Edit tour

Windows Analysis Report
http://finance.cocoricopatisserie.co.uk/

Overview

General Information

Sample URL:	http://finance.cocoricopatisserie.co.uk/
Analysis ID:	1522343
Tags:	urlscan
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

HTML page contains hidden javascript code

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3748 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2944 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2516 --field-trial-handle=2396,i,7465292924056707105,2457684727211862111,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6780 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://finance.cocoricopatisserie.co.uk/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: http://finance.cocoricopatisserie.co.uk/

HTTP Parser: Base64 decoded: <svg fill='#D7D7D7' style="float: right" xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Source: http://finance.cocoricopatisserie.co.uk/	HTTP Parser: No favicon
Source: http://finance.cocoricopatisserie.co.uk/	HTTP Parser: No favicon
Source: http://finance.cocoricopatisserie.co.uk/	HTTP Parser: No favicon
Source: http://finance.cocoricopatisserie.co.uk/	HTTP Parser: No favicon
Source: https://www.mydomaincontact.com/index.php?domain_name=cocoricopatisserie.co.uk	HTTP Parser: No favicon
Source: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Eagles+Sphere+Sphere&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpjx58G6o1K7o-viAFkNJUZINzDQYxSL87u9idvmGA6WnLKvG43X1VTpA_tX-JuOD2qRhHKZIbvkkTZQebs3sDLnAIMFHH3E399kjaAqb00X1Isp9zrXzZpzsXWiuakI_FhDM&pcsa=false&nb=0	HTTP Parser: No favicon
Source: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Eagles+Sphere+Sphere&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpjx58G6o1K7o-viAFkNJUZINzDQYxSL87u9idvmGA6WnLKvG43X1VTpA_tX-JuOD2qRhHKZIbvkkTZQebs3sDLnAIMFHH3E399kjaAqb00X1Isp9zrXzZpzsXWiuakI_FhDM&pcsa=false&nb=0	HTTP Parser: No favicon
Source: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Eagles+Sphere+Sphere&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpjx58G6o1K7o-viAFkNJUZINzDQYxSL87u9idvmGA6WnLKvG43X1VTpA_tX-JuOD2qRhHKZIbvkkTZQebs3sDLnAIMFHH3E399kjaAqb00X1Isp9zrXzZpzsXWiuakI_FhDM&pcsa=false&nb=0	HTTP Parser: No favicon
Source: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Eagles+Sphere+Sphere&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpjx58G6o1K7o-viAFkNJUZINzDQYxSL87u9idvmGA6WnLKvG43X1VTpA_tX-JuOD2qRhHKZIbvkkTZQebs3sDLnAIMFHH3E399kjaAqb00X1Isp9zrXzZpzsXWiuakI_FhDM&pcsa=false&nb=0	HTTP Parser: No favicon
Source: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Sesame+Semaglutide&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmcBlLqpj90SqxLU1y28Lnofj6W4YFOJxZRWVqEOBrqx9r8dK_IzyucJYZYAj0HbBY0RxMhD-iUiKatTaQpsIR459EQ14jLNoKoGR9MimrFhhNC0HT5tj7o4Xchb8bXTCSs8XHI4WI_a&pcsa=false&nb=0	HTTP Parser: No favicon
Source: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Sesame+Semaglutide&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmcBlLqpj90SqxLU1y28Lnofj6W4YFOJxZRWVqEOBrqx9r8dK_IzyucJYZYAj0HbBY0RxMhD-iUiKatTaQpsIR459EQ14jLNoKoGR9MimrFhhNC0HT5tj7o4Xchb8bXTCSs8XHI4WI_a&pcsa=false&nb=0	HTTP Parser: No favicon
Source: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Sesame+Semaglutide&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmcBlLqpj90SqxLU1y28Lnofj6W4YFOJxZRWVqEOBrqx9r8dK_IzyucJYZYAj0HbBY0RxMhD-iUiKatTaQpsIR459EQ14jLNoKoGR9MimrFhhNC0HT5tj7o4Xchb8bXTCSs8XHI4WI_a&pcsa=false&nb=0	HTTP Parser: No favicon
Source: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Semaglutide+Henry&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpj4R7Nz9MtgVxMM3LZXthcmrpMZO2hM9CJdYTOBTZlOqOWIKeyAnZ3l9wmC7ZfZQ9oOSTTbuMheWysdFe-MYszSn-Z5cfGUaCQmtDzAocoW2PrGSSnlOXrv0KCozzVftbfzk&pcsa=false&nb=0	HTTP Parser: No favicon
Source: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Semaglutide+Henry&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpj4R7Nz9MtgVxMM3LZXthcmrpMZO2hM9CJdYTOBTZlOqOWIKeyAnZ3l9wmC7ZfZQ9oOSTTbuMheWysdFe-MYszSn-Z5cfGUaCQmtDzAocoW2PrGSSnlOXrv0KCozzVftbfzk&pcsa=false&nb=0	HTTP Parser: No favicon
Source: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Semaglutide+Henry&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpj4R7Nz9MtgVxMM3LZXthcmrpMZO2hM9CJdYTOBTZlOqOWIKeyAnZ3l9wmC7ZfZQ9oOSTTbuMheWysdFe-MYszSn-Z5cfGUaCQmtDzAocoW2PrGSSnlOXrv0KCozzVftbfzk&pcsa=false&nb=0	HTTP Parser: No favicon
Source: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Eagles+Sphere+Sphere&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpjx58G6o1K7o-viAFkNJUZINzDQYxSL87u9idvmGA6WnLKvG43X1VTpA_tX-JuOD2qRhHKZIbvkkTZQebs3sDLnAIMFHH3E399kjaAqb00X1Isp9zrXzZpzsXWiuakI_FhDM&pcsa=false&nb=0&nm=3	HTTP Parser: No favicon
Source: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Eagles+Sphere+Sphere&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpjx58G6o1K7o-viAFkNJUZINzDQYxSL87u9idvmGA6WnLKvG43X1VTpA_tX-JuOD2qRhHKZIbvkkTZQebs3sDLnAIMFHH3E399kjaAqb00X1Isp9zrXzZpzsXWiuakI_FhDM&pcsa=false&nb=0&nm=3	HTTP Parser: No favicon
Source: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Eagles+Sphere+Sphere&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpjx58G6o1K7o-viAFkNJUZINzDQYxSL87u9idvmGA6WnLKvG43X1VTpA_tX-JuOD2qRhHKZIbvkkTZQebs3sDLnAIMFHH3E399kjaAqb00X1Isp9zrXzZpzsXWiuakI_FhDM&pcsa=false&nb=0&nm=3	HTTP Parser: No favicon
Source: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Sesame+Semaglutide&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmcBlLqpj90SqxLU1y28Lnofj6W4YFOJxZRWVqEOBrqx9r8dK_IzyucJYZYAj0HbBY0RxMhD-iUiKatTaQpsIR459EQ14jLNoKoGR9MimrFhhNC0HT5tj7o4Xchb8bXTCSs8XHI4WI_a&pcsa=false&nb=0&nm=2	HTTP Parser: No favicon
Source: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Sesame+Semaglutide&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmcBlLqpj90SqxLU1y28Lnofj6W4YFOJxZRWVqEOBrqx9r8dK_IzyucJYZYAj0HbBY0RxMhD-iUiKatTaQpsIR459EQ14jLNoKoGR9MimrFhhNC0HT5tj7o4Xchb8bXTCSs8XHI4WI_a&pcsa=false&nb=0&nm=2	HTTP Parser: No favicon
Source: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Sesame+Semaglutide&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmcBlLqpj90SqxLU1y28Lnofj6W4YFOJxZRWVqEOBrqx9r8dK_IzyucJYZYAj0HbBY0RxMhD-iUiKatTaQpsIR459EQ14jLNoKoGR9MimrFhhNC0HT5tj7o4Xchb8bXTCSs8XHI4WI_a&pcsa=false&nb=0&nm=2	HTTP Parser: No favicon
Source: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Semaglutide+Henry&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpj4R7Nz9MtgVxMM3LZXthcmrpMZO2hM9CJdYTOBTZlOqOWIKeyAnZ3l9wmC7ZfZQ9oOSTTbuMheWysdFe-MYszSn-Z5cfGUaCQmtDzAocoW2PrGSSnlOXrv0KCozzVftbfzk&pcsa=false&nb=0&nm=2	HTTP Parser: No favicon
Source: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Semaglutide+Henry&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpj4R7Nz9MtgVxMM3LZXthcmrpMZO2hM9CJdYTOBTZlOqOWIKeyAnZ3l9wmC7ZfZQ9oOSTTbuMheWysdFe-MYszSn-Z5cfGUaCQmtDzAocoW2PrGSSnlOXrv0KCozzVftbfzk&pcsa=false&nb=0&nm=2	HTTP Parser: No favicon
Source: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Semaglutide+Henry&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpj4R7Nz9MtgVxMM3LZXthcmrpMZO2hM9CJdYTOBTZlOqOWIKeyAnZ3l9wmC7ZfZQ9oOSTTbuMheWysdFe-MYszSn-Z5cfGUaCQmtDzAocoW2PrGSSnlOXrv0KCozzVftbfzk&pcsa=false&nb=0&nm=2	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49726 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://finance.cocoricopatisserie.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&hl=en&rpbu=http%3A%2F%2Ffinance.cocoricopatisserie.co.uk%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2558334540730768&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266%2C72717108&format=r3%7Cs&nocache=5961727648481571&num=0&output=afd_ads&domain_name=finance.cocoricopatisserie.co.uk&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1727648481583&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=791&frm=0&uio=--&cont=tc&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=http%3A%2F%2Ffinance.cocoricopatisserie.co.uk%2F HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://finance.cocoricopatisserie.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?pac=2 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?pac=2 HTTP/1.1Host: syndicatedsearch.googConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=twjy7tid1xni&aqid=49L5ZpWrLPrZywW62ILoBA&psid=7840396037&pbt=bs&adbx=375&adby=130&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=678245571&csala=29%7C0%7C1625%7C1180%7C279&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://finance.cocoricopatisserie.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=oq2boedhgzbv&aqid=49L5ZpWrLPrZywW62ILoBA&psid=7840396037&pbt=bv&adbx=375&adby=130&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=678245571&csala=29%7C0%7C1625%7C1180%7C279&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://finance.cocoricopatisserie.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index.php?domain_name=cocoricopatisserie.co.uk HTTP/1.1Host: www.mydomaincontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/select2/select2.css HTTP/1.1Host: www.mydomaincontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.mydomaincontact.com/index.php?domain_name=cocoricopatisserie.co.ukAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-1791724955aaa7a19f73afddbe958b9d=1
Source: global traffic	HTTP traffic detected: GET /forms/style.css HTTP/1.1Host: www.mydomaincontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.mydomaincontact.com/index.php?domain_name=cocoricopatisserie.co.ukAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-1791724955aaa7a19f73afddbe958b9d=1
Source: global traffic	HTTP traffic detected: GET /scripts/jquery.js HTTP/1.1Host: www.mydomaincontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mydomaincontact.com/index.php?domain_name=cocoricopatisserie.co.ukAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-1791724955aaa7a19f73afddbe958b9d=1
Source: global traffic	HTTP traffic detected: GET /scripts/select2/select2.min.js HTTP/1.1Host: www.mydomaincontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mydomaincontact.com/index.php?domain_name=cocoricopatisserie.co.ukAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-1791724955aaa7a19f73afddbe958b9d=1
Source: global traffic	HTTP traffic detected: GET /forms/script.js HTTP/1.1Host: www.mydomaincontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mydomaincontact.com/index.php?domain_name=cocoricopatisserie.co.ukAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-1791724955aaa7a19f73afddbe958b9d=1
Source: global traffic	HTTP traffic detected: GET /forms/script-addon.js HTTP/1.1Host: www.mydomaincontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mydomaincontact.com/index.php?domain_name=cocoricopatisserie.co.ukAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-1791724955aaa7a19f73afddbe958b9d=1
Source: global traffic	HTTP traffic detected: GET /images/trust.svg HTTP/1.1Host: www.mydomaincontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mydomaincontact.com/index.php?domain_name=cocoricopatisserie.co.ukAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-1791724955aaa7a19f73afddbe958b9d=1
Source: global traffic	HTTP traffic detected: GET /scripts/select2/select2.min.js HTTP/1.1Host: www.mydomaincontact.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-1791724955aaa7a19f73afddbe958b9d=1
Source: global traffic	HTTP traffic detected: GET /scripts/jquery.js HTTP/1.1Host: www.mydomaincontact.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-1791724955aaa7a19f73afddbe958b9d=1
Source: global traffic	HTTP traffic detected: GET /scripts/select2/select2.png HTTP/1.1Host: www.mydomaincontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mydomaincontact.com/scripts/select2/select2.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-1791724955aaa7a19f73afddbe958b9d=1
Source: global traffic	HTTP traffic detected: GET /forms/script-addon.js HTTP/1.1Host: www.mydomaincontact.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-1791724955aaa7a19f73afddbe958b9d=1
Source: global traffic	HTTP traffic detected: GET /forms/script.js HTTP/1.1Host: www.mydomaincontact.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-1791724955aaa7a19f73afddbe958b9d=1
Source: global traffic	HTTP traffic detected: GET /images/trust.svg HTTP/1.1Host: www.mydomaincontact.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-1791724955aaa7a19f73afddbe958b9d=1
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.mydomaincontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mydomaincontact.com/index.php?domain_name=cocoricopatisserie.co.ukAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-1791724955aaa7a19f73afddbe958b9d=1
Source: global traffic	HTTP traffic detected: GET /scripts/select2/select2.png HTTP/1.1Host: www.mydomaincontact.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-1791724955aaa7a19f73afddbe958b9d=1
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://finance.cocoricopatisserie.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&sct=ID%3D4f20d6f152843af6%3AT%3D1727648483%3ART%3D1727648483%3AS%3DALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw&sc_status=6&hl=en&rpbu=http%3A%2F%2Ffinance.cocoricopatisserie.co.uk%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NTA3Ljc4OTF8ZmQxYThhMzY3NTQzMDAwMWQ3NmU2NzVkMGZmMTFkZGI4OTJlNTdhYnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Eagles%20Sphere%20Sphere&afdt=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpjx58G6o1K7o-viAFkNJUZINzDQYxSL87u9idvmGA6WnLKvG43X1VTpA_tX-JuOD2qRhHKZIbvkkTZQebs3sDLnAIMFHH3E399kjaAqb00X1Isp9zrXzZpzsXWiuakI_FhDM&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266%2C72717107&format=n3&ad=n3&nocache=7581727648507529&num=0&output=afd_ads&domain_name=finance.cocoricopatisserie.co.uk&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1727648507532&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=791&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=http%3A%2F%2Ffinance.cocoricopatisserie.co.uk%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8%26query%3DEagles%2BSphere%2BSphere%26afdToken%3DChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpjx58G6o1K7o-viAFkNJUZINzDQYxSL87u9idvmGA6WnLKvG43X1VTpA_tX-JuOD2qRhHKZIbvkkTZQebs3sDLnAIMFHH3E399kjaAqb00X1Isp9zrXzZpzsXWiuakI_FhDM%26pcsa%3Dfalse%26nb%3D0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://finance.cocoricopatisserie.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=113072-113072If-Range: "16155903164772261079"
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://finance.cocoricopatisserie.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /images/afs/snowman.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=4e0a3q8ffgo0&aqid=_tL5ZqOkBcvJxdwP0PeRkAM&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1363&adbw=530&adbah=470%2C439%2C452&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=678245571&csala=23%7C0%7C2077%7C14%7C278&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://finance.cocoricopatisserie.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/afs/snowman.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=mp6scfw4zx6j&aqid=_tL5ZqOkBcvJxdwP0PeRkAM&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1363&adbw=530&adbah=470%2C439%2C452&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=678245571&csala=23%7C0%7C2077%7C14%7C278&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://finance.cocoricopatisserie.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://finance.cocoricopatisserie.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&sct=ID%3D4f20d6f152843af6%3AT%3D1727648483%3ART%3D1727648483%3AS%3DALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw&sc_status=6&hl=en&rpbu=http%3A%2F%2Ffinance.cocoricopatisserie.co.uk%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NTE1LjA5MzJ8YWU3YmQ5MzhkNTcwNDc1YzEyOWIyODFhNDA0MTc3MTM3MGI3ZjM2NXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Sesame%20Semaglutide&afdt=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmcBlLqpj90SqxLU1y28Lnofj6W4YFOJxZRWVqEOBrqx9r8dK_IzyucJYZYAj0HbBY0RxMhD-iUiKatTaQpsIR459EQ14jLNoKoGR9MimrFhhNC0HT5tj7o4Xchb8bXTCSs8XHI4WI_a&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266%2C72717108&format=n3&ad=n3&nocache=6121727648514509&num=0&output=afd_ads&domain_name=finance.cocoricopatisserie.co.uk&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1727648514511&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=791&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=http%3A%2F%2Ffinance.cocoricopatisserie.co.uk%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8%26query%3DSesame%2BSemaglutide%26afdToken%3DChMIi-aqkZjpiAMVv_67CB2-6zNOEmcBlLqpj90SqxLU1y28Lnofj6W4YFOJxZRWVqEOBrqx9r8dK_IzyucJYZYAj0HbBY0RxMhD-iUiKatTaQpsIR459EQ14jLNoKoGR9MimrFhhNC0HT5tj7o4Xchb8bXTCSs8XHI4WI_a%26pcsa%3Dfalse%26nb%3D0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://finance.cocoricopatisserie.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://finance.cocoricopatisserie.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=u0nzsrq6nhzz&aqid=BNP5ZuvhI5fGjuwP5-G76A0&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1394&adbw=530&adbah=470%2C452%2C470&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=678245571&csala=24%7C0%7C1626%7C11%7C261&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://finance.cocoricopatisserie.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=ol8696d1yoc&aqid=BNP5ZuvhI5fGjuwP5-G76A0&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1394&adbw=530&adbah=470%2C452%2C470&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=678245571&csala=24%7C0%7C1626%7C11%7C261&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://finance.cocoricopatisserie.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&sct=ID%3D4f20d6f152843af6%3AT%3D1727648483%3ART%3D1727648483%3AS%3DALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw&sc_status=6&hl=en&rpbu=http%3A%2F%2Ffinance.cocoricopatisserie.co.uk%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NTIwLjIwNDR8MDAzNTk5NWRhZWQ4NzI5MDM0MjFlYTM5NzhiYjMxYWFjZGU3NmE2OHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Semaglutide%20Henry&afdt=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpj4R7Nz9MtgVxMM3LZXthcmrpMZO2hM9CJdYTOBTZlOqOWIKeyAnZ3l9wmC7ZfZQ9oOSTTbuMheWysdFe-MYszSn-Z5cfGUaCQmtDzAocoW2PrGSSnlOXrv0KCozzVftbfzk&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266%2C72717107&format=n3&ad=n3&nocache=2341727648519590&num=0&output=afd_ads&domain_name=finance.cocoricopatisserie.co.uk&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1727648519592&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=791&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=http%3A%2F%2Ffinance.cocoricopatisserie.co.uk%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8%26query%3DSemaglutide%2BHenry%26afdToken%3DChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpj4R7Nz9MtgVxMM3LZXthcmrpMZO2hM9CJdYTOBTZlOqOWIKeyAnZ3l9wmC7ZfZQ9oOSTTbuMheWysdFe-MYszSn-Z5cfGUaCQmtDzAocoW2PrGSSnlOXrv0KCozzVftbfzk%26pcsa%3Dfalse%26nb%3D0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://finance.cocoricopatisserie.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://finance.cocoricopatisserie.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://finance.cocoricopatisserie.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=3tx4llplc22n&aqid=CNP5ZuGbN4isjuwPperlqAs&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1394&adbw=530&adbah=470%2C470%2C452&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=678245571&csala=27%7C0%7C535%7C5%7C223&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://finance.cocoricopatisserie.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=wu4yeoc6dztn&aqid=CNP5ZuGbN4isjuwPperlqAs&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1394&adbw=530&adbah=470%2C470%2C452&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=678245571&csala=27%7C0%7C535%7C5%7C223&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://finance.cocoricopatisserie.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://finance.cocoricopatisserie.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&sct=ID%3D4f20d6f152843af6%3AT%3D1727648483%3ART%3D1727648483%3AS%3DALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw&sc_status=6&hl=en&rpbu=http%3A%2F%2Ffinance.cocoricopatisserie.co.uk%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NTMxLjMxNTZ8YTdkOTlkYmMxZjhkZDIxNmI0M2VhOGQ1N2M4YzUxMGI2YjUyYjYwZHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Eagles%20Sphere%20Sphere&afdt=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpjx58G6o1K7o-viAFkNJUZINzDQYxSL87u9idvmGA6WnLKvG43X1VTpA_tX-JuOD2qRhHKZIbvkkTZQebs3sDLnAIMFHH3E399kjaAqb00X1Isp9zrXzZpzsXWiuakI_FhDM&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266%2C72717108&format=n3&ad=n3&nocache=7351727648530604&num=0&output=afd_ads&domain_name=finance.cocoricopatisserie.co.uk&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1727648530606&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=791&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=http%3A%2F%2Ffinance.cocoricopatisserie.co.uk%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8%26query%3DEagles%2BSphere%2BSphere%26afdToken%3DChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpjx58G6o1K7o-viAFkNJUZINzDQYxSL87u9idvmGA6WnLKvG43X1VTpA_tX-JuOD2qRhHKZIbvkkTZQebs3sDLnAIMFHH3E399kjaAqb00X1Isp9zrXzZpzsXWiuakI_FhDM%26pcsa%3Dfalse%26nb%3D0%26nm%3D3 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://finance.cocoricopatisserie.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://finance.cocoricopatisserie.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=155zl0tsnfmb&aqid=FNP5Zp6fJpKrjuwPq6O4sAQ&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1399&adbw=530&adbah=506%2C452%2C439&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=678245571&csala=30%7C0%7C1255%7C4%7C313&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://finance.cocoricopatisserie.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=sg8dbgaiti0z&aqid=FNP5Zp6fJpKrjuwPq6O4sAQ&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1399&adbw=530&adbah=506%2C452%2C439&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=678245571&csala=30%7C0%7C1255%7C4%7C313&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://finance.cocoricopatisserie.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&sct=ID%3D4f20d6f152843af6%3AT%3D1727648483%3ART%3D1727648483%3AS%3DALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw&sc_status=6&hl=en&rpbu=http%3A%2F%2Ffinance.cocoricopatisserie.co.uk%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NTM1LjQ3OXw3MzNmZTA4YjM3ODJhNjZmOWM5Nzc5OTM1ZDJjNGQ0MmQzNTNkOTIyfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHx8fDB8MHx8MHx8fDB8MHxXMTA9fHwxfFcxMD18MTc2ZTI2OTgxMjVlNTFhMzYxYzk5NWM1NDgwZDM1MTRmZDA2ZTU5NHwwfGRwLXRlYW1pbnRlcm5ldDA5XzNwaHwwfDB8fHw%253D&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Sesame%20Semaglutide&afdt=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmcBlLqpj90SqxLU1y28Lnofj6W4YFOJxZRWVqEOBrqx9r8dK_IzyucJYZYAj0HbBY0RxMhD-iUiKatTaQpsIR459EQ14jLNoKoGR9MimrFhhNC0HT5tj7o4Xchb8bXTCSs8XHI4WI_a&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266%2C72717108&format=n3&ad=n3&nocache=7121727648535487&num=0&output=afd_ads&domain_name=finance.cocoricopatisserie.co.uk&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1727648535493&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=791&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=http%3A%2F%2Ffinance.cocoricopatisserie.co.uk%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8%26query%3DSesame%2BSemaglutide%26afdToken%3DChMIi-aqkZjpiAMVv_67CB2-6zNOEmcBlLqpj90SqxLU1y28Lnofj6W4YFOJxZRWVqEOBrqx9r8dK_IzyucJYZYAj0HbBY0RxMhD-iUiKatTaQpsIR459EQ14jLNoKoGR9MimrFhhNC0HT5tj7o4Xchb8bXTCSs8XHI4WI_a%26pcsa%3Dfalse%26nb%3D0%26nm%3D2 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://finance.cocoricopatisserie.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://finance.cocoricopatisserie.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://finance.cocoricopatisserie.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=nvn0fzjdojbh&aqid=GdP5ZurdIvjHjuwP96-J8AU&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1453&adbw=530&adbah=475%2C506%2C470&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=678245571&csala=53%7C0%7C1298%7C12%7C756&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://finance.cocoricopatisserie.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=awyxw6v0hoho&aqid=GdP5ZurdIvjHjuwP96-J8AU&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1453&adbw=530&adbah=475%2C506%2C470&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=678245571&csala=53%7C0%7C1298%7C12%7C756&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://finance.cocoricopatisserie.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://finance.cocoricopatisserie.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&sct=ID%3D4f20d6f152843af6%3AT%3D1727648483%3ART%3D1727648483%3AS%3DALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw&sc_status=6&hl=en&rpbu=http%3A%2F%2Ffinance.cocoricopatisserie.co.uk%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NTQzLjQ1OXw2NDIyZTI5ZDFiNWFjMmEzM2EyZTI1ODFhNTUxNmRhOGE3MWFhZTFjfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHx8fDB8MHx8MHx8fDB8MHxXMTA9fHwxfFcxMD18MTc2ZTI2OTgxMjVlNTFhMzYxYzk5NWM1NDgwZDM1MTRmZDA2ZTU5NHwwfGRwLXRlYW1pbnRlcm5ldDA5XzNwaHwwfDB8fHw%253D&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Semaglutide%20Henry&afdt=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpj4R7Nz9MtgVxMM3LZXthcmrpMZO2hM9CJdYTOBTZlOqOWIKeyAnZ3l9wmC7ZfZQ9oOSTTbuMheWysdFe-MYszSn-Z5cfGUaCQmtDzAocoW2PrGSSnlOXrv0KCozzVftbfzk&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266%2C72717108&format=n3&ad=n3&nocache=6371727648542901&num=0&output=afd_ads&domain_name=finance.cocoricopatisserie.co.uk&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1727648542904&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=791&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=http%3A%2F%2Ffinance.cocoricopatisserie.co.uk%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8%26query%3DSemaglutide%2BHenry%26afdToken%3DChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpj4R7Nz9MtgVxMM3LZXthcmrpMZO2hM9CJdYTOBTZlOqOWIKeyAnZ3l9wmC7ZfZQ9oOSTTbuMheWysdFe-MYszSn-Z5cfGUaCQmtDzAocoW2PrGSSnlOXrv0KCozzVftbfzk%26pcsa%3Dfalse%26nb%3D0%26nm%3D2 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://finance.cocoricopatisserie.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://finance.cocoricopatisserie.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=b870vfrkd2ub&aqid=INP5ZoLSObSViM0P97GDyAw&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1453&adbw=530&adbah=506%2C475%2C470&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=678245571&csala=20%7C0%7C1257%7C3%7C225&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://finance.cocoricopatisserie.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=4av94mckmtsy&aqid=INP5ZoLSObSViM0P97GDyAw&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1453&adbw=530&adbah=506%2C475%2C470&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=678245571&csala=20%7C0%7C1257%7C3%7C225&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://finance.cocoricopatisserie.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: finance.cocoricopatisserie.co.ukConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.php?domain=cocoricopatisserie.co.uk&toggle=browserjs&uid=MTcyNzY0ODQ4MC44ODk5OjczODdlOTgwODU3MmY1NzRhY2IwNTYyZmU4NDU1OGQ2NGNkYWI1MzlkMDNiZTIzZTQ2ZTdiNjNhZjY0NTY0OTk6NjZmOWQyZTBkOTQwMg%3D%3D HTTP/1.1Host: finance.cocoricopatisserie.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://finance.cocoricopatisserie.co.uk/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1Host: d38psrni17bvxu.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://finance.cocoricopatisserie.co.uk/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ls.php?t=66f9d2e0&token=176e2698125e51a361c995c5480d3514fd06e594 HTTP/1.1Host: finance.cocoricopatisserie.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://finance.cocoricopatisserie.co.uk/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.php?domain=cocoricopatisserie.co.uk&toggle=browserjs&uid=MTcyNzY0ODQ4MC44ODk5OjczODdlOTgwODU3MmY1NzRhY2IwNTYyZmU4NDU1OGQ2NGNkYWI1MzlkMDNiZTIzZTQ2ZTdiNjNhZjY0NTY0OTk6NjZmOWQyZTBkOTQwMg%3D%3D HTTP/1.1Host: finance.cocoricopatisserie.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1Host: d38psrni17bvxu.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.php?domain=cocoricopatisserie.co.uk&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzY0ODQ4MC44ODk5OjczODdlOTgwODU3MmY1NzRhY2IwNTYyZmU4NDU1OGQ2NGNkYWI1MzlkMDNiZTIzZTQ2ZTdiNjNhZjY0NTY0OTk6NjZmOWQyZTBkOTQwMg%3D%3D HTTP/1.1Host: finance.cocoricopatisserie.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://finance.cocoricopatisserie.co.uk/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: finance.cocoricopatisserie.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://finance.cocoricopatisserie.co.uk/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=cocoricopatisserie.co.uk&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzY0ODQ4MC44ODk5OjczODdlOTgwODU3MmY1NzRhY2IwNTYyZmU4NDU1OGQ2NGNkYWI1MzlkMDNiZTIzZTQ2ZTdiNjNhZjY0NTY0OTk6NjZmOWQyZTBkOTQwMg%3D%3D HTTP/1.1Host: finance.cocoricopatisserie.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: finance.cocoricopatisserie.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Source: global traffic	HTTP traffic detected: GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Eagles+Sphere+Sphere&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpjx58G6o1K7o-viAFkNJUZINzDQYxSL87u9idvmGA6WnLKvG43X1VTpA_tX-JuOD2qRhHKZIbvkkTZQebs3sDLnAIMFHH3E399kjaAqb00X1Isp9zrXzZpzsXWiuakI_FhDM&pcsa=false&nb=0 HTTP/1.1Host: finance.cocoricopatisserie.co.ukConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=cocoricopatisserie.co.uk&toggle=browserjs&uid=MTcyNzY0ODUwNy43NjU2OjliOGVlNDhhZjhkY2FiNjdiNjM0OWIyOGU5OWFlOTZhOTAyNDQ3OTQxMzExNTNmMDhmODJjM2ZiNTFjNmIzYjc6NjZmOWQyZmJiYWU4Yw%3D%3D HTTP/1.1Host: finance.cocoricopatisserie.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Eagles+Sphere+Sphere&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpjx58G6o1K7o-viAFkNJUZINzDQYxSL87u9idvmGA6WnLKvG43X1VTpA_tX-JuOD2qRhHKZIbvkkTZQebs3sDLnAIMFHH3E399kjaAqb00X1Isp9zrXzZpzsXWiuakI_FhDM&pcsa=false&nb=0Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Source: global traffic	HTTP traffic detected: GET /ls.php?t=66f9d2fb&token=ef6bc7c99695dcaf0de157a08fb06e6d0e004596 HTTP/1.1Host: finance.cocoricopatisserie.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Eagles+Sphere+Sphere&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpjx58G6o1K7o-viAFkNJUZINzDQYxSL87u9idvmGA6WnLKvG43X1VTpA_tX-JuOD2qRhHKZIbvkkTZQebs3sDLnAIMFHH3E399kjaAqb00X1Isp9zrXzZpzsXWiuakI_FhDM&pcsa=false&nb=0Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=cocoricopatisserie.co.uk&toggle=browserjs&uid=MTcyNzY0ODUwNy43NjU2OjliOGVlNDhhZjhkY2FiNjdiNjM0OWIyOGU5OWFlOTZhOTAyNDQ3OTQxMzExNTNmMDhmODJjM2ZiNTFjNmIzYjc6NjZmOWQyZmJiYWU4Yw%3D%3D HTTP/1.1Host: finance.cocoricopatisserie.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=cocoricopatisserie.co.uk&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzY0ODUwNy43NjU2OjliOGVlNDhhZjhkY2FiNjdiNjM0OWIyOGU5OWFlOTZhOTAyNDQ3OTQxMzExNTNmMDhmODJjM2ZiNTFjNmIzYjc6NjZmOWQyZmJiYWU4Yw%3D%3D HTTP/1.1Host: finance.cocoricopatisserie.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Eagles+Sphere+Sphere&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpjx58G6o1K7o-viAFkNJUZINzDQYxSL87u9idvmGA6WnLKvG43X1VTpA_tX-JuOD2qRhHKZIbvkkTZQebs3sDLnAIMFHH3E399kjaAqb00X1Isp9zrXzZpzsXWiuakI_FhDM&pcsa=false&nb=0Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=cocoricopatisserie.co.uk&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzY0ODUwNy43NjU2OjliOGVlNDhhZjhkY2FiNjdiNjM0OWIyOGU5OWFlOTZhOTAyNDQ3OTQxMzExNTNmMDhmODJjM2ZiNTFjNmIzYjc6NjZmOWQyZmJiYWU4Yw%3D%3D HTTP/1.1Host: finance.cocoricopatisserie.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Source: global traffic	HTTP traffic detected: GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Sesame+Semaglutide&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmcBlLqpj90SqxLU1y28Lnofj6W4YFOJxZRWVqEOBrqx9r8dK_IzyucJYZYAj0HbBY0RxMhD-iUiKatTaQpsIR459EQ14jLNoKoGR9MimrFhhNC0HT5tj7o4Xchb8bXTCSs8XHI4WI_a&pcsa=false&nb=0 HTTP/1.1Host: finance.cocoricopatisserie.co.ukConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=cocoricopatisserie.co.uk&toggle=browserjs&uid=MTcyNzY0ODUxNS4wNzYzOjIxNmUwMTkzNDk2OTc5ZTM3MGQ1YzM0YjczYTg0NTYxODdjZTI3NWZmMDY3M2QxZDQ3MWNmYzI5OGNiNTEyMDY6NjZmOWQzMDMxMjlkYQ%3D%3D HTTP/1.1Host: finance.cocoricopatisserie.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Sesame+Semaglutide&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmcBlLqpj90SqxLU1y28Lnofj6W4YFOJxZRWVqEOBrqx9r8dK_IzyucJYZYAj0HbBY0RxMhD-iUiKatTaQpsIR459EQ14jLNoKoGR9MimrFhhNC0HT5tj7o4Xchb8bXTCSs8XHI4WI_a&pcsa=false&nb=0Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Source: global traffic	HTTP traffic detected: GET /ls.php?t=66f9d303&token=642f1764c2344e1f5c29ba4aa4a6abc6eda7da17 HTTP/1.1Host: finance.cocoricopatisserie.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Sesame+Semaglutide&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmcBlLqpj90SqxLU1y28Lnofj6W4YFOJxZRWVqEOBrqx9r8dK_IzyucJYZYAj0HbBY0RxMhD-iUiKatTaQpsIR459EQ14jLNoKoGR9MimrFhhNC0HT5tj7o4Xchb8bXTCSs8XHI4WI_a&pcsa=false&nb=0Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=cocoricopatisserie.co.uk&toggle=browserjs&uid=MTcyNzY0ODUxNS4wNzYzOjIxNmUwMTkzNDk2OTc5ZTM3MGQ1YzM0YjczYTg0NTYxODdjZTI3NWZmMDY3M2QxZDQ3MWNmYzI5OGNiNTEyMDY6NjZmOWQzMDMxMjlkYQ%3D%3D HTTP/1.1Host: finance.cocoricopatisserie.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=cocoricopatisserie.co.uk&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzY0ODUxNS4wNzYzOjIxNmUwMTkzNDk2OTc5ZTM3MGQ1YzM0YjczYTg0NTYxODdjZTI3NWZmMDY3M2QxZDQ3MWNmYzI5OGNiNTEyMDY6NjZmOWQzMDMxMjlkYQ%3D%3D HTTP/1.1Host: finance.cocoricopatisserie.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Sesame+Semaglutide&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmcBlLqpj90SqxLU1y28Lnofj6W4YFOJxZRWVqEOBrqx9r8dK_IzyucJYZYAj0HbBY0RxMhD-iUiKatTaQpsIR459EQ14jLNoKoGR9MimrFhhNC0HT5tj7o4Xchb8bXTCSs8XHI4WI_a&pcsa=false&nb=0Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=cocoricopatisserie.co.uk&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzY0ODUxNS4wNzYzOjIxNmUwMTkzNDk2OTc5ZTM3MGQ1YzM0YjczYTg0NTYxODdjZTI3NWZmMDY3M2QxZDQ3MWNmYzI5OGNiNTEyMDY6NjZmOWQzMDMxMjlkYQ%3D%3D HTTP/1.1Host: finance.cocoricopatisserie.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Source: global traffic	HTTP traffic detected: GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Semaglutide+Henry&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpj4R7Nz9MtgVxMM3LZXthcmrpMZO2hM9CJdYTOBTZlOqOWIKeyAnZ3l9wmC7ZfZQ9oOSTTbuMheWysdFe-MYszSn-Z5cfGUaCQmtDzAocoW2PrGSSnlOXrv0KCozzVftbfzk&pcsa=false&nb=0 HTTP/1.1Host: finance.cocoricopatisserie.co.ukConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=cocoricopatisserie.co.uk&toggle=browserjs&uid=MTcyNzY0ODUyMC4xODk6NGRlMzI1MTA1OTE5NmQ5ZjEwYWQwMWNiYjEzM2RlNzdkYTgxZmU2MzkxMjY0OTVhOWMxYTdhMDQxNWRlMDM1Yzo2NmY5ZDMwODJlMjFk HTTP/1.1Host: finance.cocoricopatisserie.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Semaglutide+Henry&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpj4R7Nz9MtgVxMM3LZXthcmrpMZO2hM9CJdYTOBTZlOqOWIKeyAnZ3l9wmC7ZfZQ9oOSTTbuMheWysdFe-MYszSn-Z5cfGUaCQmtDzAocoW2PrGSSnlOXrv0KCozzVftbfzk&pcsa=false&nb=0Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=cocoricopatisserie.co.uk&toggle=browserjs&uid=MTcyNzY0ODUyMC4xODk6NGRlMzI1MTA1OTE5NmQ5ZjEwYWQwMWNiYjEzM2RlNzdkYTgxZmU2MzkxMjY0OTVhOWMxYTdhMDQxNWRlMDM1Yzo2NmY5ZDMwODJlMjFk HTTP/1.1Host: finance.cocoricopatisserie.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Source: global traffic	HTTP traffic detected: GET /ls.php?t=66f9d308&token=26921ed73125027db7ed665b75d22cac5c06430b HTTP/1.1Host: finance.cocoricopatisserie.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Semaglutide+Henry&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpj4R7Nz9MtgVxMM3LZXthcmrpMZO2hM9CJdYTOBTZlOqOWIKeyAnZ3l9wmC7ZfZQ9oOSTTbuMheWysdFe-MYszSn-Z5cfGUaCQmtDzAocoW2PrGSSnlOXrv0KCozzVftbfzk&pcsa=false&nb=0Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=cocoricopatisserie.co.uk&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzY0ODUyMC4xODk6NGRlMzI1MTA1OTE5NmQ5ZjEwYWQwMWNiYjEzM2RlNzdkYTgxZmU2MzkxMjY0OTVhOWMxYTdhMDQxNWRlMDM1Yzo2NmY5ZDMwODJlMjFk HTTP/1.1Host: finance.cocoricopatisserie.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Semaglutide+Henry&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpj4R7Nz9MtgVxMM3LZXthcmrpMZO2hM9CJdYTOBTZlOqOWIKeyAnZ3l9wmC7ZfZQ9oOSTTbuMheWysdFe-MYszSn-Z5cfGUaCQmtDzAocoW2PrGSSnlOXrv0KCozzVftbfzk&pcsa=false&nb=0Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=cocoricopatisserie.co.uk&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzY0ODUyMC4xODk6NGRlMzI1MTA1OTE5NmQ5ZjEwYWQwMWNiYjEzM2RlNzdkYTgxZmU2MzkxMjY0OTVhOWMxYTdhMDQxNWRlMDM1Yzo2NmY5ZDMwODJlMjFk HTTP/1.1Host: finance.cocoricopatisserie.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Source: global traffic	HTTP traffic detected: GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Eagles+Sphere+Sphere&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpjx58G6o1K7o-viAFkNJUZINzDQYxSL87u9idvmGA6WnLKvG43X1VTpA_tX-JuOD2qRhHKZIbvkkTZQebs3sDLnAIMFHH3E399kjaAqb00X1Isp9zrXzZpzsXWiuakI_FhDM&pcsa=false&nb=0&nm=3 HTTP/1.1Host: finance.cocoricopatisserie.co.ukConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=cocoricopatisserie.co.uk&toggle=browserjs&uid=MTcyNzY0ODUzMS4zMDA4OmJkNzczZDU2Y2Y4MmQzOGJiMWI4Y2NhMjNkNTg3ODExZDVmOTMwN2Y5ZTE4YzA1NDQyOTMyZGQ1N2Q3OTBiOGQ6NjZmOWQzMTM0OTZlZQ%3D%3D HTTP/1.1Host: finance.cocoricopatisserie.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Eagles+Sphere+Sphere&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpjx58G6o1K7o-viAFkNJUZINzDQYxSL87u9idvmGA6WnLKvG43X1VTpA_tX-JuOD2qRhHKZIbvkkTZQebs3sDLnAIMFHH3E399kjaAqb00X1Isp9zrXzZpzsXWiuakI_FhDM&pcsa=false&nb=0&nm=3Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=cocoricopatisserie.co.uk&toggle=browserjs&uid=MTcyNzY0ODUzMS4zMDA4OmJkNzczZDU2Y2Y4MmQzOGJiMWI4Y2NhMjNkNTg3ODExZDVmOTMwN2Y5ZTE4YzA1NDQyOTMyZGQ1N2Q3OTBiOGQ6NjZmOWQzMTM0OTZlZQ%3D%3D HTTP/1.1Host: finance.cocoricopatisserie.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Source: global traffic	HTTP traffic detected: GET /ls.php?t=66f9d313&token=09ee88ccb356a23e0f55db14342af30f85bdd5a2 HTTP/1.1Host: finance.cocoricopatisserie.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Eagles+Sphere+Sphere&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpjx58G6o1K7o-viAFkNJUZINzDQYxSL87u9idvmGA6WnLKvG43X1VTpA_tX-JuOD2qRhHKZIbvkkTZQebs3sDLnAIMFHH3E399kjaAqb00X1Isp9zrXzZpzsXWiuakI_FhDM&pcsa=false&nb=0&nm=3Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=cocoricopatisserie.co.uk&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzY0ODUzMS4zMDA4OmJkNzczZDU2Y2Y4MmQzOGJiMWI4Y2NhMjNkNTg3ODExZDVmOTMwN2Y5ZTE4YzA1NDQyOTMyZGQ1N2Q3OTBiOGQ6NjZmOWQzMTM0OTZlZQ%3D%3D HTTP/1.1Host: finance.cocoricopatisserie.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Eagles+Sphere+Sphere&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpjx58G6o1K7o-viAFkNJUZINzDQYxSL87u9idvmGA6WnLKvG43X1VTpA_tX-JuOD2qRhHKZIbvkkTZQebs3sDLnAIMFHH3E399kjaAqb00X1Isp9zrXzZpzsXWiuakI_FhDM&pcsa=false&nb=0&nm=3Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=cocoricopatisserie.co.uk&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzY0ODUzMS4zMDA4OmJkNzczZDU2Y2Y4MmQzOGJiMWI4Y2NhMjNkNTg3ODExZDVmOTMwN2Y5ZTE4YzA1NDQyOTMyZGQ1N2Q3OTBiOGQ6NjZmOWQzMTM0OTZlZQ%3D%3D HTTP/1.1Host: finance.cocoricopatisserie.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Source: global traffic	HTTP traffic detected: GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Sesame+Semaglutide&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmcBlLqpj90SqxLU1y28Lnofj6W4YFOJxZRWVqEOBrqx9r8dK_IzyucJYZYAj0HbBY0RxMhD-iUiKatTaQpsIR459EQ14jLNoKoGR9MimrFhhNC0HT5tj7o4Xchb8bXTCSs8XHI4WI_a&pcsa=false&nb=0&nm=2 HTTP/1.1Host: finance.cocoricopatisserie.co.ukConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=cocoricopatisserie.co.uk&toggle=browserjs&uid=MTcyNzY0ODUzNS40NjQ4OjRlZmNjZDYyZTg2Yjg2ODM1MzA1NGVmOTk4MTIxZDM1YjUyZjg0M2M3NzBhMzBjYzUzNzA5YzRiN2I3MmUxNzA6NjZmOWQzMTc3MTdiOA%3D%3D HTTP/1.1Host: finance.cocoricopatisserie.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Sesame+Semaglutide&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmcBlLqpj90SqxLU1y28Lnofj6W4YFOJxZRWVqEOBrqx9r8dK_IzyucJYZYAj0HbBY0RxMhD-iUiKatTaQpsIR459EQ14jLNoKoGR9MimrFhhNC0HT5tj7o4Xchb8bXTCSs8XHI4WI_a&pcsa=false&nb=0&nm=2Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Source: global traffic	HTTP traffic detected: GET /ls.php?t=66f9d317&token=f8a06e2da2fe5106d64d1d4e5453cb923d17adf3 HTTP/1.1Host: finance.cocoricopatisserie.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Sesame+Semaglutide&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmcBlLqpj90SqxLU1y28Lnofj6W4YFOJxZRWVqEOBrqx9r8dK_IzyucJYZYAj0HbBY0RxMhD-iUiKatTaQpsIR459EQ14jLNoKoGR9MimrFhhNC0HT5tj7o4Xchb8bXTCSs8XHI4WI_a&pcsa=false&nb=0&nm=2Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=cocoricopatisserie.co.uk&toggle=browserjs&uid=MTcyNzY0ODUzNS40NjQ4OjRlZmNjZDYyZTg2Yjg2ODM1MzA1NGVmOTk4MTIxZDM1YjUyZjg0M2M3NzBhMzBjYzUzNzA5YzRiN2I3MmUxNzA6NjZmOWQzMTc3MTdiOA%3D%3D HTTP/1.1Host: finance.cocoricopatisserie.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=cocoricopatisserie.co.uk&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzY0ODUzNS40NjQ4OjRlZmNjZDYyZTg2Yjg2ODM1MzA1NGVmOTk4MTIxZDM1YjUyZjg0M2M3NzBhMzBjYzUzNzA5YzRiN2I3MmUxNzA6NjZmOWQzMTc3MTdiOA%3D%3D HTTP/1.1Host: finance.cocoricopatisserie.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Sesame+Semaglutide&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmcBlLqpj90SqxLU1y28Lnofj6W4YFOJxZRWVqEOBrqx9r8dK_IzyucJYZYAj0HbBY0RxMhD-iUiKatTaQpsIR459EQ14jLNoKoGR9MimrFhhNC0HT5tj7o4Xchb8bXTCSs8XHI4WI_a&pcsa=false&nb=0&nm=2Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=cocoricopatisserie.co.uk&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzY0ODUzNS40NjQ4OjRlZmNjZDYyZTg2Yjg2ODM1MzA1NGVmOTk4MTIxZDM1YjUyZjg0M2M3NzBhMzBjYzUzNzA5YzRiN2I3MmUxNzA6NjZmOWQzMTc3MTdiOA%3D%3D HTTP/1.1Host: finance.cocoricopatisserie.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Source: global traffic	HTTP traffic detected: GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Semaglutide+Henry&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpj4R7Nz9MtgVxMM3LZXthcmrpMZO2hM9CJdYTOBTZlOqOWIKeyAnZ3l9wmC7ZfZQ9oOSTTbuMheWysdFe-MYszSn-Z5cfGUaCQmtDzAocoW2PrGSSnlOXrv0KCozzVftbfzk&pcsa=false&nb=0&nm=2 HTTP/1.1Host: finance.cocoricopatisserie.co.ukConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=cocoricopatisserie.co.uk&toggle=browserjs&uid=MTcyNzY0ODU0My40MzU5OmMyZDdmMzE5YzBiMWJhMjA2NGIxOTNlZWYyZmQ4YjA2YjBlMWQ2YmQ2ZmZkOGUyZDMyMGUwYzY5OTI0MDBiZWQ6NjZmOWQzMWY2YTZjOQ%3D%3D HTTP/1.1Host: finance.cocoricopatisserie.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Semaglutide+Henry&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpj4R7Nz9MtgVxMM3LZXthcmrpMZO2hM9CJdYTOBTZlOqOWIKeyAnZ3l9wmC7ZfZQ9oOSTTbuMheWysdFe-MYszSn-Z5cfGUaCQmtDzAocoW2PrGSSnlOXrv0KCozzVftbfzk&pcsa=false&nb=0&nm=2Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=cocoricopatisserie.co.uk&toggle=browserjs&uid=MTcyNzY0ODU0My40MzU5OmMyZDdmMzE5YzBiMWJhMjA2NGIxOTNlZWYyZmQ4YjA2YjBlMWQ2YmQ2ZmZkOGUyZDMyMGUwYzY5OTI0MDBiZWQ6NjZmOWQzMWY2YTZjOQ%3D%3D HTTP/1.1Host: finance.cocoricopatisserie.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Source: global traffic	HTTP traffic detected: GET /ls.php?t=66f9d31f&token=c66d39186c9fefeedea237848dc99ebab6205427 HTTP/1.1Host: finance.cocoricopatisserie.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Semaglutide+Henry&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpj4R7Nz9MtgVxMM3LZXthcmrpMZO2hM9CJdYTOBTZlOqOWIKeyAnZ3l9wmC7ZfZQ9oOSTTbuMheWysdFe-MYszSn-Z5cfGUaCQmtDzAocoW2PrGSSnlOXrv0KCozzVftbfzk&pcsa=false&nb=0&nm=2Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=cocoricopatisserie.co.uk&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzY0ODU0My40MzU5OmMyZDdmMzE5YzBiMWJhMjA2NGIxOTNlZWYyZmQ4YjA2YjBlMWQ2YmQ2ZmZkOGUyZDMyMGUwYzY5OTI0MDBiZWQ6NjZmOWQzMWY2YTZjOQ%3D%3D HTTP/1.1Host: finance.cocoricopatisserie.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Semaglutide+Henry&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpj4R7Nz9MtgVxMM3LZXthcmrpMZO2hM9CJdYTOBTZlOqOWIKeyAnZ3l9wmC7ZfZQ9oOSTTbuMheWysdFe-MYszSn-Z5cfGUaCQmtDzAocoW2PrGSSnlOXrv0KCozzVftbfzk&pcsa=false&nb=0&nm=2Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=cocoricopatisserie.co.uk&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzY0ODU0My40MzU5OmMyZDdmMzE5YzBiMWJhMjA2NGIxOTNlZWYyZmQ4YjA2YjBlMWQ2YmQ2ZmZkOGUyZDMyMGUwYzY5OTI0MDBiZWQ6NjZmOWQzMWY2YTZjOQ%3D%3D HTTP/1.1Host: finance.cocoricopatisserie.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw

Source: global traffic	DNS traffic detected: DNS query: finance.cocoricopatisserie.co.uk
Source: global traffic	DNS traffic detected: DNS query: d38psrni17bvxu.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: syndicatedsearch.goog
Source: global traffic	DNS traffic detected: DNS query: afs.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: www.mydomaincontact.com

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 29 Sep 2024 22:21:39 GMTContent-Type: text/htmlContent-Length: 548Connection: closeServer: nginx

Source: chromecache_165.2.dr, chromecache_103.2.dr	String found in binary or memory: http://jquery.com/
Source: chromecache_165.2.dr, chromecache_103.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_165.2.dr, chromecache_103.2.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_159.2.dr, chromecache_116.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_159.2.dr, chromecache_116.2.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl-2.0.html
Source: chromecache_113.2.dr	String found in binary or memory: http://www.quirksmode.org/css/box.html
Source: chromecache_153.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqk32nTAno2QlGoMDo-aIl2O515cp
Source: chromecache_107.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqkQfRmFRF7WAgpHKY4MZIT3pOBV0
Source: chromecache_107.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrql5X9O9uS2U0NUEUh7kGs8TtbxKp
Source: chromecache_127.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqlDh0jTFRL_5WO8OAXYHkK2kpcR-
Source: chromecache_153.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqlL43RXI-oetLkDnhbv5X86uiXjK
Source: chromecache_125.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqlN-7BIdK5npCtymqOALPC0m2RJb
Source: chromecache_97.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqlSiEFXDknvGKHDOhdlxHaLWswn7
Source: chromecache_125.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqltXJjP_-u3AUCkEgE_9X62Vtp6Y
Source: chromecache_127.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqm-86K9zHfieAdZE74YiMqe32jan
Source: chromecache_143.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqmM7weWKKN2YBkM6XaQiumum65kQ
Source: chromecache_153.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqmhPyQOnox7CQhYdfaFO4jvd6W-T
Source: chromecache_125.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqnCGlZXu_6QlUonXF_gA59ubDFox
Source: chromecache_127.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqnCagoFFgk-uY6pO3Jbb0L9BOiUL
Source: chromecache_97.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqnbDV2tUVCR6fLZVAuLvEmPtv__P
Source: chromecache_143.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqnl3yk0tOQ0qT9q9OQ5qxqKOzCyg
Source: chromecache_143.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqnpZnV6b65uqKQaoyqjkZLP-wTiL
Source: chromecache_126.2.dr, chromecache_170.2.dr, chromecache_131.2.dr, chromecache_169.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=
Source: chromecache_135.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Source
Source: chromecache_161.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/mate/v17/m8JdjftRd7WZ6zS2W7XS.woff2)
Source: chromecache_161.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/mate/v17/m8JdjftRd7WZ6zq2Ww.woff2)
Source: chromecache_161.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/matesc/v22/-nF8OGQ1-uoVr2wK-iLT9g.woff2)
Source: chromecache_161.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/matesc/v22/-nF8OGQ1-uoVr2wK-izT9qOk.woff2)
Source: chromecache_161.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_161.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_161.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_161.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_161.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_161.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_161.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_123.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7jsDJT9g.woff2)
Source: chromecache_123.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7ksDJT9g.woff2)
Source: chromecache_123.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7nsDI.woff2)
Source: chromecache_123.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7osDJT9g.woff2)
Source: chromecache_123.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7psDJT9g.woff2)
Source: chromecache_123.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7qsDJT9g.woff2)
Source: chromecache_123.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7rsDJT9g.woff2)
Source: chromecache_123.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qN67lqDY.woff2)
Source: chromecache_123.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qNK7lqDY.woff2)
Source: chromecache_123.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qNa7lqDY.woff2)
Source: chromecache_123.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qNq7lqDY.woff2)
Source: chromecache_123.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qO67lqDY.woff2)
Source: chromecache_123.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2)
Source: chromecache_123.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2)
Source: chromecache_123.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourceserifpro/v17/neIXzD-0qpwxpaWvjeD0X88SAOeasasatS-qxLUv.woff2)
Source: chromecache_123.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourceserifpro/v17/neIXzD-0qpwxpaWvjeD0X88SAOeasasatSGqxLUv.woff2)
Source: chromecache_123.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourceserifpro/v17/neIXzD-0qpwxpaWvjeD0X88SAOeasasatSKqxLUv.woff2)
Source: chromecache_123.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourceserifpro/v17/neIXzD-0qpwxpaWvjeD0X88SAOeasasatSOqxLUv.woff2)
Source: chromecache_123.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourceserifpro/v17/neIXzD-0qpwxpaWvjeD0X88SAOeasasatSiqxLUv.woff2)
Source: chromecache_123.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourceserifpro/v17/neIXzD-0qpwxpaWvjeD0X88SAOeasasatSyqxA.woff2)
Source: chromecache_126.2.dr, chromecache_170.2.dr, chromecache_131.2.dr, chromecache_169.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_126.2.dr, chromecache_170.2.dr, chromecache_131.2.dr, chromecache_169.2.dr	String found in binary or memory: https://partner.googleadservices.com/gampad/cookie.js
Source: chromecache_126.2.dr, chromecache_170.2.dr, chromecache_131.2.dr, chromecache_169.2.dr	String found in binary or memory: https://syndicatedsearch.goog
Source: chromecache_107.2.dr	String found in binary or memory: https://www.google.com/images/afs/snowman.png
Source: chromecache_126.2.dr, chromecache_170.2.dr, chromecache_131.2.dr, chromecache_169.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=5
Source: chromecache_125.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwiC4sWumOmIAxW0CqIDHffYAMkYABAAGgJsZQ
Source: chromecache_125.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwiC4sWumOmIAxW0CqIDHffYAMkYABABGgJsZQ
Source: chromecache_125.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwiC4sWumOmIAxW0CqIDHffYAMkYABACGgJsZQ
Source: chromecache_97.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwie-dWomOmIAxWSlYMHHasRDkYYABAAGgJlZg
Source: chromecache_97.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwie-dWomOmIAxWSlYMHHasRDkYYABABGgJlZg
Source: chromecache_97.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwie-dWomOmIAxWSlYMHHasRDkYYABACGgJlZg
Source: chromecache_107.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwijm_admOmIAxXLZJEFHdB7BDIYABAAGgJscg
Source: chromecache_107.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwijm_admOmIAxXLZJEFHdB7BDIYABABGgJscg
Source: chromecache_143.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwiqzoOrmOmIAxX4o4MHHfdXAl4YABAAGgJlZg
Source: chromecache_143.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwiqzoOrmOmIAxX4o4MHHfdXAl4YABABGgJlZg
Source: chromecache_143.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwiqzoOrmOmIAxX4o4MHHfdXAl4YABACGgJlZg
Source: chromecache_127.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwjhv4qjmOmIAxUIloMHHSV1GbUYABAAGgJlZg
Source: chromecache_127.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwjhv4qjmOmIAxUIloMHHSV1GbUYABABGgJlZg
Source: chromecache_127.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwjhv4qjmOmIAxUIloMHHSV1GbUYABACGgJlZg
Source: chromecache_153.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwjr84KhmOmIAxUXo4MHHefwDt0YABAAGgJlZg
Source: chromecache_153.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwjr84KhmOmIAxUXo4MHHefwDt0YABABGgJlZg
Source: chromecache_153.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwjr84KhmOmIAxUXo4MHHefwDt0YABACGgJlZg
Source: chromecache_126.2.dr, chromecache_170.2.dr, chromecache_131.2.dr, chromecache_169.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/16521530460/?gad_source=1&adview_type=3
Source: chromecache_125.2.dr, chromecache_143.2.dr	String found in binary or memory: https://www.infuzedivbar.com/medical/weight_loss
Source: chromecache_127.2.dr, chromecache_153.2.dr	String found in binary or memory: https://www.infuzedivbar.com/medical/weightloss
Source: chromecache_125.2.dr, chromecache_127.2.dr, chromecache_153.2.dr, chromecache_143.2.dr	String found in binary or memory: https://www.ivimhealth.com/
Source: chromecache_97.2.dr, chromecache_107.2.dr	String found in binary or memory: https://www.seatgeek.com/
Source: chromecache_143.2.dr	String found in binary or memory: https://www.seattleplasticsurgery.com/
Source: chromecache_127.2.dr, chromecache_153.2.dr	String found in binary or memory: https://www.vanityprescribed.com/
Source: chromecache_97.2.dr, chromecache_107.2.dr	String found in binary or memory: https://www.vividseats.com/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49726 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@24/155@32/15

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2516 --field-trial-handle=2396,i,7465292924056707105,2457684727211862111,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://finance.cocoricopatisserie.co.uk/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2516 --field-trial-handle=2396,i,7465292924056707105,2457684727211862111,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
http://jquery.org/license	0%	URL Reputation	safe
http://sizzlejs.com/	0%	URL Reputation	safe
http://jquery.com/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
syndicatedsearch.goog	142.250.185.110	true	false	unknown
finance.cocoricopatisserie.co.uk	185.53.177.52	true	false	unknown
www.google.com	142.250.186.164	true	false	unknown
www.mydomaincontact.com	108.128.52.91	true	false	unknown
googlehosted.l.googleusercontent.com	142.250.186.65	true	false	unknown
d38psrni17bvxu.cloudfront.net	18.66.121.138	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
afs.googleusercontent.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true	false	unknown
http://finance.cocoricopatisserie.co.uk/ls.php?t=66f9d303&token=642f1764c2344e1f5c29ba4aa4a6abc6eda7da17	false	unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=sg8dbgaiti0z&aqid=FNP5Zp6fJpKrjuwPq6O4sAQ&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1399&adbw=530&adbah=506%2C452%2C439&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=678245571&csala=30%7C0%7C1255%7C4%7C313&lle=0&ifv=1&hpt=1	false	unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=oq2boedhgzbv&aqid=49L5ZpWrLPrZywW62ILoBA&psid=7840396037&pbt=bv&adbx=375&adby=130&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=678245571&csala=29%7C0%7C1625%7C1180%7C279&lle=0&ifv=1&hpt=1	false	unknown
http://finance.cocoricopatisserie.co.uk/ls.php?t=66f9d31f&token=c66d39186c9fefeedea237848dc99ebab6205427	false	unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=twjy7tid1xni&aqid=49L5ZpWrLPrZywW62ILoBA&psid=7840396037&pbt=bs&adbx=375&adby=130&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=678245571&csala=29%7C0%7C1625%7C1180%7C279&lle=0&ifv=1&hpt=1	false	unknown
http://finance.cocoricopatisserie.co.uk/track.php?domain=cocoricopatisserie.co.uk&toggle=browserjs&uid=MTcyNzY0ODQ4MC44ODk5OjczODdlOTgwODU3MmY1NzRhY2IwNTYyZmU4NDU1OGQ2NGNkYWI1MzlkMDNiZTIzZTQ2ZTdiNjNhZjY0NTY0OTk6NjZmOWQyZTBkOTQwMg%3D%3D	false	unknown
http://finance.cocoricopatisserie.co.uk/track.php?domain=cocoricopatisserie.co.uk&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzY0ODUxNS4wNzYzOjIxNmUwMTkzNDk2OTc5ZTM3MGQ1YzM0YjczYTg0NTYxODdjZTI3NWZmMDY3M2QxZDQ3MWNmYzI5OGNiNTEyMDY6NjZmOWQzMDMxMjlkYQ%3D%3D	false	unknown
http://finance.cocoricopatisserie.co.uk/track.php?domain=cocoricopatisserie.co.uk&toggle=browserjs&uid=MTcyNzY0ODUxNS4wNzYzOjIxNmUwMTkzNDk2OTc5ZTM3MGQ1YzM0YjczYTg0NTYxODdjZTI3NWZmMDY3M2QxZDQ3MWNmYzI5OGNiNTEyMDY6NjZmOWQzMDMxMjlkYQ%3D%3D	false	unknown
http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Eagles+Sphere+Sphere&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpjx58G6o1K7o-viAFkNJUZINzDQYxSL87u9idvmGA6WnLKvG43X1VTpA_tX-JuOD2qRhHKZIbvkkTZQebs3sDLnAIMFHH3E399kjaAqb00X1Isp9zrXzZpzsXWiuakI_FhDM&pcsa=false&nb=0&nm=3	false	unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=ol8696d1yoc&aqid=BNP5ZuvhI5fGjuwP5-G76A0&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1394&adbw=530&adbah=470%2C452%2C470&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=678245571&csala=24%7C0%7C1626%7C11%7C261&lle=0&ifv=1&hpt=1	false	unknown
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff	false	unknown
http://d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png	false	unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=wu4yeoc6dztn&aqid=CNP5ZuGbN4isjuwPperlqAs&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1394&adbw=530&adbah=470%2C470%2C452&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=678245571&csala=27%7C0%7C535%7C5%7C223&lle=0&ifv=1&hpt=1	false	unknown
https://www.mydomaincontact.com/forms/script.js	false	unknown
https://www.mydomaincontact.com/scripts/jquery.js	false	unknown
http://finance.cocoricopatisserie.co.uk/	false	unknown
http://finance.cocoricopatisserie.co.uk/track.php?domain=cocoricopatisserie.co.uk&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzY0ODUzMS4zMDA4OmJkNzczZDU2Y2Y4MmQzOGJiMWI4Y2NhMjNkNTg3ODExZDVmOTMwN2Y5ZTE4YzA1NDQyOTMyZGQ1N2Q3OTBiOGQ6NjZmOWQzMTM0OTZlZQ%3D%3D	false	unknown
https://www.mydomaincontact.com/favicon.ico	false	unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=awyxw6v0hoho&aqid=GdP5ZurdIvjHjuwP96-J8AU&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1453&adbw=530&adbah=475%2C506%2C470&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=678245571&csala=53%7C0%7C1298%7C12%7C756&lle=0&ifv=1&hpt=1	false	unknown
http://finance.cocoricopatisserie.co.uk/track.php?domain=cocoricopatisserie.co.uk&toggle=browserjs&uid=MTcyNzY0ODUyMC4xODk6NGRlMzI1MTA1OTE5NmQ5ZjEwYWQwMWNiYjEzM2RlNzdkYTgxZmU2MzkxMjY0OTVhOWMxYTdhMDQxNWRlMDM1Yzo2NmY5ZDMwODJlMjFk	false	unknown
http://finance.cocoricopatisserie.co.uk/ls.php?t=66f9d317&token=f8a06e2da2fe5106d64d1d4e5453cb923d17adf3	false	unknown
http://finance.cocoricopatisserie.co.uk/track.php?domain=cocoricopatisserie.co.uk&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzY0ODUwNy43NjU2OjliOGVlNDhhZjhkY2FiNjdiNjM0OWIyOGU5OWFlOTZhOTAyNDQ3OTQxMzExNTNmMDhmODJjM2ZiNTFjNmIzYjc6NjZmOWQyZmJiYWU4Yw%3D%3D	false	unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=3tx4llplc22n&aqid=CNP5ZuGbN4isjuwPperlqAs&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1394&adbw=530&adbah=470%2C470%2C452&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=678245571&csala=27%7C0%7C535%7C5%7C223&lle=0&ifv=1&hpt=1	false	unknown
https://www.mydomaincontact.com/forms/script-addon.js	false	unknown
https://www.google.com/images/afs/snowman.png	false	unknown
https://www.mydomaincontact.com/scripts/select2/select2.min.js	false	unknown
https://www.mydomaincontact.com/images/trust.svg	false	unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=u0nzsrq6nhzz&aqid=BNP5ZuvhI5fGjuwP5-G76A0&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1394&adbw=530&adbah=470%2C452%2C470&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=678245571&csala=24%7C0%7C1626%7C11%7C261&lle=0&ifv=1&hpt=1	false	unknown
http://finance.cocoricopatisserie.co.uk/track.php?domain=cocoricopatisserie.co.uk&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzY0ODQ4MC44ODk5OjczODdlOTgwODU3MmY1NzRhY2IwNTYyZmU4NDU1OGQ2NGNkYWI1MzlkMDNiZTIzZTQ2ZTdiNjNhZjY0NTY0OTk6NjZmOWQyZTBkOTQwMg%3D%3D	false	unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=4av94mckmtsy&aqid=INP5ZoLSObSViM0P97GDyAw&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1453&adbw=530&adbah=506%2C475%2C470&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=678245571&csala=20%7C0%7C1257%7C3%7C225&lle=0&ifv=1&hpt=1	false	unknown
https://syndicatedsearch.goog/afs/ads/i/iframe.html	false	unknown
https://www.mydomaincontact.com/forms/style.css	false	unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=155zl0tsnfmb&aqid=FNP5Zp6fJpKrjuwPq6O4sAQ&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1399&adbw=530&adbah=506%2C452%2C439&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=678245571&csala=30%7C0%7C1255%7C4%7C313&lle=0&ifv=1&hpt=1	false	unknown
http://finance.cocoricopatisserie.co.uk/favicon.ico	false	unknown
http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Semaglutide+Henry&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpj4R7Nz9MtgVxMM3LZXthcmrpMZO2hM9CJdYTOBTZlOqOWIKeyAnZ3l9wmC7ZfZQ9oOSTTbuMheWysdFe-MYszSn-Z5cfGUaCQmtDzAocoW2PrGSSnlOXrv0KCozzVftbfzk&pcsa=false&nb=0	false	unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=4e0a3q8ffgo0&aqid=_tL5ZqOkBcvJxdwP0PeRkAM&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1363&adbw=530&adbah=470%2C439%2C452&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=678245571&csala=23%7C0%7C2077%7C14%7C278&lle=0&ifv=1&hpt=1	false	unknown
http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Semaglutide+Henry&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpj4R7Nz9MtgVxMM3LZXthcmrpMZO2hM9CJdYTOBTZlOqOWIKeyAnZ3l9wmC7ZfZQ9oOSTTbuMheWysdFe-MYszSn-Z5cfGUaCQmtDzAocoW2PrGSSnlOXrv0KCozzVftbfzk&pcsa=false&nb=0&nm=2	false	unknown
http://finance.cocoricopatisserie.co.uk/ls.php?t=66f9d313&token=09ee88ccb356a23e0f55db14342af30f85bdd5a2	false	unknown
http://finance.cocoricopatisserie.co.uk/track.php?domain=cocoricopatisserie.co.uk&toggle=browserjs&uid=MTcyNzY0ODUwNy43NjU2OjliOGVlNDhhZjhkY2FiNjdiNjM0OWIyOGU5OWFlOTZhOTAyNDQ3OTQxMzExNTNmMDhmODJjM2ZiNTFjNmIzYjc6NjZmOWQyZmJiYWU4Yw%3D%3D	false	unknown
http://finance.cocoricopatisserie.co.uk/track.php?domain=cocoricopatisserie.co.uk&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzY0ODU0My40MzU5OmMyZDdmMzE5YzBiMWJhMjA2NGIxOTNlZWYyZmQ4YjA2YjBlMWQ2YmQ2ZmZkOGUyZDMyMGUwYzY5OTI0MDBiZWQ6NjZmOWQzMWY2YTZjOQ%3D%3D	false	unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=b870vfrkd2ub&aqid=INP5ZoLSObSViM0P97GDyAw&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1453&adbw=530&adbah=506%2C475%2C470&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=678245571&csala=20%7C0%7C1257%7C3%7C225&lle=0&ifv=1&hpt=1	false	unknown
http://finance.cocoricopatisserie.co.uk/track.php?domain=cocoricopatisserie.co.uk&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzY0ODUzNS40NjQ4OjRlZmNjZDYyZTg2Yjg2ODM1MzA1NGVmOTk4MTIxZDM1YjUyZjg0M2M3NzBhMzBjYzUzNzA5YzRiN2I3MmUxNzA6NjZmOWQzMTc3MTdiOA%3D%3D	false	unknown
https://www.mydomaincontact.com/scripts/select2/select2.css	false	unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=nvn0fzjdojbh&aqid=GdP5ZurdIvjHjuwP96-J8AU&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1453&adbw=530&adbah=475%2C506%2C470&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=678245571&csala=53%7C0%7C1298%7C12%7C756&lle=0&ifv=1&hpt=1	false	unknown
http://finance.cocoricopatisserie.co.uk/ls.php?t=66f9d2e0&token=176e2698125e51a361c995c5480d3514fd06e594	false	unknown
http://finance.cocoricopatisserie.co.uk/track.php?domain=cocoricopatisserie.co.uk&toggle=browserjs&uid=MTcyNzY0ODUzMS4zMDA4OmJkNzczZDU2Y2Y4MmQzOGJiMWI4Y2NhMjNkNTg3ODExZDVmOTMwN2Y5ZTE4YzA1NDQyOTMyZGQ1N2Q3OTBiOGQ6NjZmOWQzMTM0OTZlZQ%3D%3D	false	unknown
http://finance.cocoricopatisserie.co.uk/track.php?domain=cocoricopatisserie.co.uk&toggle=browserjs&uid=MTcyNzY0ODU0My40MzU5OmMyZDdmMzE5YzBiMWJhMjA2NGIxOTNlZWYyZmQ4YjA2YjBlMWQ2YmQ2ZmZkOGUyZDMyMGUwYzY5OTI0MDBiZWQ6NjZmOWQzMWY2YTZjOQ%3D%3D	false	unknown
http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Sesame+Semaglutide&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmcBlLqpj90SqxLU1y28Lnofj6W4YFOJxZRWVqEOBrqx9r8dK_IzyucJYZYAj0HbBY0RxMhD-iUiKatTaQpsIR459EQ14jLNoKoGR9MimrFhhNC0HT5tj7o4Xchb8bXTCSs8XHI4WI_a&pcsa=false&nb=0	false	unknown
https://syndicatedsearch.goog/adsense/domains/caf.js?pac=2	false	unknown
http://finance.cocoricopatisserie.co.uk/track.php?domain=cocoricopatisserie.co.uk&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzY0ODUyMC4xODk6NGRlMzI1MTA1OTE5NmQ5ZjEwYWQwMWNiYjEzM2RlNzdkYTgxZmU2MzkxMjY0OTVhOWMxYTdhMDQxNWRlMDM1Yzo2NmY5ZDMwODJlMjFk	false	unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=mp6scfw4zx6j&aqid=_tL5ZqOkBcvJxdwP0PeRkAM&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1363&adbw=530&adbah=470%2C439%2C452&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=678245571&csala=23%7C0%7C2077%7C14%7C278&lle=0&ifv=1&hpt=1	false	unknown
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff	false	unknown
https://www.mydomaincontact.com/index.php?domain_name=cocoricopatisserie.co.uk	false	unknown
http://finance.cocoricopatisserie.co.uk/track.php?domain=cocoricopatisserie.co.uk&toggle=browserjs&uid=MTcyNzY0ODUzNS40NjQ4OjRlZmNjZDYyZTg2Yjg2ODM1MzA1NGVmOTk4MTIxZDM1YjUyZjg0M2M3NzBhMzBjYzUzNzA5YzRiN2I3MmUxNzA6NjZmOWQzMTc3MTdiOA%3D%3D	false	unknown
http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Sesame+Semaglutide&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmcBlLqpj90SqxLU1y28Lnofj6W4YFOJxZRWVqEOBrqx9r8dK_IzyucJYZYAj0HbBY0RxMhD-iUiKatTaQpsIR459EQ14jLNoKoGR9MimrFhhNC0HT5tj7o4Xchb8bXTCSs8XHI4WI_a&pcsa=false&nb=0&nm=2	false	unknown
http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Eagles+Sphere+Sphere&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpjx58G6o1K7o-viAFkNJUZINzDQYxSL87u9idvmGA6WnLKvG43X1VTpA_tX-JuOD2qRhHKZIbvkkTZQebs3sDLnAIMFHH3E399kjaAqb00X1Isp9zrXzZpzsXWiuakI_FhDM&pcsa=false&nb=0	false	unknown
http://finance.cocoricopatisserie.co.uk/ls.php?t=66f9d2fb&token=ef6bc7c99695dcaf0de157a08fb06e6d0e004596	false	unknown
https://www.mydomaincontact.com/scripts/select2/select2.png	false	unknown
http://finance.cocoricopatisserie.co.uk/ls.php?t=66f9d308&token=26921ed73125027db7ed665b75d22cac5c06430b	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrql5X9O9uS2U0NUEUh7kGs8TtbxKp	chromecache_107.2.dr	false		unknown
http://jquery.org/license	chromecache_165.2.dr, chromecache_103.2.dr	false	URL Reputation: safe	unknown
https://syndicatedsearch.goog	chromecache_126.2.dr, chromecache_170.2.dr, chromecache_131.2.dr, chromecache_169.2.dr	false		unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqm-86K9zHfieAdZE74YiMqe32jan	chromecache_127.2.dr	false		unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqltXJjP_-u3AUCkEgE_9X62Vtp6Y	chromecache_125.2.dr	false		unknown
http://sizzlejs.com/	chromecache_165.2.dr, chromecache_103.2.dr	false	URL Reputation: safe	unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqlSiEFXDknvGKHDOhdlxHaLWswn7	chromecache_97.2.dr	false		unknown
https://www.seattleplasticsurgery.com/	chromecache_143.2.dr	false		unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqk32nTAno2QlGoMDo-aIl2O515cp	chromecache_153.2.dr	false		unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqmhPyQOnox7CQhYdfaFO4jvd6W-T	chromecache_153.2.dr	false		unknown
https://www.ivimhealth.com/	chromecache_125.2.dr, chromecache_127.2.dr, chromecache_153.2.dr, chromecache_143.2.dr	false		unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqnbDV2tUVCR6fLZVAuLvEmPtv__P	chromecache_97.2.dr	false		unknown
http://www.gnu.org/licenses/gpl-2.0.html	chromecache_159.2.dr, chromecache_116.2.dr	false		unknown
http://www.quirksmode.org/css/box.html	chromecache_113.2.dr	false		unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqlL43RXI-oetLkDnhbv5X86uiXjK	chromecache_153.2.dr	false		unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqmM7weWKKN2YBkM6XaQiumum65kQ	chromecache_143.2.dr	false		unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqnCGlZXu_6QlUonXF_gA59ubDFox	chromecache_125.2.dr	false		unknown
https://www.infuzedivbar.com/medical/weight_loss	chromecache_125.2.dr, chromecache_143.2.dr	false		unknown
https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=5	chromecache_126.2.dr, chromecache_170.2.dr, chromecache_131.2.dr, chromecache_169.2.dr	false		unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqlN-7BIdK5npCtymqOALPC0m2RJb	chromecache_125.2.dr	false		unknown
http://www.apache.org/licenses/LICENSE-2.0	chromecache_159.2.dr, chromecache_116.2.dr	false		unknown
https://www.vanityprescribed.com/	chromecache_127.2.dr, chromecache_153.2.dr	false		unknown
https://www.infuzedivbar.com/medical/weightloss	chromecache_127.2.dr, chromecache_153.2.dr	false		unknown
https://www.seatgeek.com/	chromecache_97.2.dr, chromecache_107.2.dr	false		unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqnl3yk0tOQ0qT9q9OQ5qxqKOzCyg	chromecache_143.2.dr	false		unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqlDh0jTFRL_5WO8OAXYHkK2kpcR-	chromecache_127.2.dr	false		unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqnpZnV6b65uqKQaoyqjkZLP-wTiL	chromecache_143.2.dr	false		unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqkQfRmFRF7WAgpHKY4MZIT3pOBV0	chromecache_107.2.dr	false		unknown
https://www.vividseats.com/	chromecache_97.2.dr, chromecache_107.2.dr	false		unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqnCagoFFgk-uY6pO3Jbb0L9BOiUL	chromecache_127.2.dr	false		unknown
http://jquery.com/	chromecache_165.2.dr, chromecache_103.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
216.58.212.164	unknown	United States	15169	GOOGLEUS	false
18.66.121.138	d38psrni17bvxu.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
142.250.185.100	unknown	United States	15169	GOOGLEUS	false
108.128.52.91	www.mydomaincontact.com	United States	16509	AMAZON-02US	false
142.250.185.164	unknown	United States	15169	GOOGLEUS	false
142.250.184.206	unknown	United States	15169	GOOGLEUS	false
142.250.185.110	syndicatedsearch.goog	United States	15169	GOOGLEUS	false
216.58.206.65	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
185.53.177.52	finance.cocoricopatisserie.co.uk	Germany	61969	TEAMINTERNET-ASDE	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false
142.250.184.238	unknown	United States	15169	GOOGLEUS	false
142.250.186.65	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.6
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1522343
Start date and time:	2024-09-30 00:20:21 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 26s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://finance.cocoricopatisserie.co.uk/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@24/155@32/15
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.mydomaincontact.com/index.php?domain_name=cocoricopatisserie.co.uk Browse: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Eagles+Sphere+Sphere&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpjx58G6o1K7o-viAFkNJUZINzDQYxSL87u9idvmGA6WnLKvG43X1VTpA_tX-JuOD2qRhHKZIbvkkTZQebs3sDLnAIMFHH3E399kjaAqb00X1Isp9zrXzZpzsXWiuakI_FhDM&pcsa=false&nb=0 Browse: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Sesame+Semaglutide&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmcBlLqpj90SqxLU1y28Lnofj6W4YFOJxZRWVqEOBrqx9r8dK_IzyucJYZYAj0HbBY0RxMhD-iUiKatTaQpsIR459EQ14jLNoKoGR9MimrFhhNC0HT5tj7o4Xchb8bXTCSs8XHI4WI_a&pcsa=false&nb=0 Browse: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Semaglutide+Henry&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpj4R7Nz9MtgVxMM3LZXthcmrpMZO2hM9CJdYTOBTZlOqOWIKeyAnZ3l9wmC7ZfZQ9oOSTTbuMheWysdFe-MYszSn-Z5cfGUaCQmtDzAocoW2PrGSSnlOXrv0KCozzVftbfzk&pcsa=false&nb=0 Browse: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Eagles+Sphere+Sphere&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpjx58G6o1K7o-viAFkNJUZINzDQYxSL87u9idvmGA6WnLKvG43X1VTpA_tX-JuOD2qRhHKZIbvkkTZQebs3sDLnAIMFHH3E399kjaAqb00X1Isp9zrXzZpzsXWiuakI_FhDM&pcsa=false&nb=0&nm=3 Browse: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Sesame+Semaglutide&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmcBlLqpj90SqxLU1y28Lnofj6W4YFOJxZRWVqEOBrqx9r8dK_IzyucJYZYAj0HbBY0RxMhD-iUiKatTaQpsIR459EQ14jLNoKoGR9MimrFhhNC0HT5tj7o4Xchb8bXTCSs8XHI4WI_a&pcsa=false&nb=0&nm=2 Browse: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Semaglutide+Henry&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpj4R7Nz9MtgVxMM3LZXthcmrpMZO2hM9CJdYTOBTZlOqOWIKeyAnZ3l9wmC7ZfZQ9oOSTTbuMheWysdFe-MYszSn-Z5cfGUaCQmtDzAocoW2PrGSSnlOXrv0KCozzVftbfzk&pcsa=false&nb=0&nm=2

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.23.99, 142.250.186.110, 108.177.15.84, 34.104.35.123, 142.250.185.226, 216.58.206.34, 20.12.23.50, 93.184.221.240, 192.229.221.95, 13.95.31.18, 142.250.185.138, 142.250.184.195, 142.250.181.234, 142.250.186.138, 142.250.185.202, 216.58.206.42, 142.250.185.234, 142.250.186.106, 142.250.185.74, 142.250.186.74, 142.250.184.202, 142.250.185.106, 172.217.16.138, 142.250.186.170, 216.58.212.170, 142.250.185.170, 142.250.184.234, 13.85.23.206, 216.58.212.163, 216.58.206.35
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, partner.googleadservices.com, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, fonts.gstatic.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://finance.cocoricopatisserie.co.uk/

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: http://finance.cocoricopatisserie.co.uk/ Model: jbxai	{ "brand":["Derpibooru"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: http://finance.cocoricopatisserie.co.uk/ Model: jbxai	{ "brand":["x.com"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Log in", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.mydomaincontact.com/index.php?domain_name=cocoricopatisserie.co.uk Model: jbxai	{ "brand":["Derpibooru"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB Model: jbxai	{ "brand":["Derpibooru"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB Model: jbxai	{ "brand":["Derpibooru"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Visit Website", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Visit Website", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Visit Website", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Visit Website", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Sep 29 21:21:20 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9829914686987946
Encrypted:	false
SSDEEP:	48:8eduAjTOAFvfH/idAKZdA19ehwiZUklqehly+3:88j7vp+y
MD5:	46F59A5B649075429002F3958ECC0F17
SHA1:	56E8E82599BA869C39CC5E858CC14A965B0D429E
SHA-256:	5CFC4E52A4162E9F54E5C7B50ED5FE2814D129CB738BDC16DEE2D86EDAE1385F
SHA-512:	CA10742C5B6897B10522CD9E6F3DB0F453769DFD22DEC9637D9AEA2119C5790F97DE6F18E905DB7B7F96C43E71BA3FD838115A31A2928A32CF381FD44B5CF7A4
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,...........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I=Y......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V=Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V=Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V=Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V=Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............i.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Sep 29 21:21:19 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.994858091586329
Encrypted:	false
SSDEEP:	48:87duAjTOAFvfH/idAKZdA1weh/iZUkAQkqehuy+2:8Pj7v79Qny
MD5:	060D0BDCEEF7C1CA1939DB88768C0564
SHA1:	3A2ED9864F0464E9B36EDE3D15AD66A277473BB5
SHA-256:	93C33159686D74DF269954CC974E30479704E96BE7E61549BFC7DE847CA44676
SHA-512:	DAF03C07CDF52520D1834724DA816B02101795CEBAAECBA3AFD9F884B0C7BF7A0E69F81C2A66390D9E8F2ED2B9D8145580B8E555D09B20075DED2DD6211534EC
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....(.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I=Y......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V=Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V=Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V=Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V=Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............i.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.005216364455813
Encrypted:	false
SSDEEP:	48:8x+duAjTOAFsH/idAKZdA14tseh7sFiZUkmgqeh7s4y+BX:8xcj7unSy
MD5:	7F09CC80CDD4E6251CBB5CB15AA9D49D
SHA1:	89C9FA75549806391883B9999EEEB2339F668F83
SHA-256:	CAFAB2EC1BC015D127802A45C89A1EF78796D3E9BE83C605E9FBE15523BD53A7
SHA-512:	8D619FC87106352ED9CD2D428180ADE0669219E5383308080F8E137B74FD38E5AFA63A1F326090BE825F0A53761CE1275769CB2F27E709F0B14E0C0FFE1A7B7B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I=Y......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V=Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V=Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V=Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............i.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Sep 29 21:21:19 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9953395566323575
Encrypted:	false
SSDEEP:	48:8eduAjTOAFvfH/idAKZdA1vehDiZUkwqehqy+R:88j7vYQy
MD5:	D6FF137BC56DBFF1C4842919E2D53FB6
SHA1:	6A61559EB8F615E52C4553D03F3C2EF7E18549AD
SHA-256:	D3C27F154BDAC677D9D46842DDFB3367FA3947F5DA260C2C390ABD72F2F5F8C9
SHA-512:	50CA703BBB9066271D177981066CF9D852CA63E12B12C6FCC44563D0BC3360C57151AE042640124B168C9A9F4C1C118E8E5F2B40208A8BB9AC7AA780D9DC6156
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,...........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I=Y......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V=Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V=Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V=Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V=Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............i.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Sep 29 21:21:20 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.981715698845789
Encrypted:	false
SSDEEP:	48:8cduAjTOAFvfH/idAKZdA1hehBiZUk1W1qehcy+C:8mj7vI98y
MD5:	DDF958362EF7E6D321A911874322C90C
SHA1:	6521A85A584927C6BDC9141A7FD5B941A1B599FF
SHA-256:	99CF4471F60263A20A2AC3992E6E2062D0A588310B9B6F75FFA79EAE62E5394E
SHA-512:	FB053EFCE810505C083B2B255FB75B534BBAF50762AD65D3BDA81E61B2F5965DD0AD48CCEF2AC4954CF6796EBD07EA49B74B68D921873A0E52B6A62ED327D659
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....dU.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I=Y......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V=Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V=Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V=Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V=Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............i.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Sep 29 21:21:19 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9950576765747217
Encrypted:	false
SSDEEP:	48:8sduAjTOAFvfH/idAKZdA1duT+ehOuTbbiZUk5OjqehOuTbSy+yT+:82j7vmT/TbxWOvTbSy7T
MD5:	45512EAADB2662195773E85655F955CC
SHA1:	547A8E338AACAC66D42C6BFFD6D3242BAAC539EA
SHA-256:	4F0E5D2D16077E5D9C9B307CABF78B7C789551A37E1D7F012BFABEDF99D1A3A1
SHA-512:	AFFCBB84EED98F8348CF119AE3B20D4FB070140C78C7417F6E552BCBAFD636719C3546301118A0375ACCE0AB089A294B75DDDC37CCD5012E7FA64934B0958874
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,...........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I=Y......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V=Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V=Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V=Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V=Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............i.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 19323
Category:	downloaded
Size (bytes):	6607
Entropy (8bit):	7.966801238546197
Encrypted:	false
SSDEEP:	192:6sicDH7TKf5CsBf2hNK31Rw/hYfQtUDkjwnwtMm:vXif2TT/680wzR
MD5:	C3A4F258859527E686DA13B7B91DCBB3
SHA1:	358E68E2A23FEC9AF65C3895C165B5FB78862BE4
SHA-256:	7022E26B0E66A3AB10933A47F02E62DC1CB70F9599B786F02F54984D971E4625
SHA-512:	2F7621AFE8C95F534EA7D65BD6C88C4F4FBCA7A9DD734EF042B3B961AFAA0C865A302A1333ED40D351AD5B0D9904B034A1D225DD46FC2E7EE8EB9B2DEAA20B48
Malicious:	false
Reputation:	low
URL:	http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Semaglutide+Henry&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpj4R7Nz9MtgVxMM3LZXthcmrpMZO2hM9CJdYTOBTZlOqOWIKeyAnZ3l9wmC7ZfZQ9oOSTTbuMheWysdFe-MYszSn-Z5cfGUaCQmtDzAocoW2PrGSSnlOXrv0KCozzVftbfzk&pcsa=false&nb=0&nm=2
Preview:	...........\.w.J.......)..;...R.Z.j+.R.oWH.H..'..z....o.L...G.....%s.g...4._u..O.a0._l?.?...zN7{.k.FlQO.^.f........h7.NON...O...S..I.........S\|.........:....q\|...{....].3jO...7.....ym..x..:..o.}8....a.}{..T=\|..6.....drp.W.vpQ...q...Qe.._z5{..>\|8..W..?~V..X.\...N?.-..x..M...\w.......o...z...^Oi.....0.&.Ba6..g............l...S.I...n.....\|.....&9.....^.N.. .YLXJ3.S=..yP H.1.=...i..... G..z..b.......e....-...CV..+.t;.......=....7....F..+....5\.2..X..<...7?.=/.~.!..}=....13-......?....e....=.6...vg._....W.A/S..{..7.Er.m...Y.a ...XM+.M..a{...9./F....i..d.Z&.iZ........].V5........EM................3MO..7.w`2P..u.r. ..........\|.m....h.->n&7K..P...^....o.K&w..S...T,f....q[!.mO..........p\|Ow....<}!....h.2H..t.`V.'..X....\|.7lwj.=.8.......Y.......'. ..yl.. ...O\...t..W, ..z...(...*.s....i..k[&..2.-..`)l..Dt.w)v........G.w.e..J^$.h_#1?U=.<?P.I\|...y.k.....?..EM.6k..d..Z.\..-....c..B...l-.37q}heR..c.r.....r.}..J.zhI: ......?U...$e

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 19323
Category:	downloaded
Size (bytes):	6749
Entropy (8bit):	7.968430268787448
Encrypted:	false
SSDEEP:	96:/Zp30XsVysp+ZA701W199wuiHfeR7yY69B8tReNzNwqyHDQt3H+EfCn/872fac3p:/T308+2WWVwuGfSX69B8tRkgy3572fZ
MD5:	F354FA1FDD648F69EFC427EECF988CF8
SHA1:	D856A4211161E1EF4CEB68D51F89C8FC9E24DFE8
SHA-256:	32D60D3141464E47F77A8FD9B36A9095540E0BD6DA8A54B98D473BA218B0B8F9
SHA-512:	4DC7F0D08FB4CA7D667D1A7B21643FC08583D07B03B1EE5B25C04824834E0F3592C0DF2FC77842BAF5BFEF379273425F322FC845C1A00BE25E5A138E1F30FEEB
Malicious:	false
Reputation:	low
URL:	http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Sesame+Semaglutide&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmcBlLqpj90SqxLU1y28Lnofj6W4YFOJxZRWVqEOBrqx9r8dK_IzyucJYZYAj0HbBY0RxMhD-iUiKatTaQpsIR459EQ14jLNoKoGR9MimrFhhNC0HT5tj7o4Xchb8bXTCSs8XHI4WI_a&pcsa=false&nb=0&nm=2
Preview:	...........\k[....."...<.[.(bi..mu.V....'$..B.N.\...~~kf....v?../.V%sY.f..I_.h\...?.)}.d..}E..C.ft,G....h..N.....8...'.U.>;9..7>N....................g......at..7.a.{.=l..a....].k...\_.........m.hT....?.r.>=..k...F._...?...;...R.v....8..:.^.L.t..U~./..;...v?.....Cyq.NU..~99;.J.....ld.^-...q5..N..i1..ztt...=....Z.........^....p.8....O..c...3...%.]<..>..9.t..}..._...L%.......%.L6.;...>5.._3.....H+.m..fe<].XMM+^.5.a.w2]..N..7}.....qM..k..y.5YVw.......M..+.[L.1..j.Ow...K.k=ZX&.....q,c..Y.T......q.....i\|...f.HF...>...Es...ji<S4...4....]1..htU)..3.2...{..&%.....G.p.Hs{&..+..w.E..6#....)Z.4.1...........qA.&.n.8.0..&... '.B+..qS.Y....+VU.j.yb..f.d\|.?\9e..\|>-.p...r>v"\|.e..".\>:...l...=W..5:.>....R.V......smS=.<.&Y.r&F....6.s~....#...=s4.Xvl......L.3....8O..~....G[.(....2.........9.ip....G.V..6;.N....`...#..P.\...b.....S.]....6Y.~d.<...@....[..p..e.x2....\.....(......Bl..d....I...:^...<+...T..S9...w@B.t..ia.Q}(z.I.

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65168)
Category:	downloaded
Size (bytes):	85260
Entropy (8bit):	5.370957781359195
Encrypted:	false
SSDEEP:	1536:pKgIKzw+DiSMW4QQtIyY/UFHVsBm8r7e7dyIClTwYA17jaO8lfBBcXq+X4mhEEw7:9j3MIoF1kLHfTEI8zvvM
MD5:	B04A3BCCD23DDEB7982143707A63CCF9
SHA1:	4A5DC1389AAD050A44EE5E81408238A317AB3413
SHA-256:	764B9E9F3AD386AAA5CDEAE9368353994DE61C0BEDE087C8F7E3579CB443DE3B
SHA-512:	3F844A06577168DE05B187E727DD07B9A20CF0453CD00E28AEFDEEFCF783DC680EBD941ECD79A53AB26510AF1F855984C2DDC77565EF0DB11D4BA6E46F59D748
Malicious:	false
Reputation:	low
URL:	https://www.mydomaincontact.com/scripts/jquery.js
Preview:	/!. jQuery JavaScript Library v1.5.1. * http://jquery.com/. . Copyright 2011, John Resig. * Dual licensed under the MIT or GPL Version 2 licenses.. * http://jquery.org/license. . Includes Sizzle.js. * http://sizzlejs.com/. * Copyright 2011, The Dojo Foundation. * Released under the MIT, BSD, and GPL Licenses.. . Date: Wed Feb 23 13:55:29 2011 -0500. */.(function(a,b){function cg(a){return d.isWindow(a)?a:a.nodeType===9?a.defaultView\|\|a.parentWindow:!1}function cd(a){if(!bZ[a]){var b=d("<"+a+">").appendTo("body"),c=b.css("display");b.remove();if(c==="none"\|\|c==="")c="block";bZ[a]=c}return bZ[a]}function cc(a,b){var c={};d.each(cb.concat.apply([],cb.slice(0,b)),function(){c[this]=a});return c}function bY(){try{return new a.ActiveXObject("Microsoft.XMLHTTP")}catch(b){}}function bX(){try{return new a.XMLHttpRequest}catch(b){}}function bW(){d(a).unload(function(){for(var a in bU)bU[a](0,1)})}function bQ(a,c){a.dataFilter&&(c=a.dataFilter(c,a.dataType));var e=a.dataTypes,f={},g,h

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 40, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	613
Entropy (8bit):	7.624191679264559
Encrypted:	false
SSDEEP:	12:6v/7svvOiEe0IOQEjoZzIAOLhymOh+T+qFYKRacX3Y0OJxAG0f7:FvOC0I/EjizPOlZ3HFYMR3T
MD5:	2CA61B76E22053571DD8611E5AAC4900
SHA1:	2D350341A645AD33AB5604ACA16C05F22A83FF51
SHA-256:	D6B5D8D83DBC18FB8D77C8761D331CD9E5123C9684950BAB0406E98A24AC5AE8
SHA-512:	89B2BCBCE382E8B7C4D27BAA07ABED6F1D8D0F5A8F29B62A98F05FB1DE46D5E40F4C8146047614E92EFDCD235B80B842F8B08E9DA36A5FDB376E83F9EE2B09EA
Malicious:	false
Reputation:	low
URL:	https://www.mydomaincontact.com/scripts/select2/select2.png
Preview:	.PNG........IHDR...<...(............,IDATx....K.a....J....b](...v.d...<....P....!R.q.T..H.#..G..y.R......Ht0L.>....9.,m)..y.u..}.;....)I.J..,...Q(...X....V..&...Oh.F.!.{.n.{....,...%]...Gc..5x.>@.3...&....2.....%..C..,b.E...u.9=T6.7..)...E......".....lo.y[.e..C....&... D....m.#.......Q..j.......v@..Te.M.......;.....G9...b...}.1.....T...: .hC.f <t.;LT..A........N+....^@...no-../..F.e0aG.3X.....1.(....J.B..[..lgp...?..$8.N....Z4....5......d^..e0aw!..2nA.`.r.."...o.F...A...kW .<..`..R..~...~..J<....Sp..)..:tB...}.2E\|.L.........`.W.W.1....{!s....-..s.Z..[....P.o\|.}.q.......IEND.B`.

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://finance.cocoricopatisserie.co.uk/track.php?domain=cocoricopatisserie.co.uk&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzY0ODUyMC4xODk6NGRlMzI1MTA1OTE5NmQ5ZjEwYWQwMWNiYjEzM2RlNzdkYTgxZmU2MzkxMjY0OTVhOWMxYTdhMDQxNWRlMDM1Yzo2NmY5ZDMwODJlMjFk
Preview:	....................

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (402), with no line terminators
Category:	downloaded
Size (bytes):	402
Entropy (8bit):	5.491357538038391
Encrypted:	false
SSDEEP:	6:xWzPEPDTbmj3mHGLX/hSV20VPEMBb7M+dmjJmj3mHGOtogvEnV20VPEMBbAen:xWMD+j2mLX/hSzGMd7H2Ij2mWozGMd7n
MD5:	174EA7E38A7BED933C82CF5BC7D39989
SHA1:	E3026B9C4AB1D9FE8DF02B5835D36CBBA8F39D64
SHA-256:	69A2E5EF95CBFC4D128DDF513FF9D4A65A94625F097E6D9AB09F160792580CEC
SHA-512:	6573D2538B3DFE1099F6917D9C2BC3209EB51DE1F4F1A4763CEC164864499DD27BAA1831069977BF1286543EA6D0E76DA468E2F7E609F091F68E78F42150BD15
Malicious:	false
Reputation:	low
URL:	https://partner.googleadservices.com/gampad/cookie.js?domain=finance.cocoricopatisserie.co.uk&client=dp-teaminternet09_3ph&product=SAS&callback=__sasCookie&cookie_types=v1%2Cv2
Preview:	__sasCookie({"_cookies_":[{"_value_":"ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw","_expires_":1761344483,"_path_":"/","_domain_":"cocoricopatisserie.co.uk","_version_":1},{"_value_":"UID=00000efec9b53d65:T=1727648483:RT=1727648483:S=ALNI_MZHz9tCWg7oxMA0elh4RtGJa4QKQQ","_expires_":1761344483,"_path_":"/","_domain_":"cocoricopatisserie.co.uk","_version_":2}]});

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (25675)
Category:	downloaded
Size (bytes):	37133
Entropy (8bit):	5.401602506340563
Encrypted:	false
SSDEEP:	384:2ni0XP/zfuiS4u/uHeDC84F4Evz4JmxY6everV2ebjwy:2iIP/z9ogqyjvzSmW6ueV2zy
MD5:	A8A567B0227F5B8726A569B41B339F4A
SHA1:	3789EE59E1D3F9E33A4A3203EA01006FCD16EFA7
SHA-256:	668DC68FB33EC22EA8DF9E6A0A6B09959D1E5FDF3FF101776E8E45845742F009
SHA-512:	5F1BEC081F8A23CF4A17F66FD13CA298ABE93A4141CE40DB967AC1EC8C8C663F09BCC25AB8937C675BBD60CF238F940E27EF02513DD000BE744734FC1DF0848F
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&sct=ID%3D4f20d6f152843af6%3AT%3D1727648483%3ART%3D1727648483%3AS%3DALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw&sc_status=6&hl=en&rpbu=http%3A%2F%2Ffinance.cocoricopatisserie.co.uk%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NTA3Ljc4OTF8ZmQxYThhMzY3NTQzMDAwMWQ3NmU2NzVkMGZmMTFkZGI4OTJlNTdhYnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Eagles%20Sphere%20Sphere&afdt=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpjx58G6o1K7o-viAFkNJUZINzDQYxSL87u9idvmGA6WnLKvG43X1VTpA_tX-JuOD2qRhHKZIbvkkTZQebs3sDLnAIMFHH3E399kjaAqb00X1Isp9zrXzZpzsXWiuakI_FhDM&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266%2C72717107&format=n3&ad=n3&nocache=7581727648507529&num=0&output=afd_ads&domain_name=finance.cocoricopatisserie.co.uk&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1727648507532&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=791&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=http%3A%2F%2Ffinance.cocoricopatisserie.co.uk%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8%26query%3DEagles%2BSphere%2BSphere%26afdToken%3DChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpjx58G6o1K7o-viAFkNJUZINzDQYxSL87u9idvmGA6WnLKvG43X1VTpA_tX-JuOD2qRhHKZIbvkkTZQebs3sDLnAIMFHH3E399kjaAqb00X1Isp9zrXzZpzsXWiuakI_FhDM%26pcsa%3Dfalse%26nb%3D0
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://finance.cocoricopatisserie.co.uk/track.php?domain=cocoricopatisserie.co.uk&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzY0ODUzNS40NjQ4OjRlZmNjZDYyZTg2Yjg2ODM1MzA1NGVmOTk4MTIxZDM1YjUyZjg0M2M3NzBhMzBjYzUzNzA5YzRiN2I3MmUxNzA6NjZmOWQzMTc3MTdiOA%3D%3D
Preview:	....................

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	19226
Entropy (8bit):	4.874083143056483
Encrypted:	false
SSDEEP:	192:Gui2TWIjfVST5V889hD+qS76Pq/oio1+44e8ePYFCcWlbTh+DQ7Fpr:tplC5Vh93S7NQwFCwQ7b
MD5:	2F85AD713B0814F8FB08A8ED985341F6
SHA1:	4107AD786D6453B57F4E8EBFE5FBB1CAE4E4E883
SHA-256:	C3AAA5487A549B0A206ABADE1658C0C39C17E32E637930FE49F9E1D04104C306
SHA-512:	9517BFC0C1AB5EF5C3C3A339C352758047661FB4AC9CB121B4298B3FB4EB87731ECE953B6134FF0286C12DCEBE3D6E230E1A8C40C50781DAED4DFCC9BCB16BEA
Malicious:	false
Reputation:	low
URL:	https://www.mydomaincontact.com/scripts/select2/select2.css
Preview:	/.Version: 3.3.2 Timestamp: Mon Mar 25 12:14:18 PDT 2013./..select2-container {. position: relative;. display: inline-block;. /* inline-block for ie7 /. zoom: 1;. display: inline;. vertical-align: middle;.}...select2-container,..select2-drop,..select2-search,..select2-search input{. /. Force border-box so that % widths fit the parent. container without overlap because of margin/padding... More Info : http://www.quirksmode.org/css/box.html. /. -webkit-box-sizing: border-box; /* webkit /. -khtml-box-sizing: border-box; / konqueror /. -moz-box-sizing: border-box; / firefox /. -ms-box-sizing: border-box; / ie /. box-sizing: border-box; / css3 */.}...select2-container .select2-choice {. display: block;. height: 26px;. padding: 0 0 0 8px;. overflow: hidden;. position: relative;.. border: 1px solid #aaa;. white-space: nowrap;. line-height: 26px;. color: #444;. text-decoration: none;.. -webkit-bord

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://finance.cocoricopatisserie.co.uk/track.php?domain=cocoricopatisserie.co.uk&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzY0ODUzMS4zMDA4OmJkNzczZDU2Y2Y4MmQzOGJiMWI4Y2NhMjNkNTg3ODExZDVmOTMwN2Y5ZTE4YzA1NDQyOTMyZGQ1N2Q3OTBiOGQ6NjZmOWQzMTM0OTZlZQ%3D%3D
Preview:	....................

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32041)
Category:	dropped
Size (bytes):	41867
Entropy (8bit):	5.139963739750686
Encrypted:	false
SSDEEP:	768:7JgANQPl//TgGMg4/+gqQWXAnpCZEQbE1WRdZfnKMuVevvr:7J01Tg+xhwsZEsE1W3ZfRuVevT
MD5:	F4B4F7EC0C9C4D1401993B2CF8C1DC88
SHA1:	A1B00107E47786E175117AD1654389B48DEC3059
SHA-256:	6B6C6918ABBFF3B44705AB10617401964194CAA770DE984A087FFB85588FE13E
SHA-512:	D93964ED3A6EDB822DF6858470D058BEF7087B3DBBDBCFAA48E8124FD9B69E1FBA9E6C05A05E2B900B706FE284CA2099046B47C5719C60FC659AE808E9224F0A
Malicious:	false
Reputation:	low
Preview:	/.Copyright 2012 Igor Vaynberg..Version: 3.3.2 Timestamp: Mon Mar 25 12:14:18 PDT 2013..This software is licensed under the Apache License, Version 2.0 (the "Apache License") or the GNU.General Public License version 2 (the "GPL License"). You may choose either license to govern your.use of this software only upon the condition that you accept all of the terms of either the Apache.License or the GPL License...You may obtain a copy of the Apache License and the GPL License at:..http://www.apache.org/licenses/LICENSE-2.0.http://www.gnu.org/licenses/gpl-2.0.html..Unless required by applicable law or agreed to in writing, software distributed under the Apache License.or the GPL Licesnse is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,.either express or implied. See the Apache License and the GPL License for the specific language governing.permissions and limitations under the Apache License and the GPL License../.(function(a){a.fn.each2===void 0&&a.fn.ext

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://finance.cocoricopatisserie.co.uk/track.php?domain=cocoricopatisserie.co.uk&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzY0ODUwNy43NjU2OjliOGVlNDhhZjhkY2FiNjdiNjM0OWIyOGU5OWFlOTZhOTAyNDQ3OTQxMzExNTNmMDhmODJjM2ZiNTFjNmIzYjc6NjZmOWQyZmJiYWU4Yw%3D%3D
Preview:	....................

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	2421
Entropy (8bit):	4.370448549978702
Encrypted:	false
SSDEEP:	48:NTKG+zF59LHXeccv25U4g5dtFfMqvypShod4bVwPJ/B:UGQF5xXeO5Ng5b9MqvypShowOB/B
MD5:	A0FE7E3DDFD6C99FAA882D3E34249AFC
SHA1:	F075F7DFD190D85C6B90170F55A790700E0D958D
SHA-256:	33C4474DD73BF42D1BEA3A5B81EB2F784A251FF43031FE89FF729E98EBC1867C
SHA-512:	E3BFB96B37F4E9D54E38F7D81A7A1136A835069A0C5EF237BEA9EA373257EA7AA0190C32F37601764FF6DF6B37D201AD53FE74034CE89712EF0116699884DE2C
Malicious:	false
Reputation:	low
Preview:	$(document).ready(function() {. $('input.inputtext:first').focus();....// -- initiate sale or send offer..$("input.submit").click(function(e) {...e.preventDefault();...$(this).addClass("spinner");...$(".inputError").removeClass("inputError");.. // -- check required fields. $("input.required, textarea.required").each(function() {. if (!$(this).val()) {. errorOnField($(this));. } else if ($(this).hasClass("textarea") && $(this).val().length < 10) {. errorOnField($(this));. } else if ($(this).is(':checkbox') && !$(this).is(':checked')) {. errorOnField($(this));. }. });.. // -- check recaptcha. if ($("div.g-recaptcha").length == 1 && !grecaptcha.getResponse()) {. errorOnField($("div.captcha"));. }.. if ($(".inputError").length > 0) {. $(this).removeClass("spinner");. } else {. var domain = $("input[name='domain'

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2421
Entropy (8bit):	4.370448549978702
Encrypted:	false
SSDEEP:	48:NTKG+zF59LHXeccv25U4g5dtFfMqvypShod4bVwPJ/B:UGQF5xXeO5Ng5b9MqvypShowOB/B
MD5:	A0FE7E3DDFD6C99FAA882D3E34249AFC
SHA1:	F075F7DFD190D85C6B90170F55A790700E0D958D
SHA-256:	33C4474DD73BF42D1BEA3A5B81EB2F784A251FF43031FE89FF729E98EBC1867C
SHA-512:	E3BFB96B37F4E9D54E38F7D81A7A1136A835069A0C5EF237BEA9EA373257EA7AA0190C32F37601764FF6DF6B37D201AD53FE74034CE89712EF0116699884DE2C
Malicious:	false
Reputation:	low
URL:	https://www.mydomaincontact.com/forms/script.js
Preview:	$(document).ready(function() {. $('input.inputtext:first').focus();....// -- initiate sale or send offer..$("input.submit").click(function(e) {...e.preventDefault();...$(this).addClass("spinner");...$(".inputError").removeClass("inputError");.. // -- check required fields. $("input.required, textarea.required").each(function() {. if (!$(this).val()) {. errorOnField($(this));. } else if ($(this).hasClass("textarea") && $(this).val().length < 10) {. errorOnField($(this));. } else if ($(this).is(':checkbox') && !$(this).is(':checked')) {. errorOnField($(this));. }. });.. // -- check recaptcha. if ($("div.g-recaptcha").length == 1 && !grecaptcha.getResponse()) {. errorOnField($("div.captcha"));. }.. if ($(".inputError").length > 0) {. $(this).removeClass("spinner");. } else {. var domain = $("input[name='domain'

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 19325
Category:	downloaded
Size (bytes):	6667
Entropy (8bit):	7.972271790668353
Encrypted:	false
SSDEEP:	192:up9KCjVTIksYtqd4f1bWSBlmh3us8TMRIZ8E2k:uDKCddptC4f1bWSBlmdu9QI3
MD5:	E2EC50DA5E6F47ECB1E363512FBAC733
SHA1:	3A8D5C230292939B94A9AACB7F0650562D50BE32
SHA-256:	397E9A5956ACC89AEF314B807BE6DC4ABB71EAAFEC50762C3BAF629B57BEEE1E
SHA-512:	C59607AF6D86AB1D4192B0C368F4989789D67F07EAF99584699D21778E8E794A96F09D91432EB73BE0AF781B0F91A3DAEAF7DD06C629E38DDBBABEC3AB5E6966
Malicious:	false
Reputation:	low
URL:	http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Eagles+Sphere+Sphere&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpjx58G6o1K7o-viAFkNJUZINzDQYxSL87u9idvmGA6WnLKvG43X1VTpA_tX-JuOD2qRhHKZIbvkkTZQebs3sDLnAIMFHH3E399kjaAqb00X1Isp9zrXzZpzsXWiuakI_FhDM&pcsa=false&nb=0&nm=3
Preview:	...........\{s.H.......5...ac.....G..c..R9......+....w._...".l%.uu..y.....G..E..].su.....f.5}(...U.6..E=.\|?.5.;......Qk.]..._.5nfG......N..O.w.......o..O.....u5..4...Q.C.8.F........5......u..{.q......}v..P..;....]...=....8.w.....W....8.....B}..{...........i........v...]..`t.........>..v^y......z=......C..r..l.....3.....rs.GB1UkPO0+A.b..f[...1.T..d.S.xg[...L{1a.E.O....^. ..Pu\..^?SM..,u..G..&.......u.hh,...a.....WSMV/..w...(.....-;......h.f;.fOT.p]..,.....uN.......-L...n....9.o.....M,..^~..z....L....l.vj.3..i..=..D..j...}.`..>(VS...\Q.l..R-7C...!..5....E.D.u..`....R.........c...X3..S....2...9.<.~..LQc.......T.Em......0.u..i...xbb...9).Za..............#s......p..C...i...~......0.h........jY..8.B..S....Ae..1S.\N/U'.c.....\|..L{....8k1/....9.Y...5...e'. ..8l.T/...O\.....W, ..z.E..(....=...i..m.:..".-..`..n.3..$.R..6.].;r9....e/.K^ .h_#1?U5.7...k...C..i.1.e.....T.5...+....0..tQ...8..=.....13..V&e ..0.+.xyR.?(.....................C..

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14892, version 1.0
Category:	downloaded
Size (bytes):	14892
Entropy (8bit):	7.98489201092774
Encrypted:	false
SSDEEP:	384:LKrbeS3uuEGg7o6yDdWa/TQcNc+rAsmnsTJ39cUZi:LKneSe4/6yDFU6rAGJZE
MD5:	9EC6DEAF6BADA919E20B98F9F7B718B1
SHA1:	501D36403AD8205E4644532600019ECB10F5CB0A
SHA-256:	7B348B30EA1FE43857E68FC462C29E5C6E63C97666AF75135C4396A272E54762
SHA-512:	03849431CEF204A1584FFE6F23DBE86730AFD076146AB3D1855B9C3402168A97FAA8A529E69FAE45EA24CFF7110C2930CB4744162BA0ED95D95600F6E777B322
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
Preview:	wOF2......:,.......\|..9..........................n..B....`..b...L.4..d..6.$..D. ..f..4..v%..........D..dd.do......:d..M....E.&..J..G....3.Mxp....i....V..u$.[O.;MU.:j.?..{+/<....s....^[..d.d.....t A....`..z....IN^.......2......mY.kF...\...UYU..........$.O=5..2q..L.2.1.c.....`x~n=.'Ur.66V.f]./..L1..P..<.0.<.8.....Z/.+.H....y..F....h5....V.j.....l..O#.:-Q....9g....:..?..8v];u,O..'....c.\r......].&w.....%@..Z.^....$.,dJ....W.{.....h8}4..S/.sZ...f."$..`a.$Mb.....;.W.."..y.H.<.g.......oNS..MO....X.%.8..y.\...ly..w..?-.~.o.ZZ~G.....B.....@...._....g.fF_...d-...aA_..#k.I.....x...P.}z..JQ&E........).P\|."g.#.)Q.T...}.PD.T+<}c+.\|\|0...2.F..hD.X.J.O.eJ:.%ZW.m.K.Jd..c.7.....T.cr.2....DD.........2..y..?/g...... ={..c /.....X.0.F.F.PX.P..!..K..K.....i.%....B.."...A....F.........4..........S........z$`.T..h...E..........._%=..).)......x)...A.J..K...?.V.......w.Y}..N.....}..>.......%.f.O..o.{..=wz.e_&.O\..*..Q..c.'...X&.1wS.R..AY...G.....Q.f...z..E..u8&V

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1500 x 600, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	11375
Entropy (8bit):	7.645494653990172
Encrypted:	false
SSDEEP:	192:Wg3JLNIdFb540f7mqTiLHrBjcCTN1MbaJD/RBse6ogkORdLv2Ha/:vD4N54IsHVjdN1tD7lODL/
MD5:	0CB2E5165DC9324EB462199F04E1FFA9
SHA1:	9E0F89847EC8A98D98A6020BC5C4ED32B7A48BF8
SHA-256:	67DFF0AAD873050F12609885F2264417CCDD0D438311000A704C89F0865F7865
SHA-512:	7A285C4A87B9F9093B7BA720D8FE08E0AD7E2EBDE9EF8C8D11B70AFA08245AF8F8A7281C7B3FBE8BAD21C3AFDE4F32634D3BD416822892AA47BA82C12F4B8191
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......X.....Om......tEXtSoftware.Adobe ImageReadyq.e<....PLTE......cdtIK^IK]IK\03IHK_acsceubdtcet..0=@SHK]IL]HK\MPbNQbORc.....0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes..-..0. 5.!6."7.#8."6.$9 %:!&;"'<"';$)>#(<%?$)=&+@%>',A&+?(-B).C(-A).B/C+0D,1E05I15G<@R=ASIM_HL]KO`HL\MQbaeu.....-../.....0../.....0../..1..1..2..3..4. 5.!6.#8.$9.%: &;"':$)<&+>',?(-@).A/B+0C,1D/A-2E.3F/4G05H16I/4F05G38K6;N49K;@S;@R<ASGL^bfuaetbft.....0.!5."6.#7.$8.%9 &:!';"(<!':#)=#)<$=&,@&,?+1E)/B06IGL]GL\HM]bfs..-.....0..1. 4.!5."6.#7.$8 '< ';*0B.4F06H06G..-..0.!5 (< (;...................................................................................................................................................................................................................................................t....tRNS..............................................................................................................................................

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6884
Entropy (8bit):	5.51529394758214
Encrypted:	false
SSDEEP:	192:mkv2kHkOki3tkyk2YkbS0lQB3JGSCNWAP333RaOZ:mk2YlJtz8fzha1
MD5:	6CFE913CB732DFF779F3B703AE6B0C55
SHA1:	B43734FB769B83074AF46E4DCA2177832E09AB36
SHA-256:	B8E3079C72BE18C5A86E197CB4E5E39EA40770EA43A47EBB2B31A60F54FFAFB5
SHA-512:	AB4290A4C932D57042AFC7AE9A41F46FEA3B48E5D5658492639E3F8777EBD241475B0886742C0B61154F930929F48930573DF99D88179B104BEE6998A2E3A743
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Source+Sans+Pro:400,400i\|Source+Serif+Pro:600&subset=latin-ext"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Source Sans Pro';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7qsDJT9g.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Source Sans Pro';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7jsDJT9g.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Source Sans Pro';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7rsDJT9g.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Source Sans Pro';. font-style: italic;. font-weight: 400;. src: url(https://fonts

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 19321
Category:	downloaded
Size (bytes):	6594
Entropy (8bit):	7.969480999368877
Encrypted:	false
SSDEEP:	192:wTSATjgS1Ht/6eAEeASHnh4tQb+FfBEZpXB1N5hdTJmx:wTSATvmee/HnhYQiFZEZfRhddmx
MD5:	CBDE0DC305682D7D0009AB4DE008EB14
SHA1:	8484F0AC942CA31E5758C066E2498EFD998E93A1
SHA-256:	EC683F29B3F847A43CC611AF1CD187909026BF98D00B6C9796B29831868FE953
SHA-512:	66B3F67E6DD20B6C0E9BB420E9DE56CA0C28E710615BFCE4B18175DDE4A15BB5126DA22AC449E938D183E232FF631217B693D090970C86A4A52BC5CD1D9703C9
Malicious:	false
Reputation:	low
URL:	http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Sesame+Semaglutide&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmcBlLqpj90SqxLU1y28Lnofj6W4YFOJxZRWVqEOBrqx9r8dK_IzyucJYZYAj0HbBY0RxMhD-iUiKatTaQpsIR459EQ14jLNoKoGR9MimrFhhNC0HT5tj7o4Xchb8bXTCSs8XHI4WI_a&pcsa=false&nb=0
Preview:	...........\.[......EJ.-..;xCi_,......K..>!. ..v.........I.@.n....h.0.5k.....Y..u...6.F...#...z..t.k..p...T..t..9{.....v........6......?'.7'..ON.W..}..wr....8.G.....0...c.s..13...F.........v.~.{.a.cXg......}ig.ucz.h\..wCo..p2.=....o..~........a.7,._..o>.n.v.L.]......3.]..f......Rc....[ys]l_.hL...6.._O..`\+...i~Z.^.P:88(..)..~=..Q....M._G#.. \0.?'.C=..u.....\|.R.!>.S.....t.....YP....~...r.....,6..^.L.Zf0....2X...j.c..n.\|C.Y.....g9.\..zVPw..v`.6{i...Y.;.....g....'......M....m...i...ox.o.....l,..\<.u].70.j.q..k.^M...L1...C.L....w.g...h.b5.T..4....-..s.oO..0.]....L..u..>..I+j;.[tqZ..b4x.{}.k.5}..b.c.rL6#...O..4=a[.....@UP.....x ..P.l.v..G&.._..R..6....,QX@...jzm.>0/.Y,....WNY=.R...?8.M..w]./T.0 2....].q.w....\...... .gg..Y....c.....I....@..B0`#...g..;...m..;....1..x(<q.$..._....w...C.'..z.\...w...w..m.\.........jg..I......v.r...>..b(y...}...T.\|...@.&..+..i.0...fZ....5..5+&.9.h.r;;..Q.8........1sc.V&e ..0.+.x~..wP../"^.S.-I.$TAO.Y6...C..L

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (15599)
Category:	downloaded
Size (bytes):	35428
Entropy (8bit):	5.327897648075434
Encrypted:	false
SSDEEP:	384:2ni0XP/zfuiS4u/uHeDCGnYbmrI8aRorormAjiggrFrwN:2iIP/z9ogEnrPaAAjRtN
MD5:	8DA46215EF8F3D39E36DC04A40801A79
SHA1:	81475A2C9A1B5A3C24AB2B1A8AD6F479F7809599
SHA-256:	7E2CB61E27F298BB57FF573A25CB01B2DE62FAE34015876C3D46F777C95D3EBD
SHA-512:	AF7831D75BF8FB64753CFF3FDB1CD19BBADA21D303C3824C667EFD48236B02FE421E442BEF2E8AAC327118577C69041680879DFAA1B4CA54817CACDF58DFFCB6
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&sct=ID%3D4f20d6f152843af6%3AT%3D1727648483%3ART%3D1727648483%3AS%3DALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw&sc_status=6&hl=en&rpbu=http%3A%2F%2Ffinance.cocoricopatisserie.co.uk%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NTQzLjQ1OXw2NDIyZTI5ZDFiNWFjMmEzM2EyZTI1ODFhNTUxNmRhOGE3MWFhZTFjfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHx8fDB8MHx8MHx8fDB8MHxXMTA9fHwxfFcxMD18MTc2ZTI2OTgxMjVlNTFhMzYxYzk5NWM1NDgwZDM1MTRmZDA2ZTU5NHwwfGRwLXRlYW1pbnRlcm5ldDA5XzNwaHwwfDB8fHw%253D&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Semaglutide%20Henry&afdt=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpj4R7Nz9MtgVxMM3LZXthcmrpMZO2hM9CJdYTOBTZlOqOWIKeyAnZ3l9wmC7ZfZQ9oOSTTbuMheWysdFe-MYszSn-Z5cfGUaCQmtDzAocoW2PrGSSnlOXrv0KCozzVftbfzk&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266%2C72717108&format=n3&ad=n3&nocache=6371727648542901&num=0&output=afd_ads&domain_name=finance.cocoricopatisserie.co.uk&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1727648542904&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=791&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=http%3A%2F%2Ffinance.cocoricopatisserie.co.uk%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8%26query%3DSemaglutide%2BHenry%26afdToken%3DChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpj4R7Nz9MtgVxMM3LZXthcmrpMZO2hM9CJdYTOBTZlOqOWIKeyAnZ3l9wmC7ZfZQ9oOSTTbuMheWysdFe-MYszSn-Z5cfGUaCQmtDzAocoW2PrGSSnlOXrv0KCozzVftbfzk%26pcsa%3Dfalse%26nb%3D0%26nm%3D2
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1879)
Category:	downloaded
Size (bytes):	153207
Entropy (8bit):	5.543693145362615
Encrypted:	false
SSDEEP:	1536:0ni6+zNKofjr9PyfpK7fDH+7pSU6GZvu85pistHWvR3+2xwHzgmcfpUWgQABuucP:4qM7vptHWpu22H9dBuDj3dmChm9Abj
MD5:	2609A64DE5BF4C9822B604B3B4166059
SHA1:	17A8C4743EB499BC76571945CDAEF29D1A32A7B0
SHA-256:	FC16D108E957833C3DE8065818A6DC11EEFAC53A0D726A8ADF6CE5D13F7738FD
SHA-512:	B28DCBFC41E231FD4E108E853589EA7B0B97241DBE01A9AAF79D97C436F545F1CAFEFDF8192C55E6ECA76D07E19171F232D3556F8AB9F314F0D3008840EB0638
Malicious:	false
Reputation:	low
URL:	https://www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17300002,17301437,17301439,17301442,17301511,17301516,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":0,"afs_gpp_api":0}}};var n;function ba(a){var b=0;return function(){re

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (23897)
Category:	downloaded
Size (bytes):	34328
Entropy (8bit):	5.309737900283912
Encrypted:	false
SSDEEP:	384:2ni0XP/zfuiS4u/uHeDCBrhrmDgGrS3MHqPMvhFjwVK:2iIP/z9ogMcb8HqPMvhWVK
MD5:	3F0DF2968285207B4B6B3A14DF48D433
SHA1:	8825BF19CB99331DB4645AE59D41293176161A2A
SHA-256:	7903CE12F45A67807DE3984F6BCB16E5883E9FA51D47119F8D6FCD951097D6C1
SHA-512:	B7D98B87BB41FFF1798C708E7B06E166E07F51A0CB1C3C6D325063B16DCA18E0DABC7EF80A3F2C30D8304B868FB15E13A02192DDC485BFCAA2C8A65EE14712BB
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&sct=ID%3D4f20d6f152843af6%3AT%3D1727648483%3ART%3D1727648483%3AS%3DALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw&sc_status=6&hl=en&rpbu=http%3A%2F%2Ffinance.cocoricopatisserie.co.uk%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NTIwLjIwNDR8MDAzNTk5NWRhZWQ4NzI5MDM0MjFlYTM5NzhiYjMxYWFjZGU3NmE2OHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Semaglutide%20Henry&afdt=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpj4R7Nz9MtgVxMM3LZXthcmrpMZO2hM9CJdYTOBTZlOqOWIKeyAnZ3l9wmC7ZfZQ9oOSTTbuMheWysdFe-MYszSn-Z5cfGUaCQmtDzAocoW2PrGSSnlOXrv0KCozzVftbfzk&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266%2C72717107&format=n3&ad=n3&nocache=2341727648519590&num=0&output=afd_ads&domain_name=finance.cocoricopatisserie.co.uk&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1727648519592&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=791&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=http%3A%2F%2Ffinance.cocoricopatisserie.co.uk%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8%26query%3DSemaglutide%2BHenry%26afdToken%3DChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpj4R7Nz9MtgVxMM3LZXthcmrpMZO2hM9CJdYTOBTZlOqOWIKeyAnZ3l9wmC7ZfZQ9oOSTTbuMheWysdFe-MYszSn-Z5cfGUaCQmtDzAocoW2PrGSSnlOXrv0KCozzVftbfzk%26pcsa%3Dfalse%26nb%3D0
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	548
Entropy (8bit):	4.688532577858027
Encrypted:	false
SSDEEP:	12:TjeRHVIdtklI5r8INGlTF5TF5TF5TF5TF5TFK:neRH68DTPTPTPTPTPTc
MD5:	370E16C3B7DBA286CFF055F93B9A94D8
SHA1:	65F3537C3C798F7DA146C55AEF536F7B5D0CB943
SHA-256:	D465172175D35D493FB1633E237700022BD849FA123164790B168B8318ACB090
SHA-512:	75CD6A0AC7D6081D35140ABBEA018D1A2608DD936E2E21F61BF69E063F6FA16DD31C62392F5703D7A7C828EE3D4ECC838E73BFF029A98CED8986ACB5C8364966
Malicious:	false
Reputation:	low
URL:	https://www.mydomaincontact.com/favicon.ico
Preview:	<html>..<head><title>404 Not Found</title></head>..<body>..<center><h1>404 Not Found</h1></center>..<hr><center>nginx</center>..</body>..</html>.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->..

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://finance.cocoricopatisserie.co.uk/track.php?domain=cocoricopatisserie.co.uk&toggle=browserjs&uid=MTcyNzY0ODUzMS4zMDA4OmJkNzczZDU2Y2Y4MmQzOGJiMWI4Y2NhMjNkNTg3ODExZDVmOTMwN2Y5ZTE4YzA1NDQyOTMyZGQ1N2Q3OTBiOGQ6NjZmOWQzMTM0OTZlZQ%3D%3D
Preview:	....................

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1879)
Category:	downloaded
Size (bytes):	153223
Entropy (8bit):	5.543771316454415
Encrypted:	false
SSDEEP:	1536:9ni6+zNKofjr9PyfpK7fDH+7pSU6GZvu85pistHWvR3+2xwHzgmcfpUWgQABuucP:VqM7vptHWpu22H9dBuDj3dmChm9Abj
MD5:	D6632825FE93723865BD8A07ED872078
SHA1:	AC5FC4E43ECC216F2C9FD861D597D95F95A22C28
SHA-256:	101BD14079016AC55EE13E603FD058A703656AAE57E9160B1CFB4D02650CDF0E
SHA-512:	28BB0CFC588BD33B7DD02989EC902B4FD4EF5B7024D4D2FE2DDCBAA3D15074FD80E8AA0371BBAAE565DF20EC2BA86ED8EF1D8819241B85D1DF63C5CEFDE373EF
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/adsense/domains/caf.js?pac=2
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17300003,17301437,17301439,17301442,17301511,17301515,17301516,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":0,"afs_gpp_api":0}}};var n;function ba(a){var b=0;retu

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://finance.cocoricopatisserie.co.uk/track.php?domain=cocoricopatisserie.co.uk&toggle=browserjs&uid=MTcyNzY0ODUwNy43NjU2OjliOGVlNDhhZjhkY2FiNjdiNjM0OWIyOGU5OWFlOTZhOTAyNDQ3OTQxMzExNTNmMDhmODJjM2ZiNTFjNmIzYjc6NjZmOWQyZmJiYWU4Yw%3D%3D
Preview:	....................

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 16014
Category:	downloaded
Size (bytes):	6023
Entropy (8bit):	7.964145760542638
Encrypted:	false
SSDEEP:	96:iREv8/fDorC4tGqXzPvjzQYO1AOyafO105G3JwNpulVlmUaVhdlGJsjgfMg6ORhC:iREWfMtGqjjzQYgl+i22ObmV/kqgfM9J
MD5:	9FA4EBFCEF3A6C94ACB1DAD11CB35412
SHA1:	49CB84552B89FC210EA8944797EF074C8D871967
SHA-256:	6561BD4588E4672C3EE3163CFE8D44B8DBC07AFA833EE27E8EA723546FCDE7AC
SHA-512:	C539372F7F80D81343E0AABFD911FAA3440B5A874060E115B1BF0734CEFC89B34B476EDA67764E16E5E798FDE6982FA3BD7AB3D3D154786E2ECEE0DC0C9F8956
Malicious:	false
Reputation:	low
URL:	http://finance.cocoricopatisserie.co.uk/
Preview:	...........[iw.L..l....1..El^.$..c..............I..;......6.$s..\|.'.......}...>.<\.(C.b}.>./..\|-..=...c...........N.1\|.[..Z.Z..W.7..Z...........j..{..r..._<.....,<...x0..qk..{...u.~..qu.R..?......<..T...?......Z..T..i-..g......w.k......n..9..'...:....;.....kW~.P..].nQ8..8.....X.>...w1.Tb.bb.^%6..i).....y>.L...0. ~..K.....c.!.......M...q.4..>3.+.c....:.).).x..\|..3....C..._....A,..dk.V.=.l>u\?2}n...b.GSg)..TL..M.Jy.f.J6.xC..).I.M.b;!l..-.Qwt.5ug....1.di.I..G../...K.).f.Z%....KNk....\|.U.?..z.>....6J....L...L=.6.....,.[...X..f~.....2....p.....Ul'.).\|E..[....,)..t..!3.C..9.j....%..2m.."Z.~.........N"..""..z"=.g..(.j.a..+.a.....1.b.5...x.V.....&A36...G.nh.t.\|d...&e0...8v..b3.>s=.-)...L.h...K...#%..d..9..\."...E.T....3..^.i...0v5#.B)}....\F....Qmy.......r.Q..fII....w......S=...)W3.WR....y..i...4........?`.u..+.....=.X...E..Y=.W...P.T_...t..l/E..k&.\|?5..`+.u.v>.3.X)..Q..\|.h@@.u+.C..I...3/.M.`6.:$..Y.cAJ...._.<.)]\|.+....VR+..IA...+...L.).KM5w..>N

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text
Category:	downloaded
Size (bytes):	3575
Entropy (8bit):	5.203314832627559
Encrypted:	false
SSDEEP:	48:bvDuWsSjVmvr6jOu3I080ZUQzauCqbw76n6ka1AV09s5pIrKa675xN1t81n:LDuhwaz0ZzvJKV1Eyrf69VMn
MD5:	4DE1BD402918C1508D23952003CAF622
SHA1:	3B313A0E761AFD4028CBBC78E0E96AF18F84F615
SHA-256:	D2E64AB640BF751C2AEE576081ABB6CD73F1528B660E5A1A9CDD95BF1EE75E12
SHA-512:	0396EF5EB88AAEEFF285738E9621AC8765716A200E3488BCCD2E6CA539D0E32D349D78F6279EF72BFE2205B94D5ECDE0975EB2CFE8D332C1EF02F1AF860FA1FB
Malicious:	false
Reputation:	low
URL:	https://www.mydomaincontact.com/forms/style.css
Preview:	*{margin:0;padding:0}..body {..background:#eceff1;..color: #263238;..font-family: 'Source Sans Pro', sans-serif;..text-rendering: optimizeLegibility;..font-size:1.2rem;..line-height:1.5rem;.}..h1,h2,h3,h3,h4,h5,h6 {font-family:'Source Serif Pro',serif}...wrapper {..width:95%;..max-width:600px;..margin:2rem auto;..text-align:center;.}...priceHolder {..text-align:left;.}..h1 {..color:#E64A19;..text-transform:uppercase;..font-size:1.2rem;..letter-spacing: 1px;..max-width:100%;..overflow-x:hidden;..word-wrap: break-word;.}..p {..margin:1.5rem auto;.}...error {..border:1px solid #e64a19;..color:#e64a19;..background:#fefefe;..padding:1rem .5rem;.}...correct {..color:#8bc34a;.}..a:link,.a:visited {..color:#455A64;.}..a:hover,.a:active {..color:#8BC34A;.}...formElement {..margin:.5rem 0;.}..label {..font-family:'Source Sans Pro',sans-serif;..display:block;..font-size:1rem;..text-align: left;..height:2rem;..line-height:2rem;..padding-left:1px;.}...inputtext,..inputprice {..font-family: 'Source

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	5316
Entropy (8bit):	4.5664185268506685
Encrypted:	false
SSDEEP:	96:uV5XTZh5pfyZbdmO9Z+B4eBlsrZXeUN1yHS6B+dSSD:G5XTZhbqHd9DSSD
MD5:	8E99A903AD22BD7AEBC9DCACE2F3BF9F
SHA1:	C637A3CD8C2DA38471F3E5D2DE5E5D4D14DBAA39
SHA-256:	CBD00A1407D5E2FD544BBB3CB2C9D398DD2D208E887F684FE4F3305793B8C829
SHA-512:	E72384FFA861B786E35BB9D452B5E779CA7EBF94923ED17E0939C6A190BB9B34264A651984BB6FD6D3261AEAA670F69494636C0D30C44463804FE7C07409C581
Malicious:	false
Reputation:	low
URL:	https://www.mydomaincontact.com/index.php?domain_name=cocoricopatisserie.co.uk
Preview:	<!DOCTYPE html>.<html>.<head>. <meta charset="UTF-8">. <title>Sale offer for: cocoricopatisserie.co.uk</title>. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">. <link href="https://fonts.googleapis.com/css?family=Source+Sans+Pro:400,400i\|Source+Serif+Pro:600&subset=latin-ext" rel="stylesheet" />. <link rel="stylesheet" href="/scripts/select2/select2.css" />..<script type="text/javascript" src="/scripts/jquery.js"></script>..<script type="text/javascript" src="/scripts/select2/select2.min.js"></script>. <link rel="stylesheet" href="/forms/style.css" />.</head>.<body>.<div class="wrapper">..<h1>cocoricopatisserie.co.uk</h1>.. <p>If you want to buy this domain, please fill out this form.</p>.. <form method="post" id="contactform" name="contactform">. <input type="hidden" name="domain" value="cocoricopatisserie.co.uk" />...<div class="formElements">.. ..<div class="formElement">. ...<label for="name">Name</label>.

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1559)
Category:	downloaded
Size (bytes):	1560
Entropy (8bit):	5.344241807824692
Encrypted:	false
SSDEEP:	48:0JhZOnK8lwSb6YS4tyPWp2PXihm0wQR2FgbnYfblV:8ODbL1tzAXr+0P
MD5:	A4A651A3042ED3AF7A0B26984C3B0F40
SHA1:	F98358F202AF9319183C00CD9186495F9C13A011
SHA-256:	5CD1AB139F8AB9D499EB7C8C80D1CCBB793B4FFC88C70E9A0F77F073D435FE0F
SHA-512:	B3778EF62B8CBA93E07819F6EBA106F093AD4FB67701958BA332CC48D7C863185299C04AEC2AF91B2B6FCC8A2FA3D3C659BFC9F3D0CA576AC5AE02DFAF38F576
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads/i/iframe.html
Preview:	<!doctype html><html><head><meta name="ROBOTS" content="NOINDEX, NOFOLLOW"><meta name="format-detection" content="telephone=no"><meta content="origin" name="referrer"></head><body><div id="adBlock"></div><script nonce="qgE-mN6LRoeN2aOJ0myCFw">if (window.name.match(/^{"name":"master-\d+"/)) {var script = document.createElement('script');script.src = "/adsense/search/ads.js";var href = window.location.href;if (!!href && (href.indexOf('?pac=') > 0 \|\| href.indexOf('&pac=') > 0)) {if (href.indexOf('?pac=1') > 0 \|\| href.indexOf('&pac=1') > 0) {script.src += '?pac=1';} else if (href.indexOf('?pac=2') > 0 \|\| href.indexOf('&pac=2') > 0) {script.src += '?pac=2';} else {script.src += '?pac=0';}}document.head.appendChild(script);window.IS_GOOGLE_AFS_IFRAME_ = true;}function populate(el) {var adBlock = document.getElementById('adBlock');adBlock.innerHTML += el;}function getMaster() {var m = null;var pIndex = window.name.indexOf('\|');if (pIndex > -1 && window.name.charAt(0) != '{') {try {m = window.

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	20199
Entropy (8bit):	3.70382459042729
Encrypted:	false
SSDEEP:	384:jDjzWdNWunWE3JcL3R2G//ttrIHGOesh6UK5gK5KU:jDnu024d
MD5:	A096EECE85B9F9EB151647D759FFBA89
SHA1:	B8349BE8DCCD1BF51ECD157AC9E4FB85EAF72B94
SHA-256:	81FBC2D1C4FD135BD8367182A98AE01F40B7DA6A0279185A177841EB7D8C823F
SHA-512:	5DD48140CD98833F0DD030D827F384D0C5846CBAC6824CD6767E6867A11533CC4549DF57915FDEF8741ABCAF12F258F39F71B20D65AA7F7EA45CE9A7FAED470C
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 288 38"><style type="text/css">...st0{fill:#b0bec5;}.</style><path class="st0" d="M244.7 12.2v2.1c0 0.3-0.1 0.6-0.2 0.8s-0.4 0.3-0.6 0.3c-0.2 0-0.4-0.1-0.6-0.3s-0.2-0.4-0.2-0.8v-2.5c0-0.4 0-0.7 0-0.9s-0.1-0.4-0.2-0.5 -0.3-0.2-0.6-0.2c-0.5 0-0.9 0.2-1 0.5s-0.2 0.9-0.2 1.5v2.2c0 0.3-0.1 0.6-0.2 0.8s-0.3 0.3-0.6 0.3c-0.2 0-0.4-0.1-0.6-0.3s-0.2-0.4-0.2-0.8V9.8c0-0.3 0.1-0.5 0.2-0.7s0.3-0.2 0.5-0.2c0.2 0 0.4 0.1 0.5 0.2s0.2 0.3 0.2 0.6v0.2c0.3-0.3 0.6-0.6 0.9-0.7s0.7-0.2 1.1-0.2c0.4 0 0.7 0.1 1 0.2s0.5 0.4 0.7 0.7c0.3-0.3 0.6-0.6 0.9-0.7s0.7-0.2 1-0.2c0.4 0 0.8 0.1 1.1 0.3s0.6 0.4 0.7 0.7c0.1 0.3 0.2 0.7 0.2 1.4v3.1c0 0.3-0.1 0.6-0.2 0.8s-0.4 0.3-0.6 0.3c-0.2 0-0.4-0.1-0.6-0.3s-0.2-0.4-0.2-0.8v-2.7c0-0.3 0-0.6 0-0.8s-0.1-0.4-0.2-0.5 -0.3-0.2-0.6-0.2c-0.2 0-0.4 0.1-0.6 0.2s-0.3 0.3-0.4 0.5C244.8 11 244.7 11.5 244.7 12.2z"/><path class="st0" d="M254 14.4c-0.4 0.3-0.8 0.5-1.1 0.7s-0.8 0.2-1.2 0.2c-0.4 0-0.8-0.1-1.1-0.2s-0.5-0.4-0.7-0.7 -0.3-

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	396
Entropy (8bit):	4.993257872070729
Encrypted:	false
SSDEEP:	6:jU0LELWVMroRLLJULlpbKSy1wibxjpwVKRbq9Bi/z2tkywW/GBWlK:jkWlRLLsltTibx6UdqGL2AK9lK
MD5:	D19F13ABB39098BE07569E078047DE48
SHA1:	583C6CB1BFF82BA7FD8FE0F12FDF8DC988EFD4B6
SHA-256:	3D0F73C914640E6ACD493F58A3BBE324F76230010C5B594653D6BD08D4BE9424
SHA-512:	0D3F62B83F43140C91B472A0AEA2F814675009BEDDD216B4C836CD80582545ACE0ED42215C2E660CA2151B12E2433199F45744751E61A285221459DE405359FF
Malicious:	false
Reputation:	low
Preview:	// -- additional script for the sale offer version of the form..$(document).ready(function() {. $("#currency").select2({minimumResultsForSearch: -1});.});...function isSalePriceValid() {. $("#priceHolder").removeClass('inputError');. var val = $('#price').val();..var isInt = /^\d+$/.test(val);..if (val && !isInt) {. $("#priceHolder").addClass('inputError');..}..return isInt;.}.

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://finance.cocoricopatisserie.co.uk/track.php?domain=cocoricopatisserie.co.uk&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzY0ODU0My40MzU5OmMyZDdmMzE5YzBiMWJhMjA2NGIxOTNlZWYyZmQ4YjA2YjBlMWQ2YmQ2ZmZkOGUyZDMyMGUwYzY5OTI0MDBiZWQ6NjZmOWQzMWY2YTZjOQ%3D%3D
Preview:	....................

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.202819531114783
Encrypted:	false
SSDEEP:	3:YWQRAW64:YWQmq
MD5:	7363E85FE9EDEE6F053A4B319588C086
SHA1:	A15E2127145548437173FC17F3E980E3F3DEE2D0
SHA-256:	C955E57777EC0D73639DCA6748560D00AA5EB8E12F13EBB2ED9656ADD3908F97
SHA-512:	A2FD24056E3EC2F1628F89EB2F1B36A9FC2437AE58D34190630FE065DF2BBEDAF9BD8AEE5F8949A002070052CA68CC6C0167214DD55DF289783CFF682B808D85
Malicious:	false
Reputation:	low
URL:	http://finance.cocoricopatisserie.co.uk/ls.php?t=66f9d313&token=09ee88ccb356a23e0f55db14342af30f85bdd5a2
Preview:	{"success":true}

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	391
Entropy (8bit):	4.7474201749507134
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slzTPl2O4UYaeLIT4W+KS4S1UpMTQpi6jUs8sh6B+BSmK0C:t6qFPUPkHSt1UiT6i6jUs8b0I0C
MD5:	8959DDCD9712196961D93F58064ED655
SHA1:	62AB1E38E7E9FBF58A04381B76C2D96A9C829F24
SHA-256:	17C7A89BF169C2EE400E31B042CEA68513F06B9CD7D1E8990DBEC800F0D771C7
SHA-512:	5E9EFFA313C30B351345DB963238B4AFD0728CA302FD79A853C80C89F042266D44CC1D29492520FB0FA80B47135E54E6963DFC21972F6B236B84C1DA2FAD809D
Malicious:	false
Reputation:	low
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L20.49 19l-4.99-5zm-6 0C7.01 14 5 11.99 5 9.5S7.01 5 9.5 5 14 7.01 14 9.5 11.99 14 9.5 14z"/><path d="M0 0h24v24H0z" fill="none"/></svg>.

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.202819531114783
Encrypted:	false
SSDEEP:	3:YWQRAW64:YWQmq
MD5:	7363E85FE9EDEE6F053A4B319588C086
SHA1:	A15E2127145548437173FC17F3E980E3F3DEE2D0
SHA-256:	C955E57777EC0D73639DCA6748560D00AA5EB8E12F13EBB2ED9656ADD3908F97
SHA-512:	A2FD24056E3EC2F1628F89EB2F1B36A9FC2437AE58D34190630FE065DF2BBEDAF9BD8AEE5F8949A002070052CA68CC6C0167214DD55DF289783CFF682B808D85
Malicious:	false
Reputation:	low
URL:	http://finance.cocoricopatisserie.co.uk/ls.php?t=66f9d31f&token=c66d39186c9fefeedea237848dc99ebab6205427
Preview:	{"success":true}

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (15592)
Category:	downloaded
Size (bytes):	35374
Entropy (8bit):	5.329522953661668
Encrypted:	false
SSDEEP:	384:2ni0XP/zfuiS4u/uHeDCgEL72xrbrmAqngVr6rwK:2iIP/z9ogqE72EAqgxK
MD5:	3B5F266AD826F2BA82066B740F1EB842
SHA1:	130108B4D620AB7F1963402CCECAB821D5169D49
SHA-256:	346E7A5311B19B244F60EE3125416C1EE7C59656692DCCB74FF0972BEF6B700B
SHA-512:	7A52699E914907D24999341C1244AFDBA5374D3F9559115D059DAE1E0267D475BE3A6FFBC4B8883FC44554C006ECF8B62670FD94EEDAE9B5B2343136D8149631
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&sct=ID%3D4f20d6f152843af6%3AT%3D1727648483%3ART%3D1727648483%3AS%3DALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw&sc_status=6&hl=en&rpbu=http%3A%2F%2Ffinance.cocoricopatisserie.co.uk%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NTM1LjQ3OXw3MzNmZTA4YjM3ODJhNjZmOWM5Nzc5OTM1ZDJjNGQ0MmQzNTNkOTIyfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHx8fDB8MHx8MHx8fDB8MHxXMTA9fHwxfFcxMD18MTc2ZTI2OTgxMjVlNTFhMzYxYzk5NWM1NDgwZDM1MTRmZDA2ZTU5NHwwfGRwLXRlYW1pbnRlcm5ldDA5XzNwaHwwfDB8fHw%253D&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Sesame%20Semaglutide&afdt=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmcBlLqpj90SqxLU1y28Lnofj6W4YFOJxZRWVqEOBrqx9r8dK_IzyucJYZYAj0HbBY0RxMhD-iUiKatTaQpsIR459EQ14jLNoKoGR9MimrFhhNC0HT5tj7o4Xchb8bXTCSs8XHI4WI_a&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266%2C72717108&format=n3&ad=n3&nocache=7121727648535487&num=0&output=afd_ads&domain_name=finance.cocoricopatisserie.co.uk&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1727648535493&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=791&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=http%3A%2F%2Ffinance.cocoricopatisserie.co.uk%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8%26query%3DSesame%2BSemaglutide%26afdToken%3DChMIi-aqkZjpiAMVv_67CB2-6zNOEmcBlLqpj90SqxLU1y28Lnofj6W4YFOJxZRWVqEOBrqx9r8dK_IzyucJYZYAj0HbBY0RxMhD-iUiKatTaQpsIR459EQ14jLNoKoGR9MimrFhhNC0HT5tj7o4Xchb8bXTCSs8XHI4WI_a%26pcsa%3Dfalse%26nb%3D0%26nm%3D2
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://finance.cocoricopatisserie.co.uk/track.php?domain=cocoricopatisserie.co.uk&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzY0ODUxNS4wNzYzOjIxNmUwMTkzNDk2OTc5ZTM3MGQ1YzM0YjczYTg0NTYxODdjZTI3NWZmMDY3M2QxZDQ3MWNmYzI5OGNiNTEyMDY6NjZmOWQzMDMxMjlkYQ%3D%3D
Preview:	....................

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 40, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	613
Entropy (8bit):	7.624191679264559
Encrypted:	false
SSDEEP:	12:6v/7svvOiEe0IOQEjoZzIAOLhymOh+T+qFYKRacX3Y0OJxAG0f7:FvOC0I/EjizPOlZ3HFYMR3T
MD5:	2CA61B76E22053571DD8611E5AAC4900
SHA1:	2D350341A645AD33AB5604ACA16C05F22A83FF51
SHA-256:	D6B5D8D83DBC18FB8D77C8761D331CD9E5123C9684950BAB0406E98A24AC5AE8
SHA-512:	89B2BCBCE382E8B7C4D27BAA07ABED6F1D8D0F5A8F29B62A98F05FB1DE46D5E40F4C8146047614E92EFDCD235B80B842F8B08E9DA36A5FDB376E83F9EE2B09EA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...(............,IDATx....K.a....J....b](...v.d...<....P....!R.q.T..H.#..G..y.R......Ht0L.>....9.,m)..y.u..}.;....)I.J..,...Q(...X....V..&...Oh.F.!.{.n.{....,...%]...Gc..5x.>@.3...&....2.....%..C..,b.E...u.9=T6.7..)...E......".....lo.y[.e..C....&... D....m.#.......Q..j.......v@..Te.M.......;.....G9...b...}.1.....T...: .hC.f <t.;LT..A........N+....^@...no-../..F.e0aG.3X.....1.(....J.B..[..lgp...?..$8.N....Z4....5......d^..e0aw!..2nA.`.r.."...o.F...A...kW .<..`..R..~...~..J<....Sp..)..:tB...}.2E\|.L.........`.W.W.1....{!s....-..s.Z..[....P.o\|.}.q.......IEND.B`.

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18536, version 1.0
Category:	downloaded
Size (bytes):	18536
Entropy (8bit):	7.986571198050597
Encrypted:	false
SSDEEP:	384:IhocXmE6eM871P7td/mcOKA454H2orQEONKrOqxw:f6WeL1P//9D54WCCKc
MD5:	8EFF0B8045FD1959E117F85654AE7770
SHA1:	227FEE13CEB7C410B5C0BB8000258B6643CB6255
SHA-256:	89978E658E840B927DDDB5CB3A835C7D8526ECE79933BD9F3096B301FE1A8571
SHA-512:	2E4FB65CAAB06F02E341E9BA4FB217D682338881DABA3518A0DF8DF724E0496E1AF613DB8E2F65B42B9E82703BA58916B5F5ABB68C807C78A88577030A6C2058
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......Hh..........H..............................Z..\|.`..J.T..<.....H..U..Z...x.6.$..0. ..t. ..I....p.0.VU.......1....AQ...d..x.....R..4.-.c..C$fUc.c..IX..@..~g.xs.....%...O...eJ.w..U.\|.......%..{.......U+..T#.S......`.n.....V.w.4..~P"..zk.%..../........=3...F.........V.FL..;Bc.........A.Uk.U1.b!Y.BH.DL...s.s...F.m.9a..GJ..1..#.`m5..DI..X5#.........B.Akm.....&..0...{.L.....G......-(.......O4.@3....=......f..l...$.....j..NO...e.Y.tJ2J>F.(.c....08..e...~....D2S7s:.G'Gm........!.7.........r.c.`,.....~.).......c>1.......Y.g2^...T-1.7./r./....>...g.ov@u.?.U.+._...'M..,.,g....!g..9."..yBF.#r+.Ps...%.d=....U...5.b.$:`.4R.II.<A....Q)....e...k.....M.8.z....+.....5}..F........F.d._...].~-](.Lf....Y..W....;-z...;. .@x._v../.%UIm....=s...P.C....G...^..Q.!g.!b._.P....at..?.}....t.z...O(..Y6..R.2.X....k.R..K.gw(.F.K?m..R...7....dj..7. .r.U..be.4......8.].w.B..B......Y..:..8.N..U...NEm...\.^q..f}.......{..6.". ...y-.Y...N.+.M E..`......R.$T

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	166
Entropy (8bit):	5.852184084844084
Encrypted:	false
SSDEEP:	3:yionv//thPlGARtjmA66MF5DpwloyzFZp0xdkgl08mzsPS98WInwgblSHxp2p/Hb:6v/lhPIARoA6b5tQoEZCkglFmRhawgB5
MD5:	D2D649B406D7A325683E2CCBD3297E43
SHA1:	819D6E6BF4CE1219BF83DEB5CB33A04A57E12C07
SHA-256:	E9BDAE625005100947D641A34F00BDD51B435D2C5979DF3F3F32F0D812CB17F7
SHA-512:	19E7F5D74C422DB0DC24B1748C174931CCC59EA0F80EE7F92293C7EF05956D477C8287F21CB10FCFF6867E10AC81C96DC138F9C5FF1F83F3AC4FC66A7F7D1AE0
Malicious:	false
Reputation:	low
URL:	https://www.google.com/images/afs/snowman.png
Preview:	.PNG........IHDR...0...0......,.....PLTE....................r.....tRNS. ... ..<~...=IDATx.c.~.Q.I......!V....'......X%L.2.....b.U.U.(.&.0.V.a5...-...........IEND.B`.

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.202819531114783
Encrypted:	false
SSDEEP:	3:YWQRAW64:YWQmq
MD5:	7363E85FE9EDEE6F053A4B319588C086
SHA1:	A15E2127145548437173FC17F3E980E3F3DEE2D0
SHA-256:	C955E57777EC0D73639DCA6748560D00AA5EB8E12F13EBB2ED9656ADD3908F97
SHA-512:	A2FD24056E3EC2F1628F89EB2F1B36A9FC2437AE58D34190630FE065DF2BBEDAF9BD8AEE5F8949A002070052CA68CC6C0167214DD55DF289783CFF682B808D85
Malicious:	false
Reputation:	low
URL:	http://finance.cocoricopatisserie.co.uk/ls.php?t=66f9d308&token=26921ed73125027db7ed665b75d22cac5c06430b
Preview:	{"success":true}

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://finance.cocoricopatisserie.co.uk/track.php?domain=cocoricopatisserie.co.uk&toggle=browserjs&uid=MTcyNzY0ODQ4MC44ODk5OjczODdlOTgwODU3MmY1NzRhY2IwNTYyZmU4NDU1OGQ2NGNkYWI1MzlkMDNiZTIzZTQ2ZTdiNjNhZjY0NTY0OTk6NjZmOWQyZTBkOTQwMg%3D%3D
Preview:	....................

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 19327
Category:	downloaded
Size (bytes):	6764
Entropy (8bit):	7.968089717701886
Encrypted:	false
SSDEEP:	192:NG806Nx3cigMMSRNksE4n9TchZYJ2q9NBA8WXhLJXmSkKsJvNRYuN:NFgFSRNksEw9MQho8WhL9mS8JEe
MD5:	9F517C3BA28DF09662FCCB54FEFAF26D
SHA1:	5786978E6B60FF3AC5F225FE6889C4AF4796CFA4
SHA-256:	2E22A80C9BF8F87C8B4E0119DD760C40572AEEB6BFDD4507621F4C74AC5C1271
SHA-512:	594B5804827286FC2FC5F8AE323832E01E70D2D3E95E7B1EFC235C4ABDFEFDB06365B9061612C032D6DE4CDFCA8F1120D554556546C7C20EC42110C2A2D668BD
Malicious:	false
Reputation:	low
URL:	http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Eagles+Sphere+Sphere&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpjx58G6o1K7o-viAFkNJUZINzDQYxSL87u9idvmGA6WnLKvG43X1VTpA_tX-JuOD2qRhHKZIbvkkTZQebs3sDLnAIMFHH3E399kjaAqb00X1Isp9zrXzZpzsXWiuakI_FhDM&pcsa=false&nb=0
Preview:	...........\iw.H..l....6x."6/8$C.... Np..d\|.T.@H.$.._..ynUIH .I...c..r....R^>kv.vo?.*C.b..}I..C.f.,G....j...........n\..ys.h~.7...o....5.N.7.l...V.W..O/....[...So.ZV..G....q{..{.i./t.y..~y.V....>.vu.y.p...^...m.O...z....O..Igd\..<.,.7....y5v..?.\|.../...._T.x.~.YK.m....?......t.Z.t..l]=,....^O)..e{......Ba>.............R,...S.N...f..U..r.\|...9...\|...:..l?.]NYJ..S=._ H'.>.\.........Q@.6a....S..#......{0u...Y.M....k.....7tM{..\......M.b.tGw\Sw..oz.sM...l.. ...hS.....S&.0.z..]....Z.....>....70.+.r..c9nMq........o&..4....3.C_4.A..R.L...b{.f{9./F....)%u..-S.0L{.ihRT.J.E..UM9V......XSU...Q.9.6.`..>Ev.h.............@....q...e..g>2.............f....XU.jC...b...~.r..!.U5+.p.O..r.."\|.e..".\>:...l....W[.5z.>.....R.V&](....f.....u..}...../.C6a^.x.......b..=H.+..2......K.<...'....j=.b@.D...\|..9..L.4.n.L..T..?R."l..Dt.w)v..........w.eO.$/.S.o.......G.I\|....46..v.i3Loji..m......t.r.j.$~.L......dg....A+.2..u...<?........W..CK...U..&...E...IR

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	20199
Entropy (8bit):	3.70382459042729
Encrypted:	false
SSDEEP:	384:jDjzWdNWunWE3JcL3R2G//ttrIHGOesh6UK5gK5KU:jDnu024d
MD5:	A096EECE85B9F9EB151647D759FFBA89
SHA1:	B8349BE8DCCD1BF51ECD157AC9E4FB85EAF72B94
SHA-256:	81FBC2D1C4FD135BD8367182A98AE01F40B7DA6A0279185A177841EB7D8C823F
SHA-512:	5DD48140CD98833F0DD030D827F384D0C5846CBAC6824CD6767E6867A11533CC4549DF57915FDEF8741ABCAF12F258F39F71B20D65AA7F7EA45CE9A7FAED470C
Malicious:	false
Reputation:	low
URL:	https://www.mydomaincontact.com/images/trust.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 288 38"><style type="text/css">...st0{fill:#b0bec5;}.</style><path class="st0" d="M244.7 12.2v2.1c0 0.3-0.1 0.6-0.2 0.8s-0.4 0.3-0.6 0.3c-0.2 0-0.4-0.1-0.6-0.3s-0.2-0.4-0.2-0.8v-2.5c0-0.4 0-0.7 0-0.9s-0.1-0.4-0.2-0.5 -0.3-0.2-0.6-0.2c-0.5 0-0.9 0.2-1 0.5s-0.2 0.9-0.2 1.5v2.2c0 0.3-0.1 0.6-0.2 0.8s-0.3 0.3-0.6 0.3c-0.2 0-0.4-0.1-0.6-0.3s-0.2-0.4-0.2-0.8V9.8c0-0.3 0.1-0.5 0.2-0.7s0.3-0.2 0.5-0.2c0.2 0 0.4 0.1 0.5 0.2s0.2 0.3 0.2 0.6v0.2c0.3-0.3 0.6-0.6 0.9-0.7s0.7-0.2 1.1-0.2c0.4 0 0.7 0.1 1 0.2s0.5 0.4 0.7 0.7c0.3-0.3 0.6-0.6 0.9-0.7s0.7-0.2 1-0.2c0.4 0 0.8 0.1 1.1 0.3s0.6 0.4 0.7 0.7c0.1 0.3 0.2 0.7 0.2 1.4v3.1c0 0.3-0.1 0.6-0.2 0.8s-0.4 0.3-0.6 0.3c-0.2 0-0.4-0.1-0.6-0.3s-0.2-0.4-0.2-0.8v-2.7c0-0.3 0-0.6 0-0.8s-0.1-0.4-0.2-0.5 -0.3-0.2-0.6-0.2c-0.2 0-0.4 0.1-0.6 0.2s-0.3 0.3-0.4 0.5C244.8 11 244.7 11.5 244.7 12.2z"/><path class="st0" d="M254 14.4c-0.4 0.3-0.8 0.5-1.1 0.7s-0.8 0.2-1.2 0.2c-0.4 0-0.8-0.1-1.1-0.2s-0.5-0.4-0.7-0.7 -0.3-

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (18069)
Category:	downloaded
Size (bytes):	34320
Entropy (8bit):	5.312601117763465
Encrypted:	false
SSDEEP:	384:2ni0XP/zfuiS4u/uHe4CMaDSZEQ2rqrmAXg6rexDwHe:2iIP/z9ogHuSZR0Aw7SHe
MD5:	8EB1EB923389276BC184AE3AB42E20CD
SHA1:	4BF1BF7F48AF33F6B2F03A899EE1A7A2FB8AC349
SHA-256:	1C21534CB64D632E60488A804A9BCE90AF3A0748D8A168231F16E17251F93EF4
SHA-512:	FB2CA1FBEA3189295FE4657A965E470FE9E43C0F4CFC8D755A9A0BFEDE1400DF7760F4ABDC98C894C27E3DF7F38055DF6CEF7C0CD9E06DE142939582DBB6E0FB
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&sct=ID%3D4f20d6f152843af6%3AT%3D1727648483%3ART%3D1727648483%3AS%3DALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw&sc_status=6&hl=en&rpbu=http%3A%2F%2Ffinance.cocoricopatisserie.co.uk%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NTE1LjA5MzJ8YWU3YmQ5MzhkNTcwNDc1YzEyOWIyODFhNDA0MTc3MTM3MGI3ZjM2NXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Sesame%20Semaglutide&afdt=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmcBlLqpj90SqxLU1y28Lnofj6W4YFOJxZRWVqEOBrqx9r8dK_IzyucJYZYAj0HbBY0RxMhD-iUiKatTaQpsIR459EQ14jLNoKoGR9MimrFhhNC0HT5tj7o4Xchb8bXTCSs8XHI4WI_a&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266%2C72717108&format=n3&ad=n3&nocache=6121727648514509&num=0&output=afd_ads&domain_name=finance.cocoricopatisserie.co.uk&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1727648514511&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=791&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=http%3A%2F%2Ffinance.cocoricopatisserie.co.uk%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8%26query%3DSesame%2BSemaglutide%26afdToken%3DChMIi-aqkZjpiAMVv_67CB2-6zNOEmcBlLqpj90SqxLU1y28Lnofj6W4YFOJxZRWVqEOBrqx9r8dK_IzyucJYZYAj0HbBY0RxMhD-iUiKatTaQpsIR459EQ14jLNoKoGR9MimrFhhNC0HT5tj7o4Xchb8bXTCSs8XHI4WI_a%26pcsa%3Dfalse%26nb%3D0
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	200
Entropy (8bit):	5.025855206845441
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slhohC/vmI4SmK0xhFELE47zF:t6qnoU/vmRI0xQTF
MD5:	11B3089D616633CA6B73B57AA877EEB4
SHA1:	07632F63E06B30D9B63C97177D3A8122629BDA9B
SHA-256:	809FB4619D2A2F1A85DBDA8CC69A7F1659215212D708A098D62150EEE57070C1
SHA-512:	079B0E35B479DFDBE64A987661000F4A034B10688E26F2A5FE6AAA807E81CCC5593D40609B731AB3340E687D83DD08DE4B8B1E01CDAC9D4523A9F6BB3ACFCBA0
Malicious:	false
Reputation:	low
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19600, version 1.0
Category:	downloaded
Size (bytes):	19600
Entropy (8bit):	7.987896864926305
Encrypted:	false
SSDEEP:	384:DO9QOKK1ov0/vS0RMIy5z+s3O4mszugwVSy8ypC+eFfPYDE:q9QRN0/vTRv1t5s9wMyp2dPYDE
MD5:	A97AF381DD8B174164F0BD1D5BF5B123
SHA1:	C8B72AEE9FC4FA425761C2DA454F95D45B42F506
SHA-256:	4A9FA9C4ECB0EAEC0AF1E4949930232604B331CD076CA7EFBA2A4E2EFDBAA367
SHA-512:	A0833DBE283F89503A173F47C4C0C9F61FBE2553E62FD2151786F63AEADDA7FD1DDAF5BBF5B77B74D269D43B140887CA683F11D0DDAE8DC980416D55F09D8261
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/matesc/v22/-nF8OGQ1-uoVr2wK-iLT9g.woff2
Preview:	wOF2......L...........L,.............................<..,.`..l...........t........6.$..\|. ..f..i..K.w.5l.....8.K..E.q...z$.`..b......%p"C.4....$%.........D.2.N.T..A.R6+.&.w..#..q.l.t....v5+O..d..w9.>.`.P(........ptJP...>W.......'........h...Q....@.ZL.PQ..b...U.p....s}..v..X.....nf..}....'..(4.<O...../0t/......P...v.F...E.+.....X{.=..(.Rl...c. w...o...j!-..t:.dP....W..]_..o.fZ.W.:... g2.2i7..9s~v.w.!.L....MVYEB.Qg..KXI[e...O0....`..$.re.q....<o.-....K....t. 8T.4e.G.....O....t...$-.~Q..2..fm...p.K8..y.<.H.N.../]v.}...L.:E.6.N..\G.{f.&.rR.Wc.... vk/...v...A......$..m'.{...J..m.I..L..'g....oN........(yC\|...P]y.^...g..?..!...".\|...q.h...'..+.M!..@.z%{C.}9....W.).u{.e5..z. L.{..P.>.M...#V...LF..:....$.V)M.g..4.~...... ..t.O..........{.^..@......h.......8...g..d...`...`.%x.O..........r...wwz....06....z..v..L.....4....+....(d...."....d.hA...x..L+Q.8Rb..A8 .F3..1.d...9=..vW....Nv..i..A$.{...,..,.<..4..27..wFF...4}.JQ.%,~.\|@..N ..............{...^..v

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 21528, version 1.0
Category:	downloaded
Size (bytes):	21528
Entropy (8bit):	7.988581564927641
Encrypted:	false
SSDEEP:	384:47KwKbMXQq5EvJxCscVSq5aR3lYjLW9Sh0G64JKxH8emqhgvdnKa/HyrTX:46bMgqGRYscWR3CjLWiBHQ8lcgvdnKaG
MD5:	780E2060AB7A6A4FA797405755B62441
SHA1:	A99F5EA68F7A617ACCE6F3FD49411142E3B54CF7
SHA-256:	CC308BE27791DC58E7CE19F0D245EF66B8EB6975B8C7AE22D97C09927C84DC48
SHA-512:	C6635045E38101A8975C6885882BA5FF7093444F6679480EFF8B8F935CCD124A38204EEC7CB27C4B48B08D7191BCCEB3F6E66AFC1880C27036A7467B06F4F2C3
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/sourceserifpro/v17/neIXzD-0qpwxpaWvjeD0X88SAOeasasatSyqxA.woff2
Preview:	wOF2......T........ ..S...........................4...L..0.`..J.....`..-.....6.$.... .............~.Y=..N....r.@jk...l.......!.....!R..m.;Dl.e....kv.U......;...(.;<G.."F^.MV.0 ....a1e2k2on:.q.x...Me&\|.NlR+.,,2\|..u>.!.P:..z.}F....e.........(.EEA.I.L.GT.-..Bc..N....(Z{...{..BL.I}..D.T...... .......1..U..\|jl..6X.c...,@...<....>+.<.V........x.w.=..{.%H.P3.L7..61....J..k.f...e."...9.v.\|@..._..A.....rO..,.......NB..x..R...........x.A.y.PD.g...-.h7s...1..y2.K.,E..2._.......ip.%...T..E.p...Y.5.u..N....{...I...Q.h..ntWX..(].OM....=.s=.Z._.........%.3_.0.!... ....E....c.!.@..k......=.k.....c.D".H..P.L..\|.._..%,..4.....Pe.x0..Ip...........j.\|....Y.+T#).m@.\..].X.;.e..h..5....U\..T9Q.....E(.(.J.....6Wf.......ep......y.)s..hw.....=...........[.#@.......6.".b.i.I.Co"gRf.".......D...w.........M...R.B~.h.a..4..]}n...QY..#\\.m...2.TY]..P&...,.n..5c.T0Q3..:....Y...v{.X........!...\......K.n...Z......cD......{..t.,.$b.G....l. ..x.q.3..U...",..qR...A.2b .IH4 .'

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32041)
Category:	downloaded
Size (bytes):	41867
Entropy (8bit):	5.139963739750686
Encrypted:	false
SSDEEP:	768:7JgANQPl//TgGMg4/+gqQWXAnpCZEQbE1WRdZfnKMuVevvr:7J01Tg+xhwsZEsE1W3ZfRuVevT
MD5:	F4B4F7EC0C9C4D1401993B2CF8C1DC88
SHA1:	A1B00107E47786E175117AD1654389B48DEC3059
SHA-256:	6B6C6918ABBFF3B44705AB10617401964194CAA770DE984A087FFB85588FE13E
SHA-512:	D93964ED3A6EDB822DF6858470D058BEF7087B3DBBDBCFAA48E8124FD9B69E1FBA9E6C05A05E2B900B706FE284CA2099046B47C5719C60FC659AE808E9224F0A
Malicious:	false
Reputation:	low
URL:	https://www.mydomaincontact.com/scripts/select2/select2.min.js
Preview:	/.Copyright 2012 Igor Vaynberg..Version: 3.3.2 Timestamp: Mon Mar 25 12:14:18 PDT 2013..This software is licensed under the Apache License, Version 2.0 (the "Apache License") or the GNU.General Public License version 2 (the "GPL License"). You may choose either license to govern your.use of this software only upon the condition that you accept all of the terms of either the Apache.License or the GPL License...You may obtain a copy of the Apache License and the GPL License at:..http://www.apache.org/licenses/LICENSE-2.0.http://www.gnu.org/licenses/gpl-2.0.html..Unless required by applicable law or agreed to in writing, software distributed under the Apache License.or the GPL Licesnse is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,.either express or implied. See the Apache License and the GPL License for the specific language governing.permissions and limitations under the Apache License and the GPL License../.(function(a){a.fn.each2===void 0&&a.fn.ext

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3856
Entropy (8bit):	5.408297976823041
Encrypted:	false
SSDEEP:	96:6OEaM7Vc+uuOEaMzNKOEaF9Vc+uGOEaiN1OEaNPlOEaNVFZKOEaNHOEaNk3yOEaU:dMDEMn3GXNP6NfNANk3FNNN8YNYn
MD5:	FD90B2E322504D22FF0E849CCC595CCA
SHA1:	DD1F1D5AF0D1E50FC41F1297EFEA6B5CD01124C9
SHA-256:	3CE2554E586B71B83AEFAA869E6675614E2C910B111A5194660230E9C7303A78
SHA-512:	EB03995040AF10B83E28A662F702D2BEFADCE38948FE9460DF1FB06B7F0A2B50BFA9606759BD8B7650D0B385E3653F18DAA3626E0E6EEBB4B71B79AB268A905A
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Mate%20SC%7CMate%7CRoboto%7CRoboto%20Light&display=swap
Preview:	/* latin-ext /.@font-face {. font-family: 'Mate';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/mate/v17/m8JdjftRd7WZ6zS2W7XS.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Mate';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/mate/v17/m8JdjftRd7WZ6zq2Ww.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Mate SC';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/matesc/v22/-nF8OGQ1-uoVr2wK-izT9qOk.woff2) format('woff2');. unicode-range: U+01

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	172
Entropy (8bit):	5.212204664713075
Encrypted:	false
SSDEEP:	3:lwZ4cndk1szKYo0B47GAOxvi3xaIYQ1pxoLJm/tgaGa1r/MDo/:ItYsmfa1viha/SpxoLJIzdQDy
MD5:	32081FF2D7AF11D9922150075AD68B96
SHA1:	C799211B03A271EAB532AFC4FE8D4C34A37DF1E4
SHA-256:	51FA91230C27FCB21E78E4A301736E7CE2F5568D50B495519AC234F4F459A8DC
SHA-512:	9E306DB2F439CA25475EB82449960FEC32FA5E83BCBBBB4A4CCB508819BC0713F7119B75649A1F7180E4B45FD6DC258350BD362C305E8B69371A951304B5147B
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISVgn41mTv-y3JjxIFDZRU-s8SBQ14bxIZEgUNrgUHKxIFDVPydWESBQ2SBVTOEgUNd7DIgxIFDTVnGxESBQ3eP5O-EgUNkWGVThIFDa5eyPYSBQ0xPZQw?alt=proto
Preview:	Cn8KCw2UVPrPGgQIBxgBCgsNeG8SGRoECAkYAQoLDa4FBysaBAgJGAEKCw1T8nVhGgQIDRgBCgsNkgVUzhoECDwYAQoLDXewyIMaBAgfGAEKBw01ZxsRGgAKCw3eP5O+GgQIIhgBCgcNkWGVThoACgcNrl7I9hoACgcNMT2UMBoA

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	166
Entropy (8bit):	5.852184084844084
Encrypted:	false
SSDEEP:	3:yionv//thPlGARtjmA66MF5DpwloyzFZp0xdkgl08mzsPS98WInwgblSHxp2p/Hb:6v/lhPIARoA6b5tQoEZCkglFmRhawgB5
MD5:	D2D649B406D7A325683E2CCBD3297E43
SHA1:	819D6E6BF4CE1219BF83DEB5CB33A04A57E12C07
SHA-256:	E9BDAE625005100947D641A34F00BDD51B435D2C5979DF3F3F32F0D812CB17F7
SHA-512:	19E7F5D74C422DB0DC24B1748C174931CCC59EA0F80EE7F92293C7EF05956D477C8287F21CB10FCFF6867E10AC81C96DC138F9C5FF1F83F3AC4FC66A7F7D1AE0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0......,.....PLTE....................r.....tRNS. ... ..<~...=IDATx.c.~.Q.I......!V....'......X%L.2.....b.U.U.(.&.0.V.a5...-...........IEND.B`.

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.202819531114783
Encrypted:	false
SSDEEP:	3:YWQRAW64:YWQmq
MD5:	7363E85FE9EDEE6F053A4B319588C086
SHA1:	A15E2127145548437173FC17F3E980E3F3DEE2D0
SHA-256:	C955E57777EC0D73639DCA6748560D00AA5EB8E12F13EBB2ED9656ADD3908F97
SHA-512:	A2FD24056E3EC2F1628F89EB2F1B36A9FC2437AE58D34190630FE065DF2BBEDAF9BD8AEE5F8949A002070052CA68CC6C0167214DD55DF289783CFF682B808D85
Malicious:	false
Reputation:	low
URL:	http://finance.cocoricopatisserie.co.uk/ls.php?t=66f9d2e0&token=176e2698125e51a361c995c5480d3514fd06e594
Preview:	{"success":true}

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65168)
Category:	dropped
Size (bytes):	85260
Entropy (8bit):	5.370957781359195
Encrypted:	false
SSDEEP:	1536:pKgIKzw+DiSMW4QQtIyY/UFHVsBm8r7e7dyIClTwYA17jaO8lfBBcXq+X4mhEEw7:9j3MIoF1kLHfTEI8zvvM
MD5:	B04A3BCCD23DDEB7982143707A63CCF9
SHA1:	4A5DC1389AAD050A44EE5E81408238A317AB3413
SHA-256:	764B9E9F3AD386AAA5CDEAE9368353994DE61C0BEDE087C8F7E3579CB443DE3B
SHA-512:	3F844A06577168DE05B187E727DD07B9A20CF0453CD00E28AEFDEEFCF783DC680EBD941ECD79A53AB26510AF1F855984C2DDC77565EF0DB11D4BA6E46F59D748
Malicious:	false
Reputation:	low
Preview:	/!. jQuery JavaScript Library v1.5.1. * http://jquery.com/. . Copyright 2011, John Resig. * Dual licensed under the MIT or GPL Version 2 licenses.. * http://jquery.org/license. . Includes Sizzle.js. * http://sizzlejs.com/. * Copyright 2011, The Dojo Foundation. * Released under the MIT, BSD, and GPL Licenses.. . Date: Wed Feb 23 13:55:29 2011 -0500. */.(function(a,b){function cg(a){return d.isWindow(a)?a:a.nodeType===9?a.defaultView\|\|a.parentWindow:!1}function cd(a){if(!bZ[a]){var b=d("<"+a+">").appendTo("body"),c=b.css("display");b.remove();if(c==="none"\|\|c==="")c="block";bZ[a]=c}return bZ[a]}function cc(a,b){var c={};d.each(cb.concat.apply([],cb.slice(0,b)),function(){c[this]=a});return c}function bY(){try{return new a.ActiveXObject("Microsoft.XMLHTTP")}catch(b){}}function bX(){try{return new a.XMLHttpRequest}catch(b){}}function bW(){d(a).unload(function(){for(var a in bU)bU[a](0,1)})}function bQ(a,c){a.dataFilter&&(c=a.dataFilter(c,a.dataType));var e=a.dataTypes,f={},g,h

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.202819531114783
Encrypted:	false
SSDEEP:	3:YWQRAW64:YWQmq
MD5:	7363E85FE9EDEE6F053A4B319588C086
SHA1:	A15E2127145548437173FC17F3E980E3F3DEE2D0
SHA-256:	C955E57777EC0D73639DCA6748560D00AA5EB8E12F13EBB2ED9656ADD3908F97
SHA-512:	A2FD24056E3EC2F1628F89EB2F1B36A9FC2437AE58D34190630FE065DF2BBEDAF9BD8AEE5F8949A002070052CA68CC6C0167214DD55DF289783CFF682B808D85
Malicious:	false
Reputation:	low
URL:	http://finance.cocoricopatisserie.co.uk/ls.php?t=66f9d303&token=642f1764c2344e1f5c29ba4aa4a6abc6eda7da17
Preview:	{"success":true}

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://finance.cocoricopatisserie.co.uk/track.php?domain=cocoricopatisserie.co.uk&toggle=browserjs&uid=MTcyNzY0ODUyMC4xODk6NGRlMzI1MTA1OTE5NmQ5ZjEwYWQwMWNiYjEzM2RlNzdkYTgxZmU2MzkxMjY0OTVhOWMxYTdhMDQxNWRlMDM1Yzo2NmY5ZDMwODJlMjFk
Preview:	....................

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	200
Entropy (8bit):	5.025855206845441
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slhohC/vmI4SmK0xhFELE47zF:t6qnoU/vmRI0xQTF
MD5:	11B3089D616633CA6B73B57AA877EEB4
SHA1:	07632F63E06B30D9B63C97177D3A8122629BDA9B
SHA-256:	809FB4619D2A2F1A85DBDA8CC69A7F1659215212D708A098D62150EEE57070C1
SHA-512:	079B0E35B479DFDBE64A987661000F4A034B10688E26F2A5FE6AAA807E81CCC5593D40609B731AB3340E687D83DD08DE4B8B1E01CDAC9D4523A9F6BB3ACFCBA0
Malicious:	false
Reputation:	low
URL:	https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1879)
Category:	dropped
Size (bytes):	153198
Entropy (8bit):	5.54355971169404
Encrypted:	false
SSDEEP:	1536:8ni6+zNKofjr9PyfpK7fDH+7pSU6GZvu85pistHWvR3+2xwHzgmcfpUWgQABuucP:wqM7vptHWpu22H9dBuDj3dmChm9Abj
MD5:	B22C1AC60EAD0F027FBE0661AA5AED8A
SHA1:	6F078850BF476EE27DC182C5D7203586DE7B403D
SHA-256:	BD4D16F5DCFC31BEEDDCBB565F052072034461C145DA3DF205B834422709A64D
SHA-512:	DE4B373622BFCF826278EEF166AF9E4867E2333E2396FBE969FD7C4F50950682BDD7A7BFD766743F6565F3562B7F8BC45D6DE46C98A2BB49C724C47E4ED46949
Malicious:	false
Reputation:	low
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17301431,17301433,17301436,17301511,17301516,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":0,"afs_gpp_api":0}}};var n;function ba(a){var b=0;return function(){return b<a.

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1879)
Category:	dropped
Size (bytes):	153223
Entropy (8bit):	5.5437637967096665
Encrypted:	false
SSDEEP:	1536:Cni6+zNKofjr9PyfpK7fDH+7pSU6GZvu85pistHWvR3+2xwHzgmcfpUWgQABuucP:OqM7vptHWpu22H9dBuDj3dmChm9Abj
MD5:	C875D08DB819C6BD95956ED168ABAE89
SHA1:	C5784C32F97B5A264C33D2C72127DA98C9D7C41F
SHA-256:	0667AA014554DEF8BAA63E171F87E26A7A567DA7F92FA6CB8369D32446958B35
SHA-512:	E9391F0090891CA7FC87AB3F319656E37B7AEFA7CCE4E725328365FE5865CE2DE6312416860B778FB83D07ACBCF2BCE007A9EB003F9AC7F5191FE60CF0951233
Malicious:	false
Reputation:	low
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17300002,17301437,17301439,17301442,17301511,17301515,17301516,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":0,"afs_gpp_api":0}}};var n;function ba(a){var b=0;retu

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://finance.cocoricopatisserie.co.uk/track.php?domain=cocoricopatisserie.co.uk&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzY0ODQ4MC44ODk5OjczODdlOTgwODU3MmY1NzRhY2IwNTYyZmU4NDU1OGQ2NGNkYWI1MzlkMDNiZTIzZTQ2ZTdiNjNhZjY0NTY0OTk6NjZmOWQyZTBkOTQwMg%3D%3D
Preview:	....................

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	396
Entropy (8bit):	4.993257872070729
Encrypted:	false
SSDEEP:	6:jU0LELWVMroRLLJULlpbKSy1wibxjpwVKRbq9Bi/z2tkywW/GBWlK:jkWlRLLsltTibx6UdqGL2AK9lK
MD5:	D19F13ABB39098BE07569E078047DE48
SHA1:	583C6CB1BFF82BA7FD8FE0F12FDF8DC988EFD4B6
SHA-256:	3D0F73C914640E6ACD493F58A3BBE324F76230010C5B594653D6BD08D4BE9424
SHA-512:	0D3F62B83F43140C91B472A0AEA2F814675009BEDDD216B4C836CD80582545ACE0ED42215C2E660CA2151B12E2433199F45744751E61A285221459DE405359FF
Malicious:	false
Reputation:	low
URL:	https://www.mydomaincontact.com/forms/script-addon.js
Preview:	// -- additional script for the sale offer version of the form..$(document).ready(function() {. $("#currency").select2({minimumResultsForSearch: -1});.});...function isSalePriceValid() {. $("#priceHolder").removeClass('inputError');. var val = $('#price').val();..var isInt = /^\d+$/.test(val);..if (val && !isInt) {. $("#priceHolder").addClass('inputError');..}..return isInt;.}.

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 19307
Category:	downloaded
Size (bytes):	6644
Entropy (8bit):	7.969567023446804
Encrypted:	false
SSDEEP:	192:RgWIda+EV3S+ljOEf0D4MZptqfLH9hL9xnTuE:XP+uiD8MZpIfzJxTj
MD5:	0623AD6D28D9655CE7AECBCD149E3B2F
SHA1:	B3DD8DDDBDD0C860A0A650E62D3351612C6C7F14
SHA-256:	A8A9106FFB3BE25193CA28A0D765BC02BD219614AD9390130608C9776C09BEEF
SHA-512:	2CD14883A98845A91E25568ED6BF48F99C69B05D17C83846901F1CEB1C4FB0A816993638B6AC4170547D0F4F1D86F34DEA5C7C86FCA3C3DD46E299A868B72C10
Malicious:	false
Reputation:	low
URL:	http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Semaglutide+Henry&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpj4R7Nz9MtgVxMM3LZXthcmrpMZO2hM9CJdYTOBTZlOqOWIKeyAnZ3l9wmC7ZfZQ9oOSTTbuMheWysdFe-MYszSn-Z5cfGUaCQmtDzAocoW2PrGSSnlOXrv0KCozzVftbfzk&pcsa=false&nb=0
Preview:	...........\iw.J..l.........5$C....l'8^r2>Bj@FH..0.;...TwK.@.&.$s..c..R]]]{...E..}...H..#...k...z..t.k..p...T..t..=..;.<.....w....ic..q........'.x..k...........}.[...p.[......t....3C.i...\......wg.w;.u..k.'7..j{...F.^.?.....O.W..;......O7.W9.)<]..jc.8yj.gV.s~.~:.8.?~zU\|w................G..Q.^Oi...... .....t:.O+y...J......#......".1.\|.......:...s....z.:.s.\g>f)..O.T.fA. .j.@.\|..'A/..*...}..G.M..(.....&{.....Y.r....o.6....?.,g...\........fo..p=.p.z`.>.,.7..d.. ...hS.....6.F..z.7<....Z.6..n.>.w].70.j.r..k......b.....(..m............Ru<.t...t....=1b.h.V..g.e.....1.MZQ..o..iu.....#..[X.......r.c...<.\|Vv.........L.....@N...q...f..o=1...........M.f.....XU....#......p..C...Y...~.T.y.U.Be..".<>:.....y.}O..5..1.{...R{v&](.....9Vi..8.....=...;,(..6b~.x.......f...Ook..3=.....K.<.>....H...m1.\|".....u. pG`.p....E..j..)X..v&...]...z.K`G....q.+....).WH.OU..,..Tm..2@....;n(m..m}~.q..f.d2...R.V....1..\.M6.....>.2).q\..^.....~....x%N=.$..P.=}d....EO

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (402), with no line terminators
Category:	dropped
Size (bytes):	402
Entropy (8bit):	5.4288206828926535
Encrypted:	false
SSDEEP:	6:xWzPUoBdDgbgerbqINjV20zPEMBb7M+dmjdRUcgbgerbUyyDGYW20zPEMBbAen:xWIr37zQMd7H24b3UIQMd7n
MD5:	E080A03B4F321BACD1C84B424F12FD55
SHA1:	2E83461AABC20D8EA4A93FBF95898AD80526103C
SHA-256:	FBDB0E06D8E662D4C916A50DB67BD74E2F9A409061E8CBE3865F3A19C2F38121
SHA-512:	6AF8A96683DF65BA4D29FB0A0686BD978DDF7578D4908ED79F36D8A1E53250F528F32B546BD342B62FED714577E3A946A700A6046C300331782B46A4EFD5FFED
Malicious:	false
Reputation:	low
Preview:	__sasCookie({"_cookies_":[{"_value_":"ID=3b32bd513446ced8:T=1727648485:RT=1727648485:S=ALNI_MbRP4XeKylCHXM0akZiV94688aoYw","_expires_":1761344485,"_path_":"/","_domain_":"cocoricopatisserie.co.uk","_version_":1},{"_value_":"UID=00000efec89438b8:T=1727648485:RT=1727648485:S=ALNI_MZRWwKZJPMk18a1_T5pCrKfD5CRXg","_expires_":1761344485,"_path_":"/","_domain_":"cocoricopatisserie.co.uk","_version_":2}]});

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19684, version 1.0
Category:	downloaded
Size (bytes):	19684
Entropy (8bit):	7.988639555000283
Encrypted:	false
SSDEEP:	384:ONwiXfXdhL8GpPfyGjRzz40RK4dqy5n393AFCdIXSXxk+ukfD+EPzDF7z9XkZfYz:+f3AGpPrRzz4h4dqy393AFuXx+EbD1xJ
MD5:	29F5BA8FC1F2AC21FA0ED86EC404BCDE
SHA1:	ADDA13FABCBFE7C004AA99A5642012A927B20F3F
SHA-256:	251342FF1E3A31CD968101F7492ECD6B59E0058190A38B77E15A64928FC44593
SHA-512:	5149122690C7BE981EBA0018B751DD9615EBF24839912BA377ABE252E026AC441F14DC68BCF5A80E3733644107F971F107DAC0E0D322FD8ECA0222E74E9AB34E
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/mate/v17/m8JdjftRd7WZ6zq2Ww.woff2
Preview:	wOF2......L...........L..............................8....`..d.l........X.....l..6.$..T. ..R..w..=....6.'.....[.Q..Y...6.`..S.......X.V.C..Pi.....]..DJ.....\..%N.P..]..S..[^fCh.x..........X,.......rv..ms............cq.h.y.O...J2..IE.[.{...3.m.kr....O{.>t.{O..M.=&.p.P~.?$.W.8.Q.J/.<E..RtD.O..&..=<?......f.1j.m..l#V.......>Q.;..N.>O...<O......kx.g?.}3....P.x.....5...!B(..)......$.H.........J..{...Z-...B.%..........!.......-........;.....f...7..PX...>.tM."k".N.+<._..7..2....#....hW?.......j.....r.B.Y./..2...OD.S.~.@`.no......\.6...l.0...G!.............6@.(.!....=...Z]5.c.i..\|+....t~m.......)...N...l.>t.3y5gV!...T...AR..`<...Q..A.O.$<.>......!f!9`.n....w...n...nSZl7q9._..o".d..dI?u....ZV.$..>Vf...T.!............,0....Q.2._+...C..Z}Y#...c...k...R...c.* ...W..._..... D.\q.u7.r...<...0..A0.M.A@..6-...>..q)SaO.N..-.N*.......c..P..;........U..mM.......d......2.`-..fD5"...D.hD.....i..$.'......b7.9....a .z6.....\..Y[[...!....-..s ...6.>.......-..q

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (14092)
Category:	downloaded
Size (bytes):	14900
Entropy (8bit):	5.485163589181646
Encrypted:	false
SSDEEP:	192:2E12iMpgbLLgh3VLWrw8+saUJwrW9fswW:2ni0d3hOfRJwyJswW
MD5:	489C78642F190D0FF1A5A5FD6425F369
SHA1:	38909FF63DB22219EA559F0D881F190DEFAE3E40
SHA-256:	F532EA13566310AD410EC43200C96E7D5BCC1424D6E76DD5F3F8CCD2AE730335
SHA-512:	6BCAA174000BC56A843B06ACBD34131EFBCF974C2BF8D8F1DFED006C24DC944C63F63FB28F02615AEE4E8C7245FEEA970B53D4630DD66E2F075BB33C0D663E0B
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&hl=en&rpbu=http%3A%2F%2Ffinance.cocoricopatisserie.co.uk%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2558334540730768&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266%2C72717108&format=r3%7Cs&nocache=5961727648481571&num=0&output=afd_ads&domain_name=finance.cocoricopatisserie.co.uk&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1727648481583&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=791&frm=0&uio=--&cont=tc&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=http%3A%2F%2Ffinance.cocoricopatisserie.co.uk%2F
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.202819531114783
Encrypted:	false
SSDEEP:	3:YWQRAW64:YWQmq
MD5:	7363E85FE9EDEE6F053A4B319588C086
SHA1:	A15E2127145548437173FC17F3E980E3F3DEE2D0
SHA-256:	C955E57777EC0D73639DCA6748560D00AA5EB8E12F13EBB2ED9656ADD3908F97
SHA-512:	A2FD24056E3EC2F1628F89EB2F1B36A9FC2437AE58D34190630FE065DF2BBEDAF9BD8AEE5F8949A002070052CA68CC6C0167214DD55DF289783CFF682B808D85
Malicious:	false
Reputation:	low
URL:	http://finance.cocoricopatisserie.co.uk/ls.php?t=66f9d2fb&token=ef6bc7c99695dcaf0de157a08fb06e6d0e004596
Preview:	{"success":true}

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1500 x 600, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	11375
Entropy (8bit):	7.645494653990172
Encrypted:	false
SSDEEP:	192:Wg3JLNIdFb540f7mqTiLHrBjcCTN1MbaJD/RBse6ogkORdLv2Ha/:vD4N54IsHVjdN1tD7lODL/
MD5:	0CB2E5165DC9324EB462199F04E1FFA9
SHA1:	9E0F89847EC8A98D98A6020BC5C4ED32B7A48BF8
SHA-256:	67DFF0AAD873050F12609885F2264417CCDD0D438311000A704C89F0865F7865
SHA-512:	7A285C4A87B9F9093B7BA720D8FE08E0AD7E2EBDE9EF8C8D11B70AFA08245AF8F8A7281C7B3FBE8BAD21C3AFDE4F32634D3BD416822892AA47BA82C12F4B8191
Malicious:	false
Reputation:	low
URL:	http://d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
Preview:	.PNG........IHDR.......X.....Om......tEXtSoftware.Adobe ImageReadyq.e<....PLTE......cdtIK^IK]IK\03IHK_acsceubdtcet..0=@SHK]IL]HK\MPbNQbORc.....0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes..-..0. 5.!6."7.#8."6.$9 %:!&;"'<"';$)>#(<%?$)=&+@%>',A&+?(-B).C(-A).B/C+0D,1E05I15G<@R=ASIM_HL]KO`HL\MQbaeu.....-../.....0../.....0../..1..1..2..3..4. 5.!6.#8.$9.%: &;"':$)<&+>',?(-@).A/B+0C,1D/A-2E.3F/4G05H16I/4F05G38K6;N49K;@S;@R<ASGL^bfuaetbft.....0.!5."6.#7.$8.%9 &:!';"(<!':#)=#)<$=&,@&,?+1E)/B06IGL]GL\HM]bfs..-.....0..1. 4.!5."6.#7.$8 '< ';*0B.4F06H06G..-..0.!5 (< (;...................................................................................................................................................................................................................................................t....tRNS..............................................................................................................................................

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://finance.cocoricopatisserie.co.uk/track.php?domain=cocoricopatisserie.co.uk&toggle=browserjs&uid=MTcyNzY0ODUzNS40NjQ4OjRlZmNjZDYyZTg2Yjg2ODM1MzA1NGVmOTk4MTIxZDM1YjUyZjg0M2M3NzBhMzBjYzUzNzA5YzRiN2I3MmUxNzA6NjZmOWQzMTc3MTdiOA%3D%3D
Preview:	....................

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.202819531114783
Encrypted:	false
SSDEEP:	3:YWQRAW64:YWQmq
MD5:	7363E85FE9EDEE6F053A4B319588C086
SHA1:	A15E2127145548437173FC17F3E980E3F3DEE2D0
SHA-256:	C955E57777EC0D73639DCA6748560D00AA5EB8E12F13EBB2ED9656ADD3908F97
SHA-512:	A2FD24056E3EC2F1628F89EB2F1B36A9FC2437AE58D34190630FE065DF2BBEDAF9BD8AEE5F8949A002070052CA68CC6C0167214DD55DF289783CFF682B808D85
Malicious:	false
Reputation:	low
URL:	http://finance.cocoricopatisserie.co.uk/ls.php?t=66f9d317&token=f8a06e2da2fe5106d64d1d4e5453cb923d17adf3
Preview:	{"success":true}

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	391
Entropy (8bit):	4.7474201749507134
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slzTPl2O4UYaeLIT4W+KS4S1UpMTQpi6jUs8sh6B+BSmK0C:t6qFPUPkHSt1UiT6i6jUs8b0I0C
MD5:	8959DDCD9712196961D93F58064ED655
SHA1:	62AB1E38E7E9FBF58A04381B76C2D96A9C829F24
SHA-256:	17C7A89BF169C2EE400E31B042CEA68513F06B9CD7D1E8990DBEC800F0D771C7
SHA-512:	5E9EFFA313C30B351345DB963238B4AFD0728CA302FD79A853C80C89F042266D44CC1D29492520FB0FA80B47135E54E6963DFC21972F6B236B84C1DA2FAD809D
Malicious:	false
Reputation:	low
URL:	https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L20.49 19l-4.99-5zm-6 0C7.01 14 5 11.99 5 9.5S7.01 5 9.5 5 14 7.01 14 9.5 11.99 14 9.5 14z"/><path d="M0 0h24v24H0z" fill="none"/></svg>.

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (20415)
Category:	downloaded
Size (bytes):	37753
Entropy (8bit):	5.403863216824828
Encrypted:	false
SSDEEP:	384:2ni0XP/zfuiS4u/uHeDCpqnhe/erQieS+hB+E2zVMhp+hTwL:2iIP/z9ogHqnhKeQip0BB2zyhplL
MD5:	23F46E50D67BC9EF26A21BCC4A104626
SHA1:	19E24B2010CCDAE92E2C269DDDD85D5AC87AC81D
SHA-256:	F43A1B4F2DEFCDC122E252F2B68BFD0ECEAB6049FF6B1E959C20E57BCA9818DC
SHA-512:	07E16AF8C38299DE6E4C2485267178EBA4AF28F296F2C32D42CC724D34BD21122777C3ABABF7189D57698002BEB7F7D6EA81D2045904BCE97A9DEE9EC137A319
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&sct=ID%3D4f20d6f152843af6%3AT%3D1727648483%3ART%3D1727648483%3AS%3DALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw&sc_status=6&hl=en&rpbu=http%3A%2F%2Ffinance.cocoricopatisserie.co.uk%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NTMxLjMxNTZ8YTdkOTlkYmMxZjhkZDIxNmI0M2VhOGQ1N2M4YzUxMGI2YjUyYjYwZHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Eagles%20Sphere%20Sphere&afdt=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpjx58G6o1K7o-viAFkNJUZINzDQYxSL87u9idvmGA6WnLKvG43X1VTpA_tX-JuOD2qRhHKZIbvkkTZQebs3sDLnAIMFHH3E399kjaAqb00X1Isp9zrXzZpzsXWiuakI_FhDM&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266%2C72717108&format=n3&ad=n3&nocache=7351727648530604&num=0&output=afd_ads&domain_name=finance.cocoricopatisserie.co.uk&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1727648530606&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=791&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=http%3A%2F%2Ffinance.cocoricopatisserie.co.uk%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8%26query%3DEagles%2BSphere%2BSphere%26afdToken%3DChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpjx58G6o1K7o-viAFkNJUZINzDQYxSL87u9idvmGA6WnLKvG43X1VTpA_tX-JuOD2qRhHKZIbvkkTZQebs3sDLnAIMFHH3E399kjaAqb00X1Isp9zrXzZpzsXWiuakI_FhDM%26pcsa%3Dfalse%26nb%3D0%26nm%3D3
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://finance.cocoricopatisserie.co.uk/track.php?domain=cocoricopatisserie.co.uk&toggle=browserjs&uid=MTcyNzY0ODU0My40MzU5OmMyZDdmMzE5YzBiMWJhMjA2NGIxOTNlZWYyZmQ4YjA2YjBlMWQ2YmQ2ZmZkOGUyZDMyMGUwYzY5OTI0MDBiZWQ6NjZmOWQzMWY2YTZjOQ%3D%3D
Preview:	....................

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://finance.cocoricopatisserie.co.uk/track.php?domain=cocoricopatisserie.co.uk&toggle=browserjs&uid=MTcyNzY0ODUxNS4wNzYzOjIxNmUwMTkzNDk2OTc5ZTM3MGQ1YzM0YjczYTg0NTYxODdjZTI3NWZmMDY3M2QxZDQ3MWNmYzI5OGNiNTEyMDY6NjZmOWQzMDMxMjlkYQ%3D%3D
Preview:	....................

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 30, 2024 00:21:08.233230114 CEST	49674	443	192.168.2.5	23.1.237.91
Sep 30, 2024 00:21:08.233244896 CEST	49675	443	192.168.2.5	23.1.237.91
Sep 30, 2024 00:21:08.326924086 CEST	49673	443	192.168.2.5	23.1.237.91
Sep 30, 2024 00:21:17.842497110 CEST	49674	443	192.168.2.5	23.1.237.91
Sep 30, 2024 00:21:17.873745918 CEST	49675	443	192.168.2.5	23.1.237.91
Sep 30, 2024 00:21:18.061394930 CEST	49673	443	192.168.2.5	23.1.237.91
Sep 30, 2024 00:21:19.585834980 CEST	443	49703	23.1.237.91	192.168.2.5
Sep 30, 2024 00:21:19.585927010 CEST	49703	443	192.168.2.5	23.1.237.91
Sep 30, 2024 00:21:20.317051888 CEST	49709	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:20.317353964 CEST	49710	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:20.323467970 CEST	80	49709	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:20.323503971 CEST	80	49710	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:20.323566914 CEST	49709	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:20.323587894 CEST	49710	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:20.323843002 CEST	49709	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:20.331094980 CEST	80	49709	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:21.006941080 CEST	80	49709	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:21.006974936 CEST	80	49709	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:21.006987095 CEST	80	49709	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:21.006998062 CEST	80	49709	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:21.007009029 CEST	80	49709	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:21.007019997 CEST	80	49709	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:21.007030010 CEST	80	49709	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:21.007030010 CEST	49709	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:21.007076025 CEST	49709	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:21.007076025 CEST	49709	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:21.062937975 CEST	49709	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:21.067975998 CEST	80	49709	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:21.258719921 CEST	80	49709	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:21.283268929 CEST	49713	80	192.168.2.5	18.66.121.138
Sep 30, 2024 00:21:21.288614035 CEST	80	49713	18.66.121.138	192.168.2.5
Sep 30, 2024 00:21:21.288728952 CEST	49713	80	192.168.2.5	18.66.121.138
Sep 30, 2024 00:21:21.298945904 CEST	49713	80	192.168.2.5	18.66.121.138
Sep 30, 2024 00:21:21.301691055 CEST	49709	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:21.304204941 CEST	49709	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:21.305125952 CEST	80	49713	18.66.121.138	192.168.2.5
Sep 30, 2024 00:21:21.310513020 CEST	80	49709	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:21.313673019 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:21.313774109 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:21.313863993 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:21.314086914 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:21.314121008 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:21.374666929 CEST	49716	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:21.379564047 CEST	80	49716	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:21.379650116 CEST	49716	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:21.379786015 CEST	49716	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:21.384721041 CEST	80	49716	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:21.500772953 CEST	80	49709	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:21.542351007 CEST	49709	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:21.926893950 CEST	80	49713	18.66.121.138	192.168.2.5
Sep 30, 2024 00:21:21.926927090 CEST	80	49713	18.66.121.138	192.168.2.5
Sep 30, 2024 00:21:21.926939964 CEST	80	49713	18.66.121.138	192.168.2.5
Sep 30, 2024 00:21:21.926949978 CEST	80	49713	18.66.121.138	192.168.2.5
Sep 30, 2024 00:21:21.926997900 CEST	80	49713	18.66.121.138	192.168.2.5
Sep 30, 2024 00:21:21.927010059 CEST	80	49713	18.66.121.138	192.168.2.5
Sep 30, 2024 00:21:21.927021027 CEST	80	49713	18.66.121.138	192.168.2.5
Sep 30, 2024 00:21:21.927066088 CEST	80	49713	18.66.121.138	192.168.2.5
Sep 30, 2024 00:21:21.927076101 CEST	80	49713	18.66.121.138	192.168.2.5
Sep 30, 2024 00:21:21.927079916 CEST	49713	80	192.168.2.5	18.66.121.138
Sep 30, 2024 00:21:21.927086115 CEST	80	49713	18.66.121.138	192.168.2.5
Sep 30, 2024 00:21:21.927182913 CEST	49713	80	192.168.2.5	18.66.121.138
Sep 30, 2024 00:21:21.935236931 CEST	80	49713	18.66.121.138	192.168.2.5
Sep 30, 2024 00:21:21.955391884 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:21.969064951 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:21.969088078 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:21.970180988 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:21.970271111 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:21.975003004 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:21.975096941 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:21.975599051 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:21.975614071 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:21.987025976 CEST	49713	80	192.168.2.5	18.66.121.138
Sep 30, 2024 00:21:22.017466068 CEST	80	49713	18.66.121.138	192.168.2.5
Sep 30, 2024 00:21:22.017479897 CEST	80	49713	18.66.121.138	192.168.2.5
Sep 30, 2024 00:21:22.017627954 CEST	49713	80	192.168.2.5	18.66.121.138
Sep 30, 2024 00:21:22.019407034 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.054195881 CEST	80	49716	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:22.060367107 CEST	49717	80	192.168.2.5	18.66.121.138
Sep 30, 2024 00:21:22.065749884 CEST	80	49717	18.66.121.138	192.168.2.5
Sep 30, 2024 00:21:22.065840006 CEST	49717	80	192.168.2.5	18.66.121.138
Sep 30, 2024 00:21:22.066081047 CEST	49717	80	192.168.2.5	18.66.121.138
Sep 30, 2024 00:21:22.071573019 CEST	80	49717	18.66.121.138	192.168.2.5
Sep 30, 2024 00:21:22.097135067 CEST	49716	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:22.230214119 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.230257988 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.230288982 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.230298042 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.230321884 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.230356932 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.230365992 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.236618996 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.236648083 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.236664057 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.236671925 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.236681938 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.236721992 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.242506027 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.242549896 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.242558002 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.248934984 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.248989105 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.248996019 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.251777887 CEST	49718	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:22.251821041 CEST	443	49718	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:22.251882076 CEST	49718	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:22.252772093 CEST	49718	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:22.252782106 CEST	443	49718	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:22.285129070 CEST	49719	443	192.168.2.5	142.250.185.100
Sep 30, 2024 00:21:22.285175085 CEST	443	49719	142.250.185.100	192.168.2.5
Sep 30, 2024 00:21:22.285242081 CEST	49719	443	192.168.2.5	142.250.185.100
Sep 30, 2024 00:21:22.286642075 CEST	49719	443	192.168.2.5	142.250.185.100
Sep 30, 2024 00:21:22.286658049 CEST	443	49719	142.250.185.100	192.168.2.5
Sep 30, 2024 00:21:22.300683022 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.319058895 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.319513083 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.319576025 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.319587946 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.325896978 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.325972080 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.325979948 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.332087994 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.332192898 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.332195044 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.332221985 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.332266092 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.338367939 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.344949007 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.345009089 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.345021963 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.351089954 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.351150990 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.351159096 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.356878996 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.356935978 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.356947899 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.362888098 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.362936020 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.362945080 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.369422913 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.369479895 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.369487047 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.375133038 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.375193119 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.375202894 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.382235050 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.382299900 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.382308006 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.382396936 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.382448912 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.382456064 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.407299042 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.407361031 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.407371998 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.407500982 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.407548904 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.407557964 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.407861948 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.407908916 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.407916069 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.411684036 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.411778927 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.411788940 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.417503119 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.417560101 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.417568922 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.423470974 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.423516989 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.423525095 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.431771994 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.431838036 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.431848049 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.435863018 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.435913086 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.435920000 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.440305948 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.440350056 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.440356970 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.445722103 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.445775032 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.445781946 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.451203108 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.451255083 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.451271057 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.456404924 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.456454992 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.456470013 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.461482048 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.461538076 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.461544991 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.465873003 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.465946913 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.465954065 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.470176935 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.470232010 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.470238924 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.474524021 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.474580050 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.474587917 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.478528023 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.478569031 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.478575945 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.482615948 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.482666969 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.482675076 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.486397028 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.486443043 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.486450911 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.490345001 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.490389109 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.490396023 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.493961096 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.494004011 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.494010925 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.497976065 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.498020887 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.498028040 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.500533104 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.500561953 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.500579119 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.500588894 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.500636101 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.502676964 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.504930973 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.504971981 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.504972935 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.504981995 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.505026102 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.507159948 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.509599924 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.509628057 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.509659052 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.509666920 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.509705067 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.511930943 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.513971090 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.514000893 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.514025927 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.514034033 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.514071941 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.516482115 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.518778086 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.518821001 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.518829107 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.521090984 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.521133900 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.521142006 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.523478031 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.523550034 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.523557901 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.525862932 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.525934935 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.525943041 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.528079033 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.528114080 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.528136015 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.528142929 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.528191090 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.530368090 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.532742977 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.532773018 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.532943010 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.532973051 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.533025026 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.534946918 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.535083055 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.535152912 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.582231998 CEST	49715	443	192.168.2.5	142.250.186.164
Sep 30, 2024 00:21:22.582253933 CEST	443	49715	142.250.186.164	192.168.2.5
Sep 30, 2024 00:21:22.714889050 CEST	80	49717	18.66.121.138	192.168.2.5
Sep 30, 2024 00:21:22.714907885 CEST	80	49717	18.66.121.138	192.168.2.5
Sep 30, 2024 00:21:22.714931011 CEST	80	49717	18.66.121.138	192.168.2.5
Sep 30, 2024 00:21:22.714946032 CEST	80	49717	18.66.121.138	192.168.2.5
Sep 30, 2024 00:21:22.714956999 CEST	80	49717	18.66.121.138	192.168.2.5
Sep 30, 2024 00:21:22.714967012 CEST	80	49717	18.66.121.138	192.168.2.5
Sep 30, 2024 00:21:22.714999914 CEST	49717	80	192.168.2.5	18.66.121.138
Sep 30, 2024 00:21:22.715024948 CEST	80	49717	18.66.121.138	192.168.2.5
Sep 30, 2024 00:21:22.715039015 CEST	80	49717	18.66.121.138	192.168.2.5
Sep 30, 2024 00:21:22.715045929 CEST	49717	80	192.168.2.5	18.66.121.138
Sep 30, 2024 00:21:22.715058088 CEST	80	49717	18.66.121.138	192.168.2.5
Sep 30, 2024 00:21:22.715069056 CEST	80	49717	18.66.121.138	192.168.2.5
Sep 30, 2024 00:21:22.715090990 CEST	49717	80	192.168.2.5	18.66.121.138
Sep 30, 2024 00:21:22.715105057 CEST	49717	80	192.168.2.5	18.66.121.138
Sep 30, 2024 00:21:22.720148087 CEST	80	49717	18.66.121.138	192.168.2.5
Sep 30, 2024 00:21:22.746772051 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:22.746813059 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:22.746887922 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:22.747152090 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:22.747162104 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:22.749417067 CEST	49722	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:22.749458075 CEST	443	49722	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:22.749584913 CEST	49722	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:22.750478983 CEST	49722	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:22.750493050 CEST	443	49722	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:22.760010958 CEST	49717	80	192.168.2.5	18.66.121.138
Sep 30, 2024 00:21:22.887775898 CEST	443	49718	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:22.896457911 CEST	49718	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:22.896490097 CEST	443	49718	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:22.897581100 CEST	443	49718	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:22.897682905 CEST	49718	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:22.901350021 CEST	49718	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:22.901460886 CEST	443	49718	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:22.923738003 CEST	443	49719	142.250.185.100	192.168.2.5
Sep 30, 2024 00:21:22.924417973 CEST	49719	443	192.168.2.5	142.250.185.100
Sep 30, 2024 00:21:22.924443960 CEST	443	49719	142.250.185.100	192.168.2.5
Sep 30, 2024 00:21:22.925513983 CEST	443	49719	142.250.185.100	192.168.2.5
Sep 30, 2024 00:21:22.925590992 CEST	49719	443	192.168.2.5	142.250.185.100
Sep 30, 2024 00:21:22.926183939 CEST	49719	443	192.168.2.5	142.250.185.100
Sep 30, 2024 00:21:22.926280022 CEST	443	49719	142.250.185.100	192.168.2.5
Sep 30, 2024 00:21:22.950120926 CEST	49718	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:22.950150967 CEST	443	49718	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:22.982115030 CEST	49719	443	192.168.2.5	142.250.185.100
Sep 30, 2024 00:21:22.982126951 CEST	443	49719	142.250.185.100	192.168.2.5
Sep 30, 2024 00:21:22.998105049 CEST	49718	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:23.030119896 CEST	49719	443	192.168.2.5	142.250.185.100
Sep 30, 2024 00:21:23.377589941 CEST	443	49722	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:23.392838955 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.428133965 CEST	49722	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:23.444272995 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:23.481975079 CEST	49722	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:23.481995106 CEST	443	49722	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:23.482868910 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:23.482883930 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.483329058 CEST	443	49722	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:23.483419895 CEST	49722	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:23.484033108 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.484049082 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.484111071 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:23.489703894 CEST	49722	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:23.489907026 CEST	443	49722	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:23.490494013 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:23.490767002 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.491503000 CEST	49722	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:23.491513014 CEST	443	49722	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:23.491692066 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:23.491703033 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.539114952 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:23.539323092 CEST	49722	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:23.697130919 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.697180033 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.697218895 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.697237015 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:23.697268009 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.697307110 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:23.697451115 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.703105927 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.703144073 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.703172922 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.703203917 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:23.703232050 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.703253984 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:23.709610939 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.709673882 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:23.709685087 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.715878963 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.715931892 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:23.715940952 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.760838032 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:23.787409067 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.787652969 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.787683010 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.787765980 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:23.787785053 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.787836075 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:23.792500019 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.799123049 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.799190998 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:23.799202919 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.805507898 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.805541992 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.805651903 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:23.805666924 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.805707932 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:23.812113047 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.818042040 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.818186045 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.818247080 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:23.818274975 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.818320036 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:23.823884010 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.829839945 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.829890966 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:23.829920053 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.835418940 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.835452080 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.835486889 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:23.835499048 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.835555077 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:23.841675997 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.847583055 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.847647905 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:23.847656012 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.847747087 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.847791910 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:23.847796917 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.870264053 CEST	443	49722	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:23.870316982 CEST	443	49722	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:23.870351076 CEST	443	49722	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:23.870390892 CEST	49722	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:23.870404959 CEST	443	49722	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:23.870537996 CEST	49722	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:23.870768070 CEST	443	49722	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:23.876455069 CEST	443	49722	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:23.876487017 CEST	443	49722	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:23.876507044 CEST	49722	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:23.876512051 CEST	443	49722	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:23.876526117 CEST	443	49722	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:23.876583099 CEST	49722	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:23.878681898 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.878758907 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:23.878782034 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.878879070 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.878967047 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.878998995 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:23.879018068 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.879085064 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:23.879096031 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.879458904 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.879559994 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:23.879571915 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:23.929897070 CEST	49722	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:23.929950953 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:24.189680099 CEST	443	49722	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:24.189769030 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:24.189800978 CEST	443	49722	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:24.189826012 CEST	443	49722	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:24.189847946 CEST	49722	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:24.189862013 CEST	443	49722	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:24.189866066 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:24.189918995 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:24.189920902 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:24.189930916 CEST	49722	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:24.189938068 CEST	443	49722	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:24.189954042 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:24.189954996 CEST	443	49722	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:24.190005064 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:24.190010071 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:24.190011978 CEST	49722	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:24.190017939 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:24.190068007 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:24.190068007 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:24.190082073 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:24.190133095 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:24.190140009 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:24.190220118 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:24.190263033 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:24.190268040 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:24.190273046 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:24.190336943 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:24.190366030 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:24.190370083 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:24.190407038 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:24.190412045 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:24.190418005 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:24.190455914 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:24.191195011 CEST	49722	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:24.191212893 CEST	443	49722	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:24.191723108 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:24.191819906 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:24.191867113 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:24.191868067 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:24.191876888 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:24.191932917 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:24.191941977 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:24.191991091 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:24.192027092 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:24.192030907 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:24.195569992 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:24.195633888 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:24.195640087 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:24.195681095 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:24.195724010 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:24.195764065 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:24.195769072 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:24.195787907 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:24.195804119 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:24.195938110 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:24.195976973 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:24.195981026 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:24.196012974 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:24.196244955 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:24.196249962 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:24.196788073 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:24.196827888 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:24.196831942 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:24.196892977 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:24.196934938 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:24.196980000 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:24.196985006 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:24.197021008 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:24.197298050 CEST	49723	443	192.168.2.5	184.28.90.27
Sep 30, 2024 00:21:24.197331905 CEST	443	49723	184.28.90.27	192.168.2.5
Sep 30, 2024 00:21:24.197396040 CEST	49723	443	192.168.2.5	184.28.90.27
Sep 30, 2024 00:21:24.197607994 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:24.197705030 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:24.197789907 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:24.201471090 CEST	49723	443	192.168.2.5	184.28.90.27
Sep 30, 2024 00:21:24.201488018 CEST	443	49723	184.28.90.27	192.168.2.5
Sep 30, 2024 00:21:24.202312946 CEST	49720	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:24.202327967 CEST	443	49720	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:24.269690990 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:24.269743919 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:24.269979000 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:24.270368099 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:24.270381927 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:24.851843119 CEST	443	49723	184.28.90.27	192.168.2.5
Sep 30, 2024 00:21:24.851923943 CEST	49723	443	192.168.2.5	184.28.90.27
Sep 30, 2024 00:21:24.856082916 CEST	49723	443	192.168.2.5	184.28.90.27
Sep 30, 2024 00:21:24.856096983 CEST	443	49723	184.28.90.27	192.168.2.5
Sep 30, 2024 00:21:24.856518030 CEST	443	49723	184.28.90.27	192.168.2.5
Sep 30, 2024 00:21:24.907203913 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:24.911032915 CEST	49723	443	192.168.2.5	184.28.90.27
Sep 30, 2024 00:21:24.923120022 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:24.923161030 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:24.924057961 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:24.928186893 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:24.928371906 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:24.928785086 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:24.947565079 CEST	49723	443	192.168.2.5	184.28.90.27
Sep 30, 2024 00:21:24.975405931 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:24.991424084 CEST	443	49723	184.28.90.27	192.168.2.5
Sep 30, 2024 00:21:25.133173943 CEST	443	49723	184.28.90.27	192.168.2.5
Sep 30, 2024 00:21:25.133305073 CEST	443	49723	184.28.90.27	192.168.2.5
Sep 30, 2024 00:21:25.133414030 CEST	49723	443	192.168.2.5	184.28.90.27
Sep 30, 2024 00:21:25.133461952 CEST	443	49723	184.28.90.27	192.168.2.5
Sep 30, 2024 00:21:25.133479118 CEST	49723	443	192.168.2.5	184.28.90.27
Sep 30, 2024 00:21:25.133503914 CEST	443	49723	184.28.90.27	192.168.2.5
Sep 30, 2024 00:21:25.170634985 CEST	49726	443	192.168.2.5	184.28.90.27
Sep 30, 2024 00:21:25.170672894 CEST	443	49726	184.28.90.27	192.168.2.5
Sep 30, 2024 00:21:25.170737028 CEST	49726	443	192.168.2.5	184.28.90.27
Sep 30, 2024 00:21:25.171098948 CEST	49726	443	192.168.2.5	184.28.90.27
Sep 30, 2024 00:21:25.171117067 CEST	443	49726	184.28.90.27	192.168.2.5
Sep 30, 2024 00:21:25.186422110 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.186530113 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.186589003 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.186609030 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.186638117 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.186745882 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.186778069 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.186793089 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.186830997 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.192150116 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.192378044 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.192430019 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.192457914 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.198540926 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.198600054 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.198621988 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.204750061 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.204812050 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.204833984 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.262032986 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.272974014 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.275381088 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.275438070 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.275445938 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.275474072 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.275517941 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.281763077 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.288024902 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.288074970 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.288080931 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.288111925 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.288247108 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.294403076 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.300640106 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.300683975 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.300735950 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.300760984 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.300805092 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.307065010 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.312830925 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.312872887 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.312882900 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.312916994 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.312952995 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.318748951 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.324675083 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.324722052 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.324737072 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.324755907 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.324840069 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.330471039 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.336407900 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.336482048 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.336498022 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.336581945 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.336648941 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.336654902 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.359658957 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.359738111 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.359745979 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.359920025 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.360168934 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.360174894 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.362129927 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.362205982 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.362211943 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.367671967 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.367927074 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.367933035 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.373531103 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.373588085 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.373593092 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.379501104 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.379574060 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.379600048 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.385305882 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.385355949 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.385363102 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.391268015 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.391336918 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.391341925 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.396476984 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.396539927 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.396544933 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.401797056 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.401854992 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.401880026 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.406887054 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.406969070 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.406991959 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.411746025 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.411799908 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.411822081 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.416682959 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.416759014 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.416769028 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.421314001 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.421364069 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.421380997 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.425563097 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.425601959 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.425611019 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.430001974 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.430051088 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.430064917 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.434201002 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.434262991 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.434278965 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.438299894 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.438632011 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.438647032 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.442168951 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.442231894 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.442240000 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.445875883 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.445947886 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.445962906 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.449884892 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.449958086 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.449966908 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.453876972 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.453953028 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.453969002 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.456068039 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.456124067 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.456130981 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.458261967 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.458334923 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.458347082 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.460680962 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.460760117 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.460761070 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.460787058 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.460850954 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.463002920 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.465251923 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.465316057 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.465328932 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.467566967 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.467638016 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.467650890 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.467672110 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.467729092 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.469937086 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.472219944 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.472266912 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.472287893 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.474544048 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.474615097 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.474628925 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.476931095 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.476982117 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.476996899 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.479345083 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.479413986 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.479428053 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.481719017 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.481779099 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.481791019 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.483959913 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.484060049 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.484072924 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.486166954 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.486217022 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.486228943 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.488656998 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.488729954 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.488730907 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.488751888 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.488831043 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.491082907 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.491250992 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.491297007 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.492105961 CEST	49724	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.492127895 CEST	443	49724	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.586760044 CEST	49709	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:25.591707945 CEST	80	49709	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:25.636864901 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.636923075 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.636992931 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.637628078 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:25.637641907 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:25.781320095 CEST	80	49709	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:25.813465118 CEST	49709	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:25.819180012 CEST	80	49709	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:25.823846102 CEST	49728	443	192.168.2.5	142.250.186.65
Sep 30, 2024 00:21:25.823889971 CEST	443	49728	142.250.186.65	192.168.2.5
Sep 30, 2024 00:21:25.823960066 CEST	49728	443	192.168.2.5	142.250.186.65
Sep 30, 2024 00:21:25.824601889 CEST	49729	443	192.168.2.5	142.250.186.65
Sep 30, 2024 00:21:25.824635029 CEST	443	49729	142.250.186.65	192.168.2.5
Sep 30, 2024 00:21:25.824722052 CEST	49729	443	192.168.2.5	142.250.186.65
Sep 30, 2024 00:21:25.825596094 CEST	49729	443	192.168.2.5	142.250.186.65
Sep 30, 2024 00:21:25.825614929 CEST	443	49729	142.250.186.65	192.168.2.5
Sep 30, 2024 00:21:25.826019049 CEST	443	49726	184.28.90.27	192.168.2.5
Sep 30, 2024 00:21:25.826138020 CEST	49726	443	192.168.2.5	184.28.90.27
Sep 30, 2024 00:21:25.826368093 CEST	49728	443	192.168.2.5	142.250.186.65
Sep 30, 2024 00:21:25.826379061 CEST	443	49728	142.250.186.65	192.168.2.5
Sep 30, 2024 00:21:25.830127001 CEST	49726	443	192.168.2.5	184.28.90.27
Sep 30, 2024 00:21:25.830137014 CEST	443	49726	184.28.90.27	192.168.2.5
Sep 30, 2024 00:21:25.830514908 CEST	443	49726	184.28.90.27	192.168.2.5
Sep 30, 2024 00:21:25.836055040 CEST	49726	443	192.168.2.5	184.28.90.27
Sep 30, 2024 00:21:25.855365038 CEST	49716	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:25.860452890 CEST	80	49716	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:25.880707026 CEST	80	49710	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:25.880774975 CEST	49710	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:25.883403063 CEST	443	49726	184.28.90.27	192.168.2.5
Sep 30, 2024 00:21:26.005022049 CEST	80	49709	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:26.013787031 CEST	49710	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:26.014373064 CEST	49730	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:26.019902945 CEST	80	49710	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:26.020515919 CEST	80	49730	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:26.020585060 CEST	49730	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:26.021228075 CEST	49730	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:26.027676105 CEST	80	49730	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:26.054425001 CEST	80	49716	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:26.105444908 CEST	443	49726	184.28.90.27	192.168.2.5
Sep 30, 2024 00:21:26.105532885 CEST	443	49726	184.28.90.27	192.168.2.5
Sep 30, 2024 00:21:26.105669022 CEST	49726	443	192.168.2.5	184.28.90.27
Sep 30, 2024 00:21:26.107877970 CEST	49726	443	192.168.2.5	184.28.90.27
Sep 30, 2024 00:21:26.107897043 CEST	443	49726	184.28.90.27	192.168.2.5
Sep 30, 2024 00:21:26.107919931 CEST	49726	443	192.168.2.5	184.28.90.27
Sep 30, 2024 00:21:26.107925892 CEST	443	49726	184.28.90.27	192.168.2.5
Sep 30, 2024 00:21:26.113698959 CEST	49709	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:26.113725901 CEST	49716	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:26.311429977 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.312624931 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.312655926 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.313659906 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.313740969 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.314666986 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.314733028 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.315144062 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.315159082 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.417186022 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.582273006 CEST	443	49728	142.250.186.65	192.168.2.5
Sep 30, 2024 00:21:26.582632065 CEST	49728	443	192.168.2.5	142.250.186.65
Sep 30, 2024 00:21:26.582660913 CEST	443	49728	142.250.186.65	192.168.2.5
Sep 30, 2024 00:21:26.583040953 CEST	443	49728	142.250.186.65	192.168.2.5
Sep 30, 2024 00:21:26.583055973 CEST	443	49728	142.250.186.65	192.168.2.5
Sep 30, 2024 00:21:26.583112001 CEST	49728	443	192.168.2.5	142.250.186.65
Sep 30, 2024 00:21:26.583118916 CEST	443	49728	142.250.186.65	192.168.2.5
Sep 30, 2024 00:21:26.583157063 CEST	49728	443	192.168.2.5	142.250.186.65
Sep 30, 2024 00:21:26.583888054 CEST	443	49728	142.250.186.65	192.168.2.5
Sep 30, 2024 00:21:26.584207058 CEST	443	49729	142.250.186.65	192.168.2.5
Sep 30, 2024 00:21:26.584649086 CEST	49729	443	192.168.2.5	142.250.186.65
Sep 30, 2024 00:21:26.584667921 CEST	443	49729	142.250.186.65	192.168.2.5
Sep 30, 2024 00:21:26.585037947 CEST	443	49729	142.250.186.65	192.168.2.5
Sep 30, 2024 00:21:26.585052013 CEST	443	49729	142.250.186.65	192.168.2.5
Sep 30, 2024 00:21:26.585139036 CEST	49729	443	192.168.2.5	142.250.186.65
Sep 30, 2024 00:21:26.585139036 CEST	49729	443	192.168.2.5	142.250.186.65
Sep 30, 2024 00:21:26.585148096 CEST	443	49729	142.250.186.65	192.168.2.5
Sep 30, 2024 00:21:26.585249901 CEST	49729	443	192.168.2.5	142.250.186.65
Sep 30, 2024 00:21:26.585747004 CEST	443	49729	142.250.186.65	192.168.2.5
Sep 30, 2024 00:21:26.599632025 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.599754095 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.599797010 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.599823952 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.599922895 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.599976063 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.599983931 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.605422974 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.605472088 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.605479956 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.605585098 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.605626106 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.605633974 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.611752987 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.611797094 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.611804008 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.617923975 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.617979050 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.617985964 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.689774036 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.689806938 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.689829111 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.689845085 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.689887047 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.689893961 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.695178986 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.695228100 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.695235968 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.701535940 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.701596975 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.701605082 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.702239990 CEST	80	49730	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:26.707817078 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.707895041 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.707910061 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.714098930 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.714174032 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.714183092 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.720444918 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.720500946 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.720510960 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.726365089 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.726413965 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.726422071 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.732506990 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.732564926 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.732572079 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.738148928 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.738230944 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.738239050 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.743921041 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.743983030 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.743990898 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.749938011 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.750001907 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.750010014 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.755745888 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.755825996 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.755835056 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.756659031 CEST	49729	443	192.168.2.5	142.250.186.65
Sep 30, 2024 00:21:26.758768082 CEST	49728	443	192.168.2.5	142.250.186.65
Sep 30, 2024 00:21:26.758841038 CEST	49730	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:26.780241013 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.780282021 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.780292988 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.780303001 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.780347109 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.780472994 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.780922890 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.780951023 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.781017065 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.781023979 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.781066895 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.786885023 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.792764902 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.792812109 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.792823076 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.792831898 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.792910099 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.798662901 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.804498911 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.804557085 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.804565907 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.809804916 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.809885979 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.809942961 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.809952974 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.810023069 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.815154076 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.820446014 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.820492983 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.820513010 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.820548058 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.820599079 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.825882912 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.830684900 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.830717087 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.830743074 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.830754042 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.830823898 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.835201025 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.839598894 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.839651108 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.839660883 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.843664885 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.843717098 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.843725920 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.847964048 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.848012924 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.848016977 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.848033905 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.848223925 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.851911068 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.855848074 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.855902910 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.855911016 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.855930090 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.855983019 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.859647989 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.863495111 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.863559961 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.863562107 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.863579035 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.863652945 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.867451906 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.869843960 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.869920969 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.869982958 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.870002985 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.870070934 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.872095108 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.874414921 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.874485016 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.874495983 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.876835108 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.876868963 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.876892090 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.876900911 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.876988888 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.879089117 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.881371021 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.881405115 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.881458998 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.881467104 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.881508112 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.883703947 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.883850098 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.883904934 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.883913994 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.886118889 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.886197090 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.886210918 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.888375998 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.890702009 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.890793085 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.890800953 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.890816927 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.890889883 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.893078089 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.893130064 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.893141985 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.895576000 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.895665884 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.895678997 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.897792101 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.897898912 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.897912979 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.900299072 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.900388956 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.900402069 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.902424097 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.902503014 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.902515888 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.905581951 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.905666113 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.905679941 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.905761003 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.905936956 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.914768934 CEST	49727	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:26.914817095 CEST	443	49727	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:26.933391094 CEST	49728	443	192.168.2.5	142.250.186.65
Sep 30, 2024 00:21:26.933612108 CEST	443	49728	142.250.186.65	192.168.2.5
Sep 30, 2024 00:21:26.933932066 CEST	49728	443	192.168.2.5	142.250.186.65
Sep 30, 2024 00:21:26.933952093 CEST	443	49728	142.250.186.65	192.168.2.5
Sep 30, 2024 00:21:26.950701952 CEST	49729	443	192.168.2.5	142.250.186.65
Sep 30, 2024 00:21:26.950701952 CEST	49729	443	192.168.2.5	142.250.186.65
Sep 30, 2024 00:21:26.950728893 CEST	443	49729	142.250.186.65	192.168.2.5
Sep 30, 2024 00:21:26.950826883 CEST	443	49729	142.250.186.65	192.168.2.5
Sep 30, 2024 00:21:27.020080090 CEST	49728	443	192.168.2.5	142.250.186.65
Sep 30, 2024 00:21:27.073319912 CEST	49729	443	192.168.2.5	142.250.186.65
Sep 30, 2024 00:21:27.073339939 CEST	443	49729	142.250.186.65	192.168.2.5
Sep 30, 2024 00:21:27.116692066 CEST	443	49728	142.250.186.65	192.168.2.5
Sep 30, 2024 00:21:27.116787910 CEST	443	49728	142.250.186.65	192.168.2.5
Sep 30, 2024 00:21:27.116894960 CEST	49728	443	192.168.2.5	142.250.186.65
Sep 30, 2024 00:21:27.118010998 CEST	49728	443	192.168.2.5	142.250.186.65
Sep 30, 2024 00:21:27.118033886 CEST	443	49728	142.250.186.65	192.168.2.5
Sep 30, 2024 00:21:27.134476900 CEST	443	49729	142.250.186.65	192.168.2.5
Sep 30, 2024 00:21:27.134532928 CEST	49729	443	192.168.2.5	142.250.186.65
Sep 30, 2024 00:21:27.135250092 CEST	49729	443	192.168.2.5	142.250.186.65
Sep 30, 2024 00:21:27.135266066 CEST	443	49729	142.250.186.65	192.168.2.5
Sep 30, 2024 00:21:27.185508966 CEST	49732	443	192.168.2.5	216.58.206.65
Sep 30, 2024 00:21:27.185550928 CEST	443	49732	216.58.206.65	192.168.2.5
Sep 30, 2024 00:21:27.185740948 CEST	49732	443	192.168.2.5	216.58.206.65
Sep 30, 2024 00:21:27.204895973 CEST	49732	443	192.168.2.5	216.58.206.65
Sep 30, 2024 00:21:27.204919100 CEST	443	49732	216.58.206.65	192.168.2.5
Sep 30, 2024 00:21:27.219794035 CEST	49733	443	192.168.2.5	216.58.206.65
Sep 30, 2024 00:21:27.219835997 CEST	443	49733	216.58.206.65	192.168.2.5
Sep 30, 2024 00:21:27.219954967 CEST	49733	443	192.168.2.5	216.58.206.65
Sep 30, 2024 00:21:27.220875978 CEST	49733	443	192.168.2.5	216.58.206.65
Sep 30, 2024 00:21:27.220889091 CEST	443	49733	216.58.206.65	192.168.2.5
Sep 30, 2024 00:21:27.313532114 CEST	49718	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:27.355407000 CEST	443	49718	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:27.692025900 CEST	443	49718	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:27.692101955 CEST	443	49718	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:27.692189932 CEST	49718	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:27.929037094 CEST	443	49732	216.58.206.65	192.168.2.5
Sep 30, 2024 00:21:27.943664074 CEST	443	49733	216.58.206.65	192.168.2.5
Sep 30, 2024 00:21:27.988455057 CEST	49733	443	192.168.2.5	216.58.206.65
Sep 30, 2024 00:21:27.988468885 CEST	443	49733	216.58.206.65	192.168.2.5
Sep 30, 2024 00:21:27.988590956 CEST	49732	443	192.168.2.5	216.58.206.65
Sep 30, 2024 00:21:27.988622904 CEST	443	49732	216.58.206.65	192.168.2.5
Sep 30, 2024 00:21:27.989077091 CEST	443	49732	216.58.206.65	192.168.2.5
Sep 30, 2024 00:21:27.989089012 CEST	443	49732	216.58.206.65	192.168.2.5
Sep 30, 2024 00:21:27.989146948 CEST	49732	443	192.168.2.5	216.58.206.65
Sep 30, 2024 00:21:27.989154100 CEST	443	49732	216.58.206.65	192.168.2.5
Sep 30, 2024 00:21:27.989186049 CEST	443	49732	216.58.206.65	192.168.2.5
Sep 30, 2024 00:21:27.989211082 CEST	49732	443	192.168.2.5	216.58.206.65
Sep 30, 2024 00:21:27.989238024 CEST	49732	443	192.168.2.5	216.58.206.65
Sep 30, 2024 00:21:27.989765882 CEST	443	49732	216.58.206.65	192.168.2.5
Sep 30, 2024 00:21:27.989794970 CEST	443	49733	216.58.206.65	192.168.2.5
Sep 30, 2024 00:21:27.989835978 CEST	443	49733	216.58.206.65	192.168.2.5
Sep 30, 2024 00:21:27.989859104 CEST	49733	443	192.168.2.5	216.58.206.65
Sep 30, 2024 00:21:27.989881039 CEST	443	49733	216.58.206.65	192.168.2.5
Sep 30, 2024 00:21:27.989891052 CEST	49733	443	192.168.2.5	216.58.206.65
Sep 30, 2024 00:21:27.989949942 CEST	49733	443	192.168.2.5	216.58.206.65
Sep 30, 2024 00:21:27.992446899 CEST	443	49733	216.58.206.65	192.168.2.5
Sep 30, 2024 00:21:28.063714981 CEST	49732	443	192.168.2.5	216.58.206.65
Sep 30, 2024 00:21:28.111197948 CEST	49733	443	192.168.2.5	216.58.206.65
Sep 30, 2024 00:21:28.196444035 CEST	49733	443	192.168.2.5	216.58.206.65
Sep 30, 2024 00:21:28.196818113 CEST	443	49733	216.58.206.65	192.168.2.5
Sep 30, 2024 00:21:28.196991920 CEST	49732	443	192.168.2.5	216.58.206.65
Sep 30, 2024 00:21:28.197370052 CEST	443	49732	216.58.206.65	192.168.2.5
Sep 30, 2024 00:21:28.197431087 CEST	49733	443	192.168.2.5	216.58.206.65
Sep 30, 2024 00:21:28.197441101 CEST	443	49733	216.58.206.65	192.168.2.5
Sep 30, 2024 00:21:28.197707891 CEST	49732	443	192.168.2.5	216.58.206.65
Sep 30, 2024 00:21:28.197717905 CEST	443	49732	216.58.206.65	192.168.2.5
Sep 30, 2024 00:21:28.204305887 CEST	49734	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:28.204334021 CEST	443	49734	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:28.204425097 CEST	49734	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:28.204926014 CEST	49734	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:28.204937935 CEST	443	49734	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:28.205595016 CEST	49718	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:28.205606937 CEST	443	49718	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:28.271877050 CEST	49732	443	192.168.2.5	216.58.206.65
Sep 30, 2024 00:21:28.377645016 CEST	443	49732	216.58.206.65	192.168.2.5
Sep 30, 2024 00:21:28.378046036 CEST	443	49732	216.58.206.65	192.168.2.5
Sep 30, 2024 00:21:28.378272057 CEST	443	49733	216.58.206.65	192.168.2.5
Sep 30, 2024 00:21:28.378357887 CEST	49732	443	192.168.2.5	216.58.206.65
Sep 30, 2024 00:21:28.378382921 CEST	49733	443	192.168.2.5	216.58.206.65
Sep 30, 2024 00:21:28.380487919 CEST	49732	443	192.168.2.5	216.58.206.65
Sep 30, 2024 00:21:28.380505085 CEST	443	49732	216.58.206.65	192.168.2.5
Sep 30, 2024 00:21:28.381578922 CEST	49733	443	192.168.2.5	216.58.206.65
Sep 30, 2024 00:21:28.381602049 CEST	443	49733	216.58.206.65	192.168.2.5
Sep 30, 2024 00:21:28.836488962 CEST	443	49734	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:28.839612007 CEST	49734	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:28.839628935 CEST	443	49734	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:28.839993000 CEST	443	49734	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:28.841001987 CEST	49734	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:28.841073990 CEST	443	49734	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:28.841492891 CEST	49734	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:28.887398958 CEST	443	49734	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:29.126458883 CEST	443	49734	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:29.126885891 CEST	443	49734	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:29.126957893 CEST	49734	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:29.133137941 CEST	49734	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:29.133167028 CEST	443	49734	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:32.857914925 CEST	443	49719	142.250.185.100	192.168.2.5
Sep 30, 2024 00:21:32.858011961 CEST	443	49719	142.250.185.100	192.168.2.5
Sep 30, 2024 00:21:32.858092070 CEST	49719	443	192.168.2.5	142.250.185.100
Sep 30, 2024 00:21:33.154254913 CEST	49719	443	192.168.2.5	142.250.185.100
Sep 30, 2024 00:21:33.154289007 CEST	443	49719	142.250.185.100	192.168.2.5
Sep 30, 2024 00:21:33.216857910 CEST	49742	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:33.216912985 CEST	443	49742	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:33.217000008 CEST	49742	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:33.217397928 CEST	49743	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:33.217468977 CEST	443	49743	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:33.217529058 CEST	49743	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:33.217691898 CEST	49742	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:33.217708111 CEST	443	49742	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:33.217958927 CEST	49743	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:33.217969894 CEST	443	49743	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:33.927936077 CEST	443	49743	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:33.928622007 CEST	49743	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:33.928638935 CEST	443	49743	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:33.929706097 CEST	443	49743	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:33.929769039 CEST	49743	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:33.931047916 CEST	49743	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:33.931102037 CEST	443	49743	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:33.931410074 CEST	49743	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:33.931416035 CEST	443	49743	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:33.940642118 CEST	443	49742	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:33.940877914 CEST	49742	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:33.940895081 CEST	443	49742	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:33.944437027 CEST	443	49742	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:33.944502115 CEST	49742	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:33.944880009 CEST	49742	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:33.944937944 CEST	443	49742	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:33.982125044 CEST	49743	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:34.057898045 CEST	49742	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:34.057915926 CEST	443	49742	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:34.171989918 CEST	49742	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:34.190558910 CEST	443	49743	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:34.190588951 CEST	443	49743	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:34.190670967 CEST	49743	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:34.190686941 CEST	443	49743	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:34.190771103 CEST	443	49743	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:34.191006899 CEST	49743	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:34.210692883 CEST	49743	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:34.210711956 CEST	443	49743	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:34.218128920 CEST	49744	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:34.218154907 CEST	443	49744	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:34.218314886 CEST	49744	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:34.218815088 CEST	49745	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:34.218863010 CEST	443	49745	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:34.218915939 CEST	49745	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:34.219599962 CEST	49746	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:34.219609022 CEST	443	49746	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:34.219768047 CEST	49746	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:34.219883919 CEST	49742	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:34.220216036 CEST	49744	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:34.220228910 CEST	443	49744	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:34.220670938 CEST	49745	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:34.220685959 CEST	443	49745	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:34.220841885 CEST	49746	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:34.220854044 CEST	443	49746	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:34.263410091 CEST	443	49742	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:34.478632927 CEST	443	49742	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:34.478657961 CEST	443	49742	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:34.478663921 CEST	443	49742	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:34.478698015 CEST	443	49742	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:34.478718996 CEST	443	49742	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:34.478725910 CEST	49742	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:34.478744030 CEST	443	49742	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:34.478760004 CEST	443	49742	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:34.478770018 CEST	49742	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:34.478782892 CEST	443	49742	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:34.478807926 CEST	49742	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:34.478831053 CEST	443	49742	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:34.478869915 CEST	49742	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:34.478874922 CEST	443	49742	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:34.478897095 CEST	443	49742	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:34.478941917 CEST	49742	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:34.480990887 CEST	49742	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:34.481009007 CEST	443	49742	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:34.919842005 CEST	443	49746	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:34.920294046 CEST	49746	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:34.920321941 CEST	443	49746	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:34.921406031 CEST	443	49746	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:34.921492100 CEST	49746	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:34.922339916 CEST	49746	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:34.922406912 CEST	443	49746	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:34.922794104 CEST	49746	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:34.922805071 CEST	443	49746	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:34.924997091 CEST	443	49744	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:34.928069115 CEST	443	49745	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:34.930924892 CEST	49745	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:34.930933952 CEST	443	49745	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:34.931113005 CEST	49744	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:34.931133032 CEST	443	49744	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:34.931370020 CEST	443	49745	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:34.931487083 CEST	443	49744	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:34.931780100 CEST	49745	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:34.931845903 CEST	443	49745	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:34.932279110 CEST	49744	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:34.932331085 CEST	443	49744	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:34.932607889 CEST	49745	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:34.932686090 CEST	49744	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:34.971402884 CEST	49746	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:34.975403070 CEST	443	49744	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:34.975423098 CEST	443	49745	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:35.175391912 CEST	443	49746	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:35.175425053 CEST	443	49746	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:35.175497055 CEST	49746	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:35.175503016 CEST	443	49746	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:35.175539970 CEST	49746	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:35.266273022 CEST	443	49744	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:35.266304016 CEST	443	49744	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:35.266320944 CEST	443	49744	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:35.266562939 CEST	49744	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:35.266607046 CEST	443	49744	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:35.266793966 CEST	49744	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:35.267044067 CEST	443	49745	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:35.267067909 CEST	443	49745	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:35.267083883 CEST	443	49745	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:35.267126083 CEST	49745	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:35.267165899 CEST	443	49745	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:35.267184973 CEST	49745	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:35.267210007 CEST	49745	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:35.272967100 CEST	443	49744	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:35.272984982 CEST	443	49744	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:35.273124933 CEST	49744	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:35.273132086 CEST	443	49744	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:35.273933887 CEST	443	49744	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:35.273968935 CEST	443	49744	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:35.274009943 CEST	443	49744	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:35.274027109 CEST	49744	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:35.275098085 CEST	443	49745	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:35.275115013 CEST	443	49745	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:35.275228977 CEST	49744	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:35.275930882 CEST	49745	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:35.275949955 CEST	443	49745	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:35.323930025 CEST	49745	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:35.355515957 CEST	443	49745	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:35.355549097 CEST	443	49745	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:35.355654001 CEST	49745	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:35.355681896 CEST	443	49745	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:35.355720043 CEST	49745	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:35.362867117 CEST	443	49745	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:35.362894058 CEST	443	49745	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:35.362993956 CEST	49745	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:35.363010883 CEST	443	49745	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:35.363049984 CEST	49745	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:35.363888979 CEST	49745	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:35.364702940 CEST	443	49745	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:35.364725113 CEST	443	49745	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:35.364775896 CEST	443	49745	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:35.364779949 CEST	49745	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:35.364793062 CEST	443	49745	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:35.364870071 CEST	443	49745	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:35.364887953 CEST	49745	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:35.364911079 CEST	49745	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:35.384990931 CEST	49745	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:35.411099911 CEST	49746	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:35.411125898 CEST	443	49746	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:35.418090105 CEST	49744	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:35.418116093 CEST	443	49744	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:35.420197010 CEST	49745	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:35.420219898 CEST	443	49745	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:35.450541019 CEST	49749	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:35.450596094 CEST	443	49749	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:35.451005936 CEST	49749	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:35.453417063 CEST	49750	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:35.453427076 CEST	443	49750	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:35.453514099 CEST	49750	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:35.454111099 CEST	49751	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:35.454164028 CEST	443	49751	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:35.454371929 CEST	49751	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:35.454555035 CEST	49751	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:35.454586029 CEST	443	49751	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:35.454811096 CEST	49750	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:35.454828978 CEST	443	49750	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:35.455096006 CEST	49749	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:35.455110073 CEST	443	49749	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:35.711682081 CEST	49753	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:35.711747885 CEST	443	49753	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:35.711929083 CEST	49753	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:35.712318897 CEST	49754	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:35.712327957 CEST	443	49754	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:35.712513924 CEST	49754	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:35.713367939 CEST	49754	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:35.713378906 CEST	443	49754	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:35.714071035 CEST	49753	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:35.714080095 CEST	443	49753	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.163055897 CEST	443	49750	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.163806915 CEST	49750	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.163819075 CEST	443	49750	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.164201021 CEST	443	49750	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.165129900 CEST	49750	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.165210009 CEST	443	49750	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.165863037 CEST	49750	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.171618938 CEST	443	49751	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.172099113 CEST	49751	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.172131062 CEST	443	49751	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.172462940 CEST	443	49751	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.173156977 CEST	49751	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.173211098 CEST	443	49751	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.173655987 CEST	49751	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.191792965 CEST	443	49749	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.192517996 CEST	49749	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.192527056 CEST	443	49749	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.193568945 CEST	443	49749	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.193639994 CEST	49749	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.194545984 CEST	49749	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.194618940 CEST	443	49749	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.195296049 CEST	49749	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.195302963 CEST	443	49749	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.211391926 CEST	443	49750	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.215419054 CEST	443	49751	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.237082958 CEST	49749	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.412784100 CEST	443	49754	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.421354055 CEST	443	49750	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.421380043 CEST	443	49750	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.421427011 CEST	49750	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.421439886 CEST	443	49750	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.421454906 CEST	443	49750	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.421503067 CEST	49750	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.430078983 CEST	443	49751	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.430170059 CEST	443	49751	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.430226088 CEST	49751	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.442593098 CEST	443	49753	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.442766905 CEST	49754	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.442794085 CEST	443	49754	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.443607092 CEST	49753	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.443617105 CEST	443	49753	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.445024967 CEST	443	49754	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.445084095 CEST	49754	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.445866108 CEST	49754	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.445919991 CEST	443	49754	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.446444988 CEST	49754	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.446450949 CEST	443	49754	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.446717024 CEST	443	49753	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.446762085 CEST	49753	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.447542906 CEST	49753	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.447602034 CEST	443	49753	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.447876930 CEST	49753	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.447882891 CEST	443	49753	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.489715099 CEST	49753	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.489715099 CEST	49754	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.507050037 CEST	49751	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.507093906 CEST	443	49751	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.511177063 CEST	49750	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.511193037 CEST	443	49750	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.576335907 CEST	443	49749	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.576360941 CEST	443	49749	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.576369047 CEST	443	49749	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.576395035 CEST	443	49749	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.576423883 CEST	49749	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.576426029 CEST	443	49749	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.576440096 CEST	443	49749	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.576502085 CEST	443	49749	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.576502085 CEST	49749	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.576545954 CEST	49749	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.623584032 CEST	49755	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.623620033 CEST	443	49755	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.623688936 CEST	49755	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.625380993 CEST	49755	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.625391960 CEST	443	49755	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.629199982 CEST	49749	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.629216909 CEST	443	49749	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.709903002 CEST	49757	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.709949970 CEST	443	49757	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.710024118 CEST	49757	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.710308075 CEST	49757	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.710319042 CEST	443	49757	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.712424994 CEST	49758	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.712435961 CEST	443	49758	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.712501049 CEST	49758	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.712781906 CEST	49758	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.712794065 CEST	443	49758	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.719759941 CEST	49759	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.719793081 CEST	443	49759	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.719876051 CEST	49759	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.720041990 CEST	49759	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.720060110 CEST	443	49759	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.752916098 CEST	443	49754	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.752944946 CEST	443	49754	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.752953053 CEST	443	49754	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.752979040 CEST	443	49754	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.752990007 CEST	443	49754	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.753000975 CEST	443	49754	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.753017902 CEST	49754	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.753046989 CEST	443	49754	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.753101110 CEST	49754	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.753101110 CEST	49754	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.758318901 CEST	443	49754	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.758341074 CEST	443	49754	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.758443117 CEST	49754	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.758443117 CEST	49754	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.758455992 CEST	443	49754	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.783468008 CEST	443	49753	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.783494949 CEST	443	49753	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.783504963 CEST	443	49753	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.783536911 CEST	443	49753	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.783567905 CEST	443	49753	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.783598900 CEST	49753	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.783616066 CEST	443	49753	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.783674955 CEST	49753	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.783674955 CEST	49753	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.793359995 CEST	443	49753	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.793384075 CEST	443	49753	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.793726921 CEST	49753	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.793735981 CEST	443	49753	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.802947044 CEST	49754	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.806839943 CEST	443	49754	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.806853056 CEST	443	49754	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.806937933 CEST	443	49754	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.806962013 CEST	49754	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.807024002 CEST	49754	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.810237885 CEST	49754	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.810256004 CEST	443	49754	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.848140001 CEST	49753	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.865849972 CEST	443	49753	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.865868092 CEST	443	49753	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.865930080 CEST	443	49753	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.865957975 CEST	49753	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.865972042 CEST	443	49753	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.866025925 CEST	49753	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.866031885 CEST	443	49753	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.866106033 CEST	49753	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.882947922 CEST	443	49753	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.882978916 CEST	443	49753	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.883297920 CEST	49753	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.883311033 CEST	443	49753	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.883529902 CEST	49753	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.884150982 CEST	443	49753	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.884170055 CEST	443	49753	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.884325027 CEST	49753	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.884331942 CEST	443	49753	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.884419918 CEST	49753	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.884845018 CEST	443	49753	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.884938955 CEST	443	49753	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:36.884969950 CEST	49753	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.885155916 CEST	49753	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.886935949 CEST	49753	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:36.886954069 CEST	443	49753	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:37.337461948 CEST	443	49755	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:37.337934017 CEST	49755	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:37.337963104 CEST	443	49755	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:37.338315964 CEST	443	49755	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:37.339102030 CEST	49755	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:37.339102030 CEST	49755	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:37.339129925 CEST	443	49755	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:37.339180946 CEST	443	49755	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:37.390863895 CEST	49755	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:37.412796021 CEST	443	49758	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:37.413609028 CEST	49758	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:37.413625002 CEST	443	49758	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:37.414235115 CEST	443	49758	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:37.414927006 CEST	49758	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:37.414927006 CEST	49758	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:37.414985895 CEST	443	49758	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:37.422200918 CEST	443	49757	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:37.422492981 CEST	49757	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:37.422501087 CEST	443	49757	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:37.422935009 CEST	443	49757	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:37.423403978 CEST	49757	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:37.423465967 CEST	443	49757	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:37.423556089 CEST	49757	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:37.431330919 CEST	443	49759	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:37.438952923 CEST	49759	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:37.438963890 CEST	443	49759	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:37.440078974 CEST	443	49759	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:37.442008972 CEST	49759	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:37.450802088 CEST	49759	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:37.450927973 CEST	443	49759	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:37.451596022 CEST	49759	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:37.451603889 CEST	443	49759	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:37.467410088 CEST	443	49757	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:37.470889091 CEST	49758	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:37.502908945 CEST	49759	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:37.602161884 CEST	443	49755	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:37.602246046 CEST	443	49755	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:37.602417946 CEST	49755	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:37.672103882 CEST	443	49758	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:37.672193050 CEST	443	49758	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:37.678925037 CEST	49758	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:37.687798977 CEST	443	49757	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:37.687827110 CEST	443	49757	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:37.687886953 CEST	443	49757	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:37.687921047 CEST	49757	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:37.690932035 CEST	49757	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:37.773166895 CEST	443	49759	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:37.773195982 CEST	443	49759	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:37.773202896 CEST	443	49759	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:37.773225069 CEST	443	49759	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:37.773238897 CEST	443	49759	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:37.773247004 CEST	443	49759	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:37.773308039 CEST	49759	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:37.773335934 CEST	443	49759	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:37.773596048 CEST	49759	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:37.780235052 CEST	443	49759	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:37.780299902 CEST	49759	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:37.780308008 CEST	443	49759	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:37.780388117 CEST	49759	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:38.043550968 CEST	49755	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:38.043586016 CEST	443	49755	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:38.071135044 CEST	49757	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:38.071163893 CEST	443	49757	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:38.074373960 CEST	49758	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:38.074392080 CEST	443	49758	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:38.078114986 CEST	49760	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:38.078151941 CEST	443	49760	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:38.078219891 CEST	49760	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:38.079229116 CEST	49760	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:38.079241037 CEST	443	49760	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:38.079802990 CEST	49759	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:38.079821110 CEST	443	49759	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:38.170643091 CEST	49761	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:38.170696020 CEST	443	49761	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:38.170766115 CEST	49761	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:38.172110081 CEST	49761	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:38.172122002 CEST	443	49761	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:38.811992884 CEST	443	49760	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:38.815886974 CEST	49760	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:38.815902948 CEST	443	49760	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:38.816270113 CEST	443	49760	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:38.816762924 CEST	49760	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:38.816817045 CEST	443	49760	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:38.817239046 CEST	49760	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:38.863415956 CEST	443	49760	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:38.879287004 CEST	443	49761	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:38.927671909 CEST	49761	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:38.927690983 CEST	443	49761	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:38.929052114 CEST	443	49761	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:38.963310003 CEST	49761	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:38.963618994 CEST	443	49761	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:38.963660955 CEST	49761	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:39.011403084 CEST	443	49761	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:39.013508081 CEST	49761	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:39.100641012 CEST	443	49760	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:39.100843906 CEST	443	49760	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:39.101145983 CEST	49760	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:39.102076054 CEST	49760	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:39.102094889 CEST	443	49760	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:39.141043901 CEST	443	49761	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:39.141127110 CEST	443	49761	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:39.141273975 CEST	49761	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:39.171478033 CEST	49761	443	192.168.2.5	108.128.52.91
Sep 30, 2024 00:21:39.171506882 CEST	443	49761	108.128.52.91	192.168.2.5
Sep 30, 2024 00:21:41.005008936 CEST	80	49709	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:41.005079031 CEST	49709	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:41.055119991 CEST	80	49716	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:41.055186033 CEST	49716	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:41.411556005 CEST	49716	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:41.411806107 CEST	49709	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:41.418210030 CEST	80	49716	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:41.418736935 CEST	80	49709	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:41.701944113 CEST	80	49730	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:41.702013016 CEST	49730	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:43.203641891 CEST	49730	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:43.208391905 CEST	80	49730	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:47.186788082 CEST	49762	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:47.187078953 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:47.191669941 CEST	80	49762	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:47.191792965 CEST	49762	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:47.191858053 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:47.191988945 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:47.230541945 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:47.235438108 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:47.891215086 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:47.891233921 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:47.891246080 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:47.891261101 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:47.891273975 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:47.891284943 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:47.891303062 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:47.891369104 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:47.891438007 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:48.023139000 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:48.033126116 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:48.225678921 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:48.273746014 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:48.541955948 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:48.546828032 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:48.636789083 CEST	49765	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:48.636822939 CEST	443	49765	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:48.636930943 CEST	49765	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:48.642093897 CEST	49765	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:48.642110109 CEST	443	49765	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:48.704767942 CEST	49766	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:48.704802036 CEST	443	49766	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:48.704864979 CEST	49766	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:48.726370096 CEST	49766	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:48.726388931 CEST	443	49766	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:48.740633965 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:48.783929110 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:49.179913044 CEST	49767	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:49.179985046 CEST	443	49767	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:49.184007883 CEST	49767	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:49.187674999 CEST	49767	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:49.187690973 CEST	443	49767	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:49.282382011 CEST	443	49765	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:49.293626070 CEST	49765	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:49.293638945 CEST	443	49765	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:49.294047117 CEST	443	49765	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:49.295540094 CEST	49765	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:49.295609951 CEST	443	49765	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:49.315025091 CEST	49768	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:49.319873095 CEST	80	49768	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:49.319942951 CEST	49768	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:49.320447922 CEST	49768	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:49.325289011 CEST	80	49768	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:49.328026056 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:49.328079939 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:49.328206062 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:49.329044104 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:49.329054117 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:49.342988014 CEST	49765	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:49.374651909 CEST	443	49766	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:49.376096010 CEST	49766	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:49.376116037 CEST	443	49766	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:49.376461029 CEST	443	49766	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:49.377285957 CEST	49766	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:49.377346039 CEST	443	49766	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:49.377998114 CEST	49766	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:49.419400930 CEST	443	49766	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:49.659410000 CEST	443	49766	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:49.659492970 CEST	443	49766	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:49.659552097 CEST	49766	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:49.659567118 CEST	443	49766	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:49.659621000 CEST	49766	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:49.662781000 CEST	49766	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:49.662792921 CEST	443	49766	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:49.694793940 CEST	49770	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:49.694829941 CEST	443	49770	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:49.695106983 CEST	49770	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:49.697045088 CEST	49770	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:49.697055101 CEST	443	49770	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:49.835815907 CEST	443	49767	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:49.836447954 CEST	49767	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:49.836462975 CEST	443	49767	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:49.836798906 CEST	443	49767	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:49.837517023 CEST	49767	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:49.837575912 CEST	443	49767	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:49.837949038 CEST	49767	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:49.837971926 CEST	443	49767	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:49.977129936 CEST	80	49768	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:49.977421999 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:49.978507042 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:49.978540897 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:49.978985071 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:49.979821920 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:49.979892015 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:49.980268955 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.023405075 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.029947042 CEST	49768	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:50.259633064 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.259704113 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.259747982 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.259747982 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.259777069 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.259821892 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.259857893 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.259864092 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.259911060 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.265428066 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.265522003 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.265571117 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.265587091 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.271663904 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.272478104 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.272489071 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.278072119 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.278177977 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.278187990 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.307420969 CEST	443	49767	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:50.307461977 CEST	443	49767	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:50.307529926 CEST	49767	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:50.307549953 CEST	443	49767	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:50.307791948 CEST	443	49767	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:50.307826042 CEST	443	49767	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:50.307852983 CEST	49767	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:50.307858944 CEST	443	49767	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:50.307914972 CEST	49767	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:50.308135033 CEST	443	49767	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:50.318661928 CEST	443	49767	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:50.318737984 CEST	49767	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:50.318749905 CEST	443	49767	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:50.331001043 CEST	443	49767	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:50.331147909 CEST	49767	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:50.331156969 CEST	443	49767	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:50.333085060 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.340914965 CEST	443	49767	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:50.341048002 CEST	49767	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:50.341061115 CEST	443	49767	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:50.347779989 CEST	443	49770	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:50.348449945 CEST	49770	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:50.348464966 CEST	443	49770	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:50.348822117 CEST	443	49770	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:50.349545956 CEST	49770	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:50.349545956 CEST	49770	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:50.349564075 CEST	443	49770	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:50.349620104 CEST	443	49770	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:50.349955082 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.350045919 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.350101948 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.350119114 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.354882002 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.354943991 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.354957104 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.361160040 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.361211061 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.361212969 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.361223936 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.361258030 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.367465019 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.373785019 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.373831034 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.373836994 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.373843908 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.373873949 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.380026102 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.381275892 CEST	49767	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:50.385916948 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.385966063 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.385968924 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.385981083 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.386034966 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.391836882 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.395299911 CEST	49770	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:50.397747040 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.397798061 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.397814035 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.397821903 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.397964001 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.398051977 CEST	443	49767	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:50.398144007 CEST	443	49767	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:50.398179054 CEST	443	49767	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:50.398226023 CEST	49767	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:50.398237944 CEST	443	49767	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:50.398296118 CEST	49767	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:50.403270960 CEST	443	49767	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:50.403687000 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.409559965 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.409605026 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.409611940 CEST	443	49767	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:50.409620047 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.409640074 CEST	443	49767	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:50.409647942 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.409661055 CEST	49767	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:50.409672022 CEST	443	49767	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:50.409693956 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.409701109 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.409730911 CEST	49767	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:50.415786982 CEST	443	49767	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:50.422151089 CEST	443	49767	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:50.422175884 CEST	443	49767	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:50.422218084 CEST	49767	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:50.422235012 CEST	443	49767	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:50.422344923 CEST	49767	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:50.428425074 CEST	443	49767	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:50.434719086 CEST	443	49767	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:50.434746981 CEST	443	49767	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:50.434803009 CEST	49767	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:50.434814930 CEST	443	49767	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:50.434879065 CEST	49767	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:50.434883118 CEST	443	49767	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:50.434912920 CEST	443	49767	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:50.434986115 CEST	49767	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:50.435144901 CEST	49767	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:50.435161114 CEST	443	49767	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:50.440426111 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.440471888 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.440510988 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.440527916 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.440548897 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.440562010 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.440782070 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.440833092 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.440838099 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.445322037 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.445533991 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.445538998 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.446482897 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.446546078 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.446551085 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.452507019 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.452615023 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.452625990 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.458245039 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.458303928 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.458316088 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.464026928 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.464119911 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.464132071 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.469356060 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.469414949 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.469424009 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.474662066 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.474710941 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.474720001 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.479944944 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.480010033 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.480016947 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.485297918 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.485363960 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.485369921 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.490253925 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.490361929 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.490367889 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.494841099 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.494945049 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.494950056 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.499207020 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.499279976 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.499286890 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.503372908 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.503422976 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.503428936 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.507482052 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.507529020 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.507534981 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.511486053 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.511531115 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.511538029 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.515369892 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.515471935 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.515480042 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.519165993 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.519246101 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.519251108 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.525121927 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.525166988 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.525172949 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.526920080 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.526990891 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.526997089 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.529241085 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.529282093 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.529289007 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.529294968 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.529339075 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.531532049 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.533989906 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.534024000 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.534045935 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.534051895 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.534087896 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.536149979 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.538594961 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.538633108 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.538640976 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.538647890 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.538687944 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.540805101 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.543239117 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.543275118 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.543282986 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.543289900 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.543345928 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.545506001 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.547797918 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.547842979 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.547884941 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.547892094 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.547943115 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.550137997 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.552594900 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.552649021 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.552659988 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.554918051 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.554964066 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.554979086 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.554984093 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.555015087 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.557094097 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.559808016 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.559850931 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.559856892 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.561727047 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.561806917 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.561811924 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.565012932 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.565058947 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.565064907 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.565203905 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:50.565447092 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.565447092 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.630072117 CEST	443	49770	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:50.630158901 CEST	443	49770	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:50.630278111 CEST	49770	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:50.632463932 CEST	49770	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:50.632489920 CEST	443	49770	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:50.787409067 CEST	49771	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:50.787475109 CEST	443	49771	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:50.787550926 CEST	49771	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:50.788625956 CEST	49771	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:50.788654089 CEST	443	49771	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:50.799592018 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:50.807210922 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:50.870031118 CEST	49769	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:50.870064974 CEST	443	49769	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:51.000319958 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:51.053095102 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:51.210902929 CEST	49773	443	192.168.2.5	216.58.212.164
Sep 30, 2024 00:21:51.210941076 CEST	443	49773	216.58.212.164	192.168.2.5
Sep 30, 2024 00:21:51.211123943 CEST	49773	443	192.168.2.5	216.58.212.164
Sep 30, 2024 00:21:51.211777925 CEST	49773	443	192.168.2.5	216.58.212.164
Sep 30, 2024 00:21:51.211792946 CEST	443	49773	216.58.212.164	192.168.2.5
Sep 30, 2024 00:21:51.431714058 CEST	443	49771	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:51.432168961 CEST	49771	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:51.432189941 CEST	443	49771	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:51.433324099 CEST	443	49771	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:51.437297106 CEST	49771	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:51.437511921 CEST	443	49771	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:51.485161066 CEST	49771	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:51.843821049 CEST	443	49773	216.58.212.164	192.168.2.5
Sep 30, 2024 00:21:51.880837917 CEST	49773	443	192.168.2.5	216.58.212.164
Sep 30, 2024 00:21:51.880858898 CEST	443	49773	216.58.212.164	192.168.2.5
Sep 30, 2024 00:21:51.884747028 CEST	443	49773	216.58.212.164	192.168.2.5
Sep 30, 2024 00:21:51.884830952 CEST	49773	443	192.168.2.5	216.58.212.164
Sep 30, 2024 00:21:51.961450100 CEST	49773	443	192.168.2.5	216.58.212.164
Sep 30, 2024 00:21:51.961776018 CEST	443	49773	216.58.212.164	192.168.2.5
Sep 30, 2024 00:21:51.993202925 CEST	49773	443	192.168.2.5	216.58.212.164
Sep 30, 2024 00:21:51.993227005 CEST	443	49773	216.58.212.164	192.168.2.5
Sep 30, 2024 00:21:52.042069912 CEST	49773	443	192.168.2.5	216.58.212.164
Sep 30, 2024 00:21:52.181613922 CEST	443	49773	216.58.212.164	192.168.2.5
Sep 30, 2024 00:21:52.181828022 CEST	443	49773	216.58.212.164	192.168.2.5
Sep 30, 2024 00:21:52.181898117 CEST	49773	443	192.168.2.5	216.58.212.164
Sep 30, 2024 00:21:52.490004063 CEST	49773	443	192.168.2.5	216.58.212.164
Sep 30, 2024 00:21:52.490036964 CEST	443	49773	216.58.212.164	192.168.2.5
Sep 30, 2024 00:21:52.747864962 CEST	80	49762	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:52.747960091 CEST	49762	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:52.894537926 CEST	49762	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:52.897838116 CEST	49765	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:52.900913000 CEST	80	49762	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:52.935376883 CEST	49768	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:52.939412117 CEST	443	49765	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:52.941983938 CEST	80	49768	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:52.950799942 CEST	49776	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:52.950839996 CEST	443	49776	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:52.954138041 CEST	49776	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:52.954394102 CEST	49776	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:52.954411983 CEST	443	49776	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:53.059230089 CEST	49777	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:53.059273005 CEST	443	49777	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:53.060023069 CEST	49777	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:53.060444117 CEST	49777	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:53.060458899 CEST	443	49777	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:53.097282887 CEST	443	49765	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:53.097533941 CEST	443	49765	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:53.104020119 CEST	49765	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:53.131304979 CEST	49765	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:53.131339073 CEST	443	49765	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:53.139000893 CEST	80	49768	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:53.188209057 CEST	49768	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:53.585155964 CEST	443	49776	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:53.592658997 CEST	49776	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:53.592679024 CEST	443	49776	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:53.593072891 CEST	443	49776	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:53.594041109 CEST	49776	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:53.594120026 CEST	443	49776	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:53.594712019 CEST	49776	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:53.635405064 CEST	443	49776	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:53.693300962 CEST	443	49777	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:53.695410967 CEST	49777	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:53.695425987 CEST	443	49777	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:53.695761919 CEST	443	49777	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:53.720616102 CEST	49777	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:53.720695972 CEST	443	49777	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:53.723988056 CEST	49777	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:53.771399975 CEST	443	49777	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:53.872903109 CEST	443	49776	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:53.872976065 CEST	443	49776	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:53.873064995 CEST	49776	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:53.982275963 CEST	443	49777	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:53.982423067 CEST	443	49777	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:53.982503891 CEST	49777	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:54.672415972 CEST	49777	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:54.672447920 CEST	443	49777	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:54.674474955 CEST	49776	443	192.168.2.5	142.250.185.164
Sep 30, 2024 00:21:54.674500942 CEST	443	49776	142.250.185.164	192.168.2.5
Sep 30, 2024 00:21:54.966283083 CEST	49778	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:54.970571041 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:54.972970009 CEST	80	49778	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:54.973048925 CEST	49778	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:54.976854086 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:55.194662094 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:55.194680929 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:55.194694042 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:55.194725990 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:55.194740057 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:55.194783926 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:55.194788933 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:55.194802999 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:55.194827080 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:55.194865942 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:55.370996952 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:55.377423048 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:55.570327044 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:55.587996006 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:55.590549946 CEST	49768	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:55.591610909 CEST	49779	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:55.591651917 CEST	443	49779	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:55.591747999 CEST	49779	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:55.591995001 CEST	49779	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:55.592020035 CEST	443	49779	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:55.594651937 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:55.596910954 CEST	80	49768	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:55.691179991 CEST	49780	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:55.691225052 CEST	443	49780	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:55.691293955 CEST	49780	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:55.691354036 CEST	49771	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:55.691715002 CEST	49780	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:55.691732883 CEST	443	49780	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:55.735399008 CEST	443	49771	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:55.787552118 CEST	80	49768	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:55.788393021 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:55.880204916 CEST	443	49771	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:55.880430937 CEST	443	49771	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:55.880537987 CEST	49771	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:55.880827904 CEST	49771	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:55.880846024 CEST	443	49771	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:55.880892992 CEST	49771	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:55.881365061 CEST	49771	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:55.895984888 CEST	49781	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:55.896114111 CEST	443	49781	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:55.898180008 CEST	49781	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:55.898669958 CEST	49781	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:55.898705959 CEST	443	49781	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:56.010766029 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:56.010814905 CEST	80	49768	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:56.010842085 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:56.011039972 CEST	49768	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:56.249768972 CEST	443	49779	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:56.250127077 CEST	49779	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:56.250138998 CEST	443	49779	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:56.250471115 CEST	443	49779	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:56.250948906 CEST	49779	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:56.251008987 CEST	443	49779	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:56.348727942 CEST	443	49780	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:56.349580050 CEST	49780	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:56.349600077 CEST	443	49780	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:56.349982977 CEST	443	49780	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:56.350760937 CEST	49780	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:56.350760937 CEST	49780	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:56.350792885 CEST	443	49780	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:56.350837946 CEST	443	49780	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:56.365026951 CEST	49779	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:56.428940058 CEST	49780	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:56.564887047 CEST	443	49781	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:56.565309048 CEST	49781	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:56.565378904 CEST	443	49781	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:56.565853119 CEST	443	49781	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:56.566709042 CEST	49781	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:56.566709042 CEST	49781	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:56.566751957 CEST	443	49781	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:56.566817045 CEST	443	49781	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:56.667859077 CEST	49781	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:56.822712898 CEST	443	49780	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:56.822757959 CEST	443	49780	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:56.822791100 CEST	443	49780	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:56.822815895 CEST	443	49780	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:56.822833061 CEST	49780	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:56.822875023 CEST	443	49780	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:56.822896957 CEST	49780	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:56.828686953 CEST	443	49780	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:56.828717947 CEST	443	49780	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:56.828742981 CEST	443	49780	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:56.828754902 CEST	49780	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:56.828775883 CEST	443	49780	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:56.828805923 CEST	49780	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:56.835057020 CEST	443	49780	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:56.835141897 CEST	49780	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:56.835156918 CEST	443	49780	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:56.841362953 CEST	443	49780	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:56.841408968 CEST	49780	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:56.841424942 CEST	443	49780	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:56.849679947 CEST	443	49781	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:56.849986076 CEST	443	49781	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:56.850090027 CEST	49781	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:56.859045029 CEST	49781	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:56.859090090 CEST	443	49781	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:56.909945965 CEST	443	49780	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:56.912012100 CEST	443	49780	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:56.912046909 CEST	49780	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:56.912072897 CEST	443	49780	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:56.912115097 CEST	49780	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:56.912138939 CEST	443	49780	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:56.918360949 CEST	443	49780	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:56.922411919 CEST	49780	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:56.922431946 CEST	443	49780	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:56.925224066 CEST	443	49780	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:56.925297022 CEST	49780	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:56.925312042 CEST	443	49780	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:56.931137085 CEST	443	49780	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:56.934143066 CEST	49780	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:56.934165955 CEST	443	49780	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:56.937355995 CEST	443	49780	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:56.937414885 CEST	49780	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:56.937432051 CEST	443	49780	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:56.943572998 CEST	443	49780	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:56.943762064 CEST	443	49780	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:56.943840027 CEST	49780	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:57.206070900 CEST	49780	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:57.206098080 CEST	443	49780	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:57.272598982 CEST	49782	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:57.272702932 CEST	443	49782	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:57.272810936 CEST	49782	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:57.273097992 CEST	49782	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:57.273134947 CEST	443	49782	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:57.329545975 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:57.335699081 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:57.528873920 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:57.570427895 CEST	49768	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:57.577255011 CEST	80	49768	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:57.577812910 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:57.767642021 CEST	80	49768	185.53.177.52	192.168.2.5
Sep 30, 2024 00:21:57.817796946 CEST	49768	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:21:57.963586092 CEST	443	49782	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:57.964526892 CEST	49782	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:57.964581013 CEST	443	49782	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:57.965086937 CEST	443	49782	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:57.965728998 CEST	49782	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:57.965823889 CEST	443	49782	142.250.184.238	192.168.2.5
Sep 30, 2024 00:21:58.008827925 CEST	49782	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:21:59.155857086 CEST	49779	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:59.203413010 CEST	443	49779	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:59.357539892 CEST	443	49779	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:59.357628107 CEST	443	49779	142.250.185.110	192.168.2.5
Sep 30, 2024 00:21:59.357940912 CEST	49779	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:59.359375000 CEST	49779	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:21:59.359397888 CEST	443	49779	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:00.010691881 CEST	49784	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:00.010807037 CEST	443	49784	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:00.010885954 CEST	49784	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:00.011188984 CEST	49784	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:00.011253119 CEST	443	49784	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:00.085377932 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:00.092392921 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:00.305501938 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:00.305535078 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:00.305548906 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:00.305579901 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:00.305644989 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:00.305727959 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:00.305881977 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:00.305893898 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:00.305906057 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:00.305953026 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:00.306016922 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:00.306051016 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:00.306328058 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:00.397062063 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:00.404247999 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:00.542629957 CEST	80	49778	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:00.542747974 CEST	49778	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:00.606074095 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:00.623399973 CEST	49778	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:00.623625040 CEST	49768	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:00.629792929 CEST	80	49778	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:00.629807949 CEST	80	49768	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:00.638997078 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:00.645375967 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:00.646902084 CEST	443	49784	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:00.649260998 CEST	49784	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:00.649296999 CEST	443	49784	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:00.649702072 CEST	443	49784	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:00.650712967 CEST	49784	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:00.650789022 CEST	443	49784	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:00.651190996 CEST	49784	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:00.691410065 CEST	443	49784	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:00.750319958 CEST	49782	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:00.750437021 CEST	443	49782	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:00.751715899 CEST	49785	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:00.751760960 CEST	443	49785	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:00.751844883 CEST	49785	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:00.753545046 CEST	49785	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:00.753563881 CEST	443	49785	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:00.819818020 CEST	80	49768	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:00.838850975 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:00.933969021 CEST	49768	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:00.933993101 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:00.936783075 CEST	443	49784	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:00.936947107 CEST	443	49784	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:00.937027931 CEST	49784	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:00.937669039 CEST	49784	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:00.937701941 CEST	443	49784	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:00.937715054 CEST	49784	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:00.937753916 CEST	49784	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:01.135821104 CEST	443	49782	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:01.135932922 CEST	443	49782	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:01.136014938 CEST	443	49782	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:01.136034966 CEST	49782	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:01.136106968 CEST	443	49782	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:01.136162043 CEST	49782	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:01.136182070 CEST	443	49782	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:01.141539097 CEST	443	49782	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:01.141630888 CEST	49782	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:01.141638041 CEST	443	49782	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:01.141669035 CEST	443	49782	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:01.141725063 CEST	49782	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:01.141855955 CEST	443	49782	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:01.148160934 CEST	443	49782	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:01.148219109 CEST	49782	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:01.148226976 CEST	443	49782	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:01.154222012 CEST	443	49782	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:01.154285908 CEST	49782	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:01.154293060 CEST	443	49782	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:01.223912954 CEST	443	49782	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:01.223997116 CEST	49782	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:01.224029064 CEST	443	49782	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:01.224694014 CEST	443	49782	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:01.224749088 CEST	49782	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:01.224760056 CEST	443	49782	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:01.231051922 CEST	443	49782	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:01.231132030 CEST	49782	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:01.231142044 CEST	443	49782	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:01.237348080 CEST	443	49782	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:01.237406015 CEST	49782	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:01.237416983 CEST	443	49782	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:01.243592978 CEST	443	49782	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:01.243643999 CEST	49782	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:01.243653059 CEST	443	49782	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:01.249880075 CEST	443	49782	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:01.249938965 CEST	49782	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:01.249950886 CEST	443	49782	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:01.256194115 CEST	443	49782	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:01.256262064 CEST	49782	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:01.256272078 CEST	443	49782	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:01.256495953 CEST	443	49782	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:01.256560087 CEST	49782	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:01.257272959 CEST	49782	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:01.257287979 CEST	443	49782	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:01.279557943 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:01.284349918 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:01.392307043 CEST	443	49785	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:01.392796040 CEST	49785	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:01.392811060 CEST	443	49785	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:01.394203901 CEST	443	49785	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:01.394706011 CEST	49785	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:01.394804955 CEST	443	49785	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:01.394905090 CEST	49785	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:01.435417891 CEST	443	49785	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:01.477689981 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:01.485548019 CEST	49768	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:01.490439892 CEST	80	49768	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:01.652425051 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:01.680702925 CEST	80	49768	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:01.684108019 CEST	443	49785	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:01.684303999 CEST	443	49785	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:01.684384108 CEST	49785	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:01.709706068 CEST	49785	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:01.709733009 CEST	443	49785	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:01.715579033 CEST	49786	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:01.715609074 CEST	443	49786	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:01.715714931 CEST	49786	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:01.716063023 CEST	49786	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:01.716078043 CEST	443	49786	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:01.790023088 CEST	49768	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:02.356914997 CEST	443	49786	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:02.369402885 CEST	49786	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:02.369412899 CEST	443	49786	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:02.369887114 CEST	443	49786	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:02.377003908 CEST	49786	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:02.377088070 CEST	443	49786	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:02.377258062 CEST	49786	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:02.419409990 CEST	443	49786	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:02.646990061 CEST	443	49786	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:02.647080898 CEST	443	49786	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:02.647144079 CEST	49786	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:02.647434950 CEST	49786	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:02.647453070 CEST	443	49786	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:03.011682987 CEST	49787	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:03.011809111 CEST	443	49787	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:03.011919022 CEST	49787	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:03.012244940 CEST	49787	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:03.012288094 CEST	443	49787	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:03.566534042 CEST	49788	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:03.566580057 CEST	443	49788	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:03.566832066 CEST	49788	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:03.567651033 CEST	49788	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:03.567672014 CEST	443	49788	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:03.642030001 CEST	443	49787	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:03.653954983 CEST	49787	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:03.653986931 CEST	443	49787	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:03.654366970 CEST	443	49787	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:03.664431095 CEST	49787	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:03.664515972 CEST	443	49787	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:03.665549040 CEST	49787	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:03.707420111 CEST	443	49787	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:03.930059910 CEST	443	49787	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:03.930155039 CEST	443	49787	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:03.930234909 CEST	49787	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:03.973740101 CEST	49787	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:03.973772049 CEST	443	49787	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:04.212593079 CEST	443	49788	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:04.229123116 CEST	49788	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:04.229150057 CEST	443	49788	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:04.231482983 CEST	443	49788	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:04.232387066 CEST	49788	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:04.232587099 CEST	443	49788	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:04.233692884 CEST	49788	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:04.279402018 CEST	443	49788	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:04.501801014 CEST	443	49788	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:04.502141953 CEST	443	49788	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:04.502221107 CEST	49788	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:04.502816916 CEST	49788	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:04.502841949 CEST	443	49788	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:04.502852917 CEST	49788	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:04.502927065 CEST	49788	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:07.021931887 CEST	49713	80	192.168.2.5	18.66.121.138
Sep 30, 2024 00:22:07.329977989 CEST	80	49713	18.66.121.138	192.168.2.5
Sep 30, 2024 00:22:07.727579117 CEST	49717	80	192.168.2.5	18.66.121.138
Sep 30, 2024 00:22:07.732472897 CEST	80	49717	18.66.121.138	192.168.2.5
Sep 30, 2024 00:22:11.195316076 CEST	49790	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:11.199268103 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:11.200253010 CEST	80	49790	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:11.200330973 CEST	49790	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:11.204099894 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:11.416779995 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:11.416800976 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:11.416811943 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:11.416825056 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:11.416836023 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:11.416870117 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:11.416913033 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:11.417028904 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:11.417041063 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:11.417088985 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:11.464317083 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:11.469183922 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:11.666806936 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:11.680526018 CEST	49768	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:11.685477972 CEST	80	49768	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:11.687926054 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:11.692743063 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:11.698894978 CEST	49791	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:11.698934078 CEST	443	49791	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:11.699050903 CEST	49791	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:11.699292898 CEST	49791	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:11.699311018 CEST	443	49791	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:11.735907078 CEST	49792	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:11.736016035 CEST	443	49792	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:11.736105919 CEST	49792	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:11.736361027 CEST	49792	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:11.736406088 CEST	443	49792	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:11.755345106 CEST	49793	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:11.755393028 CEST	443	49793	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:11.755655050 CEST	49793	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:11.755873919 CEST	49793	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:11.755892992 CEST	443	49793	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:11.874855995 CEST	80	49768	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:11.886080980 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:11.928585052 CEST	49768	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:11.928932905 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:12.354726076 CEST	443	49791	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:12.366110086 CEST	443	49792	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.388550997 CEST	443	49793	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.408036947 CEST	49791	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:12.410280943 CEST	49792	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:12.439585924 CEST	49793	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:12.447977066 CEST	49792	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:12.448040962 CEST	443	49792	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.448071957 CEST	49791	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:12.448091030 CEST	443	49791	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:12.448190928 CEST	49793	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:12.448210001 CEST	443	49793	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.448590994 CEST	443	49791	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:12.448718071 CEST	443	49792	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.449095011 CEST	443	49793	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.449615002 CEST	49792	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:12.449722052 CEST	443	49792	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.450133085 CEST	49791	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:12.450217962 CEST	443	49791	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:12.450562954 CEST	49793	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:12.450845003 CEST	49792	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:12.450859070 CEST	443	49793	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.450949907 CEST	49793	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:12.450984001 CEST	443	49793	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.491409063 CEST	443	49792	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.502580881 CEST	49793	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:12.502594948 CEST	49791	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:12.644021034 CEST	443	49792	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.644119978 CEST	443	49792	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.644193888 CEST	49792	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:12.644705057 CEST	49792	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:12.644731998 CEST	443	49792	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.663361073 CEST	49794	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:12.663403988 CEST	443	49794	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.663492918 CEST	49794	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:12.664513111 CEST	49794	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:12.664525986 CEST	443	49794	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.871373892 CEST	443	49793	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.871444941 CEST	443	49793	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.871484995 CEST	443	49793	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.871520996 CEST	443	49793	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.871556997 CEST	443	49793	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.871557951 CEST	49793	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:12.871579885 CEST	443	49793	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.871615887 CEST	49793	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:12.871635914 CEST	49793	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:12.877121925 CEST	443	49793	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.877194881 CEST	443	49793	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.877253056 CEST	49793	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:12.877264023 CEST	443	49793	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.883481979 CEST	443	49793	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.883547068 CEST	49793	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:12.883555889 CEST	443	49793	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.889960051 CEST	443	49793	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.890048027 CEST	49793	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:12.890057087 CEST	443	49793	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.934597015 CEST	49793	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:12.957972050 CEST	443	49793	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.962604046 CEST	443	49793	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.962639093 CEST	443	49793	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.962667942 CEST	49793	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:12.962678909 CEST	443	49793	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.962740898 CEST	49793	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:12.967323065 CEST	443	49793	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.973056078 CEST	443	49793	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.973179102 CEST	443	49793	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.973195076 CEST	49793	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:12.973203897 CEST	443	49793	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.973246098 CEST	49793	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:12.979403019 CEST	443	49793	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.985815048 CEST	443	49793	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.985857964 CEST	443	49793	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.985892057 CEST	49793	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:12.985901117 CEST	443	49793	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.985949039 CEST	49793	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:12.991971016 CEST	443	49793	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.992091894 CEST	443	49793	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.992204905 CEST	49793	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:12.992213011 CEST	443	49793	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.997999907 CEST	443	49793	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.998044968 CEST	443	49793	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.998107910 CEST	49793	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:12.998115063 CEST	443	49793	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.998162031 CEST	49793	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:12.998167992 CEST	443	49793	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.998217106 CEST	443	49793	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:12.998264074 CEST	49793	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:12.999104023 CEST	49793	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:12.999118090 CEST	443	49793	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:13.016247034 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:13.021101952 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:13.309698105 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:13.314654112 CEST	443	49794	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:13.315366983 CEST	49794	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:13.315381050 CEST	443	49794	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:13.315723896 CEST	443	49794	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:13.316323996 CEST	49794	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:13.316385984 CEST	443	49794	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:13.316910982 CEST	49794	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:13.332861900 CEST	49768	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:13.337740898 CEST	80	49768	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:13.359391928 CEST	443	49794	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:13.364573002 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:13.530306101 CEST	80	49768	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:13.572581053 CEST	49768	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:13.595230103 CEST	443	49794	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:13.595314980 CEST	443	49794	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:13.595366955 CEST	49794	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:13.595907927 CEST	49794	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:13.595921993 CEST	443	49794	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:14.962481022 CEST	49791	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:14.984451056 CEST	49796	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:14.984505892 CEST	443	49796	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:14.984580040 CEST	49796	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:14.988773108 CEST	49796	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:14.988787889 CEST	443	49796	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:15.007405996 CEST	443	49791	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:15.165688038 CEST	443	49791	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:15.165887117 CEST	443	49791	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:15.166081905 CEST	49791	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:15.168093920 CEST	49791	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:15.168128967 CEST	443	49791	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:15.168148041 CEST	49791	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:15.168180943 CEST	49791	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:15.362229109 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:15.367362022 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:15.579875946 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:15.579900026 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:15.579910040 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:15.579922915 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:15.579936028 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:15.579962015 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:15.579998016 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:15.580002069 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:15.580013037 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:15.580039978 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:15.580709934 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:15.580771923 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:15.628742933 CEST	443	49796	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:15.629028082 CEST	49796	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:15.629041910 CEST	443	49796	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:15.629394054 CEST	443	49796	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:15.629956961 CEST	49796	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:15.630026102 CEST	443	49796	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:15.630167007 CEST	49796	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:15.675411940 CEST	443	49796	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:15.915483952 CEST	443	49796	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:15.915793896 CEST	443	49796	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:15.915849924 CEST	49796	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:15.917208910 CEST	49796	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:15.917227983 CEST	443	49796	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:16.075220108 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:16.080322981 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:16.275135040 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:16.326136112 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:16.504312038 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:16.509947062 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:16.515455961 CEST	49797	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:16.515491962 CEST	443	49797	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:16.515655994 CEST	49797	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:16.524593115 CEST	49797	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:16.524610043 CEST	443	49797	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:16.685838938 CEST	49798	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:16.685889006 CEST	443	49798	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:16.685961962 CEST	49798	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:16.686994076 CEST	49798	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:16.687009096 CEST	443	49798	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:16.688587904 CEST	49799	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:16.688638926 CEST	443	49799	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:16.688690901 CEST	49799	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:16.689145088 CEST	49799	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:16.689157009 CEST	443	49799	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:16.703556061 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:16.747853994 CEST	80	49790	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:16.748006105 CEST	49790	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:16.756520033 CEST	49790	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:16.757150888 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:16.761322975 CEST	80	49790	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:16.791934013 CEST	49768	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:16.796911001 CEST	80	49768	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:16.986753941 CEST	80	49768	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:17.028134108 CEST	49768	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:17.161237955 CEST	443	49797	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:17.166294098 CEST	49797	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:17.166318893 CEST	443	49797	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:17.166667938 CEST	443	49797	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:17.177918911 CEST	49797	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:17.178005934 CEST	443	49797	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:17.232158899 CEST	49797	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:17.329868078 CEST	443	49799	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:17.332515955 CEST	49799	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:17.332532883 CEST	443	49799	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:17.332995892 CEST	443	49799	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:17.335104942 CEST	49799	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:17.335211039 CEST	443	49799	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:17.335692883 CEST	49799	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:17.335733891 CEST	443	49799	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:17.343740940 CEST	443	49798	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:17.391122103 CEST	49798	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:17.806401014 CEST	443	49799	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:17.806468964 CEST	443	49799	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:17.806515932 CEST	443	49799	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:17.806566000 CEST	443	49799	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:17.806571007 CEST	49799	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:17.806586027 CEST	443	49799	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:17.806631088 CEST	49799	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:17.806798935 CEST	443	49799	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:17.806902885 CEST	49799	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:17.809206963 CEST	49798	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:17.809237957 CEST	443	49798	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:17.809788942 CEST	443	49798	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:17.811592102 CEST	49798	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:17.811671019 CEST	443	49798	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:17.812161922 CEST	49798	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:17.812262058 CEST	443	49799	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:17.812321901 CEST	443	49799	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:17.812391043 CEST	49799	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:17.812412024 CEST	443	49799	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:17.818929911 CEST	443	49799	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:17.819006920 CEST	49799	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:17.819017887 CEST	443	49799	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:17.825181007 CEST	443	49799	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:17.825241089 CEST	49799	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:17.825252056 CEST	443	49799	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:17.855410099 CEST	443	49798	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:17.869132996 CEST	49799	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:17.895306110 CEST	443	49799	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:17.895684958 CEST	443	49799	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:17.895772934 CEST	49799	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:17.895787954 CEST	443	49799	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:17.901654959 CEST	443	49799	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:17.901702881 CEST	49799	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:17.901721001 CEST	443	49799	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:17.907979965 CEST	443	49799	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:17.908058882 CEST	443	49799	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:17.908076048 CEST	49799	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:17.908087969 CEST	443	49799	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:17.908193111 CEST	49799	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:17.914251089 CEST	443	49799	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:17.920676947 CEST	443	49799	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:17.920727968 CEST	49799	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:17.920739889 CEST	443	49799	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:17.926767111 CEST	443	49799	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:17.926861048 CEST	443	49799	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:17.926883936 CEST	49799	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:17.926898956 CEST	443	49799	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:17.926974058 CEST	49799	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:17.932701111 CEST	443	49799	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:17.933192968 CEST	443	49799	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:17.933279991 CEST	49799	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:17.938448906 CEST	49799	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:17.938481092 CEST	443	49799	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:18.018959999 CEST	443	49798	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:18.019042015 CEST	443	49798	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:18.019114017 CEST	49798	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:18.031511068 CEST	49798	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:18.031528950 CEST	443	49798	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:18.033478975 CEST	49800	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:18.033509016 CEST	443	49800	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:18.033643961 CEST	49800	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:18.038110971 CEST	49800	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:18.038120031 CEST	443	49800	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:18.480626106 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:18.485558033 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:18.678284883 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:18.720673084 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:18.764616966 CEST	443	49800	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:18.813031912 CEST	49800	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:18.835766077 CEST	49800	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:18.835777998 CEST	443	49800	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:18.836303949 CEST	443	49800	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:18.877685070 CEST	49800	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:18.892604113 CEST	49800	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:18.892746925 CEST	443	49800	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:18.893996954 CEST	49800	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:18.935425997 CEST	443	49800	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:19.084625959 CEST	443	49800	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:19.084708929 CEST	443	49800	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:19.084830046 CEST	49800	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:19.085253000 CEST	49800	443	192.168.2.5	142.250.184.238
Sep 30, 2024 00:22:19.085278034 CEST	443	49800	142.250.184.238	192.168.2.5
Sep 30, 2024 00:22:19.292340994 CEST	49768	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:19.297214031 CEST	80	49768	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:19.494091034 CEST	80	49768	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:19.542515993 CEST	49768	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:20.423914909 CEST	49797	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:20.467411041 CEST	443	49797	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:20.642446041 CEST	443	49797	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:20.642544985 CEST	443	49797	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:20.642606020 CEST	49797	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:20.647478104 CEST	49797	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:20.647500992 CEST	443	49797	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:21.063657045 CEST	49803	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:21.063697100 CEST	443	49803	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:21.063762903 CEST	49803	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:21.064232111 CEST	49803	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:21.064251900 CEST	443	49803	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:21.693583965 CEST	443	49803	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:21.806819916 CEST	49803	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:22.045718908 CEST	49803	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:22.045749903 CEST	443	49803	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:22.046291113 CEST	443	49803	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:22.048480034 CEST	49803	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:22.048552036 CEST	443	49803	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:22.049257994 CEST	49803	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:22.091408014 CEST	443	49803	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:22.247037888 CEST	443	49803	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:22.247255087 CEST	443	49803	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:22.247358084 CEST	49803	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:22.254163980 CEST	49803	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:22.254180908 CEST	443	49803	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:22.344945908 CEST	49805	443	192.168.2.5	142.250.185.100
Sep 30, 2024 00:22:22.345010996 CEST	443	49805	142.250.185.100	192.168.2.5
Sep 30, 2024 00:22:22.345092058 CEST	49805	443	192.168.2.5	142.250.185.100
Sep 30, 2024 00:22:22.345520973 CEST	49805	443	192.168.2.5	142.250.185.100
Sep 30, 2024 00:22:22.345539093 CEST	443	49805	142.250.185.100	192.168.2.5
Sep 30, 2024 00:22:23.009040117 CEST	443	49805	142.250.185.100	192.168.2.5
Sep 30, 2024 00:22:23.009402037 CEST	49805	443	192.168.2.5	142.250.185.100
Sep 30, 2024 00:22:23.009437084 CEST	443	49805	142.250.185.100	192.168.2.5
Sep 30, 2024 00:22:23.009753942 CEST	443	49805	142.250.185.100	192.168.2.5
Sep 30, 2024 00:22:23.010256052 CEST	49805	443	192.168.2.5	142.250.185.100
Sep 30, 2024 00:22:23.010330915 CEST	443	49805	142.250.185.100	192.168.2.5
Sep 30, 2024 00:22:23.106389999 CEST	49805	443	192.168.2.5	142.250.185.100
Sep 30, 2024 00:22:23.314683914 CEST	49806	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:23.321291924 CEST	80	49806	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:23.321367979 CEST	49806	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:23.332360029 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:23.338949919 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:23.706587076 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:23.706603050 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:23.706621885 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:23.706634045 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:23.706645012 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:23.706655979 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:23.706667900 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:23.706680059 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:23.706692934 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:23.706743956 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:23.707995892 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:23.708040953 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:23.760442019 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:23.766650915 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:23.964529991 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:23.972337008 CEST	49768	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:23.979070902 CEST	80	49768	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:23.995651007 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:23.996542931 CEST	49807	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:23.996571064 CEST	443	49807	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:24.000117064 CEST	49807	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:24.000916004 CEST	49807	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:24.000931025 CEST	443	49807	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:24.002362013 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:24.061722994 CEST	49808	443	192.168.2.5	142.250.184.206
Sep 30, 2024 00:22:24.061830044 CEST	443	49808	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:24.061866999 CEST	49809	443	192.168.2.5	142.250.184.206
Sep 30, 2024 00:22:24.061885118 CEST	443	49809	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:24.061928034 CEST	49808	443	192.168.2.5	142.250.184.206
Sep 30, 2024 00:22:24.062161922 CEST	49809	443	192.168.2.5	142.250.184.206
Sep 30, 2024 00:22:24.062161922 CEST	49809	443	192.168.2.5	142.250.184.206
Sep 30, 2024 00:22:24.062187910 CEST	443	49809	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:24.062300920 CEST	49808	443	192.168.2.5	142.250.184.206
Sep 30, 2024 00:22:24.062335014 CEST	443	49808	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:24.168256998 CEST	80	49768	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:24.195936918 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:24.299629927 CEST	49768	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:24.299992085 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:24.632447958 CEST	443	49807	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:24.638202906 CEST	49807	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:24.638216019 CEST	443	49807	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:24.638621092 CEST	443	49807	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:24.649941921 CEST	49807	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:24.650032043 CEST	443	49807	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:24.689479113 CEST	49807	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:24.695676088 CEST	443	49809	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:24.707911968 CEST	443	49808	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:24.709130049 CEST	49808	443	192.168.2.5	142.250.184.206
Sep 30, 2024 00:22:24.709160089 CEST	443	49808	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:24.710321903 CEST	443	49808	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:24.710364103 CEST	49809	443	192.168.2.5	142.250.184.206
Sep 30, 2024 00:22:24.710376024 CEST	443	49809	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:24.710870981 CEST	49808	443	192.168.2.5	142.250.184.206
Sep 30, 2024 00:22:24.710887909 CEST	443	49809	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:24.711052895 CEST	443	49808	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:24.711108923 CEST	49808	443	192.168.2.5	142.250.184.206
Sep 30, 2024 00:22:24.711514950 CEST	49809	443	192.168.2.5	142.250.184.206
Sep 30, 2024 00:22:24.711597919 CEST	443	49809	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:24.711826086 CEST	49809	443	192.168.2.5	142.250.184.206
Sep 30, 2024 00:22:24.711857080 CEST	443	49809	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:24.754424095 CEST	49808	443	192.168.2.5	142.250.184.206
Sep 30, 2024 00:22:24.754431963 CEST	443	49808	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:24.894732952 CEST	49809	443	192.168.2.5	142.250.184.206
Sep 30, 2024 00:22:24.995529890 CEST	443	49808	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:24.995628119 CEST	443	49808	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:24.995706081 CEST	49808	443	192.168.2.5	142.250.184.206
Sep 30, 2024 00:22:24.996170998 CEST	49808	443	192.168.2.5	142.250.184.206
Sep 30, 2024 00:22:24.996205091 CEST	443	49808	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:25.014050961 CEST	49810	443	192.168.2.5	142.250.184.206
Sep 30, 2024 00:22:25.014086962 CEST	443	49810	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:25.014163017 CEST	49810	443	192.168.2.5	142.250.184.206
Sep 30, 2024 00:22:25.014991045 CEST	49810	443	192.168.2.5	142.250.184.206
Sep 30, 2024 00:22:25.015002966 CEST	443	49810	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:25.161580086 CEST	443	49809	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:25.161629915 CEST	443	49809	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:25.161664963 CEST	443	49809	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:25.161679029 CEST	49809	443	192.168.2.5	142.250.184.206
Sep 30, 2024 00:22:25.161694050 CEST	443	49809	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:25.161730051 CEST	49809	443	192.168.2.5	142.250.184.206
Sep 30, 2024 00:22:25.161739111 CEST	443	49809	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:25.167527914 CEST	443	49809	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:25.167565107 CEST	443	49809	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:25.167586088 CEST	49809	443	192.168.2.5	142.250.184.206
Sep 30, 2024 00:22:25.167596102 CEST	443	49809	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:25.167639017 CEST	49809	443	192.168.2.5	142.250.184.206
Sep 30, 2024 00:22:25.167824984 CEST	443	49809	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:25.173821926 CEST	443	49809	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:25.173871040 CEST	49809	443	192.168.2.5	142.250.184.206
Sep 30, 2024 00:22:25.173885107 CEST	443	49809	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:25.180124044 CEST	443	49809	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:25.180187941 CEST	49809	443	192.168.2.5	142.250.184.206
Sep 30, 2024 00:22:25.180197001 CEST	443	49809	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:25.221429110 CEST	49809	443	192.168.2.5	142.250.184.206
Sep 30, 2024 00:22:25.248421907 CEST	443	49809	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:25.250272036 CEST	443	49809	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:25.250324011 CEST	49809	443	192.168.2.5	142.250.184.206
Sep 30, 2024 00:22:25.250334024 CEST	443	49809	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:25.256522894 CEST	443	49809	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:25.256547928 CEST	443	49809	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:25.256563902 CEST	49809	443	192.168.2.5	142.250.184.206
Sep 30, 2024 00:22:25.256570101 CEST	443	49809	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:25.256625891 CEST	49809	443	192.168.2.5	142.250.184.206
Sep 30, 2024 00:22:25.262820959 CEST	443	49809	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:25.269011974 CEST	443	49809	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:25.269058943 CEST	49809	443	192.168.2.5	142.250.184.206
Sep 30, 2024 00:22:25.269068003 CEST	443	49809	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:25.275367022 CEST	443	49809	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:25.275398970 CEST	443	49809	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:25.275417089 CEST	49809	443	192.168.2.5	142.250.184.206
Sep 30, 2024 00:22:25.275425911 CEST	443	49809	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:25.275464058 CEST	49809	443	192.168.2.5	142.250.184.206
Sep 30, 2024 00:22:25.281569958 CEST	443	49809	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:25.287550926 CEST	443	49809	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:25.287600994 CEST	49809	443	192.168.2.5	142.250.184.206
Sep 30, 2024 00:22:25.287607908 CEST	443	49809	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:25.287782907 CEST	443	49809	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:25.287839890 CEST	49809	443	192.168.2.5	142.250.184.206
Sep 30, 2024 00:22:25.288050890 CEST	49809	443	192.168.2.5	142.250.184.206
Sep 30, 2024 00:22:25.288064957 CEST	443	49809	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:25.288077116 CEST	49809	443	192.168.2.5	142.250.184.206
Sep 30, 2024 00:22:25.288110018 CEST	49809	443	192.168.2.5	142.250.184.206
Sep 30, 2024 00:22:25.304384947 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:25.310513973 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:25.505487919 CEST	80	49763	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:25.512916088 CEST	49768	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:25.519498110 CEST	80	49768	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:25.545397997 CEST	49763	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:25.646972895 CEST	443	49810	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:25.647382021 CEST	49810	443	192.168.2.5	142.250.184.206
Sep 30, 2024 00:22:25.647401094 CEST	443	49810	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:25.647794008 CEST	443	49810	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:25.648230076 CEST	49810	443	192.168.2.5	142.250.184.206
Sep 30, 2024 00:22:25.648305893 CEST	443	49810	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:25.648504019 CEST	49810	443	192.168.2.5	142.250.184.206
Sep 30, 2024 00:22:25.691392899 CEST	443	49810	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:25.709881067 CEST	80	49768	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:25.754064083 CEST	49768	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:25.941167116 CEST	443	49810	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:25.941391945 CEST	443	49810	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:25.941483974 CEST	49810	443	192.168.2.5	142.250.184.206
Sep 30, 2024 00:22:25.963421106 CEST	49810	443	192.168.2.5	142.250.184.206
Sep 30, 2024 00:22:25.963438988 CEST	443	49810	142.250.184.206	192.168.2.5
Sep 30, 2024 00:22:27.562586069 CEST	49807	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:27.607395887 CEST	443	49807	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:27.766769886 CEST	443	49807	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:27.766912937 CEST	443	49807	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:27.767005920 CEST	49807	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:27.769427061 CEST	49807	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:27.769448042 CEST	443	49807	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:28.045444965 CEST	49811	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:28.045494080 CEST	443	49811	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:28.045564890 CEST	49811	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:28.046123028 CEST	49811	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:28.046140909 CEST	443	49811	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:28.685798883 CEST	443	49811	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:28.686598063 CEST	49811	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:28.686620951 CEST	443	49811	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:28.686975956 CEST	443	49811	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:28.688174963 CEST	49811	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:28.688245058 CEST	443	49811	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:28.688755989 CEST	49811	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:28.735403061 CEST	443	49811	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:28.872047901 CEST	80	49806	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:28.872121096 CEST	49806	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:28.975831032 CEST	443	49811	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:28.976141930 CEST	443	49811	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:28.976274967 CEST	49811	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:28.977539062 CEST	49811	443	192.168.2.5	142.250.185.110
Sep 30, 2024 00:22:28.977561951 CEST	443	49811	142.250.185.110	192.168.2.5
Sep 30, 2024 00:22:29.151170969 CEST	49806	80	192.168.2.5	185.53.177.52
Sep 30, 2024 00:22:29.158258915 CEST	80	49806	185.53.177.52	192.168.2.5
Sep 30, 2024 00:22:32.933573961 CEST	443	49805	142.250.185.100	192.168.2.5
Sep 30, 2024 00:22:32.933655024 CEST	443	49805	142.250.185.100	192.168.2.5
Sep 30, 2024 00:22:32.933703899 CEST	49805	443	192.168.2.5	142.250.185.100
Sep 30, 2024 00:22:33.165062904 CEST	49805	443	192.168.2.5	142.250.185.100
Sep 30, 2024 00:22:33.165102005 CEST	443	49805	142.250.185.100	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 30, 2024 00:21:18.972563028 CEST	53	55656	1.1.1.1	192.168.2.5
Sep 30, 2024 00:21:18.981086016 CEST	53	65315	1.1.1.1	192.168.2.5
Sep 30, 2024 00:21:19.950905085 CEST	53	51316	1.1.1.1	192.168.2.5
Sep 30, 2024 00:21:20.228456974 CEST	54726	53	192.168.2.5	1.1.1.1
Sep 30, 2024 00:21:20.228657961 CEST	51047	53	192.168.2.5	1.1.1.1
Sep 30, 2024 00:21:20.288050890 CEST	53	54726	1.1.1.1	192.168.2.5
Sep 30, 2024 00:21:20.316083908 CEST	53	51047	1.1.1.1	192.168.2.5
Sep 30, 2024 00:21:21.267997980 CEST	62289	53	192.168.2.5	1.1.1.1
Sep 30, 2024 00:21:21.268641949 CEST	63398	53	192.168.2.5	1.1.1.1
Sep 30, 2024 00:21:21.274871111 CEST	53	62289	1.1.1.1	192.168.2.5
Sep 30, 2024 00:21:21.277089119 CEST	53	63398	1.1.1.1	192.168.2.5
Sep 30, 2024 00:21:21.304678917 CEST	62289	53	192.168.2.5	1.1.1.1
Sep 30, 2024 00:21:21.304814100 CEST	62113	53	192.168.2.5	1.1.1.1
Sep 30, 2024 00:21:21.312243938 CEST	53	62289	1.1.1.1	192.168.2.5
Sep 30, 2024 00:21:21.312258005 CEST	53	62113	1.1.1.1	192.168.2.5
Sep 30, 2024 00:21:21.324006081 CEST	55002	53	192.168.2.5	1.1.1.1
Sep 30, 2024 00:21:21.324219942 CEST	62851	53	192.168.2.5	1.1.1.1
Sep 30, 2024 00:21:21.373143911 CEST	53	55002	1.1.1.1	192.168.2.5
Sep 30, 2024 00:21:21.374281883 CEST	53	62851	1.1.1.1	192.168.2.5
Sep 30, 2024 00:21:22.049931049 CEST	56916	53	192.168.2.5	1.1.1.1
Sep 30, 2024 00:21:22.050473928 CEST	55906	53	192.168.2.5	1.1.1.1
Sep 30, 2024 00:21:22.058417082 CEST	53	56916	1.1.1.1	192.168.2.5
Sep 30, 2024 00:21:22.059900045 CEST	53	55906	1.1.1.1	192.168.2.5
Sep 30, 2024 00:21:22.237144947 CEST	49851	53	192.168.2.5	1.1.1.1
Sep 30, 2024 00:21:22.237786055 CEST	63781	53	192.168.2.5	1.1.1.1
Sep 30, 2024 00:21:22.244162083 CEST	53	49851	1.1.1.1	192.168.2.5
Sep 30, 2024 00:21:22.251874924 CEST	53	63781	1.1.1.1	192.168.2.5
Sep 30, 2024 00:21:22.275881052 CEST	62049	53	192.168.2.5	1.1.1.1
Sep 30, 2024 00:21:22.276359081 CEST	59780	53	192.168.2.5	1.1.1.1
Sep 30, 2024 00:21:22.282521009 CEST	53	62049	1.1.1.1	192.168.2.5
Sep 30, 2024 00:21:22.282800913 CEST	53	59780	1.1.1.1	192.168.2.5
Sep 30, 2024 00:21:22.739126921 CEST	50891	53	192.168.2.5	1.1.1.1
Sep 30, 2024 00:21:22.739325047 CEST	62971	53	192.168.2.5	1.1.1.1
Sep 30, 2024 00:21:22.741163969 CEST	58043	53	192.168.2.5	1.1.1.1
Sep 30, 2024 00:21:22.741494894 CEST	60381	53	192.168.2.5	1.1.1.1
Sep 30, 2024 00:21:22.745846033 CEST	53	50891	1.1.1.1	192.168.2.5
Sep 30, 2024 00:21:22.745857954 CEST	53	62971	1.1.1.1	192.168.2.5
Sep 30, 2024 00:21:22.748395920 CEST	53	58043	1.1.1.1	192.168.2.5
Sep 30, 2024 00:21:22.748852015 CEST	53	60381	1.1.1.1	192.168.2.5
Sep 30, 2024 00:21:25.627527952 CEST	50511	53	192.168.2.5	1.1.1.1
Sep 30, 2024 00:21:25.628282070 CEST	51493	53	192.168.2.5	1.1.1.1
Sep 30, 2024 00:21:25.635498047 CEST	53	51493	1.1.1.1	192.168.2.5
Sep 30, 2024 00:21:25.635689020 CEST	53	50511	1.1.1.1	192.168.2.5
Sep 30, 2024 00:21:25.814100981 CEST	62262	53	192.168.2.5	1.1.1.1
Sep 30, 2024 00:21:25.814331055 CEST	50848	53	192.168.2.5	1.1.1.1
Sep 30, 2024 00:21:25.821816921 CEST	53	50848	1.1.1.1	192.168.2.5
Sep 30, 2024 00:21:25.821964979 CEST	53	62262	1.1.1.1	192.168.2.5
Sep 30, 2024 00:21:27.128209114 CEST	49294	53	192.168.2.5	1.1.1.1
Sep 30, 2024 00:21:27.128380060 CEST	61811	53	192.168.2.5	1.1.1.1
Sep 30, 2024 00:21:27.136230946 CEST	53	61811	1.1.1.1	192.168.2.5
Sep 30, 2024 00:21:27.136486053 CEST	53	49294	1.1.1.1	192.168.2.5
Sep 30, 2024 00:21:33.195440054 CEST	62509	53	192.168.2.5	1.1.1.1
Sep 30, 2024 00:21:33.195671082 CEST	51093	53	192.168.2.5	1.1.1.1
Sep 30, 2024 00:21:33.214560032 CEST	53	62509	1.1.1.1	192.168.2.5
Sep 30, 2024 00:21:33.216196060 CEST	53	51093	1.1.1.1	192.168.2.5
Sep 30, 2024 00:21:34.224066973 CEST	53	57118	1.1.1.1	192.168.2.5
Sep 30, 2024 00:21:35.471478939 CEST	49256	53	192.168.2.5	1.1.1.1
Sep 30, 2024 00:21:35.472084045 CEST	58218	53	192.168.2.5	1.1.1.1
Sep 30, 2024 00:21:35.709830999 CEST	53	49256	1.1.1.1	192.168.2.5
Sep 30, 2024 00:21:35.709852934 CEST	53	58218	1.1.1.1	192.168.2.5
Sep 30, 2024 00:21:36.631575108 CEST	53	51882	1.1.1.1	192.168.2.5
Sep 30, 2024 00:21:37.346085072 CEST	53	57977	1.1.1.1	192.168.2.5
Sep 30, 2024 00:21:50.808983088 CEST	53	64535	1.1.1.1	192.168.2.5
Sep 30, 2024 00:21:51.198312044 CEST	49887	53	192.168.2.5	1.1.1.1
Sep 30, 2024 00:21:51.199124098 CEST	49168	53	192.168.2.5	1.1.1.1
Sep 30, 2024 00:21:51.206744909 CEST	53	49887	1.1.1.1	192.168.2.5
Sep 30, 2024 00:21:51.207684994 CEST	53	49168	1.1.1.1	192.168.2.5
Sep 30, 2024 00:21:57.327636957 CEST	53	60413	1.1.1.1	192.168.2.5
Sep 30, 2024 00:22:18.511883020 CEST	53	51142	1.1.1.1	192.168.2.5
Sep 30, 2024 00:22:20.071022034 CEST	53	59232	1.1.1.1	192.168.2.5
Sep 30, 2024 00:22:24.049782991 CEST	55380	53	192.168.2.5	1.1.1.1
Sep 30, 2024 00:22:24.052108049 CEST	62049	53	192.168.2.5	1.1.1.1
Sep 30, 2024 00:22:24.059042931 CEST	53	55380	1.1.1.1	192.168.2.5
Sep 30, 2024 00:22:24.061148882 CEST	53	62049	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Sep 30, 2024 00:21:22.251940012 CEST	192.168.2.5	1.1.1.1	c228	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 30, 2024 00:21:20.228456974 CEST	192.168.2.5	1.1.1.1	0x4684	Standard query (0)	finance.cocoricopatisserie.co.uk	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:21:20.228657961 CEST	192.168.2.5	1.1.1.1	0xf3ff	Standard query (0)	finance.cocoricopatisserie.co.uk	65	IN (0x0001)	false
Sep 30, 2024 00:21:21.267997980 CEST	192.168.2.5	1.1.1.1	0xe000	Standard query (0)	d38psrni17bvxu.cloudfront.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:21:21.268641949 CEST	192.168.2.5	1.1.1.1	0xba90	Standard query (0)	d38psrni17bvxu.cloudfront.net	65	IN (0x0001)	false
Sep 30, 2024 00:21:21.304678917 CEST	192.168.2.5	1.1.1.1	0xb218	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:21:21.304814100 CEST	192.168.2.5	1.1.1.1	0xdb9	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 30, 2024 00:21:21.324006081 CEST	192.168.2.5	1.1.1.1	0x30	Standard query (0)	finance.cocoricopatisserie.co.uk	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:21:21.324219942 CEST	192.168.2.5	1.1.1.1	0x1f7f	Standard query (0)	finance.cocoricopatisserie.co.uk	65	IN (0x0001)	false
Sep 30, 2024 00:21:22.049931049 CEST	192.168.2.5	1.1.1.1	0x29eb	Standard query (0)	d38psrni17bvxu.cloudfront.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:21:22.050473928 CEST	192.168.2.5	1.1.1.1	0x69db	Standard query (0)	d38psrni17bvxu.cloudfront.net	65	IN (0x0001)	false
Sep 30, 2024 00:21:22.237144947 CEST	192.168.2.5	1.1.1.1	0xd8ba	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:21:22.237786055 CEST	192.168.2.5	1.1.1.1	0x141	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Sep 30, 2024 00:21:22.275881052 CEST	192.168.2.5	1.1.1.1	0xf53d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:21:22.276359081 CEST	192.168.2.5	1.1.1.1	0xaeb3	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 30, 2024 00:21:22.739126921 CEST	192.168.2.5	1.1.1.1	0xcbc5	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:21:22.739325047 CEST	192.168.2.5	1.1.1.1	0xe714	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 30, 2024 00:21:22.741163969 CEST	192.168.2.5	1.1.1.1	0x360d	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:21:22.741494894 CEST	192.168.2.5	1.1.1.1	0xe49b	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Sep 30, 2024 00:21:25.627527952 CEST	192.168.2.5	1.1.1.1	0x90ae	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:21:25.628282070 CEST	192.168.2.5	1.1.1.1	0x8f38	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Sep 30, 2024 00:21:25.814100981 CEST	192.168.2.5	1.1.1.1	0x5db5	Standard query (0)	afs.googleusercontent.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:21:25.814331055 CEST	192.168.2.5	1.1.1.1	0xe29d	Standard query (0)	afs.googleusercontent.com	65	IN (0x0001)	false
Sep 30, 2024 00:21:27.128209114 CEST	192.168.2.5	1.1.1.1	0xed3b	Standard query (0)	afs.googleusercontent.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:21:27.128380060 CEST	192.168.2.5	1.1.1.1	0x222a	Standard query (0)	afs.googleusercontent.com	65	IN (0x0001)	false
Sep 30, 2024 00:21:33.195440054 CEST	192.168.2.5	1.1.1.1	0xe3fe	Standard query (0)	www.mydomaincontact.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:21:33.195671082 CEST	192.168.2.5	1.1.1.1	0x4c05	Standard query (0)	www.mydomaincontact.com	65	IN (0x0001)	false
Sep 30, 2024 00:21:35.471478939 CEST	192.168.2.5	1.1.1.1	0x1df	Standard query (0)	www.mydomaincontact.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:21:35.472084045 CEST	192.168.2.5	1.1.1.1	0xb41e	Standard query (0)	www.mydomaincontact.com	65	IN (0x0001)	false
Sep 30, 2024 00:21:51.198312044 CEST	192.168.2.5	1.1.1.1	0xbfde	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:21:51.199124098 CEST	192.168.2.5	1.1.1.1	0xd95a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 30, 2024 00:22:24.049782991 CEST	192.168.2.5	1.1.1.1	0x5275	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:22:24.052108049 CEST	192.168.2.5	1.1.1.1	0x8390	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 30, 2024 00:21:20.288050890 CEST	1.1.1.1	192.168.2.5	0x4684	No error (0)	finance.cocoricopatisserie.co.uk		185.53.177.52	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:21:21.274871111 CEST	1.1.1.1	192.168.2.5	0xe000	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.138	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:21:21.274871111 CEST	1.1.1.1	192.168.2.5	0xe000	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.69	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:21:21.274871111 CEST	1.1.1.1	192.168.2.5	0xe000	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.135	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:21:21.274871111 CEST	1.1.1.1	192.168.2.5	0xe000	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.190	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:21:21.312243938 CEST	1.1.1.1	192.168.2.5	0xb218	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:21:21.312258005 CEST	1.1.1.1	192.168.2.5	0xdb9	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 30, 2024 00:21:21.373143911 CEST	1.1.1.1	192.168.2.5	0x30	No error (0)	finance.cocoricopatisserie.co.uk		185.53.177.52	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:21:22.058417082 CEST	1.1.1.1	192.168.2.5	0x29eb	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.138	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:21:22.058417082 CEST	1.1.1.1	192.168.2.5	0x29eb	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.135	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:21:22.058417082 CEST	1.1.1.1	192.168.2.5	0x29eb	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.190	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:21:22.058417082 CEST	1.1.1.1	192.168.2.5	0x29eb	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.69	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:21:22.244162083 CEST	1.1.1.1	192.168.2.5	0xd8ba	No error (0)	syndicatedsearch.goog		142.250.185.110	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:21:22.282521009 CEST	1.1.1.1	192.168.2.5	0xf53d	No error (0)	www.google.com		142.250.185.100	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:21:22.282800913 CEST	1.1.1.1	192.168.2.5	0xaeb3	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 30, 2024 00:21:22.745846033 CEST	1.1.1.1	192.168.2.5	0xcbc5	No error (0)	www.google.com		142.250.185.164	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:21:22.745857954 CEST	1.1.1.1	192.168.2.5	0xe714	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 30, 2024 00:21:22.748395920 CEST	1.1.1.1	192.168.2.5	0x360d	No error (0)	syndicatedsearch.goog		142.250.184.238	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:21:25.635689020 CEST	1.1.1.1	192.168.2.5	0x90ae	No error (0)	syndicatedsearch.goog		142.250.184.238	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:21:25.821816921 CEST	1.1.1.1	192.168.2.5	0xe29d	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 00:21:25.821964979 CEST	1.1.1.1	192.168.2.5	0x5db5	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 00:21:25.821964979 CEST	1.1.1.1	192.168.2.5	0x5db5	No error (0)	googlehosted.l.googleusercontent.com		142.250.186.65	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:21:27.136230946 CEST	1.1.1.1	192.168.2.5	0x222a	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 00:21:27.136486053 CEST	1.1.1.1	192.168.2.5	0xed3b	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 00:21:27.136486053 CEST	1.1.1.1	192.168.2.5	0xed3b	No error (0)	googlehosted.l.googleusercontent.com		216.58.206.65	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:21:30.638331890 CEST	1.1.1.1	192.168.2.5	0x76e6	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 00:21:30.638331890 CEST	1.1.1.1	192.168.2.5	0x76e6	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:21:33.214560032 CEST	1.1.1.1	192.168.2.5	0xe3fe	No error (0)	www.mydomaincontact.com		108.128.52.91	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:21:33.214560032 CEST	1.1.1.1	192.168.2.5	0xe3fe	No error (0)	www.mydomaincontact.com		52.49.37.73	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:21:33.214560032 CEST	1.1.1.1	192.168.2.5	0xe3fe	No error (0)	www.mydomaincontact.com		54.171.84.62	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:21:35.709830999 CEST	1.1.1.1	192.168.2.5	0x1df	No error (0)	www.mydomaincontact.com		108.128.52.91	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:21:35.709830999 CEST	1.1.1.1	192.168.2.5	0x1df	No error (0)	www.mydomaincontact.com		52.49.37.73	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:21:35.709830999 CEST	1.1.1.1	192.168.2.5	0x1df	No error (0)	www.mydomaincontact.com		54.171.84.62	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:21:43.969724894 CEST	1.1.1.1	192.168.2.5	0x2b94	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 00:21:43.969724894 CEST	1.1.1.1	192.168.2.5	0x2b94	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:21:51.206744909 CEST	1.1.1.1	192.168.2.5	0xbfde	No error (0)	www.google.com		216.58.212.164	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:21:51.207684994 CEST	1.1.1.1	192.168.2.5	0xd95a	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 30, 2024 00:22:12.284369946 CEST	1.1.1.1	192.168.2.5	0x93f0	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 00:22:12.284369946 CEST	1.1.1.1	192.168.2.5	0x93f0	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:22:24.059042931 CEST	1.1.1.1	192.168.2.5	0x5275	No error (0)	syndicatedsearch.goog		142.250.184.206	A (IP address)	IN (0x0001)	false
Sep 30, 2024 00:22:32.914263964 CEST	1.1.1.1	192.168.2.5	0x5c5e	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 00:22:32.914263964 CEST	1.1.1.1	192.168.2.5	0x5c5e	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

finance.cocoricopatisserie.co.uk

www.google.com

syndicatedsearch.goog

d38psrni17bvxu.cloudfront.net

https:

afs.googleusercontent.com

www.mydomaincontact.com

fs.microsoft.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49709	185.53.177.52	80	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 30, 2024 00:21:20.323843002 CEST	447	OUT	GET / HTTP/1.1 Host: finance.cocoricopatisserie.co.uk Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 30, 2024 00:21:21.006941080 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 22:21:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Buckets: bucket011,bucket088,bucket089 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_VNyQOH17OaywCT9BYTUCM9neSLf2nrPcmJX+T0r7VWZmDra0/tBQtO4BkrZlWx4CjSoZ6ByQ9bvDZzcPvFesLg== X-Template: tpl_CleanPeppermintBlack_twoclick X-Language: english Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Pcrew-Ip-Organization: CenturyLink X-Pcrew-Blocked-Reason: X-Domain: cocoricopatisserie.co.uk X-Subdomain: finance Content-Encoding: gzip Data Raw: 63 32 32 0d 0a 1f 8b 08 00 00 00 00 00 04 03 ed 5b 69 77 da 4c b2 fe 6c ff 0a 85 9c 31 f8 86 45 6c 5e c0 24 17 8c 63 e3 d7 80 17 1c db e4 e4 e6 08 a9 01 81 90 18 49 18 f0 3b fe ef f7 a9 ee 96 10 36 ce 24 73 de cc 7c 19 27 06 a9 97 aa ea ea da bb 7d f4 ae de 3e ee 3c 5c 9e 28 43 7f 62 7d dc 3e a2 2f c5 d0 7c 2d a5 19 3d cb d1 c7 63 b6 ac c4 9a 9f e7 f3 fa d5 c3 f9 1f 4e b7 31 7c d4 5b d5 ab 93 5a ed aa 5a bf 99 57 e7 37 d5 f3 5a f5 e2 ef b3 fa e7 93 ce fd b5 ad 9e b9 6a b1 7f 7b b9 7f 72 de d9 df 5f 3c d8 97 93 eb de b4 b9 2c 3c 8e 0f fe 78 30 cf ec 71 6b ca 0c 7b d4 ae b6 ce 75 ed be 7e af ff 71 75 de 52 ed fb 3f ba e7 17 fb 1d dd 3c af 1f 54 9d b3 fb 3f b2 c5 83 e3 ea fc a4 5a bd aa 54 be 7f 69 2d af da 67 d9 fd b6 b6 9c 1f 77 0e 6b 0f 9d db e3 Data Ascii: c22[iwLl1El^$cI;6$s\|'}><\(Cb}>/\|-=cN1\|[ZZW7Zj{r_<,<x0qk{u~quR?<T?ZTi-gwk
Sep 30, 2024 00:21:21.006974936 CEST	1236	IN	Data Raw: e6 a1 cd 6e 2e fa 39 db bd d4 27 e7 f7 1f 3a aa bb ff e5 ae 3b a9 bb 9a 9a f1 6b 57 7e bb 50 1b bb 5d eb 6e 51 38 1e dd 38 dd bd da f2 ea b0 f7 58 ef 3e e9 97 8f 9f 99 77 31 a8 54 62 ca 62 62 d9 5e 25 36 f4 fd 69 29 93 99 cf e7 e9 79 3e ed b8 83 Data Ascii: n.9':;kW~P]nQ88X>w1Tbbb^%6i)y>L0 ~Kc!Mq4>3+c:))x\|3C_A,dkV=l>u\?2}nbGSg)TLMJyfJ6xC)IMb;!l-Qwt5ug1diIG/
Sep 30, 2024 00:21:21.006987095 CEST	1236	IN	Data Raw: 9e 30 61 82 48 d7 67 29 c8 cb 6c 62 c3 e9 67 fb 08 8f 69 66 10 21 ab aa 94 df 80 0d dc 78 14 43 eb b9 8e 5c 46 74 04 80 23 10 70 01 56 c9 28 de 54 b3 95 6c 59 e1 ce 19 2e db ea af 7b e8 40 c3 a0 1e a4 5d 14 52 85 4f 65 d8 f2 b5 e0 24 c7 83 27 c2 Data Ascii: 0aHg)lbgif!xC\Ft#pV(TlY.{@]ROe$'#:JEVcBfb@Z9y'AR<nq:fe,(U).BJ8_{]j7JsCZrYZVB2's2rrO^!yyuv.ou8iWe
Sep 30, 2024 00:21:21.006998062 CEST	672	IN	Data Raw: 41 eb 67 aa e6 dc a0 30 83 02 1f a8 bd a0 8a eb 19 0f 9f bc 70 58 9c 4c 20 8d a9 fa be 6b f6 66 e4 5b 81 3b 5b 58 81 0c 87 74 a8 14 8d ce 5c b4 93 fc 8a 00 1a 74 e7 23 dd a0 42 58 fc 15 42 be d0 75 6c f1 f7 9a a6 45 96 08 46 c2 79 70 78 20 7a 4c Data Ascii: Ag0pXL kf[;[Xt\t#BXBulEFypx zLx{Fd@WP1D'uVUF``nE:Ei<"{QPj:jUETI2%v,jt4&ZZ<ADq{xaOgl.TXf(@ER%
Sep 30, 2024 00:21:21.007009029 CEST	1236	IN	Data Raw: 76 3b b7 0b c2 db bc 6b 16 db 9d 2f a0 07 9b 79 7a f5 04 ba d4 ee e4 6a 8e b1 d9 76 e7 9a f0 8c f5 e3 2c 68 ff ec 6b 77 45 b5 7b 7f 3e 23 1e b5 bf 1c 3c e9 a7 c3 90 b6 17 dc 17 b1 4b 05 62 bf f9 54 ef c5 70 21 c0 97 1a 4e 11 5f ee a3 66 f8 cc f3 Data Ascii: v;k/yzjv,hkwE{>#<KbTp!N_f+q_6Xa[J%xDKvy R>(8+:}.%ABOivxn;R[wskEwiYXvaIW[9osC[?U\|z&%_)q,6
Sep 30, 2024 00:21:21.007019997 CEST	1236	IN	Data Raw: 00 5b 6c 97 37 20 f5 78 2e d3 41 66 82 b2 11 dc e3 a6 90 9e 4f a6 ee af 68 f8 06 e8 d4 c0 9f cb 2e f3 67 2e 1f 91 2d 63 a2 cc 85 14 1c da dc 37 2f e8 96 73 02 58 09 14 8e a5 cf f0 8a c9 f6 cc b2 ca be 8b 5b 81 91 36 38 13 4c a0 11 54 eb 46 0c 9d Data Ascii: [l7 x.AfOh.g.-c7/sX[68LTF AIA*&T6?kzKN2On~@x rs<Y1G{W-ep&NFfCI'I;#m$kPjZQa,sGG!b
Sep 30, 2024 00:21:21.007030010 CEST	174	IN	Data Raw: 58 08 9f a0 e0 f4 92 9f 2f d0 3d 33 f9 88 83 d4 f0 39 47 cf f2 5a 16 3d 8a 33 e6 e0 36 0d b5 b8 7e 38 df f5 c2 47 39 0e b5 ea 71 1c 74 10 09 f4 13 a6 d6 26 70 ab 65 c5 54 8e 5e 93 25 ad 24 7a 3f 7c 88 72 80 00 90 86 ca 0c 9e 2e 41 7e 7d b5 a6 af Data Ascii: X/=39GZ=36~8G9qt&peT^%$z?\|r.A~}om[[.d%06z,iCb\|#vVzt G$f,'?n?{9>0
Sep 30, 2024 00:21:21.062937975 CEST	531	OUT	GET /track.php?domain=cocoricopatisserie.co.uk&toggle=browserjs&uid=MTcyNzY0ODQ4MC44ODk5OjczODdlOTgwODU3MmY1NzRhY2IwNTYyZmU4NDU1OGQ2NGNkYWI1MzlkMDNiZTIzZTQ2ZTdiNjNhZjY0NTY0OTk6NjZmOWQyZTBkOTQwMg%3D%3D HTTP/1.1 Host: finance.cocoricopatisserie.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://finance.cocoricopatisserie.co.uk/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 30, 2024 00:21:21.258719921 CEST	608	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 22:21:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 30, 2024 00:21:21.304204941 CEST	400	OUT	GET /ls.php?t=66f9d2e0&token=176e2698125e51a361c995c5480d3514fd06e594 HTTP/1.1 Host: finance.cocoricopatisserie.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://finance.cocoricopatisserie.co.uk/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 30, 2024 00:21:21.500772953 CEST	906	IN	HTTP/1.1 201 Created Server: nginx Date: Sun, 29 Sep 2024 22:21:21 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Log-Success: 66f9d2e13ae550d15e05040c Charset: utf-8 Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Max-Age: 86400 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_ksktzsAjVccnhiHPyge1Q7car6mXWE2TNq3Op0jVH9q8n5e29sYuLQOq7Ha6tsrqla+MlRRbKZV6Pa1Q3pRMPQ== Data Raw: 31 30 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"success":true}0
Sep 30, 2024 00:21:25.586760044 CEST	650	OUT	GET /track.php?domain=cocoricopatisserie.co.uk&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzY0ODQ4MC44ODk5OjczODdlOTgwODU3MmY1NzRhY2IwNTYyZmU4NDU1OGQ2NGNkYWI1MzlkMDNiZTIzZTQ2ZTdiNjNhZjY0NTY0OTk6NjZmOWQyZTBkOTQwMg%3D%3D HTTP/1.1 Host: finance.cocoricopatisserie.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://finance.cocoricopatisserie.co.uk/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Sep 30, 2024 00:21:25.781320095 CEST	610	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 22:21:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 30, 2024 00:21:25.813465118 CEST	508	OUT	GET /favicon.ico HTTP/1.1 Host: finance.cocoricopatisserie.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://finance.cocoricopatisserie.co.uk/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Sep 30, 2024 00:21:26.005022049 CEST	230	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 22:21:25 GMT Content-Type: image/x-icon Content-Length: 0 Connection: keep-alive Last-Modified: Thu, 26 Sep 2024 07:56:43 GMT ETag: "66f513bb-0" Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49713	18.66.121.138	80	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 30, 2024 00:21:21.298945904 CEST	445	OUT	GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1 Host: d38psrni17bvxu.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://finance.cocoricopatisserie.co.uk/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 30, 2024 00:21:21.926893950 CEST	442	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 11375 Connection: keep-alive Server: nginx Date: Sun, 29 Sep 2024 11:04:53 GMT Last-Modified: Thu, 21 Mar 2024 11:48:11 GMT Accept-Ranges: bytes ETag: "65fc1e7b-2c6f" X-Cache: Hit from cloudfront Via: 1.1 615f944336054ae07b8e7c415ddbad44.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: AY9mqadPW7DUC0VLsKlUYn87SIxzmZrRDeG3G-00KV_2U-ytij4sJQ== Age: 40588
Sep 30, 2024 00:21:21.926927090 CEST	1236	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 dc 00 00 02 58 08 03 00 00 00 4f 6d d4 16 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 00 50 4c 54 45 00 00 00 ff Data Ascii: PNGIHDRXOmtEXtSoftwareAdobe ImageReadyqe<PLTEcdtIK^IK]IK\03IHK_acsceubdtcet0=@SHK]IL]HK\MPbNQbORc.0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes-0 5!6"7#8
Sep 30, 2024 00:21:21.926939964 CEST	224	IN	Data Raw: a4 aa 57 2a 20 af c2 1d de 89 88 54 d3 3e 08 77 78 27 22 52 4c fb 60 dc e1 9d 88 48 2d ed c3 70 87 77 22 22 a5 b4 0f c7 1d de 89 88 54 d2 3e 0a 77 78 27 22 12 d9 08 bb 47 e2 0e ef 44 44 ea 68 af 83 3b bc 13 11 29 a3 bd 1e ee f0 4e 44 a4 8a f6 ba Data Ascii: W* T>wx'"RL`H-pw""T>wx'"GDDh;)ND;"DDjho{'~X""74wx'"OND$v/H6;dqw""}+DD2io;ND$;@DDh;=ND$P;Q
Sep 30, 2024 00:21:21.926949978 CEST	1236	IN	Data Raw: 7e b2 47 16 ee f0 4e 44 24 86 f6 90 b8 c3 3b 11 91 10 da c3 e2 0e ef 44 44 22 68 0f 8d 3b bc 13 11 09 a0 3d 3c ee f0 4e 44 94 9d f6 18 b8 c3 3b 11 51 a3 22 38 1c 05 77 78 27 22 ca 4a 7b 2c dc e1 9d 88 28 23 ed f1 70 87 77 22 a2 6c b4 c7 c4 1d de Data Ascii: ~GND$;DD"h;=<ND;Q"8wx'"J{,(#pw"l2wx'"B{l(qw"wx'"JJ{*(!pw"d NDnwx'"h7;MD&qw"2+;MD&qw"v;A
Sep 30, 2024 00:21:21.926997900 CEST	1236	IN	Data Raw: d9 70 8f c4 3b b8 57 c4 db 7b c4 31 99 7c b8 e7 a2 3d 23 ee 51 78 07 f7 aa b8 ac 4a 7d 71 2d 35 09 ee bb bf b8 2d 9f b0 19 71 8f c0 3b b8 57 c6 81 77 e2 bb 3d 03 ee bb 77 9e c8 e9 6b 56 dc 83 f3 0e ee 95 bd 0b 66 b4 be 77 59 15 d1 71 cf 4c 7b 76 Data Ascii: p;W{1\|=#QxJ}q-5-q;Ww=wkVfwYqL{vU)~{v}7Gw=-h{{1F,E.`{_s1W&Bh{ s.vA=hn5wQS;}mwbNI(.v;S
Sep 30, 2024 00:21:21.927010059 CEST	1236	IN	Data Raw: ab d7 99 71 8f c0 7b 2d da cd e2 ce fb 1d 24 ab 4f 4f 16 8b 7b 97 f7 4b 1a 68 8f 85 7b 60 de 6b d2 6e 17 77 0e bc 93 a4 6e 9f 2c 19 f7 d0 bc 47 a2 3d 1e ee 1d de 7f 95 9a 76 c3 b8 73 24 92 e4 f4 ce 64 e1 b8 ef 08 f8 1a 5f 34 da 63 e2 7e f0 e0 37 Data Ascii: q{-$OO{Kh{`knwn,G=vs$d_4c~7v;aCH{\v;$=*qoGLpo{d#?+l19G=oipq=ipv~;$!;wP>?xApo7
Sep 30, 2024 00:21:21.927021027 CEST	1236	IN	Data Raw: 20 53 1f f7 0e ef df 7f 4b 26 ed 3d de ff c4 32 ee 5c 4b 25 15 5d b0 8c 7b 26 da 6b bd c6 37 82 f6 91 b8 8f 3c f8 9e 8f f6 aa 91 91 13 d8 4e 84 ee 81 70 cf 48 fb c8 cd f7 91 b4 d7 c0 7d d8 c9 c8 c3 79 69 ef e7 dd 0e ee 5c 4b 25 35 5d 67 13 f7 dc Data Ascii: SK&=2\K%]{&k7<NpH}yi\K%5]gF]>&O`;2\|;l'BK: W-q:X{k5'#7aikg#6pg)v}dZcR;
Sep 30, 2024 00:21:21.927066088 CEST	1236	IN	Data Raw: 05 f7 35 7d 84 11 a4 b3 6d e0 be ae 7f fd c6 d7 f2 ea 9a 15 f7 f1 b3 fb f7 7f ed fe 87 c0 9d 0f 77 e2 d3 dd 16 ee cf df 3f be 7f ff d9 f1 42 71 ef d2 de 2d 20 ef da 71 7f 11 1f 48 73 2f 82 fb 1a da 7b 8d 17 88 fb 15 da 7b dd fb 10 b8 63 3b a1 bb Data Ascii: 5}mw?Bq- qHs/{{c;Wi@{8uv;#p_O{F=sNq=Naxv"t{5xwbhb}w=q?DxW;&n,aGw^b"}4ywhoVo'Sm+z'sNq
Sep 30, 2024 00:21:21.927076101 CEST	552	IN	Data Raw: de 6b d2 de e9 a9 16 b8 2f 35 69 ec ee dc b4 67 c5 9d 8d 77 a2 10 bd b9 28 0a f7 d4 bc d7 a7 7d 24 ef ae ce 75 54 79 bc 57 d2 9e 19 77 74 27 52 6d 7b 35 ee 29 79 6f 46 fb 08 de 5d 30 da 13 f2 3e 80 f6 dc b8 a3 3b 91 66 db 07 e1 9e 8a f7 e6 b4 0f Data Ascii: k/5igw(}$uTyWwt'Rm{5)yoF]0>;f{FD2.!'}qGw"=6=2Ci;}81yoG]p#>v;VGW">(R!=5h;w>RA=0h
Sep 30, 2024 00:21:21.927086115 CEST	1236	IN	Data Raw: b3 e0 3e 98 f7 96 b4 cb c4 1d dd 89 2a 7a 73 d1 1c ee 03 79 cf 41 7b 26 dc ab 79 6f 4d bb 50 dc d1 9d 48 85 ed ed 71 af e4 3d 0f ed d9 70 ef e7 3d 00 ed 52 71 47 77 a2 0d c9 5c a9 0b 21 14 1a 8f f1 cc 92 2a dc d7 f3 1e 84 76 b1 b8 a3 3b 91 02 db Data Ascii: >zsyA{&yoMPHq=p=RqGw\!v;\|g}@=3KKcw]0N$pxK{v:w?aE-I?tn[G;2D\|=zGDwB{fw'`sHGV/1w
Sep 30, 2024 00:21:21.935236931 CEST	652	IN	Data Raw: 15 ef ce 10 ed 31 71 47 77 22 19 fd e7 74 4e dc 15 f1 ee 0c d1 1e 15 77 0e cd 10 49 e8 ab d3 99 71 ef f0 2e f7 35 be 27 ab 70 37 40 7b 5c dc f9 78 27 32 bc 25 d3 00 77 25 bc 3b 43 b4 c7 c6 9d 6f 77 22 cb b6 d7 c7 7d 4a f2 63 ab 4f ae c5 dd 08 ed Data Ascii: 1qGw"tNwIq.5'p7@{\x'2%w%;Cow"}JcOqGw&wxw3Gw;?1Np3D{K](3>'`qbG"qD6mG&pGw"O#wgTQ:-w59C'R\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49716	185.53.177.52	80	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 30, 2024 00:21:21.379786015 CEST	480	OUT	GET /track.php?domain=cocoricopatisserie.co.uk&toggle=browserjs&uid=MTcyNzY0ODQ4MC44ODk5OjczODdlOTgwODU3MmY1NzRhY2IwNTYyZmU4NDU1OGQ2NGNkYWI1MzlkMDNiZTIzZTQ2ZTdiNjNhZjY0NTY0OTk6NjZmOWQyZTBkOTQwMg%3D%3D HTTP/1.1 Host: finance.cocoricopatisserie.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 30, 2024 00:21:22.054195881 CEST	608	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 22:21:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 30, 2024 00:21:25.855365038 CEST	599	OUT	GET /track.php?domain=cocoricopatisserie.co.uk&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzY0ODQ4MC44ODk5OjczODdlOTgwODU3MmY1NzRhY2IwNTYyZmU4NDU1OGQ2NGNkYWI1MzlkMDNiZTIzZTQ2ZTdiNjNhZjY0NTY0OTk6NjZmOWQyZTBkOTQwMg%3D%3D HTTP/1.1 Host: finance.cocoricopatisserie.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Sep 30, 2024 00:21:26.054425001 CEST	610	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 22:21:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49717	18.66.121.138	80	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 30, 2024 00:21:22.066081047 CEST	333	OUT	GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1 Host: d38psrni17bvxu.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 30, 2024 00:21:22.714889050 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 11375 Connection: keep-alive Server: nginx Date: Sun, 29 Sep 2024 11:04:53 GMT Last-Modified: Thu, 21 Mar 2024 11:48:11 GMT Accept-Ranges: bytes ETag: "65fc1e7b-2c6f" X-Cache: Hit from cloudfront Via: 1.1 7b314c2b827b3a655861e27775634208.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: 9REMk7NxrbFycizwSTKmi_RExd8-vN2jyLtuhsfingLekJMdWzFR7Q== Age: 40589 Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 dc 00 00 02 58 08 03 00 00 00 4f 6d d4 16 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 00 50 4c 54 45 00 00 00 ff ff ff 63 64 74 49 4b 5e 49 4b 5d 49 4b 5c 30 33 49 48 4b 5f 61 63 73 63 65 75 62 64 74 63 65 74 15 19 30 3d 40 53 48 4b 5d 49 4c 5d 48 4b 5c 4d 50 62 4e 51 62 4f 52 63 12 17 2e 14 19 30 22 26 3b 28 2c 40 2b 2f 42 30 34 49 2e 32 46 2f 33 47 2d 31 44 30 34 48 2e 32 45 30 34 47 31 35 48 32 36 49 35 39 4c 38 3c 50 36 3a 4d 39 3d 51 37 3b 4e 3a 3e 52 3a 3e 51 3b 3f 52 3c 40 53 49 4c 5c 62 65 75 61 64 74 62 65 74 63 66 74 62 65 73 13 18 2d 15 1a 30 1b 20 35 1c 21 36 1d 22 37 1e 23 38 1d 22 36 1f 24 39 20 25 3a 21 26 3b 22 27 3c 22 27 3b 24 29 3e 23 28 3c 25 2a 3f 24 29 3d 26 2b 40 25 2a 3e 27 2c 41 26 2b 3f 28 2d 42 29 2e 43 28 2d 41 29 2e 42 2a 2f 43 2b 30 44 2c 31 45 30 35 49 31 35 47 3c 40 52 3d 41 53 49 4d 5f 48 4c 5d 4b 4f 60 48 4c 5c 4d 51 62 61 65 75 11 17 [TRUNCATED] Data Ascii: PNGIHDRXOmtEXtSoftwareAdobe ImageReadyqe<PLTEcdtIK^IK]IK\03IHK_acsceubdtcet0=@SHK]IL]HK\MPbNQbORc.0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes-0 5!6"7#8"6$9 %:!&;"'<"';$)>#(<%?$)=&+@%>',A&+?(-B).C(-A).B/C+0D,1E05I15G<@R=ASIM_HL]KO`HL\MQbaeu.-/.0/.0/11234 5!6#8$9%: &;"':$)<&+>',?(-@).A/B+0C,1D/A-2E.3F/4G05H16I/4F05G38K6;N49K;@S;@R<ASGL^bfuaetbft.0!5"6#7$8%9 &:!';"(<!':#)=#)<$=&,@&,?+1E)/B06IGL]GL\HM]bfs-.01 4!5"6#7$8 '< ';*0B.4F06H06G-0!5 (< (;
Sep 30, 2024 00:21:22.714907885 CEST	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 15 de 74 00 00 00 b1 74 52 4e 53 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: ttRNS
Sep 30, 2024 00:21:22.714931011 CEST	1236	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 d7 f4 5c 64 00 00 28 48 49 44 41 54 78 da ec dd 0b 9b 55 d5 79 c0 f1 f5 f4 92 8b 35 86 16 94 5a 83 08 24 51 30 52 89 c3 98 a0 06 69 d0 9a 46 3b 99 da db 88 e3 94 a8 4d 4c 04 9d 66 06 f0 12 13 9b Data Ascii: \d(HIDATxUy5Z$Q0RiF;MLf 3jlRmSMM?b9309{.dbw#""sWDDh-{'x'"2CNDd;DD&h;wx'"RO{NDW* T>wx'"RL`
Sep 30, 2024 00:21:22.714946032 CEST	1236	IN	Data Raw: 21 68 0f 83 bb 1c de 4b c5 1d dd 09 db cd e0 1e 86 f6 50 b8 cf cf 9f 78 e9 56 70 e7 48 24 59 e8 9a bd e0 ae 9f f6 70 b8 77 12 c0 7b c1 b8 a3 3b 05 aa e0 45 b4 d9 10 ed 41 71 17 c0 7b c9 b8 a3 3b 61 bb 72 dc 43 d2 1e 18 f7 ec bc 17 8d 3b ba 13 b6 Data Ascii: !hKPxVpH$Ypw{;EAq{;arC;k=,q{sYT-{V}?{&_/q3^:\V6}v/=x/w{2pC{43N]/28Yxwgt2T<#wpGwv5=2ywt'X5qK{t;
Sep 30, 2024 00:21:22.714956999 CEST	1236	IN	Data Raw: bd b2 2e ab fe 91 21 da 1b e3 2e 9a f7 4b db 7f 3a a9 3f 3c 21 9d 19 58 7c 3f dd 7e c9 0c ed 1e b8 8b e5 fd d2 f6 53 3b 26 0c fc 7d 4d 5e 07 13 a4 af 4f 5b 58 7b 13 3b 4e 9d 14 c9 fb ea ab d7 71 71 17 c9 7b 97 f6 1d 36 70 9f fc 5d a4 20 3e db f3 Data Ascii: .!.K:?<!X\|?~S;&}M^O[X{;Nqq{6p] >I^{.e>V14=i]NXNwI{N0iw)"x;>y l[$-5/yoI{kv[;a{^w=[}
Sep 30, 2024 00:21:22.714967012 CEST	1236	IN	Data Raw: 36 ee 9b b0 85 72 b7 09 dc d7 75 f3 71 5f df e2 f3 ee de 12 4a bb 17 ef a6 71 ff 77 64 a1 fc 3d 0a ee 21 68 4f c0 fb 7d ee e2 3f be 25 94 76 0f de 2d e3 ce 9e 0c a1 bb 24 dc d7 4d 07 13 c7 fb 7d df 5b 72 17 2f 46 e3 bd 35 ed 8d 79 9f c0 76 22 74 Data Ascii: 6ruq_Jqwd=!hO}?%v-$M}[r/F5yv"tO{#~wxG(?Br@G{/~sMVqZ*B=+~7}t]=0U##mTBw)G=}ikq[Bi{4#o
Sep 30, 2024 00:21:22.715024948 CEST	1236	IN	Data Raw: 1c de eb d1 ae 0d 77 74 27 6c d7 87 7b 60 de 83 d2 be 8e 77 17 87 f6 a0 bc d7 a5 5d 1d ee f0 4e d0 ae 10 f7 80 bc 07 a7 7d 0d ef 2e 16 ed 3d de 7f 91 94 76 85 b8 f3 cf aa 84 ed 0a 71 0f c4 7b 14 da af f2 ee e2 d1 de 7b 4b fb 17 09 69 57 88 3b df Data Ascii: wt'l{`w]N}.=vq{{KiW;d->;qbfv==yv;aN[Np9Jqg=yOA{"=x])\|jqiM{C8;[N\|sw_zqo{:^w
Sep 30, 2024 00:21:22.715039015 CEST	1236	IN	Data Raw: 1d 77 f6 db a9 e8 b6 29 c2 fd f9 fb f3 f3 36 de 82 f6 fa b8 57 f1 7e 76 bf 84 d6 f2 3e 87 ed 44 e8 de 1e 77 09 b4 57 f2 7e 76 ac 36 d9 f5 71 df c8 bb 0c da d7 f3 3e 87 ed 44 e8 de 16 77 29 b4 f7 f1 de 80 f6 66 b8 af e5 5d 0e ed 6b 79 17 8d 3b 0b Data Ascii: w)6W~v>DwW~v6q>Dw)f]ky;H8_]?$wFzQ6h:S!q.?$wdVH0ivZ:3_(DSqjEcya\*LPO;Y}qq7Kk{
Sep 30, 2024 00:21:22.715058088 CEST	1236	IN	Data Raw: 77 3f 2e 0a f7 3e da 03 f1 ce f8 01 22 74 cf 88 7b 1f ed 19 79 77 52 68 0f c2 3b 83 c3 88 d0 3d 1b ee 95 b4 67 e3 dd c9 a1 3d 00 ef 8c fc 25 42 f7 4c b8 0f a4 3d 13 ef 4e 12 ed ad 79 5f c0 76 22 35 1d b0 84 fb 50 da b3 f0 ee 64 d1 de 92 77 69 b8 Data Ascii: w?.>"t{ywRh;=g=%BL=Ny_v"5PdwiK4}$xwho)76pE{r<[.wF=1N"/`;IyO}y_v"tO{c YDxwri}='I1N)poE{lD{S
Sep 30, 2024 00:21:22.715069056 CEST	1236	IN	Data Raw: 9e 0e 77 b6 66 88 8c 6d c9 b4 c7 5d 1a ef ce 10 ed 29 71 e7 3a 13 91 b1 ef f6 f6 b8 cb 1a 19 e9 0c d1 9e 12 77 74 27 b2 66 fb 74 08 84 e4 f0 ee 0c d1 9e 14 77 74 27 32 66 fb 74 18 86 a4 f0 2e 02 f7 99 c7 a7 a6 d4 e1 ce be 3b 51 fc 2e 4f ab c3 5d Data Ascii: wfm])q:wt'ftwt'2ft.;Q.O]q/qGw]GQ$7(wt'2d{@%wt'c{PD.9CNp3D{b9Iq3D;]FF:C'1VQS{&hO;=Yxwil'Bwg
Sep 30, 2024 00:21:22.720148087 CEST	469	IN	Data Raw: 44 94 96 77 07 ed 44 44 89 3b 6d 00 f7 d3 d0 4e 44 94 9c f7 c8 b8 33 1d 8c 88 28 07 ef 51 71 e7 c6 12 11 51 1e de 1d b4 13 11 65 6a 9f 42 dc a1 9d 88 28 1f ef 0e da 89 88 32 a6 09 77 68 27 22 ca cb 7b 04 dc 19 21 43 44 94 9b f7 d0 b8 73 63 89 88 Data Ascii: DwDD;mND3(QqQejB(2wh'"{!CDscH$E,ND"qv";=!"{9ND$wDDxwND$}Yqv"Ho6(bypgX=qH.^scH6dpv"_#DDY:wFA;=7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49730	185.53.177.52	80	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 30, 2024 00:21:26.021228075 CEST	396	OUT	GET /favicon.ico HTTP/1.1 Host: finance.cocoricopatisserie.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Sep 30, 2024 00:21:26.702239990 CEST	230	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 22:21:26 GMT Content-Type: image/x-icon Content-Length: 0 Connection: keep-alive Last-Modified: Thu, 26 Sep 2024 07:56:43 GMT ETag: "66f513bb-0" Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49763	185.53.177.52	80	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 30, 2024 00:21:47.230541945 CEST	1127	OUT	GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Eagles+Sphere+Sphere&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpjx58G6o1K7o-viAFkNJUZINzDQYxSL87u9idvmGA6WnLKvG43X1VTpA_tX-JuOD2qRhHKZIbvkkTZQebs3sDLnAIMFHH3E399kjaAqb00X1Isp9zrXzZpzsXWiuakI_FhDM&pcsa=false&nb=0 HTTP/1.1 Host: finance.cocoricopatisserie.co.uk Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Sep 30, 2024 00:21:47.891215086 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 22:21:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Buckets: bucket011,bucket088,bucket089 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_SZLR1IvmOjdW+Q8Q39A1Iauq5iUkrg0tpmLmkzJo4jObc+5qBNzulyrCMiXYwwSr6jwFe4Tpa1EwHiMUvxz0Ng== X-Template: tpl_CleanPeppermintBlack_oneclick X-Language: english Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Pcrew-Ip-Organization: CenturyLink X-Pcrew-Blocked-Reason: X-Domain: cocoricopatisserie.co.uk X-Subdomain: finance Content-Encoding: gzip Data Raw: 63 32 32 0d 0a 1f 8b 08 00 00 00 00 00 04 03 e5 5c 69 77 da 48 97 fe 6c ff 0a 85 9c 36 78 c2 22 36 2f 38 24 43 82 9d d8 1d 20 4e 70 bc e4 64 7c 84 54 80 40 48 b4 24 0c b8 5f ff f7 79 6e 55 49 48 20 d2 49 9f ce f4 87 b1 63 1b d5 72 eb d6 ad bb df 52 5e 3e 6b 76 de 76 6f 3f 9e 2a 43 7f 62 bd da 7d 49 7f 14 43 f3 b5 9c 66 f4 2c 47 1f 8f d9 b2 9e 6a 9d cd e7 cd cb db 8b df 9d bb f3 e1 83 de 6e 5c 9e be 79 73 d9 68 7e 9e 37 e6 9f 1b 17 6f 1a 1f fe 98 35 cf 4e bb 37 9f 6c f5 bd ab 56 fb 57 1f 0f 4f 2f ba 87 87 8b 5b fb e3 e4 53 6f da 5a 56 1e c6 47 bf df 9a ef ed 71 7b ca 0c 7b d4 69 b4 2f 74 ed a6 79 a3 ff 7e 79 d1 56 ed 9b df ef 2e 3e 1c 76 75 f3 a2 79 d4 70 de df fc 5e ac 1e bd 6d cc 4f 1b 8d cb 7a fd fe f3 dd 87 4f c5 f3 87 49 67 64 5c bf b8 3c ba Data Ascii: c22\iwHl6x"6/8$C Npd\|T@H$_ynUIH IcrR^>kvvo?*Cb}ICf,Gjn\ysh~7o5N7lVWO/[SoZVGq{{i/ty~yV.>vuyp^mOzOIgd\<
Sep 30, 2024 00:21:47.891233921 CEST	1236	IN	Data Raw: 2c 1f 37 8a e7 da ec 8f aa 79 35 76 07 aa 3f 9d 7c 98 8c 1f 2f 9c ca a8 d3 d3 5f 54 ff 78 d3 7e 9c 59 4b f7 6d cb bc b9 9d cf 3f bb 07 a3 f9 19 ab 74 a7 5a f1 74 fe de 6c 5d 3d 2c 1e d5 f6 a0 5e 4f 29 8b 89 65 7b f5 d4 d0 f7 a7 b5 42 61 3e 9f e7 Data Ascii: ,7y5v?\|/_Tx~YKm?tZtl]=,^O)e{Ba>R,SNfUr\|9\|:l?]NYJS=_ H'>\Q@6aS#{0uYMk7tM{\MbtGw\SwozsMl
Sep 30, 2024 00:21:47.891246080 CEST	1236	IN	Data Raw: ba 81 60 e4 5b a6 ee 3a 9e d3 f7 f3 21 8f 28 9e af b9 fe 5b 0a 6a 3c df ad a7 25 e9 d2 59 85 d9 46 42 f3 3b c9 5c 14 10 d6 8b 0a ce 2b 62 49 e3 92 bb 72 a9 37 f8 3a 12 5a 6c 9d ee 4d 35 9b dc 91 40 7c 4c 9b 4b 7e 20 45 52 c1 a9 4a 59 6a b5 9e cb Data Ascii: `[:!([j<%YFB;\+bIr7:ZlM5@\|LK~ ERJYjqto)m-)m(X}*5rOE .WE(@^`ovvB@>jn-vjL@+;@~>\R}2$M;\5\|wn7x{ZgwCg]sN-A`Z
Sep 30, 2024 00:21:47.891261101 CEST	1236	IN	Data Raw: 51 8e 2d e8 95 5c 1b 29 e9 04 03 02 1d a1 1f d1 37 4d 89 ba 01 81 ef b4 c3 b3 75 54 6b 40 04 48 9e 79 a1 4c 15 9c 58 8e 2e f4 46 a9 0b 80 20 d0 89 cc 20 e2 e3 c0 c2 85 11 62 90 6e 13 01 e9 46 5e 02 f1 1b 15 60 00 35 70 2e 77 f1 15 e5 48 91 f8 14 Data Ascii: Q-\)7MuTk@HyLX.F bnF^`5p.wH<9B#yzd)HMx6?N_{.\|)Ae}Xl+,h R0)\%)\$`J{}SLx9,~PN.h"b^%Z]=(
Sep 30, 2024 00:21:47.891273975 CEST	1236	IN	Data Raw: 2f 5a cd e2 11 0e b2 74 d7 3d 2f 75 ba 83 45 6b 84 c3 eb 9e 0d 5b 8f b7 8b db c7 71 b5 7d dd 2a b6 9b 03 ec a3 55 6c 75 3f 4d ee 9a 0d 8c bd aa b6 69 9d 77 9f e6 1f 6e 3e 59 b7 d7 c5 69 cf fe 64 e9 93 2a d1 a1 7a f3 d8 9e 6b 21 6e f3 f5 83 12 4e Data Ascii: /Zt=/uEk[q}Ulu?Miwn>Yidzk!nNQV)ardzK3\|O~v>z=D+7T,fiGqrH2 x4x{iQB?N\|~zlw5:W],3:}][Wb
Sep 30, 2024 00:21:47.891284943 CEST	1236	IN	Data Raw: da c9 6a a7 f0 01 ab a5 f6 79 03 42 8f a7 13 aa 9d e2 c2 b6 af e0 f5 54 72 e9 f9 64 ea fe 8a 86 6f 80 4e 0d fc f3 89 cb fc 99 cb 47 14 4f 30 31 48 53 a3 1a 74 d3 fa 40 2f 6f 66 b0 2a 47 6a 62 bd c7 23 26 db 33 cb 3a f1 5d dc 76 c2 db a1 41 1b 8c Data Ascii: jyBTrdoNGO01HSt@/of*Gjb#&3:]vA&eCgGRJFvgR-Jy~LEmHN)Ed8=Ym?J.=}N}\fZMi7W"!.1cPkT
Sep 30, 2024 00:21:47.891303062 CEST	351	IN	Data Raw: a7 71 bc 64 37 0b 16 2e e8 72 7b 09 03 ea d7 0f 0e fa c7 46 a9 df 83 9f 8d 83 af 53 47 58 0e 41 e9 95 98 01 4c 01 79 96 2b f3 03 21 6f 1f cf b8 ab 60 79 19 92 a1 f8 11 67 30 65 e5 ac e2 22 17 eb 1f f4 f4 43 fd f8 f8 e0 b8 6a 40 63 a8 06 c3 cd 0c Data Ascii: qd7.r{FSGXALy+!o`yg0e"Cj@cM=v`LU+loLus#U;<\|Pt+ZB:"UxkCt$7o'R8l.5y."K!soS~ A(WtX[=QL&ZRK
Sep 30, 2024 00:21:48.023139000 CEST	1211	OUT	GET /track.php?domain=cocoricopatisserie.co.uk&toggle=browserjs&uid=MTcyNzY0ODUwNy43NjU2OjliOGVlNDhhZjhkY2FiNjdiNjM0OWIyOGU5OWFlOTZhOTAyNDQ3OTQxMzExNTNmMDhmODJjM2ZiNTFjNmIzYjc6NjZmOWQyZmJiYWU4Yw%3D%3D HTTP/1.1 Host: finance.cocoricopatisserie.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Eagles+Sphere+Sphere&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpjx58G6o1K7o-viAFkNJUZINzDQYxSL87u9idvmGA6WnLKvG43X1VTpA_tX-JuOD2qRhHKZIbvkkTZQebs3sDLnAIMFHH3E399kjaAqb00X1Isp9zrXzZpzsXWiuakI_FhDM&pcsa=false&nb=0 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Sep 30, 2024 00:21:48.225678921 CEST	608	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 22:21:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 30, 2024 00:21:48.541955948 CEST	1080	OUT	GET /ls.php?t=66f9d2fb&token=ef6bc7c99695dcaf0de157a08fb06e6d0e004596 HTTP/1.1 Host: finance.cocoricopatisserie.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Eagles+Sphere+Sphere&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpjx58G6o1K7o-viAFkNJUZINzDQYxSL87u9idvmGA6WnLKvG43X1VTpA_tX-JuOD2qRhHKZIbvkkTZQebs3sDLnAIMFHH3E399kjaAqb00X1Isp9zrXzZpzsXWiuakI_FhDM&pcsa=false&nb=0 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Sep 30, 2024 00:21:48.740633965 CEST	906	IN	HTTP/1.1 201 Created Server: nginx Date: Sun, 29 Sep 2024 22:21:48 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Log-Success: 66f9d2fc3a75eb2ceb0b6a54 Charset: utf-8 Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Max-Age: 86400 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_UdY42HJY8ww2SnReWSiPwoya9f0VKl/j8iHJrpFvySJHb9QJM8rLFwM3YvmEd1WDvzAhGQ7BRsqsakX8BARtEA== Data Raw: 31 30 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"success":true}0
Sep 30, 2024 00:21:50.799592018 CEST	1230	OUT	GET /track.php?domain=cocoricopatisserie.co.uk&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzY0ODUwNy43NjU2OjliOGVlNDhhZjhkY2FiNjdiNjM0OWIyOGU5OWFlOTZhOTAyNDQ3OTQxMzExNTNmMDhmODJjM2ZiNTFjNmIzYjc6NjZmOWQyZmJiYWU4Yw%3D%3D HTTP/1.1 Host: finance.cocoricopatisserie.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Eagles+Sphere+Sphere&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpjx58G6o1K7o-viAFkNJUZINzDQYxSL87u9idvmGA6WnLKvG43X1VTpA_tX-JuOD2qRhHKZIbvkkTZQebs3sDLnAIMFHH3E399kjaAqb00X1Isp9zrXzZpzsXWiuakI_FhDM&pcsa=false&nb=0 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Sep 30, 2024 00:21:51.000319958 CEST	610	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 22:21:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 30, 2024 00:21:54.970571041 CEST	1126	OUT	GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Sesame+Semaglutide&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmcBlLqpj90SqxLU1y28Lnofj6W4YFOJxZRWVqEOBrqx9r8dK_IzyucJYZYAj0HbBY0RxMhD-iUiKatTaQpsIR459EQ14jLNoKoGR9MimrFhhNC0HT5tj7o4Xchb8bXTCSs8XHI4WI_a&pcsa=false&nb=0 HTTP/1.1 Host: finance.cocoricopatisserie.co.uk Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Sep 30, 2024 00:21:55.194662094 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 22:21:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Buckets: bucket011,bucket088,bucket089 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_krkfLEuZBx2qsYr0ajA7iAnXpVJ+kDfk12+p4FUhY95vdnSN2SjvpmgxoN3l/d44sk/Tz1AkKBz9b3FX0NW+Aw== X-Template: tpl_CleanPeppermintBlack_oneclick X-Language: english Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Pcrew-Ip-Organization: CenturyLink X-Pcrew-Blocked-Reason: X-Domain: cocoricopatisserie.co.uk X-Subdomain: finance Content-Encoding: gzip Data Raw: 63 32 32 0d 0a 1f 8b 08 00 00 00 00 00 04 03 ed 5c eb 5b da ca d6 ff ac 7f 45 4a 9f 2d f8 96 3b 78 43 69 5f 2c b6 d5 16 ac 95 d6 4b 9f be 3e 21 19 20 12 12 76 12 04 dc c7 ff fd fd ad 99 49 98 40 e8 6e f7 d3 9e f3 e5 68 d5 30 97 35 6b d6 ac fb 9a f4 e8 59 f3 fc 75 e7 e6 e3 89 36 08 46 f6 cb cd 23 fa a3 99 7a a0 e7 74 b3 6b bb c6 70 c8 e6 f5 54 eb cd 74 da bc b8 39 7b ef de 9e 0e 1e 8c 76 e3 e2 e4 f8 f8 a2 d1 bc 9c 36 a6 97 8d b3 e3 c6 87 3f 27 cd 37 27 9d eb 4f 4e f1 9d 57 dc e9 7d fe b8 77 72 d6 d9 db 9b dd 38 1f 47 9f ba e3 d6 bc fa 30 dc 7f 7f 63 bd 73 86 ed 31 33 9d fb f3 46 fb cc d0 af 9b d7 c6 fb 8b b3 76 d1 b9 7e 7f 7b f6 61 af 63 58 67 cd fd 86 fb ee fa 7d 69 67 ff 75 63 7a d2 68 5c d4 eb 77 43 6f d8 fb 70 32 b9 3d 9e 95 ff f4 6f bc a2 7e Data Ascii: c22\[EJ-;xCi_,K>! vI@nh05kYu6F#ztkpTt9{v6?'7'ONW}wr8G0cs13Fv~{acXg}iguczh\wCop2=o~
Sep 30, 2024 00:21:55.194680929 CEST	224	IN	Data Raw: df d8 b3 1a ce f5 f8 cb d9 8b 61 b3 37 2c 95 5f 8c ab 6f 3e 0f 6e 0e 76 1e 4c e7 b2 5d be bc 7f 18 8f fa 33 b7 5d b1 0b 66 b5 ea 0f 0b 9d c7 52 63 f8 fe f8 f1 a0 5b 79 73 5d 6c 5f bd 68 4c eb f5 94 36 1b d9 8e 5f 4f 0d 82 60 5c 2b 14 a6 d3 69 7e Data Ascii: a7,_o>nvL]3]fRc[ys]l_hL6_O`\+i~Z^P:88()~=QM_G# \0?'C=u\|R!>StYP~r,6^LZf02Xjcn\|CYg9\zVPwv`6{i
Sep 30, 2024 00:21:55.194694042 CEST	1236	IN	Data Raw: 86 eb 59 86 3b d6 03 cb f7 99 67 b1 bc e1 e6 27 c3 a3 82 e8 e7 1b a2 4d d1 d7 91 1f cc 6d a6 8d 98 69 e9 f5 94 6f 78 8c 6f fd b9 8f b5 ee 6c 2c 93 dd 5c 3c df 75 5d db 8c 37 30 db 9d 6a 7f 71 90 86 6b bb 5e 4d f3 fa dd 4c 31 8b ef ed 43 de 4c 14 Data Ascii: Y;g'Mmioxol,\<u]70jqk^ML1CLwghb5T4-soO0]Lu>I+j;[tqZb4x{}k5}bcrL6#O4=a[@UPx PlvG&_R6,QX@jzm>0/Y,WNY=R
Sep 30, 2024 00:21:55.194725990 CEST	1236	IN	Data Raw: 77 9f 73 c6 c0 42 a0 46 e4 96 6e 09 32 00 e3 1a 05 c1 d8 cc 13 c8 11 9d 73 c4 19 a1 8f 8c ee a7 cd a3 02 8f f5 5f 12 31 d7 84 fd 79 1d 09 83 e0 8e 38 bf 48 2b a9 8a f4 67 22 31 0e 06 01 19 c1 c9 f7 ad 1e a2 30 c7 cd 89 40 4c 0b 8d 45 c8 35 25 ce Data Ascii: wsBFn2s_1y8H+g"10@LE5%!h%!s#r7( YEH~'~~=aCTB4BD>m}BHJEZ)vXq7SNF;,".9?.>\g1v1#bPJEWFB*-R
Sep 30, 2024 00:21:55.194740057 CEST	1236	IN	Data Raw: 68 b1 77 0e 77 f1 71 69 b0 ba a2 70 06 96 96 2b 17 cb 55 ed b5 3b 9e 73 9b 92 d7 b4 86 6d 6b 9f 28 4d ec 6b 9f 18 2a fa 0f cc cc 43 d1 79 85 97 fc d7 66 74 f4 f7 fa 83 2e 54 68 ed c1 b5 cc 0c ee 0c a4 90 8d 7a 6d 5b c6 10 3a 0e 27 ef 4e f3 ee 98 Data Ascii: hwwqip+U;smk(Mk*Cyft.Thzm[:'N9=A7y\MaZZ AR)f>Gtu&O>g>z][v?.m\|)da0#_DqW-d42A:.XiNIKgV(@lMpx~
Sep 30, 2024 00:21:55.370996952 CEST	1210	OUT	GET /track.php?domain=cocoricopatisserie.co.uk&toggle=browserjs&uid=MTcyNzY0ODUxNS4wNzYzOjIxNmUwMTkzNDk2OTc5ZTM3MGQ1YzM0YjczYTg0NTYxODdjZTI3NWZmMDY3M2QxZDQ3MWNmYzI5OGNiNTEyMDY6NjZmOWQzMDMxMjlkYQ%3D%3D HTTP/1.1 Host: finance.cocoricopatisserie.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Sesame+Semaglutide&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmcBlLqpj90SqxLU1y28Lnofj6W4YFOJxZRWVqEOBrqx9r8dK_IzyucJYZYAj0HbBY0RxMhD-iUiKatTaQpsIR459EQ14jLNoKoGR9MimrFhhNC0HT5tj7o4Xchb8bXTCSs8XHI4WI_a&pcsa=false&nb=0 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Sep 30, 2024 00:21:55.570327044 CEST	608	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 22:21:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 30, 2024 00:21:55.587996006 CEST	1079	OUT	GET /ls.php?t=66f9d303&token=642f1764c2344e1f5c29ba4aa4a6abc6eda7da17 HTTP/1.1 Host: finance.cocoricopatisserie.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Sesame+Semaglutide&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmcBlLqpj90SqxLU1y28Lnofj6W4YFOJxZRWVqEOBrqx9r8dK_IzyucJYZYAj0HbBY0RxMhD-iUiKatTaQpsIR459EQ14jLNoKoGR9MimrFhhNC0HT5tj7o4Xchb8bXTCSs8XHI4WI_a&pcsa=false&nb=0 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Sep 30, 2024 00:21:55.788393021 CEST	906	IN	HTTP/1.1 201 Created Server: nginx Date: Sun, 29 Sep 2024 22:21:55 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Log-Success: 66f9d303ab68e59cf200954f Charset: utf-8 Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Max-Age: 86400 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_aFznALhxVPIUiRAWwT9DWmF7wq7ERQWWxF53WIz+cRWKIko4U4iPd/zQVwcVn1wx7/o5hvnFiqhuyILjqNTClg== Data Raw: 31 30 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"success":true}0
Sep 30, 2024 00:21:56.010766029 CEST	906	IN	HTTP/1.1 201 Created Server: nginx Date: Sun, 29 Sep 2024 22:21:55 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Log-Success: 66f9d303ab68e59cf200954f Charset: utf-8 Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Max-Age: 86400 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_aFznALhxVPIUiRAWwT9DWmF7wq7ERQWWxF53WIz+cRWKIko4U4iPd/zQVwcVn1wx7/o5hvnFiqhuyILjqNTClg== Data Raw: 31 30 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"success":true}0
Sep 30, 2024 00:21:57.329545975 CEST	1229	OUT	GET /track.php?domain=cocoricopatisserie.co.uk&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzY0ODUxNS4wNzYzOjIxNmUwMTkzNDk2OTc5ZTM3MGQ1YzM0YjczYTg0NTYxODdjZTI3NWZmMDY3M2QxZDQ3MWNmYzI5OGNiNTEyMDY6NjZmOWQzMDMxMjlkYQ%3D%3D HTTP/1.1 Host: finance.cocoricopatisserie.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Sesame+Semaglutide&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmcBlLqpj90SqxLU1y28Lnofj6W4YFOJxZRWVqEOBrqx9r8dK_IzyucJYZYAj0HbBY0RxMhD-iUiKatTaQpsIR459EQ14jLNoKoGR9MimrFhhNC0HT5tj7o4Xchb8bXTCSs8XHI4WI_a&pcsa=false&nb=0 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Sep 30, 2024 00:21:57.528873920 CEST	610	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 22:21:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 30, 2024 00:22:00.085377932 CEST	1124	OUT	GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Semaglutide+Henry&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpj4R7Nz9MtgVxMM3LZXthcmrpMZO2hM9CJdYTOBTZlOqOWIKeyAnZ3l9wmC7ZfZQ9oOSTTbuMheWysdFe-MYszSn-Z5cfGUaCQmtDzAocoW2PrGSSnlOXrv0KCozzVftbfzk&pcsa=false&nb=0 HTTP/1.1 Host: finance.cocoricopatisserie.co.uk Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Sep 30, 2024 00:22:00.305501938 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 22:22:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Buckets: bucket011,bucket088,bucket089 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_GiNOL2z/+mL6omGXPDn2wQzXtr3GX/zPxo4AwAHzAgxiATOJM4RGPIpvR+0BUDr2ujfur8mGHZHxGG/wCE75mA== X-Template: tpl_CleanPeppermintBlack_oneclick X-Language: english Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Pcrew-Ip-Organization: CenturyLink X-Pcrew-Blocked-Reason: X-Domain: cocoricopatisserie.co.uk X-Subdomain: finance Content-Encoding: gzip Data Raw: 37 37 32 0d 0a 1f 8b 08 00 00 00 00 00 04 03 e5 5c 69 77 da 4a 93 fe 6c ff 0a 85 9c d7 e0 09 fb e2 35 24 43 82 e3 e5 06 6c 27 38 5e 72 32 3e 42 6a 40 46 48 bc 92 30 e0 3b fe ef f3 54 77 4b b4 40 e4 26 f7 24 73 cf 9c b1 63 1b f5 52 5d 5d 5d 7b b5 f2 fa 45 f3 fc 7d e7 f6 e2 48 1b 04 23 fb cd e6 6b fa a3 99 7a a0 e7 74 b3 6b bb c6 70 c8 e6 f5 54 eb c3 74 da bc bc 3d fb c3 bd 3b 1d 3c 1a ed c6 e5 d1 bb 77 97 8d e6 e7 69 63 fa b9 71 f6 ae f1 f1 df 93 e6 87 a3 ce cd 27 a7 78 e2 15 6b bd ab 8b dd a3 b3 ce ee ee ec d6 b9 18 7d ea 8e 5b f3 ea e3 70 ef 8f 5b eb c4 19 b6 c7 cc 74 1e ce 1b ed 33 43 bf 69 de 18 7f 5c 9e b5 8b ce cd 1f 77 67 1f 77 3b 86 75 d6 dc 6b b8 27 37 7f 94 6a 7b ef 1b d3 a3 46 e3 b2 5e bf 3f b6 da e7 1f cb 4f 85 57 a3 8f 3b ee e8 f8 e6 Data Ascii: 772\iwJl5$Cl'8^r2>Bj@FH0;TwK@&$scR]]]{E}H#kztkpTt=;<wicq'xk}[p[t3Ci\wgw;uk'7j{F^?OW;
Sep 30, 2024 00:22:00.397062063 CEST	1200	OUT	GET /track.php?domain=cocoricopatisserie.co.uk&toggle=browserjs&uid=MTcyNzY0ODUyMC4xODk6NGRlMzI1MTA1OTE5NmQ5ZjEwYWQwMWNiYjEzM2RlNzdkYTgxZmU2MzkxMjY0OTVhOWMxYTdhMDQxNWRlMDM1Yzo2NmY5ZDMwODJlMjFk HTTP/1.1 Host: finance.cocoricopatisserie.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Semaglutide+Henry&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpj4R7Nz9MtgVxMM3LZXthcmrpMZO2hM9CJdYTOBTZlOqOWIKeyAnZ3l9wmC7ZfZQ9oOSTTbuMheWysdFe-MYszSn-Z5cfGUaCQmtDzAocoW2PrGSSnlOXrv0KCozzVftbfzk&pcsa=false&nb=0 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Sep 30, 2024 00:22:00.606074095 CEST	608	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 22:22:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 30, 2024 00:22:00.638997078 CEST	1077	OUT	GET /ls.php?t=66f9d308&token=26921ed73125027db7ed665b75d22cac5c06430b HTTP/1.1 Host: finance.cocoricopatisserie.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Semaglutide+Henry&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpj4R7Nz9MtgVxMM3LZXthcmrpMZO2hM9CJdYTOBTZlOqOWIKeyAnZ3l9wmC7ZfZQ9oOSTTbuMheWysdFe-MYszSn-Z5cfGUaCQmtDzAocoW2PrGSSnlOXrv0KCozzVftbfzk&pcsa=false&nb=0 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Sep 30, 2024 00:22:00.838850975 CEST	906	IN	HTTP/1.1 201 Created Server: nginx Date: Sun, 29 Sep 2024 22:22:00 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Log-Success: 66f9d308ae68c0a20f05840f Charset: utf-8 Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Max-Age: 86400 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_V5T8SAso5ZSOl2UiPygpVGZK13Bx6X40kb+BWkyCSUnQYDHJPajTT7TbgLlvGIAwQ3uXksgaooOsr6kmxtgmww== Data Raw: 31 30 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"success":true}0
Sep 30, 2024 00:22:01.279557943 CEST	1219	OUT	GET /track.php?domain=cocoricopatisserie.co.uk&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzY0ODUyMC4xODk6NGRlMzI1MTA1OTE5NmQ5ZjEwYWQwMWNiYjEzM2RlNzdkYTgxZmU2MzkxMjY0OTVhOWMxYTdhMDQxNWRlMDM1Yzo2NmY5ZDMwODJlMjFk HTTP/1.1 Host: finance.cocoricopatisserie.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Semaglutide+Henry&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpj4R7Nz9MtgVxMM3LZXthcmrpMZO2hM9CJdYTOBTZlOqOWIKeyAnZ3l9wmC7ZfZQ9oOSTTbuMheWysdFe-MYszSn-Z5cfGUaCQmtDzAocoW2PrGSSnlOXrv0KCozzVftbfzk&pcsa=false&nb=0 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Sep 30, 2024 00:22:01.477689981 CEST	610	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 22:22:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 30, 2024 00:22:11.199268103 CEST	1132	OUT	GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Eagles+Sphere+Sphere&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpjx58G6o1K7o-viAFkNJUZINzDQYxSL87u9idvmGA6WnLKvG43X1VTpA_tX-JuOD2qRhHKZIbvkkTZQebs3sDLnAIMFHH3E399kjaAqb00X1Isp9zrXzZpzsXWiuakI_FhDM&pcsa=false&nb=0&nm=3 HTTP/1.1 Host: finance.cocoricopatisserie.co.uk Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Sep 30, 2024 00:22:11.416779995 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 22:22:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Buckets: bucket011,bucket088,bucket089 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_bo8Ks5rpCnXSFE+xBNufDBR7q6yazwo6yAkS6PH7xZaqn2gRAzyx9eO+PsyirgkSL+xzGWWOLKKFuY+t+6QT9g== X-Template: tpl_CleanPeppermintBlack_oneclick X-Language: english Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Pcrew-Ip-Organization: CenturyLink X-Pcrew-Blocked-Reason: X-Domain: cocoricopatisserie.co.uk X-Subdomain: finance Content-Encoding: gzip Data Raw: 63 32 32 0d 0a 1f 8b 08 00 00 00 00 00 04 03 e5 5c 7b 73 da 48 90 ff db fe 14 0a a9 35 f8 c2 fb 61 63 1c 92 b3 83 e3 47 02 b6 63 9c 18 52 39 97 90 06 90 11 12 2b 09 03 de f3 77 bf 5f cf 8c 84 04 22 9b 6c 25 b7 75 75 ce da a0 79 f4 f4 f4 f4 bb 47 fb fa 45 e3 f2 5d bb 73 75 a2 0c bd b1 f9 66 fb 35 7d 28 ba ea a9 19 55 ef 99 b6 36 1a b1 45 3d d1 7c 3f 9b 35 ae 3b 17 1f ec ee f9 f0 51 6b 1d 5d 9f 1c 1f 5f 1f 35 6e 66 47 b3 9b a3 8b e3 a3 8f 7f 4e 1b ef 4f da 77 9f ac fc 99 93 af f4 6f af f6 4f 2e da fb fb f3 8e 75 35 fe d4 9b 34 17 e5 c7 51 f5 43 c7 38 b3 46 ad 09 d3 ad 87 cb a3 d6 85 a6 de 35 ee b4 0f d7 17 ad bc 75 f7 a1 7b f1 71 bf ad 19 17 8d ea 91 7d 76 f7 a1 50 a9 be 3b 9a 9d 1c 1d 5d d7 eb f7 3d bb fa c1 ad 38 93 77 d6 dd cd fb 93 57 f3 e3 d6 Data Ascii: c22\{sH5acGcR9+w_"l%uuyGE]suf5}(U6E=\|?5;Qk]_5nfGNOwoO.u54QC8F5u{q}vP;]=8wW
Sep 30, 2024 00:22:11.464317083 CEST	1216	OUT	GET /track.php?domain=cocoricopatisserie.co.uk&toggle=browserjs&uid=MTcyNzY0ODUzMS4zMDA4OmJkNzczZDU2Y2Y4MmQzOGJiMWI4Y2NhMjNkNTg3ODExZDVmOTMwN2Y5ZTE4YzA1NDQyOTMyZGQ1N2Q3OTBiOGQ6NjZmOWQzMTM0OTZlZQ%3D%3D HTTP/1.1 Host: finance.cocoricopatisserie.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Eagles+Sphere+Sphere&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpjx58G6o1K7o-viAFkNJUZINzDQYxSL87u9idvmGA6WnLKvG43X1VTpA_tX-JuOD2qRhHKZIbvkkTZQebs3sDLnAIMFHH3E399kjaAqb00X1Isp9zrXzZpzsXWiuakI_FhDM&pcsa=false&nb=0&nm=3 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Sep 30, 2024 00:22:11.666806936 CEST	608	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 22:22:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 30, 2024 00:22:11.687926054 CEST	1085	OUT	GET /ls.php?t=66f9d313&token=09ee88ccb356a23e0f55db14342af30f85bdd5a2 HTTP/1.1 Host: finance.cocoricopatisserie.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Eagles+Sphere+Sphere&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpjx58G6o1K7o-viAFkNJUZINzDQYxSL87u9idvmGA6WnLKvG43X1VTpA_tX-JuOD2qRhHKZIbvkkTZQebs3sDLnAIMFHH3E399kjaAqb00X1Isp9zrXzZpzsXWiuakI_FhDM&pcsa=false&nb=0&nm=3 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Sep 30, 2024 00:22:11.886080980 CEST	906	IN	HTTP/1.1 201 Created Server: nginx Date: Sun, 29 Sep 2024 22:22:11 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Log-Success: 66f9d313ae664af863028e40 Charset: utf-8 Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Max-Age: 86400 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_ZzzpzBAbzUhWBmqHcFKzh0aqhSs+QrizFeiYBZ6W3uOUh2UJVqDfB79uyaxz4NDC1vDxr5cYiFSZ4lNOrqciwA== Data Raw: 31 30 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"success":true}0
Sep 30, 2024 00:22:13.016247034 CEST	1235	OUT	GET /track.php?domain=cocoricopatisserie.co.uk&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzY0ODUzMS4zMDA4OmJkNzczZDU2Y2Y4MmQzOGJiMWI4Y2NhMjNkNTg3ODExZDVmOTMwN2Y5ZTE4YzA1NDQyOTMyZGQ1N2Q3OTBiOGQ6NjZmOWQzMTM0OTZlZQ%3D%3D HTTP/1.1 Host: finance.cocoricopatisserie.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Eagles+Sphere+Sphere&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpjx58G6o1K7o-viAFkNJUZINzDQYxSL87u9idvmGA6WnLKvG43X1VTpA_tX-JuOD2qRhHKZIbvkkTZQebs3sDLnAIMFHH3E399kjaAqb00X1Isp9zrXzZpzsXWiuakI_FhDM&pcsa=false&nb=0&nm=3 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Sep 30, 2024 00:22:13.309698105 CEST	610	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 22:22:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 30, 2024 00:22:15.362229109 CEST	1131	OUT	GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Sesame+Semaglutide&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmcBlLqpj90SqxLU1y28Lnofj6W4YFOJxZRWVqEOBrqx9r8dK_IzyucJYZYAj0HbBY0RxMhD-iUiKatTaQpsIR459EQ14jLNoKoGR9MimrFhhNC0HT5tj7o4Xchb8bXTCSs8XHI4WI_a&pcsa=false&nb=0&nm=2 HTTP/1.1 Host: finance.cocoricopatisserie.co.uk Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Sep 30, 2024 00:22:15.579875946 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 22:22:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Buckets: bucket011,bucket088,bucket089 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_QJOD5tzNLYaRqyZoQrxQqU8AwbrhveSmtiAewJre18bKx8+Aze7n/9mXBCfVCgjdpP5z7G11MeWcLu95o58h4g== X-Template: tpl_CleanPeppermintBlack_oneclick X-Language: english Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Pcrew-Ip-Organization: CenturyLink X-Pcrew-Blocked-Reason: X-Domain: cocoricopatisserie.co.uk X-Subdomain: finance Content-Encoding: gzip Data Raw: 63 32 32 0d 0a 1f 8b 08 00 00 00 00 00 04 03 e5 5c 6b 5b da ca b7 7f ad 9f 22 a5 cf 16 3c 9b 5b b8 28 62 69 0f 8a 6d 75 0b 56 8b ad da a7 c7 27 24 03 04 42 c2 4e 82 5c f6 df ef 7e 7e 6b 66 12 02 84 ee 76 3f ed d9 2f 8e 56 25 73 59 b3 66 cd ba af 49 5f bd 68 5c 9d b6 ef 3f 9c 29 7d 7f 64 bd de 7d 45 7f 14 43 f3 b5 8c 66 74 2c 47 1f 0e d9 bc 96 68 be 9d 4e 1b d7 f7 17 7f 38 0f e7 fd 27 bd 55 bf 3e 3b 39 b9 ae 37 3e 4e eb d3 8f f5 8b 93 fa e5 9f 93 c6 db b3 f6 dd 8d 9d 7f ef e6 cb dd db 0f 87 67 17 ed c3 c3 d9 bd fd 61 74 d3 19 37 e7 a5 a7 61 e5 8f 7b f3 bd 3d 6c 8d 99 61 0f ae ea ad 0b 5d bb 6b dc e9 7f 5c 5f b4 f2 f6 dd 1f 0f 17 97 87 6d dd bc 68 54 ea ce fb bb 3f d4 72 e5 b4 3e 3d ab d7 af 6b b5 c7 eb 8b ab 46 d9 5f b4 2e ef b5 9b 3f e7 0f ce b5 Data Ascii: c22\k["<[(bimuV'$BN\~~kfv?/V%sYfI_h\?)}d}ECft,GhN8'U>;97>Ngat7a{=la]k\_mhT?r>=kF_.?
Sep 30, 2024 00:22:16.075220108 CEST	1215	OUT	GET /track.php?domain=cocoricopatisserie.co.uk&toggle=browserjs&uid=MTcyNzY0ODUzNS40NjQ4OjRlZmNjZDYyZTg2Yjg2ODM1MzA1NGVmOTk4MTIxZDM1YjUyZjg0M2M3NzBhMzBjYzUzNzA5YzRiN2I3MmUxNzA6NjZmOWQzMTc3MTdiOA%3D%3D HTTP/1.1 Host: finance.cocoricopatisserie.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Sesame+Semaglutide&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmcBlLqpj90SqxLU1y28Lnofj6W4YFOJxZRWVqEOBrqx9r8dK_IzyucJYZYAj0HbBY0RxMhD-iUiKatTaQpsIR459EQ14jLNoKoGR9MimrFhhNC0HT5tj7o4Xchb8bXTCSs8XHI4WI_a&pcsa=false&nb=0&nm=2 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Sep 30, 2024 00:22:16.275135040 CEST	608	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 22:22:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 30, 2024 00:22:16.504312038 CEST	1084	OUT	GET /ls.php?t=66f9d317&token=f8a06e2da2fe5106d64d1d4e5453cb923d17adf3 HTTP/1.1 Host: finance.cocoricopatisserie.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Sesame+Semaglutide&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmcBlLqpj90SqxLU1y28Lnofj6W4YFOJxZRWVqEOBrqx9r8dK_IzyucJYZYAj0HbBY0RxMhD-iUiKatTaQpsIR459EQ14jLNoKoGR9MimrFhhNC0HT5tj7o4Xchb8bXTCSs8XHI4WI_a&pcsa=false&nb=0&nm=2 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Sep 30, 2024 00:22:16.703556061 CEST	906	IN	HTTP/1.1 201 Created Server: nginx Date: Sun, 29 Sep 2024 22:22:16 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Log-Success: 66f9d3188fca8fb3a70beecc Charset: utf-8 Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Max-Age: 86400 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_WTgeJ6NOluXLg0bMUn2PewrCebQnNXHyfLRn09qj2fO5pE3PXjo3NH3wuBZkiiLGf0vbIftPnA/0ZG+MhKhFPg== Data Raw: 31 30 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"success":true}0
Sep 30, 2024 00:22:18.480626106 CEST	1234	OUT	GET /track.php?domain=cocoricopatisserie.co.uk&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzY0ODUzNS40NjQ4OjRlZmNjZDYyZTg2Yjg2ODM1MzA1NGVmOTk4MTIxZDM1YjUyZjg0M2M3NzBhMzBjYzUzNzA5YzRiN2I3MmUxNzA6NjZmOWQzMTc3MTdiOA%3D%3D HTTP/1.1 Host: finance.cocoricopatisserie.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Sesame+Semaglutide&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmcBlLqpj90SqxLU1y28Lnofj6W4YFOJxZRWVqEOBrqx9r8dK_IzyucJYZYAj0HbBY0RxMhD-iUiKatTaQpsIR459EQ14jLNoKoGR9MimrFhhNC0HT5tj7o4Xchb8bXTCSs8XHI4WI_a&pcsa=false&nb=0&nm=2 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Sep 30, 2024 00:22:18.678284883 CEST	610	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 22:22:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 30, 2024 00:22:23.332360029 CEST	1129	OUT	GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Semaglutide+Henry&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpj4R7Nz9MtgVxMM3LZXthcmrpMZO2hM9CJdYTOBTZlOqOWIKeyAnZ3l9wmC7ZfZQ9oOSTTbuMheWysdFe-MYszSn-Z5cfGUaCQmtDzAocoW2PrGSSnlOXrv0KCozzVftbfzk&pcsa=false&nb=0&nm=2 HTTP/1.1 Host: finance.cocoricopatisserie.co.uk Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Sep 30, 2024 00:22:23.706587076 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 22:22:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Buckets: bucket011,bucket088,bucket089 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_pp7Ea5oNtQ/uIGnYfEk3hqs1Cw+AYzL8iYUp5Zsm+5ZP/3Qw6OUEVNici6pr35ZNRAnXYrOM8m0TLfDKZYrvsg== X-Template: tpl_CleanPeppermintBlack_oneclick X-Language: english Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Pcrew-Ip-Organization: CenturyLink X-Pcrew-Blocked-Reason: X-Domain: cocoricopatisserie.co.uk X-Subdomain: finance Content-Encoding: gzip Data Raw: 63 32 32 0d 0a 1f 8b 08 00 00 00 00 00 04 03 ed 5c eb 77 d2 4a d7 ff dc fe 15 11 d7 29 f4 95 3b a5 17 2a fa 52 a9 5a 15 6a 2b d5 52 97 6f 57 48 06 48 09 09 27 09 05 7a 9e fe ef ef 6f cf 4c c2 04 82 47 cf d2 e7 f9 f2 b4 b6 25 73 d9 b3 67 cf be ef 89 cf 9f 34 cf 5f 75 ba 1f 4f b5 61 30 b6 5f 6c 3f a7 3f 9a a9 07 7a 4e 37 7b b6 6b 8c 46 6c 51 4f b5 5e cf 66 cd 8b ee bb f7 ee cd d9 f0 de 68 37 2e 4e 4f 4e 2e 1a cd 4f b3 c6 ec 53 e3 dd 49 e3 c3 9f d3 e6 eb d3 ce f5 a5 53 7c eb 15 ab fd ab 8f 07 a7 ef 3a 07 07 f3 ae f3 71 7c d9 9b b4 16 7b f7 a3 c3 f7 5d eb ad 33 6a 4f 98 e9 dc 9d 37 da ef 0c fd ba 79 6d bc bf 78 d7 2e 3a d7 ef 6f de 7d 38 e8 18 d6 bb e6 61 c3 7d 7b fd be 54 3d 7c d5 98 9d 36 1a 17 f5 fa ed 64 72 70 aa 57 dd 76 70 51 98 9e bd 71 ba fd Data Ascii: c22\wJ);*RZj+RoWHH'zoLG%sg4_uOa0_l??zN7{kFlQO^fh7.NON.OSIS\|:q\|{]3jO7ymx.:o}8a}{T=\|6drpWvpQq
Sep 30, 2024 00:22:23.760442019 CEST	1213	OUT	GET /track.php?domain=cocoricopatisserie.co.uk&toggle=browserjs&uid=MTcyNzY0ODU0My40MzU5OmMyZDdmMzE5YzBiMWJhMjA2NGIxOTNlZWYyZmQ4YjA2YjBlMWQ2YmQ2ZmZkOGUyZDMyMGUwYzY5OTI0MDBiZWQ6NjZmOWQzMWY2YTZjOQ%3D%3D HTTP/1.1 Host: finance.cocoricopatisserie.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Semaglutide+Henry&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpj4R7Nz9MtgVxMM3LZXthcmrpMZO2hM9CJdYTOBTZlOqOWIKeyAnZ3l9wmC7ZfZQ9oOSTTbuMheWysdFe-MYszSn-Z5cfGUaCQmtDzAocoW2PrGSSnlOXrv0KCozzVftbfzk&pcsa=false&nb=0&nm=2 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Sep 30, 2024 00:22:23.964529991 CEST	608	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 22:22:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 30, 2024 00:22:23.995651007 CEST	1082	OUT	GET /ls.php?t=66f9d31f&token=c66d39186c9fefeedea237848dc99ebab6205427 HTTP/1.1 Host: finance.cocoricopatisserie.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Semaglutide+Henry&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpj4R7Nz9MtgVxMM3LZXthcmrpMZO2hM9CJdYTOBTZlOqOWIKeyAnZ3l9wmC7ZfZQ9oOSTTbuMheWysdFe-MYszSn-Z5cfGUaCQmtDzAocoW2PrGSSnlOXrv0KCozzVftbfzk&pcsa=false&nb=0&nm=2 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Sep 30, 2024 00:22:24.195936918 CEST	906	IN	HTTP/1.1 201 Created Server: nginx Date: Sun, 29 Sep 2024 22:22:24 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Log-Success: 66f9d3205b0067d32308242d Charset: utf-8 Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Max-Age: 86400 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_OJZE/0sbySTgBz2tUtGwva+c5Gix6Xfo6bvTq6i/Q4huvCPZR7u7HtrF68H+1yik6qxvAVDALjwu881wZU16ZQ== Data Raw: 31 30 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"success":true}0
Sep 30, 2024 00:22:25.304384947 CEST	1232	OUT	GET /track.php?domain=cocoricopatisserie.co.uk&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzY0ODU0My40MzU5OmMyZDdmMzE5YzBiMWJhMjA2NGIxOTNlZWYyZmQ4YjA2YjBlMWQ2YmQ2ZmZkOGUyZDMyMGUwYzY5OTI0MDBiZWQ6NjZmOWQzMWY2YTZjOQ%3D%3D HTTP/1.1 Host: finance.cocoricopatisserie.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Semaglutide+Henry&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpj4R7Nz9MtgVxMM3LZXthcmrpMZO2hM9CJdYTOBTZlOqOWIKeyAnZ3l9wmC7ZfZQ9oOSTTbuMheWysdFe-MYszSn-Z5cfGUaCQmtDzAocoW2PrGSSnlOXrv0KCozzVftbfzk&pcsa=false&nb=0&nm=2 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Sep 30, 2024 00:22:25.505487919 CEST	610	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 22:22:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49768	185.53.177.52	80	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 30, 2024 00:21:49.320447922 CEST	580	OUT	GET /track.php?domain=cocoricopatisserie.co.uk&toggle=browserjs&uid=MTcyNzY0ODUwNy43NjU2OjliOGVlNDhhZjhkY2FiNjdiNjM0OWIyOGU5OWFlOTZhOTAyNDQ3OTQxMzExNTNmMDhmODJjM2ZiNTFjNmIzYjc6NjZmOWQyZmJiYWU4Yw%3D%3D HTTP/1.1 Host: finance.cocoricopatisserie.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Sep 30, 2024 00:21:49.977129936 CEST	608	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 22:21:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 30, 2024 00:21:52.935376883 CEST	599	OUT	GET /track.php?domain=cocoricopatisserie.co.uk&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzY0ODUwNy43NjU2OjliOGVlNDhhZjhkY2FiNjdiNjM0OWIyOGU5OWFlOTZhOTAyNDQ3OTQxMzExNTNmMDhmODJjM2ZiNTFjNmIzYjc6NjZmOWQyZmJiYWU4Yw%3D%3D HTTP/1.1 Host: finance.cocoricopatisserie.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Sep 30, 2024 00:21:53.139000893 CEST	610	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 22:21:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 30, 2024 00:21:55.590549946 CEST	580	OUT	GET /track.php?domain=cocoricopatisserie.co.uk&toggle=browserjs&uid=MTcyNzY0ODUxNS4wNzYzOjIxNmUwMTkzNDk2OTc5ZTM3MGQ1YzM0YjczYTg0NTYxODdjZTI3NWZmMDY3M2QxZDQ3MWNmYzI5OGNiNTEyMDY6NjZmOWQzMDMxMjlkYQ%3D%3D HTTP/1.1 Host: finance.cocoricopatisserie.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Sep 30, 2024 00:21:55.787552118 CEST	608	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 22:21:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 30, 2024 00:21:56.010814905 CEST	608	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 22:21:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 30, 2024 00:21:57.570427895 CEST	599	OUT	GET /track.php?domain=cocoricopatisserie.co.uk&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzY0ODUxNS4wNzYzOjIxNmUwMTkzNDk2OTc5ZTM3MGQ1YzM0YjczYTg0NTYxODdjZTI3NWZmMDY3M2QxZDQ3MWNmYzI5OGNiNTEyMDY6NjZmOWQzMDMxMjlkYQ%3D%3D HTTP/1.1 Host: finance.cocoricopatisserie.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Sep 30, 2024 00:21:57.767642021 CEST	610	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 22:21:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 30, 2024 00:22:00.623625040 CEST	572	OUT	GET /track.php?domain=cocoricopatisserie.co.uk&toggle=browserjs&uid=MTcyNzY0ODUyMC4xODk6NGRlMzI1MTA1OTE5NmQ5ZjEwYWQwMWNiYjEzM2RlNzdkYTgxZmU2MzkxMjY0OTVhOWMxYTdhMDQxNWRlMDM1Yzo2NmY5ZDMwODJlMjFk HTTP/1.1 Host: finance.cocoricopatisserie.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Sep 30, 2024 00:22:00.819818020 CEST	608	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 22:22:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 30, 2024 00:22:01.485548019 CEST	591	OUT	GET /track.php?domain=cocoricopatisserie.co.uk&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzY0ODUyMC4xODk6NGRlMzI1MTA1OTE5NmQ5ZjEwYWQwMWNiYjEzM2RlNzdkYTgxZmU2MzkxMjY0OTVhOWMxYTdhMDQxNWRlMDM1Yzo2NmY5ZDMwODJlMjFk HTTP/1.1 Host: finance.cocoricopatisserie.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Sep 30, 2024 00:22:01.680702925 CEST	610	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 22:22:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 30, 2024 00:22:11.680526018 CEST	580	OUT	GET /track.php?domain=cocoricopatisserie.co.uk&toggle=browserjs&uid=MTcyNzY0ODUzMS4zMDA4OmJkNzczZDU2Y2Y4MmQzOGJiMWI4Y2NhMjNkNTg3ODExZDVmOTMwN2Y5ZTE4YzA1NDQyOTMyZGQ1N2Q3OTBiOGQ6NjZmOWQzMTM0OTZlZQ%3D%3D HTTP/1.1 Host: finance.cocoricopatisserie.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Sep 30, 2024 00:22:11.874855995 CEST	608	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 22:22:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 30, 2024 00:22:13.332861900 CEST	599	OUT	GET /track.php?domain=cocoricopatisserie.co.uk&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzY0ODUzMS4zMDA4OmJkNzczZDU2Y2Y4MmQzOGJiMWI4Y2NhMjNkNTg3ODExZDVmOTMwN2Y5ZTE4YzA1NDQyOTMyZGQ1N2Q3OTBiOGQ6NjZmOWQzMTM0OTZlZQ%3D%3D HTTP/1.1 Host: finance.cocoricopatisserie.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Sep 30, 2024 00:22:13.530306101 CEST	610	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 22:22:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 30, 2024 00:22:16.791934013 CEST	580	OUT	GET /track.php?domain=cocoricopatisserie.co.uk&toggle=browserjs&uid=MTcyNzY0ODUzNS40NjQ4OjRlZmNjZDYyZTg2Yjg2ODM1MzA1NGVmOTk4MTIxZDM1YjUyZjg0M2M3NzBhMzBjYzUzNzA5YzRiN2I3MmUxNzA6NjZmOWQzMTc3MTdiOA%3D%3D HTTP/1.1 Host: finance.cocoricopatisserie.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Sep 30, 2024 00:22:16.986753941 CEST	608	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 22:22:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 30, 2024 00:22:19.292340994 CEST	599	OUT	GET /track.php?domain=cocoricopatisserie.co.uk&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzY0ODUzNS40NjQ4OjRlZmNjZDYyZTg2Yjg2ODM1MzA1NGVmOTk4MTIxZDM1YjUyZjg0M2M3NzBhMzBjYzUzNzA5YzRiN2I3MmUxNzA6NjZmOWQzMTc3MTdiOA%3D%3D HTTP/1.1 Host: finance.cocoricopatisserie.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Sep 30, 2024 00:22:19.494091034 CEST	610	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 22:22:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 30, 2024 00:22:23.972337008 CEST	580	OUT	GET /track.php?domain=cocoricopatisserie.co.uk&toggle=browserjs&uid=MTcyNzY0ODU0My40MzU5OmMyZDdmMzE5YzBiMWJhMjA2NGIxOTNlZWYyZmQ4YjA2YjBlMWQ2YmQ2ZmZkOGUyZDMyMGUwYzY5OTI0MDBiZWQ6NjZmOWQzMWY2YTZjOQ%3D%3D HTTP/1.1 Host: finance.cocoricopatisserie.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Sep 30, 2024 00:22:24.168256998 CEST	608	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 22:22:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 30, 2024 00:22:25.512916088 CEST	599	OUT	GET /track.php?domain=cocoricopatisserie.co.uk&caf=1&toggle=answercheck&answer=yes&uid=MTcyNzY0ODU0My40MzU5OmMyZDdmMzE5YzBiMWJhMjA2NGIxOTNlZWYyZmQ4YjA2YjBlMWQ2YmQ2ZmZkOGUyZDMyMGUwYzY5OTI0MDBiZWQ6NjZmOWQzMWY2YTZjOQ%3D%3D HTTP/1.1 Host: finance.cocoricopatisserie.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=4f20d6f152843af6:T=1727648483:RT=1727648483:S=ALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw
Sep 30, 2024 00:22:25.709881067 CEST	610	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 22:22:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49715	142.250.186.164	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:21:21 UTC	440	OUT	GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://finance.cocoricopatisserie.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 22:21:22 UTC	844	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 153207 Date: Sun, 29 Sep 2024 22:21:22 GMT Expires: Sun, 29 Sep 2024 22:21:22 GMT Cache-Control: private, max-age=3600 ETag: "5807633318253471531" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-29 22:21:22 UTC	546	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 68 61 73 68 3a 22 31 37 33 38 33 36 33 33 34 36 34 33 37 30 36 31 35 35 35 33 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 30 30 30 32 2c 31 37 33 30 31 34 33 37 2c 31 37 33 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17300002,17301437,173
2024-09-29 22:21:22 UTC	1390	IN	Data Raw: 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 69 35 75 5a 58 51 73 64 Data Ascii: rovidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsd
2024-09-29 22:21:22 UTC	1390	IN	Data Raw: 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 Data Ascii: )return a;c.prototype.toString=function(){return this.ne};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8ClampedArray
2024-09-29 22:21:22 UTC	1390	IN	Data Raw: 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 61 3d 6c 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 70 61 29 70 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e 64 65 Data Ascii: +" is not extensible");return a}:null}var pa=la;function qa(a,b){a.prototype=ka(b.prototype);a.prototype.constructor=a;if(pa)pa(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.de
2024-09-29 22:21:22 UTC	1390	IN	Data Raw: 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 55 66 28 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 62 64 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 67 67 28 68 2c 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 62 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 63 65 28 32 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 64 3d 66 75 6e 63 74 69 6f Data Ascii: e "function":h=!0;break a;default:h=!1}h?this.Uf(g):this.Ld(g)}};b.prototype.Uf=function(g){var h=void 0;try{h=g.then}catch(k){this.bd(k);return}typeof h=="function"?this.gg(h,g):this.Ld(g)};b.prototype.bd=function(g){this.ce(2,g)};b.prototype.Ld=functio
2024-09-29 22:21:22 UTC	1390	IN	Data Raw: 72 20 6c 2c 6d 2c 70 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 69 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 0a 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 42 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 Data Ascii: r l,m,p=new b(function(r,t){l=r;m=t});this.ib(k(g,l),k(h,m));return p};b.prototype.catch=function(g){return this.then(void 0,g)};b.prototype.ib=function(g,h){function k(){switch(l.B){case 1:g(l.Xa);break;case 2:h(l.Xa);break;default:throw Error("Unexpect
2024-09-29 22:21:22 UTC	1390	IN	Data Raw: 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 73 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 63 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a 65 63 74 2e 73 65 61 6c Data Ascii: ction"}function e(k){if(!sa(k,g)){var l=new c;ca(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var k=Object.seal
2024-09-29 22:21:22 UTC	1390	IN	Data Raw: 3a 6d 2c 69 6e 64 65 78 3a 68 2c 49 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 49 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 75 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 Data Ascii: :m,index:h,I:p}}return{id:l,list:m,index:-1,I:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=u(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Objec
2024-09-29 22:21:22 UTC	1390	IN	Data Raw: 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 Data Ascii: urn h.key})};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,h.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.prototype.entries;v
2024-09-29 22:21:22 UTC	1390	IN	Data Raw: 69 66 28 64 5b 2d 2d 63 5d 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 65 3c 3d 30 7d 7d 29 3b 0a 71 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 73 61 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 5b 64 2c 62 5b 64 5d 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 Data Ascii: if(d[--c]!=b[--e])return!1;return e<=0}});q("Object.entries",function(a){return a?a:function(b){var c=[],d;for(d in b)sa(b,d)&&c.push([d,b[d]]);return c}});q("Array.prototype.find",function(a){return a?a:function(b,c){a:{var d=this;d instanceof String&&(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49722	142.250.184.238	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:21:23 UTC	1753	OUT	GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&hl=en&rpbu=http%3A%2F%2Ffinance.cocoricopatisserie.co.uk%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN8OWI0YTE0ZWQ1Y2Y3MDZjNTEwMDMzYzA2YTM2ODRkNDk3ODliMzNlMXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2558334540730768&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266%2C72717108&format=r3%7Cs&nocache=5961727648481571&num=0&output=afd_ads&domain_name=finance.cocoricopatisserie.co.uk&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1727648481583&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=791&frm=0&uio=--&cont=tc&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=http%3A%2F%2F [TRUNCATED] Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://finance.cocoricopatisserie.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 22:21:23 UTC	807	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Disposition: inline Date: Sun, 29 Sep 2024 22:21:23 GMT Expires: Sun, 29 Sep 2024 22:21:23 GMT Cache-Control: private, max-age=3600 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-PRMTTpHuwhSQSJ4gg4f0Hw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Server: gws X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-29 22:21:23 UTC	583	IN	Data Raw: 33 61 33 34 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 73 74 79 6c 65 20 69 64 3d 22 73 73 72 2d 62 6f 69 6c 65 72 70 6c 61 74 65 22 3e 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 72 67 69 6e 3a 30 3b 7d 2e 64 69 76 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 20 2e 64 69 76 3a 6c 61 73 Data Ascii: 3a34<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:las
2024-09-29 22:21:23 UTC	1390	IN	Data Raw: 69 5f 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 76 5f 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 Data Ascii: i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit
2024-09-29 22:21:23 UTC	1390	IN	Data Raw: 5f 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 6f 5f 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 78 5f 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 79 5f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 7a 2d 69 6e 64 65 78 3a 31 3b 7d 2e 6b 5f 3e 64 69 76 3a 6e 6f 74 28 2e 79 5f 29 20 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 Data Ascii: _{overflow:hidden;}.o_{white-space:nowrap;}.x_{cursor:pointer;}.y_{display:none; position:absolute; z-index:1;}.k_>div:not(.y_) {display:-webkit-inline-box; display:-moz-inline-box; display:-ms-inline-flexbox; display:-webkit-inline-flex; display:inline-f
2024-09-29 22:21:23 UTC	1390	IN	Data Raw: 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 42 6f 74 74 6f 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 43 65 6e 74 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 Data Ascii: start; align-items:flex-start;}.flexAlignBottom{-ms-flex-align:end; -webkit-box-align:end; -webkit-align-items:flex-end; align-items:flex-end;}.flexAlignCenter{-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center
2024-09-29 22:21:23 UTC	1390	IN	Data Raw: 65 72 2d 72 61 64 69 75 73 3a 31 35 70 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 31 70 78 3b 7d 2e 73 69 31 32 38 7b 68 65 69 67 68 74 3a 31 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 64 69 76 3e 64 69 76 2e 73 69 31 32 38 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 2e 73 69 31 33 33 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 30 31 63 33 36 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e Data Ascii: er-radius:15px;height:30px;width:1px;}.si128{height:1px;width:100%; -ms-flex-negative:1;-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}div>div.si128:last-child{display:none;}.si133{background-color:#101c36;border-radius:2px;font-size:12px;lin
2024-09-29 22:21:23 UTC	1390	IN	Data Raw: 77 72 61 70 3b 22 20 64 61 74 61 2d 61 64 2d 63 6f 6e 74 61 69 6e 65 72 3d 22 31 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 72 73 73 41 74 74 72 43 6f 6e 74 61 69 6e 65 72 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 70 5f 20 73 69 31 33 33 20 73 70 61 6e 22 3e 52 65 6c 61 74 65 64 20 73 65 61 72 63 68 65 73 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 65 31 22 20 63 6c 61 73 73 3d 22 69 Data Ascii: wrap;" data-ad-container="1"><div class="i_ div rssAttrContainer" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><span class="p_ si133 span">Related searches</span></div><div id="e1" class="i
2024-09-29 22:21:23 UTC	1390	IN	Data Raw: 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 36 39 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 Data Ascii: "><div class="i_ div si69" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;-ms-flex-pack:center; -webkit-box-pack:center; -webkit-justify-content:center; justify-content:center;-ms-flex-align:ce
2024-09-29 22:21:23 UTC	1390	IN	Data Raw: 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 69 6e 61 6e 63 65 2e 63 6f 63 6f 72 69 63 6f 70 61 74 69 73 73 65 72 69 65 2e 63 6f 2e 75 6b 2f 3f 74 73 3d 66 45 4e 73 5a 57 46 75 55 47 56 77 63 47 56 79 62 57 6c 75 64 45 4a 73 59 57 4e 72 66 48 77 31 59 32 55 34 4e 48 78 69 64 57 4e 72 5a 58 51 77 4d 54 45 73 59 6e 56 6a 61 32 56 30 4d 44 67 34 4c 47 4a 31 59 32 74 6c 64 44 41 34 4f 58 78 38 66 48 78 38 66 44 59 32 5a 6a 6c 6b 4d 6d 55 77 5a 44 6b 7a 59 32 5a 38 66 48 77 78 4e 7a 49 33 4e 6a 51 34 4e 44 67 77 4c 6a 6b 77 4f 44 4e Data Ascii: it-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><a href="http://finance.cocoricopatisserie.co.uk/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NDgwLjkwODN
2024-09-29 22:21:24 UTC	1390	IN	Data Raw: 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 64 69 76 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 63 6c 61 73 73 3d 22 64 69 76 20 71 5f 20 73 69 31 30 32 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 66 73 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 61 64 5f 69 Data Ascii: n-items:center;"><div class="i_ div" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><div aria-hidden="true" tabindex="-1" class="div q_ si102"><img src="https://afs.googleusercontent.com/ad_i
2024-09-29 22:21:24 UTC	1390	IN	Data Raw: 4d 58 78 38 4d 48 77 77 66 48 78 38 66 44 46 38 66 48 78 38 66 44 42 38 4d 48 78 38 66 48 78 38 66 48 78 38 66 48 77 77 66 44 42 38 66 44 42 38 66 48 77 77 66 44 42 38 56 7a 45 77 50 58 78 38 4d 58 78 58 4d 54 41 39 66 44 45 33 4e 6d 55 79 4e 6a 6b 34 4d 54 49 31 5a 54 55 78 59 54 4d 32 4d 57 4d 35 4f 54 56 6a 4e 54 51 34 4d 47 51 7a 4e 54 45 30 5a 6d 51 77 4e 6d 55 31 4f 54 52 38 4d 48 78 6b 63 43 31 30 5a 57 46 74 61 57 35 30 5a 58 4a 75 5a 58 51 77 4f 56 38 7a 63 47 68 38 4d 48 77 77 66 48 78 38 26 61 6d 70 3b 71 75 65 72 79 3d 53 65 73 61 6d 65 2b 53 65 6d 61 67 6c 75 74 69 64 65 26 61 6d 70 3b 61 66 64 54 6f 6b 65 6e 3d 43 68 4d 49 69 2d 61 71 6b 5a 6a 70 69 41 4d 56 76 5f 36 37 43 42 32 2d 36 7a 4e 4f 45 6d 63 42 6c 4c 71 70 6a 39 30 53 71 78 4c 55 Data Ascii: MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&query=Sesame+Semaglutide&afdToken=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmcBlLqpj90SqxLU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49720	142.250.185.164	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:21:23 UTC	476	OUT	GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 22:21:23 UTC	845	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 153198 Date: Sun, 29 Sep 2024 22:21:23 GMT Expires: Sun, 29 Sep 2024 22:21:23 GMT Cache-Control: private, max-age=3600 ETag: "16155903164772261079" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-29 22:21:23 UTC	545	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 68 61 73 68 3a 22 31 37 33 38 33 36 33 33 34 36 34 33 37 30 36 31 35 35 35 33 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 31 34 33 37 2c 31 37 33 30 31 34 33 39 2c 31 37 33 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17301437,17301439,173
2024-09-29 22:21:23 UTC	1390	IN	Data Raw: 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 69 35 75 5a 58 51 73 64 48 4a 68 62 6e 4e 73 59 Data Ascii: omain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsY
2024-09-29 22:21:23 UTC	1390	IN	Data Raw: 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 Data Ascii: a;c.prototype.toString=function(){return this.ne};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8ClampedArray Int16Arr
2024-09-29 22:21:23 UTC	1390	IN	Data Raw: 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 61 3d 6c 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 70 61 29 70 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 Data Ascii: t extensible");return a}:null}var pa=la;function qa(a,b){a.prototype=ka(b.prototype);a.prototype.constructor=a;if(pa)pa(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.defineProp
2024-09-29 22:21:23 UTC	1390	IN	Data Raw: 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 55 66 28 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 62 64 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 67 67 28 68 2c 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 62 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 63 65 28 32 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 Data Ascii: ion":h=!0;break a;default:h=!1}h?this.Uf(g):this.Ld(g)}};b.prototype.Uf=function(g){var h=void 0;try{h=g.then}catch(k){this.bd(k);return}typeof h=="function"?this.gg(h,g):this.Ld(g)};b.prototype.bd=function(g){this.ce(2,g)};b.prototype.Ld=function(g){thi
2024-09-29 22:21:23 UTC	1390	IN	Data Raw: 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 69 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 0a 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 42 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 65 64 20 73 74 61 74 65 Data Ascii: new b(function(r,t){l=r;m=t});this.ib(k(g,l),k(h,m));return p};b.prototype.catch=function(g){return this.then(void 0,g)};b.prototype.ib=function(g,h){function k(){switch(l.B){case 1:g(l.Xa);break;case 2:h(l.Xa);break;default:throw Error("Unexpected state
2024-09-29 22:21:23 UTC	1390	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 73 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 63 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6c 3d 4f Data Ascii: unction e(k){if(!sa(k,g)){var l=new c;ca(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var k=Object.seal({}),l=O
2024-09-29 22:21:23 UTC	1390	IN	Data Raw: 3a 68 2c 49 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 49 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 75 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d Data Ascii: :h,I:p}}return{id:l,list:m,index:-1,I:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=u(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Object.seal!=
2024-09-29 22:21:23 UTC	1390	IN	Data Raw: 79 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 20 67 3d 30 3b 72 Data Ascii: y})};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,h.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.prototype.entries;var g=0;r
2024-09-29 22:21:23 UTC	1390	IN	Data Raw: 5d 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 65 3c 3d 30 7d 7d 29 3b 0a 71 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 73 61 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 5b 64 2c 62 5b 64 5d 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 64 3d 53 74 72 69 6e 67 Data Ascii: ]!=b[--e])return!1;return e<=0}});q("Object.entries",function(a){return a?a:function(b){var c=[],d;for(d in b)sa(b,d)&&c.push([d,b[d]]);return c}});q("Array.prototype.find",function(a){return a?a:function(b,c){a:{var d=this;d instanceof String&&(d=String

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49724	142.250.184.238	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:21:24 UTC	555	OUT	GET /adsense/domains/caf.js?pac=2 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 22:21:25 UTC	845	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 153223 Date: Sun, 29 Sep 2024 22:21:25 GMT Expires: Sun, 29 Sep 2024 22:21:25 GMT Cache-Control: private, max-age=3600 ETag: "17209215320339076777" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-29 22:21:25 UTC	545	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 73 79 6e 64 69 63 61 74 65 64 73 65 61 72 63 68 2e 67 6f 6f 67 22 2c 68 61 73 68 3a 22 31 37 33 38 33 36 33 33 34 36 34 33 37 30 36 31 35 35 35 33 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 30 30 30 33 2c 31 37 33 30 31 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17300003,17301
2024-09-29 22:21:25 UTC	1390	IN	Data Raw: 74 72 75 65 2c 22 5f 75 73 65 53 65 72 76 65 72 50 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 Data Ascii: true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRv
2024-09-29 22:21:25 UTC	1390	IN	Data Raw: 21 30 2c 76 61 6c 75 65 3a 67 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 Data Ascii: !0,value:g})}if(a)return a;c.prototype.toString=function(){return this.ne};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array U
2024-09-29 22:21:25 UTC	1390	IN	Data Raw: 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 61 3d 6c 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 70 61 29 70 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 Data Ascii: w new TypeError(a+" is not extensible");return a}:null}var pa=la;function qa(a,b){a.prototype=ka(b.prototype);a.prototype.constructor=a;if(pa)pa(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(
2024-09-29 22:21:25 UTC	1390	IN	Data Raw: 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 55 66 28 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 62 64 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 67 67 28 68 2c 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 62 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 63 65 28 32 2c 67 29 7d 3b 62 2e 70 72 6f Data Ascii: =null;break a;case "function":h=!0;break a;default:h=!1}h?this.Uf(g):this.Ld(g)}};b.prototype.Uf=function(g){var h=void 0;try{h=g.then}catch(k){this.bd(k);return}typeof h=="function"?this.gg(h,g):this.Ld(g)};b.prototype.bd=function(g){this.ce(2,g)};b.pro
2024-09-29 22:21:25 UTC	1390	IN	Data Raw: 63 68 28 77 29 7b 6d 28 77 29 7d 7d 3a 74 7d 76 61 72 20 6c 2c 6d 2c 70 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 69 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 0a 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 42 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f Data Ascii: ch(w){m(w)}}:t}var l,m,p=new b(function(r,t){l=r;m=t});this.ib(k(g,l),k(h,m));return p};b.prototype.catch=function(g){return this.then(void 0,g)};b.prototype.ib=function(g,h){function k(){switch(l.B){case 1:g(l.Xa);break;case 2:h(l.Xa);break;default:thro
2024-09-29 22:21:25 UTC	1390	IN	Data Raw: 21 3d 3d 6e 75 6c 6c 7c 7c 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 73 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 63 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b Data Ascii: !==null\|\|l==="function"}function e(k){if(!sa(k,g)){var l=new c;ca(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{
2024-09-29 22:21:25 UTC	1390	IN	Data Raw: 29 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 68 2c 49 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 49 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 75 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 Data Ascii: )return{id:l,list:m,index:h,I:p}}return{id:l,list:m,index:-1,I:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=u(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entr
2024-09-29 22:21:25 UTC	1390	IN	Data Raw: 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 Data Ascii: s,function(h){return h.key})};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,h.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.pr
2024-09-29 22:21:25 UTC	1390	IN	Data Raw: 6c 65 6e 67 74 68 3b 65 3e 30 26 26 63 3e 30 3b 29 69 66 28 64 5b 2d 2d 63 5d 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 65 3c 3d 30 7d 7d 29 3b 0a 71 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 73 61 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 5b 64 2c 62 5b 64 5d 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 Data Ascii: length;e>0&&c>0;)if(d[--c]!=b[--e])return!1;return e<=0}});q("Object.entries",function(a){return a?a:function(b){var c=[],d;for(d in b)sa(b,d)&&c.push([d,b[d]]);return c}});q("Array.prototype.find",function(a){return a?a:function(b,c){a:{var d=this;d ins

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49723	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:21:24 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 22:21:25 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=66217 Date: Sun, 29 Sep 2024 22:21:25 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49726	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:21:25 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 22:21:26 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=66246 Date: Sun, 29 Sep 2024 22:21:26 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-29 22:21:26 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49727	142.250.184.238	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:21:26 UTC	373	OUT	GET /adsense/domains/caf.js?pac=2 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 22:21:26 UTC	844	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 153223 Date: Sun, 29 Sep 2024 22:21:26 GMT Expires: Sun, 29 Sep 2024 22:21:26 GMT Cache-Control: private, max-age=3600 ETag: "4492878693876391607" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-29 22:21:26 UTC	546	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 73 79 6e 64 69 63 61 74 65 64 73 65 61 72 63 68 2e 67 6f 6f 67 22 2c 68 61 73 68 3a 22 31 37 33 38 33 36 33 33 34 36 34 33 37 30 36 31 35 35 35 33 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 30 30 30 32 2c 31 37 33 30 31 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17300002,17301
2024-09-29 22:21:26 UTC	1390	IN	Data Raw: 72 75 65 2c 22 5f 75 73 65 53 65 72 76 65 72 50 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c Data Ascii: rue,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvL
2024-09-29 22:21:26 UTC	1390	IN	Data Raw: 30 2c 76 61 6c 75 65 3a 67 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 Data Ascii: 0,value:g})}if(a)return a;c.prototype.toString=function(){return this.ne};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Ui
2024-09-29 22:21:26 UTC	1390	IN	Data Raw: 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 61 3d 6c 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 70 61 29 70 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 Data Ascii: new TypeError(a+" is not extensible");return a}:null}var pa=la;function qa(a,b){a.prototype=ka(b.prototype);a.prototype.constructor=a;if(pa)pa(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b
2024-09-29 22:21:26 UTC	1390	IN	Data Raw: 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 55 66 28 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 62 64 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 67 67 28 68 2c 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 62 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 63 65 28 32 2c 67 29 7d 3b 62 2e 70 72 6f 74 Data Ascii: null;break a;case "function":h=!0;break a;default:h=!1}h?this.Uf(g):this.Ld(g)}};b.prototype.Uf=function(g){var h=void 0;try{h=g.then}catch(k){this.bd(k);return}typeof h=="function"?this.gg(h,g):this.Ld(g)};b.prototype.bd=function(g){this.ce(2,g)};b.prot
2024-09-29 22:21:26 UTC	1390	IN	Data Raw: 68 28 77 29 7b 6d 28 77 29 7d 7d 3a 74 7d 76 61 72 20 6c 2c 6d 2c 70 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 69 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 0a 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 42 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 Data Ascii: h(w){m(w)}}:t}var l,m,p=new b(function(r,t){l=r;m=t});this.ib(k(g,l),k(h,m));return p};b.prototype.catch=function(g){return this.then(void 0,g)};b.prototype.ib=function(g,h){function k(){switch(l.B){case 1:g(l.Xa);break;case 2:h(l.Xa);break;default:throw
2024-09-29 22:21:26 UTC	1390	IN	Data Raw: 3d 3d 6e 75 6c 6c 7c 7c 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 73 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 63 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 Data Ascii: ==null\|\|l==="function"}function e(k){if(!sa(k,g)){var l=new c;ca(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{v
2024-09-29 22:21:26 UTC	1390	IN	Data Raw: 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 68 2c 49 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 49 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 75 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 Data Ascii: return{id:l,list:m,index:h,I:p}}return{id:l,list:m,index:-1,I:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=u(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entri
2024-09-29 22:21:26 UTC	1390	IN	Data Raw: 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f Data Ascii: ,function(h){return h.key})};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,h.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.pro
2024-09-29 22:21:26 UTC	1390	IN	Data Raw: 65 6e 67 74 68 3b 65 3e 30 26 26 63 3e 30 3b 29 69 66 28 64 5b 2d 2d 63 5d 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 65 3c 3d 30 7d 7d 29 3b 0a 71 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 73 61 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 5b 64 2c 62 5b 64 5d 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 Data Ascii: ength;e>0&&c>0;)if(d[--c]!=b[--e])return!1;return e<=0}});q("Object.entries",function(a){return a?a:function(b){var c=[],d;for(d in b)sa(b,d)&&c.push([d,b[d]]);return c}});q("Array.prototype.find",function(a){return a?a:function(b,c){a:{var d=this;d inst

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49728	142.250.186.65	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:21:26 UTC	748	OUT	GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 22:21:27 UTC	800	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 391 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sun, 29 Sep 2024 04:21:14 GMT Expires: Mon, 30 Sep 2024 03:21:14 GMT Cache-Control: public, max-age=82800 Last-Modified: Thu, 20 Jul 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Age: 64813 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-29 22:21:27 UTC	391	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 30 30 22 20 68 65 69 67 68 74 3d 22 32 30 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 35 2e 35 20 31 34 68 2d 2e 37 39 6c 2d 2e 32 38 2d 2e 32 37 43 31 35 2e 34 31 20 31 32 2e 35 39 20 31 36 20 31 31 2e 31 31 20 31 36 20 39 2e 35 20 31 36 20 35 2e 39 31 20 31 33 2e 30 39 20 33 20 39 2e 35 20 33 53 33 20 35 2e 39 31 20 33 20 39 2e 35 20 35 2e 39 31 20 31 36 20 39 2e 35 20 31 36 63 31 2e 36 31 20 30 20 33 2e 30 39 2d 2e 35 39 20 34 2e 32 33 2d 31 2e 35 37 6c 2e 32 37 2e 32 38 76 2e 37 39 6c 35 20 34 2e 39 39 4c Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49729	142.250.186.65	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:21:26 UTC	749	OUT	GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 22:21:27 UTC	799	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 200 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sun, 29 Sep 2024 20:47:58 GMT Expires: Mon, 30 Sep 2024 19:47:58 GMT Cache-Control: public, max-age=82800 Last-Modified: Thu, 02 Nov 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Age: 5609 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-29 22:21:27 UTC	200	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 77 69 64 74 68 3d 22 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 35 2e 38 38 20 34 2e 31 32 4c 31 33 2e 37 36 20 31 32 6c 2d 37 2e 38 38 20 37 2e 38 38 4c 38 20 32 32 6c 31 30 2d 31 30 4c 38 20 32 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49718	142.250.185.110	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:21:27 UTC	896	OUT	GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=twjy7tid1xni&aqid=49L5ZpWrLPrZywW62ILoBA&psid=7840396037&pbt=bs&adbx=375&adby=130&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=678245571&csala=29%7C0%7C1625%7C1180%7C279&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://finance.cocoricopatisserie.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 22:21:27 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-2nKkZ_Jzj_HAp5zUg_IbBQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 29 Sep 2024 22:21:27 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49733	216.58.206.65	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:21:28 UTC	507	OUT	GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 22:21:28 UTC	800	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 391 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sun, 29 Sep 2024 04:21:14 GMT Expires: Mon, 30 Sep 2024 03:21:14 GMT Cache-Control: public, max-age=82800 Last-Modified: Thu, 20 Jul 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Age: 64814 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-29 22:21:28 UTC	391	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 30 30 22 20 68 65 69 67 68 74 3d 22 32 30 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 35 2e 35 20 31 34 68 2d 2e 37 39 6c 2d 2e 32 38 2d 2e 32 37 43 31 35 2e 34 31 20 31 32 2e 35 39 20 31 36 20 31 31 2e 31 31 20 31 36 20 39 2e 35 20 31 36 20 35 2e 39 31 20 31 33 2e 30 39 20 33 20 39 2e 35 20 33 53 33 20 35 2e 39 31 20 33 20 39 2e 35 20 35 2e 39 31 20 31 36 20 39 2e 35 20 31 36 63 31 2e 36 31 20 30 20 33 2e 30 39 2d 2e 35 39 20 34 2e 32 33 2d 31 2e 35 37 6c 2e 32 37 2e 32 38 76 2e 37 39 6c 35 20 34 2e 39 39 4c Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49732	216.58.206.65	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:21:28 UTC	508	OUT	GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 22:21:28 UTC	799	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 200 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sun, 29 Sep 2024 20:47:58 GMT Expires: Mon, 30 Sep 2024 19:47:58 GMT Cache-Control: public, max-age=82800 Last-Modified: Thu, 02 Nov 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Age: 5610 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-29 22:21:28 UTC	200	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 77 69 64 74 68 3d 22 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 35 2e 38 38 20 34 2e 31 32 4c 31 33 2e 37 36 20 31 32 6c 2d 37 2e 38 38 20 37 2e 38 38 4c 38 20 32 32 6c 31 30 2d 31 30 4c 38 20 32 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49734	142.250.185.110	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:21:28 UTC	896	OUT	GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=oq2boedhgzbv&aqid=49L5ZpWrLPrZywW62ILoBA&psid=7840396037&pbt=bv&adbx=375&adby=130&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=678245571&csala=29%7C0%7C1625%7C1180%7C279&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://finance.cocoricopatisserie.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 22:21:29 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-BQW4Z2UGnHeGsyJ-RBjDtw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 29 Sep 2024 22:21:29 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49743	108.128.52.91	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:21:33 UTC	692	OUT	GET /index.php?domain_name=cocoricopatisserie.co.uk HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 22:21:34 UTC	263	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 22:21:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: pct-1791724955aaa7a19f73afddbe958b9d=1; expires=Sun, 29-Sep-2024 23:21:34 GMT; Max-Age=3600
2024-09-29 22:21:34 UTC	5324	IN	Data Raw: 31 34 63 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 61 6c 65 20 6f 66 66 65 72 20 66 6f 72 3a 20 63 6f 63 6f 72 69 63 6f 70 61 74 69 73 73 65 72 69 65 2e 63 6f 2e 75 6b 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e Data Ascii: 14c4<!DOCTYPE html><html><head> <meta charset="UTF-8"> <title>Sale offer for: cocoricopatisserie.co.uk</title> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <link href="https://fonts.googleapis.
2024-09-29 22:21:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49742	108.128.52.91	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:21:34 UTC	666	OUT	GET /scripts/select2/select2.css HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.mydomaincontact.com/index.php?domain_name=cocoricopatisserie.co.uk Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-1791724955aaa7a19f73afddbe958b9d=1
2024-09-29 22:21:34 UTC	228	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 22:21:34 GMT Content-Type: text/css Content-Length: 19226 Connection: close Server: nginx Last-Modified: Wed, 04 Sep 2024 11:48:32 GMT ETag: "66d84910-4b1a" Accept-Ranges: bytes
2024-09-29 22:21:34 UTC	16156	IN	Data Raw: 2f 2a 0a 56 65 72 73 69 6f 6e 3a 20 33 2e 33 2e 32 20 54 69 6d 65 73 74 61 6d 70 3a 20 4d 6f 6e 20 4d 61 72 20 32 35 20 31 32 3a 31 34 3a 31 38 20 50 44 54 20 32 30 31 33 0a 2a 2f 0a 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 20 20 2f 2a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 20 66 6f 72 20 69 65 37 20 2a 2f 0a 20 20 20 20 7a 6f 6f 6d 3a 20 31 3b 0a 20 20 20 20 2a 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 0a 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 7d 0a 0a 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2c 0a 2e 73 65 6c 65 Data Ascii: /Version: 3.3.2 Timestamp: Mon Mar 25 12:14:18 PDT 2013/.select2-container { position: relative; display: inline-block; /* inline-block for ie7 / zoom: 1; display: inline; vertical-align: middle;}.select2-container,.sele
2024-09-29 22:21:34 UTC	3070	IN	Data Raw: 20 20 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 34 65 34 65 34 3b 0a 20 20 20 20 66 69 6c 74 65 72 3a 20 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 20 73 74 61 72 74 43 6f 6c 6f 72 73 74 72 3d 27 23 65 65 65 65 65 65 27 2c 20 65 6e 64 43 6f 6c 6f 72 73 74 72 3d 27 23 66 34 66 34 66 34 27 2c 20 47 72 61 64 69 65 6e 74 54 79 70 65 3d 30 20 29 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 6e 74 28 6c 69 6e 65 Data Ascii: -ms-user-select: none; user-select: none; background-color: #e4e4e4; filter: progid:DXImageTransform.Microsoft.gradient( startColorstr='#eeeeee', endColorstr='#f4f4f4', GradientType=0 ); background-image: -webkit-gradient(line

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49746	108.128.52.91	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:21:34 UTC	654	OUT	GET /forms/style.css HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.mydomaincontact.com/index.php?domain_name=cocoricopatisserie.co.uk Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-1791724955aaa7a19f73afddbe958b9d=1
2024-09-29 22:21:35 UTC	226	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 22:21:35 GMT Content-Type: text/css Content-Length: 3575 Connection: close Server: nginx Last-Modified: Wed, 04 Sep 2024 11:48:32 GMT ETag: "66d84910-df7" Accept-Ranges: bytes
2024-09-29 22:21:35 UTC	3575	IN	Data Raw: 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 0a 0a 62 6f 64 79 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 23 65 63 65 66 66 31 3b 0a 09 63 6f 6c 6f 72 3a 20 23 32 36 33 32 33 38 3b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 53 6f 75 72 63 65 20 53 61 6e 73 20 50 72 6f 27 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 09 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 20 6f 70 74 69 6d 69 7a 65 4c 65 67 69 62 69 6c 69 74 79 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 72 65 6d 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 72 65 6d 3b 0a 7d 0a 0a 68 31 2c 68 32 2c 68 33 2c 68 33 2c 68 34 2c 68 35 2c 68 36 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 53 6f 75 72 63 65 20 53 65 72 69 66 20 50 72 6f 27 2c 73 65 72 69 66 7d 0a 0a 2e Data Ascii: *{margin:0;padding:0}body {background:#eceff1;color: #263238;font-family: 'Source Sans Pro', sans-serif;text-rendering: optimizeLegibility;font-size:1.2rem;line-height:1.5rem;}h1,h2,h3,h3,h4,h5,h6 {font-family:'Source Serif Pro',serif}.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49745	108.128.52.91	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:21:34 UTC	642	OUT	GET /scripts/jquery.js HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mydomaincontact.com/index.php?domain_name=cocoricopatisserie.co.uk Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-1791724955aaa7a19f73afddbe958b9d=1
2024-09-29 22:21:35 UTC	243	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 22:21:35 GMT Content-Type: application/javascript Content-Length: 85260 Connection: close Server: nginx Last-Modified: Wed, 04 Sep 2024 11:48:32 GMT ETag: "66d84910-14d0c" Accept-Ranges: bytes
2024-09-29 22:21:35 UTC	16141	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 31 2e 35 2e 31 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2c 20 4a 6f 68 6e 20 52 65 73 69 67 0a 20 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6f 72 20 47 50 4c 20 56 65 72 73 69 6f 6e 20 32 20 6c 69 63 65 6e 73 65 73 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2c 20 54 68 65 20 44 Data Ascii: /! jQuery JavaScript Library v1.5.1 * http://jquery.com/ * * Copyright 2011, John Resig * Dual licensed under the MIT or GPL Version 2 licenses. * http://jquery.org/license * * Includes Sizzle.js * http://sizzlejs.com/ * Copyright 2011, The D
2024-09-29 22:21:35 UTC	16379	IN	Data Raw: 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 79 6c 65 22 29 29 2c 68 72 65 66 4e 6f 72 6d 61 6c 69 7a 65 64 3a 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 29 3d 3d 3d 22 2f 61 22 2c 6f 70 61 63 69 74 79 3a 2f 5e 30 2e 35 35 24 2f 2e 74 65 73 74 28 66 2e 73 74 79 6c 65 2e 6f 70 61 63 69 74 79 29 2c 63 73 73 46 6c 6f 61 74 3a 21 21 66 2e 73 74 79 6c 65 2e 63 73 73 46 6c 6f 61 74 2c 63 68 65 63 6b 4f 6e 3a 69 2e 76 61 6c 75 65 3d 3d 3d 22 6f 6e 22 2c 6f 70 74 53 65 6c 65 63 74 65 64 3a 68 2e 73 65 6c 65 63 74 65 64 2c 64 65 6c 65 74 65 45 78 70 61 6e 64 6f 3a 21 30 2c 6f 70 74 44 69 73 61 62 6c 65 64 3a 21 31 2c 63 68 65 63 6b 43 6c 6f 6e 65 3a 21 31 2c 6e 6f 43 6c 6f 6e 65 45 76 65 6e 74 3a 21 30 2c 6e 6f 43 6c 6f 6e 65 43 68 65 63 6b 65 Data Ascii: etAttribute("style")),hrefNormalized:f.getAttribute("href")==="/a",opacity:/^0.55$/.test(f.style.opacity),cssFloat:!!f.style.cssFloat,checkOn:i.value==="on",optSelected:h.selected,deleteExpando:!0,optDisabled:!1,checkClone:!1,noCloneEvent:!0,noCloneChecke
2024-09-29 22:21:35 UTC	16384	IN	Data Raw: 65 74 75 70 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 64 2e 65 76 65 6e 74 2e 61 64 64 28 74 68 69 73 2c 62 2c 63 26 26 63 2e 73 65 6c 65 63 74 6f 72 3f 79 3a 78 2c 61 29 7d 2c 74 65 61 72 64 6f 77 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 64 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 74 68 69 73 2c 62 2c 61 26 26 61 2e 73 65 6c 65 63 74 6f 72 3f 79 3a 78 29 7d 7d 7d 29 2c 64 2e 73 75 70 70 6f 72 74 2e 73 75 62 6d 69 74 42 75 62 62 6c 65 73 7c 7c 28 64 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2e 73 75 62 6d 69 74 3d 7b 73 65 74 75 70 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 74 68 69 73 2e 6e 6f 64 65 4e 61 6d 65 26 26 74 68 69 73 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 21 3d 3d 22 66 6f 72 6d 22 29 64 2e 65 76 65 6e Data Ascii: etup:function(c){d.event.add(this,b,c&&c.selector?y:x,a)},teardown:function(a){d.event.remove(this,b,a&&a.selector?y:x)}}}),d.support.submitBubbles\|\|(d.event.special.submit={setup:function(a,b){if(this.nodeName&&this.nodeName.toLowerCase()!=="form")d.even
2024-09-29 22:21:35 UTC	16384	IN	Data Raw: 28 21 67 26 26 21 6b 2e 69 73 58 4d 4c 28 65 29 29 7b 76 61 72 20 68 3d 2f 5e 28 5c 77 2b 24 29 7c 5e 5c 2e 28 5b 5c 77 5c 2d 5d 2b 24 29 7c 5e 23 28 5b 5c 77 5c 2d 5d 2b 24 29 2f 2e 65 78 65 63 28 62 29 3b 69 66 28 68 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 31 7c 7c 65 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 39 29 29 7b 69 66 28 68 5b 31 5d 29 72 65 74 75 72 6e 20 70 28 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 62 29 2c 66 29 3b 69 66 28 68 5b 32 5d 26 26 6c 2e 66 69 6e 64 2e 43 4c 41 53 53 26 26 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 70 28 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 68 5b 32 5d 29 2c 66 29 7d 69 66 28 65 2e 6e 6f 64 65 Data Ascii: (!g&&!k.isXML(e)){var h=/^(\w+$)\|^\.([\w\-]+$)\|^#([\w\-]+$)/.exec(b);if(h&&(e.nodeType===1\|\|e.nodeType===9)){if(h[1])return p(e.getElementsByTagName(b),f);if(h[2]&&l.find.CLASS&&e.getElementsByClassName)return p(e.getElementsByClassName(h[2]),f)}if(e.node
2024-09-29 22:21:35 UTC	16384	IN	Data Raw: 62 49 3d 7b 7d 2c 62 4a 2c 62 4b 3b 74 72 79 7b 62 4a 3d 63 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 7d 63 61 74 63 68 28 62 4c 29 7b 62 4a 3d 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 2c 62 4a 2e 68 72 65 66 3d 22 22 2c 62 4a 3d 62 4a 2e 68 72 65 66 7d 62 4b 3d 62 46 2e 65 78 65 63 28 62 4a 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 2c 64 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 6c 6f 61 64 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 65 29 7b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 26 26 62 47 29 72 65 74 75 72 6e 20 62 47 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 69 66 28 21 74 68 69 73 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 74 68 69 73 3b 76 61 72 20 66 3d 61 2e 69 6e 64 65 78 4f Data Ascii: bI={},bJ,bK;try{bJ=c.location.href}catch(bL){bJ=c.createElement("a"),bJ.href="",bJ=bJ.href}bK=bF.exec(bJ.toLowerCase()),d.fn.extend({load:function(a,c,e){if(typeof a!=="string"&&bG)return bG.apply(this,arguments);if(!this.length)return this;var f=a.indexO
2024-09-29 22:21:35 UTC	3588	IN	Data Raw: 6f 6c 6c 4c 65 66 74 29 29 3b 72 65 74 75 72 6e 7b 74 6f 70 3a 6c 2c 6c 65 66 74 3a 6d 7d 7d 2c 64 2e 6f 66 66 73 65 74 3d 7b 69 6e 69 74 69 61 6c 69 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 63 2e 62 6f 64 79 2c 62 3d 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 65 2c 66 2c 67 2c 68 2c 69 3d 70 61 72 73 65 46 6c 6f 61 74 28 64 2e 63 73 73 28 61 2c 22 6d 61 72 67 69 6e 54 6f 70 22 29 29 7c 7c 30 2c 6a 3d 22 3c 64 69 76 20 73 74 79 6c 65 3d 27 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 62 6f 72 64 65 72 3a 35 70 78 20 73 6f 6c 69 64 20 23 30 30 30 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 70 78 3b 68 65 69 67 68 74 3a 31 70 78 Data Ascii: ollLeft));return{top:l,left:m}},d.offset={initialize:function(){var a=c.body,b=c.createElement("div"),e,f,g,h,i=parseFloat(d.css(a,"marginTop"))\|\|0,j="<div style='position:absolute;top:0;left:0;margin:0;border:5px solid #000;padding:0;width:1px;height:1px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49744	108.128.52.91	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:21:34 UTC	655	OUT	GET /scripts/select2/select2.min.js HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mydomaincontact.com/index.php?domain_name=cocoricopatisserie.co.uk Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-1791724955aaa7a19f73afddbe958b9d=1
2024-09-29 22:21:35 UTC	242	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 22:21:35 GMT Content-Type: application/javascript Content-Length: 41867 Connection: close Server: nginx Last-Modified: Wed, 04 Sep 2024 11:48:32 GMT ETag: "66d84910-a38b" Accept-Ranges: bytes
2024-09-29 22:21:35 UTC	16142	IN	Data Raw: 2f 2a 0a 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 49 67 6f 72 20 56 61 79 6e 62 65 72 67 0a 0a 56 65 72 73 69 6f 6e 3a 20 33 2e 33 2e 32 20 54 69 6d 65 73 74 61 6d 70 3a 20 4d 6f 6e 20 4d 61 72 20 32 35 20 31 32 3a 31 34 3a 31 38 20 50 44 54 20 32 30 31 33 0a 0a 54 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 73 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 2c 20 56 65 72 73 69 6f 6e 20 32 2e 30 20 28 74 68 65 20 22 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 22 29 20 6f 72 20 74 68 65 20 47 4e 55 0a 47 65 6e 65 72 61 6c 20 50 75 62 6c 69 63 20 4c 69 63 65 6e 73 65 20 76 65 72 73 69 6f 6e 20 32 20 28 74 68 65 20 22 47 50 4c 20 4c 69 63 65 6e 73 65 22 29 2e 20 59 6f 75 20 6d 61 79 20 63 68 6f 6f 73 65 Data Ascii: /*Copyright 2012 Igor VaynbergVersion: 3.3.2 Timestamp: Mon Mar 25 12:14:18 PDT 2013This software is licensed under the Apache License, Version 2.0 (the "Apache License") or the GNUGeneral Public License version 2 (the "GPL License"). You may choose
2024-09-29 22:21:35 UTC	16379	IN	Data Raw: 66 28 74 68 69 73 2e 6f 70 65 6e 65 64 28 29 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 49 64 2c 63 3d 22 73 63 72 6f 6c 6c 2e 22 2b 62 2c 64 3d 22 72 65 73 69 7a 65 2e 22 2b 62 2c 65 3d 22 6f 72 69 65 6e 74 61 74 69 6f 6e 63 68 61 6e 67 65 2e 22 2b 62 3b 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 2e 70 61 72 65 6e 74 73 28 29 2e 61 64 64 28 77 69 6e 64 6f 77 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 28 74 68 69 73 29 2e 75 6e 62 69 6e 64 28 63 29 2e 75 6e 62 69 6e 64 28 64 29 2e 75 6e 62 69 6e 64 28 65 29 7d 29 2c 74 68 69 73 2e 63 6c 65 61 72 44 72 6f 70 64 6f 77 6e 41 6c 69 67 6e 6d 65 6e 74 50 72 65 66 65 72 65 6e 63 65 28 29 2c 61 28 22 23 73 65 6c 65 63 74 32 2d 64 72 6f 70 2d 6d 61 73 6b 22 29 2e 68 69 64 65 28 Data Ascii: f(this.opened()){var b=this.containerId,c="scroll."+b,d="resize."+b,e="orientationchange."+b;this.container.parents().add(window).each(function(){a(this).unbind(c).unbind(d).unbind(e)}),this.clearDropdownAlignmentPreference(),a("#select2-drop-mask").hide(
2024-09-29 22:21:35 UTC	9346	IN	Data Raw: 7d 7d 7d 29 29 2c 74 68 69 73 2e 73 65 61 72 63 68 2e 62 69 6e 64 28 22 6b 65 79 75 70 22 2c 74 68 69 73 2e 62 69 6e 64 28 74 68 69 73 2e 72 65 73 69 7a 65 53 65 61 72 63 68 29 29 2c 74 68 69 73 2e 73 65 61 72 63 68 2e 62 69 6e 64 28 22 62 6c 75 72 22 2c 74 68 69 73 2e 62 69 6e 64 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 61 63 74 69 76 65 22 29 2c 74 68 69 73 2e 73 65 61 72 63 68 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 73 65 6c 65 63 74 32 2d 66 6f 63 75 73 65 64 22 29 2c 74 68 69 73 2e 6f 70 65 6e 65 64 28 29 7c 7c 74 68 69 73 2e 63 6c 65 61 72 53 65 61 72 63 68 28 29 2c 61 2e 73 74 6f 70 49 6d 6d 65 64 69 61 74 65 50 Data Ascii: }}})),this.search.bind("keyup",this.bind(this.resizeSearch)),this.search.bind("blur",this.bind(function(a){this.container.removeClass("select2-container-active"),this.search.removeClass("select2-focused"),this.opened()\|\|this.clearSearch(),a.stopImmediateP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49750	108.128.52.91	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:21:36 UTC	640	OUT	GET /forms/script.js HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mydomaincontact.com/index.php?domain_name=cocoricopatisserie.co.uk Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-1791724955aaa7a19f73afddbe958b9d=1
2024-09-29 22:21:36 UTC	240	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 22:21:36 GMT Content-Type: application/javascript Content-Length: 2421 Connection: close Server: nginx Last-Modified: Wed, 04 Sep 2024 11:48:32 GMT ETag: "66d84910-975" Accept-Ranges: bytes
2024-09-29 22:21:36 UTC	2421	IN	Data Raw: 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 24 28 27 69 6e 70 75 74 2e 69 6e 70 75 74 74 65 78 74 3a 66 69 72 73 74 27 29 2e 66 6f 63 75 73 28 29 3b 0a 0a 0a 09 2f 2f 20 2d 2d 20 69 6e 69 74 69 61 74 65 20 73 61 6c 65 20 6f 72 20 73 65 6e 64 20 6f 66 66 65 72 0a 09 24 28 22 69 6e 70 75 74 2e 73 75 62 6d 69 74 22 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 09 09 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 0a 09 09 24 28 74 68 69 73 29 2e 61 64 64 43 6c 61 73 73 28 22 73 70 69 6e 6e 65 72 22 29 3b 0a 09 09 24 28 22 2e 69 6e 70 75 74 45 72 72 6f 72 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 69 6e 70 75 74 45 72 72 6f 72 22 29 3b 0a 0a 20 20 20 20 20 20 20 20 Data Ascii: $(document).ready(function() { $('input.inputtext:first').focus();// -- initiate sale or send offer$("input.submit").click(function(e) {e.preventDefault();$(this).addClass("spinner");$(".inputError").removeClass("inputError");

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49751	108.128.52.91	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:21:36 UTC	646	OUT	GET /forms/script-addon.js HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mydomaincontact.com/index.php?domain_name=cocoricopatisserie.co.uk Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-1791724955aaa7a19f73afddbe958b9d=1
2024-09-29 22:21:36 UTC	239	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 22:21:36 GMT Content-Type: application/javascript Content-Length: 396 Connection: close Server: nginx Last-Modified: Wed, 04 Sep 2024 11:48:32 GMT ETag: "66d84910-18c" Accept-Ranges: bytes
2024-09-29 22:21:36 UTC	396	IN	Data Raw: 2f 2f 20 2d 2d 20 61 64 64 69 74 69 6f 6e 61 6c 20 73 63 72 69 70 74 20 66 6f 72 20 74 68 65 20 73 61 6c 65 20 6f 66 66 65 72 20 76 65 72 73 69 6f 6e 20 6f 66 20 74 68 65 20 66 6f 72 6d 0a 0a 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 24 28 22 23 63 75 72 72 65 6e 63 79 22 29 2e 73 65 6c 65 63 74 32 28 7b 6d 69 6e 69 6d 75 6d 52 65 73 75 6c 74 73 46 6f 72 53 65 61 72 63 68 3a 20 2d 31 7d 29 3b 0a 7d 29 3b 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 53 61 6c 65 50 72 69 63 65 56 61 6c 69 64 28 29 20 7b 0a 20 20 20 20 24 28 22 23 70 72 69 63 65 48 6f 6c 64 65 72 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 69 6e 70 75 74 45 72 72 6f 72 27 29 3b 0a 20 20 20 20 76 61 72 20 76 61 6c 20 3d 20 24 28 Data Ascii: // -- additional script for the sale offer version of the form$(document).ready(function() { $("#currency").select2({minimumResultsForSearch: -1});});function isSalePriceValid() { $("#priceHolder").removeClass('inputError'); var val = $(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49749	108.128.52.91	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:21:36 UTC	701	OUT	GET /images/trust.svg HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mydomaincontact.com/index.php?domain_name=cocoricopatisserie.co.uk Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-1791724955aaa7a19f73afddbe958b9d=1
2024-09-29 22:21:36 UTC	233	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 22:21:36 GMT Content-Type: image/svg+xml Content-Length: 20199 Connection: close Server: nginx Last-Modified: Wed, 04 Sep 2024 11:48:32 GMT ETag: "66d84910-4ee7" Accept-Ranges: bytes
2024-09-29 22:21:36 UTC	16151	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 38 38 20 33 38 22 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 09 2e 73 74 30 7b 66 69 6c 6c 3a 23 62 30 62 65 63 35 3b 7d 0a 3c 2f 73 74 79 6c 65 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 32 34 34 2e 37 20 31 32 2e 32 76 32 2e 31 63 30 20 30 2e 33 2d 30 2e 31 20 30 2e 36 2d 30 2e 32 20 30 2e 38 73 2d 30 2e 34 20 30 2e 33 2d 30 2e 36 20 30 2e 33 63 2d 30 2e 32 20 30 2d 30 2e 34 2d 30 2e 31 2d 30 2e 36 2d 30 2e 33 73 2d 30 2e 32 2d 30 2e 34 2d 30 2e 32 2d 30 2e 38 76 2d 32 2e 35 63 30 2d 30 2e 34 20 30 2d 30 2e 37 20 30 2d 30 2e 39 73 2d 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 288 38"><style type="text/css">.st0{fill:#b0bec5;}</style><path class="st0" d="M244.7 12.2v2.1c0 0.3-0.1 0.6-0.2 0.8s-0.4 0.3-0.6 0.3c-0.2 0-0.4-0.1-0.6-0.3s-0.2-0.4-0.2-0.8v-2.5c0-0.4 0-0.7 0-0.9s-0
2024-09-29 22:21:36 UTC	4048	IN	Data Raw: 33 2d 30 2e 32 20 30 2e 32 2d 30 2e 31 20 30 2e 34 2d 30 2e 31 63 30 2e 31 20 30 20 30 2e 33 20 30 20 30 2e 34 20 30 2e 31 73 30 2e 32 20 30 2e 31 20 30 2e 33 20 30 2e 32 20 30 2e 32 20 30 2e 32 20 30 2e 32 20 30 2e 33 20 30 2e 31 20 30 2e 32 20 30 2e 31 20 30 2e 34 20 30 20 30 2e 33 2d 30 2e 31 20 30 2e 34 20 2d 30 2e 31 20 30 2e 32 2d 30 2e 32 20 30 2e 33 20 2d 30 2e 32 20 30 2e 32 2d 30 2e 33 20 30 2e 32 20 2d 30 2e 33 20 30 2e 31 2d 30 2e 34 20 30 2e 31 63 2d 30 2e 31 20 30 2d 30 2e 33 20 30 2d 30 2e 34 2d 30 2e 31 73 2d 30 2e 32 2d 30 2e 31 2d 30 2e 33 2d 30 2e 32 20 2d 30 2e 32 2d 30 2e 32 2d 30 2e 32 2d 30 2e 33 53 31 35 37 2e 33 20 31 30 2e 35 20 31 35 37 2e 33 20 31 30 2e 34 7a 4d 31 35 37 2e 34 20 31 32 2e 37 68 31 2e 38 76 37 2e 34 68 2d 31 2e Data Ascii: 3-0.2 0.2-0.1 0.4-0.1c0.1 0 0.3 0 0.4 0.1s0.2 0.1 0.3 0.2 0.2 0.2 0.2 0.3 0.1 0.2 0.1 0.4 0 0.3-0.1 0.4 -0.1 0.2-0.2 0.3 -0.2 0.2-0.3 0.2 -0.3 0.1-0.4 0.1c-0.1 0-0.3 0-0.4-0.1s-0.2-0.1-0.3-0.2 -0.2-0.2-0.2-0.3S157.3 10.5 157.3 10.4zM157.4 12.7h1.8v7.4h-1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49754	108.128.52.91	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:21:36 UTC	425	OUT	GET /scripts/select2/select2.min.js HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-1791724955aaa7a19f73afddbe958b9d=1
2024-09-29 22:21:36 UTC	242	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 22:21:36 GMT Content-Type: application/javascript Content-Length: 41867 Connection: close Server: nginx Last-Modified: Wed, 04 Sep 2024 11:48:32 GMT ETag: "66d84910-a38b" Accept-Ranges: bytes
2024-09-29 22:21:36 UTC	16142	IN	Data Raw: 2f 2a 0a 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 49 67 6f 72 20 56 61 79 6e 62 65 72 67 0a 0a 56 65 72 73 69 6f 6e 3a 20 33 2e 33 2e 32 20 54 69 6d 65 73 74 61 6d 70 3a 20 4d 6f 6e 20 4d 61 72 20 32 35 20 31 32 3a 31 34 3a 31 38 20 50 44 54 20 32 30 31 33 0a 0a 54 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 73 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 2c 20 56 65 72 73 69 6f 6e 20 32 2e 30 20 28 74 68 65 20 22 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 22 29 20 6f 72 20 74 68 65 20 47 4e 55 0a 47 65 6e 65 72 61 6c 20 50 75 62 6c 69 63 20 4c 69 63 65 6e 73 65 20 76 65 72 73 69 6f 6e 20 32 20 28 74 68 65 20 22 47 50 4c 20 4c 69 63 65 6e 73 65 22 29 2e 20 59 6f 75 20 6d 61 79 20 63 68 6f 6f 73 65 Data Ascii: /*Copyright 2012 Igor VaynbergVersion: 3.3.2 Timestamp: Mon Mar 25 12:14:18 PDT 2013This software is licensed under the Apache License, Version 2.0 (the "Apache License") or the GNUGeneral Public License version 2 (the "GPL License"). You may choose
2024-09-29 22:21:36 UTC	16379	IN	Data Raw: 66 28 74 68 69 73 2e 6f 70 65 6e 65 64 28 29 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 49 64 2c 63 3d 22 73 63 72 6f 6c 6c 2e 22 2b 62 2c 64 3d 22 72 65 73 69 7a 65 2e 22 2b 62 2c 65 3d 22 6f 72 69 65 6e 74 61 74 69 6f 6e 63 68 61 6e 67 65 2e 22 2b 62 3b 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 2e 70 61 72 65 6e 74 73 28 29 2e 61 64 64 28 77 69 6e 64 6f 77 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 28 74 68 69 73 29 2e 75 6e 62 69 6e 64 28 63 29 2e 75 6e 62 69 6e 64 28 64 29 2e 75 6e 62 69 6e 64 28 65 29 7d 29 2c 74 68 69 73 2e 63 6c 65 61 72 44 72 6f 70 64 6f 77 6e 41 6c 69 67 6e 6d 65 6e 74 50 72 65 66 65 72 65 6e 63 65 28 29 2c 61 28 22 23 73 65 6c 65 63 74 32 2d 64 72 6f 70 2d 6d 61 73 6b 22 29 2e 68 69 64 65 28 Data Ascii: f(this.opened()){var b=this.containerId,c="scroll."+b,d="resize."+b,e="orientationchange."+b;this.container.parents().add(window).each(function(){a(this).unbind(c).unbind(d).unbind(e)}),this.clearDropdownAlignmentPreference(),a("#select2-drop-mask").hide(
2024-09-29 22:21:36 UTC	9346	IN	Data Raw: 7d 7d 7d 29 29 2c 74 68 69 73 2e 73 65 61 72 63 68 2e 62 69 6e 64 28 22 6b 65 79 75 70 22 2c 74 68 69 73 2e 62 69 6e 64 28 74 68 69 73 2e 72 65 73 69 7a 65 53 65 61 72 63 68 29 29 2c 74 68 69 73 2e 73 65 61 72 63 68 2e 62 69 6e 64 28 22 62 6c 75 72 22 2c 74 68 69 73 2e 62 69 6e 64 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 61 63 74 69 76 65 22 29 2c 74 68 69 73 2e 73 65 61 72 63 68 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 73 65 6c 65 63 74 32 2d 66 6f 63 75 73 65 64 22 29 2c 74 68 69 73 2e 6f 70 65 6e 65 64 28 29 7c 7c 74 68 69 73 2e 63 6c 65 61 72 53 65 61 72 63 68 28 29 2c 61 2e 73 74 6f 70 49 6d 6d 65 64 69 61 74 65 50 Data Ascii: }}})),this.search.bind("keyup",this.bind(this.resizeSearch)),this.search.bind("blur",this.bind(function(a){this.container.removeClass("select2-container-active"),this.search.removeClass("select2-focused"),this.opened()\|\|this.clearSearch(),a.stopImmediateP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49753	108.128.52.91	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:21:36 UTC	412	OUT	GET /scripts/jquery.js HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-1791724955aaa7a19f73afddbe958b9d=1
2024-09-29 22:21:36 UTC	243	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 22:21:36 GMT Content-Type: application/javascript Content-Length: 85260 Connection: close Server: nginx Last-Modified: Wed, 04 Sep 2024 11:48:32 GMT ETag: "66d84910-14d0c" Accept-Ranges: bytes
2024-09-29 22:21:36 UTC	16141	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 31 2e 35 2e 31 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2c 20 4a 6f 68 6e 20 52 65 73 69 67 0a 20 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6f 72 20 47 50 4c 20 56 65 72 73 69 6f 6e 20 32 20 6c 69 63 65 6e 73 65 73 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2c 20 54 68 65 20 44 Data Ascii: /! jQuery JavaScript Library v1.5.1 * http://jquery.com/ * * Copyright 2011, John Resig * Dual licensed under the MIT or GPL Version 2 licenses. * http://jquery.org/license * * Includes Sizzle.js * http://sizzlejs.com/ * Copyright 2011, The D
2024-09-29 22:21:36 UTC	16379	IN	Data Raw: 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 79 6c 65 22 29 29 2c 68 72 65 66 4e 6f 72 6d 61 6c 69 7a 65 64 3a 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 29 3d 3d 3d 22 2f 61 22 2c 6f 70 61 63 69 74 79 3a 2f 5e 30 2e 35 35 24 2f 2e 74 65 73 74 28 66 2e 73 74 79 6c 65 2e 6f 70 61 63 69 74 79 29 2c 63 73 73 46 6c 6f 61 74 3a 21 21 66 2e 73 74 79 6c 65 2e 63 73 73 46 6c 6f 61 74 2c 63 68 65 63 6b 4f 6e 3a 69 2e 76 61 6c 75 65 3d 3d 3d 22 6f 6e 22 2c 6f 70 74 53 65 6c 65 63 74 65 64 3a 68 2e 73 65 6c 65 63 74 65 64 2c 64 65 6c 65 74 65 45 78 70 61 6e 64 6f 3a 21 30 2c 6f 70 74 44 69 73 61 62 6c 65 64 3a 21 31 2c 63 68 65 63 6b 43 6c 6f 6e 65 3a 21 31 2c 6e 6f 43 6c 6f 6e 65 45 76 65 6e 74 3a 21 30 2c 6e 6f 43 6c 6f 6e 65 43 68 65 63 6b 65 Data Ascii: etAttribute("style")),hrefNormalized:f.getAttribute("href")==="/a",opacity:/^0.55$/.test(f.style.opacity),cssFloat:!!f.style.cssFloat,checkOn:i.value==="on",optSelected:h.selected,deleteExpando:!0,optDisabled:!1,checkClone:!1,noCloneEvent:!0,noCloneChecke
2024-09-29 22:21:36 UTC	16384	IN	Data Raw: 65 74 75 70 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 64 2e 65 76 65 6e 74 2e 61 64 64 28 74 68 69 73 2c 62 2c 63 26 26 63 2e 73 65 6c 65 63 74 6f 72 3f 79 3a 78 2c 61 29 7d 2c 74 65 61 72 64 6f 77 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 64 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 74 68 69 73 2c 62 2c 61 26 26 61 2e 73 65 6c 65 63 74 6f 72 3f 79 3a 78 29 7d 7d 7d 29 2c 64 2e 73 75 70 70 6f 72 74 2e 73 75 62 6d 69 74 42 75 62 62 6c 65 73 7c 7c 28 64 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2e 73 75 62 6d 69 74 3d 7b 73 65 74 75 70 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 74 68 69 73 2e 6e 6f 64 65 4e 61 6d 65 26 26 74 68 69 73 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 21 3d 3d 22 66 6f 72 6d 22 29 64 2e 65 76 65 6e Data Ascii: etup:function(c){d.event.add(this,b,c&&c.selector?y:x,a)},teardown:function(a){d.event.remove(this,b,a&&a.selector?y:x)}}}),d.support.submitBubbles\|\|(d.event.special.submit={setup:function(a,b){if(this.nodeName&&this.nodeName.toLowerCase()!=="form")d.even
2024-09-29 22:21:36 UTC	16384	IN	Data Raw: 28 21 67 26 26 21 6b 2e 69 73 58 4d 4c 28 65 29 29 7b 76 61 72 20 68 3d 2f 5e 28 5c 77 2b 24 29 7c 5e 5c 2e 28 5b 5c 77 5c 2d 5d 2b 24 29 7c 5e 23 28 5b 5c 77 5c 2d 5d 2b 24 29 2f 2e 65 78 65 63 28 62 29 3b 69 66 28 68 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 31 7c 7c 65 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 39 29 29 7b 69 66 28 68 5b 31 5d 29 72 65 74 75 72 6e 20 70 28 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 62 29 2c 66 29 3b 69 66 28 68 5b 32 5d 26 26 6c 2e 66 69 6e 64 2e 43 4c 41 53 53 26 26 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 70 28 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 68 5b 32 5d 29 2c 66 29 7d 69 66 28 65 2e 6e 6f 64 65 Data Ascii: (!g&&!k.isXML(e)){var h=/^(\w+$)\|^\.([\w\-]+$)\|^#([\w\-]+$)/.exec(b);if(h&&(e.nodeType===1\|\|e.nodeType===9)){if(h[1])return p(e.getElementsByTagName(b),f);if(h[2]&&l.find.CLASS&&e.getElementsByClassName)return p(e.getElementsByClassName(h[2]),f)}if(e.node
2024-09-29 22:21:36 UTC	16384	IN	Data Raw: 62 49 3d 7b 7d 2c 62 4a 2c 62 4b 3b 74 72 79 7b 62 4a 3d 63 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 7d 63 61 74 63 68 28 62 4c 29 7b 62 4a 3d 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 2c 62 4a 2e 68 72 65 66 3d 22 22 2c 62 4a 3d 62 4a 2e 68 72 65 66 7d 62 4b 3d 62 46 2e 65 78 65 63 28 62 4a 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 2c 64 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 6c 6f 61 64 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 65 29 7b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 26 26 62 47 29 72 65 74 75 72 6e 20 62 47 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 69 66 28 21 74 68 69 73 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 74 68 69 73 3b 76 61 72 20 66 3d 61 2e 69 6e 64 65 78 4f Data Ascii: bI={},bJ,bK;try{bJ=c.location.href}catch(bL){bJ=c.createElement("a"),bJ.href="",bJ=bJ.href}bK=bF.exec(bJ.toLowerCase()),d.fn.extend({load:function(a,c,e){if(typeof a!=="string"&&bG)return bG.apply(this,arguments);if(!this.length)return this;var f=a.indexO
2024-09-29 22:21:36 UTC	3588	IN	Data Raw: 6f 6c 6c 4c 65 66 74 29 29 3b 72 65 74 75 72 6e 7b 74 6f 70 3a 6c 2c 6c 65 66 74 3a 6d 7d 7d 2c 64 2e 6f 66 66 73 65 74 3d 7b 69 6e 69 74 69 61 6c 69 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 63 2e 62 6f 64 79 2c 62 3d 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 65 2c 66 2c 67 2c 68 2c 69 3d 70 61 72 73 65 46 6c 6f 61 74 28 64 2e 63 73 73 28 61 2c 22 6d 61 72 67 69 6e 54 6f 70 22 29 29 7c 7c 30 2c 6a 3d 22 3c 64 69 76 20 73 74 79 6c 65 3d 27 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 62 6f 72 64 65 72 3a 35 70 78 20 73 6f 6c 69 64 20 23 30 30 30 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 70 78 3b 68 65 69 67 68 74 3a 31 70 78 Data Ascii: ollLeft));return{top:l,left:m}},d.offset={initialize:function(){var a=c.body,b=c.createElement("div"),e,f,g,h,i=parseFloat(d.css(a,"marginTop"))\|\|0,j="<div style='position:absolute;top:0;left:0;margin:0;border:5px solid #000;padding:0;width:1px;height:1px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49755	108.128.52.91	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:21:37 UTC	693	OUT	GET /scripts/select2/select2.png HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mydomaincontact.com/scripts/select2/select2.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-1791724955aaa7a19f73afddbe958b9d=1
2024-09-29 22:21:37 UTC	226	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 22:21:37 GMT Content-Type: image/png Content-Length: 613 Connection: close Server: nginx Last-Modified: Wed, 04 Sep 2024 11:48:32 GMT ETag: "66d84910-265" Accept-Ranges: bytes
2024-09-29 22:21:37 UTC	613	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 28 08 06 00 00 00 a2 bb 99 ff 00 00 02 2c 49 44 41 54 78 da ed d9 cf 4b 14 61 1c c7 f1 b5 08 4a 8c 85 d6 2e 62 5d 2a 28 c9 88 0e 11 76 a9 64 d6 0d a2 3c 14 fd a0 1f 50 04 fd 03 86 21 52 07 71 b7 54 e8 d0 a1 48 04 23 08 bc 47 14 11 79 ed 52 d8 af a5 8b 94 85 81 48 74 30 4c 98 3e bd 85 ef e1 39 b8 2c 6d 29 db d7 79 e0 75 98 d9 85 7d de 3b cf cc 0e b3 29 49 cb 4a 12 bc 2c 83 ff c7 51 28 14 ee e3 58 b0 1d e1 1e 56 b8 0b 26 ea 12 84 4f 68 c2 46 14 21 0c 7b 0c 6e c6 7b 08 93 98 80 2c fa a0 d7 25 5d 8f d7 90 19 47 63 8a e1 35 78 0b 3e 40 e6 33 b6 bb 0c 26 ac 05 93 c1 32 1e 0b 96 f7 99 25 0f e6 43 d3 c8 2c 62 f0 45 08 13 d8 80 75 c1 39 3d 54 36 98 37 9d c4 29 9c 08 9c 45 ba c2 09 0d e3 f1 22 1f Data Ascii: PNGIHDR<(,IDATxKaJ.b]*(vd<P!RqTH#GyRHt0L>9,m)yu};)IJ,Q(XV&OhF!{n{,%]Gc5x>@3&2%C,bEu9=T67)E"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49758	108.128.52.91	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:21:37 UTC	416	OUT	GET /forms/script-addon.js HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-1791724955aaa7a19f73afddbe958b9d=1
2024-09-29 22:21:37 UTC	239	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 22:21:37 GMT Content-Type: application/javascript Content-Length: 396 Connection: close Server: nginx Last-Modified: Wed, 04 Sep 2024 11:48:32 GMT ETag: "66d84910-18c" Accept-Ranges: bytes
2024-09-29 22:21:37 UTC	396	IN	Data Raw: 2f 2f 20 2d 2d 20 61 64 64 69 74 69 6f 6e 61 6c 20 73 63 72 69 70 74 20 66 6f 72 20 74 68 65 20 73 61 6c 65 20 6f 66 66 65 72 20 76 65 72 73 69 6f 6e 20 6f 66 20 74 68 65 20 66 6f 72 6d 0a 0a 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 24 28 22 23 63 75 72 72 65 6e 63 79 22 29 2e 73 65 6c 65 63 74 32 28 7b 6d 69 6e 69 6d 75 6d 52 65 73 75 6c 74 73 46 6f 72 53 65 61 72 63 68 3a 20 2d 31 7d 29 3b 0a 7d 29 3b 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 53 61 6c 65 50 72 69 63 65 56 61 6c 69 64 28 29 20 7b 0a 20 20 20 20 24 28 22 23 70 72 69 63 65 48 6f 6c 64 65 72 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 69 6e 70 75 74 45 72 72 6f 72 27 29 3b 0a 20 20 20 20 76 61 72 20 76 61 6c 20 3d 20 24 28 Data Ascii: // -- additional script for the sale offer version of the form$(document).ready(function() { $("#currency").select2({minimumResultsForSearch: -1});});function isSalePriceValid() { $("#priceHolder").removeClass('inputError'); var val = $(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49757	108.128.52.91	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:21:37 UTC	410	OUT	GET /forms/script.js HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-1791724955aaa7a19f73afddbe958b9d=1
2024-09-29 22:21:37 UTC	240	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 22:21:37 GMT Content-Type: application/javascript Content-Length: 2421 Connection: close Server: nginx Last-Modified: Wed, 04 Sep 2024 11:48:32 GMT ETag: "66d84910-975" Accept-Ranges: bytes
2024-09-29 22:21:37 UTC	2421	IN	Data Raw: 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 24 28 27 69 6e 70 75 74 2e 69 6e 70 75 74 74 65 78 74 3a 66 69 72 73 74 27 29 2e 66 6f 63 75 73 28 29 3b 0a 0a 0a 09 2f 2f 20 2d 2d 20 69 6e 69 74 69 61 74 65 20 73 61 6c 65 20 6f 72 20 73 65 6e 64 20 6f 66 66 65 72 0a 09 24 28 22 69 6e 70 75 74 2e 73 75 62 6d 69 74 22 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 09 09 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 0a 09 09 24 28 74 68 69 73 29 2e 61 64 64 43 6c 61 73 73 28 22 73 70 69 6e 6e 65 72 22 29 3b 0a 09 09 24 28 22 2e 69 6e 70 75 74 45 72 72 6f 72 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 69 6e 70 75 74 45 72 72 6f 72 22 29 3b 0a 0a 20 20 20 20 20 20 20 20 Data Ascii: $(document).ready(function() { $('input.inputtext:first').focus();// -- initiate sale or send offer$("input.submit").click(function(e) {e.preventDefault();$(this).addClass("spinner");$(".inputError").removeClass("inputError");

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49759	108.128.52.91	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:21:37 UTC	411	OUT	GET /images/trust.svg HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-1791724955aaa7a19f73afddbe958b9d=1
2024-09-29 22:21:37 UTC	233	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 22:21:37 GMT Content-Type: image/svg+xml Content-Length: 20199 Connection: close Server: nginx Last-Modified: Wed, 04 Sep 2024 11:48:32 GMT ETag: "66d84910-4ee7" Accept-Ranges: bytes
2024-09-29 22:21:37 UTC	16151	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 38 38 20 33 38 22 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 09 2e 73 74 30 7b 66 69 6c 6c 3a 23 62 30 62 65 63 35 3b 7d 0a 3c 2f 73 74 79 6c 65 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 32 34 34 2e 37 20 31 32 2e 32 76 32 2e 31 63 30 20 30 2e 33 2d 30 2e 31 20 30 2e 36 2d 30 2e 32 20 30 2e 38 73 2d 30 2e 34 20 30 2e 33 2d 30 2e 36 20 30 2e 33 63 2d 30 2e 32 20 30 2d 30 2e 34 2d 30 2e 31 2d 30 2e 36 2d 30 2e 33 73 2d 30 2e 32 2d 30 2e 34 2d 30 2e 32 2d 30 2e 38 76 2d 32 2e 35 63 30 2d 30 2e 34 20 30 2d 30 2e 37 20 30 2d 30 2e 39 73 2d 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 288 38"><style type="text/css">.st0{fill:#b0bec5;}</style><path class="st0" d="M244.7 12.2v2.1c0 0.3-0.1 0.6-0.2 0.8s-0.4 0.3-0.6 0.3c-0.2 0-0.4-0.1-0.6-0.3s-0.2-0.4-0.2-0.8v-2.5c0-0.4 0-0.7 0-0.9s-0
2024-09-29 22:21:37 UTC	4048	IN	Data Raw: 33 2d 30 2e 32 20 30 2e 32 2d 30 2e 31 20 30 2e 34 2d 30 2e 31 63 30 2e 31 20 30 20 30 2e 33 20 30 20 30 2e 34 20 30 2e 31 73 30 2e 32 20 30 2e 31 20 30 2e 33 20 30 2e 32 20 30 2e 32 20 30 2e 32 20 30 2e 32 20 30 2e 33 20 30 2e 31 20 30 2e 32 20 30 2e 31 20 30 2e 34 20 30 20 30 2e 33 2d 30 2e 31 20 30 2e 34 20 2d 30 2e 31 20 30 2e 32 2d 30 2e 32 20 30 2e 33 20 2d 30 2e 32 20 30 2e 32 2d 30 2e 33 20 30 2e 32 20 2d 30 2e 33 20 30 2e 31 2d 30 2e 34 20 30 2e 31 63 2d 30 2e 31 20 30 2d 30 2e 33 20 30 2d 30 2e 34 2d 30 2e 31 73 2d 30 2e 32 2d 30 2e 31 2d 30 2e 33 2d 30 2e 32 20 2d 30 2e 32 2d 30 2e 32 2d 30 2e 32 2d 30 2e 33 53 31 35 37 2e 33 20 31 30 2e 35 20 31 35 37 2e 33 20 31 30 2e 34 7a 4d 31 35 37 2e 34 20 31 32 2e 37 68 31 2e 38 76 37 2e 34 68 2d 31 2e Data Ascii: 3-0.2 0.2-0.1 0.4-0.1c0.1 0 0.3 0 0.4 0.1s0.2 0.1 0.3 0.2 0.2 0.2 0.2 0.3 0.1 0.2 0.1 0.4 0 0.3-0.1 0.4 -0.1 0.2-0.2 0.3 -0.2 0.2-0.3 0.2 -0.3 0.1-0.4 0.1c-0.1 0-0.3 0-0.4-0.1s-0.2-0.1-0.3-0.2 -0.2-0.2-0.2-0.3S157.3 10.5 157.3 10.4zM157.4 12.7h1.8v7.4h-1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49760	108.128.52.91	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:21:38 UTC	696	OUT	GET /favicon.ico HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mydomaincontact.com/index.php?domain_name=cocoricopatisserie.co.uk Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-1791724955aaa7a19f73afddbe958b9d=1
2024-09-29 22:21:39 UTC	143	IN	HTTP/1.1 404 Not Found Date: Sun, 29 Sep 2024 22:21:39 GMT Content-Type: text/html Content-Length: 548 Connection: close Server: nginx
2024-09-29 22:21:39 UTC	548	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49761	108.128.52.91	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:21:38 UTC	422	OUT	GET /scripts/select2/select2.png HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-1791724955aaa7a19f73afddbe958b9d=1
2024-09-29 22:21:39 UTC	226	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 22:21:39 GMT Content-Type: image/png Content-Length: 613 Connection: close Server: nginx Last-Modified: Wed, 04 Sep 2024 11:48:32 GMT ETag: "66d84910-265" Accept-Ranges: bytes
2024-09-29 22:21:39 UTC	613	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 28 08 06 00 00 00 a2 bb 99 ff 00 00 02 2c 49 44 41 54 78 da ed d9 cf 4b 14 61 1c c7 f1 b5 08 4a 8c 85 d6 2e 62 5d 2a 28 c9 88 0e 11 76 a9 64 d6 0d a2 3c 14 fd a0 1f 50 04 fd 03 86 21 52 07 71 b7 54 e8 d0 a1 48 04 23 08 bc 47 14 11 79 ed 52 d8 af a5 8b 94 85 81 48 74 30 4c 98 3e bd 85 ef e1 39 b8 2c 6d 29 db d7 79 e0 75 98 d9 85 7d de 3b cf cc 0e b3 29 49 cb 4a 12 bc 2c 83 ff c7 51 28 14 ee e3 58 b0 1d e1 1e 56 b8 0b 26 ea 12 84 4f 68 c2 46 14 21 0c 7b 0c 6e c6 7b 08 93 98 80 2c fa a0 d7 25 5d 8f d7 90 19 47 63 8a e1 35 78 0b 3e 40 e6 33 b6 bb 0c 26 ac 05 93 c1 32 1e 0b 96 f7 99 25 0f e6 43 d3 c8 2c 62 f0 45 08 13 d8 80 75 c1 39 3d 54 36 98 37 9d c4 29 9c 08 9c 45 ba c2 09 0d e3 f1 22 1f Data Ascii: PNGIHDR<(,IDATxKaJ.b]*(vd<P!RqTH#GyRHt0L>9,m)yu};)IJ,Q(XV&OhF!{n{,%]Gc5x>@3&2%C,bEu9=T67)E"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49766	142.250.184.238	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:21:49 UTC	720	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://finance.cocoricopatisserie.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 22:21:49 UTC	1037	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/html Content-Security-Policy: script-src 'nonce-qgE-mN6LRoeN2aOJ0myCFw' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui; base-uri 'none' Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 1560 Date: Sun, 29 Sep 2024 22:21:49 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-29 22:21:49 UTC	353	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 52 4f 42 4f 54 53 22 20 63 6f 6e 74 65 6e 74 3d 22 4e 4f 49 4e 44 45 58 2c 20 4e 4f 46 4f 4c 4c 4f 57 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 61 64 42 6c 6f 63 6b 22 3e 3c 2f 64 69 76 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 71 67 45 2d 6d 4e 36 4c 52 6f 65 4e 32 61 4f 4a 30 6d 79 43 46 77 22 3e 69 66 20 28 77 69 6e 64 6f 77 2e 6e Data Ascii: <!doctype html><html><head><meta name="ROBOTS" content="NOINDEX, NOFOLLOW"><meta name="format-detection" content="telephone=no"><meta content="origin" name="referrer"></head><body><div id="adBlock"></div><script nonce="qgE-mN6LRoeN2aOJ0myCFw">if (window.n
2024-09-29 22:21:49 UTC	1207	IN	Data Raw: 61 64 73 65 6e 73 65 2f 73 65 61 72 63 68 2f 61 64 73 2e 6a 73 22 3b 76 61 72 20 68 72 65 66 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 69 66 20 28 21 21 68 72 65 66 20 26 26 20 28 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 3f 70 61 63 3d 27 29 20 3e 20 30 20 7c 7c 20 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 26 70 61 63 3d 27 29 20 3e 20 30 29 29 20 7b 69 66 20 28 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 3f 70 61 63 3d 31 27 29 20 3e 20 30 20 7c 7c 20 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 26 70 61 63 3d 31 27 29 20 3e 20 30 29 20 7b 73 63 72 69 70 74 2e 73 72 63 20 2b 3d 20 27 3f 70 61 63 3d 31 27 3b 7d 20 65 6c 73 65 20 69 66 20 28 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 3f 70 61 63 3d 32 27 29 20 3e 20 30 20 7c 7c 20 Data Ascii: adsense/search/ads.js";var href = window.location.href;if (!!href && (href.indexOf('?pac=') > 0 \|\| href.indexOf('&pac=') > 0)) {if (href.indexOf('?pac=1') > 0 \|\| href.indexOf('&pac=1') > 0) {script.src += '?pac=1';} else if (href.indexOf('?pac=2') > 0 \|\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49767	142.250.184.238	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:21:49 UTC	2673	OUT	GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&sct=ID%3D4f20d6f152843af6%3AT%3D1727648483%3ART%3D1727648483%3AS%3DALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw&sc_status=6&hl=en&rpbu=http%3A%2F%2Ffinance.cocoricopatisserie.co.uk%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NTA3Ljc4OTF8ZmQxYThhMzY3NTQzMDAwMWQ3NmU2NzVkMGZmMTFkZGI4OTJlNTdhYnx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Eagles%20Sphere%20Sphere&afdt=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpjx58G6o1K7o-viAFkNJUZINzDQYxSL87u9idvmGA6WnLKvG43X1VTpA_tX-JuOD2qRhHKZIbvkkTZQebs3sDLnAIMFHH3E399kjaAqb00X1Isp9zrXzZpzsXWiuakI_FhDM&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301511%2 [TRUNCATED] Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://finance.cocoricopatisserie.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 22:21:50 UTC	807	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Disposition: inline Date: Sun, 29 Sep 2024 22:21:50 GMT Expires: Sun, 29 Sep 2024 22:21:50 GMT Cache-Control: private, max-age=3600 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-zHUNHZ--HHeMy5mNktu7IQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Server: gws X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-29 22:21:50 UTC	583	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 73 74 79 6c 65 20 69 64 3d 22 73 73 72 2d 62 6f 69 6c 65 72 70 6c 61 74 65 22 3e 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 72 67 69 6e 3a 30 3b 7d 2e 64 69 76 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 20 2e 64 69 76 3a 6c 61 73 Data Ascii: 8000<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:las
2024-09-29 22:21:50 UTC	1390	IN	Data Raw: 69 5f 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 76 5f 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 Data Ascii: i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit
2024-09-29 22:21:50 UTC	1390	IN	Data Raw: 5f 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 6f 5f 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 78 5f 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 79 5f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 7a 2d 69 6e 64 65 78 3a 31 3b 7d 2e 6b 5f 3e 64 69 76 3a 6e 6f 74 28 2e 79 5f 29 20 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 Data Ascii: _{overflow:hidden;}.o_{white-space:nowrap;}.x_{cursor:pointer;}.y_{display:none; position:absolute; z-index:1;}.k_>div:not(.y_) {display:-webkit-inline-box; display:-moz-inline-box; display:-ms-inline-flexbox; display:-webkit-inline-flex; display:inline-f
2024-09-29 22:21:50 UTC	1390	IN	Data Raw: 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 42 6f 74 74 6f 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 43 65 6e 74 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 Data Ascii: start; align-items:flex-start;}.flexAlignBottom{-ms-flex-align:end; -webkit-box-align:end; -webkit-align-items:flex-end; align-items:flex-end;}.flexAlignCenter{-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center
2024-09-29 22:21:50 UTC	1390	IN	Data Raw: 3a 35 30 70 78 3b 63 6f 6c 6f 72 3a 23 63 63 63 63 63 63 3b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 2e 73 69 32 37 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 36 66 30 30 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 33 36 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 7d 2e 73 69 33 34 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 70 78 3b 7d 2e 73 69 34 32 7b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d Data Ascii: :50px;color:#cccccc;width:100%; -ms-flex-negative:1;-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.si27:hover{color:#ff6f00;text-decoration:underline;}.si36{height:100%;}.si34{margin-bottom:0px;}.si42{width:100%; -ms-flex-negative:1;-webkit-
2024-09-29 22:21:50 UTC	1390	IN	Data Raw: 74 74 6f 6d 3a 33 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 70 78 3b 7d 2e 73 69 31 38 7b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 31 38 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 31 39 7b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 32 30 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 32 31 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 38 36 62 66 32 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 Data Ascii: ttom:3px;padding-top:3px;}.si18{color:#dddddd;}.si18:hover{text-decoration:underline;}.si19{color:#dddddd;}.si20{font-family:Roboto,arial,sans-serif;font-size:12px;line-height:20px;color:#dddddd;}.si21{font-weight:700;background-color:#186bf2;border-radiu
2024-09-29 22:21:50 UTC	1390	IN	Data Raw: 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 70 78 3b 63 6f 6c 6f 72 3a 23 38 36 38 35 38 61 3b 7d 2e 73 69 32 36 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 7d 2e 73 69 37 32 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 52 6f 62 6f 74 6f 20 4c 69 67 68 74 22 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 Data Ascii: px;padding-bottom:1px;padding-left:1px;padding-right:1px;padding-top:1px;color:#86858a;}.si26{font-family:Roboto,arial,sans-serif;font-size:14px;line-height:24px;color:#ffffff;}.si72{font-family:"Roboto Light",arial,sans-serif;font-size:12px;line-height:2
2024-09-29 22:21:50 UTC	1390	IN	Data Raw: 73 69 6f 6e 4c 69 6e 6b 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4e 4f 49 4e 44 45 58 2c 20 4e 4f 46 4f 4c 4c 4f 57 22 20 6e 61 6d 65 3d 22 52 4f 42 4f 54 53 22 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 20 20 20 20 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 20 3c 64 69 76 20 69 64 3d 22 61 64 42 6c 6f 63 6b 22 3e 20 20 20 3c 64 69 76 20 69 64 3d 22 73 73 72 61 64 2d 6d 61 73 74 65 72 Data Ascii: sionLink:hover{text-decoration:underline;}</style> <meta content="NOINDEX, NOFOLLOW" name="ROBOTS"> <meta content="telephone=no" name="format-detection"> <meta content="origin" name="referrer"> </head> <body> <div id="adBlock"> <div id="ssrad-master
2024-09-29 22:21:50 UTC	1390	IN	Data Raw: 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 33 39 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f Data Ascii: -pack:start; -webkit-justify-content:flex-start; justify-content:flex-start;-ms-flex-align:stretch; -webkit-box-align:stretch; -webkit-align-items:stretch; align-items:stretch;"><div class="i_ div si39" style="-ms-flex-direction:row; -webkit-box-orient:ho
2024-09-29 22:21:50 UTC	1390	IN	Data Raw: 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 20 76 65 72 74 69 63 61 6c 3b 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 2d 63 6c 61 6d 70 3a 20 32 3b 20 22 3e 32 30 32 34 20 54 68 65 20 3c 73 70 61 6e 20 73 74 79 6c 65 3d 27 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 69 6e 68 65 72 69 74 3b 27 20 63 6c 61 73 73 3d 22 73 69 31 33 30 20 73 70 61 6e 22 3e 53 70 68 65 72 65 3c 2f 73 70 61 6e 3e 20 45 76 65 6e 74 20 54 69 63 6b 65 74 73 20 2d 20 32 30 32 34 20 54 68 65 20 3c 73 70 61 6e 20 73 74 79 6c 65 3d 27 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 69 6e 68 65 72 69 74 3b 27 20 63 6c 61 73 73 3d 22 73 69 31 33 30 20 73 70 61 Data Ascii: -box-orient: vertical; overflow: hidden; -webkit-line-clamp: 2; ">2024 The <span style='display:inline;text-transform:inherit;' class="si130 span">Sphere</span> Event Tickets - 2024 The <span style='display:inline;text-transform:inherit;' class="si130 spa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49769	142.250.185.164	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:21:49 UTC	538	OUT	GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Range: bytes=113072-113072 If-Range: "16155903164772261079"
2024-09-29 22:21:50 UTC	844	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 153198 Date: Sun, 29 Sep 2024 22:21:50 GMT Expires: Sun, 29 Sep 2024 22:21:50 GMT Cache-Control: private, max-age=3600 ETag: "4454758832833526012" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-29 22:21:50 UTC	546	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 68 61 73 68 3a 22 31 37 33 38 33 36 33 33 34 36 34 33 37 30 36 31 35 35 35 33 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 31 34 33 31 2c 31 37 33 30 31 34 33 33 2c 31 37 33 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17301431,17301433,173
2024-09-29 22:21:50 UTC	1390	IN	Data Raw: 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 69 35 75 5a 58 51 73 64 48 4a 68 62 6e 4e 73 59 58 Data Ascii: main":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYX
2024-09-29 22:21:50 UTC	1390	IN	Data Raw: 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 Data Ascii: ;c.prototype.toString=function(){return this.ne};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8ClampedArray Int16Arra
2024-09-29 22:21:50 UTC	1390	IN	Data Raw: 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 61 3d 6c 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 70 61 29 70 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 Data Ascii: extensible");return a}:null}var pa=la;function qa(a,b){a.prototype=ka(b.prototype);a.prototype.constructor=a;if(pa)pa(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.definePrope
2024-09-29 22:21:50 UTC	1390	IN	Data Raw: 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 55 66 28 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 62 64 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 67 67 28 68 2c 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 62 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 63 65 28 32 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 Data Ascii: on":h=!0;break a;default:h=!1}h?this.Uf(g):this.Ld(g)}};b.prototype.Uf=function(g){var h=void 0;try{h=g.then}catch(k){this.bd(k);return}typeof h=="function"?this.gg(h,g):this.Ld(g)};b.prototype.bd=function(g){this.ce(2,g)};b.prototype.Ld=function(g){this
2024-09-29 22:21:50 UTC	1390	IN	Data Raw: 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 69 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 0a 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 42 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 65 64 20 73 74 61 74 65 3a Data Ascii: ew b(function(r,t){l=r;m=t});this.ib(k(g,l),k(h,m));return p};b.prototype.catch=function(g){return this.then(void 0,g)};b.prototype.ib=function(g,h){function k(){switch(l.B){case 1:g(l.Xa);break;case 2:h(l.Xa);break;default:throw Error("Unexpected state:
2024-09-29 22:21:50 UTC	1390	IN	Data Raw: 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 73 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 63 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6c 3d 4f 62 Data Ascii: nction e(k){if(!sa(k,g)){var l=new c;ca(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var k=Object.seal({}),l=Ob
2024-09-29 22:21:50 UTC	1390	IN	Data Raw: 68 2c 49 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 49 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 75 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 Data Ascii: h,I:p}}return{id:l,list:m,index:-1,I:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=u(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Object.seal!="
2024-09-29 22:21:50 UTC	1390	IN	Data Raw: 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 20 67 3d 30 3b 72 65 Data Ascii: })};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,h.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.prototype.entries;var g=0;re
2024-09-29 22:21:50 UTC	1390	IN	Data Raw: 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 65 3c 3d 30 7d 7d 29 3b 0a 71 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 73 61 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 5b 64 2c 62 5b 64 5d 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 64 3d 53 74 72 69 6e 67 28 Data Ascii: !=b[--e])return!1;return e<=0}});q("Object.entries",function(a){return a?a:function(b){var c=[],d;for(d in b)sa(b,d)&&c.push([d,b[d]]);return c}});q("Array.prototype.find",function(a){return a?a:function(b,c){a:{var d=this;d instanceof String&&(d=String(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49770	142.250.184.238	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:21:50 UTC	770	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://finance.cocoricopatisserie.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
2024-09-29 22:21:50 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Sun, 29 Sep 2024 22:21:50 GMT Expires: Sun, 29 Sep 2024 22:21:50 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49773	216.58.212.164	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:21:51 UTC	698	OUT	GET /images/afs/snowman.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 22:21:52 UTC	670	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 166 Date: Sun, 29 Sep 2024 22:21:52 GMT Expires: Sun, 29 Sep 2024 22:21:52 GMT Cache-Control: private, max-age=31536000 Last-Modified: Wed, 15 Nov 2023 17:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-29 22:21:52 UTC	166	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 04 03 00 00 00 a5 2c e4 b4 00 00 00 12 50 4c 54 45 00 00 00 97 9f 9f 9a a0 a5 9a a0 a6 9a a0 a6 97 9f a7 fa 03 72 95 00 00 00 06 74 52 4e 53 00 20 bf ef ff 20 e0 82 3c 7e 00 00 00 3d 49 44 41 54 78 01 63 18 7e 80 51 d9 49 00 ab 84 b0 8b 8b 21 56 09 15 17 17 27 ac 12 2e 2e 2e ce 58 25 4c 80 32 a4 19 15 ec e2 62 8a 55 82 55 c5 28 80 26 e1 30 1a 56 a3 61 35 ec 00 00 2d a2 14 b9 af 08 13 f6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR00,PLTErtRNS <~=IDATxc~QI!V'...X%L2bUU(&0Va5-IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49765	142.250.185.110	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:21:52 UTC	898	OUT	GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=4e0a3q8ffgo0&aqid=_tL5ZqOkBcvJxdwP0PeRkAM&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1363&adbw=530&adbah=470%2C439%2C452&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=678245571&csala=23%7C0%7C2077%7C14%7C278&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://finance.cocoricopatisserie.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 22:21:53 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-9P9NhHjq9p2hmxnAre5qlw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 29 Sep 2024 22:21:53 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49776	142.250.185.164	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:21:53 UTC	457	OUT	GET /images/afs/snowman.png HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 22:21:53 UTC	670	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 166 Date: Sun, 29 Sep 2024 22:21:53 GMT Expires: Sun, 29 Sep 2024 22:21:53 GMT Cache-Control: private, max-age=31536000 Last-Modified: Wed, 15 Nov 2023 17:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-29 22:21:53 UTC	166	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 04 03 00 00 00 a5 2c e4 b4 00 00 00 12 50 4c 54 45 00 00 00 97 9f 9f 9a a0 a5 9a a0 a6 9a a0 a6 97 9f a7 fa 03 72 95 00 00 00 06 74 52 4e 53 00 20 bf ef ff 20 e0 82 3c 7e 00 00 00 3d 49 44 41 54 78 01 63 18 7e 80 51 d9 49 00 ab 84 b0 8b 8b 21 56 09 15 17 17 27 ac 12 2e 2e 2e ce 58 25 4c 80 32 a4 19 15 ec e2 62 8a 55 82 55 c5 28 80 26 e1 30 1a 56 a3 61 35 ec 00 00 2d a2 14 b9 af 08 13 f6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR00,PLTErtRNS <~=IDATxc~QI!V'...X%L2bUU(&0Va5-IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49777	142.250.185.110	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:21:53 UTC	898	OUT	GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=mp6scfw4zx6j&aqid=_tL5ZqOkBcvJxdwP0PeRkAM&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1363&adbw=530&adbah=470%2C439%2C452&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=678245571&csala=23%7C0%7C2077%7C14%7C278&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://finance.cocoricopatisserie.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 22:21:53 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-_dkjwBtuPx_qmgySoKB3Bg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 29 Sep 2024 22:21:53 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49771	142.250.184.238	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:21:55 UTC	770	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://finance.cocoricopatisserie.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
2024-09-29 22:21:55 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Sun, 29 Sep 2024 22:21:55 GMT Expires: Sun, 29 Sep 2024 22:21:55 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49780	142.250.184.238	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:21:56 UTC	2667	OUT	GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&sct=ID%3D4f20d6f152843af6%3AT%3D1727648483%3ART%3D1727648483%3AS%3DALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw&sc_status=6&hl=en&rpbu=http%3A%2F%2Ffinance.cocoricopatisserie.co.uk%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NTE1LjA5MzJ8YWU3YmQ5MzhkNTcwNDc1YzEyOWIyODFhNDA0MTc3MTM3MGI3ZjM2NXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Sesame%20Semaglutide&afdt=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmcBlLqpj90SqxLU1y28Lnofj6W4YFOJxZRWVqEOBrqx9r8dK_IzyucJYZYAj0HbBY0RxMhD-iUiKatTaQpsIR459EQ14jLNoKoGR9MimrFhhNC0HT5tj7o4Xchb8bXTCSs8XHI4WI_a&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301511%2C17 [TRUNCATED] Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://finance.cocoricopatisserie.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 22:21:56 UTC	807	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Disposition: inline Date: Sun, 29 Sep 2024 22:21:56 GMT Expires: Sun, 29 Sep 2024 22:21:56 GMT Cache-Control: private, max-age=3600 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-feD79B7DE1o71yE8ZYCUtw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Server: gws X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-29 22:21:56 UTC	583	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 73 74 79 6c 65 20 69 64 3d 22 73 73 72 2d 62 6f 69 6c 65 72 70 6c 61 74 65 22 3e 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 72 67 69 6e 3a 30 3b 7d 2e 64 69 76 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 20 2e 64 69 76 3a 6c 61 73 Data Ascii: 8000<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:las
2024-09-29 22:21:56 UTC	1390	IN	Data Raw: 69 5f 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 76 5f 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 Data Ascii: i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit
2024-09-29 22:21:56 UTC	1390	IN	Data Raw: 5f 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 6f 5f 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 78 5f 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 79 5f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 7a 2d 69 6e 64 65 78 3a 31 3b 7d 2e 6b 5f 3e 64 69 76 3a 6e 6f 74 28 2e 79 5f 29 20 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 Data Ascii: _{overflow:hidden;}.o_{white-space:nowrap;}.x_{cursor:pointer;}.y_{display:none; position:absolute; z-index:1;}.k_>div:not(.y_) {display:-webkit-inline-box; display:-moz-inline-box; display:-ms-inline-flexbox; display:-webkit-inline-flex; display:inline-f
2024-09-29 22:21:56 UTC	1390	IN	Data Raw: 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 42 6f 74 74 6f 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 43 65 6e 74 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 Data Ascii: start; align-items:flex-start;}.flexAlignBottom{-ms-flex-align:end; -webkit-box-align:end; -webkit-align-items:flex-end; align-items:flex-end;}.flexAlignCenter{-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center
2024-09-29 22:21:56 UTC	1390	IN	Data Raw: 3a 35 30 70 78 3b 63 6f 6c 6f 72 3a 23 63 63 63 63 63 63 3b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 2e 73 69 32 37 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 36 66 30 30 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 33 36 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 7d 2e 73 69 33 34 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 70 78 3b 7d 2e 73 69 34 32 7b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d Data Ascii: :50px;color:#cccccc;width:100%; -ms-flex-negative:1;-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.si27:hover{color:#ff6f00;text-decoration:underline;}.si36{height:100%;}.si34{margin-bottom:0px;}.si42{width:100%; -ms-flex-negative:1;-webkit-
2024-09-29 22:21:56 UTC	1390	IN	Data Raw: 74 74 6f 6d 3a 33 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 70 78 3b 7d 2e 73 69 31 38 7b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 31 38 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 31 39 7b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 32 30 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 32 31 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 38 36 62 66 32 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 Data Ascii: ttom:3px;padding-top:3px;}.si18{color:#dddddd;}.si18:hover{text-decoration:underline;}.si19{color:#dddddd;}.si20{font-family:Roboto,arial,sans-serif;font-size:12px;line-height:20px;color:#dddddd;}.si21{font-weight:700;background-color:#186bf2;border-radiu
2024-09-29 22:21:56 UTC	1390	IN	Data Raw: 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 70 78 3b 63 6f 6c 6f 72 3a 23 38 36 38 35 38 61 3b 7d 2e 73 69 32 36 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 7d 2e 73 69 37 32 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 52 6f 62 6f 74 6f 20 4c 69 67 68 74 22 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 Data Ascii: px;padding-bottom:1px;padding-left:1px;padding-right:1px;padding-top:1px;color:#86858a;}.si26{font-family:Roboto,arial,sans-serif;font-size:14px;line-height:24px;color:#ffffff;}.si72{font-family:"Roboto Light",arial,sans-serif;font-size:12px;line-height:2
2024-09-29 22:21:56 UTC	1390	IN	Data Raw: 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4e 4f 49 4e 44 45 58 2c 20 4e 4f 46 4f 4c 4c 4f 57 22 20 6e 61 6d 65 3d 22 52 4f 42 4f 54 53 22 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 20 20 20 20 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 20 3c 64 69 76 20 69 64 3d 22 61 64 42 6c 6f 63 6b 22 3e 20 20 20 3c 64 69 76 20 69 64 3d 22 73 73 72 61 64 2d 6d 61 73 74 65 72 22 20 64 61 74 61 2d 63 73 Data Ascii: hover{text-decoration:underline;}</style> <meta content="NOINDEX, NOFOLLOW" name="ROBOTS"> <meta content="telephone=no" name="format-detection"> <meta content="origin" name="referrer"> </head> <body> <div id="adBlock"> <div id="ssrad-master" data-cs
2024-09-29 22:21:56 UTC	1390	IN	Data Raw: 72 74 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 33 39 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b Data Ascii: rt; -webkit-justify-content:flex-start; justify-content:flex-start;-ms-flex-align:stretch; -webkit-box-align:stretch; -webkit-align-items:stretch; align-items:stretch;"><div class="i_ div si39" style="-ms-flex-direction:row; -webkit-box-orient:horizontal;
2024-09-29 22:21:56 UTC	1390	IN	Data Raw: 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 33 34 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 Data Ascii: stretch; -webkit-box-align:stretch; -webkit-align-items:stretch; align-items:stretch;"><div class="i_ div si34" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;-ms-flex-pack:start; -webkit-box-p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49781	142.250.184.238	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:21:56 UTC	770	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://finance.cocoricopatisserie.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
2024-09-29 22:21:56 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Sun, 29 Sep 2024 22:21:56 GMT Expires: Sun, 29 Sep 2024 22:21:56 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49779	142.250.185.110	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:21:59 UTC	898	OUT	GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=u0nzsrq6nhzz&aqid=BNP5ZuvhI5fGjuwP5-G76A0&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1394&adbw=530&adbah=470%2C452%2C470&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=678245571&csala=24%7C0%7C1626%7C11%7C261&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://finance.cocoricopatisserie.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 22:21:59 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-vD7fT9tC24imwP4lU9io3g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 29 Sep 2024 22:21:59 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49784	142.250.185.110	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:22:00 UTC	897	OUT	GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=ol8696d1yoc&aqid=BNP5ZuvhI5fGjuwP5-G76A0&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1394&adbw=530&adbah=470%2C452%2C470&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=678245571&csala=24%7C0%7C1626%7C11%7C261&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://finance.cocoricopatisserie.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 22:22:00 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-bK5oGhMTYsBjMKxgd4xhwQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 29 Sep 2024 22:22:00 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49782	142.250.184.238	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:22:00 UTC	2663	OUT	GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&sct=ID%3D4f20d6f152843af6%3AT%3D1727648483%3ART%3D1727648483%3AS%3DALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw&sc_status=6&hl=en&rpbu=http%3A%2F%2Ffinance.cocoricopatisserie.co.uk%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NTIwLjIwNDR8MDAzNTk5NWRhZWQ4NzI5MDM0MjFlYTM5NzhiYjMxYWFjZGU3NmE2OHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Semaglutide%20Henry&afdt=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpj4R7Nz9MtgVxMM3LZXthcmrpMZO2hM9CJdYTOBTZlOqOWIKeyAnZ3l9wmC7ZfZQ9oOSTTbuMheWysdFe-MYszSn-Z5cfGUaCQmtDzAocoW2PrGSSnlOXrv0KCozzVftbfzk&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301511%2C1730 [TRUNCATED] Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://finance.cocoricopatisserie.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 22:22:01 UTC	807	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Disposition: inline Date: Sun, 29 Sep 2024 22:22:00 GMT Expires: Sun, 29 Sep 2024 22:22:00 GMT Cache-Control: private, max-age=3600 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-HA_TvDaS9boovFpKs_z_IQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Server: gws X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-29 22:22:01 UTC	583	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 73 74 79 6c 65 20 69 64 3d 22 73 73 72 2d 62 6f 69 6c 65 72 70 6c 61 74 65 22 3e 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 72 67 69 6e 3a 30 3b 7d 2e 64 69 76 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 20 2e 64 69 76 3a 6c 61 73 Data Ascii: 8000<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:las
2024-09-29 22:22:01 UTC	1390	IN	Data Raw: 69 5f 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 76 5f 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 Data Ascii: i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit
2024-09-29 22:22:01 UTC	1390	IN	Data Raw: 5f 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 6f 5f 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 78 5f 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 79 5f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 7a 2d 69 6e 64 65 78 3a 31 3b 7d 2e 6b 5f 3e 64 69 76 3a 6e 6f 74 28 2e 79 5f 29 20 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 Data Ascii: _{overflow:hidden;}.o_{white-space:nowrap;}.x_{cursor:pointer;}.y_{display:none; position:absolute; z-index:1;}.k_>div:not(.y_) {display:-webkit-inline-box; display:-moz-inline-box; display:-ms-inline-flexbox; display:-webkit-inline-flex; display:inline-f
2024-09-29 22:22:01 UTC	1390	IN	Data Raw: 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 42 6f 74 74 6f 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 43 65 6e 74 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 Data Ascii: start; align-items:flex-start;}.flexAlignBottom{-ms-flex-align:end; -webkit-box-align:end; -webkit-align-items:flex-end; align-items:flex-end;}.flexAlignCenter{-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center
2024-09-29 22:22:01 UTC	1390	IN	Data Raw: 3a 35 30 70 78 3b 63 6f 6c 6f 72 3a 23 63 63 63 63 63 63 3b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 2e 73 69 32 37 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 36 66 30 30 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 33 36 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 7d 2e 73 69 33 34 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 70 78 3b 7d 2e 73 69 34 32 7b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d Data Ascii: :50px;color:#cccccc;width:100%; -ms-flex-negative:1;-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.si27:hover{color:#ff6f00;text-decoration:underline;}.si36{height:100%;}.si34{margin-bottom:0px;}.si42{width:100%; -ms-flex-negative:1;-webkit-
2024-09-29 22:22:01 UTC	1390	IN	Data Raw: 74 74 6f 6d 3a 33 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 70 78 3b 7d 2e 73 69 31 38 7b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 31 38 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 31 39 7b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 32 30 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 32 31 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 38 36 62 66 32 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 Data Ascii: ttom:3px;padding-top:3px;}.si18{color:#dddddd;}.si18:hover{text-decoration:underline;}.si19{color:#dddddd;}.si20{font-family:Roboto,arial,sans-serif;font-size:12px;line-height:20px;color:#dddddd;}.si21{font-weight:700;background-color:#186bf2;border-radiu
2024-09-29 22:22:01 UTC	1390	IN	Data Raw: 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 70 78 3b 63 6f 6c 6f 72 3a 23 38 36 38 35 38 61 3b 7d 2e 73 69 32 36 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 7d 2e 73 69 37 32 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 52 6f 62 6f 74 6f 20 4c 69 67 68 74 22 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 Data Ascii: px;padding-bottom:1px;padding-left:1px;padding-right:1px;padding-top:1px;color:#86858a;}.si26{font-family:Roboto,arial,sans-serif;font-size:14px;line-height:24px;color:#ffffff;}.si72{font-family:"Roboto Light",arial,sans-serif;font-size:12px;line-height:2
2024-09-29 22:22:01 UTC	1390	IN	Data Raw: 73 69 6f 6e 4c 69 6e 6b 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4e 4f 49 4e 44 45 58 2c 20 4e 4f 46 4f 4c 4c 4f 57 22 20 6e 61 6d 65 3d 22 52 4f 42 4f 54 53 22 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 20 20 20 20 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 20 3c 64 69 76 20 69 64 3d 22 61 64 42 6c 6f 63 6b 22 3e 20 20 20 3c 64 69 76 20 69 64 3d 22 73 73 72 61 64 2d 6d 61 73 74 65 72 Data Ascii: sionLink:hover{text-decoration:underline;}</style> <meta content="NOINDEX, NOFOLLOW" name="ROBOTS"> <meta content="telephone=no" name="format-detection"> <meta content="origin" name="referrer"> </head> <body> <div id="adBlock"> <div id="ssrad-master
2024-09-29 22:22:01 UTC	1390	IN	Data Raw: 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 33 39 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f Data Ascii: -pack:start; -webkit-justify-content:flex-start; justify-content:flex-start;-ms-flex-align:stretch; -webkit-box-align:stretch; -webkit-align-items:stretch; align-items:stretch;"><div class="i_ div si39" style="-ms-flex-direction:row; -webkit-box-orient:ho
2024-09-29 22:22:01 UTC	1390	IN	Data Raw: 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 33 36 20 76 5f 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 76 65 72 74 69 63 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 Data Ascii: t:horizontal; -webkit-flex-direction:row; flex-direction:row;"><div class="i_ div si36 v_" style="-ms-flex-direction:column; -webkit-box-orient:vertical; -webkit-flex-direction:column; flex-direction:column;-ms-flex-pack:start; -webkit-box-pack:start; -we

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49785	142.250.184.238	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:22:01 UTC	770	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://finance.cocoricopatisserie.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
2024-09-29 22:22:01 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Sun, 29 Sep 2024 22:22:01 GMT Expires: Sun, 29 Sep 2024 22:22:01 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49786	142.250.184.238	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:22:02 UTC	770	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://finance.cocoricopatisserie.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
2024-09-29 22:22:02 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Sun, 29 Sep 2024 22:22:02 GMT Expires: Sun, 29 Sep 2024 22:22:02 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49787	142.250.185.110	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:22:03 UTC	896	OUT	GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=3tx4llplc22n&aqid=CNP5ZuGbN4isjuwPperlqAs&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1394&adbw=530&adbah=470%2C470%2C452&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=678245571&csala=27%7C0%7C535%7C5%7C223&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://finance.cocoricopatisserie.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 22:22:03 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-NM_rv5QMLSLVd5U92NBUEg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 29 Sep 2024 22:22:03 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49788	142.250.185.110	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:22:04 UTC	896	OUT	GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=wu4yeoc6dztn&aqid=CNP5ZuGbN4isjuwPperlqAs&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1394&adbw=530&adbah=470%2C470%2C452&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=678245571&csala=27%7C0%7C535%7C5%7C223&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://finance.cocoricopatisserie.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 22:22:04 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-e-gGoevqIyfnAw2m3lOzyA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 29 Sep 2024 22:22:04 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49792	142.250.184.238	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:22:12 UTC	770	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://finance.cocoricopatisserie.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
2024-09-29 22:22:12 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Sun, 29 Sep 2024 22:22:12 GMT Expires: Sun, 29 Sep 2024 22:22:12 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49793	142.250.184.238	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:22:12 UTC	2682	OUT	GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&sct=ID%3D4f20d6f152843af6%3AT%3D1727648483%3ART%3D1727648483%3AS%3DALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw&sc_status=6&hl=en&rpbu=http%3A%2F%2Ffinance.cocoricopatisserie.co.uk%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NTMxLjMxNTZ8YTdkOTlkYmMxZjhkZDIxNmI0M2VhOGQ1N2M4YzUxMGI2YjUyYjYwZHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDE3NmUyNjk4MTI1ZTUxYTM2MWM5OTVjNTQ4MGQzNTE0ZmQwNmU1OTR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Eagles%20Sphere%20Sphere&afdt=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpjx58G6o1K7o-viAFkNJUZINzDQYxSL87u9idvmGA6WnLKvG43X1VTpA_tX-JuOD2qRhHKZIbvkkTZQebs3sDLnAIMFHH3E399kjaAqb00X1Isp9zrXzZpzsXWiuakI_FhDM&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301511%2 [TRUNCATED] Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://finance.cocoricopatisserie.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 22:22:12 UTC	807	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Disposition: inline Date: Sun, 29 Sep 2024 22:22:12 GMT Expires: Sun, 29 Sep 2024 22:22:12 GMT Cache-Control: private, max-age=3600 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-cbozOPvupYj0IrhnV-WiLA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Server: gws X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-29 22:22:12 UTC	583	IN	Data Raw: 37 61 61 65 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 73 74 79 6c 65 20 69 64 3d 22 73 73 72 2d 62 6f 69 6c 65 72 70 6c 61 74 65 22 3e 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 72 67 69 6e 3a 30 3b 7d 2e 64 69 76 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 20 2e 64 69 76 3a 6c 61 73 Data Ascii: 7aae<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:las
2024-09-29 22:22:12 UTC	1390	IN	Data Raw: 69 5f 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 76 5f 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 Data Ascii: i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit
2024-09-29 22:22:12 UTC	1390	IN	Data Raw: 5f 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 6f 5f 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 78 5f 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 79 5f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 7a 2d 69 6e 64 65 78 3a 31 3b 7d 2e 6b 5f 3e 64 69 76 3a 6e 6f 74 28 2e 79 5f 29 20 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 Data Ascii: _{overflow:hidden;}.o_{white-space:nowrap;}.x_{cursor:pointer;}.y_{display:none; position:absolute; z-index:1;}.k_>div:not(.y_) {display:-webkit-inline-box; display:-moz-inline-box; display:-ms-inline-flexbox; display:-webkit-inline-flex; display:inline-f
2024-09-29 22:22:12 UTC	1390	IN	Data Raw: 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 42 6f 74 74 6f 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 43 65 6e 74 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 Data Ascii: start; align-items:flex-start;}.flexAlignBottom{-ms-flex-align:end; -webkit-box-align:end; -webkit-align-items:flex-end; align-items:flex-end;}.flexAlignCenter{-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center
2024-09-29 22:22:12 UTC	1390	IN	Data Raw: 3a 35 30 70 78 3b 63 6f 6c 6f 72 3a 23 63 63 63 63 63 63 3b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 2e 73 69 32 37 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 36 66 30 30 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 33 36 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 7d 2e 73 69 33 34 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 70 78 3b 7d 2e 73 69 34 32 7b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d Data Ascii: :50px;color:#cccccc;width:100%; -ms-flex-negative:1;-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.si27:hover{color:#ff6f00;text-decoration:underline;}.si36{height:100%;}.si34{margin-bottom:0px;}.si42{width:100%; -ms-flex-negative:1;-webkit-
2024-09-29 22:22:12 UTC	1390	IN	Data Raw: 74 74 6f 6d 3a 33 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 70 78 3b 7d 2e 73 69 31 38 7b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 31 38 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 31 39 7b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 32 30 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 32 31 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 38 36 62 66 32 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 Data Ascii: ttom:3px;padding-top:3px;}.si18{color:#dddddd;}.si18:hover{text-decoration:underline;}.si19{color:#dddddd;}.si20{font-family:Roboto,arial,sans-serif;font-size:12px;line-height:20px;color:#dddddd;}.si21{font-weight:700;background-color:#186bf2;border-radiu
2024-09-29 22:22:12 UTC	1390	IN	Data Raw: 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 70 78 3b 63 6f 6c 6f 72 3a 23 38 36 38 35 38 61 3b 7d 2e 73 69 32 36 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 7d 2e 73 69 37 32 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 52 6f 62 6f 74 6f 20 4c 69 67 68 74 22 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 Data Ascii: px;padding-bottom:1px;padding-left:1px;padding-right:1px;padding-top:1px;color:#86858a;}.si26{font-family:Roboto,arial,sans-serif;font-size:14px;line-height:24px;color:#ffffff;}.si72{font-family:"Roboto Light",arial,sans-serif;font-size:12px;line-height:2
2024-09-29 22:22:12 UTC	1390	IN	Data Raw: 73 69 6f 6e 4c 69 6e 6b 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4e 4f 49 4e 44 45 58 2c 20 4e 4f 46 4f 4c 4c 4f 57 22 20 6e 61 6d 65 3d 22 52 4f 42 4f 54 53 22 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 20 20 20 20 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 20 3c 64 69 76 20 69 64 3d 22 61 64 42 6c 6f 63 6b 22 3e 20 20 20 3c 64 69 76 20 69 64 3d 22 73 73 72 61 64 2d 6d 61 73 74 65 72 Data Ascii: sionLink:hover{text-decoration:underline;}</style> <meta content="NOINDEX, NOFOLLOW" name="ROBOTS"> <meta content="telephone=no" name="format-detection"> <meta content="origin" name="referrer"> </head> <body> <div id="adBlock"> <div id="ssrad-master
2024-09-29 22:22:12 UTC	1390	IN	Data Raw: 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 33 39 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f Data Ascii: -pack:start; -webkit-justify-content:flex-start; justify-content:flex-start;-ms-flex-align:stretch; -webkit-box-align:stretch; -webkit-align-items:stretch; align-items:stretch;"><div class="i_ div si39" style="-ms-flex-direction:row; -webkit-box-orient:ho
2024-09-29 22:22:12 UTC	1390	IN	Data Raw: 6e 65 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 69 6e 68 65 72 69 74 3b 27 20 63 6c 61 73 73 3d 22 73 69 31 33 30 20 73 70 61 6e 22 3e 45 61 67 6c 65 73 3c 2f 73 70 61 6e 3e 20 54 69 63 6b 65 74 73 20 7c 20 54 68 65 20 3c 73 70 61 6e 20 73 74 79 6c 65 3d 27 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 69 6e 68 65 72 69 74 3b 27 20 63 6c 61 73 73 3d 22 73 69 31 33 30 20 73 70 61 6e 22 3e 53 70 68 65 72 65 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 34 31 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 Data Ascii: ne;text-transform:inherit;' class="si130 span">Eagles</span> Tickets \| The <span style='display:inline;text-transform:inherit;' class="si130 span">Sphere</span></span></a></div><div class="i_ div si41" style="-ms-flex-direction:row; -webkit-box-orient:hor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49794	142.250.184.238	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:22:13 UTC	770	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://finance.cocoricopatisserie.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
2024-09-29 22:22:13 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Sun, 29 Sep 2024 22:22:13 GMT Expires: Sun, 29 Sep 2024 22:22:13 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49791	142.250.185.110	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:22:14 UTC	897	OUT	GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=155zl0tsnfmb&aqid=FNP5Zp6fJpKrjuwPq6O4sAQ&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1399&adbw=530&adbah=506%2C452%2C439&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=678245571&csala=30%7C0%7C1255%7C4%7C313&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://finance.cocoricopatisserie.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 22:22:15 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-MmxaReZ8Y1J8aaT2duXrYw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 29 Sep 2024 22:22:15 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49796	142.250.185.110	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:22:15 UTC	897	OUT	GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=sg8dbgaiti0z&aqid=FNP5Zp6fJpKrjuwPq6O4sAQ&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1399&adbw=530&adbah=506%2C452%2C439&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=678245571&csala=30%7C0%7C1255%7C4%7C313&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://finance.cocoricopatisserie.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 22:22:15 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-15tPeWJFx8S-qsbktsidwg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 29 Sep 2024 22:22:15 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49799	142.250.184.238	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:22:17 UTC	2680	OUT	GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&sct=ID%3D4f20d6f152843af6%3AT%3D1727648483%3ART%3D1727648483%3AS%3DALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw&sc_status=6&hl=en&rpbu=http%3A%2F%2Ffinance.cocoricopatisserie.co.uk%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NTM1LjQ3OXw3MzNmZTA4YjM3ODJhNjZmOWM5Nzc5OTM1ZDJjNGQ0MmQzNTNkOTIyfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHx8fDB8MHx8MHx8fDB8MHxXMTA9fHwxfFcxMD18MTc2ZTI2OTgxMjVlNTFhMzYxYzk5NWM1NDgwZDM1MTRmZDA2ZTU5NHwwfGRwLXRlYW1pbnRlcm5ldDA5XzNwaHwwfDB8fHw%253D&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Sesame%20Semaglutide&afdt=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmcBlLqpj90SqxLU1y28Lnofj6W4YFOJxZRWVqEOBrqx9r8dK_IzyucJYZYAj0HbBY0RxMhD-iUiKatTaQpsIR459EQ14jLNoKoGR9MimrFhhNC0HT5tj7o4Xchb8bXTCSs8XHI4WI_a&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301511% [TRUNCATED] Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://finance.cocoricopatisserie.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 22:22:17 UTC	807	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Disposition: inline Date: Sun, 29 Sep 2024 22:22:17 GMT Expires: Sun, 29 Sep 2024 22:22:17 GMT Cache-Control: private, max-age=3600 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-DZSh9cfw3BFeu0EeSPyvkw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Server: gws X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-29 22:22:17 UTC	583	IN	Data Raw: 37 61 36 66 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 73 74 79 6c 65 20 69 64 3d 22 73 73 72 2d 62 6f 69 6c 65 72 70 6c 61 74 65 22 3e 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 72 67 69 6e 3a 30 3b 7d 2e 64 69 76 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 20 2e 64 69 76 3a 6c 61 73 Data Ascii: 7a6f<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:las
2024-09-29 22:22:17 UTC	1390	IN	Data Raw: 69 5f 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 76 5f 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 Data Ascii: i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit
2024-09-29 22:22:17 UTC	1390	IN	Data Raw: 5f 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 6f 5f 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 78 5f 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 79 5f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 7a 2d 69 6e 64 65 78 3a 31 3b 7d 2e 6b 5f 3e 64 69 76 3a 6e 6f 74 28 2e 79 5f 29 20 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 Data Ascii: _{overflow:hidden;}.o_{white-space:nowrap;}.x_{cursor:pointer;}.y_{display:none; position:absolute; z-index:1;}.k_>div:not(.y_) {display:-webkit-inline-box; display:-moz-inline-box; display:-ms-inline-flexbox; display:-webkit-inline-flex; display:inline-f
2024-09-29 22:22:17 UTC	1390	IN	Data Raw: 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 42 6f 74 74 6f 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 43 65 6e 74 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 Data Ascii: start; align-items:flex-start;}.flexAlignBottom{-ms-flex-align:end; -webkit-box-align:end; -webkit-align-items:flex-end; align-items:flex-end;}.flexAlignCenter{-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center
2024-09-29 22:22:17 UTC	1390	IN	Data Raw: 3a 35 30 70 78 3b 63 6f 6c 6f 72 3a 23 63 63 63 63 63 63 3b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 2e 73 69 32 37 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 36 66 30 30 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 33 36 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 7d 2e 73 69 33 34 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 70 78 3b 7d 2e 73 69 34 32 7b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d Data Ascii: :50px;color:#cccccc;width:100%; -ms-flex-negative:1;-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.si27:hover{color:#ff6f00;text-decoration:underline;}.si36{height:100%;}.si34{margin-bottom:0px;}.si42{width:100%; -ms-flex-negative:1;-webkit-
2024-09-29 22:22:17 UTC	1390	IN	Data Raw: 74 74 6f 6d 3a 33 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 70 78 3b 7d 2e 73 69 31 38 7b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 31 38 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 31 39 7b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 32 30 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 32 31 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 38 36 62 66 32 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 Data Ascii: ttom:3px;padding-top:3px;}.si18{color:#dddddd;}.si18:hover{text-decoration:underline;}.si19{color:#dddddd;}.si20{font-family:Roboto,arial,sans-serif;font-size:12px;line-height:20px;color:#dddddd;}.si21{font-weight:700;background-color:#186bf2;border-radiu
2024-09-29 22:22:17 UTC	1390	IN	Data Raw: 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 70 78 3b 63 6f 6c 6f 72 3a 23 38 36 38 35 38 61 3b 7d 2e 73 69 32 36 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 7d 2e 73 69 37 32 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 52 6f 62 6f 74 6f 20 4c 69 67 68 74 22 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 Data Ascii: px;padding-bottom:1px;padding-left:1px;padding-right:1px;padding-top:1px;color:#86858a;}.si26{font-family:Roboto,arial,sans-serif;font-size:14px;line-height:24px;color:#ffffff;}.si72{font-family:"Roboto Light",arial,sans-serif;font-size:12px;line-height:2
2024-09-29 22:22:17 UTC	1390	IN	Data Raw: 73 69 6f 6e 4c 69 6e 6b 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4e 4f 49 4e 44 45 58 2c 20 4e 4f 46 4f 4c 4c 4f 57 22 20 6e 61 6d 65 3d 22 52 4f 42 4f 54 53 22 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 20 20 20 20 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 20 3c 64 69 76 20 69 64 3d 22 61 64 42 6c 6f 63 6b 22 3e 20 20 20 3c 64 69 76 20 69 64 3d 22 73 73 72 61 64 2d 6d 61 73 74 65 72 Data Ascii: sionLink:hover{text-decoration:underline;}</style> <meta content="NOINDEX, NOFOLLOW" name="ROBOTS"> <meta content="telephone=no" name="format-detection"> <meta content="origin" name="referrer"> </head> <body> <div id="adBlock"> <div id="ssrad-master
2024-09-29 22:22:17 UTC	1390	IN	Data Raw: 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 33 39 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f Data Ascii: -pack:start; -webkit-justify-content:flex-start; justify-content:flex-start;-ms-flex-align:stretch; -webkit-box-align:stretch; -webkit-align-items:stretch; align-items:stretch;"><div class="i_ div si39" style="-ms-flex-direction:row; -webkit-box-orient:ho
2024-09-29 22:22:17 UTC	1390	IN	Data Raw: 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 33 34 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 Data Ascii: ign:stretch; -webkit-box-align:stretch; -webkit-align-items:stretch; align-items:stretch;"><div class="i_ div si34" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;-ms-flex-pack:start; -webkit-b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49798	142.250.184.238	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:22:17 UTC	770	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://finance.cocoricopatisserie.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
2024-09-29 22:22:18 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Sun, 29 Sep 2024 22:22:17 GMT Expires: Sun, 29 Sep 2024 22:22:17 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49800	142.250.184.238	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:22:18 UTC	770	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://finance.cocoricopatisserie.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
2024-09-29 22:22:19 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Sun, 29 Sep 2024 22:22:18 GMT Expires: Sun, 29 Sep 2024 22:22:18 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49797	142.250.185.110	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:22:20 UTC	898	OUT	GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=nvn0fzjdojbh&aqid=GdP5ZurdIvjHjuwP96-J8AU&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1453&adbw=530&adbah=475%2C506%2C470&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=678245571&csala=53%7C0%7C1298%7C12%7C756&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://finance.cocoricopatisserie.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 22:22:20 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-uYyerq4X_Wwh3rwupJ4WPw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 29 Sep 2024 22:22:20 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49803	142.250.185.110	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:22:22 UTC	898	OUT	GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=awyxw6v0hoho&aqid=GdP5ZurdIvjHjuwP96-J8AU&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1453&adbw=530&adbah=475%2C506%2C470&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=678245571&csala=53%7C0%7C1298%7C12%7C756&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://finance.cocoricopatisserie.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 22:22:22 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-4EWP4wHk0VNsH-O91h-qHQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 29 Sep 2024 22:22:22 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49808	142.250.184.206	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:22:24 UTC	770	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://finance.cocoricopatisserie.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
2024-09-29 22:22:24 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Sun, 29 Sep 2024 22:22:24 GMT Expires: Sun, 29 Sep 2024 22:22:24 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49809	142.250.184.206	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:22:24 UTC	2676	OUT	GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&sct=ID%3D4f20d6f152843af6%3AT%3D1727648483%3ART%3D1727648483%3AS%3DALNI_Mb_YE8GoVL3zLUJZNbHftr1wdTEqw&sc_status=6&hl=en&rpbu=http%3A%2F%2Ffinance.cocoricopatisserie.co.uk%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY2ZjlkMmUwZDkzY2Z8fHwxNzI3NjQ4NTQzLjQ1OXw2NDIyZTI5ZDFiNWFjMmEzM2EyZTI1ODFhNTUxNmRhOGE3MWFhZTFjfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHx8fDB8MHx8MHx8fDB8MHxXMTA9fHwxfFcxMD18MTc2ZTI2OTgxMjVlNTFhMzYxYzk5NWM1NDgwZDM1MTRmZDA2ZTU5NHwwfGRwLXRlYW1pbnRlcm5ldDA5XzNwaHwwfDB8fHw%253D&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2558334540730768&q=Semaglutide%20Henry&afdt=ChMIi-aqkZjpiAMVv_67CB2-6zNOEmYBlLqpj4R7Nz9MtgVxMM3LZXthcmrpMZO2hM9CJdYTOBTZlOqOWIKeyAnZ3l9wmC7ZfZQ9oOSTTbuMheWysdFe-MYszSn-Z5cfGUaCQmtDzAocoW2PrGSSnlOXrv0KCozzVftbfzk&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301511%2C [TRUNCATED] Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://finance.cocoricopatisserie.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 22:22:25 UTC	807	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Disposition: inline Date: Sun, 29 Sep 2024 22:22:24 GMT Expires: Sun, 29 Sep 2024 22:22:24 GMT Cache-Control: private, max-age=3600 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-rRzenOkwJhRsALITierjVQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Server: gws X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-29 22:22:25 UTC	583	IN	Data Raw: 37 66 32 31 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 73 74 79 6c 65 20 69 64 3d 22 73 73 72 2d 62 6f 69 6c 65 72 70 6c 61 74 65 22 3e 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 72 67 69 6e 3a 30 3b 7d 2e 64 69 76 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 20 2e 64 69 76 3a 6c 61 73 Data Ascii: 7f21<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:las
2024-09-29 22:22:25 UTC	1390	IN	Data Raw: 69 5f 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 76 5f 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 Data Ascii: i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit
2024-09-29 22:22:25 UTC	1390	IN	Data Raw: 5f 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 6f 5f 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 78 5f 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 79 5f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 7a 2d 69 6e 64 65 78 3a 31 3b 7d 2e 6b 5f 3e 64 69 76 3a 6e 6f 74 28 2e 79 5f 29 20 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 Data Ascii: _{overflow:hidden;}.o_{white-space:nowrap;}.x_{cursor:pointer;}.y_{display:none; position:absolute; z-index:1;}.k_>div:not(.y_) {display:-webkit-inline-box; display:-moz-inline-box; display:-ms-inline-flexbox; display:-webkit-inline-flex; display:inline-f
2024-09-29 22:22:25 UTC	1390	IN	Data Raw: 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 42 6f 74 74 6f 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 43 65 6e 74 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 Data Ascii: start; align-items:flex-start;}.flexAlignBottom{-ms-flex-align:end; -webkit-box-align:end; -webkit-align-items:flex-end; align-items:flex-end;}.flexAlignCenter{-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center
2024-09-29 22:22:25 UTC	1390	IN	Data Raw: 3a 35 30 70 78 3b 63 6f 6c 6f 72 3a 23 63 63 63 63 63 63 3b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 2e 73 69 32 37 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 36 66 30 30 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 33 36 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 7d 2e 73 69 33 34 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 70 78 3b 7d 2e 73 69 34 32 7b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d Data Ascii: :50px;color:#cccccc;width:100%; -ms-flex-negative:1;-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.si27:hover{color:#ff6f00;text-decoration:underline;}.si36{height:100%;}.si34{margin-bottom:0px;}.si42{width:100%; -ms-flex-negative:1;-webkit-
2024-09-29 22:22:25 UTC	1390	IN	Data Raw: 74 74 6f 6d 3a 33 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 70 78 3b 7d 2e 73 69 31 38 7b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 31 38 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 31 39 7b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 32 30 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 63 6f 6c 6f 72 3a 23 64 64 64 64 64 64 3b 7d 2e 73 69 32 31 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 38 36 62 66 32 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 Data Ascii: ttom:3px;padding-top:3px;}.si18{color:#dddddd;}.si18:hover{text-decoration:underline;}.si19{color:#dddddd;}.si20{font-family:Roboto,arial,sans-serif;font-size:12px;line-height:20px;color:#dddddd;}.si21{font-weight:700;background-color:#186bf2;border-radiu
2024-09-29 22:22:25 UTC	1390	IN	Data Raw: 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 70 78 3b 63 6f 6c 6f 72 3a 23 38 36 38 35 38 61 3b 7d 2e 73 69 32 36 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 7d 2e 73 69 37 32 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 52 6f 62 6f 74 6f 20 4c 69 67 68 74 22 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 Data Ascii: px;padding-bottom:1px;padding-left:1px;padding-right:1px;padding-top:1px;color:#86858a;}.si26{font-family:Roboto,arial,sans-serif;font-size:14px;line-height:24px;color:#ffffff;}.si72{font-family:"Roboto Light",arial,sans-serif;font-size:12px;line-height:2
2024-09-29 22:22:25 UTC	1390	IN	Data Raw: 73 69 6f 6e 4c 69 6e 6b 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4e 4f 49 4e 44 45 58 2c 20 4e 4f 46 4f 4c 4c 4f 57 22 20 6e 61 6d 65 3d 22 52 4f 42 4f 54 53 22 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 20 20 20 20 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 20 3c 64 69 76 20 69 64 3d 22 61 64 42 6c 6f 63 6b 22 3e 20 20 20 3c 64 69 76 20 69 64 3d 22 73 73 72 61 64 2d 6d 61 73 74 65 72 Data Ascii: sionLink:hover{text-decoration:underline;}</style> <meta content="NOINDEX, NOFOLLOW" name="ROBOTS"> <meta content="telephone=no" name="format-detection"> <meta content="origin" name="referrer"> </head> <body> <div id="adBlock"> <div id="ssrad-master
2024-09-29 22:22:25 UTC	1390	IN	Data Raw: 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 33 39 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f Data Ascii: -pack:start; -webkit-justify-content:flex-start; justify-content:flex-start;-ms-flex-align:stretch; -webkit-box-align:stretch; -webkit-align-items:stretch; align-items:stretch;"><div class="i_ div si39" style="-ms-flex-direction:row; -webkit-box-orient:ho
2024-09-29 22:22:25 UTC	1390	IN	Data Raw: 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 33 34 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 Data Ascii: flex-align:stretch; -webkit-box-align:stretch; -webkit-align-items:stretch; align-items:stretch;"><div class="i_ div si34" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;-ms-flex-pack:start; -w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49810	142.250.184.206	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:22:25 UTC	770	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://finance.cocoricopatisserie.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
2024-09-29 22:22:25 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Sun, 29 Sep 2024 22:22:25 GMT Expires: Sun, 29 Sep 2024 22:22:25 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49807	142.250.185.110	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:22:27 UTC	897	OUT	GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=b870vfrkd2ub&aqid=INP5ZoLSObSViM0P97GDyAw&psid=7840396037&pbt=bs&adbx=366.5&adby=146&adbh=1453&adbw=530&adbah=506%2C475%2C470&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=678245571&csala=20%7C0%7C1257%7C3%7C225&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://finance.cocoricopatisserie.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 22:22:27 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-K6pkbNumiUr4ev7tCDEgTg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 29 Sep 2024 22:22:27 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49811	142.250.185.110	443	2944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 22:22:28 UTC	897	OUT	GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=4av94mckmtsy&aqid=INP5ZoLSObSViM0P97GDyAw&psid=7840396037&pbt=bv&adbx=366.5&adby=146&adbh=1453&adbw=530&adbah=506%2C475%2C470&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=678245571&csala=20%7C0%7C1257%7C3%7C225&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://finance.cocoricopatisserie.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 22:22:28 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-lB2wJPuUBvu-X8RZFxswrg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 29 Sep 2024 22:22:28 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 3748, Parent PID: 5316

General

Target ID:	0
Start time:	18:21:10
Start date:	29/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 2944, Parent PID: 3748

General

Target ID:	2
Start time:	18:21:16
Start date:	29/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2516 --field-trial-handle=2396,i,7465292924056707105,2457684727211862111,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6780, Parent PID: 5316

General

Target ID:	3
Start time:	18:21:19
Start date:	29/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://finance.cocoricopatisserie.co.uk/"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://finance.cocoricopatisserie.co.uk/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Windows Analysis Report
http://finance.cocoricopatisserie.co.uk/