbZWX-ZJYk23DHqqOKJHB-3-9A-OVvXX3ePbUZarflKV7IxIS-_BAvv-xqE3hQeViGAwRwxXnJXylB6_t2l64A&pcsa=false Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
2024-09-29 13:17:50 UTC	599	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Alt-Svc: h3=":50944"; ma=2592000 Content-Type: text/html; charset=UTF-8 Date: Sun, 29 Sep 2024 13:17:50 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: answercheck Connection: close Transfer-Encoding: chunked
2024-09-29 13:17:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.7	49771	142.250.186.164	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:52 UTC	686	OUT	GET /images/afs/snowman.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:17:52 UTC	670	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 166 Date: Sun, 29 Sep 2024 13:17:52 GMT Expires: Sun, 29 Sep 2024 13:17:52 GMT Cache-Control: private, max-age=31536000 Last-Modified: Wed, 15 Nov 2023 17:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-29 13:17:52 UTC	166	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 04 03 00 00 00 a5 2c e4 b4 00 00 00 12 50 4c 54 45 00 00 00 97 9f 9f 9a a0 a5 9a a0 a6 9a a0 a6 97 9f a7 fa 03 72 95 00 00 00 06 74 52 4e 53 00 20 bf ef ff 20 e0 82 3c 7e 00 00 00 3d 49 44 41 54 78 01 63 18 7e 80 51 d9 49 00 ab 84 b0 8b 8b 21 56 09 15 17 17 27 ac 12 2e 2e 2e ce 58 25 4c 80 32 a4 19 15 ec e2 62 8a 55 82 55 c5 28 80 26 e1 30 1a 56 a3 61 35 ec 00 00 2d a2 14 b9 af 08 13 f6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR00,PLTErtRNS <~=IDATxc~QI!V'...X%L2bUU(&0Va5-IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.7	49772	76.223.26.96	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:52 UTC	645	OUT	GET /track.php?domain=ymlp294.net&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTg2Ny4yNjUzOjY1MTQ0ZDg1ZTNhODhkNTRhMDZjNTdlMGQ2ZDMxMWM2MTRlNGVmYmE1MGFhODdmYjk2ZDIwZjE3ZjU2OTUyZWM6NjZmOTUzN2I0MGM4Mg%3D%3D HTTP/1.1 Host: www.img2.ymlp294.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
2024-09-29 13:17:52 UTC	599	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Alt-Svc: h3=":50944"; ma=2592000 Content-Type: text/html; charset=UTF-8 Date: Sun, 29 Sep 2024 13:17:52 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: answercheck Connection: close Transfer-Encoding: chunked
2024-09-29 13:17:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.7	49763	142.250.186.142	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:52 UTC	888	OUT	GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=bsnfbs2pc9cm&aqid=fVP5ZobCDJPBiM0PuI7i4AU&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1399&adbw=530&adbah=506%2C439%2C452&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=34%7C0%7C1415%7C12%7C1298&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.img2.ymlp294.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:17:52 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-CpiHfG5UYx1VTw09gmWlgA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 29 Sep 2024 13:17:52 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.7	49775	142.250.184.228	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:53 UTC	445	OUT	GET /images/afs/snowman.png HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:17:53 UTC	670	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 166 Date: Sun, 29 Sep 2024 13:17:53 GMT Expires: Sun, 29 Sep 2024 13:17:53 GMT Cache-Control: private, max-age=31536000 Last-Modified: Wed, 15 Nov 2023 17:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-29 13:17:53 UTC	166	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 04 03 00 00 00 a5 2c e4 b4 00 00 00 12 50 4c 54 45 00 00 00 97 9f 9f 9a a0 a5 9a a0 a6 9a a0 a6 97 9f a7 fa 03 72 95 00 00 00 06 74 52 4e 53 00 20 bf ef ff 20 e0 82 3c 7e 00 00 00 3d 49 44 41 54 78 01 63 18 7e 80 51 d9 49 00 ab 84 b0 8b 8b 21 56 09 15 17 17 27 ac 12 2e 2e 2e ce 58 25 4c 80 32 a4 19 15 ec e2 62 8a 55 82 55 c5 28 80 26 e1 30 1a 56 a3 61 35 ec 00 00 2d a2 14 b9 af 08 13 f6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR00,PLTErtRNS <~=IDATxc~QI!V'...X%L2bUU(&0Va5-IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.7	49776	142.250.186.142	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:53 UTC	888	OUT	GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=bqfm95q26fno&aqid=fVP5ZobCDJPBiM0PuI7i4AU&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1399&adbw=530&adbah=506%2C439%2C452&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=34%7C0%7C1415%7C12%7C1298&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.img2.ymlp294.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:17:53 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-NHPPr6CiaxVpTblGCOunsQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 29 Sep 2024 13:17:53 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.7	49777	76.223.26.96	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:55 UTC	1502	OUT	GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Electronic+Fingerprints+For+Employment&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpj-Cc0S-fYKtdlAPXzRH6TCYLSLzizC_juBVXQxkI0WCgwbhC_qeRF5PWSO8b88HUrnUPuQ1qym33YKdH2odkkjj0_xXrGGYqyh4hLOm8gLi7kkIExQyZWypGx-K802lAew&pcsa=false HTTP/1.1 Host: www.img2.ymlp294.net Connection: keep-alive device-memory: 8 dpr: 1 viewport-width: 1280 rtt: 200 downlink: 1.55 ect: 3g sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
2024-09-29 13:17:55 UTC	882	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Alt-Svc: h3=":50944"; ma=2592000 Content-Type: text/html; charset=UTF-8 Date: Sun, 29 Sep 2024 13:17:55 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_XLxZrfq1JhapJYC0a4Hvng/9yo0/WD4uIF7cqbYzjY4BHNKmdoEhh9BndqXmtWZiem1dOr/n+HZcCZCmLPc8Mw== X-Domain: ymlp294.net X-Pcrew-Blocked-Reason: X-Pcrew-Ip-Organization: CenturyLink X-Subdomain: www.img2 Connection: close Transfer-Encoding: chunked
2024-09-29 13:17:55 UTC	2372	IN	Data Raw: 34 63 33 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4c 71 75 44 46 45 54 58 52 6e 30 48 72 30 35 66 55 50 37 45 4a 54 37 37 78 59 6e 50 6d 52 62 70 4d 79 34 76 6b 38 4b 59 69 48 6e 6b 4e 70 65 64 6e 6a 4f 41 4e 4a 63 61 58 44 58 63 4b 51 4a 4e 30 6e 58 4b 5a 4a 4c 37 54 63 69 4a 44 38 41 6f 48 58 4b 31 35 38 43 41 77 45 41 41 51 3d 3d 5f 58 4c 78 5a 72 66 71 31 4a 68 61 70 4a 59 43 30 61 34 48 76 6e 67 2f 39 79 6f 30 2f 57 44 34 75 49 46 37 63 71 62 59 7a 6a 59 34 42 48 4e 4b 6d 64 6f 45 68 68 39 42 6e 64 71 58 6d 74 57 5a 69 65 6d 31 64 4f 72 2f 6e 2b 48 5a 63 43 5a 43 6d 4c Data Ascii: 4c3d<!DOCTYPE html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_XLxZrfq1JhapJYC0a4Hvng/9yo0/WD4uIF7cqbYzjY4BHNKmdoEhh9BndqXmtWZiem1dOr/n+HZcCZCmL
2024-09-29 13:17:55 UTC	1724	IN	Data Raw: 0a 7d 0a 23 73 61 6c 65 5f 64 69 73 63 72 65 65 74 20 61 20 7b 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 72 67 62 28 32 34 30 2c 32 34 30 2c 32 34 30 29 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 7d 0a 0a 23 73 61 6c 65 5f 70 72 6f 6d 69 6e 65 6e 74 20 7b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 36 38 70 78 3b 0a 7d 0a 23 73 61 6c 65 5f 70 72 6f 6d 69 6e 65 6e 74 20 23 67 72 65 79 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 28 31 34 35 2c 31 34 30 2c 31 33 37 29 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 72 67 62 28 32 35 35 2c 32 35 35 2c 32 35 35 29 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0a 20 20 20 20 66 Data Ascii: }#sale_discreet a { text-decoration: none; color: rgb(240,240,240); font-size: 14px;}#sale_prominent { height: 68px;}#sale_prominent #grey { background: rgb(145,140,137); color: rgb(255,255,255); text-align: right; f
2024-09-29 13:17:55 UTC	4744	IN	Data Raw: 6c 61 79 3a 6e 6f 6e 65 3b 0a 7d 0a 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 20 3a 20 34 38 30 70 78 29 20 7b 0a 09 23 73 61 6c 65 5f 64 69 61 67 6f 6e 61 6c 5f 6f 72 61 6e 67 65 20 7b 0a 09 09 77 69 64 74 68 3a 20 34 30 30 70 78 3b 0a 09 09 68 65 69 67 68 74 3a 37 30 70 78 3b 0a 09 09 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 0a 09 09 72 69 67 68 74 3a 2d 31 32 30 70 78 3b 0a 09 09 74 6f 70 3a 34 32 70 78 3b 0a 09 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 0a 09 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 32 30 3b 0a 09 7d 0a 0a 09 23 73 61 6c 65 5f 64 69 61 67 6f 6e 61 6c 5f 6f 72 61 6e 67 65 20 61 20 7b 0a 09 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 Data Ascii: lay:none;}@media only screen and (min-width : 480px) {#sale_diagonal_orange {width: 400px;height:70px;position:fixed;right:-120px;top:42px;line-height:20px; z-index: 20;}#sale_diagonal_orange a {-webkit-transform: rotat
2024-09-29 13:17:55 UTC	5930	IN	Data Raw: 6f 6e 43 6c 69 63 6b 3d 22 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 27 2f 70 72 69 76 61 63 79 2e 68 74 6d 6c 27 2c 20 27 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 27 2c 20 27 77 69 64 74 68 3d 38 39 30 2c 68 65 69 67 68 74 3d 33 33 30 2c 6c 65 66 74 3d 32 30 30 2c 74 6f 70 3d 32 30 30 2c 6d 65 6e 75 62 61 72 3d 6e 6f 2c 73 74 61 74 75 73 3d 79 65 73 2c 74 6f 6f 6c 62 61 72 3d 6e 6f 27 29 2e 66 6f 63 75 73 28 29 22 20 63 6c 61 73 73 3d 22 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 22 3e 0a 20 20 20 20 50 72 69 76 61 63 79 20 50 6f 6c 69 63 79 0a 3c 2f 61 3e 0a 3c 62 72 2f 3e 3c 62 72 2f 3e 0a 3c 62 72 2f 3e 3c 62 72 2f 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 Data Ascii: onClick="window.open('/privacy.html', 'privacy-policy', 'width=890,height=330,left=200,top=200,menubar=no,status=yes,toolbar=no').focus()" class="privacy-policy"> Privacy Policy</a><br/><br/><br/><br/> </div></div><script type="text/javascri
2024-09-29 13:17:55 UTC	4753	IN	Data Raw: 72 63 68 65 63 6b 26 61 6e 73 77 65 72 3d 79 65 73 26 75 69 64 3d 22 20 2b 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 75 6e 69 71 75 65 54 72 61 63 6b 69 6e 67 49 44 29 29 3b 7d 7d 20 65 6c 73 65 20 7b 61 6a 61 78 51 75 65 72 79 28 73 63 72 69 70 74 50 61 74 68 20 2b 20 22 2f 74 72 61 63 6b 2e 70 68 70 3f 64 6f 6d 61 69 6e 3d 22 20 2b 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 6f 6d 61 69 6e 29 20 2b 20 22 26 63 61 66 3d 31 26 74 6f 67 67 6c 65 3d 61 6e 73 77 65 72 63 68 65 63 6b 26 61 6e 73 77 65 72 3d 72 65 6a 65 63 74 65 64 26 75 69 64 3d 22 20 2b 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 75 6e 69 71 75 65 54 72 61 63 6b 69 6e 67 49 44 29 29 3b 7d 7d 7d 3b 6c 65 74 20 78 20 3d 20 66 75 6e 63 74 69 Data Ascii: rcheck&answer=yes&uid=" + encodeURIComponent(uniqueTrackingID));}} else {ajaxQuery(scriptPath + "/track.php?domain=" + encodeURIComponent(domain) + "&caf=1&toggle=answercheck&answer=rejected&uid=" + encodeURIComponent(uniqueTrackingID));}}};let x = functi
2024-09-29 13:17:55 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-09-29 13:17:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.7	49778	76.223.26.96	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:55 UTC	1553	OUT	GET /track.php?domain=ymlp294.net&toggle=browserjs&uid=MTcyNzYxNTg3NS4yNjU6NGUxYjkxNWRmYjAwNGI3MmU5YTU4NTU0ODg4ZTc0NDkzMzU0ZWQwZTgzNjMwZTA5Zjc4M2NjMjRhOTAzZThkZDo2NmY5NTM4MzQwYjAw HTTP/1.1 Host: www.img2.ymlp294.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" device-memory: 8 rtt: 200 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 dpr: 1 downlink: 1.6 ect: 4g sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Electronic+Fingerprints+For+Employment&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpj-Cc0S-fYKtdlAPXzRH6TCYLSLzizC_juBVXQxkI0WCgwbhC_qeRF5PWSO8b88HUrnUPuQ1qym33YKdH2odkkjj0_xXrGGYqyh4hLOm8gLi7kkIExQyZWypGx-K802lAew&pcsa=false Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
2024-09-29 13:17:55 UTC	597	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Alt-Svc: h3=":50944"; ma=2592000 Content-Type: text/html; charset=UTF-8 Date: Sun, 29 Sep 2024 13:17:55 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: browserjs Connection: close Transfer-Encoding: chunked
2024-09-29 13:17:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.7	49779	76.223.26.96	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:56 UTC	1443	OUT	GET /ls.php?t=66f95383&token=4f819d0b1c8d2702f8643e095678b9fa9c21146d HTTP/1.1 Host: www.img2.ymlp294.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" device-memory: 8 rtt: 200 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 dpr: 1 downlink: 1.6 ect: 4g sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Electronic+Fingerprints+For+Employment&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpj-Cc0S-fYKtdlAPXzRH6TCYLSLzizC_juBVXQxkI0WCgwbhC_qeRF5PWSO8b88HUrnUPuQ1qym33YKdH2odkkjj0_xXrGGYqyh4hLOm8gLi7kkIExQyZWypGx-K802lAew&pcsa=false Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
2024-09-29 13:17:56 UTC	882	IN	HTTP/1.1 201 Created Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Origin: Access-Control-Max-Age: 86400 Alt-Svc: h3=":50944"; ma=2592000 Charset: utf-8 Content-Type: text/javascript;charset=UTF-8 Date: Sun, 29 Sep 2024 13:17:56 GMT Server: Caddy Server: nginx X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_n8avLYkqOMxLg9qKW4HVMTP0DCiy2Gm1dtOH2AMLmg4Mmp4dgJIYYMXsh3JcygwqoqaqvdINmAWZ/dUMoiqTUA== Connection: close Transfer-Encoding: chunked
2024-09-29 13:17:56 UTC	22	IN	Data Raw: 31 30 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d 0d 0a Data Ascii: 10{"success":true}
2024-09-29 13:17:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.7	49781	216.58.206.46	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:57 UTC	2842	OUT	GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=bucket007%2C000003%2C000802%2Cbucket066%2Cbucket077&client=dp-teaminternet12_3ph&r=m&sct=ID%3D4562ec206474b9d1%3AT%3D1727615843%3ART%3D1727615843%3AS%3DALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w&sc_status=6&hl=en&rpbu=https%3A%2F%2Fwww.img2.ymlp294.net%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NzUuMjk0NXw5ZDZkMzNjOWFjODlkYTU4ODJmMjA1MjJlZjc4NzJkYjQ0NmM0YWExfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%253D%253D&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Electronic%20Fingerprints%20For%20Employment&afdt=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpj-Cc0S-fYKtdlAPXzRH6TCYLSLzizC_juBVXQxkI0WCgwbhC_qeRF5PWSO8b88HUrnUPuQ1qym33YKdH2odkkjj0_xXrGGYqyh4hLOm8gLi7kkI [TRUNCATED] Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.img2.ymlp294.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:17:57 UTC	807	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Disposition: inline Date: Sun, 29 Sep 2024 13:17:57 GMT Expires: Sun, 29 Sep 2024 13:17:57 GMT Cache-Control: private, max-age=3600 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-iljtF6fN8ov1WtnMbL636w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Server: gws X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-29 13:17:57 UTC	583	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 73 74 79 6c 65 20 69 64 3d 22 73 73 72 2d 62 6f 69 6c 65 72 70 6c 61 74 65 22 3e 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 72 67 69 6e 3a 30 3b 7d 2e 64 69 76 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 20 2e 64 69 76 3a 6c 61 73 Data Ascii: 8000<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:las
2024-09-29 13:17:57 UTC	1390	IN	Data Raw: 69 5f 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 76 5f 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 Data Ascii: i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit
2024-09-29 13:17:57 UTC	1390	IN	Data Raw: 5f 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 6f 5f 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 78 5f 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 79 5f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 7a 2d 69 6e 64 65 78 3a 31 3b 7d 2e 6b 5f 3e 64 69 76 3a 6e 6f 74 28 2e 79 5f 29 20 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 Data Ascii: _{overflow:hidden;}.o_{white-space:nowrap;}.x_{cursor:pointer;}.y_{display:none; position:absolute; z-index:1;}.k_>div:not(.y_) {display:-webkit-inline-box; display:-moz-inline-box; display:-ms-inline-flexbox; display:-webkit-inline-flex; display:inline-f
2024-09-29 13:17:57 UTC	1390	IN	Data Raw: 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 42 6f 74 74 6f 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 43 65 6e 74 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 Data Ascii: start; align-items:flex-start;}.flexAlignBottom{-ms-flex-align:end; -webkit-box-align:end; -webkit-align-items:flex-end; align-items:flex-end;}.flexAlignCenter{-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center
2024-09-29 13:17:57 UTC	1390	IN	Data Raw: 3a 35 30 70 78 3b 63 6f 6c 6f 72 3a 23 63 63 63 63 63 63 3b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 2e 73 69 32 37 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 36 66 30 30 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 33 36 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 7d 2e 73 69 33 34 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 70 78 3b 7d 2e 73 69 34 32 7b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d Data Ascii: :50px;color:#cccccc;width:100%; -ms-flex-negative:1;-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.si27:hover{color:#ff6f00;text-decoration:underline;}.si36{height:100%;}.si34{margin-bottom:0px;}.si42{width:100%; -ms-flex-negative:1;-webkit-
2024-09-29 13:17:57 UTC	1390	IN	Data Raw: 74 74 6f 6d 3a 33 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 70 78 3b 7d 2e 73 69 31 38 7b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 31 38 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 31 39 7b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 32 30 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 32 31 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 38 36 62 66 32 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 Data Ascii: ttom:3px;padding-top:3px;}.si18{color:#dddddd;}.si18:hover{text-decoration:underline;}.si19{color:#dddddd;}.si20{font-family:Roboto,arial,sans-serif;font-size:12px;line-height:20px;color:#dddddd;}.si21{font-weight:700;background-color:#186bf2;border-radiu
2024-09-29 13:17:57 UTC	1390	IN	Data Raw: 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 70 78 3b 63 6f 6c 6f 72 3a 23 38 36 38 35 38 61 3b 7d 2e 73 69 32 36 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 7d 2e 73 69 37 32 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 52 6f 62 6f 74 6f 20 4c 69 67 68 74 22 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 Data Ascii: px;padding-bottom:1px;padding-left:1px;padding-right:1px;padding-top:1px;color:#86858a;}.si26{font-family:Roboto,arial,sans-serif;font-size:14px;line-height:24px;color:#ffffff;}.si72{font-family:"Roboto Light",arial,sans-serif;font-size:12px;line-height:2
2024-09-29 13:17:57 UTC	1390	IN	Data Raw: 73 69 6f 6e 4c 69 6e 6b 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4e 4f 49 4e 44 45 58 2c 20 4e 4f 46 4f 4c 4c 4f 57 22 20 6e 61 6d 65 3d 22 52 4f 42 4f 54 53 22 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 20 20 20 20 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 20 3c 64 69 76 20 69 64 3d 22 61 64 42 6c 6f 63 6b 22 3e 20 20 20 3c 64 69 76 20 69 64 3d 22 73 73 72 61 64 2d 6d 61 73 74 65 72 Data Ascii: sionLink:hover{text-decoration:underline;}</style> <meta content="NOINDEX, NOFOLLOW" name="ROBOTS"> <meta content="telephone=no" name="format-detection"> <meta content="origin" name="referrer"> </head> <body> <div id="adBlock"> <div id="ssrad-master
2024-09-29 13:17:57 UTC	1390	IN	Data Raw: 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 33 39 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f Data Ascii: -pack:start; -webkit-justify-content:flex-start; justify-content:flex-start;-ms-flex-align:stretch; -webkit-box-align:stretch; -webkit-align-items:stretch; align-items:stretch;"><div class="i_ div si39" style="-ms-flex-direction:row; -webkit-box-orient:ho
2024-09-29 13:17:57 UTC	1390	IN	Data Raw: 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 33 36 20 76 5f 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 76 65 72 74 69 63 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 2d 6d 73 2d 66 6c 65 78 Data Ascii: class="i_ div si36 v_" style="-ms-flex-direction:column; -webkit-box-orient:vertical; -webkit-flex-direction:column; flex-direction:column;-ms-flex-pack:start; -webkit-box-pack:start; -webkit-justify-content:flex-start; justify-content:flex-start;-ms-flex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.7	49782	216.58.206.46	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:57 UTC	759	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.img2.ymlp294.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
2024-09-29 13:17:57 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Sun, 29 Sep 2024 13:17:57 GMT Expires: Sun, 29 Sep 2024 13:17:57 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.7	49783	76.223.26.96	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:57 UTC	618	OUT	GET /track.php?domain=ymlp294.net&toggle=browserjs&uid=MTcyNzYxNTg3NS4yNjU6NGUxYjkxNWRmYjAwNGI3MmU5YTU4NTU0ODg4ZTc0NDkzMzU0ZWQwZTgzNjMwZTA5Zjc4M2NjMjRhOTAzZThkZDo2NmY5NTM4MzQwYjAw HTTP/1.1 Host: www.img2.ymlp294.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
2024-09-29 13:17:58 UTC	597	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Alt-Svc: h3=":50944"; ma=2592000 Content-Type: text/html; charset=UTF-8 Date: Sun, 29 Sep 2024 13:17:58 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: browserjs Connection: close Transfer-Encoding: chunked
2024-09-29 13:17:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.7	49784	216.58.206.46	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:58 UTC	759	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.img2.ymlp294.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
2024-09-29 13:17:58 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Sun, 29 Sep 2024 13:17:58 GMT Expires: Sun, 29 Sep 2024 13:17:58 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.7	49785	76.223.26.96	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:58 UTC	1572	OUT	GET /track.php?domain=ymlp294.net&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTg3NS4yNjU6NGUxYjkxNWRmYjAwNGI3MmU5YTU4NTU0ODg4ZTc0NDkzMzU0ZWQwZTgzNjMwZTA5Zjc4M2NjMjRhOTAzZThkZDo2NmY5NTM4MzQwYjAw HTTP/1.1 Host: www.img2.ymlp294.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" device-memory: 8 rtt: 200 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 dpr: 1 downlink: 1.6 ect: 4g sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Electronic+Fingerprints+For+Employment&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpj-Cc0S-fYKtdlAPXzRH6TCYLSLzizC_juBVXQxkI0WCgwbhC_qeRF5PWSO8b88HUrnUPuQ1qym33YKdH2odkkjj0_xXrGGYqyh4hLOm8gLi7kkIExQyZWypGx-K802lAew&pcsa=false Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
2024-09-29 13:17:58 UTC	599	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Alt-Svc: h3=":50944"; ma=2592000 Content-Type: text/html; charset=UTF-8 Date: Sun, 29 Sep 2024 13:17:58 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: answercheck Connection: close Transfer-Encoding: chunked
2024-09-29 13:17:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.7	49787	76.223.26.96	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:17:59 UTC	637	OUT	GET /track.php?domain=ymlp294.net&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTg3NS4yNjU6NGUxYjkxNWRmYjAwNGI3MmU5YTU4NTU0ODg4ZTc0NDkzMzU0ZWQwZTgzNjMwZTA5Zjc4M2NjMjRhOTAzZThkZDo2NmY5NTM4MzQwYjAw HTTP/1.1 Host: www.img2.ymlp294.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
2024-09-29 13:18:00 UTC	599	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Alt-Svc: h3=":50944"; ma=2592000 Content-Type: text/html; charset=UTF-8 Date: Sun, 29 Sep 2024 13:18:00 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: answercheck Connection: close Transfer-Encoding: chunked
2024-09-29 13:18:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.7	49780	142.250.186.142	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:18:00 UTC	894	OUT	GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=syu0w21o6xw1&aqid=hVP5ZpuFENaJhcIP17bpuAI&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1399&adbw=530&adbah=475%2C470%2C452&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=45%7C0%7C-5924759%7C8%7C5927820&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.img2.ymlp294.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:18:00 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-fhiCrqFyqemqDgRNcgoECw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 29 Sep 2024 13:18:00 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.7	49790	76.223.26.96	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:18:01 UTC	1479	OUT	GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Reset+Password&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmYBlLqpjy4j-ezD1zWrFP6RH-dyPE5lTBqxgA0qK4FhwM0BmGo80V6Za76RLHCNjfMDf_wqrTtxma-QcwyTatvF5ivGxGP_kMNdLRRttz7dQeTQmZFmv5A9tMGaFRpYIY0-p0IkVpc&pcsa=false HTTP/1.1 Host: www.img2.ymlp294.net Connection: keep-alive device-memory: 8 dpr: 1 viewport-width: 1280 rtt: 200 downlink: 1.55 ect: 4g sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
2024-09-29 13:18:02 UTC	882	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Alt-Svc: h3=":50944"; ma=2592000 Content-Type: text/html; charset=UTF-8 Date: Sun, 29 Sep 2024 13:18:02 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_OFYQBG5ffbSN0NxhrcyZja3cwcUl1/8yYnwmXrEom2X1zLnT5T7USV95Bo4i2D6mFlO0YtHO6sjTG2aqh7yVVw== X-Domain: ymlp294.net X-Pcrew-Blocked-Reason: X-Pcrew-Ip-Organization: CenturyLink X-Subdomain: www.img2 Connection: close Transfer-Encoding: chunked
2024-09-29 13:18:02 UTC	2372	IN	Data Raw: 34 63 31 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4c 71 75 44 46 45 54 58 52 6e 30 48 72 30 35 66 55 50 37 45 4a 54 37 37 78 59 6e 50 6d 52 62 70 4d 79 34 76 6b 38 4b 59 69 48 6e 6b 4e 70 65 64 6e 6a 4f 41 4e 4a 63 61 58 44 58 63 4b 51 4a 4e 30 6e 58 4b 5a 4a 4c 37 54 63 69 4a 44 38 41 6f 48 58 4b 31 35 38 43 41 77 45 41 41 51 3d 3d 5f 4f 46 59 51 42 47 35 66 66 62 53 4e 30 4e 78 68 72 63 79 5a 6a 61 33 63 77 63 55 6c 31 2f 38 79 59 6e 77 6d 58 72 45 6f 6d 32 58 31 7a 4c 6e 54 35 54 37 55 53 56 39 35 42 6f 34 69 32 44 36 6d 46 6c 4f 30 59 74 48 4f 36 73 6a 54 47 32 61 71 68 Data Ascii: 4c11<!DOCTYPE html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_OFYQBG5ffbSN0NxhrcyZja3cwcUl1/8yYnwmXrEom2X1zLnT5T7USV95Bo4i2D6mFlO0YtHO6sjTG2aqh
2024-09-29 13:18:02 UTC	1724	IN	Data Raw: 0a 7d 0a 23 73 61 6c 65 5f 64 69 73 63 72 65 65 74 20 61 20 7b 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 72 67 62 28 32 34 30 2c 32 34 30 2c 32 34 30 29 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 7d 0a 0a 23 73 61 6c 65 5f 70 72 6f 6d 69 6e 65 6e 74 20 7b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 36 38 70 78 3b 0a 7d 0a 23 73 61 6c 65 5f 70 72 6f 6d 69 6e 65 6e 74 20 23 67 72 65 79 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 28 31 34 35 2c 31 34 30 2c 31 33 37 29 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 72 67 62 28 32 35 35 2c 32 35 35 2c 32 35 35 29 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0a 20 20 20 20 66 Data Ascii: }#sale_discreet a { text-decoration: none; color: rgb(240,240,240); font-size: 14px;}#sale_prominent { height: 68px;}#sale_prominent #grey { background: rgb(145,140,137); color: rgb(255,255,255); text-align: right; f
2024-09-29 13:18:02 UTC	4744	IN	Data Raw: 6c 61 79 3a 6e 6f 6e 65 3b 0a 7d 0a 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 20 3a 20 34 38 30 70 78 29 20 7b 0a 09 23 73 61 6c 65 5f 64 69 61 67 6f 6e 61 6c 5f 6f 72 61 6e 67 65 20 7b 0a 09 09 77 69 64 74 68 3a 20 34 30 30 70 78 3b 0a 09 09 68 65 69 67 68 74 3a 37 30 70 78 3b 0a 09 09 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 0a 09 09 72 69 67 68 74 3a 2d 31 32 30 70 78 3b 0a 09 09 74 6f 70 3a 34 32 70 78 3b 0a 09 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 0a 09 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 32 30 3b 0a 09 7d 0a 0a 09 23 73 61 6c 65 5f 64 69 61 67 6f 6e 61 6c 5f 6f 72 61 6e 67 65 20 61 20 7b 0a 09 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 Data Ascii: lay:none;}@media only screen and (min-width : 480px) {#sale_diagonal_orange {width: 400px;height:70px;position:fixed;right:-120px;top:42px;line-height:20px; z-index: 20;}#sale_diagonal_orange a {-webkit-transform: rotat
2024-09-29 13:18:02 UTC	5930	IN	Data Raw: 6f 6e 43 6c 69 63 6b 3d 22 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 27 2f 70 72 69 76 61 63 79 2e 68 74 6d 6c 27 2c 20 27 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 27 2c 20 27 77 69 64 74 68 3d 38 39 30 2c 68 65 69 67 68 74 3d 33 33 30 2c 6c 65 66 74 3d 32 30 30 2c 74 6f 70 3d 32 30 30 2c 6d 65 6e 75 62 61 72 3d 6e 6f 2c 73 74 61 74 75 73 3d 79 65 73 2c 74 6f 6f 6c 62 61 72 3d 6e 6f 27 29 2e 66 6f 63 75 73 28 29 22 20 63 6c 61 73 73 3d 22 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 22 3e 0a 20 20 20 20 50 72 69 76 61 63 79 20 50 6f 6c 69 63 79 0a 3c 2f 61 3e 0a 3c 62 72 2f 3e 3c 62 72 2f 3e 0a 3c 62 72 2f 3e 3c 62 72 2f 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 Data Ascii: onClick="window.open('/privacy.html', 'privacy-policy', 'width=890,height=330,left=200,top=200,menubar=no,status=yes,toolbar=no').focus()" class="privacy-policy"> Privacy Policy</a><br/><br/><br/><br/> </div></div><script type="text/javascri
2024-09-29 13:18:02 UTC	4709	IN	Data Raw: 64 3d 22 20 2b 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 75 6e 69 71 75 65 54 72 61 63 6b 69 6e 67 49 44 29 29 3b 7d 7d 20 65 6c 73 65 20 7b 61 6a 61 78 51 75 65 72 79 28 73 63 72 69 70 74 50 61 74 68 20 2b 20 22 2f 74 72 61 63 6b 2e 70 68 70 3f 64 6f 6d 61 69 6e 3d 22 20 2b 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 6f 6d 61 69 6e 29 20 2b 20 22 26 63 61 66 3d 31 26 74 6f 67 67 6c 65 3d 61 6e 73 77 65 72 63 68 65 63 6b 26 61 6e 73 77 65 72 3d 72 65 6a 65 63 74 65 64 26 75 69 64 3d 22 20 2b 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 75 6e 69 71 75 65 54 72 61 63 6b 69 6e 67 49 44 29 29 3b 7d 7d 7d 3b 6c 65 74 20 78 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 6f 62 6a 31 2c 20 6f 62 6a 32 29 20 7b 69 66 20 Data Ascii: d=" + encodeURIComponent(uniqueTrackingID));}} else {ajaxQuery(scriptPath + "/track.php?domain=" + encodeURIComponent(domain) + "&caf=1&toggle=answercheck&answer=rejected&uid=" + encodeURIComponent(uniqueTrackingID));}}};let x = function (obj1, obj2) {if
2024-09-29 13:18:02 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-09-29 13:18:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.7	49788	142.250.186.142	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:18:01 UTC	894	OUT	GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=tb4qk3210bh9&aqid=hVP5ZpuFENaJhcIP17bpuAI&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1399&adbw=530&adbah=475%2C470%2C452&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=45%7C0%7C-5924759%7C8%7C5927820&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.img2.ymlp294.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:18:02 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-bu_UTviRFWO82_sMCJOqvg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 29 Sep 2024 13:18:02 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.7	49789	76.223.26.96	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:18:03 UTC	1539	OUT	GET /track.php?domain=ymlp294.net&toggle=browserjs&uid=MTcyNzYxNTg4Mi4wMjA1OmU1ZmU2NWQ5OGZiNjhkZjc3YjkwNGE4YTRjZTBiMjU4MDAxNzdiOTNmMzA2M2M1ZjY3NWM1NDYwZTBmY2Q5ZmI6NjZmOTUzOGEwNTAzNA%3D%3D HTTP/1.1 Host: www.img2.ymlp294.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" device-memory: 8 rtt: 200 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 dpr: 1 downlink: 1.65 ect: 3g sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Reset+Password&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmYBlLqpjy4j-ezD1zWrFP6RH-dyPE5lTBqxgA0qK4FhwM0BmGo80V6Za76RLHCNjfMDf_wqrTtxma-QcwyTatvF5ivGxGP_kMNdLRRttz7dQeTQmZFmv5A9tMGaFRpYIY0-p0IkVpc&pcsa=false Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
2024-09-29 13:18:03 UTC	597	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Alt-Svc: h3=":50944"; ma=2592000 Content-Type: text/html; charset=UTF-8 Date: Sun, 29 Sep 2024 13:18:03 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: browserjs Connection: close Transfer-Encoding: chunked
2024-09-29 13:18:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.7	49791	76.223.26.96	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:18:04 UTC	626	OUT	GET /track.php?domain=ymlp294.net&toggle=browserjs&uid=MTcyNzYxNTg4Mi4wMjA1OmU1ZmU2NWQ5OGZiNjhkZjc3YjkwNGE4YTRjZTBiMjU4MDAxNzdiOTNmMzA2M2M1ZjY3NWM1NDYwZTBmY2Q5ZmI6NjZmOTUzOGEwNTAzNA%3D%3D HTTP/1.1 Host: www.img2.ymlp294.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
2024-09-29 13:18:04 UTC	597	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Alt-Svc: h3=":50944"; ma=2592000 Content-Type: text/html; charset=UTF-8 Date: Sun, 29 Sep 2024 13:18:04 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: browserjs Connection: close Transfer-Encoding: chunked
2024-09-29 13:18:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.7	49792	76.223.26.96	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:18:04 UTC	1421	OUT	GET /ls.php?t=66f9538a&token=aec1ed8204995796494a9b7188d7c6fd94eefef9 HTTP/1.1 Host: www.img2.ymlp294.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" device-memory: 8 rtt: 200 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 dpr: 1 downlink: 1.65 ect: 3g sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Reset+Password&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmYBlLqpjy4j-ezD1zWrFP6RH-dyPE5lTBqxgA0qK4FhwM0BmGo80V6Za76RLHCNjfMDf_wqrTtxma-QcwyTatvF5ivGxGP_kMNdLRRttz7dQeTQmZFmv5A9tMGaFRpYIY0-p0IkVpc&pcsa=false Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
2024-09-29 13:18:04 UTC	882	IN	HTTP/1.1 201 Created Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Origin: Access-Control-Max-Age: 86400 Alt-Svc: h3=":50944"; ma=2592000 Charset: utf-8 Content-Type: text/javascript;charset=UTF-8 Date: Sun, 29 Sep 2024 13:18:04 GMT Server: Caddy Server: nginx X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_fvfzkzxee0WcEPYsNzPrnqtfxCM4ZASRuc+tMukS+/CW1UWAnOMgCT6tmdqxZP/jN1I2+YBE8kdXSKrpDjBlaw== Connection: close Transfer-Encoding: chunked
2024-09-29 13:18:04 UTC	22	IN	Data Raw: 31 30 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d 0d 0a Data Ascii: 10{"success":true}
2024-09-29 13:18:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.7	49795	216.58.206.46	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:18:04 UTC	2775	OUT	GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=bucket007%2C000003%2C000802%2Cbucket066%2Cbucket077&client=dp-teaminternet12_3ph&r=m&sct=ID%3D4562ec206474b9d1%3AT%3D1727615843%3ART%3D1727615843%3AS%3DALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w&sc_status=6&hl=en&rpbu=https%3A%2F%2Fwww.img2.ymlp294.net%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4ODIuMDQ5fDZiYmMzNzc1M2Q5NWVhM2ExOGI2MDhmMmQ3MjNiZjlhYmUyYjcyMWV8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fFpIQXRkR1ZoYldsdWRHVnlibVYwTVRKZk0zQm98YWQ3M2E5NjdiNGEzOThlOGUxN2Y0ODdkODQ0YWE3ZTU5YTMxNDFmZXwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fGJkNmQ2ZGZlZDU1NjIxMjRhNzY1M2FmZDk0ZjE5NTgzNTRjNmM4YjZ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Reset%20Password&afdt=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmYBlLqpjy4j-ezD1zWrFP6RH-dyPE5lTBqxgA0qK4FhwM0BmGo80V6Za76RLHCNjfMDf_wqrTtxma-QcwyTatvF5ivGxGP_kMNdLRRttz7dQeTQmZFmv5A9tMGaFRpYIY0-p0IkVpc&oe=UTF-8&ie=UTF-8&f [TRUNCATED] Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.img2.ymlp294.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:18:04 UTC	807	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Disposition: inline Date: Sun, 29 Sep 2024 13:18:04 GMT Expires: Sun, 29 Sep 2024 13:18:04 GMT Cache-Control: private, max-age=3600 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-Y5_sH1Bo_bErKuo6uSVwfQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Server: gws X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-29 13:18:04 UTC	583	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 73 74 79 6c 65 20 69 64 3d 22 73 73 72 2d 62 6f 69 6c 65 72 70 6c 61 74 65 22 3e 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 72 67 69 6e 3a 30 3b 7d 2e 64 69 76 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 20 2e 64 69 76 3a 6c 61 73 Data Ascii: 8000<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:las
2024-09-29 13:18:04 UTC	1390	IN	Data Raw: 69 5f 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 76 5f 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 Data Ascii: i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit
2024-09-29 13:18:04 UTC	1390	IN	Data Raw: 5f 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 6f 5f 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 78 5f 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 79 5f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 7a 2d 69 6e 64 65 78 3a 31 3b 7d 2e 6b 5f 3e 64 69 76 3a 6e 6f 74 28 2e 79 5f 29 20 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 Data Ascii: _{overflow:hidden;}.o_{white-space:nowrap;}.x_{cursor:pointer;}.y_{display:none; position:absolute; z-index:1;}.k_>div:not(.y_) {display:-webkit-inline-box; display:-moz-inline-box; display:-ms-inline-flexbox; display:-webkit-inline-flex; display:inline-f
2024-09-29 13:18:04 UTC	1390	IN	Data Raw: 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 42 6f 74 74 6f 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 43 65 6e 74 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 Data Ascii: start; align-items:flex-start;}.flexAlignBottom{-ms-flex-align:end; -webkit-box-align:end; -webkit-align-items:flex-end; align-items:flex-end;}.flexAlignCenter{-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center
2024-09-29 13:18:04 UTC	1390	IN	Data Raw: 3a 35 30 70 78 3b 63 6f 6c 6f 72 3a 23 63 63 63 63 63 63 3b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 2e 73 69 32 37 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 36 66 30 30 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 33 36 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 7d 2e 73 69 33 34 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 70 78 3b 7d 2e 73 69 34 32 7b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d Data Ascii: :50px;color:#cccccc;width:100%; -ms-flex-negative:1;-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.si27:hover{color:#ff6f00;text-decoration:underline;}.si36{height:100%;}.si34{margin-bottom:0px;}.si42{width:100%; -ms-flex-negative:1;-webkit-
2024-09-29 13:18:04 UTC	1390	IN	Data Raw: 74 74 6f 6d 3a 33 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 70 78 3b 7d 2e 73 69 31 38 7b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 31 38 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 31 39 7b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 32 30 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 32 31 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 38 36 62 66 32 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 Data Ascii: ttom:3px;padding-top:3px;}.si18{color:#dddddd;}.si18:hover{text-decoration:underline;}.si19{color:#dddddd;}.si20{font-family:Roboto,arial,sans-serif;font-size:12px;line-height:20px;color:#dddddd;}.si21{font-weight:700;background-color:#186bf2;border-radiu
2024-09-29 13:18:04 UTC	1390	IN	Data Raw: 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 70 78 3b 63 6f 6c 6f 72 3a 23 38 36 38 35 38 61 3b 7d 2e 73 69 32 36 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 7d 2e 73 69 37 32 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 52 6f 62 6f 74 6f 20 4c 69 67 68 74 22 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 Data Ascii: px;padding-bottom:1px;padding-left:1px;padding-right:1px;padding-top:1px;color:#86858a;}.si26{font-family:Roboto,arial,sans-serif;font-size:14px;line-height:24px;color:#ffffff;}.si72{font-family:"Roboto Light",arial,sans-serif;font-size:12px;line-height:2
2024-09-29 13:18:04 UTC	1390	IN	Data Raw: 73 69 6f 6e 4c 69 6e 6b 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4e 4f 49 4e 44 45 58 2c 20 4e 4f 46 4f 4c 4c 4f 57 22 20 6e 61 6d 65 3d 22 52 4f 42 4f 54 53 22 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 20 20 20 20 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 20 3c 64 69 76 20 69 64 3d 22 61 64 42 6c 6f 63 6b 22 3e 20 20 20 3c 64 69 76 20 69 64 3d 22 73 73 72 61 64 2d 6d 61 73 74 65 72 Data Ascii: sionLink:hover{text-decoration:underline;}</style> <meta content="NOINDEX, NOFOLLOW" name="ROBOTS"> <meta content="telephone=no" name="format-detection"> <meta content="origin" name="referrer"> </head> <body> <div id="adBlock"> <div id="ssrad-master
2024-09-29 13:18:04 UTC	1390	IN	Data Raw: 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 33 39 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f Data Ascii: -pack:start; -webkit-justify-content:flex-start; justify-content:flex-start;-ms-flex-align:stretch; -webkit-box-align:stretch; -webkit-align-items:stretch; align-items:stretch;"><div class="i_ div si39" style="-ms-flex-direction:row; -webkit-box-orient:ho
2024-09-29 13:18:04 UTC	1390	IN	Data Raw: 22 69 5f 20 64 69 76 20 73 69 34 31 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 33 36 20 76 5f 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 76 65 72 74 69 63 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 20 66 6c 65 78 2d 64 69 72 Data Ascii: "i_ div si41" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><div class="i_ div si36 v_" style="-ms-flex-direction:column; -webkit-box-orient:vertical; -webkit-flex-direction:column; flex-dir

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.7	49794	216.58.206.46	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:18:04 UTC	759	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.img2.ymlp294.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
2024-09-29 13:18:04 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Sun, 29 Sep 2024 13:18:04 GMT Expires: Sun, 29 Sep 2024 13:18:04 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.7	49796	216.58.206.46	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:18:05 UTC	759	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.img2.ymlp294.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
2024-09-29 13:18:06 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Sun, 29 Sep 2024 13:18:05 GMT Expires: Sun, 29 Sep 2024 13:18:05 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.7	49797	76.223.26.96	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:18:06 UTC	1558	OUT	GET /track.php?domain=ymlp294.net&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTg4Mi4wMjA1OmU1ZmU2NWQ5OGZiNjhkZjc3YjkwNGE4YTRjZTBiMjU4MDAxNzdiOTNmMzA2M2M1ZjY3NWM1NDYwZTBmY2Q5ZmI6NjZmOTUzOGEwNTAzNA%3D%3D HTTP/1.1 Host: www.img2.ymlp294.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" device-memory: 8 rtt: 200 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 dpr: 1 downlink: 1.65 ect: 3g sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Reset+Password&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmYBlLqpjy4j-ezD1zWrFP6RH-dyPE5lTBqxgA0qK4FhwM0BmGo80V6Za76RLHCNjfMDf_wqrTtxma-QcwyTatvF5ivGxGP_kMNdLRRttz7dQeTQmZFmv5A9tMGaFRpYIY0-p0IkVpc&pcsa=false Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
2024-09-29 13:18:06 UTC	599	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Alt-Svc: h3=":50944"; ma=2592000 Content-Type: text/html; charset=UTF-8 Date: Sun, 29 Sep 2024 13:18:06 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: answercheck Connection: close Transfer-Encoding: chunked
2024-09-29 13:18:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.7	49798	76.223.26.96	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:18:07 UTC	645	OUT	GET /track.php?domain=ymlp294.net&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTg4Mi4wMjA1OmU1ZmU2NWQ5OGZiNjhkZjc3YjkwNGE4YTRjZTBiMjU4MDAxNzdiOTNmMzA2M2M1ZjY3NWM1NDYwZTBmY2Q5ZmI6NjZmOTUzOGEwNTAzNA%3D%3D HTTP/1.1 Host: www.img2.ymlp294.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
2024-09-29 13:18:07 UTC	599	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Alt-Svc: h3=":50944"; ma=2592000 Content-Type: text/html; charset=UTF-8 Date: Sun, 29 Sep 2024 13:18:07 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: answercheck Connection: close Transfer-Encoding: chunked
2024-09-29 13:18:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.7	49793	142.250.186.142	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:18:08 UTC	894	OUT	GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=hkg4uphoyq5s&aqid=jFP5ZrXSHfWhjuwP6ITRgQs&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1337&adbw=530&adbah=475%2C439%2C421&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=30%7C0%7C-5925445%7C3%7C5928413&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.img2.ymlp294.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:18:09 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-HoaOMc2cmUZk-WO_hgF0Kg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 29 Sep 2024 13:18:08 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.7	49799	142.250.186.142	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:18:09 UTC	894	OUT	GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=sftwhdqlk819&aqid=jFP5ZrXSHfWhjuwP6ITRgQs&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1337&adbw=530&adbah=475%2C439%2C421&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=30%7C0%7C-5925445%7C3%7C5928413&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.img2.ymlp294.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:18:09 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-8Y4XEhHPhF9tWbMRzRhSew' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 29 Sep 2024 13:18:09 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.7	49802	76.223.26.96	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:18:17 UTC	1512	OUT	GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Electronic+Fingerprints+For+Employment&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpj-Cc0S-fYKtdlAPXzRH6TCYLSLzizC_juBVXQxkI0WCgwbhC_qeRF5PWSO8b88HUrnUPuQ1qym33YKdH2odkkjj0_xXrGGYqyh4hLOm8gLi7kkIExQyZWypGx-K802lAew&pcsa=false&nb=0&nm=3 HTTP/1.1 Host: www.img2.ymlp294.net Connection: keep-alive device-memory: 8 dpr: 1 viewport-width: 1280 rtt: 200 downlink: 1.55 ect: 3g sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
2024-09-29 13:18:17 UTC	882	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Alt-Svc: h3=":50944"; ma=2592000 Content-Type: text/html; charset=UTF-8 Date: Sun, 29 Sep 2024 13:18:17 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_EJUO9GzRKDwjsg/LEwsSe5duO2BE4p37oq1TMDpmeAlzGXkYNyP/9d8ZvKxL7/+CXurwtYvpCF1a/ohE8qCXcA== X-Domain: ymlp294.net X-Pcrew-Blocked-Reason: X-Pcrew-Ip-Organization: CenturyLink X-Subdomain: www.img2 Connection: close Transfer-Encoding: chunked
2024-09-29 13:18:17 UTC	2372	IN	Data Raw: 34 63 34 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4c 71 75 44 46 45 54 58 52 6e 30 48 72 30 35 66 55 50 37 45 4a 54 37 37 78 59 6e 50 6d 52 62 70 4d 79 34 76 6b 38 4b 59 69 48 6e 6b 4e 70 65 64 6e 6a 4f 41 4e 4a 63 61 58 44 58 63 4b 51 4a 4e 30 6e 58 4b 5a 4a 4c 37 54 63 69 4a 44 38 41 6f 48 58 4b 31 35 38 43 41 77 45 41 41 51 3d 3d 5f 45 4a 55 4f 39 47 7a 52 4b 44 77 6a 73 67 2f 4c 45 77 73 53 65 35 64 75 4f 32 42 45 34 70 33 37 6f 71 31 54 4d 44 70 6d 65 41 6c 7a 47 58 6b 59 4e 79 50 2f 39 64 38 5a 76 4b 78 4c 37 2f 2b 43 58 75 72 77 74 59 76 70 43 46 31 61 2f 6f 68 45 38 Data Ascii: 4c49<!DOCTYPE html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_EJUO9GzRKDwjsg/LEwsSe5duO2BE4p37oq1TMDpmeAlzGXkYNyP/9d8ZvKxL7/+CXurwtYvpCF1a/ohE8
2024-09-29 13:18:17 UTC	1724	IN	Data Raw: 0a 7d 0a 23 73 61 6c 65 5f 64 69 73 63 72 65 65 74 20 61 20 7b 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 72 67 62 28 32 34 30 2c 32 34 30 2c 32 34 30 29 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 7d 0a 0a 23 73 61 6c 65 5f 70 72 6f 6d 69 6e 65 6e 74 20 7b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 36 38 70 78 3b 0a 7d 0a 23 73 61 6c 65 5f 70 72 6f 6d 69 6e 65 6e 74 20 23 67 72 65 79 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 28 31 34 35 2c 31 34 30 2c 31 33 37 29 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 72 67 62 28 32 35 35 2c 32 35 35 2c 32 35 35 29 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0a 20 20 20 20 66 Data Ascii: }#sale_discreet a { text-decoration: none; color: rgb(240,240,240); font-size: 14px;}#sale_prominent { height: 68px;}#sale_prominent #grey { background: rgb(145,140,137); color: rgb(255,255,255); text-align: right; f
2024-09-29 13:18:17 UTC	4744	IN	Data Raw: 6c 61 79 3a 6e 6f 6e 65 3b 0a 7d 0a 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 20 3a 20 34 38 30 70 78 29 20 7b 0a 09 23 73 61 6c 65 5f 64 69 61 67 6f 6e 61 6c 5f 6f 72 61 6e 67 65 20 7b 0a 09 09 77 69 64 74 68 3a 20 34 30 30 70 78 3b 0a 09 09 68 65 69 67 68 74 3a 37 30 70 78 3b 0a 09 09 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 0a 09 09 72 69 67 68 74 3a 2d 31 32 30 70 78 3b 0a 09 09 74 6f 70 3a 34 32 70 78 3b 0a 09 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 0a 09 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 32 30 3b 0a 09 7d 0a 0a 09 23 73 61 6c 65 5f 64 69 61 67 6f 6e 61 6c 5f 6f 72 61 6e 67 65 20 61 20 7b 0a 09 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 Data Ascii: lay:none;}@media only screen and (min-width : 480px) {#sale_diagonal_orange {width: 400px;height:70px;position:fixed;right:-120px;top:42px;line-height:20px; z-index: 20;}#sale_diagonal_orange a {-webkit-transform: rotat
2024-09-29 13:18:17 UTC	5930	IN	Data Raw: 6f 6e 43 6c 69 63 6b 3d 22 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 27 2f 70 72 69 76 61 63 79 2e 68 74 6d 6c 27 2c 20 27 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 27 2c 20 27 77 69 64 74 68 3d 38 39 30 2c 68 65 69 67 68 74 3d 33 33 30 2c 6c 65 66 74 3d 32 30 30 2c 74 6f 70 3d 32 30 30 2c 6d 65 6e 75 62 61 72 3d 6e 6f 2c 73 74 61 74 75 73 3d 79 65 73 2c 74 6f 6f 6c 62 61 72 3d 6e 6f 27 29 2e 66 6f 63 75 73 28 29 22 20 63 6c 61 73 73 3d 22 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 22 3e 0a 20 20 20 20 50 72 69 76 61 63 79 20 50 6f 6c 69 63 79 0a 3c 2f 61 3e 0a 3c 62 72 2f 3e 3c 62 72 2f 3e 0a 3c 62 72 2f 3e 3c 62 72 2f 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 Data Ascii: onClick="window.open('/privacy.html', 'privacy-policy', 'width=890,height=330,left=200,top=200,menubar=no,status=yes,toolbar=no').focus()" class="privacy-policy"> Privacy Policy</a><br/><br/><br/><br/> </div></div><script type="text/javascri
2024-09-29 13:18:17 UTC	4765	IN	Data Raw: 6e 73 77 65 72 63 68 65 63 6b 26 61 6e 73 77 65 72 3d 79 65 73 26 75 69 64 3d 22 20 2b 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 75 6e 69 71 75 65 54 72 61 63 6b 69 6e 67 49 44 29 29 3b 7d 7d 20 65 6c 73 65 20 7b 61 6a 61 78 51 75 65 72 79 28 73 63 72 69 70 74 50 61 74 68 20 2b 20 22 2f 74 72 61 63 6b 2e 70 68 70 3f 64 6f 6d 61 69 6e 3d 22 20 2b 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 6f 6d 61 69 6e 29 20 2b 20 22 26 63 61 66 3d 31 26 74 6f 67 67 6c 65 3d 61 6e 73 77 65 72 63 68 65 63 6b 26 61 6e 73 77 65 72 3d 72 65 6a 65 63 74 65 64 26 75 69 64 3d 22 20 2b 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 75 6e 69 71 75 65 54 72 61 63 6b 69 6e 67 49 44 29 29 3b 7d 7d 7d 3b 6c 65 74 20 78 20 3d 20 66 75 Data Ascii: nswercheck&answer=yes&uid=" + encodeURIComponent(uniqueTrackingID));}} else {ajaxQuery(scriptPath + "/track.php?domain=" + encodeURIComponent(domain) + "&caf=1&toggle=answercheck&answer=rejected&uid=" + encodeURIComponent(uniqueTrackingID));}}};let x = fu
2024-09-29 13:18:17 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-09-29 13:18:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.7	49801	76.223.26.96	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:18:17 UTC	1571	OUT	GET /track.php?domain=ymlp294.net&toggle=browserjs&uid=MTcyNzYxNTg5Ny4yODQ0OjdjZTY4M2Y0YTRlNjk4N2E2Mzg0NzVjYmI3MjdlZTUyMDc3MzkxNDQ1M2I1MzU5MWQ1NTRkZTQ4NDlkY2YwY2Y6NjZmOTUzOTk0NTZlNQ%3D%3D HTTP/1.1 Host: www.img2.ymlp294.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" device-memory: 8 rtt: 200 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 dpr: 1 downlink: 1.5 ect: 3g sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Electronic+Fingerprints+For+Employment&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpj-Cc0S-fYKtdlAPXzRH6TCYLSLzizC_juBVXQxkI0WCgwbhC_qeRF5PWSO8b88HUrnUPuQ1qym33YKdH2odkkjj0_xXrGGYqyh4hLOm8gLi7kkIExQyZWypGx-K802lAew&pcsa=false&nb=0&nm=3 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
2024-09-29 13:18:17 UTC	597	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Alt-Svc: h3=":50944"; ma=2592000 Content-Type: text/html; charset=UTF-8 Date: Sun, 29 Sep 2024 13:18:17 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: browserjs Connection: close Transfer-Encoding: chunked
2024-09-29 13:18:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.7	49804	76.223.26.96	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:18:18 UTC	1453	OUT	GET /ls.php?t=66f95399&token=75f7e2c880a2e54b3081700c67546bdb0654fb6b HTTP/1.1 Host: www.img2.ymlp294.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" device-memory: 8 rtt: 200 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 dpr: 1 downlink: 1.5 ect: 3g sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Electronic+Fingerprints+For+Employment&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpj-Cc0S-fYKtdlAPXzRH6TCYLSLzizC_juBVXQxkI0WCgwbhC_qeRF5PWSO8b88HUrnUPuQ1qym33YKdH2odkkjj0_xXrGGYqyh4hLOm8gLi7kkIExQyZWypGx-K802lAew&pcsa=false&nb=0&nm=3 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
2024-09-29 13:18:18 UTC	882	IN	HTTP/1.1 201 Created Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Origin: Access-Control-Max-Age: 86400 Alt-Svc: h3=":50944"; ma=2592000 Charset: utf-8 Content-Type: text/javascript;charset=UTF-8 Date: Sun, 29 Sep 2024 13:18:18 GMT Server: Caddy Server: nginx X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_lLyB5tLcvjm00uYuTbxuOpwTJOCgVpMqccPxAaJDGXtz6xkeLUl8IPATrUJ850hU4aHQNMdyHxs2PWB56dJDfw== Connection: close Transfer-Encoding: chunked
2024-09-29 13:18:18 UTC	22	IN	Data Raw: 31 30 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d 0d 0a Data Ascii: 10{"success":true}
2024-09-29 13:18:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.7	49808	76.223.26.96	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:18:18 UTC	626	OUT	GET /track.php?domain=ymlp294.net&toggle=browserjs&uid=MTcyNzYxNTg5Ny4yODQ0OjdjZTY4M2Y0YTRlNjk4N2E2Mzg0NzVjYmI3MjdlZTUyMDc3MzkxNDQ1M2I1MzU5MWQ1NTRkZTQ4NDlkY2YwY2Y6NjZmOTUzOTk0NTZlNQ%3D%3D HTTP/1.1 Host: www.img2.ymlp294.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
2024-09-29 13:18:18 UTC	597	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Alt-Svc: h3=":50944"; ma=2592000 Content-Type: text/html; charset=UTF-8 Date: Sun, 29 Sep 2024 13:18:18 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: browserjs Connection: close Transfer-Encoding: chunked
2024-09-29 13:18:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.7	49807	216.58.206.46	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:18:18 UTC	2860	OUT	GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=bucket007%2C000003%2C000802%2Cbucket066%2Cbucket077&client=dp-teaminternet12_3ph&r=m&sct=ID%3D4562ec206474b9d1%3AT%3D1727615843%3ART%3D1727615843%3AS%3DALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w&sc_status=6&hl=en&rpbu=https%3A%2F%2Fwww.img2.ymlp294.net%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4OTcuMzA0N3wwY2Q5YmZlMTQwODhiMTY1OTBlMTQ2ZDU4NDBlMzk0YmJlZjczNTQ4fHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%253D%253D&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Electronic%20Fingerprints%20For%20Employment&afdt=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpj-Cc0S-fYKtdlAPXzRH6TCYLSLzizC_juBVXQxkI0WCgwbhC_qeRF5PWSO8b88HUrnUPuQ1qym33YKdH2odkkjj0_xXrGGYqyh4hLOm8gLi7kkI [TRUNCATED] Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.img2.ymlp294.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:18:19 UTC	807	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Disposition: inline Date: Sun, 29 Sep 2024 13:18:18 GMT Expires: Sun, 29 Sep 2024 13:18:18 GMT Cache-Control: private, max-age=3600 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-MXSh2J1fJQkBc9GQ68oqOQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Server: gws X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-29 13:18:19 UTC	583	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 73 74 79 6c 65 20 69 64 3d 22 73 73 72 2d 62 6f 69 6c 65 72 70 6c 61 74 65 22 3e 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 72 67 69 6e 3a 30 3b 7d 2e 64 69 76 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 20 2e 64 69 76 3a 6c 61 73 Data Ascii: 8000<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:las
2024-09-29 13:18:19 UTC	1390	IN	Data Raw: 69 5f 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 76 5f 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 Data Ascii: i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit
2024-09-29 13:18:19 UTC	1390	IN	Data Raw: 5f 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 6f 5f 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 78 5f 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 79 5f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 7a 2d 69 6e 64 65 78 3a 31 3b 7d 2e 6b 5f 3e 64 69 76 3a 6e 6f 74 28 2e 79 5f 29 20 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 Data Ascii: _{overflow:hidden;}.o_{white-space:nowrap;}.x_{cursor:pointer;}.y_{display:none; position:absolute; z-index:1;}.k_>div:not(.y_) {display:-webkit-inline-box; display:-moz-inline-box; display:-ms-inline-flexbox; display:-webkit-inline-flex; display:inline-f
2024-09-29 13:18:19 UTC	1390	IN	Data Raw: 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 42 6f 74 74 6f 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 43 65 6e 74 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 Data Ascii: start; align-items:flex-start;}.flexAlignBottom{-ms-flex-align:end; -webkit-box-align:end; -webkit-align-items:flex-end; align-items:flex-end;}.flexAlignCenter{-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center
2024-09-29 13:18:19 UTC	1390	IN	Data Raw: 3a 35 30 70 78 3b 63 6f 6c 6f 72 3a 23 63 63 63 63 63 63 3b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 2e 73 69 32 37 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 36 66 30 30 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 33 36 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 7d 2e 73 69 33 34 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 70 78 3b 7d 2e 73 69 34 32 7b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d Data Ascii: :50px;color:#cccccc;width:100%; -ms-flex-negative:1;-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.si27:hover{color:#ff6f00;text-decoration:underline;}.si36{height:100%;}.si34{margin-bottom:0px;}.si42{width:100%; -ms-flex-negative:1;-webkit-
2024-09-29 13:18:19 UTC	1390	IN	Data Raw: 74 74 6f 6d 3a 33 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 70 78 3b 7d 2e 73 69 31 38 7b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 31 38 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 31 39 7b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 32 30 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 32 31 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 38 36 62 66 32 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 Data Ascii: ttom:3px;padding-top:3px;}.si18{color:#dddddd;}.si18:hover{text-decoration:underline;}.si19{color:#dddddd;}.si20{font-family:Roboto,arial,sans-serif;font-size:12px;line-height:20px;color:#dddddd;}.si21{font-weight:700;background-color:#186bf2;border-radiu
2024-09-29 13:18:19 UTC	1390	IN	Data Raw: 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 70 78 3b 63 6f 6c 6f 72 3a 23 38 36 38 35 38 61 3b 7d 2e 73 69 32 36 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 7d 2e 73 69 37 32 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 52 6f 62 6f 74 6f 20 4c 69 67 68 74 22 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 Data Ascii: px;padding-bottom:1px;padding-left:1px;padding-right:1px;padding-top:1px;color:#86858a;}.si26{font-family:Roboto,arial,sans-serif;font-size:14px;line-height:24px;color:#ffffff;}.si72{font-family:"Roboto Light",arial,sans-serif;font-size:12px;line-height:2
2024-09-29 13:18:19 UTC	1390	IN	Data Raw: 73 69 6f 6e 4c 69 6e 6b 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4e 4f 49 4e 44 45 58 2c 20 4e 4f 46 4f 4c 4c 4f 57 22 20 6e 61 6d 65 3d 22 52 4f 42 4f 54 53 22 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 20 20 20 20 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 20 3c 64 69 76 20 69 64 3d 22 61 64 42 6c 6f 63 6b 22 3e 20 20 20 3c 64 69 76 20 69 64 3d 22 73 73 72 61 64 2d 6d 61 73 74 65 72 Data Ascii: sionLink:hover{text-decoration:underline;}</style> <meta content="NOINDEX, NOFOLLOW" name="ROBOTS"> <meta content="telephone=no" name="format-detection"> <meta content="origin" name="referrer"> </head> <body> <div id="adBlock"> <div id="ssrad-master
2024-09-29 13:18:19 UTC	1390	IN	Data Raw: 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 33 39 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f Data Ascii: -pack:start; -webkit-justify-content:flex-start; justify-content:flex-start;-ms-flex-align:stretch; -webkit-box-align:stretch; -webkit-align-items:stretch; align-items:stretch;"><div class="i_ div si39" style="-ms-flex-direction:row; -webkit-box-orient:ho
2024-09-29 13:18:19 UTC	1390	IN	Data Raw: 43 68 65 63 6b 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 34 31 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 33 36 20 76 5f 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 76 65 72 74 69 63 61 6c 3b 20 2d 77 65 62 6b 69 Data Ascii: Check</span></a></div><div class="i_ div si41" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><div class="i_ div si36 v_" style="-ms-flex-direction:column; -webkit-box-orient:vertical; -webki

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.7	49806	216.58.206.46	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:18:18 UTC	759	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.img2.ymlp294.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
2024-09-29 13:18:19 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Sun, 29 Sep 2024 13:18:18 GMT Expires: Sun, 29 Sep 2024 13:18:18 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.7	49809	216.58.206.46	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:18:19 UTC	759	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.img2.ymlp294.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
2024-09-29 13:18:20 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Sun, 29 Sep 2024 13:18:19 GMT Expires: Sun, 29 Sep 2024 13:18:19 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.7	49810	76.223.26.96	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:18:20 UTC	1590	OUT	GET /track.php?domain=ymlp294.net&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTg5Ny4yODQ0OjdjZTY4M2Y0YTRlNjk4N2E2Mzg0NzVjYmI3MjdlZTUyMDc3MzkxNDQ1M2I1MzU5MWQ1NTRkZTQ4NDlkY2YwY2Y6NjZmOTUzOTk0NTZlNQ%3D%3D HTTP/1.1 Host: www.img2.ymlp294.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" device-memory: 8 rtt: 200 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 dpr: 1 downlink: 1.5 ect: 3g sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Electronic+Fingerprints+For+Employment&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmUBlLqpj-Cc0S-fYKtdlAPXzRH6TCYLSLzizC_juBVXQxkI0WCgwbhC_qeRF5PWSO8b88HUrnUPuQ1qym33YKdH2odkkjj0_xXrGGYqyh4hLOm8gLi7kkIExQyZWypGx-K802lAew&pcsa=false&nb=0&nm=3 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
2024-09-29 13:18:20 UTC	599	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Alt-Svc: h3=":50944"; ma=2592000 Content-Type: text/html; charset=UTF-8 Date: Sun, 29 Sep 2024 13:18:20 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: answercheck Connection: close Transfer-Encoding: chunked
2024-09-29 13:18:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.7	49805	142.250.186.142	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:18:22 UTC	893	OUT	GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=n70hm4rxrp4a&aqid=mlP5ZtqHO7aOmLAPw7LuMA&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1399&adbw=530&adbah=506%2C439%2C452&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=13%7C0%7C-5925114%7C6%7C5928063&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.img2.ymlp294.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:18:22 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-kMBTcOMWgQ1fE7jr4Aw3zw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 29 Sep 2024 13:18:22 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.7	49812	142.250.184.238	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:18:23 UTC	893	OUT	GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=got8iyyqmh0d&aqid=mlP5ZtqHO7aOmLAPw7LuMA&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1399&adbw=530&adbah=506%2C439%2C452&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=13%7C0%7C-5925114%7C6%7C5928063&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.img2.ymlp294.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:18:23 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-gGIF4YvoOR9LAt7pwU-uFg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 29 Sep 2024 13:18:23 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.7	49813	76.223.26.96	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:18:24 UTC	645	OUT	GET /track.php?domain=ymlp294.net&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTg5Ny4yODQ0OjdjZTY4M2Y0YTRlNjk4N2E2Mzg0NzVjYmI3MjdlZTUyMDc3MzkxNDQ1M2I1MzU5MWQ1NTRkZTQ4NDlkY2YwY2Y6NjZmOTUzOTk0NTZlNQ%3D%3D HTTP/1.1 Host: www.img2.ymlp294.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
2024-09-29 13:18:25 UTC	599	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Alt-Svc: h3=":50944"; ma=2592000 Content-Type: text/html; charset=UTF-8 Date: Sun, 29 Sep 2024 13:18:25 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: answercheck Connection: close Transfer-Encoding: chunked
2024-09-29 13:18:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.7	49815	76.223.26.96	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:18:26 UTC	1489	OUT	GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Reset+Password&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmYBlLqpjy4j-ezD1zWrFP6RH-dyPE5lTBqxgA0qK4FhwM0BmGo80V6Za76RLHCNjfMDf_wqrTtxma-QcwyTatvF5ivGxGP_kMNdLRRttz7dQeTQmZFmv5A9tMGaFRpYIY0-p0IkVpc&pcsa=false&nb=0&nm=2 HTTP/1.1 Host: www.img2.ymlp294.net Connection: keep-alive device-memory: 8 dpr: 1 viewport-width: 1280 rtt: 200 downlink: 1.55 ect: 3g sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
2024-09-29 13:18:26 UTC	882	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Alt-Svc: h3=":50944"; ma=2592000 Content-Type: text/html; charset=UTF-8 Date: Sun, 29 Sep 2024 13:18:26 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_NSExLo2wvMQanmNE0x+omlwjVC/TeRoeQL8HfkPp8zSBGRShkrecOl3YttDHuw/efZSqoB3g3csgX3lJn5AAnA== X-Domain: ymlp294.net X-Pcrew-Blocked-Reason: X-Pcrew-Ip-Organization: CenturyLink X-Subdomain: www.img2 Connection: close Transfer-Encoding: chunked
2024-09-29 13:18:26 UTC	2372	IN	Data Raw: 34 63 31 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4c 71 75 44 46 45 54 58 52 6e 30 48 72 30 35 66 55 50 37 45 4a 54 37 37 78 59 6e 50 6d 52 62 70 4d 79 34 76 6b 38 4b 59 69 48 6e 6b 4e 70 65 64 6e 6a 4f 41 4e 4a 63 61 58 44 58 63 4b 51 4a 4e 30 6e 58 4b 5a 4a 4c 37 54 63 69 4a 44 38 41 6f 48 58 4b 31 35 38 43 41 77 45 41 41 51 3d 3d 5f 4e 53 45 78 4c 6f 32 77 76 4d 51 61 6e 6d 4e 45 30 78 2b 6f 6d 6c 77 6a 56 43 2f 54 65 52 6f 65 51 4c 38 48 66 6b 50 70 38 7a 53 42 47 52 53 68 6b 72 65 63 4f 6c 33 59 74 74 44 48 75 77 2f 65 66 5a 53 71 6f 42 33 67 33 63 73 67 58 33 6c 4a 6e Data Ascii: 4c11<!DOCTYPE html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_NSExLo2wvMQanmNE0x+omlwjVC/TeRoeQL8HfkPp8zSBGRShkrecOl3YttDHuw/efZSqoB3g3csgX3lJn
2024-09-29 13:18:26 UTC	1724	IN	Data Raw: 0a 7d 0a 23 73 61 6c 65 5f 64 69 73 63 72 65 65 74 20 61 20 7b 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 72 67 62 28 32 34 30 2c 32 34 30 2c 32 34 30 29 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 7d 0a 0a 23 73 61 6c 65 5f 70 72 6f 6d 69 6e 65 6e 74 20 7b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 36 38 70 78 3b 0a 7d 0a 23 73 61 6c 65 5f 70 72 6f 6d 69 6e 65 6e 74 20 23 67 72 65 79 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 28 31 34 35 2c 31 34 30 2c 31 33 37 29 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 72 67 62 28 32 35 35 2c 32 35 35 2c 32 35 35 29 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0a 20 20 20 20 66 Data Ascii: }#sale_discreet a { text-decoration: none; color: rgb(240,240,240); font-size: 14px;}#sale_prominent { height: 68px;}#sale_prominent #grey { background: rgb(145,140,137); color: rgb(255,255,255); text-align: right; f
2024-09-29 13:18:26 UTC	4744	IN	Data Raw: 6c 61 79 3a 6e 6f 6e 65 3b 0a 7d 0a 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 20 3a 20 34 38 30 70 78 29 20 7b 0a 09 23 73 61 6c 65 5f 64 69 61 67 6f 6e 61 6c 5f 6f 72 61 6e 67 65 20 7b 0a 09 09 77 69 64 74 68 3a 20 34 30 30 70 78 3b 0a 09 09 68 65 69 67 68 74 3a 37 30 70 78 3b 0a 09 09 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 0a 09 09 72 69 67 68 74 3a 2d 31 32 30 70 78 3b 0a 09 09 74 6f 70 3a 34 32 70 78 3b 0a 09 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 0a 09 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 32 30 3b 0a 09 7d 0a 0a 09 23 73 61 6c 65 5f 64 69 61 67 6f 6e 61 6c 5f 6f 72 61 6e 67 65 20 61 20 7b 0a 09 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 Data Ascii: lay:none;}@media only screen and (min-width : 480px) {#sale_diagonal_orange {width: 400px;height:70px;position:fixed;right:-120px;top:42px;line-height:20px; z-index: 20;}#sale_diagonal_orange a {-webkit-transform: rotat
2024-09-29 13:18:26 UTC	5930	IN	Data Raw: 6f 6e 43 6c 69 63 6b 3d 22 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 27 2f 70 72 69 76 61 63 79 2e 68 74 6d 6c 27 2c 20 27 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 27 2c 20 27 77 69 64 74 68 3d 38 39 30 2c 68 65 69 67 68 74 3d 33 33 30 2c 6c 65 66 74 3d 32 30 30 2c 74 6f 70 3d 32 30 30 2c 6d 65 6e 75 62 61 72 3d 6e 6f 2c 73 74 61 74 75 73 3d 79 65 73 2c 74 6f 6f 6c 62 61 72 3d 6e 6f 27 29 2e 66 6f 63 75 73 28 29 22 20 63 6c 61 73 73 3d 22 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 22 3e 0a 20 20 20 20 50 72 69 76 61 63 79 20 50 6f 6c 69 63 79 0a 3c 2f 61 3e 0a 3c 62 72 2f 3e 3c 62 72 2f 3e 0a 3c 62 72 2f 3e 3c 62 72 2f 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 Data Ascii: onClick="window.open('/privacy.html', 'privacy-policy', 'width=890,height=330,left=200,top=200,menubar=no,status=yes,toolbar=no').focus()" class="privacy-policy"> Privacy Policy</a><br/><br/><br/><br/> </div></div><script type="text/javascri
2024-09-29 13:18:26 UTC	4709	IN	Data Raw: 64 3d 22 20 2b 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 75 6e 69 71 75 65 54 72 61 63 6b 69 6e 67 49 44 29 29 3b 7d 7d 20 65 6c 73 65 20 7b 61 6a 61 78 51 75 65 72 79 28 73 63 72 69 70 74 50 61 74 68 20 2b 20 22 2f 74 72 61 63 6b 2e 70 68 70 3f 64 6f 6d 61 69 6e 3d 22 20 2b 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 6f 6d 61 69 6e 29 20 2b 20 22 26 63 61 66 3d 31 26 74 6f 67 67 6c 65 3d 61 6e 73 77 65 72 63 68 65 63 6b 26 61 6e 73 77 65 72 3d 72 65 6a 65 63 74 65 64 26 75 69 64 3d 22 20 2b 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 75 6e 69 71 75 65 54 72 61 63 6b 69 6e 67 49 44 29 29 3b 7d 7d 7d 3b 6c 65 74 20 78 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 6f 62 6a 31 2c 20 6f 62 6a 32 29 20 7b 69 66 20 Data Ascii: d=" + encodeURIComponent(uniqueTrackingID));}} else {ajaxQuery(scriptPath + "/track.php?domain=" + encodeURIComponent(domain) + "&caf=1&toggle=answercheck&answer=rejected&uid=" + encodeURIComponent(uniqueTrackingID));}}};let x = function (obj1, obj2) {if
2024-09-29 13:18:26 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-09-29 13:18:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.7	49816	76.223.26.96	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:18:26 UTC	1549	OUT	GET /track.php?domain=ymlp294.net&toggle=browserjs&uid=MTcyNzYxNTkwNi42NTU2OmU4NmYyOTg4Njk1NjAxOWFkYWJkODE0ZjQzZGZjNGFiMDBjYmQwNGIzNGU0ZDQ5MWY0YTNjYjQxMTJlNjZmZmQ6NjZmOTUzYTJhMDBjNw%3D%3D HTTP/1.1 Host: www.img2.ymlp294.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" device-memory: 8 rtt: 200 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 dpr: 1 downlink: 1.75 ect: 3g sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Reset+Password&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmYBlLqpjy4j-ezD1zWrFP6RH-dyPE5lTBqxgA0qK4FhwM0BmGo80V6Za76RLHCNjfMDf_wqrTtxma-QcwyTatvF5ivGxGP_kMNdLRRttz7dQeTQmZFmv5A9tMGaFRpYIY0-p0IkVpc&pcsa=false&nb=0&nm=2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
2024-09-29 13:18:27 UTC	597	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Alt-Svc: h3=":50944"; ma=2592000 Content-Type: text/html; charset=UTF-8 Date: Sun, 29 Sep 2024 13:18:27 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: browserjs Connection: close Transfer-Encoding: chunked
2024-09-29 13:18:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.7	49814	76.223.26.96	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:18:27 UTC	626	OUT	GET /track.php?domain=ymlp294.net&toggle=browserjs&uid=MTcyNzYxNTkwNi42NTU2OmU4NmYyOTg4Njk1NjAxOWFkYWJkODE0ZjQzZGZjNGFiMDBjYmQwNGIzNGU0ZDQ5MWY0YTNjYjQxMTJlNjZmZmQ6NjZmOTUzYTJhMDBjNw%3D%3D HTTP/1.1 Host: www.img2.ymlp294.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
2024-09-29 13:18:27 UTC	597	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Alt-Svc: h3=":50944"; ma=2592000 Content-Type: text/html; charset=UTF-8 Date: Sun, 29 Sep 2024 13:18:27 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: browserjs Connection: close Transfer-Encoding: chunked
2024-09-29 13:18:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.7	49817	76.223.26.96	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:18:27 UTC	1431	OUT	GET /ls.php?t=66f953a2&token=52ad4a7a34c0593e17d3b0474ac3dddd1154ba71 HTTP/1.1 Host: www.img2.ymlp294.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" device-memory: 8 rtt: 200 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 dpr: 1 downlink: 1.75 ect: 3g sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Reset+Password&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmYBlLqpjy4j-ezD1zWrFP6RH-dyPE5lTBqxgA0qK4FhwM0BmGo80V6Za76RLHCNjfMDf_wqrTtxma-QcwyTatvF5ivGxGP_kMNdLRRttz7dQeTQmZFmv5A9tMGaFRpYIY0-p0IkVpc&pcsa=false&nb=0&nm=2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
2024-09-29 13:18:27 UTC	882	IN	HTTP/1.1 201 Created Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Origin: Access-Control-Max-Age: 86400 Alt-Svc: h3=":50944"; ma=2592000 Charset: utf-8 Content-Type: text/javascript;charset=UTF-8 Date: Sun, 29 Sep 2024 13:18:27 GMT Server: Caddy Server: nginx X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_NDbdLOJj1XN4ua6Yct+/8bu1+gn/dzCP3JY7f3oVkxL8sn/gb3Ggo51F5bnrltCC26cTewLC0xEQL1rz2JnH9w== Connection: close Transfer-Encoding: chunked
2024-09-29 13:18:27 UTC	22	IN	Data Raw: 31 30 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d 0d 0a Data Ascii: 10{"success":true}
2024-09-29 13:18:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.7	49819	172.217.18.14	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:18:28 UTC	2794	OUT	GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=bucket007%2C000003%2C000802%2Cbucket066%2Cbucket077&client=dp-teaminternet12_3ph&r=m&sct=ID%3D4562ec206474b9d1%3AT%3D1727615843%3ART%3D1727615843%3AS%3DALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w&sc_status=6&hl=en&rpbu=https%3A%2F%2Fwww.img2.ymlp294.net%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU5MDYuNjgzfGM3NzIxNzBmYzVmYWMzODMwOGY5OTY4ZGRiY2ZlMzAzMjFjNWM3M2R8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fFpIQXRkR1ZoYldsdWRHVnlibVYwTVRKZk0zQm98YWQ3M2E5NjdiNGEzOThlOGUxN2Y0ODdkODQ0YWE3ZTU5YTMxNDFmZXwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fGJkNmQ2ZGZlZDU1NjIxMjRhNzY1M2FmZDk0ZjE5NTgzNTRjNmM4YjZ8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfHx8&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Reset%20Password&afdt=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmYBlLqpjy4j-ezD1zWrFP6RH-dyPE5lTBqxgA0qK4FhwM0BmGo80V6Za76RLHCNjfMDf_wqrTtxma-QcwyTatvF5ivGxGP_kMNdLRRttz7dQeTQmZFmv5A9tMGaFRpYIY0-p0IkVpc&oe=UTF-8&ie=UTF-8&f [TRUNCATED] Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.img2.ymlp294.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:18:28 UTC	807	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Disposition: inline Date: Sun, 29 Sep 2024 13:18:28 GMT Expires: Sun, 29 Sep 2024 13:18:28 GMT Cache-Control: private, max-age=3600 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-Gd-Pq08ByDQgP0A5MCFo3Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Server: gws X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-29 13:18:28 UTC	583	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 73 74 79 6c 65 20 69 64 3d 22 73 73 72 2d 62 6f 69 6c 65 72 70 6c 61 74 65 22 3e 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 72 67 69 6e 3a 30 3b 7d 2e 64 69 76 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 20 2e 64 69 76 3a 6c 61 73 Data Ascii: 8000<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:las
2024-09-29 13:18:28 UTC	1390	IN	Data Raw: 69 5f 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 76 5f 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 Data Ascii: i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit
2024-09-29 13:18:28 UTC	1390	IN	Data Raw: 5f 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 6f 5f 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 78 5f 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 79 5f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 7a 2d 69 6e 64 65 78 3a 31 3b 7d 2e 6b 5f 3e 64 69 76 3a 6e 6f 74 28 2e 79 5f 29 20 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 Data Ascii: _{overflow:hidden;}.o_{white-space:nowrap;}.x_{cursor:pointer;}.y_{display:none; position:absolute; z-index:1;}.k_>div:not(.y_) {display:-webkit-inline-box; display:-moz-inline-box; display:-ms-inline-flexbox; display:-webkit-inline-flex; display:inline-f
2024-09-29 13:18:28 UTC	1390	IN	Data Raw: 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 42 6f 74 74 6f 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 43 65 6e 74 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 Data Ascii: start; align-items:flex-start;}.flexAlignBottom{-ms-flex-align:end; -webkit-box-align:end; -webkit-align-items:flex-end; align-items:flex-end;}.flexAlignCenter{-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center
2024-09-29 13:18:28 UTC	1390	IN	Data Raw: 3a 35 30 70 78 3b 63 6f 6c 6f 72 3a 23 63 63 63 63 63 63 3b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 2e 73 69 32 37 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 36 66 30 30 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 33 36 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 7d 2e 73 69 33 34 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 70 78 3b 7d 2e 73 69 34 32 7b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d Data Ascii: :50px;color:#cccccc;width:100%; -ms-flex-negative:1;-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.si27:hover{color:#ff6f00;text-decoration:underline;}.si36{height:100%;}.si34{margin-bottom:0px;}.si42{width:100%; -ms-flex-negative:1;-webkit-
2024-09-29 13:18:28 UTC	1390	IN	Data Raw: 74 74 6f 6d 3a 33 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 70 78 3b 7d 2e 73 69 31 38 7b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 31 38 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 31 39 7b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 32 30 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 32 31 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 38 36 62 66 32 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 Data Ascii: ttom:3px;padding-top:3px;}.si18{color:#dddddd;}.si18:hover{text-decoration:underline;}.si19{color:#dddddd;}.si20{font-family:Roboto,arial,sans-serif;font-size:12px;line-height:20px;color:#dddddd;}.si21{font-weight:700;background-color:#186bf2;border-radiu
2024-09-29 13:18:28 UTC	1390	IN	Data Raw: 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 70 78 3b 63 6f 6c 6f 72 3a 23 38 36 38 35 38 61 3b 7d 2e 73 69 32 36 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 7d 2e 73 69 37 32 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 52 6f 62 6f 74 6f 20 4c 69 67 68 74 22 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 Data Ascii: px;padding-bottom:1px;padding-left:1px;padding-right:1px;padding-top:1px;color:#86858a;}.si26{font-family:Roboto,arial,sans-serif;font-size:14px;line-height:24px;color:#ffffff;}.si72{font-family:"Roboto Light",arial,sans-serif;font-size:12px;line-height:2
2024-09-29 13:18:28 UTC	1390	IN	Data Raw: 73 69 6f 6e 4c 69 6e 6b 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4e 4f 49 4e 44 45 58 2c 20 4e 4f 46 4f 4c 4c 4f 57 22 20 6e 61 6d 65 3d 22 52 4f 42 4f 54 53 22 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 20 20 20 20 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 20 3c 64 69 76 20 69 64 3d 22 61 64 42 6c 6f 63 6b 22 3e 20 20 20 3c 64 69 76 20 69 64 3d 22 73 73 72 61 64 2d 6d 61 73 74 65 72 Data Ascii: sionLink:hover{text-decoration:underline;}</style> <meta content="NOINDEX, NOFOLLOW" name="ROBOTS"> <meta content="telephone=no" name="format-detection"> <meta content="origin" name="referrer"> </head> <body> <div id="adBlock"> <div id="ssrad-master
2024-09-29 13:18:28 UTC	1390	IN	Data Raw: 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 33 39 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f Data Ascii: -pack:start; -webkit-justify-content:flex-start; justify-content:flex-start;-ms-flex-align:stretch; -webkit-box-align:stretch; -webkit-align-items:stretch; align-items:stretch;"><div class="i_ div si39" style="-ms-flex-direction:row; -webkit-box-orient:ho
2024-09-29 13:18:28 UTC	1390	IN	Data Raw: 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 33 36 20 76 5f 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 76 65 72 74 69 63 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 73 74 61 72 Data Ascii: -orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><div class="i_ div si36 v_" style="-ms-flex-direction:column; -webkit-box-orient:vertical; -webkit-flex-direction:column; flex-direction:column;-ms-flex-pack:start; -webkit-box-pack:star

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.7	49820	172.217.18.14	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:18:28 UTC	759	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.img2.ymlp294.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
2024-09-29 13:18:28 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Sun, 29 Sep 2024 13:18:28 GMT Expires: Sun, 29 Sep 2024 13:18:28 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.7	49821	172.217.18.14	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:18:29 UTC	759	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.img2.ymlp294.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
2024-09-29 13:18:29 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Sun, 29 Sep 2024 13:18:29 GMT Expires: Sun, 29 Sep 2024 13:18:29 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.7	49822	172.217.18.14	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:18:29 UTC	594	OUT	GET /adsense/domains/caf.js?pac=0 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "17209215320339076777" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:18:30 UTC	845	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 153223 Date: Sun, 29 Sep 2024 13:18:29 GMT Expires: Sun, 29 Sep 2024 13:18:29 GMT Cache-Control: private, max-age=3600 ETag: "10506175197585696606" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-29 13:18:30 UTC	545	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 73 79 6e 64 69 63 61 74 65 64 73 65 61 72 63 68 2e 67 6f 6f 67 22 2c 68 61 73 68 3a 22 31 37 33 38 33 36 33 33 34 36 34 33 37 30 36 31 35 35 35 33 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 30 30 30 33 2c 31 37 33 30 31 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17300003,17301
2024-09-29 13:18:30 UTC	1390	IN	Data Raw: 74 72 75 65 2c 22 5f 75 73 65 53 65 72 76 65 72 50 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 Data Ascii: true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRv
2024-09-29 13:18:30 UTC	1390	IN	Data Raw: 21 30 2c 76 61 6c 75 65 3a 67 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 Data Ascii: !0,value:g})}if(a)return a;c.prototype.toString=function(){return this.ne};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array U
2024-09-29 13:18:30 UTC	1390	IN	Data Raw: 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 61 3d 6c 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 70 61 29 70 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 Data Ascii: w new TypeError(a+" is not extensible");return a}:null}var pa=la;function qa(a,b){a.prototype=ka(b.prototype);a.prototype.constructor=a;if(pa)pa(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(
2024-09-29 13:18:30 UTC	1390	IN	Data Raw: 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 55 66 28 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 62 64 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 67 67 28 68 2c 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 62 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 63 65 28 32 2c 67 29 7d 3b 62 2e 70 72 6f Data Ascii: =null;break a;case "function":h=!0;break a;default:h=!1}h?this.Uf(g):this.Ld(g)}};b.prototype.Uf=function(g){var h=void 0;try{h=g.then}catch(k){this.bd(k);return}typeof h=="function"?this.gg(h,g):this.Ld(g)};b.prototype.bd=function(g){this.ce(2,g)};b.pro
2024-09-29 13:18:30 UTC	1390	IN	Data Raw: 63 68 28 77 29 7b 6d 28 77 29 7d 7d 3a 74 7d 76 61 72 20 6c 2c 6d 2c 70 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 69 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 0a 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 42 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f Data Ascii: ch(w){m(w)}}:t}var l,m,p=new b(function(r,t){l=r;m=t});this.ib(k(g,l),k(h,m));return p};b.prototype.catch=function(g){return this.then(void 0,g)};b.prototype.ib=function(g,h){function k(){switch(l.B){case 1:g(l.Xa);break;case 2:h(l.Xa);break;default:thro
2024-09-29 13:18:30 UTC	1390	IN	Data Raw: 21 3d 3d 6e 75 6c 6c 7c 7c 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 73 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 63 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b Data Ascii: !==null\|\|l==="function"}function e(k){if(!sa(k,g)){var l=new c;ca(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{
2024-09-29 13:18:30 UTC	1390	IN	Data Raw: 29 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 68 2c 49 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 49 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 75 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 Data Ascii: )return{id:l,list:m,index:h,I:p}}return{id:l,list:m,index:-1,I:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=u(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entr
2024-09-29 13:18:30 UTC	1390	IN	Data Raw: 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 Data Ascii: s,function(h){return h.key})};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,h.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.pr
2024-09-29 13:18:30 UTC	1390	IN	Data Raw: 6c 65 6e 67 74 68 3b 65 3e 30 26 26 63 3e 30 3b 29 69 66 28 64 5b 2d 2d 63 5d 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 65 3c 3d 30 7d 7d 29 3b 0a 71 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 73 61 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 5b 64 2c 62 5b 64 5d 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 Data Ascii: length;e>0&&c>0;)if(d[--c]!=b[--e])return!1;return e<=0}});q("Object.entries",function(a){return a?a:function(b){var c=[],d;for(d in b)sa(b,d)&&c.push([d,b[d]]);return c}});q("Array.prototype.find",function(a){return a?a:function(b,c){a:{var d=this;d ins

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.7	49824	76.223.26.96	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:18:32 UTC	1568	OUT	GET /track.php?domain=ymlp294.net&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTkwNi42NTU2OmU4NmYyOTg4Njk1NjAxOWFkYWJkODE0ZjQzZGZjNGFiMDBjYmQwNGIzNGU0ZDQ5MWY0YTNjYjQxMTJlNjZmZmQ6NjZmOTUzYTJhMDBjNw%3D%3D HTTP/1.1 Host: www.img2.ymlp294.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" device-memory: 8 rtt: 200 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 dpr: 1 downlink: 1.75 ect: 3g sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.img2.ymlp294.net/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjYsYnVja2V0MDc3fHx8fHx8NjZmOTUzNjA2NTU0OXx8fDE3Mjc2MTU4NDAuNDU3MXxlMDg3YzA1YmMzYzEwMDkxZGIyNjFjOTc3NzJjOTg2YzFkZGEwYTVhfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1USmZNM0JvfGFkNzNhOTY3YjRhMzk4ZThlMTdmNDg3ZDg0NGFhN2U1OWEzMTQxZmV8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXxiZDZkNmRmZWQ1NTYyMTI0YTc2NTNhZmQ5NGYxOTU4MzU0YzZjOGI2fDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MHx8fA%3D%3D&query=Reset+Password&afdToken=ChMI9uOGxZ7oiAMVC4L9Bx3oKy4jEmYBlLqpjy4j-ezD1zWrFP6RH-dyPE5lTBqxgA0qK4FhwM0BmGo80V6Za76RLHCNjfMDf_wqrTtxma-QcwyTatvF5ivGxGP_kMNdLRRttz7dQeTQmZFmv5A9tMGaFRpYIY0-p0IkVpc&pcsa=false&nb=0&nm=2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
2024-09-29 13:18:32 UTC	599	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Alt-Svc: h3=":50944"; ma=2592000 Content-Type: text/html; charset=UTF-8 Date: Sun, 29 Sep 2024 13:18:32 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: answercheck Connection: close Transfer-Encoding: chunked
2024-09-29 13:18:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.7	49825	76.223.26.96	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:18:34 UTC	645	OUT	GET /track.php?domain=ymlp294.net&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzYxNTkwNi42NTU2OmU4NmYyOTg4Njk1NjAxOWFkYWJkODE0ZjQzZGZjNGFiMDBjYmQwNGIzNGU0ZDQ5MWY0YTNjYjQxMTJlNjZmZmQ6NjZmOTUzYTJhMDBjNw%3D%3D HTTP/1.1 Host: www.img2.ymlp294.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4562ec206474b9d1:T=1727615843:RT=1727615843:S=ALNI_MaFq9AtQ6AaSQF9tUxrRBvTm8tG8w
2024-09-29 13:18:35 UTC	599	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Alt-Svc: h3=":50944"; ma=2592000 Content-Type: text/html; charset=UTF-8 Date: Sun, 29 Sep 2024 13:18:35 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: answercheck Connection: close Transfer-Encoding: chunked
2024-09-29 13:18:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.7	49818	142.250.184.238	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:18:34 UTC	890	OUT	GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=i8ybilfl95ge&aqid=pFP5ZvPBE52smLAP8MiVmQc&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1283&adbw=530&adbah=421%2C439%2C421&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=19%7C0%7C1911%7C2342%7C1358&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.img2.ymlp294.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:18:35 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-pkQ2ptJxcKiqSdZYZ6owtQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 29 Sep 2024 13:18:35 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.7	49826	142.250.184.238	443	6452	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:18:35 UTC	890	OUT	GET /afs/gen_204?client=dp-teaminternet12_3ph&output=uds_ads_only&zx=6b36oyq3osjk&aqid=pFP5ZvPBE52smLAP8MiVmQc&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1283&adbw=530&adbah=421%2C439%2C421&adbn=master-1&eawp=partner-dp-teaminternet12_3ph&errv=678245571&csala=19%7C0%7C1911%7C2342%7C1358&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.img2.ymlp294.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:18:35 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce--d43_nMrINzh9e6jEB687Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 29 Sep 2024 13:18:35 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 6952, Parent PID: 2880

General

Target ID:	0
Start time:	09:17:13
Start date:	29/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6452, Parent PID: 6952

General

Target ID:	1
Start time:	09:17:16
Start date:	29/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2516 --field-trial-handle=2496,i,12955688402611608546,14653998491514946388,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6108, Parent PID: 2880

General

Target ID:	10
Start time:	09:17:18
Start date:	29/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.img2.ymlp294.net/"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.img2.ymlp294.net/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Windows Analysis Report
https://www.img2.ymlp294.net/